last executing test programs: 4m4.072360492s ago: executing program 2 (id=1633): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x61) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0xfffffffffffffff7, 0x10b242) ioctl$HIDIOCGRDESC(r6, 0x40305829, &(0x7f0000000400)={0xd, "19c32e2600080000000200006d"}) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5a8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) 4m3.908750034s ago: executing program 1 (id=1634): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="330320000a00140000007ef52f555f2a0c0900000000000000f775dd3baa4b1f0f858c4632f47042195e1a5dfae54c80a1f9b352ab47b598677364f82acca2fbe041d3871c", 0x45, 0x300000000000000, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @multicast}, 0x14) 4m3.245531273s ago: executing program 1 (id=1636): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffc}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x4, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000000)="9dba4000ec0f01dd66b9020a00000f32653632c60f20d86635080000000f22d8bad10466b80010000066ef0f08f30f0f32a70fc72e0a00", 0x37}], 0x1, 0x24, &(0x7f0000000240)=[@flags], 0x1) r6 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4m2.702250664s ago: executing program 0 (id=1638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x2, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) setregid(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xffb) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0x1000000d}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x398, 0x0, 0x4001, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x70, 0x98, 0x0, {0x22e}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) clock_adjtime(0x2, 0x0) 4m2.272687288s ago: executing program 0 (id=1639): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1434041f130a0300000000636396000000c64002"], 0x14}}, 0x4000040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000700)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0xd, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x5, 0x8, 0x401, 0xfffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x8, 0x80, 0x4, 0x2, 0x10000, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x3d5f, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x6f8, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) 4m1.442394687s ago: executing program 3 (id=1640): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r0, &(0x7f0000000000)=""/193, 0xc1, 0x40004100, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x63, @loopback, 0xfffffa8b}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="53c497faad42f89d2795c18733b5ea50c0ac49425c50339066e856e634be643cd41565ac", 0x24) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0x8, 0x34d, 0x8, 0xfffffffffffffffc}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000240)) r2 = syz_open_dev$hiddev(&(0x7f0000000280), 0xe, 0x0) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f00000002c0)={0x3, 0x200, 0x2f46, 0x6, 0x2, 0x401}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0xffffffffffffffff) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$midi(&(0x7f00000003c0), 0x5c91, 0x44101) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x2ec, 0x11, 0xc, 0x301, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x6}, [@nested={0xe9, 0x1f, 0x0, 0x1, [@nested={0x4, 0x88}, @generic="cecc84d1aff198581a277f29ae467bfe834cd562d94fe5cc506f866021d9f629872a4aa3c4944c0c262af00551", @generic="04985893268719355d1db3fcf746606be7af0f3f6c7e1c4c30ed03e26a447522cd4e32802d9d693c8452b926aef996c0893f42c6591a4afbdc764a03b19ed37e50c6e7daa65a1820fcfbba255dc1a94c6fdbda382315177ff1071fd333b4db054b9655baf56196dd58007e1a", @generic="ddd6741086790c1c78a710e22c7f8a01ad533399fcabf59e225b557c8733ce1f60ebef8d8dc003e1d2aae64cc53463c37e742b687a5df0ea53dd207f257bfe35", @nested={0x4, 0x9f}, @nested={0x4, 0xe8}]}, @nested={0x10, 0x110, 0x0, 0x1, [@typed={0x8, 0xea, 0x0, 0x0, @pid=r4}, @nested={0x4, 0xfb}]}, @generic="21027ee965dca6085104e048a415aa5964939d758f599960a7b020996418f409a9bc63715536af4cfc52c84e15d90875631e2d8e2f3bc2de91986d14aa692a92b27328cf32cf30e214ecd5f8b75910589c741aac71a1075a199a2350e6e4f45e37c09c8681667268b2816e072919e89969876a6b1fa2eafc2afcc195f5098e994037e9be87da67c6da1164bc3fc995d62efb208862c1b3188d33e20400cb03fc7343bb125dad210b7856198b4038843f", @nested={0x123, 0x10, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x124}, @generic="56033c0661c5fdf567bafdf55188c09a175e1cab8bab29428306d9dea15097271246f0e6b71e35a917e42c09b22c2909a9ea56287f4f2fe58258f5c4765cbd94b3f36ba8b2fc2681c49cd445c2d62e8e1263ee8eca737c7b779590d88bc1388007de1507134e17f88eeea093b1bcfc17", @generic="db570d04f2265ce9c614f1f50840348ad66578cc961b974750dc0e47ff08059db2a256b663d94c9f3cb6e89c08980889de6f4fe422708f8bca17d983fe43d9d1d5443d2414165a1248e69c16d5c7e27be1b01348583fc6aa1872d74e7cdf28742c131397294c3f1c3dcfd5d91aa7f7bc527a445dab0d11d7bc6dcc37442a20", @typed={0x14, 0xad, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x7, 0x13b, 0x0, 0x0, @str='\'.\x00'}, @typed={0x8, 0x125, 0x0, 0x0, @fd=r6}]}, @typed={0x8, 0xa2, 0x0, 0x0, @pid=r7}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x40000c1}, 0x9000) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x6) io_setup(0x2e96, &(0x7f00000007c0)=0x0) io_cancel(r8, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x4, 0x8, r0, &(0x7f0000000800)="24ba08503373d5fe459addde94819f536628b6a65740443a4ae1b97d7706f3a1179f71fda5b6f5cc0487451e886db2bb12a7ecaaf837332a3cd777bd2abb", 0x3e, 0x10, 0x0, 0x2}, &(0x7f0000000880)) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000008c0)={0xb30, 0x2e3}) ioctl$BLKCLOSEZONE(r9, 0x40101287, &(0x7f0000000900)={0x9, 0x9}) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000940)={@broadcast}, &(0x7f0000000980)=0xc) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r11, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r12, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000011) setrlimit(0xd, &(0x7f0000000b00)={0x7, 0x10}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000b40)={0x0, 0x0, 0xfffffffffffffffd}) ioctl$int_in(r2, 0x5421, &(0x7f0000000b80)=0x5) 4m1.335576343s ago: executing program 1 (id=1641): r0 = syz_usb_connect_ath9k(0x3, 0x97, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xa4619c63d1ea9ea3}}]}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000), 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, '\b\x00', {0x1, 0x8, 0x5, 0x40}}) r2 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x10}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') preadv(r3, &(0x7f0000000200), 0x1000000000000070, 0x10000, 0x8) prctl$PR_GET_NO_NEW_PRIVS(0x27) connect$unix(r3, &(0x7f0000001000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c00004e1550"]) 4m0.368297536s ago: executing program 0 (id=1642): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x809000}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x401870c8, &(0x7f0000000040)=0x3) 4m0.232729778s ago: executing program 2 (id=1643): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SIOCGETVIFCNT(r2, 0x89e0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req={0x800, 0x1, 0x28, 0x80000000}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r3 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @multicast2}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)=ANY=[@ANYBLOB="0180aaaaaaaaaaaa08004500001c000200000d119078ac1414aae000000100004e250008907800000000"], 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="04000000", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf2514000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) r5 = userfaultfd(0x80801) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100, 0xfffffffd, 0xf8}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x0, @fd_index=0x3, 0xb, 0x0, 0x0, 0x21}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00007e4000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 4m0.232390433s ago: executing program 3 (id=1644): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000073a238f24a6515e7c1c4379f648d84d83e6cf94c83cc0f26817a4455147d836b66dc4cc9a1f0eac9ec7bc1a37169a537ec3253d904f0c4f836fe8f30f24995ef8d77e340b43b72eab26c5ca3e4a8a247eb15540a0d1ae59d4826584423cd6d2de15aacf2a459958dfc1b28a2e83eab970eea35b0f7f34e76df874f3d4d0b2c810abc691c5bcf48b2d798dfd423420f9da3953e9b6f7143cf7cd1e8efa24f37ffb2a7dc6b84c7b0e73e8729b924b8cc084695e1f983dbf36db763f73af01323e32"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) write$P9_RSTATu(r4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="39020000024f000005f8000000000000000000000000010000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb14034354b9fd9ef196a51cd5157adc8103b494e11d00d299988014986ce982cfc26dd7c500f04cd85f2a70f5e9930e97a59a645500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a37002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00000000f9ff000000000000000000", @ANYRES32=0x0, @ANYRESDEC=r4, @ANYRESDEC=0x0], 0x239) 4m0.012502463s ago: executing program 2 (id=1645): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)=0x0) getgroups(0x4, &(0x7f0000004280)=[0x0, 0xee00, 0xee01, 0xffffffffffffffff]) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004300)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004200)=[{&(0x7f0000000500)={0xd8, 0x16, 0x300, 0x70bd27, 0x25dfdbfd, "", [@generic="c3c5bc498c3ecc2e14e10e1f62ef580d29abe50ea84bc38608775e13f4635d1e3f1dae2183f8d9dffe9296025dcfd59a148a84972ac061b4d1d6e7d4381b9a42e49daa249efd1a741d53130ba47f0dfc5512012dbca61618604170cdc83d9bdca83841aba4c65520e0297787be6d80402d6d30368ae6e332b3854600bc3f69f3ed82a3ba006520ec9e7764e8879291b548ab3e9c3cb158f766de70b9937287671c0ab87612", @nested={0x18, 0x15, 0x0, 0x1, [@typed={0x14, 0x121, 0x0, 0x0, @ipv6=@mcast1}]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0xd8}, {&(0x7f00000006c0)={0x10, 0x1b, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x10}, {&(0x7f0000001a00)={0x154, 0x25, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@generic="0278733e0089914a4f1f48ae50003c30542f4910fba08590616daa304be6bd94c1f256c68e2ac43980629159ec2060c7c4593dd88bb9837f09559d993aac2d2df042fca48800cd8ec50fe1b13473100714c17c7ba77a3d151d11bc33b264e9629ddd4f11c2d4", @nested={0xd6, 0xed, 0x0, 0x1, [@generic="00dbff1c8213e0b4ee0696f5aff69066594a937cfbac08c5357e919bbb56f8fc1743351ca85683c481fb268eff89886494f14f24e27df68212404ccadfcec772ab3a951409facb", @generic="8f425d7244cdb56dd1d0c5cfb621784b26de0a08fea3914b25ba5b1c750dc278dd7b07adc0cbc46b1570a55e37f9e051459f45ca3f7efa4bb6ec5ccae26c969ec503f30085fe98d4224e9b82", @typed={0x8, 0xf3, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="b1f3bef61f79e411a70a0e1fdcc9de83cfa1c2dc03e9fc4071fc53fba3d6e8fa8acdd9a586fede03aa6089cbd49977e2406134f2f6743b"]}, @nested={0x4, 0x84, 0x0, 0x1, [@generic]}]}, 0x154}, {&(0x7f0000001c80)={0x100, 0x29, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@typed={0xc, 0x37, 0x0, 0x0, @u64=0x30}, @generic="2cd3f8a8fed0c040b6522a8c38e007c4f1fb3b8f02e4b83e14a7ad3ee196900dade3a89bee31936c6b08fffa8e55acf2bb21b3072d4cbd56cc78e5916dfaeedca8d1ec453c4c79094fb905930201f26188a9941935c655f754aaf0b04ba11d2e606786305bd4cebfbfe848774b8cec58cec8927e6a46c3b5fad9111f1bcb3daf4b83ceae0edd175f4a86a72b93802dc5b0d1a79247ee342dc9b18d5476cbb7ae2b6797f2caa27d8e681d339454744e395417ad8fc87915fe059e8376ebb25ef0612f4f83e64301423fb12686eff92ff75fbf23c2422b26bb328049cf4e52b9854a"]}, 0x100}, {&(0x7f0000001e80)={0x1368, 0x3c, 0x400, 0x70bd29, 0x25dfdbfd, "", [@nested={0x57, 0x43, 0x0, 0x1, [@generic="4bc4e82b5636366621080f66c414b6d48782f67c745707949853dcb786665a57a9cc21", @nested={0x4, 0x118}, @typed={0x8, 0x6c, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xa9}, @typed={0x19, 0x72, 0x0, 0x0, @str='/dev/bus/usb/00#/00#\x00'}, @nested={0x4, 0x81}]}, @nested={0x15a, 0x2b, 0x0, 0x1, [@typed={0xd2, 0xb2, 0x0, 0x0, @binary="b71a94293929260554bcd3857e2596f8951477740378266f1a323dd18c0a7e1b3e515595b11d4de0c2d6825529fc4f0b63bc599bb818faaf8ed7e2b9487118c006be1b20b68c4a89e472949310f555f388378d76ec2464180c84a5a93152bee19db12b2673825486e27fbb9b8af65661aa08b2a12ecdf078850c46cc831fe777f7e1df58912e0fb7baa6e6247640ec5a6baca313650b74fe30dc825820fa8242f5df63de4eebd702e205c71ed9de272d4fd1acfd51770c88638cefdac60345565e27b828a418719795f06ebf3c66"}, @generic="5c2365ca2e61ae26d882cd1c0aa9e46b6bc01b055c57f03d6658be338ad74cc9dd4f9a38b5a7e51706517f611e1b4527101c9f4383cab86226ea2254bafd56e0a34379df0ae7bfd477e0ae408dae4a3ec9fbccd15fca7ddfefba6ae6a26eac296471dd36283a210e4282ca189ee126a05e6e13d4c0adf3adf6f7bd9c8eb4cdf93716"]}, @generic="7d2578907bcea301eb72ba76d42fe9c34a6e0f3ad12bb62cd38efcfcf8f92a738017c67ac82359d36ec1dd4095df536ea0ac7d2deecf3a213ef448ff2ad512a5447d02e8c68955307e4569e36728557416d639434ddd365bbb152a1e2dfc9f2085cddf8d787f92368979bbe1b457ea939d39eb45ab21fa20371b9eb6e3a5a24cdad5b1a2fdc123f226765c0624112fde1b25063c4f43d61d537bd2224d70998ee493c683ce3994741a2e8554a33d39d8161c687e99398f1b474f5651b87db099aec8211462cc4527aae5df06a0c9f03f9da6453ab88f589426", @generic="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", @generic="c9af8a9ce3f891b238b543b1923ed1a6c782eea36fa1e3d95ea8af8c196edc9794103f800f2edeb00ed32ca1ac6ff6090511b1633585cc7022fdb0d2090cecabc42748157a5ce66c0e68d3de5c9d1fc51349bef95b8533a70cfbbe1a5950602bc95978c0a854bbb01d8ea99b6386337d89c8ab32a47b5e061eed1f111fcef50f740684fdf35eac64bba1fa94f2e1c6f2e3946e244ee42225cf283f78cc059d9dfd4e76729717fb52b766926f96da231c7ef80749b52fed5ec2c57bb1cbdd9beedf81e0597e01b1c776"]}, 0x1368}], 0x5, &(0x7f00000042c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}], 0x20, 0x20044014}, 0xc0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0xffffffff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0xa, 0x2030, 0x0, @void, @void, @value=r4}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f00000002c0)="88", 0x1, 0x31, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4ed", 0x12, 0x805, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r9, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 3m59.983794568s ago: executing program 0 (id=1646): syz_usb_connect(0x18000000, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x0, 0x5b, 0xbd, 0x97}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r2, @ANYBLOB="05002d000100000008000600", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 3m59.300542346s ago: executing program 2 (id=1647): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd=r5, 0x6, 0x0, 0x0, 0x2, 0x1}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000040)={0x5, 0x432, 0xa00, 0x8, 0xd, "a4c42ba02a0b3b4335931f2d038553da933b3a"}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 3m58.359823368s ago: executing program 2 (id=1648): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x8901) clock_adjtime(0x0, 0x0) socket(0xa, 0x3, 0x3a) 3m58.29264075s ago: executing program 1 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000000540)=0x0) timer_gettime(r3, &(0x7f00000005c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x22, &(0x7f0000000000), 0x6b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x63}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) 3m57.360094774s ago: executing program 0 (id=1650): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffc}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x4, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000000)="9dba4000ec0f01dd66b9020a00000f32653632c60f20d86635080000000f22d8bad10466b80010000066ef0f08f30f0f32a70fc72e0a00", 0x37}], 0x1, 0x24, &(0x7f0000000240)=[@flags], 0x1) r6 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3m57.193798986s ago: executing program 1 (id=1651): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000280)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x10}, 0x20008045) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x220000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000300)=0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)=0x0) memfd_create(&(0x7f0000002bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\x99K\xcd\xab\x1a\x034btY\xdb\v\x86\xca<\x02R\xd6a\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x80\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8\x88\'\x06f\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51\tz\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\x97\xad\xef~\x15\xfd\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\\L\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xad&\x86\xcb\xf3\xad\x9e[\x8b\xc0\xd6\x1e\xe4N\x92\xf2\x905\xe0\x13\x90\xaeQ\xed\xea\xad\x9b\xcc\x9f\xc0P\xff_\xaa\xb2L\xf5\x1f\xc1\xa4[\xe51\xcb B*\xaa\a\x003\xc9\xae\x1f\x8c\xcdm\xb8\xce\x01\xdb\xaa\x1c\xc35\x16#\x04\xb7W4\xfd\'\xbe\x922\xde\xd6\x18\xf7`\xff\xfe%\x06\x02\xc6\x81Jr\x10\x88G\xea+^LA\x96\xed\x1d\xe1V\xbd\xebbyq\xd6\xb3', 0x7) io_submit(r4, 0x1, &(0x7f0000000a00)=[0x0]) r5 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') r6 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r7 = memfd_create(&(0x7f0000000b80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, {0xee01}, 0x8000000005, 0xe938}) write$cgroup_pid(r9, &(0x7f00000000c0)=r10, 0x12) 3m56.65290609s ago: executing program 3 (id=1652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0xffe4, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc, 0x7, {0xf000}}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) 3m56.46523015s ago: executing program 3 (id=1653): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xba, 0x0) sched_setscheduler(r0, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x19) ptrace$setregs(0xf, r0, 0x81, &(0x7f0000000080)) gettid() r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r2, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fcff7f00ffdbdf25210000000a0001007770616e34ffff0009001f"], 0x2c}, 0x1, 0x0, 0x0, 0x20004055}, 0x200440c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r5, &(0x7f0000000180)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0x933, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000500)=ANY=[]) 3m55.938062826s ago: executing program 2 (id=1654): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dc5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae00", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x9, 0xa, 0x80000004, 0x5, 0x6, 0x101, 0x4000, 0x4, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) connect$unix(r3, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) getdents(r2, &(0x7f0000000540)=""/142, 0x8e) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="893078749731d1147509c5bfcb15975d3a5c0a060492750800005b4a91a426e7a55f9e23b4f736b7f2f6f7f8d9ce0fd360bf19b8e469c5dc678c6b69e5f46e1ed94612e10474a363a23f6c1419bb7b29f367b193f290afa36a0fa99936832db241f348dfb6915b465ca18626acca1da59b13a9f2b9b0cba32398b5952a3e074bf9ca4e3d5c597829c9e38081524eef89a217a5df2b02efdef355224feb2ce105beb23b3c27b3acac8aef9fee38758f08232c358f84be928719"]) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r6, &(0x7f000001f300)=""/102390, 0xffffff84) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r7, 0x118, 0x3, 0x0, &(0x7f00000003c0)) 3m55.913114984s ago: executing program 1 (id=1655): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @thr={&(0x7f0000000500)="6986c6fa659f7effcc025e5df20ef76e3205ed790e85166ec8e14a0d52ec8b382ea768f3a35be8573c49a51a66c6450da5b714e8c6f3969d3b50dc0bc6b9fda2e8ac5f4ae8c123297b330b9f9986be57f6346b9366c929884ab018c62de63bf178a07698486b286d5db48d612b67b71bcc72f6a22ae11406718e84bd79505cddcc8abbf9ceb70d10b2bbd7ffe1c1cdac5d4c4b71a67597b76dfcf295345b2e436b6417ba614100b71b802e93ef8aff0fd2ad0929b0f64f88c4879c71f1f2fb2e77c4f6c94bddca35acb2", &(0x7f0000000780)="6a022ca88e0e47fe308a417988962cc170e956b86816b28c0050f65e9a58e8547bc65a69d9014c99a67e6511d7eccd08152ba14f92e260a8c57a8d604565627314ce6c956bf437fe82893a3251bfe01c504af2303a4a78c9e3559e53ab6ca2e8046d17ef686bcab914654d96328f76be3d39a2d2a06f6c00a266f35b3090e0882298249ee641d7ac5b438910730f3252fd938747b7231106319d645d56b9c4ba2d7e2bfcfce07b401d602e4fe87714f89a8abbfc615e4ff9811338c16dbb9b58ae6ba769936826b7a9f27b793be6526f41320c1aa55939980ea19622dc2f7d2654038d0f2cee46431d"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x14c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x120, 0x4, 0x0, 0x1, [{0x11c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x10c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xf0, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xeb, 0x1, "ee5557055fa863747f9d070adc0ab59991874c4f86acc2ae36c4151c060d16889ec6ef320ce0937c8b1b2217d57dd9ba326dae1983d06564a5a3323f7868c0834e0a4db93ba9e3db5d1b2c1b504451a188e9508fea77c12b46cf4cf3f3a74c58a6e3e3379cae25b9e53c4870d6631c31d96c999cfa4ae5e28784b903d4aeec40ec01ab65e1a7762b5b0f8c6ed10141496bc68c353131961da06546a7640bb04566add264ef84d729759c77f402deda3da72f73104924428f1e4f889d78815555505354c9dd51e8dad36daf85da7fd82e9928408639bf03c297ec473aa35d6362467b2e85c437b1"}]}, @NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x174}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000004000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r0, &(0x7f0000002080)=0x3a, 0x23b) 3m55.815748728s ago: executing program 3 (id=1656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x89901) move_mount(r3, 0x0, r3, 0x0, 0x262) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) r4 = socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r4], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40000000, 0x23, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) 3m55.39966405s ago: executing program 0 (id=1657): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x1, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "9cc18437269182954156db8db1d7014fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab75a4cfd8d760c853d36fb7cd232e8103ff26"}}}}}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x22}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x2, 0x3, 0x2, @local, @private2, 0x40, 0x8000, 0xb46, 0x1}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="000326bd7000fddbdf250800000078000180140002007665746830000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="02010000", @ANYRES32=r8, @ANYBLOB="1400020067656e65766530000000000000000000080003000000000008000100", @ANYRES64, @ANYBLOB="14000200776c616e3100"/20], 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8090) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) pipe(&(0x7f0000000480)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x3}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 3m53.352778812s ago: executing program 3 (id=1658): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd=r5, 0x6, 0x0, 0x0, 0x2, 0x1}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000040)={0x5, 0x432, 0xa00, 0x8, 0xd, "a4c42ba02a0b3b4335931f2d038553da933b3a"}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 3m13.405267276s ago: executing program 32 (id=1657): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x1, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "9cc18437269182954156db8db1d7014fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab75a4cfd8d760c853d36fb7cd232e8103ff26"}}}}}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x22}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x2, 0x3, 0x2, @local, @private2, 0x40, 0x8000, 0xb46, 0x1}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="000326bd7000fddbdf250800000078000180140002007665746830000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="02010000", @ANYRES32=r8, @ANYBLOB="1400020067656e65766530000000000000000000080003000000000008000100", @ANYRES64, @ANYBLOB="14000200776c616e3100"/20], 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8090) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) pipe(&(0x7f0000000480)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x3}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 3m13.315404631s ago: executing program 33 (id=1655): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @thr={&(0x7f0000000500)="6986c6fa659f7effcc025e5df20ef76e3205ed790e85166ec8e14a0d52ec8b382ea768f3a35be8573c49a51a66c6450da5b714e8c6f3969d3b50dc0bc6b9fda2e8ac5f4ae8c123297b330b9f9986be57f6346b9366c929884ab018c62de63bf178a07698486b286d5db48d612b67b71bcc72f6a22ae11406718e84bd79505cddcc8abbf9ceb70d10b2bbd7ffe1c1cdac5d4c4b71a67597b76dfcf295345b2e436b6417ba614100b71b802e93ef8aff0fd2ad0929b0f64f88c4879c71f1f2fb2e77c4f6c94bddca35acb2", &(0x7f0000000780)="6a022ca88e0e47fe308a417988962cc170e956b86816b28c0050f65e9a58e8547bc65a69d9014c99a67e6511d7eccd08152ba14f92e260a8c57a8d604565627314ce6c956bf437fe82893a3251bfe01c504af2303a4a78c9e3559e53ab6ca2e8046d17ef686bcab914654d96328f76be3d39a2d2a06f6c00a266f35b3090e0882298249ee641d7ac5b438910730f3252fd938747b7231106319d645d56b9c4ba2d7e2bfcfce07b401d602e4fe87714f89a8abbfc615e4ff9811338c16dbb9b58ae6ba769936826b7a9f27b793be6526f41320c1aa55939980ea19622dc2f7d2654038d0f2cee46431d"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x14c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x120, 0x4, 0x0, 0x1, [{0x11c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x10c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xf0, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xeb, 0x1, "ee5557055fa863747f9d070adc0ab59991874c4f86acc2ae36c4151c060d16889ec6ef320ce0937c8b1b2217d57dd9ba326dae1983d06564a5a3323f7868c0834e0a4db93ba9e3db5d1b2c1b504451a188e9508fea77c12b46cf4cf3f3a74c58a6e3e3379cae25b9e53c4870d6631c31d96c999cfa4ae5e28784b903d4aeec40ec01ab65e1a7762b5b0f8c6ed10141496bc68c353131961da06546a7640bb04566add264ef84d729759c77f402deda3da72f73104924428f1e4f889d78815555505354c9dd51e8dad36daf85da7fd82e9928408639bf03c297ec473aa35d6362467b2e85c437b1"}]}, @NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x174}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000004000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r0, &(0x7f0000002080)=0x3a, 0x23b) 3m13.255443681s ago: executing program 34 (id=1654): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x9, 