last executing test programs: 1m40.807151005s ago: executing program 3 (id=87): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@target={'target ', {'PCI:', '1e', ':', '16', ':', '15', '.', '12'}}, 0x17) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600060004000000101800008900000000000000ff69b65b9c721c5305041fdc7acc17b6bae1b31559d0139e3e84b0d92eb7da65940db4ecd29f1797662c2d0c915045316b01526698741e6e6690f91efd4bf4f8ffffff5fb305cf00fe6994852cd6e54ece9a6dbe946c868fa2cb9bc3a5499b7e1ca0d7f6f0ea6930eb1da1f88fafaaa8b167a6e0b991ee3fca97155e16cb485bfb697993287295401e3fb84363dcae212edf3ff0ce7cdba458", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff0700000000"}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x19, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x0, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x20c}}, 0x2000c800) socket$netlink(0x10, 0x3, 0x0) 1m39.051240887s ago: executing program 3 (id=89): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1m38.678020062s ago: executing program 3 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket(0x1, 0x2, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_STAT(0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040051}], 0x1, 0x20040004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@delneigh={0x44, 0x1a, 0x1, 0x70bd2d, 0x4000800, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x36eb47deb9f71e09}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x0, 0x0, 0x1}}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x44}}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x4000000) 1m35.607713038s ago: executing program 3 (id=101): msgsnd(0x0, 0x0, 0x8, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) uname(&(0x7f0000000500)=""/239) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x10, 0x88080) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$inet_int(r2, 0x0, 0x19, 0x0, &(0x7f0000000000)) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0xff, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x6, 0x0, 0xffffffff, 0x8, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x0, 0x8, 0x6, 0x1, 0x101, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3d, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x7fffffff, 0xed2, 0x1, 0xfffffffa, 0x2, 0x18d1, 0xfcf9, 0x3, 0x6, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x7e, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xbffffffa, 0x1, 0x100008, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x4005, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x800081, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x2000007, 0x7c, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x103, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x4]}]}}]}, 0x468}}, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e24, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@loopback, 0x4e20, 0x4, 0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@empty, 0x4d2, 0x32}, 0x0, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m34.629085224s ago: executing program 3 (id=104): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000003c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getdents(r0, 0x0, 0x0) capget(&(0x7f0000000500)={0x20080522}, &(0x7f0000000540)={0x9, 0x1000, 0x6, 0x40, 0x3, 0x4}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800d9f8b4c0b45c0671e329dd770000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 1m32.531414822s ago: executing program 3 (id=111): mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) unshare(0x60040000) r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000370400000000000000", @ANYRES32=r2, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) unshare(0x10800) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 1m16.593016229s ago: executing program 32 (id=111): mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) unshare(0x60040000) r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000370400000000000000", @ANYRES32=r2, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) unshare(0x10800) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 15.263168394s ago: executing program 0 (id=256): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r3 = fsopen(&(0x7f0000000400)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(VE!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6\f\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\nn%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x94B\xc5K\x03\xae\xf2m\n\r\x8e\xc8\x82\x00\xb3\xeb\x8aH\xea8\x10\x91o[\f\xf2\x06', 0x0) setresuid(r1, r1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) fsetxattr$security_ima(r4, &(0x7f0000000080), &(0x7f0000000180)=@ng={0x4, 0x14, "a8b80b47d9fb"}, 0x8, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x10001, 0x8, 0x8001}) r5 = fanotify_init(0x200, 0x0) r6 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r7 = dup(r6) fanotify_mark(r5, 0x1, 0x48000046, r7, 0x0) r8 = dup(r6) write$binfmt_elf64(r8, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x7f, 0xa3, 0x23e, 0x3, 0x3e, 0xc9, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x81, 0x7, 0xff5, 0x5, 0x81, 0xfffffffffffffffc}]}, 0x78) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x1000f0000) mkdirat(r4, &(0x7f00000001c0)='./file0\x00', 0x24) utime(&(0x7f00000002c0)='./file0\x00', 0x0) setgid(r2) 15.183498915s ago: executing program 4 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) openat$smackfs_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = eventfd2(0x2, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x8000000, 0x0, 0x0, 0x0, 0xffaf, r0, 0x0, 0x0, 0xc654, 0x0, 0x1, r0}]) 14.425863585s ago: executing program 0 (id=261): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x2cd, 0x191, 0x0, 0x0, 0xdd9f83, 0x40, 0x40, 0xe3, 0x2, 0x80000000, 0x6, 0x6, 0x0, 0x0, 0x3f, 0x5, {0x0, 0x7}, 0x3, 0x6d}}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000040)={0x6, "2ba825e6ba7ef4e0825cadb54bded54edae4997094bceb06e1d6657dc3f6a919", 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0xf8}}, 0x24004000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040425bd7000fbdbdf2507000000341c1380060004004e230000060001000a0000000600020021000000080005000400004024000180060004004e2300000800050004000000060002001d000000060001000a00000008000600"/110], 0x74}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000040) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8800) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40840}, 0x10) 13.805904655s ago: executing program 0 (id=264): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x12083) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000200, r6, &(0x7f0000000740)='./file0\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x4, 0x0, &(0x7f00000000c0)="e0b95432ea161d8d0cecdb46d806a86a27ff07000000000000b865b9c9cd7ce6c4cff9d02ea7e5ac27bb430dbd181128", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x90c00, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 13.695418271s ago: executing program 1 (id=265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026", 0x39}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x1) 13.691706296s ago: executing program 4 (id=266): mknod(&(0x7f0000000000)='./file0\x00', 0x400, 0x4) r0 = open(&(0x7f0000000040)='./file0\x00', 0x4d2240, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r2 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x1, 0x523840) flock(r2, 0x4) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000100)={0x2, {0x6, 0x8020000, 0x6}, {0x866, 0x3, 0x0, 0x6}, {0x40, 0x80000001}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname(r0, &(0x7f0000000200)=@ieee802154={0x24, @long}, &(0x7f0000000280)=0x80) write$6lowpan_enable(r0, &(0x7f00000002c0)='1', 0x1) r4 = syz_io_uring_setup(0x6ac2, &(0x7f0000000300)={0x0, 0xfee0, 0x2000, 0xa, 0x186}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000440)=@sg0, 0xffffffffffffffff, &(0x7f0000000480)) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x0) chmod(&(0x7f00000004c0)='./file0\x00', 0x144) flock(r4, 0xa) r5 = open_tree(r0, &(0x7f0000000500)='./file0\x00', 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@newtclass={0x40, 0x28, 0x10, 0x70bd2c, 0xa, {0x0, 0x0, 0x0, r3, {0x5, 0xf}, {0xa, 0xf}, {0x8, 0x2}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8040) recvfrom(r0, &(0x7f0000000640)=""/32, 0x20, 0x2000, &(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x7, @private1, 0xf28d, 0x2}, 0x80) ioctl$FE_DISEQC_SEND_BURST(r2, 0x6f41, &(0x7f0000000700)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740), 0x800, 0x0) ioctl$SNDCTL_SYNTH_INFO(r6, 0xc08c5102, &(0x7f0000000780)={"627b6bb546108068c8efef40779afa792a6882fc8e3ee7579ee5473497d9", 0xc, 0x1, 0x1, 0x7fc0000, 0x1, 0x3, 0x0, 0x9de9718ccb6734b1, [0x0, 0xff, 0xfffffff8, 0xf6b, 0x1, 0xfffffffe, 0x6be, 0x400, 0x6, 0xfff, 0x9, 0xf5, 0x2, 0x40f4, 0xde, 0x5, 0x2, 0x9, 0x1]}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000840)) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@newqdisc={0x34, 0x24, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffcc, 0xb}, {0xe, 0x5}, {0xfff2, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x34}}, 0x48010) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@gettfilter={0x44, 0x2e, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9, 0x6}, {0x5, 0xffff}, {0x4, 0x8}}, [{0x8, 0xb, 0x83f}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000b00)={0x0, r5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000b40)=[r1, r7, r4, r7], 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r8) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) 12.459581965s ago: executing program 1 (id=267): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000140)) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000040)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x56d, 0x3, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000080)="3fc43bff53f3c50909f9829f2de5e8ca02e361ebff8fad4d1ce56377a99c83ed56c98a4d844a5c15c81b9fe5d7adb4b04d0fb92280c8f9b6c93f42e87f4cd6abf9bd23c74a7e9c63d71625880b5215bc6859ba48f150d5494b7d689ac01d7e43a5ddecbb0ccedd", 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x1000, r1}, 0x38) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) 12.458204329s ago: executing program 0 (id=268): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000001"], 0x0, 0x28, 0x0, 0x1, 0xb}, 0x28) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4044804}, 0x4004000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() getrlimit(0x6, &(0x7f00000000c0)) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) ptrace$getenv(0x4201, r4, 0x10000, &(0x7f0000000080)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x80) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f00000002c0)=0x4, 0x4) sendmmsg$inet6(r6, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) 12.385554599s ago: executing program 4 (id=269): openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129202, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) dup(r0) 10.755410546s ago: executing program 0 (id=270): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) close(0xffffffffffffffff) close(0x3) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r0, 0x0, 0x0, 0x800) 9.655307583s ago: executing program 4 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000180)={@host}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) (async) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000000)={0x1, 0x0, 0x80000000, 0x7, 0xf, 0x10001}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) (async) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000400000000010000000800010000000000040004800800020001000000240008"], 0x4c}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@generic={0x1, 0xfffffffffffffc01}) personality(0x619641b6fb4b8591) (async) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x9e691000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002700)=@newtaction={0x225c, 0x30, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{0x4}, {0x130, 0x1, [@m_simple={0x12c, 0x10, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1ff, 0x10000000, 0x1000, 0xfffffffd}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x7, 0x3, '-%\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xc5, 0x6, "2289b076b638ef47970b82ff61d19aa69121cb355c14c2c79a72d53f15d7392c69545559cc4e0501edb7c7f1c266e53b338a985f1bfd614458d077892fd0291008492e98270ffee68255d1f0d3dda8b46d99c23ce2177e3891f6a1016c948d79637d902834b45aa4ddda2300ef2aa6847a52312d86ab6fc8130a95d5684758221589a064d8eae8ecf00e9d4185afc756d1c9e1eb67926513474376b51e82b2ef478bfc8312186022d94a756b4316a4663f1b891cf43194e5ee995a80fe983f3014"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x4}, {0x110, 0x1, [@m_vlan={0xdc, 0x1, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x5, 0x9f7b35cf20ece5d6, 0x2, 0xd9}, 0x1}}]}, {0x71, 0x6, "7bc29ae6bc63b6906d092a96e889b4c948fb783df8d75bbd1affcbc197ec365def09b67ce437a59ba80708109325a8e544a564e007ec08420a72432abf4208100806988be5f1ab79b057c82bb7592eebda47461784b9aba99eb70da4484169161791a6bc266686a9829c23f597"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x30, 0x16, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x2000, 0x1, [@m_tunnel_key={0xc8, 0xd, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x7, 0x2, 0x5, 0x80000001}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0x65, 0x6, "15b954252b759936397288acc34daed95669670adbf95c8c1aa1687aa0c8c14c74c0cd97ec7bcfd7b8ed0ed7b0abdd5c69299cdd969f2f1b082f720597c5df1d4a1dcb49e2a694eed7be19ea558f53fb600d1e2cae309db63bd8ca2dd24b45ce1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0xe0, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0xb1, 0x6, "f68086039ff9da634be46605d412620093eabeb7cd7838604a06de7f5b0a92d140747d88d697c8b0435df3527cb9ae6e8a80ea72a7dd375fea43fb65d4ea4bd3c7ac89cfeaa0f669a3880893bba564dcdc0fb51ed35397d5a684209fcef91e2c65a835690dc4b922a884d024c1369e66695b4cc0f8f8919db99944101c2b794b9219c29544d351d46e74588a1b470c4fbd0da05c971a79dad06ffd7c19a2273e2f6058610c0522676d07048d06"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0xd0, 0x1d, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x70, 0x7fff, 0x4, 0x6, 0xff}, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}]}, {0x7d, 0x6, "d9c8b3c5e702c041ab28707716bd344c716a9ee18da9370a95e912a13de9e6de155ccadc0392853380a555eb68739a7983365445efa6dd36ac4df19d30c0cd4ae8dff8ca8de45849a6f12986adcc67a5b57fbdde5f7c61917e0aba2c4c254eabd1abaca2f833ded8a85714d228ebcb5de519ddd8e698e73273"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xa8, 0x9, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xffff, 0x1, 0xffffffff, 0x3}, 0xf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x2, 0x10000000, 0x6, 0x9}, 0x100}}]}, {0x3d, 0x6, "7b251888a4a99580a905bdc2136c89e2fe8cabb615e434de3f9dc4ee2a8fb34e9772f66b7bddd95c9d849ed0387a0c72775596183fdf42aa12"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x68, 0x1f, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x400, 0x0, 0x3ff, 0x9}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x8, 0xffffffff, 0x9}, 0x52}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x94, 