last executing test programs: 6m47.963854822s ago: executing program 4 (id=36): rseq(&(0x7f0000000000), 0x20, 0x2000000000000000, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xffffff6e, 0x4000000000001, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = semget$private(0x0, 0x4, 0x130) semtimedop(r1, &(0x7f0000000140)=[{0x3, 0xff, 0x800}, {0x7, 0x0, 0x2800}, {0x0, 0x3, 0x1000}, {0x4, 0x46, 0x1800}, {0x4, 0x2, 0x800}, {0x1, 0xfeff, 0x1800}, {0x4, 0x5, 0x1800}, {0x3, 0x8, 0x1000}, {0x2, 0x1000, 0x1000}, {0x3, 0x0, 0x800}], 0xa, 0x0) futex_waitv(&(0x7f0000002040)=[{0x2, &(0x7f00000001c0)=0x3, 0x2}, {0x2, &(0x7f0000000200)=0x53d, 0x82}, {0x0, &(0x7f0000000240)=0xfffffffffffffffc, 0x82}, {0x7b1bef23, &(0x7f0000000280)=0x8, 0x80}, {0x80000001, &(0x7f0000000300)=0x5, 0x2}, {0x1d4, &(0x7f0000000340)=0x4, 0x2}, {0x80000000, &(0x7f00000003c0)=0x4, 0x82}, {0x3, &(0x7f0000000400)=0x7, 0x82}, {0x3, &(0x7f0000000440)=0xf, 0x2}, {0x570c5f99, &(0x7f0000000480)=0x7, 0x82}, {0x4, &(0x7f00000004c0)=0x7, 0x82}, {0x400a, &(0x7f0000000500)=0x2, 0x2}, {0x8, &(0x7f0000000540)=0x4, 0x2}, {0xf1, &(0x7f0000000580)=0x1, 0x82}, {0x4, &(0x7f00000005c0)=0x8, 0x2}, {0x100, &(0x7f0000000600)=0xcb48, 0x2}, {0x4, &(0x7f0000000640)=0xf8, 0x82}, {0x100, &(0x7f0000000680)=0x305b592e, 0x2}, {0x80, &(0x7f00000006c0)=0x9c, 0x82}, {0xb2, &(0x7f0000000700), 0x2}, {0xfffffffffffffffa, &(0x7f0000000740)=0x10000, 0x82}, {0x3, &(0x7f0000000780)=0x3, 0x82}, {0x11526c52, &(0x7f00000007c0)=0x2, 0x2}, {0xb, &(0x7f0000000800)=0x1, 0x2}, {0x6, &(0x7f0000000840)=0xfffffffffffffff9, 0x2}, {0x9, &(0x7f0000000880)=0xfffffffffffffff5, 0x82}, {0x5, &(0x7f00000008c0)=0xac, 0x2}, {0x4, &(0x7f0000000900)=0x8, 0x82}, {0xacc9, &(0x7f0000000940)=0x6000000000, 0x2}, {0x8, &(0x7f0000000980)=0x4, 0x2}, {0x4, &(0x7f00000009c0)=0xa, 0x2}, {0xef, &(0x7f0000000a00)=0x8, 0x2}, {0x8, &(0x7f0000000a40)=0xd8bf, 0x2}, {0x4, &(0x7f0000000a80), 0x2}, {0x5, &(0x7f0000000ac0)=0x8001, 0x2}, {0x10000, &(0x7f0000000b00)=0xf8}, {0x8c27, &(0x7f0000000b40)=0xfffffffffffffffa}, {0x9, &(0x7f0000000b80)=0x2, 0x2}, {0x9, &(0x7f0000000bc0)=0x4, 0x82}, {0x8, &(0x7f0000000c40)=0xfffffffffffffffc, 0x82}, {0x800, &(0x7f0000000c80)=0x8, 0x2}, {0x3ff, &(0x7f0000000cc0)=0x10, 0x82}, {0x7, 0x0, 0x82}, {0x100, &(0x7f0000000d40)=0x6, 0x82}, {0x13b6, &(0x7f0000000d80)=0x3, 