0xa, 0x80000004, 0x5, 0x6, 0x101, 0x4000, 0x4, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) connect$unix(r3, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) getdents(r2, &(0x7f0000000540)=""/142, 0x8e) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="893078749731d1147509c5bfcb15975d3a5c0a060492750800005b4a91a426e7a55f9e23b4f736b7f2f6f7f8d9ce0fd360bf19b8e469c5dc678c6b69e5f46e1ed94612e10474a363a23f6c1419bb7b29f367b193f290afa36a0fa99936832db241f348dfb6915b465ca18626acca1da59b13a9f2b9b0cba32398b5952a3e074bf9ca4e3d5c597829c9e38081524eef89a217a5df2b02efdef355224feb2ce105beb23b3c27b3acac8aef9fee38758f08232c358f84be928719"]) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r6, &(0x7f000001f300)=""/102390, 0xffffff84) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r7, 0x118, 0x3, 0x0, &(0x7f00000003c0)) 3m13.112322817s ago: executing program 35 (id=1658): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd=r5, 0x6, 0x0, 0x0, 0x2, 0x1}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000040)={0x5, 0x432, 0xa00, 0x8, 0xd, "a4c42ba02a0b3b4335931f2d038553da933b3a"}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 1m39.14378125s ago: executing program 4 (id=1536): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20010, r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0xcb4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x404, 0x3, 0x0, 0x1, [{0x400, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3c}, @NFTA_LIMIT_TYPE={0x8}]}}}, {0x64, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x32}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5393}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "a22d9f185d6a7b5b0f621f805d6c0a47417650cc61f791c26cb32415a4f36ee20862f7135d4692472a1ee935f3ec496024cea40bfb5a0a0386432c7c4236a0b87baeaef2fe4049f9c91194dff2c24a6954acc304fadee312a5a90652779312e73a66cf02a1fbc860382dcca7bce56e9e9863ed32a4adc453f7742a3a513dfa7bb46bac2dd6484aa5f6e24333a439c838b7282b0590da663a08ee59c46523a0f77fd4a12956c5a04fcc74dc9468f8d2035761e8e6d3570e0f33442ee985e57ca50dfaa013661d330c5ee1aaae777da00a8449ef9384ac99dc51266705bc014875a4e0a7"}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY_END={0x224, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x98, 0x1, "2cefa9d122f270123c3b435aedf79b2cfd15a9ea9694a92dd0ef03be3aa8e92dd359430c5d7fa348f450b8750d82368380492019c230550816a98cbdd7fd139bd6563971463c34a542e9deaf4c6c4e6ec66da56a8f17c92c692d2951ad7998e755a27c0755d10506ea88a0e1af77de6957c20cc23e26eecd3f0095e40e066ddaabd6831498362f3c75bcd92bd2325515123e760d"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x884, 0x3, 0x0, 0x1, [{0x5e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x124, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "e93f871c8286bc27167b73001014c87d1ac0e9f1b0a74e2a2c931e5a3aef3e47d637c05495cfb7243e7f53152a4b02a0caed2623a94c8c77e026bc483b7e02a8addd3a30278ed58e7c1d4d978583f7cf4a2c67a620014f2b1aadea29003c73dcc41b9e4d003ce97e0f482e835441cf21caa37e085ed802b114f06cb96aab0c269c920c8c18476ddecdab2880e50ffbb542d956bb6cc15f4199b041a921a3d262eb31575ecd7dbc93f0bee99f041968e899e6dae239cbc512deb675aa1450339b69d8e9a5b5f7dc0778eee86a4f59c2fea8f07e8cc7b94c118716bd3180cb8b0ebb630476ae00e70f2e5a34a7a845b542543829af65c9529e65fe"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "392452c916ed31ca00059dfd6fbfe61e6e2227bf01c0c9eccd84d8e9c1499554411f6df54908307a646b46fe23a8ea583ae0e0770e5da9e3965e32806a24b73d1c26de8ad35ec1e14f87427f02"}, @NFTA_DATA_VALUE={0x84, 0x1, "7da0720debe0422cb3ad504c68454002cd17a2216d79cb489dccd03b3eb0b23b919bf39b187dbf04afa4bc66fae10b661dbf29a69c03542ec1c97614d749f11cf615e04daaaa245b44ee6c66ad505511cf638242209d6758a2bae2cf0200ef34e2891e6e0619b6cf41f520ebedf350c7372e8bff0cc35cb951b82bb1568c0415"}]}, @NFTA_SET_ELEM_KEY_END={0x318, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "23db2f4a5a56f9e5680695abdb087f60bc9ab80b26b12e4fb0e8032e08d23c79fc46e6c953d667346dc4ca2b2f597439d33f96a85db09157f4df"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "2ae303504694616fce7514c65f0db551cb25ab70091a50d7509285ac279ee06e9da44221c92afd855430030453c1ec0e778ed2f2091158a65dfcd45ecb1d0c98dca4273085d6dad771131102696829e9457f032ad2ea658451ed2cb8e417c0646228979b701ea639bd248f99c8358aca3dfacde51a2f71f0fa1a8671d10c576980220c61ed28bcaae50220af3a48726cf01bdbb5495e145a52c639ae51b8c2496d247c7331de7ab46956cd1873e7283930e5d10dbc919392e205f8565f1f4bfe0125a6a736db5ad3e1c9bd61"}, @NFTA_DATA_VALUE={0xd3, 0x1, "7ebf8e379124fc6ef60ac4a8007cb67babc4722e248a3075794945693e4c080dbfa8ad638a7034520c9adc4977206ea676b5dec2ff4921a75dc6874d56690faae6abdd1b3242f04b1686d44beef77d7ed2fbbc716091d91ea927cd9517acb63b70135d08dbb0c1e6cbf79f6c3fab1327338f5904f3630c7bbcfd05682161c69d6e9d445d1fcbf46828f24f13124d458a6e6f90803abb962051affb05b428bc05e3796b721f956ea0adae08ce4e419a7eefeed10822c1b732491271ddd0b423d1da381343b4c0c03229ae816821310f"}, @NFTA_DATA_VALUE={0x91, 0x1, "5eb4a8bf1f17574d6d2475a4dc30cb9685db1a851dc85cea574103214a0902775ce5b86d2cc324ea762e5b99e07b76710331925a145596b100dd3e92c616b7098cd29d044bc8976723111a7e2f0a7fef36a206952748cf345acc76645159f0e1405e8cfa2f5ce57c9a265a0204d78d52ffef952c1b64d04b28770f5200cedff1e0373946d1b9cb2980e1f95bac"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x6c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1d}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "28510fe93c7a7af372776c2a3e391b8e6a993bbd8608382157065141945cc802a11cb8f4dc242a"}]}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xa2, 0x6, 0x1, 0x0, "5c9109ba9af57b5082170c2d5a2c7971c569b74b3cc976595044f62a75cbd163e8bd3a568f03d3eefce25c46ebb6e9ea7230aaf7439a0e65882a8c3c1284b67f18ba5a9169446eafa0efed03fccafdf38dbbfb7a89957c51de3c4ac7e846bd2eb90e8efcc485a529f997f11f8294a73af940ff9d905ca9ea0078b579367c871b6c73f45819bc1ba194c1a640feba449c3caba4c07e9b1b09cfb13b7473d0"}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "117b70cecc01b289c604132b63ad52f7054aeb6abf7ba4"}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x87, 0x1, "a67e391e13d959ad7daf513691c623c14c785504fc268abce59740edd58b53790ca2e1dd59fa79bcc84ec939536beb62ad48359bc7d69a59b99bbf2dbb1e03eaf6dbf8eaa8710e3131b9cc70b4fee467a199c282c754482b44abc24420f7812848cefc6fdddbb8f2cade1dcb334cdd8f4549658cd1e18ab775711336c7b974c341a616"}, @NFTA_DATA_VALUE={0x71, 0x1, "4644037a303ca38d7cb29c2306387d1aec8b1df917bd84c48a0a076c88eb970c76fec6475bcd16de381c3ccc78dc27dae5808f32e5985989b1f768642e1839fee3f31cfa3735d5ae1991b627fc3dd482bde5e3cdb3bfc1166e4fe5aa247e97cd0bab91d5a765b7613c68028dc2"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x381e}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xcb}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x68, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0xb4, 0x12, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x55}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xb8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x9c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x7c, 0x6, "56035a9e7db8bb1c02442490577c65f32df8390582b8b0f12951f213246f16050c6f77bfd21b4b5d10b9de25660e0dbd3630ade68c00f752dbaff0f863b05da5195469e8157621e6e5d9a7c70cd68ecd164155ba58c96beb6c5b19683fd466148f44ddb33a0457600ef0af56b9cda77702417df05ffc72f6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x101c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) bind$llc(r1, &(0x7f00000001c0)={0x1a, 0x305, 0x0, 0x4, 0x7, 0x10, @random="e49b06935c22"}, 0x10) r4 = fanotify_init(0x10, 0x80000) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000000), 0x2000000, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e73bbf4be9b9b3d66642c7266646e6f3d568072b7ac13baabe0ddd1909763ea5c4ccf33667a39e267249c515d0adf109076f1104942238db792a5edfd3576d419d0a7ea6e2c8c498f034107486098cc8ce32d02c7490e0992c2080000000000000079151c37ab8ab27d9cd9d25a6db7bf616041ca3eed7d5bc11d81735c0fc70f6d550113592451d71503c367cd159fb6b6431d55f523", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket(0x80000000000000a, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x4, 0x5, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x68, 0x0, 0x9, 0x0, 0x0, @multicast1, @multicast2, {[@noop]}}}}}) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', r7, 0x2f, 0x40, 0x4, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private1, 0x7, 0x7800, 0x7, 0x3e}}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001500080028bd7000ffdbdf250a4024fd", @ANYRES32=r8, @ANYBLOB="ffffff00"/16], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00'}, 0x10) r9 = getpgid(0x0) sched_rr_get_interval(r9, &(0x7f0000000300)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000006800410004000000fbf6ef7f00000200000000001c000200020000007f000000070000000e00000001000000fc00bce0"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1m23.10584173s ago: executing program 4 (id=1536): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20010, r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0xcb4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x404, 0x3, 0x0, 0x1, [{0x400, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3c}, @NFTA_LIMIT_TYPE={0x8}]}}}, {0x64, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x32}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5393}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "a22d9f185d6a7b5b0f621f805d6c0a47417650cc61f791c26cb32415a4f36ee20862f7135d4692472a1ee935f3ec496024cea40bfb5a0a0386432c7c4236a0b87baeaef2fe4049f9c91194dff2c24a6954acc304fadee312a5a90652779312e73a66cf02a1fbc860382dcca7bce56e9e9863ed32a4adc453f7742a3a513dfa7bb46bac2dd6484aa5f6e24333a439c838b7282b0590da663a08ee59c46523a0f77fd4a12956c5a04fcc74dc9468f8d2035761e8e6d3570e0f33442ee985e57ca50dfaa013661d330c5ee1aaae777da00a8449ef9384ac99dc51266705bc014875a4e0a7"}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY_END={0x224, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x98, 0x1, "2cefa9d122f270123c3b435aedf79b2cfd15a9ea9694a92dd0ef03be3aa8e92dd359430c5d7fa348f450b8750d82368380492019c230550816a98cbdd7fd139bd6563971463c34a542e9deaf4c6c4e6ec66da56a8f17c92c692d2951ad7998e755a27c0755d10506ea88a0e1af77de6957c20cc23e26eecd3f0095e40e066ddaabd6831498362f3c75bcd92bd2325515123e760d"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x884, 0x3, 0x0, 0x1, [{0x5e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x124, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "e93f871c8286bc27167b73001014c87d1ac0e9f1b0a74e2a2c931e5a3aef3e47d637c05495cfb7243e7f53152a4b02a0caed2623a94c8c77e026bc483b7e02a8addd3a30278ed58e7c1d4d978583f7cf4a2c67a620014f2b1aadea29003c73dcc41b9e4d003ce97e0f482e835441cf21caa37e085ed802b114f06cb96aab0c269c920c8c18476ddecdab2880e50ffbb542d956bb6cc15f4199b041a921a3d262eb31575ecd7dbc93f0bee99f041968e899e6dae239cbc512deb675aa1450339b69d8e9a5b5f7dc0778eee86a4f59c2fea8f07e8cc7b94c118716bd3180cb8b0ebb630476ae00e70f2e5a34a7a845b542543829af65c9529e65fe"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "392452c916ed31ca00059dfd6fbfe61e6e2227bf01c0c9eccd84d8e9c1499554411f6df54908307a646b46fe23a8ea583ae0e0770e5da9e3965e32806a24b73d1c26de8ad35ec1e14f87427f02"}, @NFTA_DATA_VALUE={0x84, 0x1, "7da0720debe0422cb3ad504c68454002cd17a2216d79cb489dccd03b3eb0b23b919bf39b187dbf04afa4bc66fae10b661dbf29a69c03542ec1c97614d749f11cf615e04daaaa245b44ee6c66ad505511cf638242209d6758a2bae2cf0200ef34e2891e6e0619b6cf41f520ebedf350c7372e8bff0cc35cb951b82bb1568c0415"}]}, @NFTA_SET_ELEM_KEY_END={0x318, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "23db2f4a5a56f9e5680695abdb087f60bc9ab80b26b12e4fb0e8032e08d23c79fc46e6c953d667346dc4ca2b2f597439d33f96a85db09157f4df"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "2ae303504694616fce7514c65f0db551cb25ab70091a50d7509285ac279ee06e9da44221c92afd855430030453c1ec0e778ed2f2091158a65dfcd45ecb1d0c98dca4273085d6dad771131102696829e9457f032ad2ea658451ed2cb8e417c0646228979b701ea639bd248f99c8358aca3dfacde51a2f71f0fa1a8671d10c576980220c61ed28bcaae50220af3a48726cf01bdbb5495e145a52c639ae51b8c2496d247c7331de7ab46956cd1873e7283930e5d10dbc919392e205f8565f1f4bfe0125a6a736db5ad3e1c9bd61"}, @NFTA_DATA_VALUE={0xd3, 0x1, "7ebf8e379124fc6ef60ac4a8007cb67babc4722e248a3075794945693e4c080dbfa8ad638a7034520c9adc4977206ea676b5dec2ff4921a75dc6874d56690faae6abdd1b3242f04b1686d44beef77d7ed2fbbc716091d91ea927cd9517acb63b70135d08dbb0c1e6cbf79f6c3fab1327338f5904f3630c7bbcfd05682161c69d6e9d445d1fcbf46828f24f13124d458a6e6f90803abb962051affb05b428bc05e3796b721f956ea0adae08ce4e419a7eefeed10822c1b732491271ddd0b423d1da381343b4c0c03229ae816821310f"}, @NFTA_DATA_VALUE={0x91, 0x1, "5eb4a8bf1f17574d6d2475a4dc30cb9685db1a851dc85cea574103214a0902775ce5b86d2cc324ea762e5b99e07b76710331925a145596b100dd3e92c616b7098cd29d044bc8976723111a7e2f0a7fef36a206952748cf345acc76645159f0e1405e8cfa2f5ce57c9a265a0204d78d52ffef952c1b64d04b28770f5200cedff1e0373946d1b9cb2980e1f95bac"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x6c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1d}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "28510fe93c7a7af372776c2a3e391b8e6a993bbd8608382157065141945cc802a11cb8f4dc242a"}]}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xa2, 0x6, 0x1, 0x0, "5c9109ba9af57b5082170c2d5a2c7971c569b74b3cc976595044f62a75cbd163e8bd3a568f03d3eefce25c46ebb6e9ea7230aaf7439a0e65882a8c3c1284b67f18ba5a9169446eafa0efed03fccafdf38dbbfb7a89957c51de3c4ac7e846bd2eb90e8efcc485a529f997f11f8294a73af940ff9d905ca9ea0078b579367c871b6c73f45819bc1ba194c1a640feba449c3caba4c07e9b1b09cfb13b7473d0"}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "117b70cecc01b289c604132b63ad52f7054aeb6abf7ba4"}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x87, 0x1, "a67e391e13d959ad7daf513691c623c14c785504fc268abce59740edd58b53790ca2e1dd59fa79bcc84ec939536beb62ad48359bc7d69a59b99bbf2dbb1e03eaf6dbf8eaa8710e3131b9cc70b4fee467a199c282c754482b44abc24420f7812848cefc6fdddbb8f2cade1dcb334cdd8f4549658cd1e18ab775711336c7b974c341a616"}, @NFTA_DATA_VALUE={0x71, 0x1, "4644037a303ca38d7cb29c2306387d1aec8b1df917bd84c48a0a076c88eb970c76fec6475bcd16de381c3ccc78dc27dae5808f32e5985989b1f768642e1839fee3f31cfa3735d5ae1991b627fc3dd482bde5e3cdb3bfc1166e4fe5aa247e97cd0bab91d5a765b7613c68028dc2"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x381e}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xcb}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x68, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0xb4, 0x12, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x55}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xb8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x9c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x7c, 0x6, "56035a9e7db8bb1c02442490577c65f32df8390582b8b0f12951f213246f16050c6f77bfd21b4b5d10b9de25660e0dbd3630ade68c00f752dbaff0f863b05da5195469e8157621e6e5d9a7c70cd68ecd164155ba58c96beb6c5b19683fd466148f44ddb33a0457600ef0af56b9cda77702417df05ffc72f6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x101c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) bind$llc(r1, &(0x7f00000001c0)={0x1a, 0x305, 0x0, 0x4, 0x7, 0x10, @random="e49b06935c22"}, 0x10) r4 = fanotify_init(0x10, 0x80000) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000000), 0x2000000, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e73bbf4be9b9b3d66642c7266646e6f3d568072b7ac13baabe0ddd1909763ea5c4ccf33667a39e267249c515d0adf109076f1104942238db792a5edfd3576d419d0a7ea6e2c8c498f034107486098cc8ce32d02c7490e0992c2080000000000000079151c37ab8ab27d9cd9d25a6db7bf616041ca3eed7d5bc11d81735c0fc70f6d550113592451d71503c367cd159fb6b6431d55f523", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket(0x80000000000000a, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x4, 0x5, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x68, 0x0, 0x9, 0x0, 0x0, @multicast1, @multicast2, {[@noop]}}}}}) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', r7, 0x2f, 0x40, 0x4, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private1, 0x7, 0x7800, 0x7, 0x3e}}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001500080028bd7000ffdbdf250a4024fd", @ANYRES32=r8, @ANYBLOB="ffffff00"/16], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00'}, 0x10) r9 = getpgid(0x0) sched_rr_get_interval(r9, &(0x7f0000000300)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000006800410004000000fbf6ef7f00000200000000001c000200020000007f000000070000000e00000001000000fc00bce0"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1m8.164006242s ago: executing program 4 (id=1536): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20010, r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0xcb4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x404, 0x3, 0x0, 0x1, [{0x400, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3c}, @NFTA_LIMIT_TYPE={0x8}]}}}, {0x64, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x32}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5393}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "a22d9f185d6a7b5b0f621f805d6c0a47417650cc61f791c26cb32415a4f36ee20862f7135d4692472a1ee935f3ec496024cea40bfb5a0a0386432c7c4236a0b87baeaef2fe4049f9c91194dff2c24a6954acc304fadee312a5a90652779312e73a66cf02a1fbc860382dcca7bce56e9e9863ed32a4adc453f7742a3a513dfa7bb46bac2dd6484aa5f6e24333a439c838b7282b0590da663a08ee59c46523a0f77fd4a12956c5a04fcc74dc9468f8d2035761e8e6d3570e0f33442ee985e57ca50dfaa013661d330c5ee1aaae777da00a8449ef9384ac99dc51266705bc014875a4e0a7"}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY_END={0x224, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x98, 0x1, "2cefa9d122f270123c3b435aedf79b2cfd15a9ea9694a92dd0ef03be3aa8e92dd359430c5d7fa348f450b8750d82368380492019c230550816a98cbdd7fd139bd6563971463c34a542e9deaf4c6c4e6ec66da56a8f17c92c692d2951ad7998e755a27c0755d10506ea88a0e1af77de6957c20cc23e26eecd3f0095e40e066ddaabd6831498362f3c75bcd92bd2325515123e760d"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x884, 0x3, 0x0, 0x1, [{0x5e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x124, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "e93f871c8286bc27167b73001014c87d1ac0e9f1b0a74e2a2c931e5a3aef3e47d637c05495cfb7243e7f53152a4b02a0caed2623a94c8c77e026bc483b7e02a8addd3a30278ed58e7c1d4d978583f7cf4a2c67a620014f2b1aadea29003c73dcc41b9e4d003ce97e0f482e835441cf21caa37e085ed802b114f06cb96aab0c269c920c8c18476ddecdab2880e50ffbb542d956bb6cc15f4199b041a921a3d262eb31575ecd7dbc93f0bee99f041968e899e6dae239cbc512deb675aa1450339b69d8e9a5b5f7dc0778eee86a4f59c2fea8f07e8cc7b94c118716bd3180cb8b0ebb630476ae00e70f2e5a34a7a845b542543829af65c9529e65fe"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "392452c916ed31ca00059dfd6fbfe61e6e2227bf01c0c9eccd84d8e9c1499554411f6df54908307a646b46fe23a8ea583ae0e0770e5da9e3965e32806a24b73d1c26de8ad35ec1e14f87427f02"}, @NFTA_DATA_VALUE={0x84, 0x1, "7da0720debe0422cb3ad504c68454002cd17a2216d79cb489dccd03b3eb0b23b919bf39b187dbf04afa4bc66fae10b661dbf29a69c03542ec1c97614d749f11cf615e04daaaa245b44ee6c66ad505511cf638242209d6758a2bae2cf0200ef34e2891e6e0619b6cf41f520ebedf350c7372e8bff0cc35cb951b82bb1568c0415"}]}, @NFTA_SET_ELEM_KEY_END={0x318, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "23db2f4a5a56f9e5680695abdb087f60bc9ab80b26b12e4fb0e8032e08d23c79fc46e6c953d667346dc4ca2b2f597439d33f96a85db09157f4df"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "2ae303504694616fce7514c65f0db551cb25ab70091a50d7509285ac279ee06e9da44221c92afd855430030453c1ec0e778ed2f2091158a65dfcd45ecb1d0c98dca4273085d6dad771131102696829e9457f032ad2ea658451ed2cb8e417c0646228979b701ea639bd248f99c8358aca3dfacde51a2f71f0fa1a8671d10c576980220c61ed28bcaae50220af3a48726cf01bdbb5495e145a52c639ae51b8c2496d247c7331de7ab46956cd1873e7283930e5d10dbc919392e205f8565f1f4bfe0125a6a736db5ad3e1c9bd61"}, @NFTA_DATA_VALUE={0xd3, 0x1, "7ebf8e379124fc6ef60ac4a8007cb67babc4722e248a3075794945693e4c080dbfa8ad638a7034520c9adc4977206ea676b5dec2ff4921a75dc6874d56690faae6abdd1b3242f04b1686d44beef77d7ed2fbbc716091d91ea927cd9517acb63b70135d08dbb0c1e6cbf79f6c3fab1327338f5904f3630c7bbcfd05682161c69d6e9d445d1fcbf46828f24f13124d458a6e6f90803abb962051affb05b428bc05e3796b721f956ea0adae08ce4e419a7eefeed10822c1b732491271ddd0b423d1da381343b4c0c03229ae816821310f"}, @NFTA_DATA_VALUE={0x91, 0x1, "5eb4a8bf1f17574d6d2475a4dc30cb9685db1a851dc85cea574103214a0902775ce5b86d2cc324ea762e5b99e07b76710331925a145596b100dd3e92c616b7098cd29d044bc8976723111a7e2f0a7fef36a206952748cf345acc76645159f0e1405e8cfa2f5ce57c9a265a0204d78d52ffef952c1b64d04b28770f5200cedff1e0373946d1b9cb2980e1f95bac"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x6c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1d}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "28510fe93c7a7af372776c2a3e391b8e6a993bbd8608382157065141945cc802a11cb8f4dc242a"}]}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xa2, 0x6, 0x1, 0x0, "5c9109ba9af57b5082170c2d5a2c7971c569b74b3cc976595044f62a75cbd163e8bd3a568f03d3eefce25c46ebb6e9ea7230aaf7439a0e65882a8c3c1284b67f18ba5a9169446eafa0efed03fccafdf38dbbfb7a89957c51de3c4ac7e846bd2eb90e8efcc485a529f997f11f8294a73af940ff9d905ca9ea0078b579367c871b6c73f45819bc1ba194c1a640feba449c3caba4c07e9b1b09cfb13b7473d0"}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "117b70cecc01b289c604132b63ad52f7054aeb6abf7ba4"}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x87, 0x1, "a67e391e13d959ad7daf513691c623c14c785504fc268abce59740edd58b53790ca2e1dd59fa79bcc84ec939536beb62ad48359bc7d69a59b99bbf2dbb1e03eaf6dbf8eaa8710e3131b9cc70b4fee467a199c282c754482b44abc24420f7812848cefc6fdddbb8f2cade1dcb334cdd8f4549658cd1e18ab775711336c7b974c341a616"}, @NFTA_DATA_VALUE={0x71, 0x1, "4644037a303ca38d7cb29c2306387d1aec8b1df917bd84c48a0a076c88eb970c76fec6475bcd16de381c3ccc78dc27dae5808f32e5985989b1f768642e1839fee3f31cfa3735d5ae1991b627fc3dd482bde5e3cdb3bfc1166e4fe5aa247e97cd0bab91d5a765b7613c68028dc2"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x381e}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xcb}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x68, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0xb4, 0x12, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x55}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xb8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x9c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x7c, 0x6, "56035a9e7db8bb1c02442490577c65f32df8390582b8b0f12951f213246f16050c6f77bfd21b4b5d10b9de25660e0dbd3630ade68c00f752dbaff0f863b05da5195469e8157621e6e5d9a7c70cd68ecd164155ba58c96beb6c5b19683fd466148f44ddb33a0457600ef0af56b9cda77702417df05ffc72f6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x101c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) bind$llc(r1, &(0x7f00000001c0)={0x1a, 0x305, 0x0, 0x4, 0x7, 0x10, @random="e49b06935c22"}, 0x10) r4 = fanotify_init(0x10, 0x80000) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000000), 0x2000000, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e73bbf4be9b9b3d66642c7266646e6f3d568072b7ac13baabe0ddd1909763ea5c4ccf33667a39e267249c515d0adf109076f1104942238db792a5edfd3576d419d0a7ea6e2c8c498f034107486098cc8ce32d02c7490e0992c2080000000000000079151c37ab8ab27d9cd9d25a6db7bf616041ca3eed7d5bc11d81735c0fc70f6d550113592451d71503c367cd159fb6b6431d55f523", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket(0x80000000000000a, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x4, 0x5, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x68, 0x0, 0x9, 0x0, 0x0, @multicast1, @multicast2, {[@noop]}}}}}) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', r7, 0x2f, 0x40, 0x4, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private1, 0x7, 0x7800, 0x7, 0x3e}}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001500080028bd7000ffdbdf250a4024fd", @ANYRES32=r8, @ANYBLOB="ffffff00"/16], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00'}, 0x10) r9 = getpgid(0x0) sched_rr_get_interval(r9, &(0x7f0000000300)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000006800410004000000fbf6ef7f00000200000000001c000200020000007f000000070000000e00000001000000fc00bce0"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 50.20272663s ago: executing program 4 (id=1536): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20010, r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0xcb4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x404, 0x3, 0x0, 0x1, [{0x400, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3c}, @NFTA_LIMIT_TYPE={0x8}]}}}, {0x64, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x32}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5393}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "a22d9f185d6a7b5b0f621f805d6c0a47417650cc61f791c26cb32415a4f36ee20862f7135d4692472a1ee935f3ec496024cea40bfb5a0a0386432c7c4236a0b87baeaef2fe4049f9c91194dff2c24a6954acc304fadee312a5a90652779312e73a66cf02a1fbc860382dcca7bce56e9e9863ed32a4adc453f7742a3a513dfa7bb46bac2dd6484aa5f6e24333a439c838b7282b0590da663a08ee59c46523a0f77fd4a12956c5a04fcc74dc9468f8d2035761e8e6d3570e0f33442ee985e57ca50dfaa013661d330c5ee1aaae777da00a8449ef9384ac99dc51266705bc014875a4e0a7"}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY_END={0x224, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x98, 0x1, "2cefa9d122f270123c3b435aedf79b2cfd15a9ea9694a92dd0ef03be3aa8e92dd359430c5d7fa348f450b8750d82368380492019c230550816a98cbdd7fd139bd6563971463c34a542e9deaf4c6c4e6ec66da56a8f17c92c692d2951ad7998e755a27c0755d10506ea88a0e1af77de6957c20cc23e26eecd3f0095e40e066ddaabd6831498362f3c75bcd92bd2325515123e760d"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x884, 0x3, 0x0, 0x1, [{0x5e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x124, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "392452c916ed31ca00059dfd6fbfe61e6e2227bf01c0c9eccd84d8e9c1499554411f6df54908307a646b46fe23a8ea583ae0e0770e5da9e3965e32806a24b73d1c26de8ad35ec1e14f87427f02"}, @NFTA_DATA_VALUE={0x84, 