0x1d, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xed, 0x6, 0x8, 0x9e5, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0x3d, 0x6, "628aa20941ed64d452f2ae6cdb9a0ccb62c4720f4bd31e105e42f027e44ffbe01414189a74ecac7cbe327921b2b18c2d2b769b9c79b1890874"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x11f8, 0x18, 0x0, 0x0, {{0xb}, {0x1110, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x10000, 0x0, 0xd96, 0xafd, 0x7fffffff, 0x3128, 0x0, 0x6ae, 0x9, 0x5, 0x58f9e4f9, 0x7, 0x100, 0x0, 0x4, 0x3, 0x6, 0x8001, 0x8, 0x9, 0x8, 0x3, 0x0, 0xa60, 0x4, 0x3, 0x10001, 0x800, 0x8, 0x44, 0x7f, 0x8, 0x80000001, 0xb, 0x0, 0x5, 0x0, 0x9, 0x0, 0x8, 0x94a5b5cc, 0x3ff, 0x7, 0x3, 0x2, 0x80000000, 0x458, 0xbf, 0xfff, 0x4, 0x8000, 0x5, 0xfffffff9, 0x2, 0x86, 0x5, 0x5, 0x7, 0x6, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, 0x10, 0x3, 0x10, 0x2, 0x2, 0x5, 0x2d22, 0x3, 0x1, 0x0, 0x0, 0xe, 0x9, 0x9, 0x6, 0x1, 0x4, 0xfff, 0xd, 0x40, 0xa, 0x5, 0x5, 0xfffffffd, 0x7, 0x10001, 0x68, 0xfffffff8, 0x6164, 0x2, 0x0, 0x9, 0x1, 0x7, 0x100, 0x8, 0x80000000, 0x9972, 0xdfc, 0xc, 0xfdb, 0xfffffffa, 0x1, 0x3, 0x100, 0x84, 0x7248, 0x7b, 0x58a, 0x5, 0x5, 0x9, 0xa5f, 0x0, 0xd, 0x2, 0x6, 0xed06, 0x5, 0x101, 0x8000, 0x1, 0xed, 0x8, 0x31, 0x800, 0x7, 0x3, 0x3, 0xee8, 0xf, 0x3bda, 0xc00000, 0x2, 0x2, 0x0, 0x3, 0x120, 0x7, 0xfffffffb, 0x7f, 0x1, 0xffff3322, 0x80000001, 0x3187, 0x6, 0x1, 0x0, 0x8, 0x7, 0x2036, 0x7ff, 0x6, 0x3, 0x0, 0x45f9, 0x3, 0x6, 0xe04, 0xfda, 0xc, 0x81, 0x10000, 0x3, 0x481, 0x2, 0x2, 0x9, 0xd64, 0x6, 0x7, 0x9, 0x5, 0x4, 0x2b000000, 0x4, 0xe79d, 0x2, 0x3, 0x3cd, 0x3, 0xdcd2, 0x2, 0xd69e, 0x8, 0x10001, 0xffffffff, 0x50000, 0x9e8, 0xcb4, 0xcd5e, 0x7, 0xb93, 0x42, 0x8, 0x3, 0x5d, 0x6, 0x2, 0xfffffffc, 0x447, 0xfffffffd, 0xfffffff8, 0x3bed, 0x8, 0x59, 0x8000, 0x1000, 0x4, 0x6, 0x80000001, 0x8aa, 0x9, 0xa972, 0x5a5, 0x3, 0x9d9, 0xfffffffe, 0x9, 0x3, 0x101, 0xd0, 0xe7, 0x7, 0x1, 0x8, 0x3, 0xfffffff9, 0x3, 0x78698, 0x3e, 0x7, 0xffff7d8f, 0x6, 0x4, 0x981, 0xfffffe00, 0x0, 0x1, 0x9, 0x9, 0x81, 0xfc7, 0x10000, 0x72, 0x6, 0x7, 0x7, 0x8]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x2c00000, 0x4, 0x7f, {0x5, 0x2, 0x40, 0x1, 0x101, 0xffff7fff}, {0x7, 0x2, 0x9, 0x9, 0xf001, 0xf90}, 0x9, 0x7fff, 0xfffffe01}}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x6, 0x6, 0x1ff, 0x80000001, 0x0, 0x9, 0x1, 0x6, 0xb, 0x8001, 0x2, 0x10001, 0x6f2, 0x80000001, 0x7fffffff, 0x3ff, 0x0, 0x274, 0x80000001, 0x7f, 0x2e6, 0x5, 0x2, 0x6, 0x101, 0x800, 0x1, 0x1, 0x0, 0x5, 0xad, 0x10, 0x8000, 0x1, 0x1, 0x0, 0x80000000, 0x1, 0x0, 0x1000, 0x234e6f73, 0xa64, 0xe8, 0x7, 0x0, 0x2, 0x6, 0x101, 0x9, 0x0, 0xb0, 0x72567042, 0x1f, 0x100, 0x40, 0x1, 0x9, 0x3, 0x3, 0x2, 0x8, 0x2643, 0xb6, 0x4, 0x9, 0x1, 0x4, 0xe6, 0x6, 0x0, 0x19, 0xb, 0x1000200, 0xff, 0x8, 0x6, 0x3, 0x302, 0x29f4, 0x4, 0x80000001, 0x5, 0x7f, 0x2029, 0xad, 0x80000001, 0x48, 0x6, 0xfffffff7, 0x8850000, 0xff, 0x0, 0xd, 0x10000, 0xff, 0x80000000, 0x2, 0x3ff, 0x6, 0x3, 0x4, 0x3, 0x4, 0x1, 0x4, 0x8, 0x80000001, 0x6, 0x1, 0xa1000000, 0x4, 0x3, 0x7, 0x100, 0x18, 0x86, 0x8, 0x9, 0x6, 0x100, 0xfffffffa, 0x401, 0x0, 0x4, 0x8, 0x80000000, 0x5, 0x6, 0x5, 0x80000001, 0x3, 0x8, 0x0, 0x7, 0x18000, 0xb771, 0x8, 0x3e84, 0x2, 0x30581daa, 0x6, 0x5, 0x1ff, 0x9, 0x200, 0x1ff, 0x8, 0x6, 0x10000, 0x3, 0x7, 0xd2, 0x80000001, 0x7, 0x0, 0xa, 0x2, 0x1, 0x10000, 0x2, 0xfff, 0x6, 0x8, 0xc, 0x5, 0x6, 0x1000, 0x4, 0x8, 0x6, 0x6, 0x8, 0x5, 0x8001, 0xe65, 0x2, 0x6, 0x88e2, 0x7a9, 0x7a3, 0x80000000, 0x1, 0x0, 0x200, 0x5, 0x1e90, 0xc493, 0x310, 0x8df, 0x2, 0x5, 0xb, 0x0, 0x1, 0x401, 0xc, 0x9, 0x7, 0x3, 0x9, 0x7, 0xcc91, 0x9, 0x86, 0x96f530e, 0x2, 0x6, 0x5c5f37ed, 0x3, 0x1000, 0x3, 0x200, 0x0, 0x1, 0x2, 0x5, 0x0, 0x6, 0xfffffff7, 0x5, 0x9, 0x80000000, 0x1ff, 0x10, 0x8, 0x4, 0xa01, 0x3, 0x10e0000, 0x7ff, 0xcac00000, 0xfffffff8, 0x1, 0x10001, 0x7, 0x8, 0x5, 0x1, 0x1c7, 0xfffffffd, 0xfffffff9, 0x2d28fc83, 0x9, 0x0, 0xa2, 0x1, 0x8, 0x8, 0x7, 0x7, 0x6, 0x4, 0x1, 0xff, 0x7ff]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0x9, 0xa10, 0x9ef8, 0x2, 0x8000, 0x7, 0x6, 0x3, 0x6, 0x9, 0xffffffff, 0x8001, 0x1, 0x7f, 0x6, 0x4, 0xe092, 0x7, 0x6, 0x800, 0x9, 0x2, 0x0, 0x10, 0x4, 0x3, 0xb3e9, 0x7d4, 0x1, 0x8, 0x17e, 0x1000, 0xfa, 0x75bb3ae7, 0x23102c51, 0x2, 0xf, 0x5, 0x2, 0xc, 0x7, 0x9, 0x0, 0x8, 0x6, 0xf, 0x1ff, 0x3, 0x6, 0x3, 0x1ff, 0x95, 0x10, 0xa2, 0x3, 0x379, 0x3, 0x0, 0x2, 0x1ff, 0xda, 0x7ff, 0x7f, 0x5, 0x0, 0x1, 0x5, 0x62, 0x6, 0x8, 0xa715, 0x0, 0x2, 0x7, 0x0, 0xd, 0x8, 0x8001, 0x2, 0x8, 0xfa, 0x5, 0x7, 0xd, 0x1000, 0x280, 0x8d3, 0x101, 0x1000, 0x6, 0x42182212, 0x81, 0x1d42, 0x8, 0x4, 0x9, 0x7, 0x105, 0xb04e, 0x8, 0x6, 0x5, 0xffffff05, 0x6, 0x3b, 0x2, 0x2, 0x8, 0x3, 0xecd, 0x2, 0x6, 0x3, 0x6, 0xfa, 0x5, 0xffff, 0xffffff01, 0x5, 0x1, 0xa, 0x4, 0x5, 0x5, 0x10000, 0x11daa705, 0x2, 0x2, 0x0, 0x3, 0x0, 0xd6, 0x5d, 0x8, 0x7, 0x4, 0x622f, 0x7, 0x998, 0xfffffffa, 0x3, 0x2, 0x3, 0x5, 0x9, 0xfff, 0x3, 0x10001, 0xbb, 0x8, 0xc, 0x7fff, 0xe1, 0x9, 0x7, 0x6, 0x4, 0xd, 0x4, 0xc1f, 0xe, 0xb797, 0x200, 0x3, 0x101, 0x6, 0x7fffffff, 0x1, 0x4, 0x8000, 0x5, 0x7, 0x6, 0xd, 0xf, 0x7fff, 0xc8, 0x101, 0x9, 0x1, 0x6, 0x3, 0x59bd, 0x1, 0xe, 0x1, 0x9, 0x40, 0x5, 0x7f, 0x8000, 0x1, 0x7fffffff, 0xfffffff8, 0xc, 0x3, 0x7, 0x3, 0x7fff, 0x8, 0x2da, 0x101, 0x1, 0x2fad, 0x4, 0xfffffff7, 0x3, 0x2, 0x4, 0x2, 0x2, 0x7, 0x2, 0xee70, 0x6, 0x7, 0x2, 0x9, 0xfffffff9, 0x3, 0x8, 0x4e4, 0xa9, 0x8, 0x71, 0x6, 0x0, 0x6, 0x1000000, 0x1, 0x8, 0x6, 0x3, 0x1fffc0, 0x1a01, 0x1, 0x1, 0x100, 0x2, 0x7, 0x5, 0x400, 0x2, 0x1000, 0x5, 0x9, 0x7ff, 0x1, 0x1, 0x9f2, 0xfffffffb, 0x21b, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x5, 0x600000, 0x6, {0x7, 0x2, 0x1ff, 0x3, 0x3, 0x2}, {0x4, 0x1, 0x6, 0xfffd, 0xfffa, 0x6}, 0x3, 0x7, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_RATE64={0xc, 0x8, 0xac}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x100, 0x80000000, 0xc, 0xffffff69, 0x5, 0x6, 0xa65, 0xfffffffd, 0xb69f, 0x4, 0x4, 0x7, 0x3, 0x0, 0x3c9d8b02, 0x4, 0x8, 0x8, 0x2, 0x5fb, 0x6, 0x758, 0x46, 0x10000, 0x63c, 0x1, 0x8, 0x3, 0x9, 0x1, 0x4, 0x7, 0x8, 0x0, 0x7, 0x2, 0x188, 0x3, 0x8000, 0x10001, 0x1, 0x6, 0xa7, 0x9, 0x3, 0x9, 0x5a, 0x100, 0x7fffffff, 0x6, 0x6, 0x6, 0x7, 0x7ff, 0x7, 0x3, 0x3, 0x9, 0x4, 0x8c000000, 0x10001, 0x8, 0x4, 0x6, 0xffff, 0x3e87, 0x7dbd, 0x1000, 0x9, 0x2, 0x80, 0x0, 0x8, 0x8, 0x9b, 0xe0, 0xffff0001, 0x0, 0x4, 0x8, 0xb830, 0x2, 0x2, 0xfffffff3, 0x0, 0x40, 0x8, 0x6, 0x4ef3daa1, 0x6, 0xe, 0x8, 0x3, 0xffff, 0x30000000, 0x6, 0x4, 0x9, 0x8, 0xfffffff7, 0x9, 0x6, 0x8001, 0x1ff, 0x3, 0x3, 0x5, 0x2, 0xb, 0x6, 0x5, 0x8, 0x6, 0x7, 0x8, 0xc, 0x5, 0x73fc, 0x7fffffff, 0x800, 0x7, 0xab, 0x0, 0x7, 0x6, 0x8001, 0x9, 0xf9, 0x9, 0x1, 0x8000, 0x3, 0x2, 0x9, 0xe, 0x1, 0x9, 0xd6f, 0x3, 0x1000, 0x7, 0xe, 0x2, 0x8, 0xfffffffe, 0x6, 0x4, 0x7, 0xe, 0x8, 0x69a5, 0x824c, 0x1, 0x4, 0x0, 0x3ff, 0x7, 0x1, 0x4, 0x3, 0x2, 0x0, 0x8, 0x4, 0x2d9d83d5, 0x400, 0xc40, 0xa87, 0x400, 0x3, 0x7, 0x10, 0x8, 0x8, 0x2, 0x1, 0x140, 0x67c8, 0x40, 0xb63659e, 0xffff7fff, 0x657, 0x9, 0xffffffff, 0x8, 0xfffffff9, 0x62, 0x3, 0x4, 0x2, 0xfc, 0x1, 0x4, 0xa1b, 0x7, 0x61, 0x2, 0x4, 0x7000000, 0x4, 0x0, 0x7ff, 0x5, 0x9, 0x5, 0x6380, 0x5, 0x7, 0x3, 0x9, 0x6, 0x9, 0x5, 0x8, 0x2, 0x3, 0x10001, 0xffffffff, 0x7, 0x4, 0x8, 0x7, 0x0, 0x80000001, 0x200, 0xffff, 0x6, 0x5ac46bd0, 0x7fffffff, 0x7fff, 0x0, 0xfffffffa, 0x9, 0x6, 0x3000000, 0x1, 0x8, 0x4, 0x1, 0x3, 0x9, 0x8, 0x5, 0x40, 0x3, 0x9, 0xe032, 0x4, 0x2, 0x9, 0x73a, 0x8001, 0x9, 0x8, 0x401]}]]}, {0xbd, 0x6, "4208b1db43feb544b0d44ca76d2707b3a5260b2ae75c04b779969fb84614b7db975ffe0b6c80f83274a4bb6c886ac6b592619222637212601a368a1a2369658be34d3ac7e2af6df29415fb8a3a9b663363985b9dc06e97fd1ca18feaf7c785bfffcaf125d1f6edc1f2b9566b5d1589951ee25dcf6bb3505bfc80b8dbf34772d81eb32dfb70478941d453c489c8c06550afebb859212922890600bdc71c283d780184d60faf00b71c213c17e903a213bd1bfdbf0970c07e7f1b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x184, 0x19, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0xe0b, 0x8, 0x6, 0x6}, 0xfd44}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x7, 0x1, 0x348a}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x1, 0x77c, 0x5}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xfff, 0x3, 0x1, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x80000001, 0x0, 0x3, 0x80000001}, 0xcfe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x6, 0xa, 0xf}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xba4f, 0x9, 0x10000000, 0x5, 0xe5b}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x13e, 0x5, 0x0, 0xfffff482}, 0xfff7}}]}, {0x71, 0x6, "fca4b0a16a707d69e750d38fcae8bceeff4f339fbc66f53f3dfad2dcd740c614f82df781a2dd2c676a30ea0aaa4a4ddb8cde0cf74fcf20af428c313f9803cfcd0d14f2e86c47be15851dd03e1674c736226cbe1f61cd9e919dfb0716744b5cfba18c03eabcdebb3fd344b5276b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x864, 0x1e, 0x0, 0x0, {{0xb}, {0x838, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x53, 0x101, 0x4, 0x1, 0x2, 0xb0, 0x6, 0x8, 0x5, 0x1, 0x3, 0x3, 0x6, 0x416, 0x81, 0xbb0, 0x4, 0x401, 0x40, 0x1, 0x800, 0x8, 0x8000, 0xc, 0x5, 0x9, 0x1, 0x6, 0x81, 0x7, 0x12a4, 0x3, 0x9, 0x4, 0x8, 0x7ff, 0x6, 0x2, 0x7ff, 0x5, 0x9, 0x4, 0xfffffffd, 0xffff, 0x2a, 0x6fe, 0x8000, 0x1, 0x0, 0xfffffff8, 0x4, 0xaf75, 0x17da, 0x1, 0x1, 0x1854, 0x80000001, 0x2, 0x6cb, 0x8, 0x9, 0x70000000, 0x4, 0x9, 0x9, 0x0, 0x6, 0x4, 0x0, 0x5c7, 0x1, 0x7, 0xcfb2, 0x3, 0x1, 0x10, 0x0, 0x5, 0xb44, 0x9, 0x0, 0x9, 0xffffffff, 0xf, 0x1, 0x3, 0x9, 0x4, 0x800, 0xffff, 0xfff, 0x7f, 0xfa9, 0x7, 0x9, 0x5, 0x0, 0x1000, 0x1, 0x6, 0x1, 0x401, 0x1, 0x2, 0x7f, 0x7, 0xc, 0x100, 0x1, 0x5, 0x9, 0x401, 0x5, 0x4, 0x80, 0xe4f7, 0xfffffffd, 0x3, 0x7, 0x0, 0xffff0000, 0x401, 0x2, 0x5, 0x4, 0x2, 0x90f, 0x6, 0x101, 0x9, 0x10000, 0x1ff, 0x7, 0xa, 0xb1a, 0xc, 0xff, 0x1, 0x2, 0x3ff, 0x3, 0x9, 0x4, 0x2, 0x3, 0x9, 0x5, 0x0, 0x4, 0xff, 0x11, 0x2, 0x2, 0x8, 0x2400000, 0xff, 0x3, 0x9, 0x4, 0x66b, 0x7, 0x7, 0x4, 0x9, 0x5, 0x3, 0x3, 0x2, 0x6, 0x4, 0xcb, 0x7, 0x0, 0x7, 0xe, 0x9, 0x1, 0xa6b, 0x5, 0x6, 0x8, 0xf, 0x6, 0xfffffff9, 0x47c, 0xb, 0x3, 0x8, 0x3, 0x9f3, 0x2000000, 0x6, 0x20, 0x2, 0x80000001, 0x4, 0x5, 0x6, 0x72, 0x2, 0x8, 0x10001, 0x1, 0xfff, 0x2, 0x0, 0x0, 0x8, 0x6, 0x7, 0x8, 0x5, 0xfffff54b, 0x9, 0x3ff, 0x748, 0x3, 0x5, 0x5, 0x9, 0x5, 0x2, 0x350a, 0x8000, 0x2a58, 0x9, 0x4, 0xfffffffc, 0xfffffffd, 0x1, 0xbc0, 0x8, 0x6, 0x5, 0x3, 0x8, 0xfffffffc, 0x3, 0xfffffffc, 0x7, 0x479, 0x8, 0x8000, 0x4, 0x6, 0x5, 0x7, 0x81, 0x0, 0x8001, 0x0, 0x2, 0x8, 0x7, 0x3599, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2b54}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xfffffff5, 0x84b4, 0x100, 0x2, 0x7fff, 0x9, 0x7fff, 0xbd2b, 0x7, 0x5, 0x7fff, 0x8, 0xfffffffb, 0x2, 0x2, 0xfe43, 0x80000000, 0x2, 0x80000000, 0x3, 0xbda9, 0x9, 0x5, 0x4, 0x4, 0x800, 0x200, 0x6, 0x6, 0x1, 0x3, 0x8, 0xffff7fff, 0x30000, 0x5, 0x1ff, 0x7fff, 0xfffffff3, 0x9, 0x6, 0x1, 0xfffffffa, 0x2, 0x5, 0x3, 0x3, 0x100, 0xfff, 0x0, 0x3, 0x6, 0xa30, 0x5, 0x8, 0x5, 0x3, 0x200, 0x6, 0x2, 0x14a2, 0x6, 0x8, 0x9f8, 0x800, 0x9, 0x0, 0x8, 0x9, 0x0, 0x2, 0x8, 0x1f1, 0x7, 0x3, 0x7, 0x25ea, 0x1, 0x3, 0x1, 0x1cd, 0x7, 0x4, 0x6, 0x8, 0x10001, 0x7, 0x2, 0x81, 0x7, 0x0, 0x6, 0x0, 0x1, 0x10001, 0x2, 0x3, 0xffff, 0x0, 0xf1d4, 0x2, 0x2, 0x1, 0x8000, 0x5de45881, 0x0, 0x10001, 0xb, 0x1, 0x2a, 0x8000000, 0x10000, 0x5, 0x5, 0x8000, 0x4, 0x6, 0x8, 0x8001, 0x401, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x3ff, 0x2, 0x0, 0x5, 0x8, 0xbc1, 0xef9, 0xfffffff7, 0xfff, 0xec, 0x7, 0x8, 0x2, 0x7, 0x5, 0x5, 0x9, 0x3ff, 0x7fff, 0x0, 0x3, 0x4, 0xfffffffd, 0x25, 0x7, 0x1000, 0xba, 0x1000, 0x52, 0x68, 0x8, 0x4, 0x6, 0xfe, 0x64, 0x5, 0x99a, 0xc, 0x2, 0x1, 0x8eb9, 0x7f, 0xb, 0xdf, 0x6, 0x0, 0x5, 0x6, 0x0, 0x6b, 0x8, 0x6, 0x8, 0x93dd, 0x9045, 0x1, 0x9, 0x3, 0x100, 0x8e42, 0xffffe669, 0x6, 0x80, 0x8, 0x4, 0x6, 0xffffffff, 0xf, 0xfffffe01, 0x5, 0x8, 0x7, 0x7fff, 0x8001, 0x2, 0x80000000, 0x35d5, 0x4, 0x8, 0x6, 0xcb, 0x6, 0x5, 0x7, 0x3, 0x4, 0x6, 0x7fffffff, 0x141a, 0x9, 0xfffffffd, 0xd8, 0x10, 0xf4, 0x8, 0x7, 0x30, 0x200, 0x1, 0x0, 0xffffff81, 0x3, 0x8, 0x2, 0x8, 0x5, 0x3, 0x2, 0x7, 0x6, 0x8, 0x6, 0xffff, 0x1, 0x4, 0x1, 0x7fff, 0x4, 0x1, 0x7, 0x7, 0x1000000, 0x7, 0x7, 0x0, 0xfffeffff, 0x9, 0xd, 0x8, 0x9]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x225c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.499042724s ago: executing program 4 (id=275): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000400), 0x200, 0x1a1800) ioctl$EVIOCGREP(r3, 0x80084503, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r4, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x700, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @remote}}}}) 9.364476951s ago: executing program 1 (id=276): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000003c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getdents(r0, 0x0, 0x0) capget(&(0x7f0000000500)={0x20080522}, &(0x7f0000000540)={0x9, 0x1000, 0x6, 0x40, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000001040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 7.127034529s ago: executing program 2 (id=279): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x12083) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000200, r6, &(0x7f0000000740)='./file0\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x4, 0x0, &(0x7f00000000c0)="e0b95432ea161d8d0cecdb46d806a86a27ff07000000000000b865b9c9cd7ce6c4cff9d02ea7e5ac27bb430dbd181128", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 5.533830267s ago: executing program 1 (id=280): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x12083) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, r7, &(0x7f0000000740)='./file0\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0x4, 0x0, &(0x7f00000000c0)="e0b95432ea161d8d0cecdb46d806a86a27ff07000000000000b865b9c9cd7ce6c4cff9d02ea7e5ac27bb430dbd181128", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 4.979966146s ago: executing program 2 (id=281): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000c14010026bd7000fddbdf2508000300000000000800030002000000080001000200000008003d00030000000800010001000000bd05ba9b99fb5f04932bd54b0ad8e439223a78c1c892c6597710064e9927267414aa562a34b3a3c998969c9efdb176ce73eed7f7160264da16efe6af576f4574b24f3c8ba27ec857cc961dbb925343005457bd17c1f98699f6072a3329d054989362e7696ae95ba0fa19205a9cde8c4e3c0b9962ec1dc4b8fb9b25043b17a0d5d18bdf0d72ec4a16643eed426dfa5b1f109836db97695e194cb4e67ef77fc82f35d416a6513f55"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x20000804) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="2e00000092b1038400000000", @ANYRES32, @ANYBLOB="30957c154ee9f2631eeacb43b4b77fec8a6243ac42d6210b1b7a79b5aabc77f90d0873f83184faaff2ca2aa2087a", @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xf, 0x4, 0x8, 0x3}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000030301030000000000000000012000000c0002000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x142, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x80800) pipe(&(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000030000000000fe8000000000000000000000000000aa87"], 0x0) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000240)="85952b177328da2f8757c9343d6559eb7a", 0x11, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f0000001800)=""/80, 0x50, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)={[{@name={'name', 0x3d, 's.