0x2}, {0x9, &(0x7f0000000dc0)=0x1, 0x2}, {0x1, &(0x7f0000000e00)=0x4, 0x82}, {0x8001, &(0x7f0000000ec0)=0x8, 0x2}, {0x0, &(0x7f0000000f00)=0x72fc9bdb, 0x3f1afd704a7535cf}, {0x7, &(0x7f0000000f40)=0x4a}, {0x2, &(0x7f0000000fc0)=0x2, 0x82}, {0x7, 0x0, 0x82}, {0x15c, 0x0, 0x2}, {0x8, &(0x7f0000001080)=0x3, 0x2}, {0x7, &(0x7f00000010c0)=0x4, 0x82}, {0xfffffffffffffff6, &(0x7f0000001100)=0x3, 0x82}, {0x8001, &(0x7f0000001140)=0x81, 0x82}, {0x4800, &(0x7f0000001180), 0x2}, {0x8, 0x0, 0x82}, {0xa, &(0x7f0000001200)=0x200, 0x2}, {0x5, &(0x7f0000001240)=0x3, 0x82}, {0x4eb5800000000, &(0x7f0000001280)=0x1, 0x2}, {0x7, &(0x7f00000012c0)=0x7ff, 0x82}, {0x0, 0x0, 0x82}, {0x9, &(0x7f0000001340)=0x5, 0x82}, {0xe1e, &(0x7f0000001380)=0x7ff, 0x82}, {0x1, &(0x7f00000013c0)=0x1}, {0x8, &(0x7f0000001400)=0x6, 0x82}, {0x9, &(0x7f0000001440)=0x6, 0x82}, {0x2, &(0x7f0000001480)=0x9, 0x2}, {0x6, &(0x7f00000014c0)=0x80000000, 0x80}, {0xfffffffffffffff7, &(0x7f0000001500)=0x9, 0x2}, {0x101, &(0x7f0000001540)=0x24, 0x82}, {0xb, &(0x7f0000001580)=0xb5, 0x2}, {0x1e000000000, &(0x7f00000015c0)=0x1, 0x82}, {0x7, &(0x7f0000001600)=0x78, 0x82}, {0x5, &(0x7f0000001640)=0x8001, 0x2}, {0x4, &(0x7f0000001680)=0xc, 0x82}, {0x7, &(0x7f00000016c0)=0xd1, 0x2}, {0x7d5, &(0x7f0000001700), 0x2}, {0x1, &(0x7f0000001740)=0x8000000000000001, 0x2}, {0xfff, &(0x7f00000017c0)=0x6, 0x2}, {0x5, &(0x7f0000001800)=0xfffffffffffffff8, 0x82}, {0x7f, &(0x7f0000001880)=0x7, 0x2}, {0x3, &(0x7f00000018c0)=0xa, 0x82}, {0xdf, &(0x7f0000001900)=0x6, 0x82}, {0x100, 0x0, 0x82}, {0x7, &(0x7f0000001980)=0x7, 0x2}, {0xff, &(0x7f0000001a00), 0x82}, {0x0, &(0x7f0000001a40)=0xb, 0x2}, {0xbb3, &(0x7f0000001a80)=0x3ff, 0x2}, {0x139, &(0x7f0000001ac0)=0xf292, 0x82}, {0x8, &(0x7f0000001b00)=0x1, 0x2}, {0x9, &(0x7f0000001b40)=0x7, 0x186}, {0x4, &(0x7f0000001b80)=0xfffffffffffffffa, 0x2}, {0x774, &(0x7f0000001c00)=0x100000001, 0x2}, {0xe7e, &(0x7f0000001c40)=0x3, 0x2}, {0xffffffffffffa33f, &(0x7f0000001c80)=0x3, 0x2}, {0x5, &(0x7f0000001cc0), 0x2}, {0x5, &(0x7f0000001d00)=0x7, 0x2}, {0x21eb8000000, &(0x7f0000001d40)=0x9, 0x2}, {0xfffffffffffffffd, &(0x7f0000001d80)=0x100000001, 0x82}, {0x5, &(0x7f0000001dc0)=0x29f1, 0x2}, {0x96, &(0x7f0000001e00), 0x2}, {0x4, &(0x7f0000001e40)=0x8, 0x2}, {0x4, &(0x7f0000001e80)=0xfffffffffffffff9, 0x80}, {0xca07, &(0x7f0000001f00)=0x5, 