0x1, "7da0720debe0422cb3ad504c68454002cd17a2216d79cb489dccd03b3eb0b23b919bf39b187dbf04afa4bc66fae10b661dbf29a69c03542ec1c97614d749f11cf615e04daaaa245b44ee6c66ad505511cf638242209d6758a2bae2cf0200ef34e2891e6e0619b6cf41f520ebedf350c7372e8bff0cc35cb951b82bb1568c0415"}]}, @NFTA_SET_ELEM_KEY_END={0x318, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "23db2f4a5a56f9e5680695abdb087f60bc9ab80b26b12e4fb0e8032e08d23c79fc46e6c953d667346dc4ca2b2f597439d33f96a85db09157f4df"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "2ae303504694616fce7514c65f0db551cb25ab70091a50d7509285ac279ee06e9da44221c92afd855430030453c1ec0e778ed2f2091158a65dfcd45ecb1d0c98dca4273085d6dad771131102696829e9457f032ad2ea658451ed2cb8e417c0646228979b701ea639bd248f99c8358aca3dfacde51a2f71f0fa1a8671d10c576980220c61ed28bcaae50220af3a48726cf01bdbb5495e145a52c639ae51b8c2496d247c7331de7ab46956cd1873e7283930e5d10dbc919392e205f8565f1f4bfe0125a6a736db5ad3e1c9bd61"}, @NFTA_DATA_VALUE={0xd3, 0x1, "7ebf8e379124fc6ef60ac4a8007cb67babc4722e248a3075794945693e4c080dbfa8ad638a7034520c9adc4977206ea676b5dec2ff4921a75dc6874d56690faae6abdd1b3242f04b1686d44beef77d7ed2fbbc716091d91ea927cd9517acb63b70135d08dbb0c1e6cbf79f6c3fab1327338f5904f3630c7bbcfd05682161c69d6e9d445d1fcbf46828f24f13124d458a6e6f90803abb962051affb05b428bc05e3796b721f956ea0adae08ce4e419a7eefeed10822c1b732491271ddd0b423d1da381343b4c0c03229ae816821310f"}, @NFTA_DATA_VALUE={0x91, 0x1, "5eb4a8bf1f17574d6d2475a4dc30cb9685db1a851dc85cea574103214a0902775ce5b86d2cc324ea762e5b99e07b76710331925a145596b100dd3e92c616b7098cd29d044bc8976723111a7e2f0a7fef36a206952748cf345acc76645159f0e1405e8cfa2f5ce57c9a265a0204d78d52ffef952c1b64d04b28770f5200cedff1e0373946d1b9cb2980e1f95bac"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x6c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1d}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "28510fe93c7a7af372776c2a3e391b8e6a993bbd8608382157065141945cc802a11cb8f4dc242a"}]}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xa2, 0x6, 0x1, 0x0, "5c9109ba9af57b5082170c2d5a2c7971c569b74b3cc976595044f62a75cbd163e8bd3a568f03d3eefce25c46ebb6e9ea7230aaf7439a0e65882a8c3c1284b67f18ba5a9169446eafa0efed03fccafdf38dbbfb7a89957c51de3c4ac7e846bd2eb90e8efcc485a529f997f11f8294a73af940ff9d905ca9ea0078b579367c871b6c73f45819bc1ba194c1a640feba449c3caba4c07e9b1b09cfb13b7473d0"}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "117b70cecc01b289c604132b63ad52f7054aeb6abf7ba4"}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x87, 0x1, "a67e391e13d959ad7daf513691c623c14c785504fc268abce59740edd58b53790ca2e1dd59fa79bcc84ec939536beb62ad48359bc7d69a59b99bbf2dbb1e03eaf6dbf8eaa8710e3131b9cc70b4fee467a199c282c754482b44abc24420f7812848cefc6fdddbb8f2cade1dcb334cdd8f4549658cd1e18ab775711336c7b974c341a616"}, @NFTA_DATA_VALUE={0x71, 0x1, "4644037a303ca38d7cb29c2306387d1aec8b1df917bd84c48a0a076c88eb970c76fec6475bcd16de381c3ccc78dc27dae5808f32e5985989b1f768642e1839fee3f31cfa3735d5ae1991b627fc3dd482bde5e3cdb3bfc1166e4fe5aa247e97cd0bab91d5a765b7613c68028dc2"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x381e}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xcb}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x68, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0xb4, 0x12, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x55}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xb8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x9c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x7c, 0x6, "56035a9e7db8bb1c02442490577c65f32df8390582b8b0f12951f213246f16050c6f77bfd21b4b5d10b9de25660e0dbd3630ade68c00f752dbaff0f863b05da5195469e8157621e6e5d9a7c70cd68ecd164155ba58c96beb6c5b19683fd466148f44ddb33a0457600ef0af56b9cda77702417df05ffc72f6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x101c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) bind$llc(r1, &(0x7f00000001c0)={0x1a, 0x305, 0x0, 0x4, 0x7, 0x10, @random="e49b06935c22"}, 0x10) r4 = fanotify_init(0x10, 0x80000) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000000), 0x2000000, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e73bbf4be9b9b3d66642c7266646e6f3d568072b7ac13baabe0ddd1909763ea5c4ccf33667a39e267249c515d0adf109076f1104942238db792a5edfd3576d419d0a7ea6e2c8c498f034107486098cc8ce32d02c7490e0992c2080000000000000079151c37ab8ab27d9cd9d25a6db7bf616041ca3eed7d5bc11d81735c0fc70f6d550113592451d71503c367cd159fb6b6431d55f523", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket(0x80000000000000a, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x4, 0x5, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x68, 0x0, 0x9, 0x0, 0x0, @multicast1, @multicast2, {[@noop]}}}}}) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', r7, 0x2f, 0x40, 0x4, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private1, 0x7, 0x7800, 0x7, 0x3e}}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001500080028bd7000ffdbdf250a4024fd", @ANYRES32=r8, @ANYBLOB="ffffff00"/16], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00'}, 0x10) r9 = getpgid(0x0) sched_rr_get_interval(r9, &(0x7f0000000300)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000006800410004000000fbf6ef7f00000200000000001c000200020000007f000000070000000e00000001000000fc00bce0"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 28.25773921s ago: executing program 4 (id=1536): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20010, r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0xcb4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x404, 0x3, 0x0, 0x1, [{0x400, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3c}, @NFTA_LIMIT_TYPE={0x8}]}}}, {0x64, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x32}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5393}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "a22d9f185d6a7b5b0f621f805d6c0a47417650cc61f791c26cb32415a4f36ee20862f7135d4692472a1ee935f3ec496024cea40bfb5a0a0386432c7c4236a0b87baeaef2fe4049f9c91194dff2c24a6954acc304fadee312a5a90652779312e73a66cf02a1fbc860382dcca7bce56e9e9863ed32a4adc453f7742a3a513dfa7bb46bac2dd6484aa5f6e24333a439c838b7282b0590da663a08ee59c46523a0f77fd4a12956c5a04fcc74dc9468f8d2035761e8e6d3570e0f33442ee985e57ca50dfaa013661d330c5ee1aaae777da00a8449ef9384ac99dc51266705bc014875a4e0a7"}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY_END={0x224, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x98, 0x1, "2cefa9d122f270123c3b435aedf79b2cfd15a9ea9694a92dd0ef03be3aa8e92dd359430c5d7fa348f450b8750d82368380492019c230550816a98cbdd7fd139bd6563971463c34a542e9deaf4c6c4e6ec66da56a8f17c92c692d2951ad7998e755a27c0755d10506ea88a0e1af77de6957c20cc23e26eecd3f0095e40e066ddaabd6831498362f3c75bcd92bd2325515123e760d"}, @NFTA_DATA_VALUE={0xff, 0x1, "8687e825957e76f904ff2a3b2c00e6965836e0c17e807be803be07f2ae27afecf74cd10c9be6381afa6b28ae0012ba59c9e9a42dabf26853f1c619bb8dca4cc35a0918a9380fd61e973f5df669954e555c1934724d125874d2fe588093e8f71d7a3ea1b3da8692ab00204d9856d8cddb2f44a85e2dfb9d8fe6bc2f6884b83d5a24794ed941fc50cbbab5e6f19eadb3131c80007148a1a88208350a9dc89c1105e59768d0cd9fd72d0c2513a01468adbfb0df356b0ffad53d263b12410594de6fb5866c32dbed07295ad80f3cdb1d23de5864a2eb73149bc14ea9dd9d1baafdccccd485e940162180ee1153188d28d52d595a4a32a7655a7f78ad6b"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x884, 0x3, 0x0, 0x1, [{0x5e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x124, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "e93f871c8286bc27167b73001014c87d1ac0e9f1b0a74e2a2c931e5a3aef3e47d637c05495cfb7243e7f53152a4b02a0caed2623a94c8c77e026bc483b7e02a8addd3a30278ed58e7c1d4d978583f7cf4a2c67a620014f2b1aadea29003c73dcc41b9e4d003ce97e0f482e835441cf21caa37e085ed802b114f06cb96aab0c269c920c8c18476ddecdab2880e50ffbb542d956bb6cc15f4199b041a921a3d262eb31575ecd7dbc93f0bee99f041968e899e6dae239cbc512deb675aa1450339b69d8e9a5b5f7dc0778eee86a4f59c2fea8f07e8cc7b94c118716bd3180cb8b0ebb630476ae00e70f2e5a34a7a845b542543829af65c9529e65fe"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "392452c916ed31ca00059dfd6fbfe61e6e2227bf01c0c9eccd84d8e9c1499554411f6df54908307a646b46fe23a8ea583ae0e0770e5da9e3965e32806a24b73d1c26de8ad35ec1e14f87427f02"}, @NFTA_DATA_VALUE={0x84, 0x1, "7da0720debe0422cb3ad504c68454002cd17a2216d79cb489dccd03b3eb0b23b919bf39b187dbf04afa4bc66fae10b661dbf29a69c03542ec1c97614d749f11cf615e04daaaa245b44ee6c66ad505511cf638242209d6758a2bae2cf0200ef34e2891e6e0619b6cf41f520ebedf350c7372e8bff0cc35cb951b82bb1568c0415"}]}, @NFTA_SET_ELEM_KEY_END={0x318, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "23db2f4a5a56f9e5680695abdb087f60bc9ab80b26b12e4fb0e8032e08d23c79fc46e6c953d667346dc4ca2b2f597439d33f96a85db09157f4df"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "2ae303504694616fce7514c65f0db551cb25ab70091a50d7509285ac279ee06e9da44221c92afd855430030453c1ec0e778ed2f2091158a65dfcd45ecb1d0c98dca4273085d6dad771131102696829e9457f032ad2ea658451ed2cb8e417c0646228979b701ea639bd248f99c8358aca3dfacde51a2f71f0fa1a8671d10c576980220c61ed28bcaae50220af3a48726cf01bdbb5495e145a52c639ae51b8c2496d247c7331de7ab46956cd1873e7283930e5d10dbc919392e205f8565f1f4bfe0125a6a736db5ad3e1c9bd61"}, @NFTA_DATA_VALUE={0xd3, 0x1, "7ebf8e379124fc6ef60ac4a8007cb67babc4722e248a3075794945693e4c080dbfa8ad638a7034520c9adc4977206ea676b5dec2ff4921a75dc6874d56690faae6abdd1b3242f04b1686d44beef77d7ed2fbbc716091d91ea927cd9517acb63b70135d08dbb0c1e6cbf79f6c3fab1327338f5904f3630c7bbcfd05682161c69d6e9d445d1fcbf46828f24f13124d458a6e6f90803abb962051affb05b428bc05e3796b721f956ea0adae08ce4e419a7eefeed10822c1b732491271ddd0b423d1da381343b4c0c03229ae816821310f"}, @NFTA_DATA_VALUE={0x91, 0x1, "5eb4a8bf1f17574d6d2475a4dc30cb9685db1a851dc85cea574103214a0902775ce5b86d2cc324ea762e5b99e07b76710331925a145596b100dd3e92c616b7098cd29d044bc8976723111a7e2f0a7fef36a206952748cf345acc76645159f0e1405e8cfa2f5ce57c9a265a0204d78d52ffef952c1b64d04b28770f5200cedff1e0373946d1b9cb2980e1f95bac"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x6c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1d}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "28510fe93c7a7af372776c2a3e391b8e6a993bbd8608382157065141945cc802a11cb8f4dc242a"}]}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xa2, 0x6, 0x1, 0x0, "5c9109ba9af57b5082170c2d5a2c7971c569b74b3cc976595044f62a75cbd163e8bd3a568f03d3eefce25c46ebb6e9ea7230aaf7439a0e65882a8c3c1284b67f18ba5a9169446eafa0efed03fccafdf38dbbfb7a89957c51de3c4ac7e846bd2eb90e8efcc485a529f997f11f8294a73af940ff9d905ca9ea0078b579367c871b6c73f45819bc1ba194c1a640feba449c3caba4c07e9b1b09cfb13b7473d0"}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "117b70cecc01b289c604132b63ad52f7054aeb6abf7ba4"}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x87, 0x1, "a67e391e13d959ad7daf513691c623c14c785504fc268abce59740edd58b53790ca2e1dd59fa79bcc84ec939536beb62ad48359bc7d69a59b99bbf2dbb1e03eaf6dbf8eaa8710e3131b9cc70b4fee467a199c282c754482b44abc24420f7812848cefc6fdddbb8f2cade1dcb334cdd8f4549658cd1e18ab775711336c7b974c341a616"}, @NFTA_DATA_VALUE={0x71, 0x1, "4644037a303ca38d7cb29c2306387d1aec8b1df917bd84c48a0a076c88eb970c76fec6475bcd16de381c3ccc78dc27dae5808f32e5985989b1f768642e1839fee3f31cfa3735d5ae1991b627fc3dd482bde5e3cdb3bfc1166e4fe5aa247e97cd0bab91d5a765b7613c68028dc2"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x381e}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xcb}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x68, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0xb4, 0x12, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x55}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xb8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x9c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x7c, 0x6, "56035a9e7db8bb1c02442490577c65f32df8390582b8b0f12951f213246f16050c6f77bfd21b4b5d10b9de25660e0dbd3630ade68c00f752dbaff0f863b05da5195469e8157621e6e5d9a7c70cd68ecd164155ba58c96beb6c5b19683fd466148f44ddb33a0457600ef0af56b9cda77702417df05ffc72f6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x101c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) bind$llc(r1, &(0x7f00000001c0)={0x1a, 0x305, 0x0, 0x4, 0x7, 0x10, @random="e49b06935c22"}, 0x10) r4 = fanotify_init(0x10, 0x80000) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000000), 0x2000000, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e73bbf4be9b9b3d66642c7266646e6f3d568072b7ac13baabe0ddd1909763ea5c4ccf33667a39e267249c515d0adf109076f1104942238db792a5edfd3576d419d0a7ea6e2c8c498f034107486098cc8ce32d02c7490e0992c2080000000000000079151c37ab8ab27d9cd9d25a6db7bf616041ca3eed7d5bc11d81735c0fc70f6d550113592451d71503c367cd159fb6b6431d55f523", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket(0x80000000000000a, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x4, 0x5, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x68, 0x0, 0x9, 0x0, 0x0, @multicast1, @multicast2, {[@noop]}}}}}) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', r7, 0x2f, 0x40, 0x4, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private1, 0x7, 0x7800, 0x7, 0x3e}}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001500080028bd7000ffdbdf250a4024fd", @ANYRES32=r8, @ANYBLOB="ffffff00"/16], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00'}, 0x10) r9 = getpgid(0x0) sched_rr_get_interval(r9, &(0x7f0000000300)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000006800410004000000fbf6ef7f00000200000000001c000200020000007f000000070000000e00000001000000fc00bce0"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 13.837925987s ago: executing program 4 (id=1536): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20010, r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0xcb4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x404, 0x3, 0x0, 0x1, [{0x400, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3c}, @NFTA_LIMIT_TYPE={0x8}]}}}, {0x64, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x32}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5393}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "a22d9f185d6a7b5b0f621f805d6c0a47417650cc61f791c26cb32415a4f36ee20862f7135d4692472a1ee935f3ec496024cea40bfb5a0a0386432c7c4236a0b87baeaef2fe4049f9c91194dff2c24a6954acc304fadee312a5a90652779312e73a66cf02a1fbc860382dcca7bce56e9e9863ed32a4adc453f7742a3a513dfa7bb46bac2dd6484aa5f6e24333a439c838b7282b0590da663a08ee59c46523a0f77fd4a12956c5a04fcc74dc9468f8d2035761e8e6d3570e0f33442ee985e57ca50dfaa013661d330c5ee1aaae777da00a8449ef9384ac99dc51266705bc014875a4e0a7"}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY_END={0x224, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x98, 0x1, "2cefa9d122f270123c3b435aedf79b2cfd15a9ea9694a92dd0ef03be3aa8e92dd359430c5d7fa348f450b8750d82368380492019c230550816a98cbdd7fd139bd6563971463c34a542e9deaf4c6c4e6ec66da56a8f17c92c692d2951ad7998e755a27c0755d10506ea88a0e1af77de6957c20cc23e26eecd3f0095e40e066ddaabd6831498362f3c75bcd92bd2325515123e760d"}, @NFTA_DATA_VALUE={0xff, 0x1, "8687e825957e76f904ff2a3b2c00e6965836e0c17e807be803be07f2ae27afecf74cd10c9be6381afa6b28ae0012ba59c9e9a42dabf26853f1c619bb8dca4cc35a0918a9380fd61e973f5df669954e555c1934724d125874d2fe588093e8f71d7a3ea1b3da8692ab00204d9856d8cddb2f44a85e2dfb9d8fe6bc2f6884b83d5a24794ed941fc50cbbab5e6f19eadb3131c80007148a1a88208350a9dc89c1105e59768d0cd9fd72d0c2513a01468adbfb0df356b0ffad53d263b12410594de6fb5866c32dbed07295ad80f3cdb1d23de5864a2eb73149bc14ea9dd9d1baafdccccd485e940162180ee1153188d28d52d595a4a32a7655a7f78ad6b"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x884, 0x3, 0x0, 0x1, [{0x5e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x124, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "392452c916ed31ca00059dfd6fbfe61e6e2227bf01c0c9eccd84d8e9c1499554411f6df54908307a646b46fe23a8ea583ae0e0770e5da9e3965e32806a24b73d1c26de8ad35ec1e14f87427f02"}, @NFTA_DATA_VALUE={0x84, 0x1, "7da0720debe0422cb3ad504c68454002cd17a2216d79cb489dccd03b3eb0b23b919bf39b187dbf04afa4bc66fae10b661dbf29a69c03542ec1c97614d749f11cf615e04daaaa245b44ee6c66ad505511cf638242209d6758a2bae2cf0200ef34e2891e6e0619b6cf41f520ebedf350c7372e8bff0cc35cb951b82bb1568c0415"}]}, @NFTA_SET_ELEM_KEY_END={0x318, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "23db2f4a5a56f9e5680695abdb087f60bc9ab80b26b12e4fb0e8032e08d23c79fc46e6c953d667346dc4ca2b2f597439d33f96a85db09157f4df"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "2ae303504694616fce7514c65f0db551cb25ab70091a50d7509285ac279ee06e9da44221c92afd855430030453c1ec0e778ed2f2091158a65dfcd45ecb1d0c98dca4273085d6dad771131102696829e9457f032ad2ea658451ed2cb8e417c0646228979b701ea639bd248f99c8358aca3dfacde51a2f71f0fa1a8671d10c576980220c61ed28bcaae50220af3a48726cf01bdbb5495e145a52c639ae51b8c2496d247c7331de7ab46956cd1873e7283930e5d10dbc919392e205f8565f1f4bfe0125a6a736db5ad3e1c9bd61"}, @NFTA_DATA_VALUE={0xd3, 0x1, "7ebf8e379124fc6ef60ac4a8007cb67babc4722e248a3075794945693e4c080dbfa8ad638a7034520c9adc4977206ea676b5dec2ff4921a75dc6874d56690faae6abdd1b3242f04b1686d44beef77d7ed2fbbc716091d91ea927cd9517acb63b70135d08dbb0c1e6cbf79f6c3fab1327338f5904f3630c7bbcfd05682161c69d6e9d445d1fcbf46828f24f13124d458a6e6f90803abb962051affb05b428bc05e3796b721f956ea0adae08ce4e419a7eefeed10822c1b732491271ddd0b423d1da381343b4c0c03229ae816821310f"}, @NFTA_DATA_VALUE={0x91, 0x1, "5eb4a8bf1f17574d6d2475a4dc30cb9685db1a851dc85cea574103214a0902775ce5b86d2cc324ea762e5b99e07b76710331925a145596b100dd3e92c616b7098cd29d044bc8976723111a7e2f0a7fef36a206952748cf345acc76645159f0e1405e8cfa2f5ce57c9a265a0204d78d52ffef952c1b64d04b28770f5200cedff1e0373946d1b9cb2980e1f95bac"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x6c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1d}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "28510fe93c7a7af372776c2a3e391b8e6a993bbd8608382157065141945cc802a11cb8f4dc242a"}]}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xa2, 0x6, 0x1, 0x0, "5c9109ba9af57b5082170c2d5a2c7971c569b74b3cc976595044f62a75cbd163e8bd3a568f03d3eefce25c46ebb6e9ea7230aaf7439a0e65882a8c3c1284b67f18ba5a9169446eafa0efed03fccafdf38dbbfb7a89957c51de3c4ac7e846bd2eb90e8efcc485a529f997f11f8294a73af940ff9d905ca9ea0078b579367c871b6c73f45819bc1ba194c1a640feba449c3caba4c07e9b1b09cfb13b7473d0"}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "117b70cecc01b289c604132b63ad52f7054aeb6abf7ba4"}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x87, 0x1, "a67e391e13d959ad7daf513691c623c14c785504fc268abce59740edd58b53790ca2e1dd59fa79bcc84ec939536beb62ad48359bc7d69a59b99bbf2dbb1e03eaf6dbf8eaa8710e3131b9cc70b4fee467a199c282c754482b44abc24420f7812848cefc6fdddbb8f2cade1dcb334cdd8f4549658cd1e18ab775711336c7b974c341a616"}, @NFTA_DATA_VALUE={0x71, 0x1, "4644037a303ca38d7cb29c2306387d1aec8b1df917bd84c48a0a076c88eb970c76fec6475bcd16de381c3ccc78dc27dae5808f32e5985989b1f768642e1839fee3f31cfa3735d5ae1991b627fc3dd482bde5e3cdb3bfc1166e4fe5aa247e97cd0bab91d5a765b7613c68028dc2"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x381e}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xcb}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x68, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0xb4, 0x12, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x55}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xb8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x9c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x7c, 0x6, "56035a9e7db8bb1c02442490577c65f32df8390582b8b0f12951f213246f16050c6f77bfd21b4b5d10b9de25660e0dbd3630ade68c00f752dbaff0f863b05da5195469e8157621e6e5d9a7c70cd68ecd164155ba58c96beb6c5b19683fd466148f44ddb33a0457600ef0af56b9cda77702417df05ffc72f6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x101c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) bind$llc(r1, &(0x7f00000001c0)={0x1a, 0x305, 0x0, 0x4, 0x7, 0x10, @random="e49b06935c22"}, 0x10) r4 = fanotify_init(0x10, 0x80000) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000000), 0x2000000, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e73bbf4be9b9b3d66642c7266646e6f3d568072b7ac13baabe0ddd1909763ea5c4ccf33667a39e267249c515d0adf109076f1104942238db792a5edfd3576d419d0a7ea6e2c8c498f034107486098cc8ce32d02c7490e0992c2080000000000000079151c37ab8ab27d9cd9d25a6db7bf616041ca3eed7d5bc11d81735c0fc70f6d550113592451d71503c367cd159fb6b6431d55f523", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket(0x80000000000000a, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x4, 0x5, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x68, 0x0, 0x9, 0x0, 0x0, @multicast1, @multicast2, {[@noop]}}}}}) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', r7, 0x2f, 0x40, 0x4, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private1, 0x7, 0x7800, 0x7, 0x3e}}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001500080028bd7000ffdbdf250a4024fd", @ANYRES32=r8, @ANYBLOB="ffffff00"/16], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00'}, 0x10) r9 = getpgid(0x0) sched_rr_get_interval(r9, &(0x7f0000000300)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000006800410004000000fbf6ef7f00000200000000001c000200020000007f000000070000000e00000001000000fc00bce0"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 7.880860248s ago: executing program 8 (id=2163): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {0x4, 0x4}, {0x8}, @ext={0xfffffffffffffddd, 0x0}}, {0x0, 0x20, 0x0, 0x5, @time={0xb, 0x8}, {0x0, 0x1}, {0x0, 0x2}, @raw8={"292cdcd7692d37152bee3224"}}, {0x0, 0x0, 0xec, 0x0, @time={0x3, 0xfffffffc}, {0x0, 0x2}, {}, @control={0x6c, 0x3aff, 0x80}}, {0xfd, 0xa, 0x0, 0x2, @tick=0x7, {}, {0x0, 0xfd}, @result={0xbac, 0x28}}], 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4}]}, 0x24}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x200008c0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000090500"/20, @ANYRES32=0x0, @ANYBLOB="00000000480600001c001280090001007866726d000000000c000280080002000400000008000300", @ANYRES32=r9, @ANYBLOB="04f26de4c78944efd830d1867ba0453c558e1b968acfe430fe388e486fce66d08f8f5e7fa1f5f425d95803a5f9dce335bdafe6e08b4e60ea5e466d65a9e875fbd05079f8b1d0d3a9677e5c11dcb4"], 0x44}, 0x1, 0xd, 0x0, 0x24000004}, 0x0) 7.121579084s ago: executing program 6 (id=2164): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000140)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0xfffffffffffffff0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lchown(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) acct(0x0) 6.622783022s ago: executing program 6 (id=2165): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x2, 0x18, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1, @in6=@mcast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}, @in6={0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}}]}, 0xc0}}, 0x0) 6.496831647s ago: executing program 6 (id=2166): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0d9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda930b000000cbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0x1006) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffff001, 0x2, {0xb, @pix_mp={0x19, 0x1, 0x7079781c, 0x1, 0x2, [{0xd, 0x1}, {0x1b, 0xff}, {0x10001, 0x2}, {0x204, 0x7}, {0x101, 0x1}, {0x9, 0x5}, {0x5, 0x80000000}, {0x80000001, 0x8001}], 0xa, 0x1, 0x3, 0x0, 0x7}}}) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') write$uinput_user_dev(r2, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f00000018c0)={0x208, 0x23, 0x400, 0x70bd25, 0x25dfdbfd, {0xb}, [@typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0x7e, 0x0, 0x0, @u64=0x10}, @generic="56b58d7dc3859130794274f14e4a491508358058a2d22c1bf39f56effddbf7caf4e82bd1ae5ff1304ba23cea715495fd9168e38e830caf683bb3f71a0b4ef4c27ffd92952c4c50d1d647cd9733e765c3cca75c44de47619c7d2a691cf3927394ba71d5a0c5201aaa165d48f8164bb7fa916f051a8598dbf074304123ca267ffbdd8da0ec0942290e2ed8891a1a96573f21eaac91c4ac6e43", @nested={0xf8, 0xd4, 0x0, 0x1, [@nested={0xd5, 0x5a, 0x0, 0x1, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x66}, @generic="4429e1448fa799095ceacf96136bca81c00d716f3ea8762992c4bdf5b1c2de0e4e8bcf393f3620ce6e6f1c61f8e7039daca8a51dea2b8d2001061c412271fb562a03d3eac96fbe3b32e740897b96cfd0fa1fbef0b4ac9a67300003e126cdd13fc595a4444f22e6c54b", @typed={0xc, 0xa0, 0x0, 0x0, @u64=0x7}, @nested={0x44, 0x11c, 0x0, 0x1, [@nested={0x4, 0x85}, @typed={0x8, 0x57, 0x0, 0x0, @u32=0x1}, @typed={0xe, 0x14, 0x0, 0x0, @str='/dev/cec#\x00'}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x8}, @typed={0x6, 0x106, 0x0, 0x0, @str='\'\x00'}, @typed={0x6, 0x44, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0x129}, @typed={0x8, 0x118, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@empty}]}, @typed={0xc, 0xc2, 0x0, 0x0, @u64}, @typed={0xe, 0x1f, 0x0, 0x0, @str='/dev/ptmx\x00'}]}, @generic="3ca4ee1f33780a3e01d6643886d28a67e5a7885dccf05fd26d082863a568ed92416bbf630d063a4db9b43ec129a47d63e22dbedf434707d0198d8c4055aa6a0b81557a8721c72233698c55fbd4"]}, 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x40082) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000180)="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") syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x402) ioctl$TIOCSETD(r3, 0x5423, 0xfffffffffffffffd) 6.496598261s ago: executing program 8 (id=2167): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}], 0x18}, 0x840) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000900)={0x1d, r5, 0x1}, 0x18) sendmmsg$unix(r4, &(0x7f0000004a80)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000440)="bd", 0x1}], 0x1, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x533509e98f3a73c}}], 0x2, 0x1d3) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x3f, {0x2, 0x0, 0x0, 0x4}, [@FRA_FLOW={0x8, 0xb, 0xb05}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 5.990773196s ago: executing program 8 (id=2169): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x1e3d00, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32], 0x50) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c6000000001f0000feff2c707f8f00ff", 0x58}], 0x1) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000440)={0xe000003, 0xfffffffffffffe55, 0x0, 0x1, 0x5}) 5.036796614s ago: executing program 8 (id=2170): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0x94, 0x0, 0x1}) syz_usb_connect(0x2, 