-*-&'}}]}) 4.807448814s ago: executing program 2 (id=282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmsg(r0, &(0x7f00000016c0)={&(0x7f0000000080)=@nfc_llcp={0x27, r1, 0xffffffffffffffff, 0x4, 0xe, 0x4b, "fd6e8c97599ad5cc57c61812dd82bc8eb268a7b8c001a34b1752f23aa5a8c08781153d9b2169f8ab4ae75a5c724bb47aaeb1b41f56b2564f7d88d324caf332", 0x2b}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="1cdd0ea4d4a2c6f9551e6a82bab93caacbe2ff1a9d7f439c56debc7ec293e948ae7c68aef329fdef4da49d6f12cce6fa7fb5754919feb8915d20035ed32c9af9cbe31c1da3774c483dc26900de7fef404f5560907a0370679c1647a98c2fd2bf0cb275ace98ab4c5944108e131cead7a8236d0f84eec40f5336832f0e46c92cd2c1b904a3fedafc049353b616c202a5b0628442459ece7b51ce58f1a65be83bd1581d8b0b415852157cbae20394df8f392d5d7f688a31d32b3c5fe6e860545", 0xbf}], 0x1, &(0x7f0000001700)=[{0xa0, 0x103, 0x9e, "ba634ce06f555c9356aae9462e773bd39b040322f93a7302c7c9aa6e770905d3bdfd0b3fb9013d59376bb4ac0803a14bcc31ae30bb7db27e1838afe8091ec0470ed26233b8429d7c9bf94825a2409ba1e2de947bf8059c32e108dc1787237edcb722cd21a9589b5154e7c87352f1498f5771a83d1233966dcc9bed993dafc52aa322b5afb49b286811d205f046"}, {0xa8, 0x110, 0x7, "d597198a6734c7b4d29e76768d298afcf30060de0454333df68937044baf8883b230cf36480a0f3aa037f69108e8daf8bd32e23ff404178a2443425cbcb8c07d1a97bad148991f2d0e0eace7d45da2a626474997ae2ef963b458cc81784bad45642a116158dafb4db102c3ca7a34334cc015384995c96b8797f063ea81c49c1917e06c5afdcaa5953c1179fd516a7f4905"}, {0xc0, 0x88, 0x80, "9f86c67b8fc3a439ec42da79a52215ae6bae043778d75ea79b26d27dbcdcc3b207a708f8856a139d8de081a62f671191e6ee93de43304fc6bde7950ec6b327d7cfc24f9d90605b75cc2318de48fa9b10471e060d1ecae6ec56e0b155556fceebf815f52724bd5fcd9922a5738cd0791d486f7df0eee1d84157fcdace70494086b8eb3f1571d284b460e5d859ec541fc16aab44355bfaeb70b9938edb88875502791ad9ce0272d4c3d20b"}, {0x80, 0x10d, 0x5, "aa991ec3d0791cb42165daff64f6ddae10cb4e762253ebeac0ffc453883dee6166f06f7201438eca6a71192fe3826571eef747e5f75a9e1a4cf3de3b1db3fae34e047c74660023f008ed7995c9863c438e2fa7e105b6602b364ec26c4d17d30eb8522da5176c321ac8fb82a5296e1e6c"}, {0x80, 0x10d, 0x10, "9b925ccd8cc773f5ce5b8efc2966380ae0d22e8911ac633faa2a7a623ae2437216bd7110e6c69bbce2ec4e74e5713ebf6a3305bc290359005215646f6bd6477fa00d9a177ef06c8006e71b990662a870a6eb8dafa4b3e047c85d41dfa3cffaf494fd1f1a3da13435f2eea03ca6cdc374"}, {0xf0, 0x10d, 0xf40, "aa808f757be1a37971e9dec8a5c8d644682784d9b140bb2457a222641b464e62512157b2e20e155df8d56c366961bd4df3b707f005d9e8a98c92b00ea2266d5fe6691ecb16636e4e057f6b63d311c0e86e9c36d76e08e1abc2576dbdf557959946ffac2c3752d831286d57a7305983e0e5025d94b528a513a898b7f8380cc134de4285c8fe0537f73bc3e6bd06696f081798db6d8f92bcac911ba632c5e5c5007415c18d92033e2d94deec06dc95e508898ce3f8dc3801d38bff88febc66f396fa20a96d6e6b7e9488abf4272492204b2e894e26a8051f81928df961878d4a"}, {0x70, 0x10d, 0xc0000000, "6b0892cba6c9b7e39bb07b981700580acce93741de0b93240c20b8048e7f435ee28301ad9678a46aa30661d83e83016e1854a7be866ff356a12e9dfd98f91f3fe9b797a3d8da43f2f87fe8e2ad35520fc34e116cb522b2353a35e394fc"}, {0x1010, 0x88, 0x100, "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"}], 0x1478}, 0x4000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x0, 0xd2}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000) 4.238259163s ago: executing program 2 (id=283): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x12083) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000200, r6, &(0x7f0000000740)='./file0\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x4, 0x0, &(0x7f00000000c0)="e0b95432ea161d8d0cecdb46d806a86a27ff07000000000000b865b9c9cd7ce6c4cff9d02ea7e5ac27bb430dbd181128", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x90c00, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 4.055776441s ago: executing program 4 (id=284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.009376694s ago: executing program 0 (id=285): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6119ead44) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0xf2, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x10) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x10) move_mount(r5, &(0x7f0000000280)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={0x0}) shutdown(r1, 0x1) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000380)=""/134, 0x86}], 0x2, &(0x7f0000000480)=""/153, 0x99}, 0x10000) 1.969410356s ago: executing program 2 (id=286): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000040)) 1.539921418s ago: executing program 1 (id=287): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x12083) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, r7, &(0x7f0000000740)='./file0\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0x4, 0x0, &(0x7f00000000c0)="e0b95432ea161d8d0cecdb46d806a86a27ff07000000000000b865b9c9cd7ce6c4cff9d02ea7e5ac27bb430dbd181128", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 1.087498103s ago: executing program 2 (id=288): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@target={'target ', {'PCI:', '1e', ':', '16', ':', '15', '.', '12'}}, 0x17) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600060004000000101800008900000000000000ff69b65b9c721c5305041fdc7acc17b6bae1b31559d0139e3e84b0d92eb7da65940db4ecd29f1797662c2d0c915045316b01526698741e6e6690f91efd4bf4f8ffffff5fb305cf00fe6994852cd6e54ece9a6dbe946c868fa2cb9bc3a5499b7e1ca0d7f6f0ea6930eb1da1f88fafaaa8b167a6e0b991ee3fca97155e16cb485bfb697993287295401e3fb84363dcae212edf3ff0ce7cdba458", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff0700000000"}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x19, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x0, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x20c}}, 0x2000c800) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=289): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2202, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff98) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={0x0}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup3(0xffffffffffffffff, r2, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)={0xe, {0x5, 0x6, 0xbc}}, 0xc) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000200)=""/177) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14d2c6641500df2500000000db59bb9d247822a002f298"], 0x114}, {0x0}], 0x2, 0x0, 0x0, 0x4001}, 0x20004000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. [ 98.037853][ T9] cfg80211: failed to load regulatory.db [ 102.370098][ T5593] cgroup: Unknown subsys name 'net' [ 102.592087][ T5593] cgroup: Unknown subsys name 'cpuset' [ 102.655731][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 104.676243][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.399974][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.415330][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.434604][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.453247][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.466923][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.475207][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.495773][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.507520][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.546892][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.550865][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.553595][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.563725][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.564681][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.573362][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.601034][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.601534][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.603188][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.607699][ T4921] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.646460][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.662510][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.803325][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.852939][ T4921] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.867468][ T4921] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.896989][ T4921] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.898647][ T4921] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.686971][ T5619] Bluetooth: hci2: command tx timeout [ 109.846284][ T5619] Bluetooth: hci1: command tx timeout [ 109.861079][ T5619] Bluetooth: hci0: command tx timeout [ 109.925765][ T5619] Bluetooth: hci4: command tx timeout [ 109.925780][ T4921] Bluetooth: hci3: command tx timeout [ 110.612314][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.613581][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.614355][ T5608] bridge_slave_0: entered allmulticast mode [ 110.629819][ T5608] bridge_slave_0: entered promiscuous mode [ 110.698609][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.698743][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.698950][ T5608] bridge_slave_1: entered allmulticast mode [ 110.701566][ T5608] bridge_slave_1: entered promiscuous mode [ 110.859596][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.859811][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.860359][ T5606] bridge_slave_0: entered allmulticast mode [ 110.862540][ T5606] bridge_slave_0: entered promiscuous mode [ 110.943078][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.943382][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.943531][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.943751][ T5606] bridge_slave_1: entered allmulticast mode [ 110.948929][ T5606] bridge_slave_1: entered promiscuous mode [ 110.993927][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.994044][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.994389][ T5609] bridge_slave_0: entered allmulticast mode [ 111.016641][ T5609] bridge_slave_0: entered promiscuous mode [ 111.023767][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.023908][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.024124][ T5607] bridge_slave_0: entered allmulticast mode [ 111.052784][ T5607] bridge_slave_0: entered promiscuous mode [ 111.066687][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.106226][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.106354][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.106537][ T5609] bridge_slave_1: entered allmulticast mode [ 111.108628][ T5609] bridge_slave_1: entered promiscuous mode [ 111.111800][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.111973][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.112102][ T5607] bridge_slave_1: entered allmulticast mode [ 111.113960][ T5607] bridge_slave_1: entered promiscuous mode [ 111.192111][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.192242][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.194022][ T5605] bridge_slave_0: entered allmulticast mode [ 111.202277][ T5605] bridge_slave_0: entered promiscuous mode [ 111.270896][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.271208][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.271408][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.271580][ T5605] bridge_slave_1: entered allmulticast mode [ 111.274647][ T5605] bridge_slave_1: entered promiscuous mode [ 111.339933][ T5608] team0: Port device team_slave_0 added [ 111.344274][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.381251][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.395389][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.404293][ T5608] team0: Port device team_slave_1 added [ 111.461659][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.470688][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.524285][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.591382][ T5606] team0: Port device team_slave_0 added [ 111.594127][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.638701][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.638720][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.638749][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.653096][ T5606] team0: Port device team_slave_1 added [ 111.708425][ T5609] team0: Port device team_slave_0 added [ 111.711049][ T5607] team0: Port device team_slave_0 added [ 111.739168][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.739182][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.739203][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.765137][ T4921] Bluetooth: hci2: command tx timeout [ 111.805443][ T5609] team0: Port device team_slave_1 added [ 111.807700][ T5607] team0: Port device team_slave_1 added [ 111.845437][ T5605] team0: Port device team_slave_0 added [ 111.880820][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.880833][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.880853][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.918184][ T5605] team0: Port device team_slave_1 added [ 111.927011][ T4921] Bluetooth: hci0: command tx timeout [ 111.927118][ T4921] Bluetooth: hci1: command tx timeout [ 111.973069][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.973087][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.973116][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.004890][ T5619] Bluetooth: hci3: command tx timeout [ 112.004989][ T4921] Bluetooth: hci4: command tx timeout [ 112.387733][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.387746][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.387767][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.388946][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.388960][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.388988][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.510517][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.510544][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.510575][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.513909][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.513922][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.513942][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.613287][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.613307][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.613403][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.681088][ T5608] hsr_slave_0: entered promiscuous mode [ 112.682323][ T5608] hsr_slave_1: entered promiscuous mode [ 112.684242][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.684258][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.684287][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.830822][ T5606] hsr_slave_0: entered promiscuous mode [ 112.831786][ T5606] hsr_slave_1: entered promiscuous mode [ 112.832836][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 112.832932][ T5606] Cannot create hsr debugfs directory [ 112.933021][ T5609] hsr_slave_0: entered promiscuous mode [ 112.934046][ T5609] hsr_slave_1: entered promiscuous mode [ 112.936114][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 112.936196][ T5609] Cannot create hsr debugfs directory [ 112.964351][ T5607] hsr_slave_0: entered promiscuous mode [ 112.968772][ T5607] hsr_slave_1: entered promiscuous mode [ 112.971195][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 112.971222][ T5607] Cannot create hsr debugfs directory [ 113.052878][ T5605] hsr_slave_0: entered promiscuous mode [ 113.053884][ T5605] hsr_slave_1: entered promiscuous mode [ 113.054615][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 113.054633][ T5605] Cannot create hsr debugfs directory [ 113.844874][ T4921] Bluetooth: hci2: command tx timeout [ 114.004964][ T5619] Bluetooth: hci1: command tx timeout [ 114.005064][ T4921] Bluetooth: hci0: command tx timeout [ 114.040238][ T5608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.086207][ T4921] Bluetooth: hci4: command tx timeout [ 114.086256][ T4921] Bluetooth: hci3: command tx timeout [ 114.118507][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.125244][ T5608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.169752][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.172653][ T5608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.200217][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.235133][ T5608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.279666][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.432983][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.462979][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.475880][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.498940][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.503822][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.545371][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.582659][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.620992][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.812414][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.840100][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.851346][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.895937][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.902687][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.930919][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.961316][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.002288][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.177223][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.220045][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.250935][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.292686][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.318213][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.349825][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.391361][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.435222][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.580095][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.640123][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.669124][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.672825][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.731924][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.759701][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.799999][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.813303][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.840110][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.878743][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.907806][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.928062][ T5619] Bluetooth: hci2: command tx timeout [ 115.963126][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.963301][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.018437][ T3380] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.018531][ T3380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.085306][ T5619] Bluetooth: hci0: command tx timeout [ 116.085341][ T5619] Bluetooth: hci1: command tx timeout [ 116.116086][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.158037][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.158245][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.166889][ T4921] Bluetooth: hci3: command tx timeout [ 116.166924][ T4921] Bluetooth: hci4: command tx timeout [ 116.207726][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.241922][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.242068][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.353151][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.409138][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.409297][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.454847][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.488364][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.488588][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.650002][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.793400][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.854448][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.854697][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.929829][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.929943][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.060964][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.121923][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.122066][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.248657][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.249769][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.673378][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.201045][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.602903][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.657931][ T5609] veth0_vlan: entered promiscuous mode [ 118.750420][ T5609] veth1_vlan: entered promiscuous mode [ 119.073668][ T5608] veth0_vlan: entered promiscuous mode [ 119.089763][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.126626][ T5607] veth0_vlan: entered promiscuous mode [ 119.165174][ T5609] veth0_macvtap: entered promiscuous mode [ 119.187952][ T5608] veth1_vlan: entered promiscuous mode [ 119.209598][ T5609] veth1_macvtap: entered promiscuous mode [ 119.221495][ T5607] veth1_vlan: entered promiscuous mode [ 119.270477][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.324097][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.366233][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.443275][ T3365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.464613][ T5608] veth0_macvtap: entered promiscuous mode [ 119.481476][ T3365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.498822][ T3365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.517463][ T5607] veth0_macvtap: entered promiscuous mode [ 119.519935][ T3365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.520132][ T5606] veth0_vlan: entered promiscuous mode [ 119.522408][ T5608] veth1_macvtap: entered promiscuous mode [ 119.609695][ T5607] veth1_macvtap: entered promiscuous mode [ 119.704480][ T5606] veth1_vlan: entered promiscuous mode [ 119.914322][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.960971][ T5605] veth0_vlan: entered promiscuous mode [ 120.069840][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.087569][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.155859][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.177749][ T5605] veth1_vlan: entered promiscuous mode [ 120.182054][ T3380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.226955][ T3380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.243709][ T3380] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.264312][ T3380] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.280921][ T3380] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.320871][ T3380] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.404079][ T3380] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.424624][ T3380] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.481864][ T5606] veth0_macvtap: entered promiscuous mode [ 120.514573][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.514598][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.648645][ T5606] veth1_macvtap: entered promiscuous mode [ 121.092959][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.092983][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.119987][ T5605] veth0_macvtap: entered promiscuous mode [ 121.193218][ T5605] veth1_macvtap: entered promiscuous mode [ 121.225636][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.310131][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.310155][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.314169][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.398317][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.398339][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.399257][ T771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.433558][ T1133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.468180][ T1133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.471476][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.484638][ T1133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.539121][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.727491][ T1128] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.773819][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.773841][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.789907][ T1128] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.854470][ T1128] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.881994][ T1128] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.921513][ T3341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.921532][ T3341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.239730][ T5800] process 'syz.0.6' launched './file0' with NULL argv: empty string added [ 122.738451][ T3408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.738474][ T3408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.895019][ T37] audit: type=1800 audit(1779022078.297:2): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5" name="file1" dev="overlay" ino=26 res=0 errno=0 [ 122.986242][ T5809] FAULT_INJECTION: forcing a failure. [ 122.986242][ T5809] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.986297][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.986323][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.986345][ T5809] Call Trace: [ 122.986354][ T5809] [ 122.986363][ T5809] dump_stack_lvl+0xe8/0x150 [ 122.986404][ T5809] should_fail_ex+0x46b/0x600 [ 122.986447][ T5809] strncpy_from_user+0x36/0x2b0 [ 122.986488][ T5809] do_getname+0x77/0x250 [ 122.986521][ T5809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.986546][ T5809] __se_sys_rename+0x2b/0x2c0 [ 122.986581][ T5809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.986613][ T5809] do_syscall_64+0x15f/0xf80 [ 122.986643][ T5809] ? trace_irq_disable+0x3b/0x140 [ 122.986670][ T5809] ? clear_bhb_loop+0x40/0x90 [ 122.986698][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.986722][ T5809] RIP: 0033:0x7f189af2ce59 [ 122.986747][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.986766][ T5809] RSP: 002b:00007f189917e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 122.986798][ T5809] RAX: ffffffffffffffda RBX: 00007f189b1a5fa0 RCX: 00007f189af2ce59 [ 122.986815][ T5809] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 122.986830][ T5809] RBP: 00007f189917e090 R08: 0000000000000000 R09: 0000000000000000 [ 122.986844][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.986856][ T5809] R13: 00007f189b1a6038 R14: 00007f189b1a5fa0 R15: 00007fffdb54b2d8 [ 122.986887][ T5809] [ 124.119099][ T3365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.119122][ T3365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.271817][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.271840][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.541235][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.541258][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.964798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.984804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.994813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.004790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.014789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.024811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.034812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.044823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.054786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.064787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.835047][ T5834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.902511][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 128.517460][ T5843] syz.1.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.818044][ T37] audit: type=1326 audit(1779022084.237:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.4.17" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189af2ce59 code=0x7ffc0000 [ 128.957531][ T37] audit: type=1326 audit(1779022084.247:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.4.17" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189af2ce59 code=0x7ffc0000 [ 129.037340][ T37] audit: type=1326 audit(1779022084.457:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.4.17" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f189af2ce59 code=0x7ffc0000 [ 129.037520][ T37] audit: type=1326 audit(1779022084.457:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.4.17" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189af2ce59 code=0x7ffc0000 [ 129.039007][ T37] audit: type=1326 audit(1779022084.457:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.4.17" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189af2ce59 code=0x7ffc0000 [ 129.039060][ T37] audit: type=1326 audit(1779022084.457:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.4.17" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189af2ce59 code=0x7ffc0000 [ 129.039129][ T37] audit: type=1326 audit(1779022084.457:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.4.17" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189af2ce59 code=0x7ffc0000 [ 129.117638][ T37] audit: type=1326 audit(1779022084.507:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.4.17" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189af2ce59 code=0x7ffc0000 [ 129.117825][ T37] audit: type=1326 audit(1779022084.507:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.4.17" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f189af2cbc2 code=0x7ffc0000 [ 129.117955][ T37] audit: type=1326 audit(1779022084.507:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.4.17" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f189af2cc57 code=0x7ffc0000 [ 131.021690][ T5863] pim6reg: entered allmulticast mode [ 131.221848][ T5873] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 135.305104][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.348447][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.562491][ T5908] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 135.562517][ T5908] netlink: 'syz.0.35': attribute type 2 has an invalid length. [ 135.562530][ T5908] netlink: 'syz.0.35': attribute type 3 has an invalid length. [ 135.714859][ T5619] Bluetooth: hci4: ACL packet for unknown connection handle 3072 [ 136.120627][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 