0x2}, {0x12ba1a4c, &(0x7f0000001f40)=0x1ff, 0x2}, {0x2ec6, &(0x7f0000001f80)=0x3, 0x2}, {0x9, &(0x7f0000001fc0)=0x7, 0x82}], 0x6e, 0x0, &(0x7f0000002b80)={0x0, 0x989680}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x40, 0x6, 0x5, {{0x15, 0x4, 0x0, 0x2a, 0x54, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x1c, 0x8f, 0x3, 0xe, [{@loopback, 0xffffffba}, {@empty, 0xb}, {@empty, 0xc1cc}]}, @timestamp={0x44, 0x18, 0x34, 0x0, 0x7, [0x7, 0x0, 0x3, 0x4, 0x10001]}, @lsrr={0x83, 0xb, 0x73, [@remote, @multicast2]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfffb}]}}}]}, 0x58}}, 0x4000010) 6m46.730861572s ago: executing program 4 (id=40): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x124, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_SET_USERDATA={0xfc, 0xd, 0x1, 0x0, "aae6e62c11c54f742eba8c5b0949b8c01bd4eadd68218a229a1cba68288f4c62158abef9848af3cd04547bacec99c916d73a7263ae5b2ac746570d7bfcfd04eb9c05864b117f7efcead5f259a5c392fea259e82aa46fc92ebd36c7f1d9121e0f331a6b8ad72418ca5c4d9cbe74542390a26c0747c467a4050a87b1bc88d548e8c87645df0f904af2e0b60f94d9952f5d36fc5476f4943afd141cd76f901ca068841fb5c365511f6f9aa2d9f0c82a7487c9186466cc0f6fa68659305c572c622bab82ff0d90d7fdfd279157e5a80936a6ce26c04bed76d1f03c78dd2679f0b599f340183769bbdc4ab8562a47f52eb0de2830f2c77b828066"}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x180}}, 0x4000040) 6m46.093516678s ago: executing program 4 (id=42): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x5, 0x3, "91"}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100), 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003b00)={r3, &(0x7f0000002ac0)="95ecbb0e9a88580b78800dfa21265d52393f23f6ce89f68cf27c7c1eb5f141dfd556cb7757e7be39a026384ce1a295ab42aa22daf9153c88af4c17cd3cb865b08dbb3e3803679a5c145c2bb21b3752047bcb819c65ed90fbeb599a3a9c14369df6014bcf9bd630ddd1d3afde0014f7252db8421b7680e5923a26ad91536c18e335ff21dc3bd4a55bc8869013009ebf71c35331db37e364d72c0a66b71c4eff43a9cd2bdffeab3497e55163f30c0630ffa26ccf826881d91930a2f59f0f3a9c331bc4e84f3802fa1aaeb90562b47b4a62a2f8ec1cb8a3779e7cb736071518b9c42b5d6b5150b1c22ae13a4a315418bc07ffa341927b70ca794ce0097b47a9bdd9501e29467ddf14303c0ecb87f76cb06887a0e2970ac855be7dbadb55fd0c287e9e3324334d2ecc4ecc6000cbb6de06f3fd994d3cc562a77cb5d8e82951d54cfcf7bf4f3bf27f8d484473f915acf84ed35a61178d