0x8c6, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a240800000002010208240501"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x20, 0xb1, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x55acad376baa42d4, 0x2, 0x5, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x1, 0x8}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xc, 0x8, 0x8, 0x40, 0x6f}, 0x2d, &(0x7f0000000080)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xf9, 0x9, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x9, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "9dc0ac2429236be21939bb2a4a2a3650"}]}, 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x408}}, {0xb9, &(0x7f0000000200)=@string={0xb9, 0x3, "0b82a6d28f5f1ec6e442e75946ccf43544d6107385f280594fb258bbfbcc833635450e2223ec6cc5fb1e205b8aaa1c93964cba1cc20baec9b9bc7931ee1c17143193b723e11fa8be6f8d2075b491952ce867419217be951da5bc6e92eaa5d35e0a174ca6245f2cb2ec0f861b68b55564742fe2cce07a58970e07a2f230b079325c0dbbef1ff9eb1d9afcbaf41d05b28e402271673195b002283ad653bb47b71dfea2079be71ce874b9eda5e2a51d76eaaee438a69b3eb4"}}]}) 4.292852386s ago: executing program 6 (id=2172): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x43, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0401220c"], 0x7) r1 = socket(0x10, 0x803, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x160, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26c}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x63db}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff0000000000000}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd3a3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0xc055}, 0x40800) r4 = accept$alg(r2, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec07", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)="25bbf9", 0x3}], 0x1}}], 0x2, 0x8058) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000200)={'veth1_macvtap\x00', 0xdd}) 3.972719865s ago: executing program 6 (id=2174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x7, 0x0, 0x80, 0x7fff7ffc}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x5) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x2, 0x5}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x4}]}) r7 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00569689b3f365d13cb704434e0ed16800"/144]}, 0x108) 3.732894144s ago: executing program 5 (id=2175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000a40)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0xa000000) 3.4322328s ago: executing program 5 (id=2176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="34000000000701010000000000030000000000040900010073797a3000000000080005"], 0x34}}, 0x20008004) 3.092881219s ago: executing program 5 (id=2177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) personality(0x5400002) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) fspick(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d040012801400000e0f00000000000000001300000084000a"], 0x88}}, 0x20050800) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 2.67366651s ago: executing program 7 (id=2178): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x20003}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, r2, 0x601}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x1e0, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xa, 0x3, "0ce95897af56"}, @TIPC_NLA_NODE_ID={0x79, 0x3, "5d194791085a9b73cd2f23e2a1e80130f94ac4a17ec5e5bbb08e4f94b24faade0a72f06b1a27f9dd24a4ee6837b01200753c79bbbcb3d3e1864ad1b79bfcbf1a13be8af8d6144a6d34df3c73118888b86fc30e01ea37db982c9b78a00e69ef040ac07dfd105de2823896503504b9c1d922f6762d9f"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "33dc8c97978563b18717be98fbada961ea3b671b24e686412c1c50dc9c53"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x95d}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff9f7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd06}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "eb44d43f770e1437995b7bcc9266e956ede63ac88a124c1024e40b"}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4040}, 0x10) 2.658487714s ago: executing program 5 (id=2179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0xf5ffffff}, 0x0) 2.024879832s ago: executing program 5 (id=2180): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0015"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 2.011379469s ago: executing program 7 (id=2181): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0}, 0x94) r0 = syz_open_procfs(0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='dont_measure,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c66736e616d653db8d34dad2f2d1fe62c756964", @ANYRESDEC=0x0, @ANYBLOB=',don', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10042008) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="190400"/20, @ANYRES32=0x0, @ANYBLOB="01ce80d199487302ce05000000d31000"/28], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f0000f0000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 1.728605s ago: executing program 5 (id=2182): syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\t\x00', @ANYRES16=r0, @ANYBLOB="000228bd7000fbdbdf250200000005003d000600000008003f"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'8255\x00', [0xfffffffb, 0x2166, 0x2, 0x100000, 0x88d6, 0x8f, 0xfffffffd, 0x10, 0x2, 0xffffffff, 0x200, 0xfff, 0x344, 0x1, 0x2, 0x200, 0x9, 0x3, 0x3, 0xe, 0x4, 0x0, 0x80, 0x7ff, 0x1, 0x1, 0xb0c2, 0x7df, 0x8, 0xf3, 0x80000001]}) ioctl$COMEDI_INSNLIST(r3, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f00000edb00)=[{0x4000000, 0x0, 0x0, 0x4, 0x9}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r4, 0x8926, &(0x7f00000000c0)={0xfdfd, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1bb2512b86180e01, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, 0xfffffffffffffffe) r10 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r10, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x4c, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x0, @val=0xe000000}, "0a790cc55a8e"}}}}}}}, 0x0) 1.385655848s ago: executing program 7 (id=2183): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 1.25728022s ago: executing program 8 (id=2184): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x7ff, 0x63, 0x3, 0x6}, {0x7, 0x2, 0x9, 0x1}, {0xffee, 0x0, 0x7, 0x3}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x410, &(0x7f0000000180)={[{@size={'size', 0x3d, [0x2d, 0x25, 0x30]}}, {@quota}, {@nr_blocks={'nr_blocks', 0x3d, [0x45]}}], [{@appraise}]}) fsopen(&(0x7f0000000100)='ceph\x00', 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$video4linux(0x0, 0xe97, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0, 0x20}}, 0xfc36) 1.199316626s ago: executing program 7 (id=2185): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4810) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x28ed0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$dsp(0xffffffffffffffff, &(0x7f0000000300)=""/25, 0x19) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x100000000000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 980.058086ms ago: executing program 6 (id=2186): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000580)={0x2c, r5, 0x1, 0x40, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x8000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r8 = dup2(r7, r7) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYRES64], 0x46) recvmmsg(r8, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r9 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0x0, {0xfffffffe, 0xbde, 0x3ff, 0x10000}}) 223.850511ms ago: executing program 7 (id=2187): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28, 0xfbffff7f}, 0x0) 104.889976ms ago: executing program 8 (id=2188): io_submit(0x0, 0x1, &(0x7f0000000180)=[0x0]) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000780)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010102}, 0x2, 0x2, 0x4, 0x4}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)="10c9c194d4a8066bc9f77431a932b32055aa0e62b097ef8685206a61d16b5ecc53f9a998267429db1d21f6b5d2ffef6efacd2999894df9e9c81196f229d9d59caafd6d28fc851568b5d2320c4d901c854574f6f7aae96dbeb5f711a190d167e97746a0ce7839a68d5863b09de2d6ae097d983680412e9c6607e72710ac70a974c49a2bfeedd9a71fe93bc4b494407ee0a95eed204c7b3e9cc053e62e0703c009216e4843b8e26bb200e997f3a7aca1cecced468e75c4e5df7bf88937168d00151b83ce4969e844c6d3bc05f62fbe95", 0xcf}, {&(0x7f00000000c0)="6686bb716c1db04ae98c37e56c966dc0330fd761b0aec7445b609d17ed73aaef8de884b40e7be5aaeb9104d5f63bff295295bc3112ed3724cefa7c9ed6530b91e0bb8bcf36990348115943478a261b3fbf6fa367efcded2d311d3c9d2a7e14ce2143ef00179ee0c3c29c605067733191e6e27f61ccabee27b7e2757626d47f12153e70e326aac520de31e571a254bdab28af465ba93e92b2856874c5671c2424ab05086c33aaa28762", 0xa9}, {&(0x7f00000002c0)="e8528bfa9f2bea07f4cb3e059941e3bb3f8634c7d7f4851ec76558218a2d823371a0c270a4168147afafa5f60c28c80c7162bf21389ac8674cc101a398900c1eef85e04064e48dcb93f0b6d06c66894065b5d0e6cbd4edb4b3a113c43de54dd059ec8d3077483d2e9364e97bfd9f67ff2fbc33ecbc7811cf04c7cfd19e9692ab03be01f473f14eb169672ff97bbfdeff27bafa96356bb20f0c7072d4a0f782b8a586a528", 0xa4}, {&(0x7f0000000380)="22418ffcc3eaeefe5444170c003c6b2f9a63586558443aae0d115c04a027d01c2c24f14a6a913fe79615451cb88bdd507050bd09b2180edc6e45369d40a7eae6764fefa1395187649892f7ffcc0dd84635e12e5ffc1357d3d292ba", 0x5b}, {&(0x7f0000000400)="d27a314751cc983d340ec412e31fb4942979e3f0bddcd4f7c21bb958ea84a1efd4799a877c388b2ed7bd9eb9b614b8684f00ef0664a7b7989cf92ff5e8a860efb0d36ff5a424b2417a67bb276c1e16c1a5132a329ad8dde018d732b42a50fbe5b9ae95d39ddcd778d226ccb1024a7a50c3c37ccb53b7d0a905a22809512a7b30745a7c8105b066c44542337acfab4782e8b63391e560b830924ddf15433ec9df9f54f6d5e02d77cbcfb5171341300caf81ecc740f2dae65021d36aeb", 0xbc}, {&(0x7f00000004c0)="0f13cce0482a9cc0b8e1529c81bb4b9189ac852aa80a9b36fb9515ded1156f6f4e470e635d87e1d8ac94adb2c251c77dfc32b91c105238b29294cfefbead37bf", 0x40}], 0x6, &(0x7f0000000580)=[{0x10, 0x1, 0x80000000}, {0x98, 0x10a, 0x80, "763743750697148a458edfe494b66d39418ed7fc9ae060b79f444c9d16bc134860f376613c67aeaba92d99172c1f0c62614b1a0c5465f81c071a972c87c1151f500eb367bd42abad08f5709f711fc4d416b9e8f227ef6ad875fa2cbe6705fb05976c7373ef90d20b732b704ac4f87112148ac8736215f8dba73d83a849f7d16332b95a100f"}, {0xc8, 0x6, 0x9, "94e52a099ecd530797e8a46a5d18a00f04a072a754ecaf802b296dd886b82103271e9d94b821e3d0a718fb3a574a8c555a82afbf83d75eef92d70317f6da953d99ccaba4da01561bd3cf5c82cf2e4d523967798df95755fbac0d1623a191e91306cbae732a6b4ba38d6727a0cbc85e065b5547b0082dd7f7821b91a6ce1d339bbc54fc00e3e784da029891fda392dc7f772b18a385c6d7068fe685ef9e21abdb57f3426f14aee48dd88c952a83f3dff41b61"}, {0x80, 0xff, 0x2, "bcd0d931342e67fbe7bb8e9dc6d24497343a7e2c003d8ae1fc68055ff233b8ec3ec39abe4d802cdb3f90c112d8d327e261f1a107fc33286312e968d04b6235e9c45f8d8b9fd871d1b53f3ae6e4fc2496e5f6ec87dce5e00fc34c6327a474c01d3c83e551114e1ac36b"}], 0x1f0}, 0x48083) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) io_submit(0x0, 0x1, &(0x7f0000000180)=[0x0]) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) sendmsg(r0, &(0x7f0000000780)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010102}, 0x2, 0x2, 0x4, 0x4}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)="10c9c194d4a8066bc9f77431a932b32055aa0e62b097ef8685206a61d16b5ecc53f9a998267429db1d21f6b5d2ffef6efacd2999894df9e9c81196f229d9d59caafd6d28fc851568b5d2320c4d901c854574f6f7aae96dbeb5f711a190d167e97746a0ce7839a68d5863b09de2d6ae097d983680412e9c6607e72710ac70a974c49a2bfeedd9a71fe93bc4b494407ee0a95eed204c7b3e9cc053e62e0703c009216e4843b8e26bb200e997f3a7aca1cecced468e75c4e5df7bf88937168d00151b83ce4969e844c6d3bc05f62fbe95", 0xcf}, {&(0x7f00000000c0)="6686bb716c1db04ae98c37e56c966dc0330fd761b0aec7445b609d17ed73aaef8de884b40e7be5aaeb9104d5f63bff295295bc3112ed3724cefa7c9ed6530b91e0bb8bcf36990348115943478a261b3fbf6fa367efcded2d311d3c9d2a7e14ce2143ef00179ee0c3c29c605067733191e6e27f61ccabee27b7e2757626d47f12153e70e326aac520de31e571a254bdab28af465ba93e92b2856874c5671c2424ab05086c33aaa28762", 0xa9}, {&(0x7f00000002c0)="e8528bfa9f2bea07f4cb3e059941e3bb3f8634c7d7f4851ec76558218a2d823371a0c270a4168147afafa5f60c28c80c7162bf21389ac8674cc101a398900c1eef85e04064e48dcb93f0b6d06c66894065b5d0e6cbd4edb4b3a113c43de54dd059ec8d3077483d2e9364e97bfd9f67ff2fbc33ecbc7811cf04c7cfd19e9692ab03be01f473f14eb169672ff97bbfdeff27bafa96356bb20f0c7072d4a0f782b8a586a528", 0xa4}, {&(0x7f0000000380)="22418ffcc3eaeefe5444170c003c6b2f9a63586558443aae0d115c04a027d01c2c24f14a6a913fe79615451cb88bdd507050bd09b2180edc6e45369d40a7eae6764fefa1395187649892f7ffcc0dd84635e12e5ffc1357d3d292ba", 0x5b}, {&(0x7f0000000400)="d27a314751cc983d340ec412e31fb4942979e3f0bddcd4f7c21bb958ea84a1efd4799a877c388b2ed7bd9eb9b614b8684f00ef0664a7b7989cf92ff5e8a860efb0d36ff5a424b2417a67bb276c1e16c1a5132a329ad8dde018d732b42a50fbe5b9ae95d39ddcd778d226ccb1024a7a50c3c37ccb53b7d0a905a22809512a7b30745a7c8105b066c44542337acfab4782e8b63391e560b830924ddf15433ec9df9f54f6d5e02d77cbcfb5171341300caf81ecc740f2dae65021d36aeb", 0xbc}, {&(0x7f00000004c0)="0f13cce0482a9cc0b8e1529c81bb4b9189ac852aa80a9b36fb9515ded1156f6f4e470e635d87e1d8ac94adb2c251c77dfc32b91c105238b29294cfefbead37bf", 0x40}], 0x6, &(0x7f0000000580)=[{0x10, 0x1, 0x80000000}, {0x98, 0x10a, 0x80, "763743750697148a458edfe494b66d39418ed7fc9ae060b79f444c9d16bc134860f376613c67aeaba92d99172c1f0c62614b1a0c5465f81c071a972c87c1151f500eb367bd42abad08f5709f711fc4d416b9e8f227ef6ad875fa2cbe6705fb05976c7373ef90d20b732b704ac4f87112148ac8736215f8dba73d83a849f7d16332b95a100f"}, {0xc8, 0x6, 0x9, "94e52a099ecd530797e8a46a5d18a00f04a072a754ecaf802b296dd886b82103271e9d94b821e3d0a718fb3a574a8c555a82afbf83d75eef92d70317f6da953d99ccaba4da01561bd3cf5c82cf2e4d523967798df95755fbac0d1623a191e91306cbae732a6b4ba38d6727a0cbc85e065b5547b0082dd7f7821b91a6ce1d339bbc54fc00e3e784da029891fda392dc7f772b18a385c6d7068fe685ef9e21abdb57f3426f14aee48dd88c952a83f3dff41b61"}, {0x80, 0xff, 0x2, "bcd0d931342e67fbe7bb8e9dc6d24497343a7e2c003d8ae1fc68055ff233b8ec3ec39abe4d802cdb3f90c112d8d327e261f1a107fc33286312e968d04b6235e9c45f8d8b9fd871d1b53f3ae6e4fc2496e5f6ec87dce5e00fc34c6327a474c01d3c83e551114e1ac36b"}], 0x1f0}, 0x48083) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) 0s ago: executing program 7 (id=2189): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0xf4010000}, 0x9c) kernel console output (not intermixed with test programs): ttributes in process `syz.8.1779'. [ 607.350821][T13401] syz.8.1781 (13401): drop_caches: 1 [ 607.534190][T13401] syz.8.1781 (13401): drop_caches: 1 [ 607.602185][T12432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.614971][T12432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.637569][T12432] bond0 (unregistering): Released all slaves [ 607.655893][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 607.690611][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 607.968368][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 607.989445][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 608.005890][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 608.398925][T10943] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 608.655789][T12432] hsr_slave_0: left promiscuous mode [ 608.675027][T12432] hsr_slave_1: left promiscuous mode [ 608.685420][T10943] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 608.689261][T12432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.702832][T12432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.705289][T10943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.723336][T12432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.732345][T10943] usb 7-1: config 0 descriptor?? [ 608.743208][T12432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.766272][T12432] veth1_macvtap: left promiscuous mode [ 608.774250][T12432] veth0_macvtap: left promiscuous mode [ 608.781558][T12432] veth1_vlan: left promiscuous mode [ 608.786871][T12432] veth0_vlan: left promiscuous mode [ 609.298637][T12432] team0 (unregistering): Port device team_slave_1 removed [ 609.479259][T12432] team0 (unregistering): Port device team_slave_0 removed [ 609.603128][T13430] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 609.739252][T13444] input: syz0 as /devices/virtual/input/input34 [ 610.028308][T12448] Bluetooth: hci2: command tx timeout [ 610.145080][T13451] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 610.151727][T13451] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 610.174467][T13454] vxfs: WRONG superblock magic 00000000 at 1 [ 610.188591][T13454] vxfs: WRONG superblock magic 00000000 at 8 [ 610.194895][T13454] vxfs: can't find superblock. [ 610.247525][T13451] vhci_hcd vhci_hcd.0: Device attached [ 610.428373][ T5952] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 610.599621][T13454] IPVS: length: 129 != 8 [ 610.735463][T13452] vhci_hcd: connection reset by peer [ 610.743682][ T66] vhci_hcd: stop threads [ 610.754685][ T66] vhci_hcd: release socket [ 610.773360][ T66] vhci_hcd: disconnect device [ 610.776095][T10943] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 610.792285][ T9] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 610.800036][T10943] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 610.847602][T10943] asix 7-1:0.0: probe with driver asix failed with error -71 [ 610.887442][T10943] usb 7-1: USB disconnect, device number 7 [ 610.974218][ T9] usb 9-1: Invalid ep0 maxpacket: 64 [ 611.150348][ T9] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 611.350221][T13403] chnl_net:caif_netlink_parms(): no params data found [ 611.388367][ T9] usb 9-1: Invalid ep0 maxpacket: 64 [ 611.473895][ T9] usb usb9-port1: attempt power cycle [ 611.672656][T13480] syz.7.1793 (13480): drop_caches: 1 [ 611.789046][T13403] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.797592][T13403] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.806204][T13403] bridge_slave_0: entered allmulticast mode [ 611.815540][T13403] bridge_slave_0: entered promiscuous mode [ 611.832954][T13403] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.842628][T13403] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.849992][T13403] bridge_slave_1: entered allmulticast mode [ 611.856797][T13403] bridge_slave_1: entered promiscuous mode [ 611.863343][T13480] syz.7.1793 (13480): drop_caches: 1 [ 611.881117][ T9] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 611.918114][ T9] usb 9-1: Invalid ep0 maxpacket: 64 [ 611.930172][T13403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.951888][T13403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.987933][T13403] team0: Port device team_slave_0 added [ 611.997822][T13403] team0: Port device team_slave_1 added [ 612.042079][T13403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.049216][ T9] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 612.061959][T13403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.088454][T13403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.099460][ T9] usb 9-1: Invalid ep0 maxpacket: 64 [ 612.105644][ T9] usb usb9-port1: unable to enumerate USB device [ 612.112222][T12448] Bluetooth: hci2: command tx timeout [ 612.121438][T13403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.131485][T13403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.161706][T13403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.233858][T13403] hsr_slave_0: entered promiscuous mode [ 612.248913][T13403] hsr_slave_1: entered promiscuous mode [ 612.256387][T13403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.264813][T13403] Cannot create hsr debugfs directory [ 613.091895][T13403] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 613.116226][T13403] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 613.145650][T13403] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 613.184791][T13403] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 613.893087][T13403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.268398][T12448] Bluetooth: hci2: command tx timeout [ 614.280396][T13403] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.300867][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.307960][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.392260][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.399468][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.523008][ T30] audit: type=1326 audit(1752878303.321:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.6.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55718e929 code=0x7ffc0000 [ 614.546421][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.821607][ T30] audit: type=1326 audit(1752878303.331:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.6.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe55718e929 code=0x7ffc0000 [ 614.845009][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.994654][ T30] audit: type=1326 audit(1752878303.331:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.6.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55718e929 code=0x7ffc0000 [ 615.018324][ T30] audit: type=1326 audit(1752878303.341:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.6.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe55718e929 code=0x7ffc0000 [ 616.818319][T12448] Bluetooth: hci2: command tx timeout [ 616.830831][ T5952] vhci_hcd: vhci_device speed not set [ 616.920935][ T30] audit: type=1326 audit(1752878303.341:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.6.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55718e929 code=0x7ffc0000 [ 616.944334][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.052594][T13544] i2c i2c-0: Invalid block write size 33 [ 617.097537][T13403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.129385][T13544] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 617.134272][ T30] audit: type=1326 audit(1752878303.341:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.6.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5571858e7 code=0x7ffc0000 [ 617.169390][ T30] audit: type=1326 audit(1752878303.341:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.6.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe55712ab19 code=0x7ffc0000 [ 617.200627][ T30] audit: type=1326 audit(1752878303.341:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.6.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe55718e929 code=0x7ffc0000 [ 617.267330][ T30] audit: type=1326 audit(1752878303.341:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.6.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55718e929 code=0x7ffc0000 [ 617.298317][ T30] audit: type=1326 audit(1752878303.351:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.6.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe55718e929 code=0x7ffc0000 [ 617.384242][T13556] program syz.7.1803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 619.988434][T13403] veth0_vlan: entered promiscuous mode [ 620.607547][T13403] veth1_vlan: entered promiscuous mode [ 620.650492][T13403] veth0_macvtap: entered promiscuous mode [ 621.040552][T13403] veth1_macvtap: entered promiscuous mode [ 621.118698][T13403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.146180][T13403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.167720][T13403] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.176625][T11568] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 621.198287][T13403] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.221686][T13403] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.239188][T13403] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.375454][T13596] syz.5.1812 (13596): drop_caches: 1 [ 621.401699][T13596] syz.5.1812 (13596): drop_caches: 1 [ 621.407124][T11568] usb 9-1: Using ep0 maxpacket: 16 [ 621.417138][T11568] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.437624][T11568] usb 9-1: config 0 has no interfaces? [ 621.450602][T11568] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 621.460290][T11568] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 621.471940][T11568] usb 9-1: Manufacturer: syz [ 621.486541][T11568] usb 9-1: config 0 descriptor?? [ 621.538030][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 621.538042][ T30] audit: type=1400 audit(1752878539.366:576): avc: denied { write } for pid=13592 comm="syz.7.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 621.577798][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.590768][ T6147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.610867][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.623671][ T6147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.912802][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1813'. [ 622.269391][ T3002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.435607][ T3002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.657034][ T3002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.752836][ T3002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.998614][ T3002] bridge_slave_1: left allmulticast mode [ 623.004371][ T3002] bridge_slave_1: left promiscuous mode [ 623.010196][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.019805][ T3002] bridge_slave_0: left allmulticast mode [ 623.025468][ T3002] bridge_slave_0: left promiscuous mode [ 623.031277][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.286753][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1815'. [ 623.405965][ T3002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.416857][ T3002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.427181][ T3002] bond0 (unregistering): Released all slaves [ 623.462213][T13605] bridge1: port 1(ip6gretap1) entered blocking state [ 623.499064][T13605] bridge1: port 1(ip6gretap1) entered disabled state [ 623.508687][T13605] ip6gretap1: entered allmulticast mode [ 623.538437][T13605] ip6gretap1: entered promiscuous mode [ 623.891470][T11568] usb 9-1: USB disconnect, device number 13 [ 623.928527][ T30] audit: type=1400 audit(1752878541.706:577): avc: denied { bind } for pid=13607 comm="syz.6.