136.251287][ T5736] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 136.429096][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.523784][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.560109][ T5736] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 136.560142][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 136.560165][ T5736] usb 2-1: Product: syz [ 136.560181][ T5736] usb 2-1: Manufacturer: syz [ 136.560197][ T5736] usb 2-1: SerialNumber: syz [ 136.734917][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 136.806757][ T5736] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 136.929957][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 136.951919][ T31] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 136.951942][ T31] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 136.951958][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 136.951974][ T31] usb 1-1: config 1 has no interface number 0 [ 136.952010][ T31] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.952030][ T31] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 136.952068][ T31] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 136.952089][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.229435][ T31] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 137.591233][ T31] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 138.667238][ T31] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 139.041694][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.053156][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.148252][ T5736] vp7045: USB control message 'in' went wrong. [ 139.148296][ T5736] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 139.148336][ T5736] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 139.559060][ T5736] usb 1-1: USB disconnect, device number 2 [ 139.582565][ T5736] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 139.948731][ T5619] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 139.948889][ T5619] Bluetooth: hci4: Injecting HCI hardware error event [ 139.950926][ T5619] Bluetooth: hci4: hardware error 0x00 [ 141.559343][ T5881] syz.4.27 (5881) used greatest stack depth: 18880 bytes left [ 141.705024][ T66] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.808140][ T66] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.820234][ T66] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.840125][ T66] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.088606][ T36] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 142.148734][ T31] usb 2-1: USB disconnect, device number 2 [ 142.390642][ T36] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.390708][ T36] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.390751][ T36] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.390777][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.842675][ T5934] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.258878][ T5619] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 147.113897][ T36] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.860466][ T5973] FAULT_INJECTION: forcing a failure. [ 147.860466][ T5973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.860503][ T5973] CPU: 1 UID: 0 PID: 5973 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.860528][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.860542][ T5973] Call Trace: [ 147.860551][ T5973] [ 147.860561][ T5973] dump_stack_lvl+0xe8/0x150 [ 147.860592][ T5973] should_fail_ex+0x46b/0x600 [ 147.860636][ T5973] _copy_from_user+0x2d/0xb0 [ 147.860663][ T5973] get_itimerspec64+0x1ca/0x310 [ 147.860698][ T5973] ? __pfx_get_itimerspec64+0x10/0x10 [ 147.860735][ T5973] ? rt_mutex_slowunlock+0x1cb/0x300 [ 147.860766][ T5973] __x64_sys_timerfd_settime+0x149/0x240 [ 147.860802][ T5973] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 147.860855][ T5973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.860881][ T5973] do_syscall_64+0x15f/0xf80 [ 147.860911][ T5973] ? trace_irq_disable+0x3b/0x140 [ 147.860938][ T5973] ? clear_bhb_loop+0x40/0x90 [ 147.860967][ T5973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.860990][ T5973] RIP: 0033:0x7f65e1acce59 [ 147.861011][ T5973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.861030][ T5973] RSP: 002b:00007f65dfd26028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 147.861053][ T5973] RAX: ffffffffffffffda RBX: 00007f65e1d45fa0 RCX: 00007f65e1acce59 [ 147.861065][ T5973] RDX: 0000200000000100 RSI: 0000000000000003 RDI: 0000000000000003 [ 147.861076][ T5973] RBP: 00007f65dfd26090 R08: 0000000000000000 R09: 0000000000000000 [ 147.861087][ T5973] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 147.861099][ T5973] R13: 00007f65e1d46038 R14: 00007f65e1d45fa0 R15: 00007ffcbff43c58 [ 147.861128][ T5973] [ 148.364854][ T5921] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.545655][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 148.548407][ T5921] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 148.548438][ T5921] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 148.548490][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.548538][ T5921] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 148.548565][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.789304][ T5921] usb 1-1: config 0 descriptor?? [ 149.043356][ T5921] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 149.726924][ T36] usb 3-1: USB disconnect, device number 2 [ 150.429286][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.782264][ T5721] usb 1-1: USB disconnect, device number 3 [ 155.951820][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 155.969416][ T6016] bridge1: entered promiscuous mode [ 155.969449][ T6016] bridge1: entered allmulticast mode [ 156.062894][ T6017] hub 8-0:1.0: USB hub found [ 156.064280][ T6017] hub 8-0:1.0: 1 port detected [ 162.544929][ T36] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 162.717109][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 162.728077][ T36] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 162.728111][ T36] usb 2-1: config 1 has no interface number 0 [ 162.728172][ T36] usb 2-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.728196][ T36] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.728223][ T36] usb 2-1: config 1 interface 236 has no altsetting 0 [ 162.797150][ T36] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 162.797183][ T36] usb 2-1: config 1 has no interface number 0 [ 162.797234][ T36] usb 2-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.797259][ T36] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.797286][ T36] usb 2-1: config 1 interface 236 has no altsetting 0 [ 162.868309][ T36] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 162.868346][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.868369][ T36] usb 2-1: Product: syz [ 162.868386][ T36] usb 2-1: Manufacturer: syz [ 162.868403][ T36] usb 2-1: SerialNumber: syz [ 162.975403][ T5921] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.202856][ T5921] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 163.202892][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.334296][ T5921] usb 1-1: config 0 descriptor?? [ 163.543123][ T36] ti_usb_3410_5052 2-1:1.236: TI USB 5052 2 port adapter converter detected [ 163.703357][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.722141][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.813251][ T5921] usb 1-1: Cannot read MAC address [ 163.813892][ T5921] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 164.014967][ T5737] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 164.059927][ T5921] usb 1-1: USB disconnect, device number 4 [ 164.181296][ T6051] Zero length message leads to an empty skb [ 164.206956][ T5737] usb 3-1: Using ep0 maxpacket: 8 [ 164.218757][ T5737] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.234480][ T5737] usb 3-1: config index 0 descriptor too short (expected 2107, got 59) [ 164.234511][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.234575][ T5737] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.268085][ T5737] usb 3-1: config index 1 descriptor too short (expected 2107, got 59) [ 164.268116][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.268169][ T5737] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.306527][ T5737] usb 3-1: config index 2 descriptor too short (expected 2107, got 59) [ 164.306559][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.306611][ T5737] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.325557][ T5737] usb 3-1: config index 3 descriptor too short (expected 2107, got 59) [ 164.325591][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.325647][ T5737] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.386583][ T5721] usb 2-1: USB disconnect, device number 3 [ 164.388549][ T5737] usb 3-1: config index 4 descriptor too short (expected 2107, got 59) [ 164.388578][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.388630][ T5737] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.392648][ T5737] usb 3-1: config index 5 descriptor too short (expected 2107, got 59) [ 164.392680][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.392733][ T5737] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.416671][ T5737] usb 3-1: config index 6 descriptor too short (expected 2107, got 59) [ 164.416703][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.416755][ T5737] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.442572][ T5737] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.442607][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.442646][ T5737] usb 3-1: SerialNumber: syz [ 164.602438][ T5737] hub 3-1:1.0: Invalid hub with more than one config or interface [ 164.602485][ T5737] hub 3-1:1.0: probe with driver hub failed with error -22 [ 164.603874][ T5737] usb 3-1: No union descriptors [ 164.737523][ T6063] FAULT_INJECTION: forcing a failure. [ 164.737523][ T6063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.737561][ T6063] CPU: 1 UID: 0 PID: 6063 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.737587][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.737602][ T6063] Call Trace: [ 164.737611][ T6063] [ 164.737621][ T6063] dump_stack_lvl+0xe8/0x150 [ 164.737655][ T6063] should_fail_ex+0x46b/0x600 [ 164.737700][ T6063] _copy_from_user+0x2d/0xb0 [ 164.737728][ T6063] ___sys_sendmsg+0x1c6/0x360 [ 164.737774][ T6063] ? __lock_acquire+0x6b5/0x2cf0 [ 164.737811][ T6063] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.737882][ T6063] ? __fget_files+0x2a/0x420 [ 164.737903][ T6063] ? __fget_files+0x3a6/0x420 [ 164.737936][ T6063] __x64_sys_sendmsg+0x1c3/0x2a0 [ 164.737970][ T6063] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.738023][ T6063] ? __pfx_ksys_write+0x10/0x10 [ 164.738060][ T6063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.738085][ T6063] do_syscall_64+0x15f/0xf80 [ 164.738115][ T6063] ? trace_irq_disable+0x3b/0x140 [ 164.738142][ T6063] ? clear_bhb_loop+0x40/0x90 [ 164.738169][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.738191][ T6063] RIP: 0033:0x7f65e1acce59 [ 164.738212][ T6063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.738236][ T6063] RSP: 002b:00007f65dfd26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.738260][ T6063] RAX: ffffffffffffffda RBX: 00007f65e1d45fa0 RCX: 00007f65e1acce59 [ 164.738276][ T6063] RDX: 0000000004008040 RSI: 0000200000000280 RDI: 0000000000000003 [ 164.738291][ T6063] RBP: 00007f65dfd26090 R08: 0000000000000000 R09: 0000000000000000 [ 164.738305][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.738318][ T6063] R13: 00007f65e1d46038 R14: 00007f65e1d45fa0 R15: 00007ffcbff43c58 [ 164.738354][ T6063] [ 165.156221][ T6059] vxcan0: tx address claim with different name [ 165.175049][ T5737] usb 3-1: USB disconnect, device number 3 [ 165.601805][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 169.819843][ T6107] comedi comedi1: pcl818: I/O base address or length out of range [ 169.878980][ T6110] lo: entered allmulticast mode [ 169.884582][ T6110] lo: left allmulticast mode [ 170.929854][ T6121] netlink: 'syz.3.91': attribute type 3 has an invalid length. [ 171.163740][ T6122] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.98'. [ 171.221864][ T5921] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 171.422720][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.422759][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.422784][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.422832][ T5921] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.422867][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.544584][ T5921] usb 2-1: config 0 descriptor?? [ 171.878328][ T6128] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 172.361387][ T5921] plantronics 0003:047F:FFFF.0001: unbalanced delimiter at end of report description [ 172.362291][ T5921] plantronics 0003:047F:FFFF.0001: parse failed [ 172.378485][ T5921] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22 [ 172.836922][ T5921] usb 2-1: USB disconnect, device number 4 [ 173.097057][ T6134] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 173.255603][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 173.340194][ T6139] binder: 6138:6139 ioctl c0306201 200000000680 returned -14 [ 173.448291][ T31] usb 3-1: descriptor type invalid, skip [ 173.448315][ T31] usb 3-1: descriptor type invalid, skip [ 173.449829][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 173.454241][ T31] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 173.454279][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 173.464593][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.464626][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.464648][ T31] usb 3-1: Product: syz [ 173.464664][ T31] usb 3-1: Manufacturer: syz [ 173.464679][ T31] usb 3-1: SerialNumber: syz [ 173.601942][ T6135] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 173.908343][ T6135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.952294][ T6135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.277842][ T31] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 174.427235][ T31] usb 3-1: USB disconnect, device number 4 [ 174.589526][ T6152] netlink: 'syz.1.108': attribute type 8 has an invalid length. [ 175.464873][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.641277][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 175.641325][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 177.455433][ T5985] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 177.609589][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 177.611918][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.611955][ T5985] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.612000][ T5985] usb 5-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 177.612026][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.669575][ T5985] usb 5-1: config 0 descriptor?? [ 177.905882][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.923537][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.965353][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.968388][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.973579][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.111'. [ 