last executing test programs: 4m26.203348963s ago: executing program 3 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a8000088a8ffff8100009988a8", 0x20, 0x200000c4, &(0x7f0000000100)={0x11, 0x3, r2, 0x1, 0x81, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x10, 0x2, 0x81, 0x18, @mcast1, @remote, 0x7800, 0x8, 0x3, 0x7}}) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0xc480) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x900, 0xfffffffffffffffe, 0xe1) r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x2, 0x0, 0x82, 0x0, 0x0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x737, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000f0000002400078008000100010000000c00030000100000000000000c0004000020800000000000"], 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x68, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '0123456789012345'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x68}}, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r5, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@setlink={0x68, 0x13, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x48241, 0x18024}, [@IFLA_NET_NS_FD={0x8, 0x1c, r4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'ip6gre0\x00'}]}, @IFLA_LINKMODE={0x5, 0x11, 0xf8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4b}, @IFLA_PROP_LIST={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4a044}, 0xc180) 4m25.303068976s ago: executing program 3 (id=893): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f00000001c0)='kvm:kvm_hv_synic_set_irq', 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x18, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r6, 0xffffffffffffffff, 0x0) sendto$inet(r5, &(0x7f0000000900)="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", 0x18a, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080), 0x0, 0x89100142, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="9dd8d3fc33b60000"], &(0x7f0000000640)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x4a, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f00000000c0)=0x4, 0x4) 4m24.337282594s ago: executing program 3 (id=896): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (fail_nth: 5) 4m24.033039955s ago: executing program 3 (id=898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="090020001600"/16, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESOCT], 0x50) socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x88d4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xf0, 0x40, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9}, {0x6, 0x120002, 0x1}, {0xf4f1, 0x300, 0xfffffffe}, {0x3, 0x4000002, 0x7fe}, 0x1, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) io_uring_setup(0x1159, &(0x7f0000000440)={0x0, 0x400003ca, 0x200, 0x3, 0x226}) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x8040, &(0x7f0000000140)=ANY=[@ANYBLOB='lock,obj_ideo#\x00,subj_type=sysfs\x00,\x00']) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000000c0)={0x0, 0x42474752, 0xf00, 0x0, 0x3, @discrete={0x1, 0x8}}) 4m22.882645163s ago: executing program 3 (id=903): socket$inet_smc(0x2b, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x400) sendfile(r1, r1, 0x0, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x800, 0x18, 0x1}, 0x18) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r5, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000001401"], 0x10}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$inet6(0x10, 0x2, 0x4) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) r7 = syz_ublk_setup_io_uring(0x31cc, &(0x7f0000000280)={0x0, 0x6f51, 0x40000, 0x800, 0x1004, 0x0, r4}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) write(r11, &(0x7f0000000040)='0', 0x1) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r12, 0x10, &(0x7f0000000080)={0x3}) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x2, 0x0, r3, 0x1212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, r12, 0x0, 0x11}}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1080, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) 4m22.735568145s ago: executing program 3 (id=904): r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x3, 0x10) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @empty}}, 0x24) (async, rerun: 32) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="00112233", 0x4}], 0x1, &(0x7f0000000100)=[{0x10, 0x110, 0x1, "00112233"}], 0x10}, 0x0) (async, rerun: 32) fcntl$dupfd(r2, 0x406, r0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) (async) symlink(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000000ac0)={{0x6, 0x0, 0x6, 0x3, 0x1}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) (async) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000180)=0x33, 0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) (async, rerun: 32) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f00000000c0)='./file1\x00') (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async, rerun: 32) mkdir(&(0x7f00000000c0)='./file0\x00', 0x46) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) mkdirat(r1, &(0x7f0000000240)='./file1\x00', 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000000)=""/184, &(0x7f0000000200), &(0x7f0000000340)="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", 0x3, r3, 0x4}, 0x38) 4m7.095553175s ago: executing program 32 (id=904): r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x3, 0x10) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @empty}}, 0x24) (async, rerun: 32) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="00112233", 0x4}], 0x1, &(0x7f0000000100)=[{0x10, 0x110, 0x1, "00112233"}], 0x10}, 0x0) (async, rerun: 32) fcntl$dupfd(r2, 0x406, r0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) (async) symlink(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000000ac0)={{0x6, 0x0, 0x6, 0x3, 0x1}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) (async) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000180)=0x33, 0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) (async, rerun: 32) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f00000000c0)='./file1\x00') (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async, rerun: 32) mkdir(&(0x7f00000000c0)='./file0\x00', 0x46) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) mkdirat(r1, &(0x7f0000000240)='./file1\x00', 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000000)=""/184, &(0x7f0000000200), &(0x7f0000000340)="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", 0x3, r3, 0x4}, 0x38) 9.244828757s ago: executing program 0 (id=2359): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8f00005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x2100, &(0x7f0000000140)="e460334470d8d400eb00c15286dd", 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.364602879s ago: executing program 0 (id=2361): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000180083bb4d1d1827cee835010010004000fedbdf250a370000", @ANYRES32=0x0, @ANYBLOB="000000001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x28, r2, 0x852dd6c070cd7e4d, 0x0, 0x4, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7c}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x4, 0x700000000000000}, 0x0) signalfd4(r1, &(0x7f0000000040)={[0x80000001, 0xe1d]}, 0x8, 0x80800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "0000ffff"}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000001080012401100ffff0d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 7.381857524s ago: executing program 0 (id=2364): r0 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x806, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xfffffff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000080)={0x7, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e23, @local}}}, 0x104) r2 = openat$vcs(0xffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x6) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000200)={0x1, 0x5409}) ioctl$OCFS2_IOC_UNRESVSP64(r2, 0x402c582b, &(0x7f0000000240)={0x2, 0x2, 0x2, 0x4, 0x0, 0x9a}) r3 = landlock_create_ruleset(&(0x7f0000000280)={0x100, 0x1, 0x2, 0x2000, 0x8}, 0x30, 0x2) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000002c0)={0x36, 0x0, 0x6, 0x6, 0x7, 0x0, [{0x3, 0x10001, 0x1379, '\x00', 0x180}, {0x8, 0x7, 0x2, '\x00', 0x1009}, {0xb555, 0x0, 0x8, '\x00', 0x2000}, {0x3, 0x2800000000, 0x5, '\x00', 0x200}, {0x4, 0x7, 0x81, '\x00', 0x1000}, {0x0, 0x80000001, 0xc, '\x00', 0x204}, {0x80000000000000, 0x100, 0x5, '\x00', 0x3504}]}) (async) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000002c0)={0x36, 0x0, 0x6, 0x6, 0x7, 0x0, [{0x3, 0x10001, 0x1379, '\x00', 0x180}, {0x8, 0x7, 0x2, '\x00', 0x1009}, {0xb555, 0x0, 0x8, '\x00', 0x2000}, {0x3, 0x2800000000, 0x5, '\x00', 0x200}, {0x4, 0x7, 0x81, '\x00', 0x1000}, {0x0, 0x80000001, 0xc, '\x00', 0x204}, {0x80000000000000, 0x100, 0x5, '\x00', 0x3504}]}) r4 = syz_open_dev$admmidi(&(0x7f0000000480), 0x9327, 0x80000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f00000004c0)={0x1, 0xa, 0x10}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f00000004c0)={0x1, 0xa, 0x10}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000500)={@null, 0x0, 'team_slave_0\x00'}) r5 = openat$nci(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000680)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000680)) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f00000006c0)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={&(0x7f0000000700)="6d892b01b02c51badc957264702daa415832035b8207a2ddd08002a5d3c1b85545ce62c0", &(0x7f0000000740)=""/10, &(0x7f0000000780)="71dc96b9b994069fadd3a7a7af4cfddaec253ea5fb37a976185fc9ee14e42675aea062", &(0x7f00000007c0)="a42f1d6d364609a034946ca8ccb7f13f7448cbd774996856b7dce1368f1f9c7957cc8760b23758b1b67e4196945f5f7d8451f738fa4389821c081f5ef93d58f49e5dd1d2cc159d9b5511fafba12b17d858b5d4f602bccf4eaa8f110a8613c647080311eaa634f5b93209f7f22ea110a57b9cdf873ed8370ec9254c483e23f45d014b445438327ed5989bcb157452e5e71a3e7306bddd866e59a8cead6f5ed48574a4aeb7b689", 0x401, r2}, 0x38) r7 = syz_open_dev$sndpcmp(&(0x7f00000008c0), 0xece, 0x80) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) socketpair(0xb, 0x4, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000940)) recvmsg$can_raw(r8, &(0x7f0000002100)={&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000a00)=""/25, 0x19}, {&(0x7f0000000a40)=""/122, 0x7a}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/165, 0xa5}, {&(0x7f0000001b80)=""/97, 0x61}, {&(0x7f0000001c00)=""/233, 0xe9}, {&(0x7f0000001d00)=""/177, 0xb1}, {&(0x7f0000001dc0)=""/143, 0x8f}, {&(0x7f0000001e80)=""/144, 0x90}, {&(0x7f0000001f40)=""/223, 0xdf}], 0xa, &(0x7f00000020c0)=""/19, 0x13}, 0x10043) (async) recvmsg$can_raw(r8, &(0x7f0000002100)={&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000a00)=""/25, 0x19}, {&(0x7f0000000a40)=""/122, 0x7a}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/165, 0xa5}, {&(0x7f0000001b80)=""/97, 0x61}, {&(0x7f0000001c00)=""/233, 0xe9}, {&(0x7f0000001d00)=""/177, 0xb1}, {&(0x7f0000001dc0)=""/143, 0x8f}, {&(0x7f0000001e80)=""/144, 0x90}, {&(0x7f0000001f40)=""/223, 0xdf}], 0xa, &(0x7f00000020c0)=""/19, 0x13}, 0x10043) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002140)={'tunl0\x00', 0x8000}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002140)={'tunl0\x00', 0x8000}) writev(r5, &(0x7f0000002280)=[{&(0x7f0000002180)="373dc98a3f049c69b20f6b6840e6080e5af7565e8e7daea504481ab46b64ac12605491240d9be0de8ced934f7262b96e278ab4511d6c2da2b4fd01bf28a22bce2a28c3fbe76ae2ec4511a6c71e7646aaf28773f782a8013f6edecd19278c73fed105e46bec8e087132dc0d99eb1c86de60ff9b15af59807bba456bb7adeb56241e627babf91a2a7b885499eb33bb819bb5dc951c950617e81bc8358e11f8a0e89019286af2fe1e03b2d373769246e661e4791b36caa793fb761bb43fd52db3f5a5379755284c", 0xc6}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000002300), r6) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002300), r6) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x2c, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000051) ioctl$RTC_PLL_GET(r2, 0x801c7011, &(0x7f0000002400)) (async) ioctl$RTC_PLL_GET(r2, 0x801c7011, &(0x7f0000002400)) openat$ubi_ctrl(0xffffff9c, &(0x7f0000002440), 0x0, 0x0) (async) r10 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000002440), 0x0, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r2, 0x1f, &(0x7f0000002540)={0x28, 0x38, 0x0, r10, &(0x7f0000002480)="6a0d3d18a39bd928e253fa1c757190ea75a5ede57e148c3ed1dff3b37465bd1bc215991fe33bdbe79ee227f35c89ad675ec8126391798d8b63f5a77234ba93d1ebb0856a30e8474357f6114a0c5f73f570566c", 0xc757a13fa76bb98b, 0x8, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0xf}}, 0x1) 7.254477199s ago: executing program 0 (id=2367): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a01010100000000000000000000f5ff7e000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) r1 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x20, 0x1, 0x26f}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) 5.329519248s ago: executing program 0 (id=2386): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) 2.814824773s ago: executing program 2 (id=2395): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r2 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x400e40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './config/usb_gadget/g_uac2/functions/uac2.usb0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)="65f3", 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff6}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffefc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40850) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r5, 0x4, 0xc00) read$char_usb(r5, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200) rmdir(&(0x7f0000000180)='./cgroup/../file0\x00') syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r7}) 2.374397277s ago: executing program 1 (id=2396): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) 2.30037855s ago: executing program 1 (id=2397): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() setrlimit(0x0, &(0x7f0000000100)={0xb, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={0x24, @none={0x0, 0x3}}, 0x14) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000030c0)=[{{&(0x7f0000000280), 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)=""/18, 0x12}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000540)=""/33, 0x21}], 0x4, &(0x7f00000005c0)=""/3, 0x3}, 0x3}, {{&(0x7f0000000680)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000000b80)}, 0x6d5}, {{&(0x7f0000000bc0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000c40)=""/4083, 0xff3}, {&(0x7f0000001c40)=""/132, 0x84}, {&(0x7f0000000780)=""/91, 0x5b}], 0x3, &(0x7f0000001dc0)=""/253, 0xfd}, 0x8}, {{&(0x7f0000001ec0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/96, 0x60}], 0x2, &(0x7f0000003000)=""/132, 0x84}, 0x4}], 0x4, 0x2002, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x3f, 0x0) 2.023797214s ago: executing program 4 (id=2399): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af15100", 0xe}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) accept4(r1, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r7, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x6) 1.426131515s ago: executing program 4 (id=2400): r0 = socket(0x10, 0x803, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x41, 0x1}, 0x2}}, 0x10, 0x0}, 0x44) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc)=0x7, 0x4) sendto(r0, &(0x7f0000000200)="120000001a00e7efa8ff1b3fc329c94a41bc", 0x12, 0x24008000, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) 1.42567463s ago: executing program 4 (id=2401): socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x1f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000005000008001b"], 0x30}}, 0x0) 1.074386716s ago: executing program 4 (id=2402): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x74) sendmsg$NFT_BATCH(r1, &(0x7f00000032c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003280)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x304, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x22c0, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a8, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x4c, 0x6, 0x1, 0x0, "bdbaf24e4faee24bfa95864a0c23ce2f5262052966269769c7fb275896130723fa44fd425957844865a8d64f62a3ac6acd1746f9bc98890c30ef5ad0c5c0cf484bd834fea68294ca"}, @NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "422930094bad4b2b7ccdcd5e0284ae98e215c3aca46b3fdd1ba62689a78fdc9b84117fc3e5a3ec7094e327e79bcd4e5ad0d8ab7a75231a"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x70}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xee}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xcb}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x200000}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x14a28040}]}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x69c, 0x3, 0x0, 0x1, [{0x26c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x84, 0x6, 0x1, 0x0, "16476d6704cc6c85be5741a346c0b6688e9bae8b47bdc3ad36e5332e55da077b986644adc05de03354474f4ea7a1356cf3f443a5b115220d80cc62a0e70baa91aebdf018b2fd1199696be60e06718da5c1a4dafb4fcc5388e29dfdf2a4b55c460de5fe2f9e982ab186f292b7b7761ba7af52a8eca5310a91abfe10d953f004ee"}, @NFTA_SET_ELEM_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4a, 