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 623.953240][T13606] veth3: entered promiscuous mode [ 623.958569][T13606] bridge1: port 2(veth3) entered blocking state [ 623.964932][T13606] bridge1: port 2(veth3) entered disabled state [ 623.972078][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.978707][T13606] veth3: entered allmulticast mode [ 624.039914][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 624.051217][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 624.061015][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 624.069010][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 624.078808][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 624.312340][T13617] syz.8.1817 (13617): drop_caches: 1 [ 625.451138][T13626] program syz.6.1819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.714957][T13617] syz.8.1817 (13617): drop_caches: 1 [ 625.762661][ T3002] hsr_slave_0: left promiscuous mode [ 625.940430][ T3002] hsr_slave_1: left promiscuous mode [ 625.959184][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.988655][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.139481][T12448] Bluetooth: hci2: command tx timeout [ 626.310974][ T30] audit: type=1400 audit(1752878544.116:578): avc: denied { setopt } for pid=13630 comm="syz.5.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 626.418776][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.426272][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.531806][ T3002] veth1_macvtap: left promiscuous mode [ 626.551692][ T3002] veth0_macvtap: left promiscuous mode [ 626.565331][ T3002] veth1_vlan: left promiscuous mode [ 626.578682][ T3002] veth0_vlan: left promiscuous mode [ 626.709791][T13638] syz.6.1821 (13638): drop_caches: 1 [ 626.794572][T13642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.983835][T13638] syz.6.1821 (13638): drop_caches: 1 [ 627.369128][T13647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.474263][T13655] netlink: 'syz.8.1828': attribute type 11 has an invalid length. [ 627.485848][T13655] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1828'. [ 627.671444][T13661] netlink: 'syz.8.1830': attribute type 1 has an invalid length. [ 627.729683][T13663] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1830'. [ 627.809280][T13665] netlink: 'syz.7.1829': attribute type 10 has an invalid length. [ 628.188286][T12448] Bluetooth: hci2: command tx timeout [ 629.235742][ T3002] team0 (unregistering): Port device team_slave_1 removed [ 629.274887][ T3002] team0 (unregistering): Port device team_slave_0 removed [ 629.359991][ T10] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 629.524278][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.537420][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 629.546629][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.559177][ T10] usb 7-1: config 0 descriptor?? [ 629.567408][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 629.573385][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 629.581989][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 629.676591][T13650] bridge_slave_0: left allmulticast mode [ 629.682535][T13650] bridge_slave_0: left promiscuous mode [ 629.688347][T13650] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.697704][T13650] bridge_slave_1: left allmulticast mode [ 629.705958][T13650] bridge_slave_1: left promiscuous mode [ 629.713292][T13650] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.727795][T13650] bond0: (slave bond_slave_0): Releasing backup interface [ 629.737216][T13650] bond0: (slave bond_slave_1): Releasing backup interface [ 629.760600][T13650] team0: Port device team_slave_0 removed [ 629.771688][T13650] team0: Port device team_slave_1 removed [ 629.777888][T13650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.785927][T13650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.794370][T13650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.801907][T13650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.813628][T13661] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 629.817826][T13664] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 630.268305][T12448] Bluetooth: hci2: command tx timeout [ 630.970110][T13613] chnl_net:caif_netlink_parms(): no params data found [ 631.533712][ T30] audit: type=1326 audit(1752878549.366:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.7.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527198e929 code=0x7ffc0000 [ 631.582851][ T30] audit: type=1326 audit(1752878549.396:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.7.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f527198d290 code=0x7ffc0000 [ 631.683822][ T30] audit: type=1326 audit(1752878549.396:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.7.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527198e929 code=0x7ffc0000 [ 631.720531][ T30] audit: type=1326 audit(1752878549.396:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.7.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527198e929 code=0x7ffc0000 [ 631.824300][T13705] 9pnet_fd: Insufficient options for proto=fd [ 631.949244][ T30] audit: type=1326 audit(1752878549.396:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.7.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f527198e929 code=0x7ffc0000 [ 632.019411][ T30] audit: type=1400 audit(1752878549.396:584): avc: denied { ioctl } for pid=13697 comm="syz.7.1838" path="/dev/ptyr2" dev="devtmpfs" ino=137 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 632.020571][T13613] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.045988][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.061340][ T30] audit: type=1326 audit(1752878549.396:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.7.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527198e929 code=0x7ffc0000 [ 632.084740][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.498518][T12448] Bluetooth: hci2: command tx timeout [ 632.516112][ T30] audit: type=1326 audit(1752878549.396:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.7.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527198e929 code=0x7ffc0000 [ 632.548515][T13613] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.581018][ T30] audit: type=1326 audit(1752878549.396:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.7.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f527198e929 code=0x7ffc0000 [ 632.586990][T13613] bridge_slave_0: entered allmulticast mode [ 632.605166][ T30] audit: type=1400 audit(1752878549.396:588): avc: denied { getattr } for pid=13697 comm="syz.7.1838" name="/" dev="dmabuf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 632.632896][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.639204][T13707] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 632.681541][T13613] bridge_slave_0: entered promiscuous mode [ 632.735196][ T5952] usb 7-1: USB disconnect, device number 8 [ 632.780444][T13613] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.804147][T13613] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.822209][T13613] bridge_slave_1: entered allmulticast mode [ 632.850239][T13613] bridge_slave_1: entered promiscuous mode [ 633.494664][T13613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.508010][T13613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.593158][T13613] team0: Port device team_slave_0 added [ 633.601766][T13613] team0: Port device team_slave_1 added [ 633.642910][T13613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.658553][T13613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.684467][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.785882][T13613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.809937][T13613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.818721][T10943] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 633.828375][T13613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.854274][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.862443][T13613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.024168][T13738] FAULT_INJECTION: forcing a failure. [ 634.024168][T13738] name failslab, interval 1, probability 0, space 0, times 0 [ 634.037193][T13738] CPU: 0 UID: 0 PID: 13738 Comm: syz.7.1848 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 634.037217][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.037228][T13738] Call Trace: [ 634.037234][T13738] [ 634.037240][T13738] dump_stack_lvl+0x16c/0x1f0 [ 634.037270][T13738] should_fail_ex+0x512/0x640 [ 634.037293][T13738] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 634.037319][T13738] should_failslab+0xc2/0x120 [ 634.037345][T13738] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 634.037368][T13738] ? security_file_alloc+0x34/0x2b0 [ 634.037398][T13738] security_file_alloc+0x34/0x2b0 [ 634.037422][T13738] init_file+0x93/0x4c0 [ 634.037439][T13738] alloc_empty_file+0x73/0x1e0 [ 634.037458][T13738] path_openat+0xda/0x2cb0 [ 634.037488][T13738] ? stack_trace_save+0x8e/0xc0 [ 634.037513][T13738] ? __pfx_path_openat+0x10/0x10 [ 634.037535][T13738] ? stack_depot_save_flags+0x28/0xa40 [ 634.037565][T13738] do_filp_open+0x20b/0x470 [ 634.037587][T13738] ? kasan_save_track+0x14/0x30 [ 634.037610][T13738] ? __pfx_do_filp_open+0x10/0x10 [ 634.037632][T13738] ? __x64_sys_execve+0x74/0xb0 [ 634.037652][T13738] ? do_syscall_64+0xcd/0x4c0 [ 634.037675][T13738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.037730][T13738] do_open_execat+0xf9/0x380 [ 634.037751][T13738] ? __pfx_do_open_execat+0x10/0x10 [ 634.037782][T13738] alloc_bprm+0x2d/0x6f0 [ 634.037806][T13738] do_execveat_common.isra.0+0x1ce/0x610 [ 634.037834][T13738] __x64_sys_execve+0x8e/0xb0 [ 634.037857][T13738] do_syscall_64+0xcd/0x4c0 [ 634.037883][T13738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.037900][T13738] RIP: 0033:0x7f527198e929 [ 634.037914][T13738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.037931][T13738] RSP: 002b:00007f5272882038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 634.037948][T13738] RAX: ffffffffffffffda RBX: 00007f5271bb6160 RCX: 00007f527198e929 [ 634.037959][T13738] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 0000200000000180 [ 634.037970][T13738] RBP: 00007f5272882090 R08: 0000000000000000 R09: 0000000000000000 [ 634.037980][T13738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.037990][T13738] R13: 0000000000000000 R14: 00007f5271bb6160 R15: 00007ffdbfcb5198 [ 634.038014][T13738] [ 634.300374][T13613] hsr_slave_0: entered promiscuous mode [ 634.307243][T13613] hsr_slave_1: entered promiscuous mode [ 634.312914][T10943] usb 9-1: Using ep0 maxpacket: 16 [ 634.319578][T10943] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 634.328515][T10943] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.338986][T10943] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.349221][T13613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.356825][T13613] Cannot create hsr debugfs directory [ 634.405741][T10943] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.414860][T10943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.422912][T10943] usb 9-1: Product: syz [ 634.427073][T10943] usb 9-1: Manufacturer: syz [ 634.431783][T10943] usb 9-1: SerialNumber: syz [ 634.784523][T13728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.805527][T13728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.049944][T10943] usb 9-1: 0:2 : does not exist [ 635.140344][T10943] usb 9-1: USB disconnect, device number 14 [ 635.397607][T13749] overlayfs: missing 'lowerdir' [ 636.665360][T13613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 636.683237][T13613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 636.702092][T13613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 636.817064][T13613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 637.639754][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1856'. [ 637.896730][T13613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.921262][T13613] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.030246][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.037550][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.394172][T13785] program syz.5.1860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.716123][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.723246][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.084253][T13613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.118256][ T5952] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 640.248464][ T9] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 640.276939][ T5952] usb 9-1: config 0 has an invalid interface number: 237 but max is 0 [ 640.285421][ T5952] usb 9-1: config 0 has no interface number 0 [ 640.298377][ T5952] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 640.319909][ T5952] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 640.344771][ T5952] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 640.370489][ T5952] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 640.400138][ T5952] usb 9-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 640.413670][ T5952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.432587][ T5952] usb 9-1: Product: syz [ 640.436325][ T9] usb 7-1: config 0 has no interfaces? [ 640.442086][ T5952] usb 9-1: Manufacturer: syz [ 640.445080][ T9] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=fd.00 [ 640.446799][ T5952] usb 9-1: SerialNumber: syz [ 640.482498][ T9] usb 7-1: New USB device strings: Mfr=128, Product=0, SerialNumber=35 [ 640.494607][ T5952] usb 9-1: config 0 descriptor?? [ 640.500345][T13613] veth0_vlan: entered promiscuous mode [ 640.515362][ T5952] xpad 9-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 640.525950][ T9] usb 7-1: Manufacturer: syz [ 640.536148][ T9] usb 7-1: SerialNumber: syz [ 640.543228][T13613] veth1_vlan: entered promiscuous mode [ 640.548127][ T5952] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.237/input/input35 [ 640.550827][ T9] usb 7-1: config 0 descriptor?? [ 640.614211][T13613] veth0_macvtap: entered promiscuous mode [ 640.626215][T13613] veth1_macvtap: entered promiscuous mode [ 640.662645][T13613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.677773][T13613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.689326][T13613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.698052][T13613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.710454][T13613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.719440][T13613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.814951][ T10] usb 7-1: USB disconnect, device number 9 [ 640.979764][ T1021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.993205][ T1021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.048390][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.066509][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.228078][ T10] usb 9-1: USB disconnect, device number 15 [ 641.728352][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 641.921634][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 641.960312][ T10] usb 9-1: config 6 has an invalid interface number: 200 but max is 0 [ 641.993995][ T10] usb 9-1: config 6 has no interface number 0 [ 642.019182][ T10] usb 9-1: config 6 interface 200 has no altsetting 0 [ 642.059080][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 642.059096][ T30] audit: type=1400 audit(1752878559.896:640): avc: denied { ioctl } for pid=13848 comm="syz.5.1874" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 642.059519][ T10] usb 9-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 642.076137][ T66] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.089963][ C0] vkms_vblank_simulate: vblank timer overrun [ 642.268099][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.720911][ T10] usb 9-1: Product: syz [ 642.726392][ T10] usb 9-1: Manufacturer: syz [ 642.731036][ T10] usb 9-1: SerialNumber: syz [ 642.928382][ T66] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.987576][ T10] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 643.014916][ T10] dvb-usb: bulk message failed: -71 (3/0) [ 643.026303][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 643.039001][ T10] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 643.046817][ T10] usb 9-1: media controller created [ 643.091928][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 643.112835][ T10] dvb-usb: bulk message failed: -71 (6/0) [ 643.138367][ T10] dvb-usb: bulk message failed: -71 (6/0) [ 643.152743][ T10] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 643.172152][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input36 [ 643.190659][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 643.197601][ T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 643.227115][ T10] usb 9-1: USB disconnect, device number 16 [ 643.265724][ T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 643.320251][ T66] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.376207][ T66] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.474053][ T66] bridge_slave_1: left allmulticast mode [ 643.482065][ T66] bridge_slave_1: left promiscuous mode [ 643.487732][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.496302][ T66] bridge_slave_0: left allmulticast mode [ 643.502129][ T66] bridge_slave_0: left promiscuous mode [ 643.507884][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.839734][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.882811][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.925826][ T66] bond0 (unregistering): Released all slaves [ 646.510226][T13892] program syz.8.1884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 646.762131][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 646.777037][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 646.791605][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 646.819003][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 646.832190][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 646.892702][T13898] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 646.899341][T13898] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 646.907223][T13898] vhci_hcd vhci_hcd.0: Device attached [ 648.028254][T13899] vhci_hcd: connection closed [ 648.050871][T12432] vhci_hcd: stop threads [ 648.092477][T12432] vhci_hcd: release socket [ 648.096945][T12432] vhci_hcd: disconnect device [ 648.276081][ T30] audit: type=1400 audit(1752878566.106:641): avc: denied { read } for pid=13905 comm="syz.8.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 648.296876][ T66] hsr_slave_0: left promiscuous mode [ 648.789501][T13919] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 648.920902][ T66] hsr_slave_1: left promiscuous mode [ 648.923207][T12448] Bluetooth: hci2: command tx timeout [ 648.927038][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.993559][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.112631][ T30] audit: type=1400 audit(1752878566.826:642): avc: denied { ioctl } for pid=13905 comm="syz.8.1888" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 649.254694][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.268298][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.342647][ T66] veth1_macvtap: left promiscuous mode [ 649.363931][ T66] veth0_macvtap: left promiscuous mode [ 649.376571][ T66] veth1_vlan: left promiscuous mode [ 649.392643][ T66] veth0_vlan: left promiscuous mode [ 649.758417][ T1700] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 649.959041][ T1700] usb 9-1: Using ep0 maxpacket: 16 [ 649.977688][ T1700] usb 9-1: config 0 has an invalid interface number: 79 but max is 0 [ 649.996419][ T1700] usb 9-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 650.010884][ T1700] usb 9-1: config 0 has no interface number 0 [ 650.017094][ T1700] usb 9-1: config 0 interface 79 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 650.034733][ T1700] usb 9-1: config 0 interface 79 has no altsetting 0 [ 650.052035][ T1700] usb 9-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice=5d.2c [ 650.064669][ T1700] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.086260][ T1700] usb 9-1: Product: syz [ 650.094706][ T1700] usb 9-1: Manufacturer: syz [ 650.104086][ T1700] usb 9-1: SerialNumber: syz [ 650.116651][ T1700] usb 9-1: config 0 descriptor?? [ 650.300217][ T66] team0 (unregistering): Port device team_slave_1 removed [ 650.333181][ T1700] usb 9-1: can't set first interface for hiFace device. [ 650.344558][ T1700] snd-usb-hiface 9-1:0.79: probe with driver snd-usb-hiface failed with error -5 [ 650.356367][ T1700] usb 9-1: USB disconnect, device number 17 [ 650.387008][ T66] team0 (unregistering): Port device team_slave_0 removed [ 651.019825][T12448] Bluetooth: hci2: command tx timeout [ 651.280651][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 651.468454][T13940] openvswitch: netlink: Key 32 has unexpected len 20 expected 2 [ 651.548561][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 651.565188][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.580538][T13884] chnl_net:caif_netlink_parms(): no params data found [ 651.603747][ T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 651.648341][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.683352][ T10] usb 9-1: config 0 descriptor?? [ 651.805647][T13953] program syz.6.1899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 652.117051][ T10] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 652.148425][T13884] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.168481][T13884] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.175775][T13884] bridge_slave_0: entered allmulticast mode [ 652.184023][T13884] bridge_slave_0: entered promiscuous mode [ 652.204233][T13884] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.212189][T13884] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.228634][T13884] bridge_slave_1: entered allmulticast mode [ 652.236129][T13884] bridge_slave_1: entered promiscuous mode [ 652.300397][T13884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.316582][T13884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.389511][T13884] team0: Port device team_slave_0 added [ 652.398790][T13884] team0: Port device team_slave_1 added [ 652.447870][T13884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.463737][T13884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.491409][T13884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.504320][T13884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.511832][T13884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.538697][T13935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.547219][T13935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.555170][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 652.569793][T13884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.644879][T13884] hsr_slave_0: entered promiscuous mode [ 652.667635][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1900'. [ 652.668259][T13884] hsr_slave_1: entered promiscuous mode [ 652.728438][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 652.735505][T13884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 652.748121][T13884] Cannot create hsr debugfs directory [ 652.753765][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 652.766701][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 652.832393][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 652.841860][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.862617][ T9] usb 8-1: Product: syz [ 652.873677][ T9] usb 8-1: Manufacturer: syz [ 652.881940][ T9] usb 8-1: SerialNumber: syz [ 652.896129][ T9] usb 8-1: config 0 descriptor?? [ 652.919406][ T9] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 652.944306][ T9] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 653.069024][T12448] Bluetooth: hci2: command tx timeout [ 653.098318][ T24] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 653.332073][ T24] usb 6-1: config 0 has an invalid interface number: 152 but max is 1 [ 653.340665][ T24] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 653.350577][ T24] usb 6-1: config 0 has an invalid interface number: 181 but max is 1 [ 653.362088][ T24] usb 6-1: config 0 has an invalid descriptor of length 167, skipping remainder of the config [ 653.373561][ T24] usb 6-1: config 0 has no interface number 0 [ 653.386336][ T24] usb 6-1: config 0 has no interface number 1 [ 653.396739][ T24] usb 6-1: config 0 interface 152 altsetting 83 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 653.412042][ T24] usb 6-1: config 0 interface 152 altsetting 83 has an endpoint descriptor with address 0x6C, changing to 0xC [ 653.424312][ T24] usb 6-1: config 0 interface 152 altsetting 83 endpoint 0xC has invalid maxpacket 20346, setting to 64 [ 653.438669][ T24] usb 6-1: config 0 interface 152 altsetting 83 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.456130][ T24] usb 6-1: config 0 interface 181 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 653.469889][ T24] usb 6-1: config 0 interface 152 has no altsetting 0 [ 653.476805][ T24] usb 6-1: config 0 interface 181 has no altsetting 0 [ 653.484985][T13884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 653.485814][ T24] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=a9.88 [ 653.505127][T13884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 653.520414][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.528872][ T24] usb 6-1: Product: syz [ 653.533794][ T24] usb 6-1: Manufacturer: syz [ 653.538513][ T24] usb 6-1: SerialNumber: syz [ 653.559602][ T24] usb 6-1: config 0 descriptor?? [ 653.562170][T13884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 