178.000073][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.001194][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.018288][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.026688][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.061387][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.072531][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.233998][ T5985] betop 0003:8380:1850.0002: unknown main item tag 0x0 [ 178.234040][ T5985] betop 0003:8380:1850.0002: unknown main item tag 0x0 [ 178.234068][ T5985] betop 0003:8380:1850.0002: unknown main item tag 0x0 [ 178.234096][ T5985] betop 0003:8380:1850.0002: unknown main item tag 0x0 [ 178.234124][ T5985] betop 0003:8380:1850.0002: unknown main item tag 0x0 [ 178.234151][ T5985] betop 0003:8380:1850.0002: unknown main item tag 0x0 [ 178.234180][ T5985] betop 0003:8380:1850.0002: unknown main item tag 0x0 [ 178.234208][ T5985] betop 0003:8380:1850.0002: unknown main item tag 0x0 [ 178.234236][ T5985] betop 0003:8380:1850.0002: unknown main item tag 0x0 [ 178.303674][ T5985] betop 0003:8380:1850.0002: unknown main item tag 0x0 [ 178.732886][ T5985] betop 0003:8380:1850.0002: hidraw0: USB HID v7f.fd Device [HID 8380:1850] on usb-dummy_hcd.4-1/input0 [ 178.732923][ T5985] betop 0003:8380:1850.0002: no inputs found [ 179.997385][ T5985] usb 5-1: USB disconnect, device number 2 [ 181.519425][ T6212] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 184.638528][ T5337] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 184.800918][ T6241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.814753][ T5337] usb 5-1: Using ep0 maxpacket: 16 [ 184.824563][ T5337] usb 5-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 184.824594][ T5337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.880308][ T5337] usb 5-1: config 0 descriptor?? [ 185.593662][ T5337] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 185.672052][ T6235] netlink: 'syz.4.131': attribute type 15 has an invalid length. [ 185.696014][ T6235] 9p: Unknown Cache mode or invalid value fÔ [ 187.161279][ T6241] bridge1: entered allmulticast mode [ 187.359236][ T6245] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 188.209237][ T6264] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 188.274794][ T5736] bridge0: entered promiscuous mode [ 189.016874][ T5337] pwc: send_video_command error -71 [ 189.016893][ T5337] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 189.017011][ T5337] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 190.080609][ T5337] usb 5-1: USB disconnect, device number 3 [ 191.278323][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 191.526960][ T6282] netlink: 44 bytes leftover after parsing attributes in process `syz.4.147'. [ 191.526990][ T6282] netlink: 43 bytes leftover after parsing attributes in process `syz.4.147'. [ 191.527007][ T6282] netlink: 'syz.4.147': attribute type 6 has an invalid length. [ 191.527021][ T6282] netlink: 'syz.4.147': attribute type 5 has an invalid length. [ 191.527035][ T6282] netlink: 43 bytes leftover after parsing attributes in process `syz.4.147'. [ 191.625585][ T6286] IPv6: Can't replace route, no match found [ 191.754227][ T5337] hsr0: entered promiscuous mode [ 191.898553][ T4921] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.944107][ T4921] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.949585][ T4921] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.963998][ T4921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.978958][ T4921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.212536][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 192.235876][ T6293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.149'. [ 193.861748][ T6310] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 194.087608][ T5619] Bluetooth: hci5: command tx timeout [ 194.339857][ T6316] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 194.715529][ T6323] mmap: syz.4.158 (6323): VmData 37593088 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 194.784442][ T6326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.157'. [ 194.908895][ T6326] veth1_macvtap: left promiscuous mode [ 195.491454][ T6326] veth1_macvtap: entered promiscuous mode [ 195.491742][ T6326] macsec0: entered promiscuous mode [ 195.491918][ T6326] macsec0: entered allmulticast mode [ 195.491928][ T6326] veth1_macvtap: entered allmulticast mode [ 195.777810][ T6341] netlink: 44 bytes leftover after parsing attributes in process `syz.2.164'. [ 195.777838][ T6341] netlink: 43 bytes leftover after parsing attributes in process `syz.2.164'. [ 195.777855][ T6341] netlink: 'syz.2.164': attribute type 6 has an invalid length. [ 195.777870][ T6341] netlink: 'syz.2.164': attribute type 5 has an invalid length. [ 195.777883][ T6341] netlink: 43 bytes leftover after parsing attributes in process `syz.2.164'. [ 196.165541][ T5619] Bluetooth: hci5: command tx timeout [ 197.127307][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 198.274042][ T5619] Bluetooth: hci5: command tx timeout [ 198.293940][ T6362] 9p: Bad value for 'wfdno' [ 200.438161][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.438235][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.442466][ T5619] Bluetooth: hci5: command tx timeout [ 200.499465][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.244490][ T1133] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.268311][ T6399] netlink: 44 bytes leftover after parsing attributes in process `syz.2.180'. [ 205.268339][ T6399] netlink: 43 bytes leftover after parsing attributes in process `syz.2.180'. [ 205.268356][ T6399] netlink: 'syz.2.180': attribute type 6 has an invalid length. [ 205.268370][ T6399] netlink: 'syz.2.180': attribute type 5 has an invalid length. [ 205.268384][ T6399] netlink: 43 bytes leftover after parsing attributes in process `syz.2.180'. [ 206.250989][ T6392] ipvlan2: entered promiscuous mode [ 206.600278][ T6412] netlink: 240 bytes leftover after parsing attributes in process `syz.4.182'. [ 206.851185][ T6405] Bluetooth: MGMT ver 1.23 [ 207.360480][ T6401] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 207.482113][ T5985] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 207.644848][ T5985] usb 1-1: Using ep0 maxpacket: 16 [ 207.647669][ T5985] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 207.647697][ T5985] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 207.647719][ T5985] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 207.647741][ T5985] usb 1-1: config 0 has no interface number 0 [ 207.647787][ T5985] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.647816][ T5985] usb 1-1: config 0 interface 104 has no altsetting 1 [ 207.653796][ T5985] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 207.653826][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.653848][ T5985] usb 1-1: Product: syz [ 207.653862][ T5985] usb 1-1: Manufacturer: syz [ 207.653877][ T5985] usb 1-1: SerialNumber: syz [ 207.783066][ T5985] usb 1-1: config 0 descriptor?? [ 207.841247][ T5985] asix 1-1:0.104: probe with driver asix failed with error -22 [ 207.908755][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.188'. [ 208.007102][ T5985] usb 1-1: USB disconnect, device number 5 [ 208.172173][ T1133] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.428400][ T6428] : renamed from bond0 (while UP) [ 209.920945][ T6462] netlink: 44 bytes leftover after parsing attributes in process `syz.2.194'. [ 209.920973][ T6462] netlink: 43 bytes leftover after parsing attributes in process `syz.2.194'. [ 209.920989][ T6462] netlink: 'syz.2.194': attribute type 6 has an invalid length. [ 209.921003][ T6462] netlink: 'syz.2.194': attribute type 5 has an invalid length. [ 209.921016][ T6462] netlink: 43 bytes leftover after parsing attributes in process `syz.2.194'. [ 211.311088][ T6468] capability: warning: `syz.4.198' uses deprecated v2 capabilities in a way that may be insecure [ 211.679751][ T1133] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.879703][ T6483] netlink: 'syz.1.199': attribute type 11 has an invalid length. [ 211.879730][ T6483] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.199'. [ 212.224970][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 212.614937][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 212.617219][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 212.617250][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 212.617272][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.617317][ T10] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 212.617340][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.511941][ T10] usb 2-1: config 0 descriptor?? [ 213.595387][ T1133] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.740241][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 213.751730][ T6506] syz.0.203: vmalloc error: size 18446744073699065859, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 213.752318][ T6506] CPU: 1 UID: 0 PID: 6506 Comm: syz.0.203 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 213.752369][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.752413][ T6506] Call Trace: [ 213.752436][ T6506] [ 213.752453][ T6506] dump_stack_lvl+0xe8/0x150 [ 213.752488][ T6506] warn_alloc+0x263/0x3e0 [ 213.752565][ T6506] ? __UNIQUE_ID_modinfo_13309+0x6577dc7a/0xffffffffffed2c77 [ 213.752632][ T6506] ? __pfx_warn_alloc+0x10/0x10 [ 213.752662][ T6506] ? finish_task_switch+0x41f/0xbe0 [ 213.752733][ T6506] ? trace_sched_exit_tp+0x3a/0x130 [ 213.752800][ T6506] ? __schedule+0x1702/0x5620 [ 213.752829][ T6506] ? ktime_get+0x45/0x220 [ 213.752921][ T6506] __vmalloc_node_range_noprof+0x132/0x1750 [ 213.752977][ T6506] ? __UNIQUE_ID_modinfo_13309+0x6577dc7a/0xffffffffffed2c77 [ 213.753055][ T6506] ? __pfx___schedule+0x10/0x10 [ 213.753122][ T6506] ? irqentry_exit+0x218/0x760 [ 213.753158][ T6506] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 213.753219][ T6506] ? preempt_schedule_thunk+0x16/0x30 [ 213.753298][ T6506] ? preempt_schedule_common+0x82/0xd0 [ 213.753328][ T6506] ? __UNIQUE_ID_modinfo_13309+0x6577dc7a/0xffffffffffed2c77 [ 213.753396][ T6506] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 213.753474][ T6506] vmalloc_noprof+0xb2/0xe0 [ 213.753500][ T6506] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 213.753592][ T6506] ? __UNIQUE_ID_modinfo_13309+0x6577dc7a/0xffffffffffed2c77 [ 213.753666][ T6506] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 213.753707][ T6506] ? dvb_demux_do_ioctl+0x323/0x540 [ 213.753784][ T6506] dvb_demux_do_ioctl+0x460/0x540 [ 213.753830][ T6506] ? __UNIQUE_ID_modinfo_13309+0x6577dc7a/0xffffffffffed2c77 [ 213.753868][ T6506] ? __UNIQUE_ID_modinfo_13309+0x6577dc7a/0xffffffffffed2c77 [ 213.753949][ T6506] dvb_usercopy+0x199/0x2e0 [ 213.753997][ T6506] ? __UNIQUE_ID_modinfo_13309+0x6577dc7a/0xffffffffffed2c77 [ 213.754033][ T6506] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 213.754105][ T6506] ? __pfx_dvb_usercopy+0x10/0x10 [ 213.754169][ T6506] ? __fget_files+0x3a6/0x420 [ 213.754191][ T6506] ? __fget_files+0x2a/0x420 [ 213.754234][ T6506] ? __UNIQUE_ID_modinfo_13309+0x6577dc7a/0xffffffffffed2c77 [ 213.754313][ T6506] ? __UNIQUE_ID_modinfo_13309+0x6577dc7a/0xffffffffffed2c77 [ 213.754347][ T6506] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 213.754409][ T6506] ? __UNIQUE_ID_modinfo_13309+0x6577dc7a/0xffffffffffed2c77 [ 213.754484][ T6506] dvb_demux_ioctl+0x29/0x40 [ 213.754517][ T6506] __se_sys_ioctl+0xff/0x170 [ 213.754574][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.754640][ T6506] do_syscall_64+0x15f/0xf80 [ 213.754671][ T6506] ? trace_irq_disable+0x3b/0x140 [ 213.754698][ T6506] ? clear_bhb_loop+0x40/0x90 [ 213.754730][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.754797][ T6506] RIP: 0033:0x7fb82cafce59 [ 213.754847][ T6506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.754868][ T6506] RSP: 002b:00007fb82ad56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.754898][ T6506] RAX: ffffffffffffffda RBX: 00007fb82cd75fa0 RCX: 00007fb82cafce59 [ 213.754952][ T6506] RDX: ffffffffff600003 RSI: 0000000000006f2d RDI: 0000000000000003 [ 213.754987][ T6506] RBP: 00007fb82cb92d6f R08: 0000000000000000 R09: 0000000000000000 [ 213.755016][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.755031][ T6506] R13: 00007fb82cd76038 R14: 00007fb82cd75fa0 R15: 00007ffdb9627908 [ 213.755060][ T6506] ? __UNIQUE_ID_modinfo_13309+0x6577dc7a/0xffffffffffed2c77 [ 213.755134][ T6506] [ 213.781614][ T6506] Mem-Info: [ 213.781658][ T6506] active_anon:201 inactive_anon:6118 isolated_anon:0 [ 213.781658][ T6506] active_file:19505 inactive_file:40820 isolated_file:0 [ 213.781658][ T6506] unevictable:791 dirty:99 writeback:0 [ 213.781658][ T6506] slab_reclaimable:11519 slab_unreclaimable:103061 [ 213.781658][ T6506] mapped:30079 shmem:1324 pagetables:1250 [ 213.781658][ T6506] sec_pagetables:0 bounce:0 [ 213.781658][ T6506] kernel_misc_reclaimable:0 [ 213.781658][ T6506] free:1303786 free_pcp:9934 free_cma:0 [ 213.781759][ T6506] Node 0 active_anon:804kB inactive_anon:24472kB active_file:77808kB inactive_file:163280kB unevictable:1628kB isolated(anon):0kB isolated(file):0kB mapped:120316kB dirty:396kB writeback:0kB shmem:3760kB kernel_stack:13448kB pagetables:4868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 213.781895][ T6506] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 213.781986][ T6506] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.782091][ T6506] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 213.782199][ T6506] Node 0 DMA32 free:1273540kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:804kB inactive_anon:24472kB active_file:77808kB inactive_file:163280kB unevictable:1628kB writepending:396kB zspages:0kB present:3129332kB managed:2566516kB mlocked:92kB bounce:0kB free_pcp:39736kB local_pcp:8712kB free_cma:0kB [ 213.782301][ T6506] lowmem_reserve[]: 0 0 0 0 0 [ 213.782386][ T6506] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:212kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.782545][ T6506] lowmem_reserve[]: 0 0 0 0 0 [ 213.782584][ T6506] Node 1 Normal free:3926244kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.782922][ T6506] lowmem_reserve[]: 0 0 0 0 0 [ 213.782973][ T6506] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.819014][ T6506] Node 0 DMA32: 1128*4kB (UM) 790*8kB (UME) 420*16kB (UME) 310*32kB (UME) 293*64kB (UME) 185*128kB (UME) 88*256kB (UME) 61*512kB (UM) 55*1024kB (UME) 22*2048kB (UM) 256*4096kB (UM) = 1273616kB [ 213.819249][ T6506] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 213.829403][ T6506] Node 1 Normal: 1*4kB (U) 6*8kB (UM) 5*16kB (UM) 7*32kB (UM) 8*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 957*4096kB (M) = 3926244kB [ 213.829748][ T6506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.829768][ T6506] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.829823][ T6506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.829842][ T6506] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.829862][ T6506] 61645 total pagecache pages [ 213.829877][ T6506] 0 pages in swap cache [ 213.829886][ T6506] Free swap = 124996kB [ 213.829908][ T6506] Total swap = 124996kB [ 213.829939][ T6506] 2097051 pages RAM [ 213.829976][ T6506] 0 pages HighMem/MovableOnly [ 213.830000][ T6506] 423754 pages reserved [ 213.830009][ T6506] 0 pages cma reserved [ 214.568138][ T10] hid_parser_main: 221 callbacks suppressed [ 214.568164][ T10] zeroplus 0003:0C12:0030.0003: unknown main item tag 0x0 [ 214.568190][ T10] zeroplus 0003:0C12:0030.0003: collection stack underflow [ 214.568212][ T10] zeroplus 0003:0C12:0030.0003: item 0 0 0 12 parsing failed [ 214.570871][ T10] zeroplus 0003:0C12:0030.0003: parse failed [ 214.570948][ T10] zeroplus 0003:0C12:0030.0003: probe with driver zeroplus failed with error -22 [ 214.928096][ T6483] tc_dump_action: action bad kind [ 214.969126][ T5984] usb 2-1: USB disconnect, device number 5 [ 215.586330][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.734938][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 215.742413][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.742487][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.742516][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.742538][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 215.742561][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.747165][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 215.747198][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 215.747285][ T10] usb 3-1: Manufacturer: syz [ 215.868542][ T10] usb 3-1: config 0 descriptor?? [ 215.905009][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 217.978346][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.984018][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 218.018477][ T9] usb 5-1: config 7 has an invalid interface number: 17 but max is 0 [ 218.018510][ T9] usb 5-1: config 7 has no interface number 0 [ 218.018559][ T9] usb 5-1: config 7 interface 17 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 218.018583][ T9] usb 5-1: config 7 interface 17 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 218.018620][ T9] usb 5-1: config 7 interface 17 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 218.018643][ T9] usb 5-1: config 7 interface 17 altsetting 2 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 218.018672][ T9] usb 5-1: config 7 interface 17 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 218.018699][ T9] usb 5-1: config 7 interface 17 has no altsetting 0 [ 218.143176][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=000f, bcdDevice=4d.fa [ 218.143211][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.143233][ T9] usb 5-1: Product: syz [ 218.143250][ T9] usb 5-1: Manufacturer: syz [ 218.143265][ T9] usb 5-1: SerialNumber: syz [ 218.551021][ T10] rc_core: IR keymap rc-hauppauge not found [ 218.551044][ T10] Registered IR keymap rc-empty [ 218.587658][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 218.607922][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 219.688742][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 219.692335][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 221.839120][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.839266][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.839505][ T6290] bridge_slave_0: entered allmulticast mode [ 221.865702][ T6290] bridge_slave_0: entered promiscuous mode [ 221.889013][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.889145][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.889415][ T6290] bridge_slave_1: entered allmulticast mode [ 221.937297][ T6290] bridge_slave_1: entered promiscuous mode [ 222.190408][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.215179][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.235186][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.265559][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.295211][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.315760][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.334924][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.359685][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.374852][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.396781][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.545815][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 222.545845][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 222.849288][ T10] usb 3-1: USB disconnect, device number 6 [ 222.874941][ T9] usb-storage 5-1:7.17: USB Mass Storage device detected [ 223.099963][ T6290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.210710][ T9] usb-storage 5-1:7.17: Quirks match for vid 04e6 pid 000f: 4 [ 223.244185][ T6290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.645205][ T9] usb 5-1: USB disconnect, device number 4 [ 224.205556][ T5920] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 224.240979][ T6290] team0: Port device team_slave_0 added [ 226.272572][ T5920] usb 2-1: device descriptor read/64, error -71 [ 226.664884][ T5920] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 226.697581][ T6573] binder: 6572:6573 ioctl c0306201 0 returned -14 [ 226.804983][ T5920] usb 2-1: device descriptor read/64, error -71 [ 226.807326][ T1133] bridge_slave_1: left allmulticast mode [ 226.807533][ T1133] bridge_slave_1: left promiscuous mode [ 226.850855][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.915221][ T5920] usb usb2-port1: attempt power cycle [ 227.097095][ T5985] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 227.198272][ T1133] bridge_slave_0: left allmulticast mode [ 227.198311][ T1133] bridge_slave_0: left promiscuous mode [ 227.198597][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.229617][ T5985] usb 3-1: device descriptor read/64, error -71 [ 227.304921][ T5920] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 227.361690][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 227.361726][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 227.361774][ T5920] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 227.361799][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.477222][ T5985] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 227.498695][ T5920] usb 2-1: config 0 descriptor?? [ 227.634848][ T5985] usb 3-1: device descriptor read/64, error -71 [ 227.746414][ T5985] usb usb3-port1: attempt power cycle [ 229.777119][ T5920] ath6kl: Failed to submit usb control message: -110 [ 229.777179][ T5920] ath6kl: unable to send the bmi data to the device: -110 [ 229.777196][ T5920] ath6kl: Unable to send get target info: -110 [ 229.809274][ T5920] ath6kl: Failed to init ath6kl core: -110 [ 229.811034][ T5920] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 229.824827][ T5985] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 229.874769][ T5737] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 230.035936][ T5985] usb 3-1: device descriptor read/8, error -71 [ 230.126343][ T5737] usb 5-1: Using ep0 maxpacket: 32 [ 230.128461][ T5737] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 230.128489][ T5737] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 230.128513][ T5737] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 230.128567][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.128591][ T5737] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 230.128617][ T5737] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 230.128662][ T5737] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 230.128686][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.250782][ T5737] usb 5-1: config 0 descriptor?? [ 232.067375][ T5737] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 232.147048][ T5737] usb 5-1: USB disconnect, device number 5 [ 232.169272][ T6589] cgroup: none used incorrectly [ 232.540872][ T5737] usblp0: removed [ 233.230870][ T4921] Bluetooth: hci0: command 0x0406 tx timeout [ 233.647041][ T4921] Bluetooth: hci3: command 0x0406 tx timeout [ 233.647061][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 233.883110][ T6606] netlink: 44 bytes leftover after parsing attributes in process `syz.0.229'. [ 233.883138][ T6606] netlink: 43 bytes leftover after parsing attributes in process `syz.0.229'. [ 233.883156][ T6606] netlink: 'syz.0.229': attribute type 6 has an invalid length. [ 233.883170][ T6606] netlink: 'syz.0.229': attribute type 5 has an invalid length. [ 233.883184][ T6606] netlink: 43 bytes leftover after parsing attributes in process `syz.0.229'. [ 233.946033][ T6606] misc userio: Invalid payload size [ 234.265460][ T6606] misc userio: No port type given on /dev/userio [ 234.777657][ T6611] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 234.777678][ T6611] CIFS mount error: No usable UNC path provided in device string! [ 234.777678][ T6611] [ 234.777849][ T6611] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 234.915628][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.029374][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.093226][ T1133] bond0 (unregistering): Released all slaves [ 237.177162][ T6290] team0: Port device team_slave_1 added [ 237.183135][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 237.352592][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.352613][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.352643][ T6290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.416770][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.416789][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.416826][ T6290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.632740][ T6290] hsr_slave_0: entered promiscuous mode [ 237.633938][ T6290] hsr_slave_1: entered promiscuous mode [ 237.654618][ T6290] debugfs: 'hsr0' already exists in 'hsr' [ 237.654647][ T6290] Cannot create hsr debugfs directory [ 237.800572][ T9] usb 2-1: USB disconnect, device number 8 [ 238.549895][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 238.714929][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 238.717674][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 238.717703][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 238.717726][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 238.717803][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.717828][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.717854][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 238.717899][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 238.717924][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.843459][ T6634] FAULT_INJECTION: forcing a failure. [ 238.843459][ T6634] name failslab, interval 1, probability 0, space 0, times 1 [ 238.843490][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 238.843510][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.843520][ T6634] Call Trace: [ 238.843527][ T6634] [ 238.843534][ T6634] dump_stack_lvl+0xe8/0x150 [ 238.843561][ T6634] should_fail_ex+0x46b/0x600 [ 238.843597][ T6634] should_failslab+0xa8/0x100 [ 238.843620][ T6634] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 238.843640][ T6634] ? __alloc_skb+0x1d0/0x7d0 [ 238.843660][ T6634] ? lockdep_hardirqs_on+0x7a/0x110 [ 238.843690][ T6634] __alloc_skb+0x1d0/0x7d0 [ 238.843716][ T6634] netlink_sendmsg+0x5d4/0xb40 [ 238.843747][ T6634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.843772][ T6634] ? unwind_get_return_address+0x4d/0x90 [ 238.843803][ T6634] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 238.843827][ T6634] ____sys_sendmsg+0x94c/0x9c0 [ 238.843858][ T6634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.843892][ T6634] ? import_iovec+0x73/0xa0 [ 238.843918][ T6634] ___sys_sendmsg+0x2a5/0x360 [ 238.843942][ T6634] ? __lock_acquire+0x6b5/0x2cf0 [ 238.843973][ T6634] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.844032][ T6634] ? __fget_files+0x2a/0x420 [ 238.844047][ T6634] ? __fget_files+0x3a6/0x420 [ 238.844071][ T6634] __x64_sys_sendmsg+0x1c3/0x2a0 [ 238.844098][ T6634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.844137][ T6634] ? __pfx_ksys_write+0x10/0x10 [ 238.844166][ T6634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.844188][ T6634] do_syscall_64+0x15f/0xf80 [ 238.844215][ T6634] ? trace_irq_disable+0x3b/0x140 [ 238.844238][ T6634] ? clear_bhb_loop+0x40/0x90 [ 238.844262][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.844281][ T6634] RIP: 0033:0x7fce49e6ce59 [ 238.844299][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.844316][ T6634] RSP: 002b:00007fce480c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.844336][ T6634] RAX: ffffffffffffffda RBX: 00007fce4a0e5fa0 RCX: 00007fce49e6ce59 [ 238.844349][ T6634] RDX: 0000000004040080 RSI: 0000200000000340 RDI: 0000000000000003 [ 238.844360][ T6634] RBP: 00007fce480c6090 R08: 0000000000000000 R09: 0000000000000000 [ 238.844370][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.844379][ T6634] R13: 00007fce4a0e6038 R14: 00007fce4a0e5fa0 R15: 00007ffd1109fdb8 [ 238.844406][ T6634] [ 239.063349][ T9] usb 2-1: config 0 descriptor?? [ 239.506329][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 240.768103][ C0] usblp0: nonzero read bulk status received: -71 [ 240.771744][ T6642] usblp0: error -71 reading from printer [ 240.791614][ C1] usblp0: nonzero read bulk status received: -71 [ 240.797002][ T5921] usb 2-1: USB disconnect, device number 9 [ 240.961157][ T5921] usblp0: removed [ 241.207113][ T5984] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 243.229933][ T5984] usb 1-1: device descriptor read/64, error -71 [ 243.475286][ T5984] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 243.694961][ T5984] usb 1-1: device descriptor read/64, error -71 [ 243.805450][ T5984] usb usb1-port1: attempt power cycle [ 243.936759][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 243.939573][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 246.723903][ T6290] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.757179][ T6703] netlink: 'syz.4.249': attribute type 1 has an invalid length. [ 246.955403][ T6290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.628350][ T6703] bond1: entered promiscuous mode [ 248.628546][ T6703] bond1: entered allmulticast mode [ 248.631390][ T6703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.624442][ T6290] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 250.692046][ T6290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 250.739577][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 250.742253][ T6290] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 250.988796][ T37] kauditd_printk_skb: 39 callbacks suppressed [ 250.988810][ T37] audit: type=1326 audit(1779022206.397:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.2.255" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce49e6ce59 code=0x7ffc0000 [ 250.988846][ T37] audit: type=1326 audit(1779022206.407:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.2.255" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce49e6ce59 code=0x7ffc0000 [ 250.988879][ T37] audit: type=1326 audit(1779022206.407:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.2.255" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce49e6ce59 