0x1, "6d719c9b81344c83f557020f24c94aabb3434ac65d863c0d17dbd9edd0940643e0c2e4a884bb79b208d3bdebf2429d977f2fd05f5131a97e6d01fcfb878789d3d7ddee69de6a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "c77f98dc37fa06dba97fa70b83cd77ca0215dac62b5814"}, @NFTA_DATA_VALUE={0x1a, 0x1, "431986ace6d7435f53e6e788c230e2d36027641b0fdf"}, @NFTA_DATA_VALUE={0xc1, 0x1, "dbcf27337893851fb5c90d395d18bc9d177b036da2bb4778e8b05a038659a0c8ea577b8c3c5e29c74bd9039323ebb6e012d68da49dada3f7a0384617dece732c13652504e1223b766d99957110ea4173b210949b7fbf007a0a2e7134e12e18d22e362460ecc8795a42a22472422cb7fb47322525a4e5427741764049290d38717f555a31426c8c705fa2684970bdce011b49f9be2cbb5506a07e4d1a715c42d013ca6cf8bed611d4dbd3e31c0e86fb3e3ffca955bdd8261d516eaa5bf4"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x2c, 0x6, 0x1, 0x0, "8dcd3dc0102a0adab7baccba17de1cb3b2adf43f61d928805b927b81d4639303b9d807c1689394b6"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, {0x3ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_TTL={0x5, 0x2, 0xfb}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xb9}, @NFTA_OSF_DREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd5ab}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "d4157e19d13664e4f3f7db86b3ab95cbea777cdf8bb64f7b816393c861cf3d882deb3a4b786563bb21d4c6ab402d14756847b9ac02d4ad23226c50d962a672ab12f45dafed2aa95962f9f76385bdba33e222d2690d5cb8435b28"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @inner={{0xa}, @void}}, @NFTA_SET_ELEM_KEY_END={0x1d8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "60e9bf07d0da74c22c4744e748524615646cd8aa6d8e224310f8d37870d63b47b88c3142bb12bdba8a52b99dead1fb34ff3612fb1af38cdf91c4d14a4f243abff56852ec18c182fce7bf5b46d7710021d970b5571bea1e4e1689e48e167060efd36786a87f6994fe654ab45f179097efda4cb09bbf29d42835dd4a74f3efcafa6755e60f697e4e1ac8b3d132ed2a77b2db74a643d2840b5a34d7f3a3a50d99c29aafd8c3b29c87ad067e89bd0a6e4acd4cf4cd6ed9580047a67ad2cd413a47ecfb30bd0dcfb4940547b9edc34c36a72f4e6b043ec0972b34d40d9023bd40d0e4c90fca17eb"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a3c, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1f18eb28}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8f07}, @NFTA_SET_ELEM_USERDATA={0xa9, 0x6, 0x1, 0x0, "39f0baa671ae15775dafc9b67cd8b0b3b614f4e640d3f406425b429d76074531ded2882387d8eac5b84df3e8769f241113320ab229a3a74e1f5222b19021832684b9449f7b0214f909031ddef9b947f16fd00d1566c1887ab53bd8e122f0c30b26a6938d4e6d5978e0825ae7cc5a48f98de521dec6604113fd87ac39e110d7f3adc8afccbf410eceb1188f11b81891b65279ec0c93df06056d5c804ae66fc34028e7f4ef76"}]}, {0x7a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x17c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x94, 0x1, "472bf12db72ce038f2b478946cb9b76511ae5bbbc2b7ee056f5c0618402c6e651be18264db4fafa8d3305e0664be6eaa959ab157f584988a698c5ca8d6e1c8d120bec3b01c1f6487e0fcab29a184ea724cfa10239ae4e268c1a4deba72fdc5b9416314e2332a4968ff6023abd5a69bb52971a25dde316dee7109fb7c0374ddbe215b420e8cfc51d861775af9372ed571"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xddd8a5f240c3d5e3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "ca2db36ec45c31328a2d290f6cfe8b508b7be79e5a8638050ab45ba10ad14dafc1dfbbc9a783b06680d9d574cc43c0c452453cc6f931ec568d5f134a4355010ab76e1396be785fb95b6737cc05a2ffc4aecb6470aaf9ea3453a0584e41e031fab5aa9ba2c23e1cdadf137371d6f199be16ca3406198803fd158904fe89383507c3090a6f037de3d803043112da72bb8adf1d703324a36ebbd0a2dd"}]}, @NFTA_SET_ELEM_KEY={0x1b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x28, 0x1, "5e579bfbcab58bd39626dc36c4261929a561989e44cd761ca7a417c7a2067f2c968a1c69"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x62, 0x1, "6f379b9b7efe7f9f31d75c262ce0bc7fb45d37370b377d0e2a03f432e83fbaabae3e57b2dcecdc087f692b5ea091c4668dad83718d10d9897a381d60a6053b7b69563b3d29e487d33afb4af639510fa71030736f78e747feb749e01a46b6"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x48, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x88, 0x1, "adee7ec33e9d7314b0b5746195afebd52d91eaa76a81e1c7372371cef583973669923bc1378b3f7e5979a3c85cd5d7105c20c27aa080c3bf1c37482534cc2cb3698eac8f36989efa91338b4256b1e785e8c300487f7187166b193be373f6ca1f01bc7af3f4b87215986073232142310bd328290e3f6919feb690da84ed2331892f750fb9"}]}, @NFTA_SET_ELEM_KEY_END={0x228, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x59, 0x1, "cdcbc4ac30ef06f401a0a5517c7e9e2553daa1f60f8380d3d5d2d8ac9b603023418ff44d0be6160c233110f03b850907631f1d69b261d5b63d62c8fc7507c0c4d9c169ea6c54d7a952b2f1c6c03f1a3493831ad487"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "33ae632154f0124f10fe4bb175ff86c99f03cfa6ab39026795c6adabc24dd5b5beff1820c018b899f309d7f7f6f588d994245c9d49acdbd15ce81d73419124f46c7ee8e197090c072e611c9bab4fd8e29844cf961d018f"}, @NFTA_DATA_VALUE={0xb4, 0x1, "15fe6b9c26d27937383cdb57489844f4b602812d705d269b966c7f81917adcb6e2e43fc354968894d68f48045dc92d502f197ddb39e018d11a56e132fd51665af23d234cde4cdc53ff4be96f42eba750bafad9bf81edb7d4d7f4f3b867fc32e34d4c871ea527ac97a3c0b08f0da9c470f0276945704b1eb8e10d1695c476e016a5d5a530da7a3ea3b59ca7c3a68f64ba2cab7faa46ec54ae0903295ee57146cab2276e875eb726ee722dbd9af8b86e25"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x11cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_DATA={0x11b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x33, 0x1, "f822627863229c05fea39cca42a83174b06e735b77fb8c40730f12ce6daee7e5e83c7893ca47e65a2f0b186885e3d9"}, @NFTA_DATA_VALUE={0x9d, 0x1, "ca2b75bc3faa277b99391ae3526b314b77c447f9d10b21ca21aad2edd12dafcb68943e70a4b35100bffc0193a000c6788d08bbd209c2b594f5fd4099df5f101fef5c202213efacfb6925a7953639d414926a3e9273ce019835ac6ca3f5cd46b44d4e6374b5ce8189c38af5f5024db0c741dcc6aae95391a9b25af70325b78c55a37f45bbaeb9da537a3d3f21e12af8571ecca17856f7a973eb"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x85, 0x1, "f6748aa1c111cc293a4dd2396b3a133f333a1294df1c74d1186f378808947241c3cdb081496506f8e0502e32d1476fa463fe8fd2c5fc32ebc58308264299def2d684944a1efc58e42eb3d92d25b7d2f2cf8ae5d975d5703101fbba4fae97a2e51eadbc56a7a4bd1522197c959fae308dd62dad7e19ebe7545270616f2e999a948a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2394}, 0x1, 0x0, 0x0, 0x4}, 0x20040050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)={0x29c, r5, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0x277, 0x1, 'C\xec\xf8\xa0w\x15|:\xac\r\xab\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x95K]\xce,\xd1\xeb\x17]\xd5\xd0\xa7D!_\xa9$\x94\x02\v\x10od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*s6\xec\x06\xc7\x1dO\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xdak\x1a\x13\xe9\tc\x85\xb4\xcb\x815\x87\xd5\x97C\x1cM\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd2\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\xb4\v[\xdc@5\xbe\x9f\xccz\x81\x1f\xb4A|\x1a2p\xd1\x95\xb0i\"g\xd1\xf7t\xa4\xb3\x94\xe9\x01\xce\x82`\x17n\f\x05\xaa:\x03\x8cJs\x92\x81\xb0\\\xa5\xc7eB\xa5\a\xb6\x814\x05\xd1$3\x15/\xfcwNV\xeaif\xeb\x0f6\x94{5Se\xe9o\x86\a!\xf0\x9b\x80\x95\x84\xa6E\x90\xc9 \t \x04\xb1\xe7\xec\xf4\xe6 \x91\xfa\xd01<\xbcc\xd1\xac?V\xe2b3\xdelP[I\xae\x18Z\xa6K\xf2~\x19\x0f\xe7\x90\xb0\x84M)\x8e\x1av\xc2\a\xb4{\xb1(\b\xb5uh\x12k\xe2R?\x8boI\t\x87\xab\x80{\x8a\x1e\x85\xd6\x8c8vx\xeeTF\x1f&\x1fmaCc;Q\x9e\xd2\x9e\xcb\xa4\xb5M\xb1I\xfe%ukl\x18\xf7\xa5`\xaa\xed\xd7\xb1\xbf\xa0S?8\xb3Z\xb3\x1c\xb7FI7\xac\xdb\xa8\x1aF\xe5\x99\xc1\xa8\x9d\x84\x80]\x96\x0f\x0e\xd3\x00\xc91\xf1\x99\x02\xce\x01\x00\x00\x00\x00\x00\x00\x00;\xc5\b\x95\x1e\xff\xfc\xc8\x8e\x82\xb1\x8b_E\xc1\xb9AVN\v\xdf\xc1\x7f\x8f\xe9\xac\xab/\x85\xb3\xe8\xde\r\x04\xe7`\xb2\x1a\xcb;\xd8)\xac\x96\x1b\xd6K\x94z\xf7\xb8l0e\xed\x7f\xbb]\xdb\x1e\xff\xe8\xe8\x03V\x0e/\xc5K\x1e\x99\x9d\x11\xfe\x85c\x8a\x98|}\v\xb6\xaak\xc9p\xa0j\xe5!\r3\xd3I|\x1e]\xc8\xc4x\x92\xf3UE\xbcr\xbe\x0fI\xcfj\xdeB\x90\xa1\xe2Q\fD\xda_p\x87\x1b\xcd\x04\x94\xd67\xbe\xa2\xcaW\x12c{RzZ\x06\xf9\x95Pj\x06\x04\xbdz\x89o\x83N\x1ez\x10\xda\xdeK\xbaf\xcbDq\x97'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x32c, 0x0, 0x11, 0x148, 0x154, 0x0, 0x298, 0x2a8, 0x2a8, 0x298, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0xffffffff, 0xff000000, 'macvlan0\x00', 'caif0\x00', {}, {}, 0x73, 0x3, 0x54}, 0x0, 0xf4, 0x154, 0x0, {}, [@common=@unspec=@physdev={{0x64}, {'veth0\x00', {}, 'vlan1\x00', {0xff}, 0x1, 0xa}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x5, 0x3, 0x0, 0x7, 0x1], 0x6, 0x6}, {0xffffffffffffffff, [0x0, 0x5, 0x2, 0x2, 0x7, 0x1], 0x1}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0xff, 'erspan0\x00', 'bond0\x00', {0xff}, {0xff}}, 0x0, 0xe4, 0x144, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x80}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x2, 0x6, 0x3, 0x6], 0x3, 0x1}, {0x4, [0x4, 0x5, 0x7, 0x5, 0x2, 0x5], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x388) 991.892628ms ago: executing program 4 (id=2403): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0xf9fd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 854.290229ms ago: executing program 1 (id=2404): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x163902) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x2) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x400000b0}]}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x46, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x8, 0x1, 0xc75, @initdev={0xac, 0x1e, 0x7, 0x0}, @rand_addr=0x64010102}, '*\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r9, 0xe, &(0x7f00000007c0)={0xfffffff8, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/29, 0x1d}, {0x0}, {&(0x7f0000000600)=""/199, 0xc7}], 0x0, 0x3}, 0x20) landlock_restrict_self(r9, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r12 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) 853.971536ms ago: executing program 4 (id=2405): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000500)="764558a2bed07108144cb6b0fd225c6cbcbadd5f5be3bc3b14e97ebec1c60cad93258b2b704927b0137a5b", 0x2b) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 790.877883ms ago: executing program 2 (id=2406): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 697.693786ms ago: executing program 2 (id=2407): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af15100", 0xe}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) accept4(r1, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r7, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x6) 543.783214ms ago: executing program 1 (id=2408): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bond={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_IP_TARGET={0xc, 0x8, 0x0, 0x1, [@broadcast, @private=0xa010101]}]}}}]}, 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) msgrcv(0x0, 0x0, 0x0, 0x0, 0x2000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000003f40)=@ethtool_gstrings={0x1b, 0x5}}) 323.924254ms ago: executing program 2 (id=2409): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000005000008001b"], 0x30}}, 0x0) 322.386627ms ago: executing program 2 (id=2410): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x74) sendmsg$NFT_BATCH(r1, &(0x7f00000032c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003280)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x304, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x22c0, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a8, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x4c, 0x6, 0x1, 0x0, "bdbaf24e4faee24bfa95864a0c23ce2f5262052966269769c7fb275896130723fa44fd425957844865a8d64f62a3ac6acd1746f9bc98890c30ef5ad0c5c0cf484bd834fea68294ca"}, @NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "422930094bad4b2b7ccdcd5e0284ae98e215c3aca46b3fdd1ba62689a78fdc9b84117fc3e5a3ec7094e327e79bcd4e5ad0d8ab7a75231a"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x70}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xee}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xcb}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x200000}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x14a28040}]}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x69c, 0x3, 0x0, 0x1, [{0x26c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x84, 0x6, 0x1, 0x0, "16476d6704cc6c85be5741a346c0b6688e9bae8b47bdc3ad36e5332e55da077b986644adc05de03354474f4ea7a1356cf3f443a5b115220d80cc62a0e70baa91aebdf018b2fd1199696be60e06718da5c1a4dafb4fcc5388e29dfdf2a4b55c460de5fe2f9e982ab186f292b7b7761ba7af52a8eca5310a91abfe10d953f004ee"}, @NFTA_SET_ELEM_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4a, 0x1, "6d719c9b81344c83f557020f24c94aabb3434ac65d863c0d17dbd9edd0940643e0c2e4a884bb79b208d3bdebf2429d977f2fd05f5131a97e6d01fcfb878789d3d7ddee69de6a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "c77f98dc37fa06dba97fa70b83cd77ca0215dac62b5814"}, @NFTA_DATA_VALUE={0x1a, 0x1, "431986ace6d7435f53e6e788c230e2d36027641b0fdf"}, @NFTA_DATA_VALUE={0xc1, 0x1, "dbcf27337893851fb5c90d395d18bc9d177b036da2bb4778e8b05a038659a0c8ea577b8c3c5e29c74bd9039323ebb6e012d68da49dada3f7a0384617dece732c13652504e1223b766d99957110ea4173b210949b7fbf007a0a2e7134e12e18d22e362460ecc8795a42a22472422cb7fb47322525a4e5427741764049290d38717f555a31426c8c705fa2684970bdce011b49f9be2cbb5506a07e4d1a715c42d013ca6cf8bed611d4dbd3e31c0e86fb3e3ffca955bdd8261d516eaa5bf4"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x2c, 0x6, 0x1, 0x0, "8dcd3dc0102a0adab7baccba17de1cb3b2adf43f61d928805b927b81d4639303b9d807c1689394b6"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, {0x3ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_TTL={0x5, 0x2, 0xfb}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xb9}, @NFTA_OSF_DREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd5ab}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "d4157e19d13664e4f3f7db86b3ab95cbea777cdf8bb64f7b816393c861cf3d882deb3a4b786563bb21d4c6ab402d14756847b9ac02d4ad23226c50d962a672ab12f45dafed2aa95962f9f76385bdba33e222d2690d5cb8435b28"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @inner={{0xa}, @void}}, @NFTA_SET_ELEM_KEY_END={0x1d8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "60e9bf07d0da74c22c4744e748524615646cd8aa6d8e224310f8d37870d63b47b88c3142bb12bdba8a52b99dead1fb34ff3612fb1af38cdf91c4d14a4f243abff56852ec18c182fce7bf5b46d7710021d970b5571bea1e4e1689e48e167060efd36786a87f6994fe654ab45f179097efda4cb09bbf29d42835dd4a74f3efcafa6755e60f697e4e1ac8b3d132ed2a77b2db74a643d2840b5a34d7f3a3a50d99c29aafd8c3b29c87ad067e89bd0a6e4acd4cf4cd6ed9580047a67ad2cd413a47ecfb30bd0dcfb4940547b9edc34c36a72f4e6b043ec0972b34d40d9023bd40d0e4c90fca17eb"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a3c, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1f18eb28}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8f07}, @NFTA_SET_ELEM_USERDATA={0xa9, 0x6, 0x1, 0x0, "39f0baa671ae15775dafc9b67cd8b0b3b614f4e640d3f406425b429d76074531ded2882387d8eac5b84df3e8769f241113320ab229a3a74e1f5222b19021832684b9449f7b0214f909031ddef9b947f16fd00d1566c1887ab53bd8e122f0c30b26a6938d4e6d5978e0825ae7cc5a48f98de521dec6604113fd87ac39e110d7f3adc8afccbf410eceb1188f11b81891b65279ec0c93df06056d5c804ae66fc34028e7f4ef76"}]}, {0x7a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x17c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x94, 0x1, "472bf12db72ce038f2b478946cb9b76511ae5bbbc2b7ee056f5c0618402c6e651be18264db4fafa8d3305e0664be6eaa959ab157f584988a698c5ca8d6e1c8d120bec3b01c1f6487e0fcab29a184ea724cfa10239ae4e268c1a4deba72fdc5b9416314e2332a4968ff6023abd5a69bb52971a25dde316dee7109fb7c0374ddbe215b420e8cfc51d861775af9372ed571"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xddd8a5f240c3d5e3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "ca2db36ec45c31328a2d290f6cfe8b508b7be79e5a8638050ab45ba10ad14dafc1dfbbc9a783b06680d9d574cc43c0c452453cc6f931ec568d5f134a4355010ab76e1396be785fb95b6737cc05a2ffc4aecb6470aaf9ea3453a0584e41e031fab5aa9ba2c23e1cdadf137371d6f199be16ca3406198803fd158904fe89383507c3090a6f037de3d803043112da72bb8adf1d703324a36ebbd0a2dd"}]}, @NFTA_SET_ELEM_KEY={0x1b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x28, 0x1, "5e579bfbcab58bd39626dc36c4261929a561989e44cd761ca7a417c7a2067f2c968a1c69"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x62, 0x1, "6f379b9b7efe7f9f31d75c262ce0bc7fb45d37370b377d0e2a03f432e83fbaabae3e57b2dcecdc087f692b5ea091c4668dad83718d10d9897a381d60a6053b7b69563b3d29e487d33afb4af639510fa71030736f78e747feb749e01a46b6"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x48, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x88, 0x1, "adee7ec33e9d7314b0b5746195afebd52d91eaa76a81e1c7372371cef583973669923bc1378b3f7e5979a3c85cd5d7105c20c27aa080c3bf1c37482534cc2cb3698eac8f36989efa91338b4256b1e785e8c300487f7187166b193be373f6ca1f01bc7af3f4b87215986073232142310bd328290e3f6919feb690da84ed2331892f750fb9"}]}, @NFTA_SET_ELEM_KEY_END={0x228, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x59, 0x1, "cdcbc4ac30ef06f401a0a5517c7e9e2553daa1f60f8380d3d5d2d8ac9b603023418ff44d0be6160c233110f03b850907631f1d69b261d5b63d62c8fc7507c0c4d9c169ea6c54d7a952b2f1c6c03f1a3493831ad487"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "33ae632154f0124f10fe4bb175ff86c99f03cfa6ab39026795c6adabc24dd5b5beff1820c018b899f309d7f7f6f588d994245c9d49acdbd15ce81d73419124f46c7ee8e197090c072e611c9bab4fd8e29844cf961d018f"}, @NFTA_DATA_VALUE={0xb4, 0x1, "15fe6b9c26d27937383cdb57489844f4b602812d705d269b966c7f81917adcb6e2e43fc354968894d68f48045dc92d502f197ddb39e018d11a56e132fd51665af23d234cde4cdc53ff4be96f42eba750bafad9bf81edb7d4d7f4f3b867fc32e34d4c871ea527ac97a3c0b08f0da9c470f0276945704b1eb8e10d1695c476e016a5d5a530da7a3ea3b59ca7c3a68f64ba2cab7faa46ec54ae0903295ee57146cab2276e875eb726ee722dbd9af8b86e25"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x11cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_DATA={0x11b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x33, 0x1, "f822627863229c05fea39cca42a83174b06e735b77fb8c40730f12ce6daee7e5e83c7893ca47e65a2f0b186885e3d9"}, @NFTA_DATA_VALUE={0x9d, 0x1, "ca2b75bc3faa277b99391ae3526b314b77c447f9d10b21ca21aad2edd12dafcb68943e70a4b35100bffc0193a000c6788d08bbd209c2b594f5fd4099df5f101fef5c202213efacfb6925a7953639d414926a3e9273ce019835ac6ca3f5cd46b44d4e6374b5ce8189c38af5f5024db0c741dcc6aae95391a9b25af70325b78c55a37f45bbaeb9da537a3d3f21e12af8571ecca17856f7a973eb"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x85, 0x1, "f6748aa1c111cc293a4dd2396b3a133f333a1294df1c74d1186f378808947241c3cdb081496506f8e0502e32d1476fa463fe8fd2c5fc32ebc58308264299def2d684944a1efc58e42eb3d92d25b7d2f2cf8ae5d975d5703101fbba4fae97a2e51eadbc56a7a4bd1522197c959fae308dd62dad7e19ebe7545270616f2e999a948a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2394}, 0x1, 0x0, 0x0, 0x4}, 0x20040050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)={0x29c, r5, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0x277, 0x1, 'C\xec\xf8\xa0w\x15|:\xac\r\xab\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x95K]\xce,\xd1\xeb\x17]\xd5\xd0\xa7D!