653.574760][ T9] em28xx 8-1:0.0: unknown em28xx chip ID (159) [ 653.584831][T13884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 653.768931][ T24] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 653.775232][ T9] em28xx 8-1:0.0: Config register raw data: 0x9f [ 653.776052][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 653.794468][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 653.797879][T13884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.803952][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 653.839153][ T24] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 653.875046][ T24] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 653.879761][T13884] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.911340][ T1700] usb 9-1: USB disconnect, device number 18 [ 653.970597][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 653.978105][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 653.982333][ T30] audit: type=1400 audit(1752878571.806:643): avc: denied { watch } for pid=13957 comm="syz.7.1902" path="/67/file0" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 654.008772][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 654.032423][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.039540][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.048355][ T24] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 654.078136][ T24] usb 6-1: USB disconnect, device number 5 [ 654.122794][T12432] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.129963][T12432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.149807][ T9] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 654.156973][ T9] em28xx 8-1:0.0: No AC97 audio processor [ 654.167679][ T9] usb 8-1: USB disconnect, device number 5 [ 654.192236][ T9] em28xx 8-1:0.0: Disconnecting em28xx [ 654.251573][ T9] em28xx 8-1:0.0: Freeing device [ 654.571266][ T30] audit: type=1400 audit(1752878572.276:644): avc: denied { ioctl } for pid=13986 comm="syz.8.1908" path="socket:[45498]" dev="sockfs" ino=45498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 654.595937][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.047615][T13884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.151569][T12448] Bluetooth: hci2: command tx timeout [ 655.812113][T13884] veth0_vlan: entered promiscuous mode [ 655.895731][T14013] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=16148 sclass=netlink_xfrm_socket pid=14013 comm=syz.5.1914 [ 655.953107][T13884] veth1_vlan: entered promiscuous mode [ 655.962291][T13973] syz.6.1905 (13973): drop_caches: 1 [ 656.034673][T14015] wireguard0: entered promiscuous mode [ 656.042231][T14015] wireguard0: entered allmulticast mode [ 656.365361][T13884] veth0_macvtap: entered promiscuous mode [ 656.387830][T13884] veth1_macvtap: entered promiscuous mode [ 656.775154][T13884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.849139][T13884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.903796][T13884] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.929545][T13884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.941802][T13884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.953002][T13884] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.109210][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.157357][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.291995][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.446491][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.292629][ T2990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.307138][T14053] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1927'. [ 658.437821][ T2990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.577155][ T2990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.664787][ T2990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.840816][ T2990] bridge_slave_1: left allmulticast mode [ 658.846500][ T2990] bridge_slave_1: left promiscuous mode [ 658.857293][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.866687][ T2990] bridge_slave_0: left allmulticast mode [ 658.880231][ T2990] bridge_slave_0: left promiscuous mode [ 658.885921][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.146270][ T2990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.157320][ T2990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.172967][ T2990] bond0 (unregistering): Released all slaves [ 659.379786][ T2990] hsr_slave_0: left promiscuous mode [ 659.385552][ T2990] hsr_slave_1: left promiscuous mode [ 659.391955][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.399387][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.406987][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.414418][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.433012][ T2990] veth1_macvtap: left promiscuous mode [ 659.438548][ T2990] veth0_macvtap: left promiscuous mode [ 659.444058][ T2990] veth1_vlan: left promiscuous mode [ 659.450825][ T2990] veth0_vlan: left promiscuous mode [ 659.905075][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 659.940504][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1936'. [ 660.085157][T14071] syz.5.1934 (14071): drop_caches: 1 [ 660.158484][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 660.165539][ T9] usb 8-1: config 0 has no interfaces? [ 660.174046][ T9] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 660.205720][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.216818][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 660.226472][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 660.236106][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 660.256577][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 660.267034][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 660.278416][ T9] usb 8-1: Product: syz [ 660.283310][ T9] usb 8-1: Manufacturer: syz [ 660.288286][ T9] usb 8-1: SerialNumber: syz [ 660.301676][ T9] usb 8-1: config 0 descriptor?? [ 660.352931][T14071] syz.5.1934 (14071): drop_caches: 1 [ 661.230004][ T2990] team0 (unregistering): Port device team_slave_1 removed [ 661.282466][ T2990] team0 (unregistering): Port device team_slave_0 removed [ 661.758427][ T5952] usb 8-1: USB disconnect, device number 6 [ 662.194762][T14101] 9pnet_fd: Insufficient options for proto=fd [ 662.349878][ T5830] Bluetooth: hci2: command tx timeout [ 662.998466][T14080] chnl_net:caif_netlink_parms(): no params data found [ 663.235498][T14121] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 663.242141][T14121] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 663.250064][T14121] vhci_hcd vhci_hcd.0: Device attached [ 663.388361][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 663.411097][ T5952] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 663.498335][ T24] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 663.578866][T14080] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.614396][ T5952] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 663.634019][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.664482][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.686344][T14080] bridge_slave_0: entered allmulticast mode [ 663.727612][ T5952] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 663.747404][T14080] bridge_slave_0: entered promiscuous mode [ 663.774029][ T5952] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 663.787128][T14080] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.805907][ T5952] usb 7-1: Manufacturer: syz [ 663.815688][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.846399][ T5952] usb 7-1: config 0 descriptor?? [ 663.856590][T14080] bridge_slave_1: entered allmulticast mode [ 663.897561][T14080] bridge_slave_1: entered promiscuous mode [ 663.988403][ T1700] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 664.020104][T14122] vhci_hcd: connection reset by peer [ 664.046376][ T1021] vhci_hcd: stop threads [ 664.075711][ T1021] vhci_hcd: release socket [ 664.112944][ T1021] vhci_hcd: disconnect device [ 664.192419][ T1700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 664.264725][ T1700] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 664.296391][T14080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.323716][ T1700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.348576][ T5952] rc_core: IR keymap rc-hauppauge not found [ 664.379866][ T5952] Registered IR keymap rc-empty [ 664.397429][T14080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.415961][ T1700] usb 6-1: config 0 descriptor?? [ 664.428120][ T5952] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 664.428254][T12448] Bluetooth: hci2: command tx timeout [ 664.538717][ T5952] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input37 [ 664.601943][T14080] team0: Port device team_slave_0 added [ 664.611865][T14080] team0: Port device team_slave_1 added [ 664.630074][ C1] igorplugusb 7-1:0.0: receive overflow, at least 1 lost [ 664.657469][T14080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.664895][T14080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.691134][ T9] usb 9-1: device descriptor read/64, error -71 [ 664.697596][T14080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.709960][T14080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.716919][T14080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.744454][T14080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.801128][T14111] input: syz1 as /devices/virtual/input/input38 [ 664.806878][T14129] rc rc0: two consecutive events of type space [ 664.822732][T14080] hsr_slave_0: entered promiscuous mode [ 664.829518][T14080] hsr_slave_1: entered promiscuous mode [ 664.835648][T14080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.850672][ T5960] usb 7-1: USB disconnect, device number 10 [ 664.994734][ T1700] asus 0003:0B05:17E0.0012: unknown main item tag 0x7 [ 665.097657][ T1700] asus 0003:0B05:17E0.0012: hidraw0: USB HID v0.05 Device [HID 0b05:17e0] on usb-dummy_hcd.5-1/input0 [ 665.178543][ T1700] asus 0003:0B05:17E0.0012: Asus input not registered [ 665.201183][T14080] Cannot create hsr debugfs directory [ 665.214922][ T1700] asus 0003:0B05:17E0.0012: probe with driver asus failed with error -12 [ 665.232485][ T1700] usb 6-1: USB disconnect, device number 6 [ 665.268636][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 665.408472][ T9] usb 9-1: device descriptor read/64, error -71 [ 665.583504][T14080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 665.595864][ T9] usb usb9-port1: attempt power cycle [ 665.599890][T14080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 665.631857][T14080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 665.664347][T14080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 665.815299][T14080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.928498][T14080] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.079455][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 666.165956][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.173135][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.331838][ T9] usb 9-1: device descriptor read/8, error -71 [ 666.413796][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.420941][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.454746][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1954'. [ 666.512987][T12448] Bluetooth: hci2: command tx timeout [ 666.676409][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1956'. [ 667.761147][T14158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.772327][ T30] audit: type=1400 audit(1752878585.606:645): avc: denied { ioctl } for pid=14166 comm="syz.5.1958" path="socket:[46726]" dev="sockfs" ino=46726 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 667.977781][T14080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.138318][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 668.147239][T14177] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 668.153857][T14177] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 668.161759][T14177] vhci_hcd vhci_hcd.0: Device attached [ 669.246583][ T9] usb 9-1: device descriptor read/8, error -71 [ 669.267048][T14178] vhci_hcd: connection closed [ 669.276231][T12448] Bluetooth: hci2: command tx timeout [ 669.276343][ T66] vhci_hcd: stop threads [ 669.313608][ T66] vhci_hcd: release socket [ 669.319659][ T66] vhci_hcd: disconnect device [ 669.370664][ T9] usb usb9-port1: unable to enumerate USB device [ 669.388501][ T24] vhci_hcd: vhci_device speed not set [ 669.526786][T14186] syz.5.1961 (14186): drop_caches: 1 [ 670.294454][T14186] syz.5.1961 (14186): drop_caches: 1 [ 670.876127][T14080] veth0_vlan: entered promiscuous mode [ 670.927528][T14080] veth1_vlan: entered promiscuous mode [ 670.990873][T14080] veth0_macvtap: entered promiscuous mode [ 671.012567][T14080] veth1_macvtap: entered promiscuous mode [ 671.164837][T14080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.225631][T14080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.281127][T14080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.304413][T14080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.327900][T14080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.403298][T14080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.460140][ T30] audit: type=1400 audit(1752878589.286:646): avc: denied { create } for pid=14200 comm="syz.7.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 671.674755][ T30] audit: type=1400 audit(1752878589.286:647): avc: denied { ioctl } for pid=14200 comm="syz.7.1966" path="socket:[46877]" dev="sockfs" ino=46877 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 671.858775][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.880280][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.013989][T14215] syz.5.1968 (14215): drop_caches: 1 [ 672.125077][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.153978][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.348675][T12448] Bluetooth: hci1: command 0x0406 tx timeout [ 672.356001][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 672.465681][T14215] syz.5.1968 (14215): drop_caches: 1 [ 672.623394][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1970'. [ 672.718499][T14219] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.726398][T14219] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.942336][T14224] syz.5.1971 (14224): drop_caches: 1 [ 674.573747][T14224] syz.5.1971 (14224): drop_caches: 1 [ 674.680925][ T1021] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.867559][ T1021] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.070195][ T1021] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.132243][ T1021] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.227846][ T1021] bridge_slave_1: left allmulticast mode [ 675.233668][ T1021] bridge_slave_1: left promiscuous mode [ 675.239359][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.247804][ T1021] bridge_slave_0: left allmulticast mode [ 675.253578][ T1021] bridge_slave_0: left promiscuous mode [ 675.259331][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.542092][ T1021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.553340][ T1021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.563289][ T1021] bond0 (unregistering): Released all slaves [ 675.945634][T14254] tipc: Started in network mode [ 675.950825][T14254] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 675.958602][T14254] tipc: Enabled bearer , priority 10 [ 675.970335][T14254] lo speed is unknown, defaulting to 1000 [ 675.976380][T14254] lo speed is unknown, defaulting to 1000 [ 675.985752][T14254] lo speed is unknown, defaulting to 1000 [ 676.046409][T14254] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 676.291063][T14254] lo speed is unknown, defaulting to 1000 [ 676.299267][T14254] lo speed is unknown, defaulting to 1000 [ 676.459331][T14259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 676.537069][T14254] lo speed is unknown, defaulting to 1000 [ 676.544382][T14254] lo speed is unknown, defaulting to 1000 [ 676.553742][T14254] lo speed is unknown, defaulting to 1000 [ 676.598069][T14254] lo speed is unknown, defaulting to 1000 [ 676.609354][T10943] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 676.698544][ T1021] hsr_slave_0: left promiscuous mode [ 676.964926][T10943] usb 6-1: too many configurations: 70, using maximum allowed: 8 [ 677.011127][T10943] usb 6-1: config index 0 descriptor too short (expected 40611, got 133) [ 677.024564][ T1021] hsr_slave_1: left promiscuous mode [ 677.432409][ T5960] tipc: Node number set to 10005162 [ 677.879100][T10943] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.938804][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.946263][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.983338][T10943] usb 6-1: config index 1 descriptor too short (expected 40611, got 133) [ 677.992100][T10943] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.009110][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.009222][T14269] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1982'. [ 678.021185][T12448] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 678.030938][T14269] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1982'. [ 678.035871][T12448] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 678.052507][T10943] usb 6-1: config index 2 descriptor too short (expected 40611, got 133) [ 678.052713][T12448] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 678.070911][T12448] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 678.078138][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.085629][T12448] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 678.097554][T10943] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.114962][T14269] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1982'. [ 678.130069][T10943] usb 6-1: config index 3 descriptor too short (expected 40611, got 133) [ 678.132041][ T1021] veth1_macvtap: left promiscuous mode [ 678.144750][ T1021] veth0_macvtap: left promiscuous mode [ 678.149134][T10943] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.150385][ T1021] veth1_vlan: left promiscuous mode [ 678.165651][ T1021] veth0_vlan: left promiscuous mode [ 678.188248][T10943] usb 6-1: config index 4 descriptor too short (expected 40611, got 133) [ 678.196819][T10943] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.218910][T10943] usb 6-1: config index 5 descriptor too short (expected 40611, got 133) [ 678.227447][T10943] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.256212][T10943] usb 6-1: config index 6 descriptor too short (expected 40611, got 133) [ 678.272878][T10943] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.327690][ T30] audit: type=1400 audit(1752878596.156:648): avc: denied { accept } for pid=14271 comm="syz.8.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 678.328651][T10943] usb 6-1: config index 7 descriptor too short (expected 40611, got 133) [ 678.384783][T10943] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.397406][T10943] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 678.407007][T10943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.420676][T10943] usb 6-1: Product: syz [ 678.431598][T10943] usb 6-1: Manufacturer: syz [ 678.443657][T10943] usb 6-1: SerialNumber: syz [ 678.456048][T10943] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 678.484012][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 678.885122][T14288] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 678.891777][T14288] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 678.899573][T14288] vhci_hcd vhci_hcd.0: Device attached [ 679.148473][ T5952] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 679.514613][T14290] vhci_hcd: connection reset by peer [ 679.535464][T12432] vhci_hcd: stop threads [ 679.540878][T12432] vhci_hcd: release socket [ 679.559418][T12432] vhci_hcd: disconnect device [ 679.878235][ T9] usb 6-1: Service connection timeout for: 256 [ 680.009680][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 680.037224][ T9] ath9k_htc: Failed to initialize the device [ 680.067826][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 680.179814][ T1021] team0 (unregistering): Port device team_slave_1 removed [ 680.188549][T12448] Bluetooth: hci2: command tx timeout [ 680.253123][ T1021] team0 (unregistering): Port device team_slave_0 removed [ 680.651562][T14267] lo speed is unknown, defaulting to 1000 [ 680.655326][T14256] tipc: Invalid UDP bearer configuration [ 680.657366][T14256] tipc: Enabling of bearer rejected, failed to enable media [ 680.911219][ T5960] usb 6-1: USB disconnect, device number 7 [ 681.176439][T14315] program syz.5.1992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 681.656535][T14316] syz.7.1993 (14316): drop_caches: 1 [ 681.751041][T14320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.796226][T14267] chnl_net:caif_netlink_parms(): no params data found [ 681.928765][T14316] syz.7.1993 (14316): drop_caches: 1 [ 682.089580][T14267] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.114777][T14267] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.138505][T14267] bridge_slave_0: entered allmulticast mode [ 682.145213][T14267] bridge_slave_0: entered promiscuous mode [ 682.170727][T14267] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.177841][T14267] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.200930][T14267] bridge_slave_1: entered allmulticast mode [ 682.213294][T14267] bridge_slave_1: entered promiscuous mode [ 682.231685][T14328] lo speed is unknown, defaulting to 1000 [ 682.300958][T12448] Bluetooth: hci2: command tx timeout [ 682.336707][T14267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.357765][T14267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.472263][T14267] team0: Port device team_slave_0 added [ 682.482266][T14267] team0: Port device team_slave_1 added [ 682.544573][T14342] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 682.551205][T14342] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 682.559120][T14342] vhci_hcd vhci_hcd.0: Device attached [ 682.808309][ T5988] usb 47-1: new high-speed USB device number 3 using vhci_hcd [ 683.306271][T14343] vhci_hcd: connection reset by peer [ 683.825995][ T1021] vhci_hcd: stop threads [ 683.845619][ T1021] vhci_hcd: release socket [ 683.861025][ T1021] vhci_hcd: disconnect device [ 684.203684][T14349] syz.8.2001 (14349): drop_caches: 1 [ 684.267789][T14353] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2003'. [ 684.287454][ T30] audit: type=1326 audit(1752878602.076:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14327 comm="syz.5.1998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff00478e929 code=0x0 [ 684.341427][ T5952] vhci_hcd: vhci_device speed not set [ 684.350440][T12448] Bluetooth: hci2: command tx timeout [ 684.363685][T14267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.378440][T14267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.404760][T14267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.427278][T14267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.434789][T14267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.595183][T14267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.931426][T14267] hsr_slave_0: entered promiscuous mode [ 684.941068][T14267] hsr_slave_1: entered promiscuous mode [ 684.947316][T14267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.956371][T14267] Cannot create hsr debugfs directory [ 685.231700][ T5883] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 685.402173][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.405891][ T5883] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 685.430035][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.442771][ T5883] usb 9-1: config 0 descriptor?? [ 685.822093][T14267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 685.833648][T14267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 685.865413][T14267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 685.917723][ T30] audit: type=1400 audit(1752878603.746:650): avc: denied { getopt } for pid=14385 comm="syz.5.