5ac32ba29904b5586a66c74f65ca562f46f449d971e176bd3b295fce74be6ee4dc234f3cc4b4b46802c51076c6fd6fa80209678ba451667f3e6c063a2cbb04a88bad0f9ba6868872ef66c32ca2556401679de31fb1a399f46b845e038a5defea975c9f52c266d2753ba8d6ec92f85cc886f4913b5fe7c2a70bc87ca8d0954fb477de03fd80fcd0a737e3f47475b261972426ecd18165695fb386ec6cc7a1faffdc0694869ac0a74cfa27ba280bf83480676799d3fc237c0957e70c66948ee1aa24abb8bcdd299fe446065041ad7ae43b53013f3fb43767950f263b99c6f4a5fcb336583feeb0722a8be8d35ac8799993f42bb8ce915e5391ea03ad334b81930adec75f287ebb7ff01bb18ce3bf1570b215b2cea422a7fed67ec7b8008e89c125b83d803b56edff2baf7c0835244035c5cc9a5def62fc00960b98715321e9d769bd3e9116d8bb1ea337a41c93f66bf40710250924f7d138a4aa416b3ef723f2caeff798ce794cdd3608a1225405d62d8bc0c73971257245d28932ce03a5d514d3496b87cb620c78151423acb1a7f1728b881c3acc841010d146f755b8c7a68d997b89fe19dbe71d85adb2ca963af381f8ab109e79d8feb3b3532b275d95db7a9c014080c976f1c38b43f31b272a7ddd19ad1ec56775e28b54609168f33999969ddfcaa0bbf7ea3e7cadc9ea66f63145f6ad76613a7a38e1c64347efd2fd0a0b1503bea505af9bda9a3ba8dcfe5175c710e9f3f89c364a42765ccb1a1484a2ac7a7a6b714c5efdfdfce3a6465733b3bc0e53858b4c9b56b9b60ab67006ce717cfb28731612c74b26526c589569137025cae94b86d689d1d0cb9b867777f50df84ecb3cc7a328ad2aa20b7190d0094d5238be39d109afef09185f686f971373bb09af0f04fe25d9db48979aa99500147d16dcb0f72b1cc88cb7811a5ed86dac99fd3998b7e0520d83ff370923f70e2ca8f4365ea9b0bc74db880a0cb555f329dd18544b6261e0aa73ef5c2918ba55f2a40091927bdfb13899ce54c09bebbd7a3154f7b01c4564468ac3385505dda59b31bac3cb9b22216049f1039a35b207f13121fc41fcfcfa2185dceefe70fbca328a737c9d92a1282ba43181470f718c3320ecbca2afd5c6d62f897dad0cc78e69de007cbaab2584c6920c221e400c4cd9af7045acc579fc0e81459fdd10397f68057127e042a8711add1055198be0eaa67a04924873059209c1ec7c276a378c65bf0e019ae0e94b2783a86ac4711f59ca720b763e7427f7af1bb995679e94d7483987a40cfe67fa2670e7e008edca7ed87e3b556ec6cfe73a6bc45c9ead544361b3aa2242bcafb28ab22d40a2481a1a00f698ecce2c22fc99aae42a2c60ba2b20b59de08ebd88d3257cfc212a2cbd8f69c5ed6c185dddec2a4eadf2007143dc2f05ba71317da0567417d1ba8e0ecd843334ac43c2e577093fe5f7a3cd306fa588e9dc329abbd5faaed4d808165b06d645ce8cb3fd660993ebb7e8259d6f39ee6a4ccd0a810925b8522b8f1be5a046612406beca1d76a20fc3423fd50d85373d91cf5ce6a7e63fb2ded5c48c8fb00e438b7d0830cce6f1444bb518b93218dd56b2b764f78ae5aa50d5801eb7973ceeda39e03a7a72e63fe74823664fb