_\xa9$\x94\x02\v\x10od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*s6\xec\x06\xc7\x1dO\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xdak\x1a\x13\xe9\tc\x85\xb4\xcb\x815\x87\xd5\x97C\x1cM\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd2\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\xb4\v[\xdc@5\xbe\x9f\xccz\x81\x1f\xb4A|\x1a2p\xd1\x95\xb0i\"g\xd1\xf7t\xa4\xb3\x94\xe9\x01\xce\x82`\x17n\f\x05\xaa:\x03\x8cJs\x92\x81\xb0\\\xa5\xc7eB\xa5\a\xb6\x814\x05\xd1$3\x15/\xfcwNV\xeaif\xeb\x0f6\x94{5Se\xe9o\x86\a!\xf0\x9b\x80\x95\x84\xa6E\x90\xc9 \t \x04\xb1\xe7\xec\xf4\xe6 \x91\xfa\xd01<\xbcc\xd1\xac?V\xe2b3\xdelP[I\xae\x18Z\xa6K\xf2~\x19\x0f\xe7\x90\xb0\x84M)\x8e\x1av\xc2\a\xb4{\xb1(\b\xb5uh\x12k\xe2R?\x8boI\t\x87\xab\x80{\x8a\x1e\x85\xd6\x8c8vx\xeeTF\x1f&\x1fmaCc;Q\x9e\xd2\x9e\xcb\xa4\xb5M\xb1I\xfe%ukl\x18\xf7\xa5`\xaa\xed\xd7\xb1\xbf\xa0S?8\xb3Z\xb3\x1c\xb7FI7\xac\xdb\xa8\x1aF\xe5\x99\xc1\xa8\x9d\x84\x80]\x96\x0f\x0e\xd3\x00\xc91\xf1\x99\x02\xce\x01\x00\x00\x00\x00\x00\x00\x00;\xc5\b\x95\x1e\xff\xfc\xc8\x8e\x82\xb1\x8b_E\xc1\xb9AVN\v\xdf\xc1\x7f\x8f\xe9\xac\xab/\x85\xb3\xe8\xde\r\x04\xe7`\xb2\x1a\xcb;\xd8)\xac\x96\x1b\xd6K\x94z\xf7\xb8l0e\xed\x7f\xbb]\xdb\x1e\xff\xe8\xe8\x03V\x0e/\xc5K\x1e\x99\x9d\x11\xfe\x85c\x8a\x98|}\v\xb6\xaak\xc9p\xa0j\xe5!\r3\xd3I|\x1e]\xc8\xc4x\x92\xf3UE\xbcr\xbe\x0fI\xcfj\xdeB\x90\xa1\xe2Q\fD\xda_p\x87\x1b\xcd\x04\x94\xd67\xbe\xa2\xcaW\x12c{RzZ\x06\xf9\x95Pj\x06\x04\xbdz\x89o\x83N\x1ez\x10\xda\xdeK\xbaf\xcbDq\x97'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x32c, 0x0, 0x11, 0x148, 0x154, 0x0, 0x298, 0x2a8, 0x2a8, 0x298, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0xffffffff, 0xff000000, 'macvlan0\x00', 'caif0\x00', {}, {}, 0x73, 0x3, 0x54}, 0x0, 0xf4, 0x154, 0x0, {}, [@common=@unspec=@physdev={{0x64}, {'veth0\x00', {}, 'vlan1\x00', {0xff}, 0x1, 0xa}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x5, 0x3, 0x0, 0x7, 0x1], 0x6, 0x6}, {0xffffffffffffffff, [0x0, 0x5, 0x2, 0x2, 0x7, 0x1], 0x1}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0xff, 'erspan0\x00', 'bond0\x00', {0xff}, {0xff}}, 0x0, 0xe4, 0x144, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x80}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x2, 0x6, 0x3, 0x6], 0x3, 0x1}, {0x4, [0x4, 0x5, 0x7, 0x5, 0x2, 0x5], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x388) 222.719849ms ago: executing program 1 (id=2411): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x44893) socket$inet6(0xa, 0x3, 0x2) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x2031, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) syz_open_dev$radio(&(0x7f0000000440), 0x3, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) chdir(&(0x7f0000000000)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 219.404363ms ago: executing program 2 (id=2412): syz_emit_ethernet(0x86, &(0x7f0000000bc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb807f04442be993894b35a336eeca6f"}}}}}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x19) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000001000010402400000ffdbdf250000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000002400128009000100766c616e0000000014000280100003806a0001000600000009000000140f030076bf29151800"/64], 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r9, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20005000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000006f80050afe3d1e8800"], 0x48) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x8000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x10000}, {0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x2}, 0x1ff}, 0x1, {[0x1ff, 0x2, 0x0, 0x2, 0xfffffff8, 0x8, 0x9, 0xffffffff]}}, 0x5c) 134.040509ms ago: executing program 1 (id=2413): syz_usb_connect$uac1(0x2, 0x9e, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r3, &(0x7f00000002c0)='\n', 0x1) close(r3) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r4, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x3, 0x2, 0x0, 0x1], 0x8080000}) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x6) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 0 (id=2388): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r2 = getgid() chown(&(0x7f0000000000)='./file0\x00', 0xee01, r2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtaction={0xf8, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0xe4, 0x1, [@m_ife={0xe0, 0xa, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x38, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1000}, @IFE_META_PRIO={0x0, 0x3, @val=0x347}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x71cf}, @IFE_META_SKBMARK={0x0, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x0, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x200}, @IFE_META_PRIO={0x0, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0xfffffffffffffee0, 0x3, @void}]}, @TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0xacf}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0x2e, 0x6, "c1d6855984e27ab1cc0318e53d2856b846b4d56e1f0b809489d3ff4be1e422ffe1b7518e967e0b45ef2d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xf8}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860", 0x13) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r0, &(0x7f0000000640)=ANY=[@ANYRES8=r2, @ANYBLOB="cb570242fb1f9ffaaa30a3c80781c3f1a3d8cb62339fcb44c0dca9cdd5dbab2a3f3913dcfbf1d528cd10d6ba544e81bdc041c4afd36da256d795ee8b14aae7a3bf674eb5"], 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x47}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='./file0\x00', 0x950003d1) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x1014841, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$snapshot(0xffffff9c, &(0x7f0000000480), 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): g 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 411.107260][ T34] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 53, changing to 9 [ 411.111974][ T34] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 16760, setting to 1024 [ 411.116170][ T34] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 411.121295][ T34] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 411.124463][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.129885][ T34] usb 9-1: config 0 descriptor?? [ 411.139587][ T34] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 411.457269][ T34] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 411.617376][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 411.621641][ T34] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 411.624476][ T34] usb 6-1: config 0 has no interface number 0 [ 411.626594][ T34] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 411.630329][ T34] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 411.634027][ T34] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.637730][ T34] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 411.641891][ T34] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 411.644812][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.651600][ T34] usb 6-1: config 0 descriptor?? [ 411.660260][ T34] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 411.946135][T12838] lo speed is unknown, defaulting to 1000 [ 412.033023][T12840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1892'. [ 412.141067][ T5740] usb 6-1: USB disconnect, device number 45 [ 412.145914][ T5740] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 412.967250][ T5756] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 412.985163][T12855] overlayfs: failed to clone lowerpath [ 413.680618][ T34] usb 9-1: USB disconnect, device number 23 [ 413.689751][ T34] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 414.088872][ T34] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 414.237364][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 414.240765][ T34] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 414.243668][ T34] usb 9-1: config 0 has no interface number 0 [ 414.246002][ T34] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 414.249859][ T34] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 414.253656][ T34] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 414.257458][ T34] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 414.261723][ T34] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 414.264661][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.270049][ T34] usb 9-1: config 0 descriptor?? [ 414.281483][ T34] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 414.613706][T12888] lo speed is unknown, defaulting to 1000 [ 415.567170][T12908] overlayfs: failed to clone lowerpath [ 416.166104][T12918] vlan2: left promiscuous mode [ 416.168173][T12918] bond2: left allmulticast mode [ 416.172453][T12918] bond3: left promiscuous mode [ 416.174141][T12918] ipip0: left promiscuous mode [ 416.444316][T12924] SET target dimension over the limit! [ 416.515835][T12927] FAULT_INJECTION: forcing a failure. [ 416.515835][T12927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.520286][T12927] CPU: 3 UID: 0 PID: 12927 Comm: syz.1.1919 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.520305][T12927] Tainted: [L]=SOFTLOCKUP [ 416.520309][T12927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 416.520317][T12927] Call Trace: [ 416.520339][T12927] [ 416.520355][T12927] dump_stack_lvl+0x100/0x190 [ 416.520465][T12927] should_fail_ex.cold+0x5/0xa [ 416.520480][T12927] _copy_from_user+0x2e/0xd0 [ 416.520530][T12927] __sys_bpf+0x2f5/0x4e80 [ 416.520564][T12927] ? __pfx___sys_bpf+0x10/0x10 [ 416.520582][T12927] ? find_held_lock+0x2b/0x80 [ 416.520611][T12927] ? get_pid_task+0xfc/0x250 [ 416.520632][T12927] ? get_pid_task+0xfc/0x250 [ 416.520659][T12927] ? proc_fail_nth_write+0x9f/0x220 [ 416.520688][T12927] ? find_held_lock+0x2b/0x80 [ 416.520713][T12927] ? rcu_read_lock_any_held+0x6a/0xa0 [ 416.520735][T12927] ? find_held_lock+0x2b/0x80 [ 416.520755][T12927] ? ksys_write+0x190/0x250 [ 416.520770][T12927] ? ksys_write+0x190/0x250 [ 416.520803][T12927] ? fput+0x79/0x100 [ 416.520824][T12927] ? __ia32_sys_bpf+0xcc/0x170 [ 416.520841][T12927] __ia32_sys_bpf+0xcc/0x170 [ 416.520859][T12927] ? __do_fast_syscall_32+0x98/0x970 [ 416.520974][T12927] __do_fast_syscall_32+0xe7/0x970 [ 416.520996][T12927] ? lockdep_hardirqs_on+0x78/0x100 [ 416.521020][T12927] do_fast_syscall_32+0x32/0x70 [ 416.521043][T12927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 416.521064][T12927] RIP: 0023:0xf7fa6fec [ 416.521086][T12927] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 416.521107][T12927] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 416.521124][T12927] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000380 [ 416.521135][T12927] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 416.521145][T12927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 416.521154][T12927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.521176][T12927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 416.521198][T12927] [ 416.660402][T12929] sctp: [Deprecated]: syz.1.1920 (pid 12929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.660402][T12929] Use struct sctp_sack_info instead [ 416.667851][T12929] sctp: [Deprecated]: syz.1.1920 (pid 12929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.667851][T12929] Use struct sctp_sack_info instead [ 416.794216][ T34] usb 9-1: USB disconnect, device number 24 [ 416.821475][ T34] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 416.962896][T12939] 9p: Bad value for 'rfdno' [ 417.702861][T12951] netlink: 'syz.4.1928': attribute type 2 has an invalid length. [ 417.707738][T12949] SET target dimension over the limit! [ 418.184371][T12967] 9p: Bad value for 'rfdno' [ 418.236234][T12969] fuse: fd is not a fuse device [ 419.070178][T12979] 9pnet_virtio: no channels available for device syz [ 419.263009][T12984] SET target dimension over the limit! [ 419.643827][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1939'. [ 420.179982][T13002] syzkaller0: entered promiscuous mode [ 420.182445][T13002] syzkaller0: entered allmulticast mode [ 420.350204][T13004] fuse: fd is not a fuse device [ 420.515306][T13009] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 420.965559][ C3] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 421.525282][T13027] SET target dimension over the limit! [ 424.177404][ C3] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 424.395093][T13030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.807388][T13030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.016454][T13030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.122307][T13030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.332062][ T5841] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.348573][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.420464][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.425809][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.508323][T13062] FAULT_INJECTION: forcing a failure. [ 425.508323][T13062] name failslab, interval 1, probability 0, space 9, times 0 [ 425.514571][T13062] CPU: 1 UID: 0 PID: 13062 Comm: syz.0.1962 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.514599][T13062] Tainted: [L]=SOFTLOCKUP [ 425.514605][T13062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 425.514616][T13062] Call Trace: [ 425.514623][T13062] [ 425.514631][T13062] dump_stack_lvl+0x100/0x190 [ 425.514656][T13062] should_fail_ex.cold+0x5/0xa [ 425.514677][T13062] should_failslab+0xc2/0x120 [ 425.514703][T13062] __kmalloc_cache_noprof+0x91/0x6c0 [ 425.514722][T13062] ? sctp_add_bind_addr+0xae/0x3e0 [ 425.514796][T13062] sctp_add_bind_addr+0xae/0x3e0 [ 425.514822][T13062] sctp_copy_local_addr_list+0x349/0x550 [ 425.514853][T13062] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 425.514881][T13062] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 425.514910][T13062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.514941][T13062] sctp_bind_addr_copy+0xe0/0x530 [ 425.514969][T13062] sctp_connect_new_asoc+0x1c9/0x770 [ 425.514990][T13062] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 425.515016][T13062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.515042][T13062] sctp_sendmsg+0x1743/0x22e0 [ 425.515065][T13062] ? __pfx___might_resched+0x10/0x10 [ 425.515100][T13062] ? __pfx_sctp_sendmsg+0x10/0x10 [ 425.515122][T13062] ? aa_sk_perm+0x309/0xaa0 [ 425.515164][T13062] ? __might_fault+0xc5/0x140 [ 425.515186][T13062] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 425.515207][T13062] ? __pfx_sctp_sendmsg+0x10/0x10 [ 425.515256][T13062] inet_sendmsg+0x11c/0x140 [ 425.515337][T13062] __sys_sendto+0x453/0x4e0 [ 425.515386][T13062] ? __pfx_inet_sendmsg+0x10/0x10 [ 425.515407][T13062] ? __pfx___sys_sendto+0x10/0x10 [ 425.515442][T13062] ? fput+0x79/0x100 [ 425.515460][T13062] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 425.515486][T13062] __ia32_sys_sendto+0xdd/0x1b0 [ 425.515504][T13062] ? __do_fast_syscall_32+0x98/0x970 [ 425.515527][T13062] ? lockdep_hardirqs_on+0x78/0x100 [ 425.515546][T13062] __do_fast_syscall_32+0xe7/0x970 [ 425.515567][T13062] ? lockdep_hardirqs_on+0x78/0x100 [ 425.515587][T13062] do_fast_syscall_32+0x32/0x70 [ 425.515609][T13062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.515628][T13062] RIP: 0023:0xf700efec [ 425.515648][T13062] Code: Unable to access opcode bytes at 0xf700efc2. [ 425.515656][T13062] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 425.515671][T13062] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 425.515680][T13062] RDX: 000000000000fffd RSI: 00000000000000c1 RDI: 0000000080000280 [ 425.515690][T13062] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 425.515699][T13062] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 425.515707][T13062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.515728][T13062] [ 425.527487][ T43] audit: type=1804 