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 685.922411][T14267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 686.260319][T14398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.267388][T14267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.429575][T12448] Bluetooth: hci2: command tx timeout [ 686.607385][T14401] syz.5.2014 (14401): drop_caches: 1 [ 686.780399][T14267] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.820206][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.827347][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.836722][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.843887][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.888429][T14267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 686.898999][T14267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.098132][T14401] syz.5.2014 (14401): drop_caches: 1 [ 687.208280][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 687.478505][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 687.655525][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 687.665335][ T9] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 687.684464][ T5883] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 687.690330][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.695097][ T5883] asix 9-1:0.0: probe with driver asix failed with error -71 [ 687.706641][ T9] usb 8-1: Product: syz [ 687.711436][T14411] syz.6.2016 (14411): drop_caches: 1 [ 687.727681][ T9] usb 8-1: Manufacturer: syz [ 687.732793][T14267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.780777][ T9] usb 8-1: SerialNumber: syz [ 687.799080][ T9] usb 8-1: config 0 descriptor?? [ 687.824546][ T5883] usb 9-1: USB disconnect, device number 23 [ 688.098810][ T5988] vhci_hcd: vhci_device speed not set [ 688.134317][T14411] syz.6.2016 (14411): drop_caches: 1 [ 688.737408][ T9] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 689.043876][T14267] veth0_vlan: entered promiscuous mode [ 689.053196][T14267] veth1_vlan: entered promiscuous mode [ 689.132528][T14267] veth0_macvtap: entered promiscuous mode [ 689.164506][T14267] veth1_macvtap: entered promiscuous mode [ 689.202316][T14267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.253787][T14267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.275237][ T9] gs_usb 8-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 689.401913][T14267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.426603][T14267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.447318][T14267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.449094][ T9] usb 8-1: USB disconnect, device number 7 [ 689.515985][T14267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.596182][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.610825][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.711129][ T6149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.726122][ T6149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.172623][ T1021] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.194815][T14453] syz.7.2026 (14453): drop_caches: 1 [ 691.440057][T14453] syz.7.2026 (14453): drop_caches: 1 [ 691.464864][ T1021] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.652113][T14456] vxfs: WRONG superblock magic 00000000 at 1 [ 691.662737][T14456] vxfs: WRONG superblock magic 00000000 at 8 [ 691.669011][T14456] vxfs: can't find superblock. [ 691.900785][ T1021] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.001285][ T1021] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.566385][T14468] overlayfs: failed to resolve './bus/file0': -2 [ 692.909348][ T1021] bridge_slave_1: left allmulticast mode [ 692.915045][ T1021] bridge_slave_1: left promiscuous mode [ 692.920788][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.977317][ T1021] bridge_slave_0: left allmulticast mode [ 692.996002][ T1021] bridge_slave_0: left promiscuous mode [ 693.002105][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.115829][T14466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.153030][T14472] netlink: 'syz.8.2031': attribute type 39 has an invalid length. [ 693.435207][ T30] audit: type=1400 audit(1752878611.266:651): avc: denied { setopt } for pid=14476 comm="syz.7.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 693.497532][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 693.516516][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 693.527219][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 693.544711][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 693.563057][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 695.530022][ T1021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.610170][ T1021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.666970][ T5830] Bluetooth: hci2: command tx timeout [ 695.715317][ T1021] bond0 (unregistering): Released all slaves [ 695.972141][T14478] syz.5.2032 (14478): drop_caches: 1 [ 695.978466][T14483] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2034'. [ 696.493355][T14475] lo speed is unknown, defaulting to 1000 [ 696.764272][T14496] syz.7.2037 (14496): drop_caches: 1 [ 696.926418][T14510] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 697.436915][ T1021] hsr_slave_0: left promiscuous mode [ 697.444172][ T1021] hsr_slave_1: left promiscuous mode [ 697.478825][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.486395][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.798583][T12448] Bluetooth: hci6: command 0x0406 tx timeout [ 697.804677][ T5830] Bluetooth: hci2: command tx timeout [ 697.894051][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.912622][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.939320][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 698.132831][T14496] syz.7.2037 (14496): drop_caches: 1 [ 698.146712][ T1021] veth1_macvtap: left promiscuous mode [ 698.158529][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 698.168100][ T1021] veth0_macvtap: left promiscuous mode [ 698.176842][ T10] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 698.188515][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.196716][ T1021] veth1_vlan: left promiscuous mode [ 698.226084][ T10] usb 6-1: Product: syz [ 698.230555][ T1021] veth0_vlan: left promiscuous mode [ 698.236340][ T10] usb 6-1: Manufacturer: syz [ 698.246390][ T10] usb 6-1: SerialNumber: syz [ 698.280517][ T10] usb 6-1: config 0 descriptor?? [ 698.310389][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 699.707054][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2051'. [ 700.234151][ T5830] Bluetooth: hci2: command tx timeout [ 700.240325][ T10] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 700.247952][ T10] se401 6-1:0.0: probe with driver se401 failed with error -110 [ 700.565504][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2051'. [ 700.714295][T14551] syz.6.2050 (14551): drop_caches: 1 [ 700.814358][ T1021] team0 (unregistering): Port device team_slave_1 removed [ 700.858282][ T1021] team0 (unregistering): Port device team_slave_0 removed [ 701.534179][T14557] program syz.7.2052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 701.746303][ T5960] usb 6-1: USB disconnect, device number 8 [ 702.424302][ T5830] Bluetooth: hci2: command tx timeout [ 702.544366][T14572] netlink: 'syz.7.2054': attribute type 10 has an invalid length. [ 702.841756][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2057'. [ 702.911678][T14475] chnl_net:caif_netlink_parms(): no params data found [ 703.186002][T14593] syz.5.2062 (14593): drop_caches: 1 [ 703.206804][T14593] syz.5.2062 (14593): drop_caches: 1 [ 703.238675][T14596] binder: 14595:14596 ioctl c0306201 0 returned -14 [ 703.248021][T14475] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.256012][T14596] binder: 14595:14596 ioctl c0306201 200000000040 returned -22 [ 703.258802][T14475] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.272579][T14475] bridge_slave_0: entered allmulticast mode [ 703.289608][T14475] bridge_slave_0: entered promiscuous mode [ 703.310655][T14475] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.326373][T14475] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.337354][T14475] bridge_slave_1: entered allmulticast mode [ 703.349736][T14475] bridge_slave_1: entered promiscuous mode [ 703.412748][T14475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.431277][T14475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.453854][T14604] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2067'. [ 703.463284][T14604] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2067'. [ 703.499240][T14475] team0: Port device team_slave_0 added [ 703.594394][ T5883] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 703.609953][T14475] team0: Port device team_slave_1 added [ 703.643896][T14475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.656519][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.138923][T14475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.198733][ T5883] usb 8-1: Using ep0 maxpacket: 16 [ 704.247383][T14475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.254891][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.445809][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.456923][T14475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.486802][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.511312][ T5883] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 704.521057][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.536309][ T30] audit: type=1400 audit(1752878622.366:652): avc: denied { ioctl } for pid=14614 comm="syz.6.2071" path="socket:[50289]" dev="sockfs" ino=50289 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 704.537686][ T5883] usb 8-1: config 0 descriptor?? [ 704.565680][T14475] hsr_slave_0: entered promiscuous mode [ 704.575714][T14475] hsr_slave_1: entered promiscuous mode [ 704.583022][T14475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.594559][T14475] Cannot create hsr debugfs directory [ 705.202162][T14623] input: syz1 as /devices/virtual/input/input39 [ 705.778270][ T30] audit: type=1400 audit(1752878623.606:653): avc: denied { accept } for pid=14591 comm="syz.7.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 706.175236][T14634] input: syz1 as /devices/virtual/input/input40 [ 707.275508][T14475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 707.291677][ T5883] usbhid 8-1:0.0: can't add hid device: -71 [ 707.294588][T14475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 707.313898][T14475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 707.317123][ T5883] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 707.349065][T14475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 707.424224][ T5830] Bluetooth: hci0: unexpected event for opcode 0x200d [ 707.483340][T14475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.546499][T14475] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.701519][T14649] fuse: Unknown parameter '0xffffffffffffffff' [ 707.724097][ T30] audit: type=1400 audit(1752878625.546:654): avc: denied { ioctl } for pid=14639 comm="syz.8.2078" path="socket:[50344]" dev="sockfs" ino=50344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 708.278509][T14475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 708.292386][ T5883] usb 8-1: USB disconnect, device number 8 [ 708.320764][T14653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.332837][T14475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 708.379814][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.386922][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.529115][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.536274][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.579238][T14649] lo speed is unknown, defaulting to 1000 [ 708.868030][T14658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.962768][T14672] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2086'. [ 708.985581][T14672] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2086'. [ 709.018489][T14672] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2086'. [ 709.070608][T10943] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 709.132794][T14475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.400371][T10943] usb 6-1: unable to get BOS descriptor or descriptor too short [ 709.408799][T10943] usb 6-1: not running at top speed; connect to a high speed hub [ 709.434767][T10943] usb 6-1: config 191 has an invalid interface number: 223 but max is 0 [ 709.458904][T10943] usb 6-1: config 191 has no interface number 0 [ 709.471047][T10943] usb 6-1: config 191 interface 223 altsetting 6 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 709.502686][T10943] usb 6-1: config 191 interface 223 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 709.537458][T10943] usb 6-1: config 191 interface 223 has no altsetting 0 [ 709.552742][T10943] usb 6-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=6a.34 [ 709.562202][T10943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.577924][T10943] usb 6-1: Product: syz [ 709.579488][T14688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.582799][ T30] audit: type=1400 audit(1752878627.406:655): avc: denied { ioctl } for pid=14686 comm="syz.8.2088" path="socket:[50468]" dev="sockfs" ino=50468 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 709.618257][T10943] usb 6-1: Manufacturer: syz [ 709.622902][T10943] usb 6-1: SerialNumber: syz [ 710.413527][T14664] loop5: detected capacity change from 0 to 5127 [ 710.430982][T14664] loop5: detected capacity change from 5127 to 7023 [ 710.484989][T14475] veth0_vlan: entered promiscuous mode [ 710.506502][T14475] veth1_vlan: entered promiscuous mode [ 710.662576][T14475] veth0_macvtap: entered promiscuous mode [ 710.703519][T14475] veth1_macvtap: entered promiscuous mode [ 710.807203][T14475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.874977][T14475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.019039][T14475] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.084096][T10943] usb 6-1: USB disconnect, device number 9 [ 711.157542][T14707] syz.7.2093 (14707): drop_caches: 1 [ 711.165047][T14475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.205607][T14475] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.214556][T14475] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.357717][T14710] FAULT_INJECTION: forcing a failure. [ 711.357717][T14710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.392750][T14710] CPU: 1 UID: 0 PID: 14710 Comm: syz.8.2095 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 711.392770][T14710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 711.392777][T14710] Call Trace: [ 711.392781][T14710] [ 711.392786][T14710] dump_stack_lvl+0x16c/0x1f0 [ 711.392807][T14710] should_fail_ex+0x512/0x640 [ 711.392824][T14710] _copy_from_iter+0x29f/0x16f0 [ 711.392842][T14710] ? __alloc_skb+0x200/0x380 [ 711.392857][T14710] ? __pfx__copy_from_iter+0x10/0x10 [ 711.392874][T14710] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 711.392897][T14710] netlink_sendmsg+0x829/0xdd0 [ 711.392909][T14710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.392925][T14710] ____sys_sendmsg+0xa98/0xc70 [ 711.392937][T14710] ? copy_msghdr_from_user+0x10a/0x160 [ 711.392952][T14710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 711.392974][T14710] ___sys_sendmsg+0x134/0x1d0 [ 711.392990][T14710] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.393004][T14710] ? __lock_acquire+0x622/0x1c90 [ 711.393031][T14710] __sys_sendmsg+0x16d/0x220 [ 711.393046][T14710] ? __pfx___sys_sendmsg+0x10/0x10 [ 711.393070][T14710] do_syscall_64+0xcd/0x4c0 [ 711.393087][T14710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.393098][T14710] RIP: 0033:0x7ff672d8e929 [ 711.393108][T14710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.393119][T14710] RSP: 002b:00007ff673b3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.393130][T14710] RAX: ffffffffffffffda RBX: 00007ff672fb6080 RCX: 00007ff672d8e929 [ 711.393137][T14710] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 000000000000000a [ 711.393143][T14710] RBP: 00007ff673b3e090 R08: 0000000000000000 R09: 0000000000000000 [ 711.393150][T14710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.393156][T14710] R13: 0000000000000000 R14: 00007ff672fb6080 R15: 00007fff301fb548 [ 711.393169][T14710] [ 711.419791][T14707] syz.7.2093 (14707): drop_caches: 1 [ 711.472969][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.615126][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.643930][T12432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.652823][T12432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.085275][T14723] Bluetooth: MGMT ver 1.23 [ 712.359312][T10943] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 712.706638][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2100'. [ 712.732390][ T30] audit: type=1400 audit(1752878630.566:656): avc: denied { connect } for pid=14719 comm="syz.8.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 712.782080][T10943] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.795404][T10943] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 712.810597][T10943] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.880882][T10943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.988313][T10943] usb 8-1: Product: syz [ 712.992702][T10943] usb 8-1: Manufacturer: syz [ 712.997311][T10943] usb 8-1: SerialNumber: syz [ 713.011857][T10943] cdc_mbim 8-1:1.0: skipping garbage [ 713.023873][ T3521] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.273976][T14715] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 713.350957][T14736] overlayfs: missing 'lowerdir' [ 713.853894][ T3521] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.015203][ T3521] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.074477][ T3521] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.159902][ T3521] bridge_slave_1: left allmulticast mode [ 714.165578][ T3521] bridge_slave_1: left promiscuous mode [ 714.171747][T14715] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 714.172809][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.186409][T10943] cdc_mbim 8-1:1.0: setting rx_max = 16384 [ 714.195236][ T3521] bridge_slave_0: left allmulticast mode [ 714.201266][ T3521] bridge_slave_0: left promiscuous mode [ 714.206993][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.397163][T14715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.408816][T14715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.419436][T10943] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 714.432927][T10943] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 714.444515][T10943] wwan wwan0: port wwan0mbim0 attached [ 714.548678][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.561431][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.571113][ T3521] bond0 (unregistering): Released all slaves [ 714.588367][T10943] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 9a:27:ed:a1:e7:3a [ 714.603303][T10943] usb 8-1: USB disconnect, device number 9 [ 714.610247][T10943] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 714.670120][T10943] wwan wwan0: port wwan0mbim0 disconnected [ 714.823431][ T3521] hsr_slave_0: left promiscuous mode [ 714.834472][ T3521] hsr_slave_1: left promiscuous mode [ 714.840300][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.847683][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.857625][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.865105][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.888134][ T3521] veth1_macvtap: left promiscuous mode [ 714.893792][ T3521] veth0_macvtap: left promiscuous mode [ 714.899626][ T3521] veth1_vlan: left promiscuous mode [ 714.904876][ T3521] veth0_vlan: left promiscuous mode [ 715.758235][T10943] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 716.378247][T10943] usb 8-1: Using ep0 maxpacket: 8 [ 716.385986][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 716.386247][T10943] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 716.397116][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 716.410565][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 716.418599][T10943] usb 8-1: config 179 has no interface number 0 [ 716.420212][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 716.425078][T10943] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 716.435183][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 716.462365][T10943] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 716.538223][T10943] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 716.659365][T14762] syz.8.2109 (14762): drop_caches: 1 [ 716.685711][T10943] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 716.730606][T10943] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 716.751893][T10943] usb 8-1: config 179 interface 65 has no altsetting 0 [ 716.793189][T10943] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 716.802872][T10943] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.836583][T10943] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input41 [ 716.908556][ T5187] input input41: unable to receive magic message: -110 [ 717.061857][T14762] syz.8.2109 (14762): drop_caches: 1 [ 717.139890][ T5952] usb 8-1: USB disconnect, device number 10 [ 717.139902][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 717.155181][ C0] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 717.304440][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 718.352314][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 718.588337][ T5844] Bluetooth: hci2: command tx timeout [ 719.469999][T14778] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 719.479534][T14778] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 719.489157][T14778] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 719.622261][T14763] lo speed is unknown, defaulting to 1000 [ 719.668235][ T30] audit: type=1400 audit(1752878637.476:657): avc: denied { listen } for pid=14802 comm="syz.5.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 719.727790][ T30] audit: type=1400 audit(1752878637.486:658): avc: denied { accept } for pid=14802 comm="syz.5.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 719.805017][ T30] audit: type=1400 audit(1752878637.486:659): avc: denied { read } for pid=14802 comm="syz.5.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 719.884525][T10943] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 719.958498][T14809] syz.7.2122 (14809): drop_caches: 1 [ 720.061494][T10943] usb 7-1: unable to get BOS descriptor or descriptor too short [ 720.081916][T10943] usb 7-1: not running at top speed; connect to a high speed hub [ 720.148246][T10943] usb 7-1: config 7 has an invalid interface number: 2 but max is 0 [ 720.166688][T10943] usb 7-1: config 7 has an invalid interface association descriptor of length 2, skipping [ 720.177671][T10943] usb 7-1: config 7 has no interface number 0 [ 720.217897][T10943] usb 7-1: config 7 interface 2 altsetting 7 endpoint 0xE has an invalid bInterval 0, changing to 4 [ 720.286652][T10943] usb 7-1: config 7 interface 2 has no altsetting 0 [ 720.320575][T14763] chnl_net:caif_netlink_parms(): no params data found [ 720.339812][T14809] syz.7.2122 (14809): drop_caches: 1 [ 720.402374][T10943] usb 7-1: New USB device found, idVendor=1410, idProduct=a021, bcdDevice=e6.08 [ 720.438636][T14816] syz.5.2123 (14816): drop_caches: 1 [ 720.462123][T14816] syz.5.2123 (14816): drop_caches: 1 [ 720.469023][T10943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.477284][T10943] usb 7-1: Product: syz [ 720.482140][T10943] usb 7-1: Manufacturer: syz [ 720.491237][T10943] usb 7-1: SerialNumber: syz [ 720.668497][ T5844] Bluetooth: hci2: command tx timeout [ 720.686892][T14763] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.705966][T14763] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.715167][T14763] bridge_slave_0: entered allmulticast mode [ 720.719678][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.731515][T14763] bridge_slave_0: entered promiscuous mode [ 720.740570][T14763] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.747943][T14763] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.755365][T14763] bridge_slave_1: entered allmulticast mode [ 720.755371][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.772695][T10943] usb 7-1: USB disconnect, device number 11 [ 720.791081][T14763] bridge_slave_1: entered promiscuous mode [ 720.847083][T14763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.880446][T14763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.957503][T14763] team0: Port device team_slave_0 added [ 720.965463][T14763] team0: Port device team_slave_1 added [ 721.067600][T14763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.084727][T14763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.144671][T14822] syz.8.2124 (14822): drop_caches: 1 [ 721.167320][T14822] syz.8.2124 (14822): drop_caches: 1 [ 721.188895][T14763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.206400][T14763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.213524][T14763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.245851][T14763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.336991][T14763] hsr_slave_0: entered promiscuous mode [ 721.344490][T14763] hsr_slave_1: entered promiscuous mode [ 721.357824][T14763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 721.371240][T14763] Cannot create hsr debugfs directory [ 721.407266][T14829] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2127'. [ 721.419268][T14829] netem: change failed [ 721.688495][T14831] ucma_write: process 390 (syz.6.2128) changed security contexts after opening file descriptor, this is not allowed. [ 721.754604][T14832] ubi31: attaching mtd0 [ 721.759852][T14832] ubi31: scanning is finished [ 721.839345][T14832] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 721.846945][T14832] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 721.854348][T14832] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 721.861410][T14832] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 721.868877][T14832] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 721.875719][T14832] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 721.883785][T14832] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2855178645 [ 721.893854][T14832] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 721.905264][T14834] ubi31: background thread "ubi_bgt31d" started, PID 14834 [ 722.134803][T14763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 722.146772][T14763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 722.159136][T14763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 722.169416][T14763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 722.236842][T14763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.260260][T14763] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.272566][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.279709][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.296179][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.303345][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.501363][T14763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.723491][T14763] veth0_vlan: entered promiscuous mode [ 722.736345][T14763] veth1_vlan: entered promiscuous mode [ 722.748774][ T5844] Bluetooth: hci2: command tx timeout [ 722.770312][T14763] veth0_macvtap: entered promiscuous mode [ 722.785744][T14763] veth1_macvtap: entered promiscuous mode [ 722.810611][T14854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 722.911766][T14763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.131555][T14763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.204252][T14763] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.213711][T14763] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.226507][T14763] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.236894][T14763] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.221398][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.241346][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.293195][T14864] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 724.299725][T14864] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 724.313252][T14864] vhci_hcd vhci_hcd.0: Device attached [ 724.335231][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.345169][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.364450][T14864] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2133'. [ 724.411102][T14866] vhci_hcd: connection closed [ 724.411560][T12432] vhci_hcd: stop threads [ 724.588324][T12432] vhci_hcd: release socket [ 724.597851][T12432] vhci_hcd: disconnect device [ 724.618510][ T24] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 724.627491][ T24] usb 43-1: enqueue for inactive port 0 [ 724.769987][ T24] vhci_hcd: vhci_device speed not set [ 724.837299][ T5844] Bluetooth: hci2: command tx timeout [ 724.842741][T14875] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 724.899825][T14878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.955709][ T30] audit: type=1400 audit(1752878642.786:660): avc: denied { read } for pid=14879 comm="syz.6.2138" name="file5" dev="tmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 724.958068][T14878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.986036][ T30] audit: type=1400 audit(1752878642.786:661): avc: denied { open } for pid=14879 comm="syz.6.2138" path="/114/file5" dev="tmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 725.035845][T14872] syz.7.2135 (14872): drop_caches: 1 [ 725.204112][ T5952] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 725.227908][T14872] syz.7.2135 (14872): drop_caches: 1 [ 725.389195][T14886] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 725.414123][ T5952] usb 9-1: device descriptor read/64, error -71 [ 725.693474][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2141'. [ 725.805546][T14888] comedi comedi0: comedi_config --init_data is deprecated [ 725.939582][ T5952] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 726.128366][ T5952] usb 9-1: device descriptor read/64, error -71 [ 726.164408][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2142'. [ 726.262091][ T5952] usb usb9-port1: attempt power cycle [ 726.327682][T14901] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 726.337304][T14901] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 726.479563][T14905] tipc: New replicast peer: 1.0.0.0 [ 726.485643][T14905] tipc: Enabled bearer , priority 10 [ 726.658389][ T5952] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 726.731349][ T5952] usb 9-1: device descriptor read/8, error -71 [ 726.886315][T14907] program syz.6.2146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 726.901212][T14909] program syz.6.2146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 726.989214][ T5952] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 727.019039][ T5952] usb 9-1: device descriptor read/8, error -71 [ 727.255865][ T5952] usb usb9-port1: unable to enumerate USB device [ 728.342354][T14914] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 728.348978][T14914] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 728.370570][T14920] FAULT_INJECTION: forcing a failure. [ 728.370570][T14920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.388290][T14914] vhci_hcd vhci_hcd.0: Device attached [ 728.398650][T14915] vhci_hcd: connection closed [ 728.412769][ T2978] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.429873][T14920] CPU: 1 UID: 0 PID: 14920 Comm: syz.5.2148 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 728.429901][T14920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 728.429912][T14920] Call Trace: [ 728.429918][T14920] [ 728.429925][T14920] dump_stack_lvl+0x16c/0x1f0 [ 728.429955][T14920] should_fail_ex+0x512/0x640 [ 728.429982][T14920] _copy_from_user+0x2e/0xd0 [ 728.430006][T14920] copy_msghdr_from_user+0x98/0x160 [ 728.430029][T14920] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 728.430060][T14920] ___sys_sendmsg+0xfe/0x1d0 [ 728.430083][T14920] ? __pfx____sys_sendmsg+0x10/0x10 [ 728.430103][T14920] ? __lock_acquire+0x622/0x1c90 [ 728.430146][T14920] __sys_sendmsg+0x16d/0x220 [ 728.430168][T14920] ? __pfx___sys_sendmsg+0x10/0x10 [ 728.430203][T14920] do_syscall_64+0xcd/0x4c0 [ 728.430229][T14920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.430247][T14920] RIP: 0033:0x7ff00478e929 [ 728.430262][T14920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.430278][T14920] RSP: 002b:00007ff0055ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.430296][T14920] RAX: ffffffffffffffda RBX: 00007ff0049b6080 RCX: 00007ff00478e929 [ 728.430307][T14920] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 728.430319][T14920] RBP: 00007ff0055ee090 R08: 0000000000000000 R09: 0000000000000000 [ 728.430328][T14920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.430339][T14920] R13: 0000000000000000 R14: 00007ff0049b6080 R15: 00007fff5465d4b8 [ 728.430362][T14920] [ 728.623267][T12432] vhci_hcd: stop threads [ 728.627545][T12432] vhci_hcd: release socket [ 728.658392][T11568] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 728.674480][T12432] vhci_hcd: disconnect device [ 728.761845][ T2978] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.829259][ T2978] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.894706][ T2978] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.997375][ T2978] bridge_slave_1: left allmulticast mode [ 729.003234][ T2978] bridge_slave_1: left promiscuous mode [ 729.009809][ T2978] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.019101][ T2978] bridge_slave_0: left allmulticast mode [ 729.024896][ T2978] bridge_slave_0: left promiscuous mode [ 729.030687][ T2978] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.333154][ T2978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.343991][ T2978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.355555][ T2978] bond0 (unregistering): Released all slaves [ 729.583013][ T2978] hsr_slave_0: left promiscuous mode [ 729.589395][ T2978] hsr_slave_1: left promiscuous mode [ 729.595283][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.602905][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.611767][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.619452][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.637886][ T2978] veth1_macvtap: left promiscuous mode [ 729.644682][ T2978] veth0_macvtap: left promiscuous mode [ 729.650474][ T2978] veth1_vlan: left promiscuous mode [ 729.655879][ T2978] veth0_vlan: left promiscuous mode [ 730.087166][T14924] FAULT_INJECTION: forcing a failure. [ 730.087166][T14924] name failslab, interval 1, probability 0, space 0, times 0 [ 730.130136][T14924] CPU: 0 UID: 0 PID: 14924 Comm: syz.6.2149 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 730.130160][T14924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.130167][T14924] Call Trace: [ 730.130171][T14924] [ 730.130176][T14924] dump_stack_lvl+0x16c/0x1f0 [ 730.130197][T14924] should_fail_ex+0x512/0x640 [ 730.130213][T14924] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 730.130232][T14924] should_failslab+0xc2/0x120 [ 730.130250][T14924] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 730.130267][T14924] ? p9_client_create+0x4ca/0x11c0 [ 730.130287][T14924] kstrdup+0x53/0x100 [ 730.130304][T14924] p9_client_create+0x4ca/0x11c0 [ 730.130324][T14924] ? __pfx_p9_client_create+0x10/0x10 [ 730.130347][T14924] ? rcu_is_watching+0x12/0xc0 [ 730.130365][T14924] ? lockdep_init_map_type+0x5c/0x280 [ 730.130377][T14924] ? __raw_spin_lock_init+0x3a/0x110 [ 730.130393][T14924] v9fs_session_init+0x1f7/0x1a80 [ 730.130418][T14924] ? __pfx_v9fs_session_init+0x10/0x10 [ 730.130446][T14924] v9fs_mount+0xc5/0xa30 [ 730.130459][T14924] ? __pfx_v9fs_mount+0x10/0x10 [ 730.130473][T14924] ? cap_capable+0xb3/0x250 [ 730.130487][T14924] ? __pfx_v9fs_mount+0x10/0x10 [ 730.130499][T14924] legacy_get_tree+0x10c/0x220 [ 730.130517][T14924] vfs_get_tree+0x8b/0x340 [ 730.130530][T14924] path_mount+0x1414/0x2020 [ 730.130548][T14924] ? kmem_cache_free+0x2d1/0x4d0 [ 730.130562][T14924] ? __pfx_path_mount+0x10/0x10 [ 730.130582][T14924] ? putname+0x154/0x1a0 [ 730.130594][T14924] __x64_sys_mount+0x28d/0x310 [ 730.130611][T14924] ? __pfx___x64_sys_mount+0x10/0x10 [ 730.130633][T14924] do_syscall_64+0xcd/0x4c0 [ 730.130651][T14924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.130663][T14924] RIP: 0033:0x7fe55718e929 [ 730.130673][T14924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.130684][T14924] RSP: 002b:00007fe557f53038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 730.130695][T14924] RAX: ffffffffffffffda RBX: 00007fe5573b5fa0 RCX: 00007fe55718e929 [ 730.130703][T14924] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 730.130709][T14924] RBP: 00007fe557f53090 R08: 0000200000000400 R09: 0000000000000000 [ 730.130716][T14924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 730.130722][T14924] R13: 0000000000000000 R14: 00007fe5573b5fa0 R15: 00007ffece0ae3b8 [ 730.130736][T14924] [ 730.572143][T14930] syz.8.2151 (14930): drop_caches: 1 [ 730.578871][ T2978] team0 (unregistering): Port device team_slave_1 removed [ 730.621508][T12448] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 730.635791][T12448] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 730.647811][T12448] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 730.656865][T12448] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 730.664914][T12448] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 730.835670][T14930] syz.8.2151 (14930): drop_caches: 1 [ 731.519252][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2155'. [ 731.618190][ T2978] team0 (unregistering): Port device team_slave_0 removed [ 732.208244][ T5952] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 732.394679][ T5952] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 732.412148][ T5952] usb 6-1: config 0 has no interface number 0 [ 732.436877][ T5952] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 732.488872][ T5952] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 732.530515][ T5952] usb 6-1: config 0 interface 113 has no altsetting 0 [ 732.551313][ T5952] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 732.564658][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.574387][ T5952] usb 6-1: Product: syz [ 732.582186][ T5952] usb 6-1: Manufacturer: syz [ 732.586941][ T5952] usb 6-1: SerialNumber: syz [ 732.603151][ T5952] usb 6-1: config 0 descriptor?? [ 732.610549][T14952] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 732.630802][ C1] usb 6-1: NFC: Urb failure (status -71) [ 732.638701][ C1] usb 6-1: NFC: Urb failure (status -71) [ 732.650861][ T5952] usb 6-1: NFC: Unable to get FW version [ 732.660324][ T5952] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -71 [ 732.748441][ T5844] Bluetooth: hci2: command tx timeout [ 733.051924][T14954] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 733.106094][T14929] lo speed is unknown, defaulting to 1000 [ 733.139331][ T5952] usb 6-1: USB disconnect, device number 10 [ 733.779044][T11568] vhci_hcd: vhci_device speed not set [ 733.816123][T14966] libceph: resolve '. [ 733.816123][T14966] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 733.816123][T14966] ' (ret=-3): failed [ 734.039775][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2162'. [ 734.627387][T14929] chnl_net:caif_netlink_parms(): no params data found [ 734.839651][ T5844] Bluetooth: hci2: command tx timeout [ 734.948789][ T5883] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 735.129739][ T5883] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 735.142325][ T5883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.746247][ T5883] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 735.779166][ T5883] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 735.827122][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.836317][ T5883] usb 7-1: Product: syz [ 735.840658][ T5883] usb 7-1: Manufacturer: syz [ 735.845269][ T5883] usb 7-1: SerialNumber: syz [ 735.863587][T14929] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.877049][T14929] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.894217][ T5883] usb 7-1: config 0 descriptor?? [ 735.903717][ T5883] usb-storage 7-1:0.0: USB Mass Storage device detected [ 735.927848][ T5883] usb-storage 7-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 735.943627][T14929] bridge_slave_0: entered allmulticast mode [ 736.002405][T14991] syz.5.2168 (14991): drop_caches: 1 [ 736.030938][T14929] bridge_slave_0: entered promiscuous mode [ 736.081665][T14929] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.138954][ T5883] usb 7-1: USB disconnect, device number 12 [ 736.153670][T14929] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.207357][T14929] bridge_slave_1: entered allmulticast mode [ 736.224282][T14929] bridge_slave_1: entered promiscuous mode [ 736.498347][ T5960] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 736.590393][T14929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.643631][T14929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.778701][T14929] team0: Port device team_slave_0 added [ 736.828103][ T5844] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 736.836646][T15011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=15011 comm=syz.6.2172 [ 736.852260][T14929] team0: Port device team_slave_1 added [ 736.877086][ T5960] usb 9-1: unable to get BOS descriptor or descriptor too short [ 736.908604][ T5844] Bluetooth: hci2: command tx timeout [ 736.934373][ T5960] usb 9-1: not running at top speed; connect to a high speed hub [ 737.075844][ T5960] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 737.093021][ T5960] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 737.105379][ T5960] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 737.141631][ T5960] usb 9-1: config 128 has no interface number 0 [ 737.149836][T14929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.161539][T14929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.200342][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2173'. [ 737.252821][ T5960] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x1 has invalid wMaxPacketSize 0 [ 737.280433][ T5960] usb 9-1: config 128 interface 127 has no altsetting 0 [ 737.290449][T14929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.307757][ T5960] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 737.333333][ T5960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.369253][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2173'. [ 737.394461][T14929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.407162][ T5960] usb 9-1: Product: syz [ 737.411451][ T5960] usb 9-1: Manufacturer: syz [ 737.416026][ T5960] usb 9-1: SerialNumber: syz [ 737.428265][T14929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.468747][T14929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.665952][T15002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.674907][T15002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.760843][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2176'. [ 737.898956][T14929] hsr_slave_0: entered promiscuous mode [ 737.905257][T14929] hsr_slave_1: entered promiscuous mode [ 737.958910][T14929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.990951][T14929] Cannot create hsr debugfs directory [ 738.162291][T15027] tipc: Started in network mode [ 738.167301][T15027] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 738.316555][T15027] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 738.341067][T15027] tipc: Enabled bearer , priority 10 [ 738.588469][T15032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.988264][ T5844] Bluetooth: hci2: command tx timeout [ 739.057015][T15034] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2180'. [ 739.089722][T15034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.210875][T15037] trusted_key: encrypted_key: insufficient parameters specified [ 739.468690][ T9] tipc: Node number set to 1 [ 739.607811][ T5960] usb 9-1: USB disconnect, device number 28 [ 739.728812][T15044] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 739.774508][T15044] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 739.788909][T15046] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2183'. [ 739.823005][T15044] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 739.873346][T15044] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 739.927778][T15044] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 740.624275][T15044] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 740.634471][T15044] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 740.661269][T15044] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 740.889880][T15044] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 740.896415][T15044] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 740.913191][T15044] comedi comedi3: 8255: I/O port conflict (0x200,4) [ 740.952048][T15044] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 741.054317][T15044] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 741.061135][T15044] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 741.073821][T15044] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 741.169865][T15065] tipc: Enabling of bearer rejected, already enabled [ 741.524751][T15044] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 741.543383][T15047] ------------[ cut here ]------------ [ 741.549043][T15047] WARNING: CPU: 0 PID: 15047 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 741.559315][T15047] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 741.563493][T15047] CPU: 0 UID: 0 PID: 15047 Comm: syz.5.2182 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 741.575584][T15047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 741.585787][T15047] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 741.592500][T15047] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d da fb 7b 0e 00 75 0b c6 05 d1 fb 7b 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 741.612358][T15047] RSP: 0018:ffffc900040df908 EFLAGS: 00010246 [ 741.618587][T15047] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 741.626565][T15047] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000040dc0 [ 741.634728][T15047] RBP: 000000127fd7a758 R08: 0000000000000007 R09: 0000000000000000 [ 741.642802][T15047] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000019 [ 741.650796][T15047] R13: 1ffff9200081bf36 R14: 000000127fd7a758 R15: 0000000000000019 [ 741.658772][T15047] FS: 00007ff0055ac6c0(0000) GS:ffff888124713000(0000) knlGS:0000000000000000 [ 741.667689][T15047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 741.674291][T15047] CR2: 000000110c3d0cc8 CR3: 000000006d520000 CR4: 00000000003526f0 [ 741.682275][T15047] Call Trace: [ 741.685537][T15047] [ 741.688469][T15047] ? __lock_acquire+0xb8a/0x1c90 [ 741.693393][T15047] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 741.699733][T15047] ? do_raw_spin_lock+0x12c/0x2b0 [ 741.704764][T15047] ? __lock_acquire+0xb8a/0x1c90 [ 741.709738][T15047] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 741.715366][T15047] __alloc_pages_noprof+0xb/0x1b0 [ 741.720425][T15047] ___kmalloc_large_node+0x84/0x1e0 [ 741.725617][T15047] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 741.731271][T15047] __kmalloc_large_node_noprof+0x1c/0x70 [ 741.736904][T15047] __kmalloc_noprof.cold+0xc/0x61 [ 741.741943][T15047] comedi_unlocked_ioctl+0x1757/0x2e90 [ 741.747390][T15047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 741.753326][T15047] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 741.759192][T15047] ? do_vfs_ioctl+0x523/0x1a60 [ 741.763983][T15047] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 741.764025][T15047] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 741.775844][T15047] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 741.782377][T15047] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 741.789318][T15047] ? hook_file_ioctl_common+0x145/0x410 [ 741.794851][T15047] ? selinux_file_ioctl+0x180/0x270 [ 741.800052][T15047] ? selinux_file_ioctl+0xb4/0x270 [ 741.805152][T15047] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 741.810962][T15047] __x64_sys_ioctl+0x18e/0x210 [ 741.815712][T15047] do_syscall_64+0xcd/0x4c0 [ 741.820303][T15047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.826182][T15047] RIP: 0033:0x7ff00478e929 [ 741.830593][T15047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.850248][T15047] RSP: 002b:00007ff0055ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.858660][T15047] RAX: ffffffffffffffda RBX: 00007ff0049b6240 RCX: 00007ff00478e929 [ 741.866620][T15047] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000005 [ 741.874601][T15047] RBP: 00007ff004810b39 R08: 0000000000000000 R09: 0000000000000000 [ 741.882592][T15047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.890564][T15047] R13: 0000000000000001 R14: 00007ff0049b6240 R15: 00007fff5465d4b8 [ 741.898542][T15047] [ 741.901551][T15047] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 741.908810][T15047] CPU: 0 UID: 0 PID: 15047 Comm: syz.5.2182 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 741.920862][T15047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 741.930899][T15047] Call Trace: [ 741.934158][T15047] [ 741.937076][T15047] dump_stack_lvl+0x3d/0x1f0 [ 741.941677][T15047] panic+0x71c/0x800 [ 741.945595][T15047] ? __pfx_panic+0x10/0x10 [ 741.950014][T15047] ? show_trace_log_lvl+0x29b/0x3e0 [ 741.955228][T15047] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 741.961293][T15047] check_panic_on_warn+0xab/0xb0 [ 741.966228][T15047] __warn+0xf6/0x3c0 [ 741.970117][T15047] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 741.976174][T15047] report_bug+0x3c3/0x580 [ 741.980509][T15047] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 741.986581][T15047] handle_bug+0x184/0x210 [ 741.990913][T15047] exc_invalid_op+0x17/0x50 [ 741.995410][T15047] asm_exc_invalid_op+0x1a/0x20 [ 742.000260][T15047] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 742.006927][T15047] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d da fb 7b 0e 00 75 0b c6 05 d1 fb 7b 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 742.026529][T15047] RSP: 0018:ffffc900040df908 EFLAGS: 00010246 [ 742.032628][T15047] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 742.040591][T15047] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000040dc0 [ 742.048550][T15047] RBP: 000000127fd7a758 R08: 0000000000000007 R09: 0000000000000000 [ 742.056507][T15047] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000019 [ 742.064465][T15047] R13: 1ffff9200081bf36 R14: 000000127fd7a758 R15: 0000000000000019 [ 742.072441][T15047] ? __lock_acquire+0xb8a/0x1c90 [ 742.077374][T15047] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 742.083698][T15047] ? do_raw_spin_lock+0x12c/0x2b0 [ 742.088742][T15047] ? __lock_acquire+0xb8a/0x1c90 [ 742.093673][T15047] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 742.099316][T15047] __alloc_pages_noprof+0xb/0x1b0 [ 742.104351][T15047] ___kmalloc_large_node+0x84/0x1e0 [ 742.109543][T15047] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 742.115186][T15047] __kmalloc_large_node_noprof+0x1c/0x70 [ 742.120808][T15047] __kmalloc_noprof.cold+0xc/0x61 [ 742.125852][T15047] comedi_unlocked_ioctl+0x1757/0x2e90 [ 742.131354][T15047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 742.137247][T15047] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 742.143045][T15047] ? do_vfs_ioctl+0x523/0x1a60 [ 742.147886][T15047] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 742.152907][T15047] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 742.159403][T15047] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 742.165918][T15047] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 742.172765][T15047] ? hook_file_ioctl_common+0x145/0x410 [ 742.178303][T15047] ? selinux_file_ioctl+0x180/0x270 [ 742.183490][T15047] ? selinux_file_ioctl+0xb4/0x270 [ 742.188601][T15047] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 742.194423][T15047] __x64_sys_ioctl+0x18e/0x210 [ 742.199185][T15047] do_syscall_64+0xcd/0x4c0 [ 742.203686][T15047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.209565][T15047] RIP: 0033:0x7ff00478e929 [ 742.213967][T15047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.233567][T15047] RSP: 002b:00007ff0055ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 742.241967][T15047] RAX: ffffffffffffffda RBX: 00007ff0049b6240 RCX: 00007ff00478e929 [ 742.249926][T15047] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000005 [ 742.257881][T15047] RBP: 00007ff004810b39 R08: 0000000000000000 R09: 0000000000000000 [ 742.265838][T15047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.273795][T15047] R13: 0000000000000001 R14: 00007ff0049b6240 R15: 00007fff5465d4b8 [ 742.281764][T15047] [ 742.285005][T15047] Kernel Offset: disabled [ 742.289310][T15047] Rebooting in 86400 seconds..