code=0x7ffc0000 [ 250.991047][ T37] audit: type=1326 audit(1779022206.407:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.2.255" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce49e6ce59 code=0x7ffc0000 [ 250.991085][ T37] audit: type=1326 audit(1779022206.407:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.2.255" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fce49e6ce59 code=0x7ffc0000 [ 250.991117][ T37] audit: type=1326 audit(1779022206.407:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.2.255" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce49e6ce59 code=0x7ffc0000 [ 252.222527][ T37] audit: type=1326 audit(1779022206.407:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.2.255" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce49e6ce59 code=0x7ffc0000 [ 252.222684][ T37] audit: type=1326 audit(1779022207.637:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.2.255" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce49e6ce59 code=0x7ffc0000 [ 252.262056][ T6290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.274563][ T37] audit: type=1326 audit(1779022207.687:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.2.255" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce49e6ce59 code=0x7ffc0000 [ 252.274930][ T37] audit: type=1326 audit(1779022207.687:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.2.255" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fce49e6cbc2 code=0x7ffc0000 [ 252.727619][ T1133] hsr_slave_0: left promiscuous mode [ 253.045259][ T6738] faux_driver vkms: [drm] Unknown color mode 32769; guessing buffer size. [ 253.084349][ T1133] hsr_slave_1: left promiscuous mode [ 253.106581][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.106688][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.161775][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.161807][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.371545][ T1133] veth1_macvtap: left promiscuous mode [ 253.371864][ T1133] veth0_macvtap: left promiscuous mode [ 253.372165][ T1133] veth1_vlan: left promiscuous mode [ 253.374067][ T1133] veth0_vlan: left promiscuous mode [ 253.453385][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.519793][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.523421][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.535074][ T5921] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 253.542621][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.565205][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.684814][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 253.760158][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.780167][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.020581][ T5921] usb 2-1: unable to get BOS descriptor or descriptor too short [ 254.021908][ T5921] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 254.021946][ T5921] usb 2-1: can't read configurations, error -71 [ 255.474815][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 257.090251][ T5619] Bluetooth: hci2: command tx timeout [ 257.791267][ T6785] FAULT_INJECTION: forcing a failure. [ 257.791267][ T6785] name failslab, interval 1, probability 0, space 0, times 0 [ 257.791307][ T6785] CPU: 1 UID: 0 PID: 6785 Comm: syz.2.272 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 257.791335][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.791367][ T6785] Call Trace: [ 257.791377][ T6785] [ 257.791387][ T6785] dump_stack_lvl+0xe8/0x150 [ 257.791424][ T6785] should_fail_ex+0x46b/0x600 [ 257.791473][ T6785] should_failslab+0xa8/0x100 [ 257.791504][ T6785] __kmalloc_noprof+0xdf/0x7b0 [ 257.791531][ T6785] ? kfree+0x4d/0x6c0 [ 257.791554][ T6785] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 257.791586][ T6785] tomoyo_realpath_from_path+0xe3/0x5d0 [ 257.791615][ T6785] ? tomoyo_domain+0xd7/0x130 [ 257.791646][ T6785] ? tomoyo_path_number_perm+0x219/0x630 [ 257.791682][ T6785] tomoyo_path_number_perm+0x246/0x630 [ 257.791721][ T6785] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 257.791754][ T6785] ? __lock_acquire+0x6b5/0x2cf0 [ 257.791792][ T6785] ? do_raw_spin_lock+0x12b/0x2f0 [ 257.791860][ T6785] ? __fget_files+0x2a/0x420 [ 257.791886][ T6785] ? __fget_files+0x2a/0x420 [ 257.791913][ T6785] ? __fget_files+0x3a6/0x420 [ 257.791934][ T6785] ? __fget_files+0x2a/0x420 [ 257.791969][ T6785] security_file_ioctl+0xc3/0x2a0 [ 257.792009][ T6785] __se_sys_ioctl+0x47/0x170 [ 257.792040][ T6785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.792068][ T6785] do_syscall_64+0x15f/0xf80 [ 257.792109][ T6785] ? trace_irq_disable+0x3b/0x140 [ 257.792140][ T6785] ? clear_bhb_loop+0x40/0x90 [ 257.792172][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.792198][ T6785] RIP: 0033:0x7fce49e6ce59 [ 257.792221][ T6785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.792242][ T6785] RSP: 002b:00007fce480c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.792269][ T6785] RAX: ffffffffffffffda RBX: 00007fce4a0e5fa0 RCX: 00007fce49e6ce59 [ 257.792288][ T6785] RDX: 0000200000000a00 RSI: 0000000000004b48 RDI: 0000000000000003 [ 257.792305][ T6785] RBP: 00007fce480c6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.792320][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.792335][ T6785] R13: 00007fce4a0e6038 R14: 00007fce4a0e5fa0 R15: 00007ffd1109fdb8 [ 257.792382][ T6785] [ 257.805775][ T6785] ERROR: Out of memory at tomoyo_realpath_from_path. [ 258.490248][ T6794] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 260.002489][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 260.167050][ T5619] Bluetooth: hci2: command tx timeout [ 261.988729][ T1133] team0 (unregistering): Port device team_slave_0 removed [ 262.303181][ T5619] Bluetooth: hci2: command tx timeout [ 262.350400][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.350478][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.972881][ T6816] cgroup: Invalid name [ 263.336676][ T6290] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.535735][ T6290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.537701][ T6794] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 263.566758][ T6796] IPv6: syztnl0: Disabled Multicast RS [ 265.992280][ T5619] Bluetooth: hci2: command tx timeout [ 267.902154][ T6839] ------------[ cut here ]------------ [ 267.902170][ T6839] debug_locks && !(!get_current()->pi_blocked_on) [ 267.902188][ T6839] WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400, CPU#0: syz.0.285/6839 [ 267.902233][ T6839] Modules linked in: [ 267.902258][ T6839] CPU: 0 UID: 0 PID: 6839 Comm: syz.0.285 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 267.902308][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.902329][ T6839] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 267.902355][ T6839] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 70 01 00 cc e8 1a c1 13 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 fe c0 13 f6 [ 267.902375][ T6839] RSP: 0018:ffffc90005e3f5a0 EFLAGS: 00010282 [ 267.902395][ T6839] RAX: 1ffff11005d84167 RBX: 1ffff92000bc7eb8 RCX: 0000000000000046 [ 267.902454][ T6839] RDX: 0000000000000000 RSI: ffffffff8d86520c RDI: ffffffff8ba751e0 [ 267.902471][ T6839] RBP: ffffc90005e3f660 R08: ffffffff8220faf4 R09: ffff88801a02a758 [ 267.902489][ T6839] R10: dffffc0000000000 R11: fffffbfff1f11fbf R12: ffff88802ec20b38 [ 267.902507][ T6839] R13: dffffc0000000000 R14: ffff88801a02a700 R15: ffffc90005e3f5e0 [ 267.902526][ T6839] FS: 00007fb82ad566c0(0000) GS:ffff888126173000(0000) knlGS:0000000000000000 [ 267.902547][ T6839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.902564][ T6839] CR2: 00007fce4a0e2000 CR3: 0000000037014000 CR4: 00000000003526f0 [ 267.902585][ T6839] Call Trace: [ 267.902593][ T6839] [ 267.902608][ T6839] ? __pfx_rt_spin_lock+0x10/0x10 [ 267.902635][ T6839] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 267.902668][ T6839] ? lockdep_hardirqs_on+0x7a/0x110 [ 267.902697][ T6839] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 267.902733][ T6839] ? fill_pool+0x156/0x580 [ 267.902754][ T6839] get_from_partial_node+0x54/0x480 [ 267.902795][ T6839] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 267.902831][ T6839] ? fill_pool+0x156/0x580 [ 267.902852][ T6839] ___slab_alloc+0xb2/0x670 [ 267.902900][ T6839] kmem_cache_alloc_noprof+0xea/0x680 [ 267.902927][ T6839] ? fill_pool+0x156/0x580 [ 267.902954][ T6839] fill_pool+0x156/0x580 [ 267.902984][ T6839] ? __pfx_fill_pool+0x10/0x10 [ 267.903014][ T6839] ? debug_objects_fill_pool+0x6f/0xd0 [ 267.903050][ T6839] ? debug_objects_fill_pool+0x6f/0xd0 [ 267.903090][ T6839] debug_objects_fill_pool+0x97/0xd0 [ 267.903125][ T6839] debug_object_assert_init+0x34/0x340 [ 267.903203][ T6839] hrtimer_start_range_ns+0x3f/0xef0 [ 267.903241][ T6839] ? preempt_schedule_thunk+0x16/0x30 [ 267.903280][ T6839] ? preempt_schedule_common+0x82/0xd0 [ 267.903319][ T6839] futex_lock_pi+0x8df/0xb10 [ 267.903358][ T6839] ? __pfx_futex_lock_pi+0x10/0x10 [ 267.903387][ T6839] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 267.903420][ T6839] ? __lock_acquire+0x6b5/0x2cf0 [ 267.903477][ T6839] ? __pfx_futex_wake_mark+0x10/0x10 [ 267.903531][ T6839] do_futex+0x292/0x420 [ 267.903573][ T6839] ? __pfx_do_futex+0x10/0x10 [ 267.903618][ T6839] __se_sys_futex+0x3a8/0x450 [ 267.903662][ T6839] ? __pfx___se_sys_futex+0x10/0x10 [ 267.903698][ T6839] ? __task_pid_nr_ns+0x28/0x470 [ 267.903736][ T6839] ? __x64_sys_futex+0x21/0xf0 [ 267.903772][ T6839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.903799][ T6839] do_syscall_64+0x15f/0xf80 [ 267.903831][ T6839] ? clear_bhb_loop+0x40/0x90 [ 267.903861][ T6839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.903885][ T6839] RIP: 0033:0x7fb82cafce59 [ 267.903907][ T6839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.903926][ T6839] RSP: 002b:00007fb82ad56028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 267.903951][ T6839] RAX: ffffffffffffffda RBX: 00007fb82cd75fa0 RCX: 00007fb82cafce59 [ 267.903969][ T6839] RDX: 00000000000000f2 RSI: 0000000000000006 RDI: 0000200000000200 [ 267.903984][ T6839] RBP: 00007fb82cb92d6f R08: 0000000000000000 R09: 0000000000000001 [ 267.903999][ T6839] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 267.904013][ T6839] R13: 00007fb82cd76038 R14: 00007fb82cd75fa0 R15: 00007ffdb9627908 [ 267.904052][ T6839] [ 267.904064][ T6839] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 267.904081][ T6839] CPU: 0 UID: 0 PID: 6839 Comm: syz.0.285 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 267.904107][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.904121][ T6839] Call Trace: [ 267.904130][ T6839] [ 267.904140][ T6839] vpanic+0x56c/0xa60 [ 267.904170][ T6839] ? __pfx__printk+0x10/0x10 [ 267.904205][ T6839] ? __pfx_vpanic+0x10/0x10 [ 267.904231][ T6839] ? is_bpf_text_address+0x292/0x2b0 [ 267.904263][ T6839] ? is_bpf_text_address+0x26/0x2b0 [ 267.904303][ T6839] panic+0xc5/0xd0 [ 267.904331][ T6839] ? __pfx_panic+0x10/0x10 [ 267.904382][ T6839] __warn+0x315/0x4c0 [ 267.904416][ T6839] ? rt_spin_lock+0x31c/0x400 [ 267.904443][ T6839] ? rt_spin_lock+0x31c/0x400 [ 267.904469][ T6839] __report_bug+0x29a/0x540 [ 267.904508][ T6839] ? rt_spin_lock+0x31c/0x400 [ 267.904534][ T6839] ? __pfx___report_bug+0x10/0x10 [ 267.904564][ T6839] ? __lock_acquire+0x6b5/0x2cf0 [ 267.904607][ T6839] ? lockdep_hardirqs_on+0x7a/0x110 [ 267.904638][ T6839] ? rt_spin_lock+0x31c/0x400 [ 267.904665][ T6839] report_bug+0x16a/0x220 [ 267.904694][ T6839] ? rt_spin_lock+0x31c/0x400 [ 267.904716][ T6839] ? rt_spin_lock+0x31e/0x400 [ 267.904737][ T6839] handle_bug+0x9c/0x200 [ 267.904772][ T6839] exc_invalid_op+0x1a/0x50 [ 267.904806][ T6839] asm_exc_invalid_op+0x1a/0x20 [ 267.904827][ T6839] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 267.904851][ T6839] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 70 01 00 cc e8 1a c1 13 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 fe c0 13 f6 [ 267.904870][ T6839] RSP: 0018:ffffc90005e3f5a0 EFLAGS: 00010282 [ 267.904890][ T6839] RAX: 1ffff11005d84167 RBX: 1ffff92000bc7eb8 RCX: 0000000000000046 [ 267.904908][ T6839] RDX: 0000000000000000 RSI: ffffffff8d86520c RDI: ffffffff8ba751e0 [ 267.904924][ T6839] RBP: ffffc90005e3f660 R08: ffffffff8220faf4 R09: ffff88801a02a758 [ 267.904942][ T6839] R10: dffffc0000000000 R11: fffffbfff1f11fbf R12: ffff88802ec20b38 [ 267.904959][ T6839] R13: dffffc0000000000 R14: ffff88801a02a700 R15: ffffc90005e3f5e0 [ 267.904985][ T6839] ? get_from_partial_node+0x54/0x480 [ 267.905037][ T6839] ? __pfx_rt_spin_lock+0x10/0x10 [ 267.905061][ T6839] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 267.905093][ T6839] ? lockdep_hardirqs_on+0x7a/0x110 [ 267.905122][ T6839] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 267.905158][ T6839] ? fill_pool+0x156/0x580 [ 267.905178][ T6839] get_from_partial_node+0x54/0x480 [ 267.905217][ T6839] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 267.905253][ T6839] ? fill_pool+0x156/0x580 [ 267.905272][ T6839] ___slab_alloc+0xb2/0x670 [ 267.905320][ T6839] kmem_cache_alloc_noprof+0xea/0x680 [ 267.905346][ T6839] ? fill_pool+0x156/0x580 [ 267.905373][ T6839] fill_pool+0x156/0x580 [ 267.905402][ T6839] ? __pfx_fill_pool+0x10/0x10 [ 267.905440][ T6839] ? debug_objects_fill_pool+0x6f/0xd0 [ 267.905475][ T6839] ? debug_objects_fill_pool+0x6f/0xd0 [ 267.905515][ T6839] debug_objects_fill_pool+0x97/0xd0 [ 267.905552][ T6839] debug_object_assert_init+0x34/0x340 [ 267.905597][ T6839] hrtimer_start_range_ns+0x3f/0xef0 [ 267.905633][ T6839] ? preempt_schedule_thunk+0x16/0x30 [ 267.905678][ T6839] ? preempt_schedule_common+0x82/0xd0 [ 267.905718][ T6839] futex_lock_pi+0x8df/0xb10 [ 267.905757][ T6839] ? __pfx_futex_lock_pi+0x10/0x10 [ 267.905786][ T6839] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 267.905810][ T6839] ? __lock_acquire+0x6b5/0x2cf0 [ 267.905863][ T6839] ? __pfx_futex_wake_mark+0x10/0x10 [ 267.905917][ T6839] do_futex+0x292/0x420 [ 267.905960][ T6839] ? __pfx_do_futex+0x10/0x10 [ 267.906007][ T6839] __se_sys_futex+0x3a8/0x450 [ 267.906052][ T6839] ? __pfx___se_sys_futex+0x10/0x10 [ 267.906089][ T6839] ? __task_pid_nr_ns+0x28/0x470 [ 267.906128][ T6839] ? __x64_sys_futex+0x21/0xf0 [ 267.906164][ T6839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.906189][ T6839] do_syscall_64+0x15f/0xf80 [ 267.906221][ T6839] ? clear_bhb_loop+0x40/0x90 [ 267.906251][ T6839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.906274][ T6839] RIP: 0033:0x7fb82cafce59 [ 267.906293][ T6839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.906309][ T6839] RSP: 002b:00007fb82ad56028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 267.906328][ T6839] RAX: ffffffffffffffda RBX: 00007fb82cd75fa0 RCX: 00007fb82cafce59 [ 267.906341][ T6839] RDX: 00000000000000f2 RSI: 0000000000000006 RDI: 0000200000000200 [ 267.906353][ T6839] RBP: 00007fb82cb92d6f R08: 0000000000000000 R09: 0000000000000001 [ 267.906364][ T6839] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 267.906376][ T6839] R13: 00007fb82cd76038 R14: 00007fb82cd75fa0 R15: 00007ffdb9627908 [ 267.906405][ T6839] [ 267.908629][ T6839] Kernel Offset: disabled