audit(1785671483.502:638): pid=13058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1961" name="/newroot/464/file1/file0" dev="9p" ino=81789177 res=1 errno=0 [ 425.847405][T13073] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 425.849508][T13073] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 425.852589][T13073] vhci_hcd vhci_hcd.0: Device attached [ 425.872046][T13073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1963'. [ 426.060892][T13081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.064683][T13081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.117761][ T845] usb 46-1: SetAddress Request (2) to port 0 [ 426.121695][ T845] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 426.363907][T13074] vhci_hcd: connection reset by peer [ 426.366557][ T5841] vhci_hcd vhci_hcd.4: stop threads [ 426.369741][ T5841] vhci_hcd vhci_hcd.4: release socket [ 426.372315][ T5841] vhci_hcd vhci_hcd.4: disconnect device [ 426.372909][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1968'. [ 426.706299][T13112] 9p: Bad value for 'wfdno' [ 427.460019][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 427.690090][T13135] 9p: Bad value for 'rfdno' [ 427.917326][ T50] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 428.107301][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 428.121551][ T50] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 428.124938][ T50] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 428.140195][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 428.149452][ T50] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 428.161741][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 428.178754][ T50] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.184096][ T50] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.187859][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.459416][ T50] usb 6-1: GET_CAPABILITIES returned 0 [ 428.461625][ T50] usbtmc 6-1:16.0: can't read capabilities [ 428.487269][ T5852] page_pool_release_retry() stalled pool shutdown: id 43, 1 inflight 60 sec [ 428.507781][T13151] syzkaller0: entered promiscuous mode [ 428.510206][T13151] syzkaller0: entered allmulticast mode [ 428.557851][ T5852] usb 6-1: USB disconnect, device number 46 [ 428.759649][T13164] SET target dimension over the limit! [ 428.789685][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1992'. [ 429.047351][ T5852] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 429.287461][ T5852] usb 6-1: Using ep0 maxpacket: 8 [ 429.307246][ T5852] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 429.327651][ T5852] usb 6-1: config 0 has no interface number 0 [ 429.330144][ T5852] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 429.336637][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.366052][ T5852] usb 6-1: config 0 descriptor?? [ 429.508274][ T5852] viperboard 6-1:0.143: version 0.00 found at bus 006 address 047 [ 429.637213][T13193] SET target dimension over the limit! [ 429.648569][T12223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.886459][T12223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.039769][ T5852] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 430.042832][ T5852] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 430.096485][T12223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.202889][T12223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.355163][T12223] bridge_slave_1: left allmulticast mode [ 430.357880][T12223] bridge_slave_1: left promiscuous mode [ 430.363559][T12223] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.374780][T12223] bridge_slave_0: left allmulticast mode [ 430.377719][T12223] bridge_slave_0: left promiscuous mode [ 430.385118][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.488420][ T5852] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 430.646068][T13216] usb 6-1: USB disconnect, device number 47 [ 430.650239][ T5852] usb 9-1: Using ep0 maxpacket: 8 [ 430.668347][ T5852] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 430.671498][ T5852] usb 9-1: config 0 has no interface number 0 [ 430.674068][ T5852] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 430.677721][ T5852] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 430.681429][ T5852] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 53, changing to 9 [ 430.685072][ T5852] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 16760, setting to 1024 [ 430.699181][ T5852] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 430.703076][T12223] gretap0 (unregistering): left promiscuous mode [ 430.725351][ T5852] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 430.796764][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.829796][T12223] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 430.929165][ T5852] usb 9-1: config 0 descriptor?? [ 430.942827][ T5852] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 431.098203][T12223] bond0 (unregistering): left promiscuous mode [ 431.101383][T12223] bond_slave_0: left promiscuous mode [ 431.103988][T12223] bond_slave_1: left promiscuous mode [ 431.111467][T12223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.121917][T12223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.128551][T12223] bond0 (unregistering): Released all slaves [ 431.144238][T12223] bond1 (unregistering): (slave bond2): Releasing backup interface [ 431.155046][T12223] bond1 (unregistering): Released all slaves [ 431.171589][T12223] bond2 (unregistering): Released all slaves [ 431.302196][T12223] tipc: Left network mode [ 431.329295][ T845] usb 46-1: device descriptor read/8, error -110 [ 431.371716][ T5453] 8021q: adding VLAN 0 to HW filter on device eth1 [ 431.541114][T12223] IPVS: stopping master sync thread 8634 ... [ 431.687285][ T5756] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 431.747998][ T845] usb usb46-port1: attempt power cycle [ 431.851242][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 432.096608][T13254] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 432.134412][T13256] SET target dimension over the limit! [ 432.201821][T13259] overlayfs: failed to clone lowerpath [ 432.447534][ T845] usb usb46-port1: unable to enumerate USB device [ 433.091462][T13266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.097502][T13266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.176967][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 433.194104][T13266] lo speed is unknown, defaulting to 1000 [ 433.420715][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 433.493719][ T845] usb 9-1: USB disconnect, device number 25 [ 433.517324][ T845] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 433.733967][T12223] team0: left promiscuous mode [ 433.737299][T12223] team_slave_0: left promiscuous mode [ 433.750731][T12223] team_slave_1: left promiscuous mode [ 433.776271][ T43] audit: type=1326 audit(1785671491.762:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.0.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 433.786248][ T43] audit: type=1326 audit(1785671491.762:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.0.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 433.786336][T12223] hsr_slave_0: left promiscuous mode [ 433.796168][ T43] audit: type=1326 audit(1785671491.762:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.0.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf700efec code=0x7ffc0000 [ 433.805156][ T43] audit: type=1326 audit(1785671491.762:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.0.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 433.805171][T12223] hsr_slave_1: left promiscuous mode [ 433.806087][T12223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.814135][ T43] audit: type=1326 audit(1785671491.762:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.0.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf700efec code=0x7ffc0000 [ 433.816648][T12223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.818274][ T43] audit: type=1326 audit(1785671491.762:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.0.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 433.836345][ T43] audit: type=1326 audit(1785671491.762:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.0.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 433.837592][T12223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.843234][ T43] audit: type=1326 audit(1785671491.762:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.0.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf700efec code=0x7ffc0000 [ 433.846774][T12223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.853905][ T43] audit: type=1326 audit(1785671491.762:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.0.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 433.864304][ T43] audit: type=1326 audit(1785671491.762:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.0.2017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 433.876718][T12223] veth0_macvtap: left promiscuous mode [ 433.882357][T12223] veth1_vlan: left promiscuous mode [ 433.979265][ T845] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 434.137290][ T845] usb 9-1: Using ep0 maxpacket: 8 [ 434.148044][ T845] usb 9-1: config 0 has an invalid interface number: 143 but max is 0 [ 434.156652][ T845] usb 9-1: config 0 has no interface number 0 [ 434.159631][ T845] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 434.167737][ T845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.187311][ T845] usb 9-1: config 0 descriptor?? [ 434.189569][T12223] team0 (unregistering): Port device team_slave_1 removed [ 434.213481][T12223] team0 (unregistering): Port device team_slave_0 removed [ 434.327881][ T845] viperboard 9-1:0.143: version 0.00 found at bus 009 address 026 [ 434.347981][T13300] SET target dimension over the limit! [ 434.356777][ T845] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 434.363371][ T845] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 434.437398][T13307] vlan1: entered allmulticast mode [ 434.450712][T13307] veth0_vlan: entered allmulticast mode [ 434.653551][T13321] fuse: fd is not a fuse device [ 434.833897][T13329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.838344][T13329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.904392][T12223] IPVS: stop unused estimator thread 0... [ 435.398964][ T42] usb 9-1: USB disconnect, device number 26 [ 435.943923][T13366] 9pnet_virtio: no channels available for device syz [ 436.487417][ T5756] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 437.297264][ T42] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 437.447244][ T42] usb 9-1: Using ep0 maxpacket: 8 [ 437.451565][ T42] usb 9-1: config 0 has an invalid interface number: 143 but max is 0 [ 437.455112][ T42] usb 9-1: config 0 has no interface number 0 [ 437.458173][ T42] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 437.462097][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.468224][ T42] usb 9-1: config 0 descriptor?? [ 437.587844][ T42] viperboard 9-1:0.143: version 0.00 found at bus 009 address 027 [ 437.600509][ T42] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 437.605058][ T42] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 438.058747][T13406] policy can only be matched on NF_INET_PRE_ROUTING [ 438.058767][T13406] unable to load match [ 438.115355][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2043'. [ 438.958080][ T41] usb 9-1: USB disconnect, device number 27 [ 439.241837][T13422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.246878][T13422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.530600][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.580364][T13428] 9p: Bad value for 'wfdno' [ 439.757247][ T5756] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 440.231939][T13435] fuse: Bad value for 'user_id' [ 440.233539][T13435] fuse: Bad value for 'user_id' [ 440.577405][T13450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2055'. [ 440.580357][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 440.815807][T13458] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2058'. [ 440.897230][ T1041] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 441.040162][T13463] overlayfs: failed to clone lowerpath [ 441.066488][ T1041] usb 6-1: Using ep0 maxpacket: 8 [ 441.071506][ T1041] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 441.075292][ T1041] usb 6-1: config 0 has no interface number 0 [ 441.078178][ T1041] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 441.082127][ T1041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.087766][ T1041] usb 6-1: config 0 descriptor?? [ 441.160345][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 441.209300][ T1041] viperboard 6-1:0.143: version 0.00 found at bus 006 address 048 [ 441.230721][ T1041] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 441.240986][ T1041] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 441.343731][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.353102][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.356255][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.359508][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.365932][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.640858][T13469] lo speed is unknown, defaulting to 1000 [ 441.699527][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'. [ 441.795083][T13486] SET target dimension over the limit! [ 441.985705][T13469] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.988739][T13469] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.991423][T13469] bridge_slave_0: entered allmulticast mode [ 441.994880][T13469] bridge_slave_0: entered promiscuous mode [ 441.999785][T13469] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.002774][T13469] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.005982][T13469] bridge_slave_1: entered allmulticast mode [ 442.009879][T13469] bridge_slave_1: entered promiscuous mode [ 442.035857][T13469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.043772][T13469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.068597][T13469] team0: Port device team_slave_0 added [ 442.073044][T13469] team0: Port device team_slave_1 added [ 442.094198][T13469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.096967][T13469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.106963][T13469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.112804][T13469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.115563][T13469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.125574][T13469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.164506][T13469] hsr_slave_0: entered promiscuous mode [ 442.167719][T13469] hsr_slave_1: entered promiscuous mode [ 442.304925][ T42] usb 6-1: USB disconnect, device number 48 [ 442.384673][T13469] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.526605][T13469] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.650983][T13469] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.763395][T13469] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.984922][T13503] syzkaller0: left promiscuous mode [ 442.987607][T13503] syzkaller0: left allmulticast mode [ 443.032758][T13469] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 443.037277][T13469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.040522][T13469] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 443.044691][T13469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.049811][T13469] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 443.053993][T13469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.056923][T13469] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 443.061725][T13469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.229506][T13469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.241339][T13469] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.269860][T13469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 443.274244][T13469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 443.349125][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.351723][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.367317][ T5756] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 443.456663][ T5749] Bluetooth: hci3: command tx timeout [ 443.464519][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.466806][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.891812][T13469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.968058][T13469] veth0_vlan: entered promiscuous mode [ 443.975327][T13469] veth1_vlan: entered promiscuous mode [ 444.000143][T13469] veth0_macvtap: entered promiscuous mode [ 444.005477][T13469] veth1_macvtap: entered promiscuous mode [ 444.029083][T13469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.036970][T13469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.045804][T12223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.049153][T12223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.226156][T12223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.235737][T12223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.364634][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.370346][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.392198][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.400422][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.537093][ T5749] Bluetooth: hci3: command tx timeout [ 445.757539][ T5852] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 445.918415][ T5852] usb 9-1: Using ep0 maxpacket: 8 [ 446.022708][ T5852] usb 9-1: config 0 has an invalid interface number: 143 but max is 0 [ 446.054127][ T5852] usb 9-1: config 0 has no interface number 0 [ 446.071888][ T5852] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 446.085753][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.094433][ T5852] usb 9-1: config 0 descriptor?? [ 446.232081][ T5852] viperboard 9-1:0.143: version 0.00 found at bus 009 address 028 [ 446.276998][ T5852] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 446.282865][ T5852] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 446.335339][T13582] 9p: Bad value for 'rfdno' [ 446.388078][T13582] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 446.416620][T13582] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 446.420233][T13582] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 446.423234][T13582] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 446.429545][T13582] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 446.508185][T13582] pci 0000:00:01.0: Adding to iommu group 1 [ 446.546983][T13582] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 446.549189][T13582] pci 0000:00:01.0: vgaarb: bridge control possible [ 446.551353][T13582] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 446.569124][T13582] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 446.572586][T13582] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 446.581411][T13582] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 446.620028][T13582] [drm] Found bochs VGA, ID 0xb0c5. [ 446.622740][T13582] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 446.673727][T13582] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 446.821534][T13582] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 447.409111][ T845] usb 9-1: USB disconnect, device number 28 [ 447.611879][ T5756] Bluetooth: hci3: command tx timeout [ 448.104734][T13604] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.107260][ T50] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 448.191784][T13606] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2083'. [ 448.257778][ T50] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 448.261924][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.265765][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.273419][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 448.275252][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2084'. [ 448.276652][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.284192][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.289423][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 448.292898][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.296305][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.301286][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 448.305254][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.308821][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.313310][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 448.324357][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.329202][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.335559][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 448.344682][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.351836][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.358698][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 448.364447][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.368443][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.371165][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 448.371176][ T43] audit: type=1804 audit(1785671506.362:668): pid=13612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2086" name="/newroot/511/file1/file0" dev="9p" ino=81789177 res=1 errno=0 [ 448.372961][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 448.380809][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'. [ 448.390259][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.393907][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.397800][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 448.402243][ T50] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 448.405686][ T50] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 448.407684][ T5749] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 448.408985][ T50] usb 7-1: Product: syz [ 448.412477][ T50] usb 7-1: Manufacturer: syz [ 448.414296][ T50] usb 7-1: SerialNumber: syz [ 448.421877][ T50] usb 7-1: config 0 descriptor?? [ 448.434552][ T50] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 448.580355][T13622] binder: 13617:13622 ioctl c018620c 80000240 returned -1 [ 448.806083][T13638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.819347][T13638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.074017][T13601] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.266770][T13601] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.429722][T13601] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.430938][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2093'. [ 449.453273][T13657] bond1: entered promiscuous mode [ 449.455210][T13657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.484219][T13657] ipvlan2: entered allmulticast mode [ 449.486438][T13657] bond1: entered allmulticast mode [ 449.493861][T13660] SET target dimension over the limit! [ 449.495012][T13657] ipvlan3: entered allmulticast mode [ 449.552821][T13601] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.677323][ T5756] Bluetooth: hci3: command tx timeout [ 449.689192][T12223] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.699245][T12223] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.702149][T12223] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.704945][T12223] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.734339][ T42] usb 7-1: USB disconnect, device number 21 [ 449.744230][ T42] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 449.789500][T13672] syzkaller0: entered promiscuous mode [ 449.791334][T13672] syzkaller0: entered allmulticast mode [ 449.802068][T13672] tipc: Enabled bearer , priority 0 [ 450.027301][ T5852] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 450.187311][ T5852] usb 9-1: Using ep0 maxpacket: 8 [ 450.190969][ T5852] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 450.194458][ T5852] usb 9-1: config 0 has no interface number 0 [ 450.196508][ T5852] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 450.200423][ T5852] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 450.204663][ T5852] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 450.209173][ T5852] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 450.213577][ T5852] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 450.216364][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.221062][ T5852] usb 9-1: config 0 descriptor?? [ 450.231156][ T5852] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 450.345609][T13682] SET target dimension over the limit! [ 450.384060][T13684] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 450.632382][T13688] lo speed is unknown, defaulting to 1000 [ 450.688111][T13671] tipc: Resetting bearer [ 450.719263][T13671] tipc: Disabling bearer [ 450.729793][ T5749] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 451.208083][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2104'. [ 451.227590][T13693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2104'. [ 452.413556][T13713] Bluetooth: MGMT ver 1.23 [ 452.641764][ T43] audit: type=1804 audit(1785671510.632:669): pid=13716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2112" name="/newroot/519/file1/file0" dev="9p" ino=81789177 res=1 errno=0 [ 452.797634][ T845] usb 9-1: USB disconnect, device number 29 [ 452.832717][ T845] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 453.278828][T13727] FAULT_INJECTION: forcing a failure. [ 453.278828][T13727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 453.286910][T13727] CPU: 0 UID: 0 PID: 13727 Comm: syz.4.2115 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.286941][T13727] Tainted: [L]=SOFTLOCKUP [ 453.286946][T13727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.286953][T13727] Call Trace: [ 453.286979][T13727] [ 453.286986][T13727] dump_stack_lvl+0x100/0x190 [ 453.287125][T13727] should_fail_ex.cold+0x5/0xa [ 453.287139][T13727] ? prepare_alloc_pages+0x16d/0x5f0 [ 453.287193][T13727] should_fail_alloc_page+0xeb/0x140 [ 453.287211][T13727] prepare_alloc_pages+0x1f0/0x5f0 [ 453.287230][T13727] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 453.287247][T13727] ? kvm_sched_clock_read+0x11/0x20 [ 453.287326][T13727] ? sched_clock+0x38/0x60 [ 453.287345][T13727] ? sched_clock_cpu+0x6c/0x570 [ 453.287364][T13727] ? arch_scale_cpu_capacity+0x15/0xb0 [ 453.287380][T13727] ? update_irq_load_avg+0xae/0xe30 [ 453.287397][T13727] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 453.287410][T13727] ? find_held_lock+0x2b/0x80 [ 453.287424][T13727] ? __schedule+0x31d8/0x6730 [ 453.287441][T13727] ? __lock_acquire+0x49f/0x1a40 [ 453.287471][T13727] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.287489][T13727] ? policy_nodemask+0xed/0x4f0 [ 453.287507][T13727] alloc_pages_mpol+0x1fb/0x540 [ 453.287524][T13727] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 453.287541][T13727] ? rcu_is_watching+0x12/0xc0 [ 453.287558][T13727] folio_alloc_mpol_noprof+0x36/0x260 [ 453.287578][T13727] vma_alloc_folio_noprof+0xed/0x1d0 [ 453.287597][T13727] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 453.287616][T13727] ? __pfx_mfill_atomic_install_pte+0x10/0x10 [ 453.287635][T13727] ? mm_alloc_pmd+0x2c2/0x470 [ 453.287653][T13727] anon_alloc_folio+0x25/0x160 [ 453.287670][T13727] ? __pfx_anon_alloc_folio+0x10/0x10 [ 453.287686][T13727] __mfill_atomic_pte+0x145/0xb50 [ 453.287707][T13727] ? __pfx___mfill_atomic_pte+0x10/0x10 [ 453.287726][T13727] ? mm_alloc_pmd+0x2c2/0x470 [ 453.287745][T13727] mfill_atomic_copy+0x72c/0x16c0 [ 453.287769][T13727] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 453.287789][T13727] ? find_held_lock+0x2b/0x80 [ 453.287810][T13727] userfaultfd_ioctl+0x2dee/0x5990 [ 453.287821][T13727] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 453.287871][T13727] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 453.287881][T13727] ? do_vfs_ioctl+0x226/0x13e0 [ 453.287898][T13727] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 453.287919][T13727] ? find_held_lock+0x2b/0x80 [ 453.287932][T13727] ? __fget_files+0x215/0x3d0 [ 453.287949][T13727] ? hook_file_ioctl_common+0x140/0x440 [ 453.287968][T13727] ? __fget_files+0x21f/0x3d0 [ 453.287979][T13727] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 453.287991][T13727] ? compat_ptr_ioctl+0x6e/0xa0 [ 453.288005][T13727] compat_ptr_ioctl+0x6e/0xa0 [ 453.288021][T13727] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 453.288036][T13727] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 453.288055][T13727] __do_fast_syscall_32+0xe7/0x970 [ 453.288078][T13727] ? lockdep_hardirqs_on+0x78/0x100 [ 453.288094][T13727] do_fast_syscall_32+0x32/0x70 [ 453.288111][T13727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.288126][T13727] RIP: 0023:0xf7ff7fec [ 453.288141][T13727] Code: Unable to access opcode bytes at 0xf7ff7fc2. [ 453.288158][T13727] RSP: 002b:00000000f549550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 453.288169][T13727] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c028aa03 [ 453.288176][T13727] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.288183][T13727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.288190][T13727] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 453.288196][T13727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.288211][T13727] [ 453.597643][ C3] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 453.677242][ T5749] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 454.266977][T13742] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 454.449190][ T43] audit: type=1804 audit(1785671512.442:670): pid=13748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2121" name="/newroot/509/file1/file0" dev="9p" ino=81789177 res=1 errno=0 [ 454.521892][T13744] pim6reg: entered allmulticast mode [ 454.525024][T13744] netlink: 'syz.4.2120': attribute type 1 has an invalid length. [ 454.527757][T13744] netlink: 'syz.4.2120': attribute type 2 has an invalid length. [ 454.837216][ T5740] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 455.047241][ T5740] usb 7-1: Using ep0 maxpacket: 8 [ 455.050346][ T5740] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 455.053611][ T5740] usb 7-1: config 0 has no interface number 0 [ 455.055611][ T5740] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.059019][ T5740] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 455.062774][ T5740] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 53, changing to 9 [ 455.066268][ T5740] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 16760, setting to 1024 [ 455.070521][ T5740] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 455.074668][ T5740] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 455.077598][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.081813][ T5740] usb 7-1: config 0 descriptor?? [ 455.086966][ T5740] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 455.921312][T13761] syzkaller0: entered promiscuous mode [ 455.923902][T13761] syzkaller0: entered allmulticast mode [ 456.280053][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 456.444785][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2126'. [ 456.448961][T13782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2126'. [ 456.646383][T13784] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2128'. [ 456.717287][ T5749] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 457.218743][ T5740] usb 7-1: USB disconnect, device number 22 [ 457.223150][ T5740] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 457.307416][T13804] Cannot find add_set index 0 as target [ 457.378226][T13807] SET target dimension over the limit! [ 457.559725][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2137'. [ 457.597820][T13815] kvm: pic: non byte read [ 457.600315][T13815] kvm: pic: non byte read [ 457.603039][T13815] kvm: pic: non byte read [ 457.886700][T13815] kvm: pic: non byte read [ 458.073910][T13818] fuse: Bad value for 'fd' [ 458.205015][T13821] binder: 13820:13821 ioctl c0306201 80000000 returned -14 [ 458.221268][T13821] binder: 13820:13821 ioctl c0306201 800004c0 returned -14 [ 458.239579][T13821] binder: 13820:13821 ioctl c0306201 800001c0 returned -14 [ 458.458872][T13832] SET target dimension over the limit! [ 458.650931][T13839] netlink: 'syz.0.2145': attribute type 12 has an invalid length. [ 458.654501][T13839] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2145'. [ 459.167333][ T845] usb 9-1: new high-speed USB device number 30 using dummy_hcd Õ./file0”5wmountsCÿÿÿ€  /dev/fusefd=0x0000000000000009,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)HL@ñÿÿÿ€ÿÿÿdevtmpfs /dev devtmpfs rw,relatime,size=610160k,nr_inodes=152540,mode=755,huge=advise 0 0 devpts /dev/pts devpts rw,relatime,gid=5,mode=620,ptmxmode=666 0 0 tmpfs /dev/shm tmpfs rw,relatime,huge=advise 0 0 syz-proc /proc proc rw,relatime 0 0 sysfs /sys sysfs rw,relatime 0 0 debugfs /sys/kernel/debug debugfs rw,relatime 0 0 securityfs /sys/kernel/security securityfs rw,relatime 0 0 configfs /sys/kernel/config configfs rw,relatime 0 0 fusectl /sys/fs/fuse/connections fusectl rw,relatime 0 0 none /sys/fs/pstore pstore rw,relatime 0 0 bpf /sys/fs/bpf bpf rw,relatime 0 0 tracefs /sys/kernel/tracing tracefs rw,mand,relatime 0 0 debugfs /sys/kernel/debug debugfs rw,relatime 0 0 binfmt_misc /proc/sys/fs/binfmt_misc binfmt_misc rw,relatime 0 0 none /syzcgroup/unified cgroup2 rw,relatime 0 0 none /syzcgroup/cpu cgroup rw,relatime,cpuacct,memory,hugetlb,clone_children 0 0 none /syzcgroup/net cgroup rw,relatime,blkio,devices,freezer,net_prio 0 0 gadgetfs /dev/gadgetfs gadgetfs rw,relatime 0 0 binder /dev/binderfs binder rw,relatime,max=1048576 0 0 none /13/file0 fuse rw,relatime,user_id=0,group_id=0 0 0 none /13/file0 ramfs rw,relatime 0 0 ./file0/file0[ 459.538526][T13847] dvmrp0: entered allmulticast mode ./file0fuse.-file0ßÞƒùm˜#„èÖ‰!œ¹f›ÛªyŸ‚êÉ&jAcaŽÔùAC¤àò|Düï9  ³€^Ô瀘ØhœÇyØfHÒ8fC2”‡†l%ü˜S«Ùí`¹Ÿ¦®-½$«m¼ëÛRFZÎ|Å£²†HüÚ7M[ >Q×,EäÝãéîšGÿäXº÷»IQ5¨J¡ð¨?¢«íV9Úÿg–4a”Sõ3ò%ƒ¦à¤Ü éÞFhM^6â)Q7Ï:LÐ]>]bHYv€¢Ñr8`)âò¤€—ü ¡5í¬õݺŦ.‹±=ÑW&W¨!¨s’—÷.)#Ýß>0Ëé¯1Aò'^ä®…ØnȈþšgQòR~•¸¾°UâvC•¯î“ÍDñé/på÷%E:¶b‘û±&• ûÕéZìq`ÖC†J½jÑÌM×ù37š`x¨l!XÛ€vç¶`6oÊ{FÐ,Žg¦IKûL,gPçe“‰[^++Ç€“„ ‚ªb§à¡Q×=䌸ã+æ?ý0?Zn¦ð—ív?¿6Ä0‚EFÞy’#H5Lâ…¯ —¿¢uínK"…þqîYBfQdú®Öiq kàþxc®½K¾•]ꢔ۠y1–8_MQAÉÖÄ°ú"²âÏ· R¬£UçZWlËŒË[dtŠ©í»¨±®¼g¾vçá—b-˜€BŸl¥\[;æºÎ‘‘åÅ¿qõ”ËýM°éö’?Xÿ”d¦r ]O Æ"ÃÎ?]:ô±nž¯6ÃSq\ÓR`V ¿ÐU]QÎ\@»Û|•Î®­­¸)tÞP°†3H8dõêh.g‚† jo9jòš|³:5yâX5–6óÀÔÏ6…•š ÞÚ”ÓX$oºƒùgX?q=wƒ2H¿µÏ*x¨“xBauÁbÿªrx¤;™21Á¸ËúƱ­#[‘ùËv#±U~÷¸v£Ãv'ª1êþÑAÌ T‘Äö!¦kmƒzMxqœFQ “Ïeüéú¾[ÖÔ™ìëcSŽÎ<ñSU #›ùxÀŒ‡Ÿ™THZN>[í¸K@|í…ÄßÄ×ZñY’Ÿ É'ĩÊäüÉþ¹ìU^ÐB0…S”ÕÌüŽÒd Øø;åÞ»p)€€*s3+™¬ÑÉ ˆáùÎ1˜Àõ›ûuÄ䦗fíC¢œƒU-ãÎmΖúQ¶â0q¤éD"Ñ^._gÚ|¦Êæ¾×t>¿úËŠ6y#!¥èr÷bÃÇ6hðԘö¢k®iŒ÷$ÂÛìÓ™¡æ¸ÐhN’Ÿ.€ƒv^²Æw“¡­»‰ÓkX¿±—ÍÅóÈ”¬ˆn; 6ú½#< Þ«€™÷*tÙº\^M9y ùä[qU‡·É7ÇfÅÅüæ!¥:ŸÐ; NæØÑ«¾.Õa‚ wñ*ÊÐuU@«mÑ`K|0¨e)•«€¸^‘Þ”8¤c~°)$íKt^x,ÿ˜Q °;çœ*5¿'e„×\Ý–¹É~sëq :·ÃÁœ,«D—)Ë0RµÔP=çó1‹æøHT{OM¸,®á€x¾(P6ªM‘òÁó–4>s¥þ‹µÌð£~Ñ÷zÍ¡¤¤Ìü«]yð÷ˆ¶Õéø"Š‹ÍÀinkõíÿ¼×éPœ‡ûá÷&¹;øÆØÓt(v>%`Älž‰Os…ÂZ¼O6‘ëÍqàÔ‘]—¢8šíë²ëG\{E_Š¨Q“µÀô;CLÞa M&FÍn67óI¤4§WÁÅÖ˜E-™&xÜ¥å’ìÓÊü­„äéKJÜR[½hCBˆƒ:n¤ 8È¿µAÿr€'J4ÔÏŸ-ºágÊ ®„qÄ•à´Q”­‘ÄQo!˱&ý]sL×r]õ³ûé)Uô©»;›:îÿyÖí]¹-ïÐ`¢ÃìŒBÁxo–Å rI°?Ç’vCf‰J52 ™Ð¾ùý j$l6£Wƹ…܃£z›‹šÖCÞ©H`Ëçc»sÌ„"¶M3"BÈ•@uûq¦g–86«Í´a˜U²jñ`df³SE£¿zâÖ®"Iñç¨FBxºáH`"¼ÇÃsÈÙ ï°áÏ ÚŽ÷¥àrùšGìÇ^ND(€7Q“ÛI»‚º4†ÊG>Õ¶>@HÛMÄUçK?Ý.x˜Ê?L:Ô5ÍæêdPU:}Ï"BW¯ÅXYõyTçÕŒt†±à*Ál·™·v2Æk·ŽnRáÁsd$úMC?´ÈÒ? *Õúã®$3ˆ›IjÙ{Ùöâ …—ÑE* rÜô=»Úe…Àm!ûÿåþ{U÷›Ÿ4 +Ð\¦<|ë»ÒO±‘°Lf]EMÒ‹…Ø!Î~a1‰–x^¨Ú¼H™±&q}ZXí6;K9Ð/ŒÅãPûð£H­ìÑùâÊt›Øo^´Ž›FðPÞÖB”yF÷øŠš Fƒ­„ÖN9S¼MÌ3K—e5)Öh*‡¥úÈ mFÖç/Â.X¾{†³7.òb!«ÄHqq²W¬ÿå]Ç…^ž‡­—zg’²1Zž´FŒhd›`ÀÚ·jÁ­cÍ€¶ì¨üˆ±ä&:ÌI’UÁkHz øX_œ‰-ÈLAFå¥g|J,²KÞ^‰…J±äÈt’çk~oK½qØK«…Ép(Iç ÷(wk”¨ûŒ| aïo 2¢”›þG?â';‹[:Õ@ñ‡Ic}̼¦ö/ zfq|YlÞôòV h^Þ–{>æ‹Œ•Y®±×VL;€k,èX8“§™·~¾­®0ÿÀ²¶8,ÅQ¤Ee ³QkãyïVj° g?تîìÜñŒ`é¤w¹á7WIŠDÿ“QÑòz¿Ÿ×hù$PFGÑ$w¾†¾bArÃ"mfë+$ŽË>]ܨ›(|WQ ì@üø€,ô6Š†ó à4÷¦}KÅI^‡ìßà/xÉ¥š;ù»cd>Àdç´GnÄãh[ú;þžùìÁ-͉š¾<´hhÀÀ©Iª&¾Õ}õo+ÅNñš÷ü¼{iuô*Jg¬ù€µh¬²4/B$Ÿ|ãR|+ `dìÒPˆz”-&ö7áÄ–YÒF*hh °C‡£³™ã–¹þtÞ5a%úGТ'7 ¿6§›oÿ­éCÖÏÿK¾Óïï¶Iã/“]b0|º6šÈÂoãÔ…|æÒ@ìåäÑIðXqU¨5Ìï®/ñÛáR¨$™¡™møµF.áp²„2v»åÃôƒ‡dM•ð‡Å˜ãÔo¾'ö?§„½¢9Q!B@E¢ÅÛƼ6bÊs †Ñ<øöþ'C"L§µ5Êö´p}®œúÓ×)»º¶ d®nš Ÿuûä|žeMŽ;ÀóÛÿè)æÅoz$VQ6*…Y«VZ™‘Ʊث̔Ƴ;º1OnP`æWäd–šUÖÅü ÿ]žO@í¼,’~±í•ï%ôå¬Ë¤™“"º9I“ÝXuC:"ƒ\ýBýwýF€·þv}z¥Ã:ÍàJe½:f?ÍäÈŸ*ô˜ñ;ù«º¡Á&^Üi”«ÜÉ"pÀXÍ*ëï¿ìžK©®\Þ!›“,à4¶Í_¾œû¬O~$ï—fOs|Ã`<ÍxÛ%ü4Ybž¯ ßÛ,~P*¦”8„z%M[ïÄQÍ£`o È®bà®é(ùí !רӉžD^àdV=2÷¶»ZÑ—<õ(Ù³)ìg\mß'Ò¦ÿ§2‹¹“@|Þ=aYýIþF’T¸L)ÚêùÖ›ïŸQ¹¼á“ãxƒ[‚ê_`Ü ÝtR·¨ ®|ÖÜ)׬jldq–3‹v‘F²£…Ò‚¿ªæfﯫ-‰¤V{”`Ì"×RøéªÊª·ÈHyõ5–bÕ]öWBtQÇEtÎ×3€|»TWA’9L=ê½ATÐåhWÃ6ÚÉQùj5ŽœFj\Qó¦2á„õ^ÞôÜÉr–;ë•ß Þß„‚`ËÁëýÇ@‚êºm,Q’ŒÓ|L Ÿ2» ”¥iGÏÙd0VÛ]¾¦ $L“+ÈæE²ì.¹¼Nž/AV)24Ð^pË&¸£p° lukÚmïÁ^³†dSZOûqAhÞüm‚ô[¨v…7êÕwÚgþìd_˜]K”‰ÏlîÁ±Ð¿FÇKå<~¡r–ùŵˮsd‘!<“µž½ìüÖF׸ln;^(+¥†|“n{Ñ°å!‘ë†0ÿ‚̯²zY)Qdu¿tïñåâ«ß<“¼]ÉKè;%bGy5âú0Û~»nÀ ñ ˜øÅëqÇ0³U¡Ý¦H«•¶èSÀ¸I˜ãß…VâŠS%s•n|ùÊ$\)Z=^:™êraÑ(“´5ÔÈòõÌà j0‘â¤) ‰uÅ=u)·úô-+¬¸Õ6iÏYÇ Â^ž@µþ®ÔÃ}Þ‹„Ä–q#&ûjªèvk@·$€ó—ïaÑÑ)gmòGŽw‰žÓBnÃ>ImÝ.Âq(øúî’‚ŽÚrÖ®è3 yˆêȶNÄز †LÅ,KæÐ 0K‡Ù{ÿÝœf§@µ"0‰Ùóô«íÅžAl_~¶ÚAÆõ)—µ­Gº˜Ra?ßëJ((²HöRﶫ̫.±a¸x¹ÛÀª‘¶özݨ<wH×µ$ÿæ8HŸC-Y.aq½œË,Õ/—qCõ¿*°¸#ÔI®Uð$@—#44LÚƒ{“¯¤ôj/Þþ'é'dÏ•–xFÞ.;¨>bîC±ÀZîg^%65­ßªhçÅ>Ö…A?[©Qñ ЦFät‡,娇FLøF èÿÿ$ËQÝ-Ê(Õ—«.¦ IøÛ¾gòcç"ýµÎN2Šõÿáö;¦Ô½T–D™²R.£#14‰>­f–b¦j±:ßÏr^ÑC9Ä`Àà@#†´|ÙùýøKÈ^tÓ®|ÅDäÖVp¥T¥7q,né÷Q‘c*LM oÄ#±Õ¸(× 5²—Adõ*¡kîpîP’Pu/OÝkŸC߃ h*o€ÿg«zL[;{c€°Çðʦ{ºq1U£·U¯,q†8”8a]ø {%Js?É%¶&‚‡3Àñb]ú Œø=ðC K{Z ‹;6øµ°ñ {ø®5y“, _ ‰…º³Øùu(;ˆ8®\· ¾rµ÷B^ŸÛôàîQ³Úþ D–<–ºî^ÅšØ`óíÙt•* ø³¾Î,/”E“ôÞ}åà]í kOÖ]ü.€ox"„³ÛVO±/N^^«1e‘ðé7LÎŽxrc¼8'¯þg“Á0¸b;»*†ý‡ðpê!q‚îzìK³»q¯KõrìÑ9ľŒôìû ¥Ï†¢]9ú©ðd©—Âó4äA ü;Mg­¨Øz8Àøk¿e=Ý®µ·[0‹Ï×’…‹ïŠ²>4!“œY!)dÉí]Õn!]µŒïSÓ–k¸ÎNÕb‡þË:…ºC^ A² ¡KœŸ,Iú{¨žÄ~ïé’Ö>✌ Î&dþèí­Ô66¥LHQ›OÏU°Ù6¹$A¥ø\øÅäÐõ_70™4½xû¬ð ;E(ÛO| Þ} «¯Ê76¸%œŒ£8ÊgTàtwÂyMfJ¬ÁéÅ'd£æßsÙuc†0·LÎlI±ºÁdTéhRÄùØ펆ÒñÈÜ3¼ÍJ¾µèV„ÝÌXçDAÍåùð˜|ûu µ¿îÕ;ÿhh˜kVmwôßÊËÓ%ÈÙ0¼ï&q;ö…ÕÉ‘â¦Ì3̼'÷Ýû¡™„—Âë7ŒÈòÌ¡´ñAÅàûoRá‚Bå¼öÝ ã:Fj OÕç-©Ð¼Î/žÇÑǶË6(~Êh,-ûÿÿsß[ 460.299908][T13847] netlink: 'syz.4.2148': attribute type 10 has an invalid length. [ 460.406324][T13872] Cannot find add_set index 0 as target [ 460.519383][T13877] fuse: Bad value for 'fd' [ 460.635419][T13880] lo speed is unknown, defaulting to 1000 [ 461.397312][T13894] fuse: Bad value for 'fd' [ 461.416636][T13896] syzkaller0: entered promiscuous mode [ 461.419954][T13896] syzkaller0: entered allmulticast mode [ 461.430468][T13896] tipc: Started in network mode [ 461.432579][T13896] tipc: Node identity 1af5327c48a3, cluster identity 4711 [ 461.440591][T13896] tipc: Enabled bearer , priority 0 [ 461.995668][ T845] usb 9-1: unable to get BOS descriptor or descriptor too short [ 462.044112][ T845] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 462.052943][ T845] usb 9-1: can't read configurations, error -71 [ 462.282284][T13906] SET target dimension over the limit! [ 462.295643][T13895] tipc: Resetting bearer [ 462.341200][T13895] tipc: Disabling bearer [ 463.311444][ T43] audit: type=1804 audit(1785671521.302:671): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2166" name="/newroot/538/file1/file0" dev="9p" ino=81789177 res=1 errno=0 [ 463.477048][T13927] 9p: Bad value for 'wfdno' [ 464.304072][T13935] Cannot find add_set index 0 as target [ 464.356971][T13939] program syz.4.2174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.433942][T13943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2177'. [ 464.566841][ T43] audit: type=1804 audit(1785671522.552:672): pid=13951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2180" name="/newroot/254/file1/file0" dev="9p" ino=81789177 res=1 errno=0 [ 464.782163][T13958] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 464.786833][T13958] overlayfs: failed to set xattr on upper [ 464.789098][T13958] overlayfs: ...falling back to redirect_dir=nofollow. [ 464.791502][T13958] overlayfs: ...falling back to index=off. [ 464.793518][T13958] overlayfs: conflicting lowerdir path [ 465.365340][ T43] audit: type=1326 audit(1785671523.352:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.1.2182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 465.368929][T13965] netlink: 'syz.1.2182': attribute type 1 has an invalid length. [ 465.378424][ T43] audit: type=1326 audit(1785671523.352:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.1.2182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 465.385336][ T43] audit: type=1326 audit(1785671523.352:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.1.2182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 465.392389][ T43] audit: type=1326 audit(1785671523.352:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.1.2182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 465.399764][ T43] audit: type=1326 audit(1785671523.352:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.1.2182" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 465.411069][ T43] audit: type=1326 audit(1785671523.352:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.1.2182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 465.418507][ T43] audit: type=1326 audit(1785671523.352:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.1.2182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 465.425297][ T43] audit: type=1326 audit(1785671523.352:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.1.2182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 465.480480][T13969] SET target dimension over the limit! [ 465.499178][T13965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.512787][T13967] batman_adv: batadv0: Interface deactivated: dummy0 [ 465.528004][T13967] batman_adv: batadv0: Removing interface: dummy0 [ 465.541533][T13967] bond3: (slave dummy0): making interface the new active one [ 465.549671][T13967] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 466.067218][ T50] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 466.217460][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 466.223598][ T50] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 466.226395][ T50] usb 6-1: config 0 has no interface number 0 [ 466.228749][ T50] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 466.232444][ T50] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 466.236335][ T50] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 53, changing to 9 [ 466.240237][ T50] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 16760, setting to 1024 [ 466.249212][ T50] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 466.254327][ T50] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 466.257858][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.264199][ T50] usb 6-1: config 0 descriptor?? [ 466.273015][ T50] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 466.478946][ T42] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 466.649998][ T42] usb 7-1: config 6 has an invalid interface number: 7 but max is 0 [ 466.653458][ T42] usb 7-1: config 6 has no interface number 0 [ 466.656011][ T42] usb 7-1: config 6 interface 7 has no altsetting 0 [ 466.661058][ T42] usb 7-1: New USB device found, idVendor=05c6, idProduct=9055, bcdDevice=62.d8 [ 466.665484][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.669063][ T42] usb 7-1: Product: syz [ 466.671642][ T42] usb 7-1: Manufacturer: syz [ 466.673675][ T42] usb 7-1: SerialNumber: syz [ 466.848651][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 466.855175][T13995] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 466.857834][T13995] overlayfs: failed to set xattr on upper [ 466.860019][T13995] overlayfs: ...falling back to redirect_dir=nofollow. [ 466.862556][T13995] overlayfs: ...falling back to index=off. [ 466.867456][T13995] overlayfs: conflicting lowerdir path [ 466.903469][T13999] kvm: pic: non byte read [ 466.905829][T13999] kvm: pic: non byte read [ 466.909919][T13999] kvm: pic: non byte read [ 467.147049][T13999] kvm: pic: non byte read [ 467.577174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 467.650889][T14004] SET target dimension over the limit! [ 468.658103][T14012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2196'. [ 468.755238][ C2] ldusb 6-1:0.55: usb_submit_urb failed (-1) [ 468.759094][ T7971] usb 6-1: USB disconnect, device number 49 [ 468.763475][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 468.774684][ T7971] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 469.523431][ T42] usb 7-1: USB disconnect, device number 23 [ 469.581017][T14025] syzkaller0: entered promiscuous mode [ 469.586524][T14025] syzkaller0: entered allmulticast mode [ 469.671737][T14031] 9p: Bad value for 'wfdno' [ 469.704101][T14031] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 469.724647][T14031] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 469.727668][T14031] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 469.730375][T14031] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 469.734274][T14031] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 469.749493][T14031] pci 0000:00:01.0: Adding to iommu group 1 [ 469.945366][T14036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2203'. [ 469.954291][T14034] SET target dimension over the limit! [ 469.964703][T14031] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 469.966892][T14031] pci 0000:00:01.0: vgaarb: bridge control possible [ 469.968970][T14031] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 469.991321][T14031] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 469.995372][T14031] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 470.007800][T14031] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 470.131719][T14031] [drm] Found bochs VGA, ID 0xb0c5. [ 470.134184][T14031] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 470.207869][T14031] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 470.387282][ T7971] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 470.417506][T14031] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 470.537209][ T7971] usb 6-1: Using ep0 maxpacket: 8 [ 470.667450][ T7971] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 471.077903][ T7971] usb 6-1: config 0 has no interface number 0 [ 471.362153][ T7971] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 471.366824][ T7971] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 471.370922][ T7971] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 53, changing to 9 [ 471.374367][ T7971] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 16760, setting to 1024 [ 471.378564][ T7971] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 471.382596][ T7971] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 471.385375][ T7971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.389759][ T7971] usb 6-1: config 0 descriptor?? [ 471.402518][ T7971] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 471.745433][T14063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2210'. [ 472.452919][T14075] Cannot find add_set index 0 as target [ 472.542883][T14077] syzkaller0: entered promiscuous mode [ 472.545189][T14077] syzkaller0: entered allmulticast mode [ 473.131301][ T42] usb 6-1: USB disconnect, device number 50 [ 473.135003][ T42] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 473.699837][T14095] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 473.723107][T14096] 9p: Bad value for 'wfdno' [ 474.508981][T14102] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 474.530870][T14102] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 474.533786][T14102] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 474.538164][T14102] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 474.543454][T14102] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 474.757979][T14102] pci 0000:00:01.0: Adding to iommu group 1 [ 474.763158][T14102] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 474.765328][T14102] pci 0000:00:01.0: vgaarb: bridge control possible [ 474.767449][T14102] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 474.778896][T14102] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 474.781598][T14102] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 474.790010][T14102] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 474.816960][T14102] [drm] Found bochs VGA, ID 0xb0c5. [ 474.825277][T14102] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 474.844922][T14106] syzkaller0: entered promiscuous mode [ 474.847386][T14106] syzkaller0: entered allmulticast mode [ 474.873436][T14102] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 474.972096][T14102] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 475.225057][T14123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.229082][T14123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.033855][T14150] FAULT_INJECTION: forcing a failure. [ 476.033855][T14150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.038071][T14150] CPU: 1 UID: 0 PID: 14150 Comm: syz.2.2231 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.038089][T14150] Tainted: [L]=SOFTLOCKUP [ 476.038094][T14150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 476.038101][T14150] Call Trace: [ 476.038119][T14150] [ 476.038124][T14150] dump_stack_lvl+0x100/0x190 [ 476.038213][T14150] should_fail_ex.cold+0x5/0xa [ 476.038227][T14150] _copy_to_user+0x32/0xd0 [ 476.038271][T14150] sctp_getsockopt+0x2ee2/0x7090 [ 476.038348][T14150] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 476.038374][T14150] ? __lock_acquire+0x49f/0x1a40 [ 476.038401][T14150] ? __pfx_sctp_getsockopt+0x10/0x10 [ 476.038415][T14150] ? _parse_integer_limit+0x1ac/0x220 [ 476.038434][T14150] ? __pfx___might_resched+0x10/0x10 [ 476.038456][T14150] ? aa_sk_perm+0x309/0xaa0 [ 476.038472][T14150] ? __pfx_aa_sk_perm+0x10/0x10 [ 476.038491][T14150] ? aa_sock_opt_perm+0xfe/0x1b0 [ 476.038503][T14150] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 476.038552][T14150] do_sock_getsockopt+0x50a/0x6e0 [ 476.038569][T14150] ? __lock_acquire+0x49f/0x1a40 [ 476.038588][T14150] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 476.038604][T14150] ? find_held_lock+0x2b/0x80 [ 476.038621][T14150] ? __fget_files+0x21f/0x3d0 [ 476.038640][T14150] __sys_getsockopt+0x133/0x1d0 [ 476.038660][T14150] ? __ia32_sys_getsockopt+0xbc/0x160 [ 476.038676][T14150] __ia32_sys_getsockopt+0xbc/0x160 [ 476.038691][T14150] ? __do_fast_syscall_32+0x98/0x970 [ 476.038726][T14150] ? lockdep_hardirqs_on+0x78/0x100 [ 476.038741][T14150] __do_fast_syscall_32+0xe7/0x970 [ 476.038756][T14150] ? lockdep_hardirqs_on+0x78/0x100 [ 476.038772][T14150] do_fast_syscall_32+0x32/0x70 [ 476.038788][T14150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.038804][T14150] RIP: 0023:0xf7f52fec [ 476.038819][T14150] Code: Unable to access opcode bytes at 0xf7f52fc2. [ 476.038834][T14150] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 476.038845][T14150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 476.038853][T14150] RDX: 000000000000000a RSI: 0000000080000040 RDI: 0000000080000080 [ 476.038859][T14150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.038866][T14150] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 476.038873][T14150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.038887][T14150] [ 476.154284][T14157] syzkaller0: entered promiscuous mode [ 476.156614][T14157] syzkaller0: entered allmulticast mode [ 476.313776][T14162] IPv6: NLM_F_CREATE should be specified when creating new route [ 476.316529][T14162] IPv6: Can't replace route, no match found [ 476.447323][ T41] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 476.597215][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 476.602229][ T41] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 476.606298][ T41] usb 9-1: config 0 has no interface number 0 [ 476.608694][ T41] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.613381][ T41] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 476.620354][ T41] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 476.623942][ T41] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 476.630511][ T41] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 476.636423][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.644735][ T41] usb 9-1: config 0 descriptor?? [ 476.651376][ T41] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 476.998670][ T43] kauditd_printk_skb: 134 callbacks suppressed [ 476.998688][ T43] audit: type=1804 audit(1785671534.992:815): pid=14169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2238" name="/newroot/534/file1/file0" dev="9p" ino=81789177 res=1 errno=0 [ 477.500322][T14186] lo speed is unknown, defaulting to 1000 [ 478.258596][T14194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.561557][ T43] audit: type=1804 audit(1785671536.552:816): pid=14202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2247" name="/newroot/40/file1/file0" dev="9p" ino=81789177 res=1 errno=0 [ 478.696748][T14198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2246'. [ 479.229114][ T41] usb 9-1: USB disconnect, device number 32 [ 479.239534][ T41] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 479.268354][T14213] syzkaller0: entered promiscuous mode [ 479.270152][T14213] syzkaller0: entered allmulticast mode [ 479.348203][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2254'. [ 479.472798][ T43] audit: type=1804 audit(1785671537.462:817): pid=14223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2256" name="/newroot/269/file1/file0" dev="9p" ino=81789177 res=1 errno=0 [ 479.774993][T14229] netlink: 'syz.4.2257': attribute type 1 has an invalid length. [ 480.127303][ T1041] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 480.244563][T14243] binder: 14242:14243 ioctl c0306201 0 returned -14 [ 480.248597][T14243] binder: 14242:14243 ioctl c0306201 80000140 returned -11 [ 480.309386][ T1041] usb 9-1: Using ep0 maxpacket: 8 [ 480.316008][ T1041] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 480.320055][ T1041] usb 9-1: config 0 has no interface number 0 [ 480.322996][ T1041] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 480.330269][ T1041] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 480.335066][ T1041] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 480.341562][ T1041] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 480.346628][ T1041] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 480.351127][ T1041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.358444][T14247] binder: 14240:14247 ioctl 40046205 0 returned -22 [ 480.362957][ T1041] usb 9-1: config 0 descriptor?? [ 480.375032][ T1041] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 480.588295][ T845] usb 9-1: USB disconnect, device number 33 [ 480.596254][ T845] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 480.718796][ T5749] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 480.801880][T14256] fuse: Bad value for 'fd' [ 481.111285][T14261] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 481.115652][T14261] bond4 (unregistering): Released all slaves [ 481.327237][T14268] SET target dimension over the limit! [ 481.458545][T14275] tmpfs: Unknown parameter '00000000000000000000004ÿÿ' [ 481.597019][T14282] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 481.600038][T14282] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 481.604084][T14282] vhci_hcd vhci_hcd.0: Device attached [ 481.818855][T14292] wg2 speed is unknown, defaulting to 1000 [ 481.826859][T14292] wg2 speed is unknown, defaulting to 1000 [ 481.838027][T14292] wg2 speed is unknown, defaulting to 1000 [ 481.892939][ T845] usb 42-1: SetAddress Request (18) to port 0 [ 481.897561][ T845] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 482.107242][ T41] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 482.199811][T14283] vhci_hcd: connection reset by peer [ 482.204006][T12223] vhci_hcd vhci_hcd.2: stop threads [ 482.205729][T12223] vhci_hcd vhci_hcd.2: release socket [ 482.208822][T12223] vhci_hcd vhci_hcd.2: disconnect device [ 482.241006][T14292] infiniband syz2: set active [ 482.242801][ T50] wg2 speed is unknown, defaulting to 1000 [ 482.251890][T14292] infiniband syz2: added wg2 [ 482.264396][T14292] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 482.267191][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 482.269688][T14292] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 482.272830][ T41] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 482.277505][T14292] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 482.281565][ T41] usb 6-1: config 0 has no interface number 0 [ 482.286237][ T41] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 482.290703][ T41] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 482.294780][ T41] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 482.299259][ T41] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 482.304152][ T41] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 482.307712][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.313230][ T41] usb 6-1: config 0 descriptor?? [ 482.314718][T14292] RDS/IB: syz2: added [ 482.317720][T14292] smc: adding ib device syz2 with port count 1 [ 482.319853][T14292] smc: ib device syz2 port 1 has no pnetid [ 482.322318][ T41] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 482.325724][ T50] wg2 speed is unknown, defaulting to 1000 [ 482.333387][T14292] wg2 speed is unknown, defaulting to 1000 [ 482.478084][T14292] wg2 speed is unknown, defaulting to 1000 [ 482.523806][ T42] usb 6-1: USB disconnect, device number 51 [ 482.539790][ T42] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 482.693130][T14292] wg2 speed is unknown, defaulting to 1000 [ 482.883391][T14292] wg2 speed is unknown, defaulting to 1000 [ 482.973969][T14292] wg2 speed is unknown, defaulting to 1000 [ 483.436220][T14322] fuse: Bad value for 'fd' [ 483.742204][T14331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.746156][T14331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.874185][T14335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.878873][T14335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.891621][T14335] dvmrp0: entered allmulticast mode [ 483.903041][T14335] netlink: 'syz.0.2289': attribute type 10 has an invalid length. [ 483.936113][ T5841] syzkaller0: tun_net_xmit 76 [ 483.940507][ T5841] syzkaller0: tun_net_xmit 48 [ 483.957423][ T42] syzkaller0: tun_net_xmit 76 [ 483.960185][T14335] syzkaller0: create flow: hash 561431985 index 1 [ 483.997830][T14334] syzkaller0: delete flow: hash 561431985 index 1 [ 484.285312][T14338] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 484.562326][T14343] SET target dimension over the limit! [ 486.965026][ T845] usb 42-1: device descriptor read/8, error -110 [ 487.219438][T14360] IPv6: NLM_F_CREATE should be specified when creating new route [ 487.233046][T14358] syzkaller0: entered promiscuous mode [ 487.234642][T14360] IPv6: Can't replace route, no match found [ 487.235493][T14358] syzkaller0: entered allmulticast mode [ 487.367826][ T845] usb usb42-port1: attempt power cycle [ 487.436454][T14367] tcpci 0-0050: Can't find connector node. [ 487.440317][T14367] tcpci 0-0050: probe with driver tcpci failed with error -22 [ 487.445497][T14367] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 487.718859][T14379] Cannot find add_set index 2 as target [ 487.941134][ T845] usb usb42-port1: unable to enumerate USB device [ 488.441931][T14388] lo speed is unknown, defaulting to 1000 [ 488.589230][T14388] wg2 speed is unknown, defaulting to 1000 [ 488.658859][ T42] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 488.808849][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.814005][ T42] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 488.850377][ T42] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 488.856064][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.861760][ T42] usb 6-1: config 0 descriptor?? [ 488.862110][T14399] syzkaller0: entered promiscuous mode [ 488.866273][T14399] syzkaller0: entered allmulticast mode [ 488.868623][ T42] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 488.868714][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 488.879047][T14399] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 488.881826][T14399] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 488.886779][T14399] vhci_hcd vhci_hcd.0: Device attached [ 488.888353][ T42] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 488.895207][ T42] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 488.897689][ T42] usb 6-1: media controller created [ 488.900569][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.905157][T14401] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 488.915217][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 488.916935][ T5841] vhci_hcd vhci_hcd.0: release socket [ 488.937082][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 488.965504][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 488.969493][ T42] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 488.985032][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input36 [ 488.997358][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 489.004401][ T42] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 489.085983][T14386] dvb-usb: bulk message failed: -22 (2/0) [ 489.096133][T14386] binder: 14385:14386 ioctl c0306201 80000480 returned -14 [ 489.103413][ T42] usb 6-1: USB disconnect, device number 52 [ 489.197730][ T42] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 489.668331][T14409] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2313'. [ 489.672249][T14409] openvswitch: netlink: Flow key attr not present in new flow. [ 489.782736][T14414] 9p: Bad value for 'wfdno' [ 489.846722][ T43] audit: type=1326 audit(1785671547.832:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14417 comm="syz.4.2317" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7fec code=0x0 [ 489.861048][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2316'. [ 489.865566][ T5740] kernel write not supported for file /1780/net/ip_vs_stats (pid: 5740 comm: kworker/2:3) [ 489.974003][T14423] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2318'. [ 490.008594][T14420] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 490.037279][T14420] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 490.040796][T14420] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 490.106478][T14432] ISOFS: Unable to identify CD-ROM format. [ 490.575485][T14420] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 490.579664][T14420] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 490.605936][T14420] pci 0000:00:01.0: Adding to iommu group 1 [ 490.617515][T14420] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 490.619741][T14420] pci 0000:00:01.0: vgaarb: bridge control possible [ 490.621861][T14420] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 490.636202][T14420] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 490.639844][T14420] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 490.651420][T14420] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 490.670817][T14420] [drm] Found bochs VGA, ID 0xb0c5. [ 490.672667][T14420] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 490.687448][T14420] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 490.848141][T14420] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 491.100858][T14444] netlink: 'syz.1.2324': attribute type 1 has an invalid length. [ 491.119135][T14444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2324'. [ 491.122876][T14442] netlink: 'syz.4.2325': attribute type 10 has an invalid length. [ 491.125119][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2324'. [ 491.129431][T14442] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 491.271494][T14450] ehci-pci 0000:00:1d.7: remove, state 4 [ 491.280992][T14450] usb usb1: USB disconnect, device number 1 [ 491.420527][T14450] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 491.709849][ T50] usb 2-1: reset full-speed USB device number 2 using uhci_hcd [ 492.069183][T14451] usb 2-1: USB disconnect, device number 2 [ 492.633269][T14491] lo speed is unknown, defaulting to 1000 [ 492.828602][T14451] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 492.852726][T14451] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 492.867864][T14451] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 492.875036][T14491] wg2 speed is unknown, defaulting to 1000 [ 492.893102][T14451] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 492.913093][T14451] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 492.917886][T14451] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 492.923137][T14451] usb usb1: Product: EHCI Host Controller [ 492.925509][T14451] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 492.928239][T14451] usb usb1: SerialNumber: 0000:00:1d.7 [ 492.968524][T14451] hub 1-0:1.0: USB hub found [ 492.977951][T14451] hub 1-0:1.0: 6 ports detected [ 493.048647][T14451] hub 2-0:1.0: USB hub found [ 493.054909][T14451] hub 2-0:1.0: 2 ports detected [ 493.111233][T14451] hub 3-0:1.0: USB hub found [ 493.120508][T14451] hub 3-0:1.0: 2 ports detected [ 493.173847][T14451] hub 4-0:1.0: USB hub found [ 493.178779][T14451] hub 4-0:1.0: 2 ports detected [ 493.267448][ T42] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 493.273438][T14499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2336'. [ 493.461303][ T42] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 493.465466][ T42] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 493.472742][ T42] usb 1-1: Product: QEMU USB Tablet [ 493.474840][ T42] usb 1-1: Manufacturer: QEMU [ 493.477547][ T42] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 493.523551][ T42] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000F/input/input37 [ 493.557280][ T41] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 493.609676][ T42] hid-generic 0003:0627:0001.000F: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 493.761391][ T41] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 493.765337][ T41] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 493.770279][ T41] usb 7-1: Product: syz [ 493.772628][ T41] usb 7-1: Manufacturer: syz [ 493.776885][ T41] usb 7-1: SerialNumber: syz [ 493.793454][ T41] usb 7-1: config 0 descriptor?? [ 494.095914][ T41] usb 7-1: USB disconnect, device number 24 [ 494.685508][T14526] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 494.877956][ T41] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 495.057293][ T41] usb 7-1: Using ep0 maxpacket: 16 [ 495.059932][ T41] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 495.063973][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.068036][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.072407][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.076607][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.085341][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.090078][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.095211][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.099515][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.104256][ T41] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 495.107884][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 495.110651][ T41] usb 7-1: SerialNumber: syz [ 495.115911][ T41] usb 7-1: config 0 descriptor?? [ 495.121426][ T41] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input38 [ 495.322029][ T5136] bcm5974 7-1:0.0: could not read from device [ 495.328645][ T5136] bcm5974 7-1:0.0: could not read from device [ 495.334816][ T5136] bcm5974 7-1:0.0: could not read from device [ 495.339481][ T5136] bcm5974 7-1:0.0: could not read from device [ 495.340627][ T41] usb 7-1: USB disconnect, device number 25 [ 495.576376][T14544] SET target dimension over the limit! [ 495.612805][T14548] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 496.177267][ T42] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 496.246859][T14558] new mount options do not match the existing superblock, will be ignored [ 496.329477][ T42] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 496.333110][ T42] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 496.337429][ T42] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 496.341259][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 496.345756][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 496.353027][ T42] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 496.357062][ T42] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 496.360958][ T42] usb 7-1: Product: syz [ 496.362919][ T42] usb 7-1: Manufacturer: syz [ 496.372743][ T42] cdc_wdm 7-1:1.0: skipping garbage [ 496.375905][ T42] cdc_wdm 7-1:1.0: skipping garbage [ 496.380345][ T42] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 496.382967][ T42] cdc_wdm 7-1:1.0: Unknown control protocol [ 496.540289][T14561] binder: 14559:14561 ioctl c0306201 0 returned -14 [ 496.544934][T14561] binder: 14559:14561 ioctl c0306201 80000140 returned -11 [ 496.775607][T14576] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 496.799108][T14576] pim6reg: left allmulticast mode [ 498.602867][T14592] binder: 14591:14592 ioctl 1 80000040 returned -22 [ 498.634410][T14599] binder: 14598:14599 ioctl c0306201 0 returned -14 [ 498.637345][T14599] binder: 14598:14599 ioctl c0306201 80000140 returned -11 [ 498.979710][ T7971] usb 7-1: USB disconnect, device number 26 [ 499.114044][T14611] FAULT_INJECTION: forcing a failure. [ 499.114044][T14611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.118369][T14611] CPU: 3 UID: 0 PID: 14611 Comm: syz.4.2369 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.118399][T14611] Tainted: [L]=SOFTLOCKUP [ 499.118403][T14611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 499.118410][T14611] Call Trace: [ 499.118433][T14611] [ 499.118438][T14611] dump_stack_lvl+0x100/0x190 [ 499.118543][T14611] should_fail_ex.cold+0x5/0xa [ 499.118558][T14611] _copy_from_user+0x2e/0xd0 [ 499.118602][T14611] bpf_test_init.isra.0+0xaf/0x100 [ 499.118679][T14611] bpf_prog_test_run_skb+0x497/0x3540 [ 499.118696][T14611] ? find_held_lock+0x2b/0x80 [ 499.118719][T14611] ? __fget_files+0x1c1/0x3d0 [ 499.118739][T14611] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 499.118753][T14611] ? fput+0x79/0x100 [ 499.118767][T14611] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 499.118780][T14611] __sys_bpf+0x2a12/0x4e80 [ 499.118797][T14611] ? __pfx___sys_bpf+0x10/0x10 [ 499.118810][T14611] ? __rcu_read_unlock+0x26a/0x5e0 [ 499.118820][T14611] ? rcu_is_watching+0x12/0xc0 [ 499.118835][T14611] ? __rcu_read_unlock+0x27f/0x5e0 [ 499.118849][T14611] ? proc_fail_nth_write+0x9f/0x220 [ 499.118870][T14611] ? find_held_lock+0x2b/0x80 [ 499.118909][T14611] ? rcu_read_lock_any_held+0x6a/0xa0 [ 499.118931][T14611] ? find_held_lock+0x2b/0x80 [ 499.118949][T14611] ? ksys_write+0x190/0x250 [ 499.118965][T14611] ? ksys_write+0x190/0x250 [ 499.118997][T14611] ? fput+0x79/0x100 [ 499.119012][T14611] ? __ia32_sys_bpf+0xcc/0x170 [ 499.119024][T14611] __ia32_sys_bpf+0xcc/0x170 [ 499.119037][T14611] ? __do_fast_syscall_32+0x98/0x970 [ 499.119109][T14611] __do_fast_syscall_32+0xe7/0x970 [ 499.119129][T14611] ? lockdep_hardirqs_on+0x78/0x100 [ 499.119148][T14611] do_fast_syscall_32+0x32/0x70 [ 499.119165][T14611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 499.119180][T14611] RIP: 0023:0xf7ff7fec [ 499.119196][T14611] Code: Unable to access opcode bytes at 0xf7ff7fc2. [ 499.119213][T14611] RSP: 002b:00000000f547450c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 499.119225][T14611] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 499.119232][T14611] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.119239][T14611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 499.119245][T14611] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 499.119252][T14611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.119266][T14611] [ 499.156865][T14603] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 499.207420][T14603] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 499.210225][T14603] vhci_hcd vhci_hcd.0: Device attached [ 499.215486][T14612] vhci_hcd: connection closed [ 499.218491][ T5792] vhci_hcd vhci_hcd.0: stop threads [ 499.222373][ T5792] vhci_hcd vhci_hcd.0: release socket [ 499.224543][ T5792] vhci_hcd vhci_hcd.0: disconnect device [ 499.304332][T14620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2371'. [ 499.569255][T14618] CIFS: Attempting to mount //127.0.0.1/share [ 499.600100][T14618] CIFS: VFS: Error connecting to socket. Aborting operation. [ 499.602629][T14618] CIFS: VFS: cifs_mount failed w/return code = -4 [ 499.772495][T14632] binder: 14631:14632 ioctl c0306201 80000140 returned -11 [ 499.878112][ T43] audit: type=1800 audit(1785671557.862:819): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2377" name="cluster_name" dev="configfs" ino=54692 res=0 errno=0 [ 500.702872][T14652] binder: 14651:14652 ioctl c0306201 80000140 returned -11 [ 500.864279][ T5841] bond0: (slave bridge0): link status definitely down, disabling slave [ 500.885538][ T5841] bridge0: left promiscuous mode [ 500.911074][ T5841] bridge0: left allmulticast mode [ 500.915675][ T5756] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 500.934801][ T5756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 500.939412][ T5756] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 500.945603][ T5756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 500.947671][ T5841] bond0: now running without any active interface! [ 500.948960][ T5756] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 500.986695][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.257397][ T5826] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 501.387903][ T5826] usb 9-1: device descriptor read/64, error -71 [ 501.593436][T14660] lo speed is unknown, defaulting to 1000 [ 501.650933][ T5826] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 501.816581][ T5826] usb 9-1: device descriptor read/64, error -71 [ 501.981214][ T5826] usb usb9-port1: attempt power cycle [ 502.320222][T14660] wg2 speed is unknown, defaulting to 1000 [ 502.359134][ T5826] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 502.396244][ T5826] usb 9-1: device descriptor read/8, error -71 [ 502.583784][T14660] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.586483][T14660] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.590213][T14660] bridge_slave_0: entered allmulticast mode [ 502.593458][T14660] bridge_slave_0: entered promiscuous mode [ 502.599538][T14660] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.599706][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2393'. [ 502.601896][T14660] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.608066][T14660] bridge_slave_1: entered allmulticast mode [ 502.610993][T14660] bridge_slave_1: entered promiscuous mode [ 502.647736][T14660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.652396][T14660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.657294][ T5826] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 502.680337][ T5826] usb 9-1: device descriptor read/8, error -71 [ 502.712675][T14660] team0: Port device team_slave_0 added [ 502.732274][T14660] team0: Port device team_slave_1 added [ 502.759701][T14660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.762683][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.770815][T14660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.775855][T14660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.777004][T14696] 9p: Bad value for 'rfdno' [ 502.780102][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.788124][T14660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.797566][ T5826] usb usb9-port1: unable to enumerate USB device [ 502.801801][ T5792] bridge_slave_1: left allmulticast mode [ 502.803749][ T5792] bridge_slave_1: left promiscuous mode [ 502.805643][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.818784][ T5792] bridge_slave_0: left allmulticast mode [ 502.824574][ T5792] bridge_slave_0: left promiscuous mode [ 502.826472][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.832970][ T5792] dvmrp0: left allmulticast mode [ 502.956778][ T5792] bond3 (unregistering): (slave ipip0): Releasing backup interface [ 502.993289][ T5792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.998544][ T5792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.003110][ T5792] bond0 (unregistering): (slave bond1): Releasing backup interface [ 503.019485][ T5792] bond0 (unregistering): Released all slaves [ 503.024834][ T5792] bond1 (unregistering): Released all slaves [ 503.032689][ T5792] bond2 (unregistering): Released all slaves [ 503.041907][ T5792] bond3 (unregistering): Released all slaves [ 503.054320][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5 [ 503.071390][T14660] hsr_slave_0: entered promiscuous mode [ 503.073953][T14660] hsr_slave_1: entered promiscuous mode [ 503.076054][T14660] debugfs: 'hsr0' already exists in 'hsr' [ 503.077959][T14660] Cannot create hsr debugfs directory [ 503.119273][ T5749] Bluetooth: hci2: command tx timeout [ 503.196666][ T5792] tipc: Left network mode [ 503.249938][T14707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2395'. [ 503.558000][ T41] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 503.579024][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6 [ 503.807738][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 503.820103][ T41] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 503.822904][ T41] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 503.825661][ T41] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 503.829393][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 503.832398][ T41] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 503.835365][ T41] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 503.839487][ T41] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 503.842339][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.849421][ T41] usb 7-1: config 0 descriptor?? [ 503.890169][T14725] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 503.892346][T14725] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 503.913097][T14725] vhci_hcd vhci_hcd.0: Device attached [ 504.155423][ T41] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 504.178969][ T845] usb 40-1: SetAddress Request (14) to port 0 [ 504.181791][ T845] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 504.491432][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.499691][T14726] vhci_hcd: connection reset by peer [ 504.502671][ T12] vhci_hcd vhci_hcd.1: stop threads [ 504.502798][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.505014][ T5792] hsr_slave_0: left promiscuous mode [ 504.505097][ T12] vhci_hcd vhci_hcd.1: release socket [ 504.505148][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 504.521266][ T50] usb 7-1: USB disconnect, device number 27 [ 504.523996][ T5792] hsr_slave_1: left promiscuous mode [ 504.526068][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.531296][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.535567][ T50] usblp0: removed [ 504.740898][ T5792] team0 (unregistering): Port device team_slave_1 removed [ 504.822067][T14746] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 504.879741][T14660] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 504.889065][T14660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 504.892689][T14660] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 504.893166][T14750] SET target dimension over the limit! [ 504.900221][T14660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.903577][T14660] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 504.964775][T14660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.968818][T14660] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 505.012250][T14660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.030740][T14752] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 505.033878][T14752] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 505.104843][T14660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.140274][T14660] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.153855][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.156546][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.178052][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.180600][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.194344][T14760] netlink: 'syz.1.2404': attribute type 10 has an invalid length. [ 505.197184][ T5749] Bluetooth: hci2: command tx timeout [ 505.252047][ T5792] IPVS: stop unused estimator thread 0... [ 505.438509][ T9] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 505.560425][T14775] 8021q: adding VLAN 0 to HW filter on device bond4 [ 505.581651][ T9] usb 9-1: device descriptor read/64, error -71 [ 505.704477][T14660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.722175][T14785] SET target dimension over the limit! [ 505.731073][T14660] veth0_vlan: entered promiscuous mode [ 505.744086][T14660] veth1_vlan: entered promiscuous mode [ 505.761813][T14660] veth0_macvtap: entered promiscuous mode [ 505.761996][T14787] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 505.766349][T14660] veth1_macvtap: entered promiscuous mode [ 505.790293][T14660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.798458][T14660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.924638][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.927427][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.928721][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.933092][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.951981][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.954882][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.968104][T14791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2412'. [ 505.972275][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2412'. [ 506.008931][T13298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.018058][T13298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.070526][ T9] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 506.188416][T14793] overlay: ./file0 is not a directory [ 506.242733][T14799] random: crng reseeded on system resumption [ 506.354250][T14802] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 506.358021][T14802] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 506.360733][T14802] CPU: 2 UID: 0 PID: 14802 Comm: syz.1.2413 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.364142][T14802] Tainted: [L]=SOFTLOCKUP [ 506.365471][T14802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 506.368650][T14802] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 506.373684][T14802] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 506.379731][T14802] RSP: 0000:ffffc90002eaf9a0 EFLAGS: 00010202 [ 506.381652][T14802] RAX: dffffc0000000000 RBX: ffff888079448158 RCX: ffffc90025921000 [ 506.384137][T14802] RDX: 00000000000000e6 RSI: ffffffff87e55536 RDI: ffff888079448128 [ 506.386590][T14802] RBP: ffff888079448150 R08: 0000000000000001 R09: 0000000000000000 [ 506.389089][T14802] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020 [ 506.391558][T14802] R13: ffff888079448128 R14: ffff88806cf45120 R15: ffff888079448000 [ 506.394000][T14802] FS: 0000000000000000(0000) GS:ffff888096ddf000(0063) knlGS:00000000f5424b40 [ 506.396745][T14802] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 506.398832][T14802] CR2: 00000000f4bdeda4 CR3: 0000000060d41000 CR4: 0000000000352ef0 [ 506.401336][T14802] Call Trace: [ 506.402405][T14802] [ 506.403359][T14802] ? f_midi2_unbind+0x146/0x800 [ 506.404893][T14802] f_midi2_unbind+0x265/0x800 [ 506.406371][T14802] ? do_raw_spin_lock+0x128/0x260 [ 506.407942][T14802] ? __pfx_f_midi2_unbind+0x10/0x10 [ 506.409598][T14802] purge_configs_funcs+0x285/0x510 [ 506.411251][T14802] configfs_composite_unbind+0xae/0x210 [ 506.412979][T14802] gadget_unbind_driver+0x20c/0x4f0 [ 506.414609][T14802] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 506.416395][T14802] device_remove+0xcb/0x180 [ 506.417869][T14802] device_release_driver_internal+0x44e/0x620 [ 506.419781][T14802] driver_detach+0xd8/0x1b0 [ 506.421230][T14802] bus_remove_driver+0x13b/0x2e0 [ 506.422782][T14802] driver_unregister+0x76/0xb0 [ 506.424291][T14802] usb_gadget_unregister_driver+0x49/0x70 [ 506.426063][T14802] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 506.427857][T14802] configfs_write_iter+0x302/0x4e0 [ 506.429466][T14802] vfs_write+0x6ac/0x1050 [ 506.430824][T14802] ? __pfx_configfs_write_iter+0x10/0x10 [ 506.432607][T14802] ? __pfx_vfs_write+0x10/0x10 [ 506.434106][T14802] ? find_held_lock+0x2b/0x80 [ 506.435607][T14802] ksys_write+0x12a/0x250 [ 506.436966][T14802] ? __pfx_ksys_write+0x10/0x10 [ 506.438475][T14802] __do_fast_syscall_32+0xe7/0x970 [ 506.440055][T14802] do_fast_syscall_32+0x32/0x70 [ 506.441597][T14802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.443573][T14802] RIP: 0023:0xf7fa6fec [ 506.444858][T14802] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 506.446915][T14802] RSP: 002b:00000000f542450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 506.449531][T14802] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800002c0 [ 506.452007][T14802] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.454448][T14802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 506.456915][T14802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.459412][T14802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.461886][T14802] [ 506.462896][T14802] Modules linked in: [ 506.464701][T14802] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 506.477473][T14802] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 506.487868][T14802] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 506.523361][T14802] RSP: 0000:ffffc90002eaf9a0 EFLAGS: 00010202 [ 506.525345][T14802] RAX: dffffc0000000000 RBX: ffff888079448158 RCX: ffffc90025921000 [ 506.537142][T14802] RDX: 00000000000000e6 RSI: ffffffff87e55536 RDI: ffff888079448128 [ 506.555682][T14802] RBP: ffff888079448150 R08: 0000000000000001 R09: 0000000000000000 [ 506.574144][T14802] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020 [ 506.593419][T14802] R13: ffff888079448128 R14: ffff88806cf45120 R15: ffff888079448000 [ 506.599619][T14802] FS: 0000000000000000(0000) GS:ffff888096edf000(0063) knlGS:00000000f5424b40 [ 506.622189][T14802] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 506.647287][T14802] CR2: 00000000f7228a50 CR3: 0000000060d41000 CR4: 0000000000352ef0 [ 506.661721][T14802] Kernel panic - not syncing: Fatal exception [ 506.664808][T14802] Kernel Offset: disabled [ 506.666179][T14802] Rebooting in 86400 seconds..