01ca5d215d9c691018b107eb166256f056d6c05534361fbba1ec6b22078dc3f7672003ba4a36786dc4450a0b805074ad415a3613cb07fe6eae6e55cdc2dbd9fd17252676d39b4d1bdd8dc1105b10a4d9ac3732ee62a64ace58de362ae6d1496cbbf2dd20d80a29e63437aa679e2d0c750d9deef762d3e532812cfadda734edbdd851cf92c286b0aec72a1ece5c7ef035922249982a13e2895fb9b7f6e9d300120d0b0f87a465f1f2fdd18422dba0ca8c1882cb320be447e27c76e6c431563e521c246e292dfca8a663f980259b446da0bbf8d286eb3cc9ee3a3e16037bbc3c2fd8a7b40cefefaa5c26e0e1de87c3660c8a3a410769e7306a760ab807f5efdcbc45eca57b9395cf425976a05795545848fbd687e82861e72567b881efff60503803fedd50ac56a423d638fe09031cdf5cb565ca6b5a835b0fae1d75962a4822eb50ca208214ab119c6d3310cdf84978210f0cb1cda79b0f346e5d08c2cbf4772eb2e9abc676dce70ab4c8709d2954e1d84953e065048d51065322ab5123d3e6e75a41d40a3204f8110d8c45a5f08b4f124f8a01df0c51539370e6e3a97c9f21b64144e444e2082cde61ecec0fc6abf5b2edd601abe68b2777d0dc94390daac0d1a04655cb9db2f76fbc71ee28415d0f1f3ee4679173e238c6fdd48d7e85158130a7b6415124be66659b89e8f3510c3d91e0460c10e5ab2f70ccc01fad5d1a2d4cf02910f5d43a9f50fcc19fdab0f7ae26b0bc0ef5e7804796ac7a72d48b92a5209c7faf94ede6cc559962d67f3c48394b38e82785213f537292fa7db95a8eaff0ea8ac0e5e199fbf95a532acda805c196aa3e7dce95bc4230006ba7a2f46d4489eb6c3e1f5a00ab27f566481f3522e4ddf5834eeffc969898f71ffa881aed5c48f84d0e2a9b7cfb155b5d3e2bb19881384190659f022063967f534a1871da7856376600e57a596d212142074eca1178cdfd842346fb2cd675ac9807d2e10018b1b5baf6d9b600615bbf7b4432561a2fce7f9f3db89f82e5888ca74f856d2f0ae7710e873a282490ffe10ca2e9fd754b2362e14e7b751747c62f5370c2d6611e3aacefddb076e79e2d4250e2fb5e27a635cfbb6b1cda1c2d0bc7e395c130ff49ba5b1ed52ce28026ab902ca01e28e93361196ef69ad1a7d50693af66522b787811e2fce51764db9b8a5384d9058cc08b3a3b2b923acd11f461f4025b10bd74b207835fba116464fe9ba6b0c34cf75ca6405063545681413612d07756477f855af8ccd2d3fb36a0ba7ec1f528fd94fa4a01beb2b868ade67ca932c0f35863e483d1f262127a4a23ccd0d990214251f9fb8762f923a870798ddb8e2a14d33331302bb7994a9a23d2378b3e2d252137d2d86205961ffb670716b48e5acc68164cf18a1043a97fcd8793e314d24d4000bc314a6182ed838b7bc811e6c4b61f891f3b9c684736307391e5a9a31b63377edc240c10ae9bb43b9e6f6f09e689f0961ef9567c2576f8dfd17bd97db61bd71e301e789ec2b0591f1b5714802dab2523ba29db176ac02b59381d70808ca2c76e691a5857ff0ddac2945c584a7322261faa1d7b534c1166756c62f13383ed1c185b9b72b382459191ac0bab1629954eefac8d42b00008324d5d96df75b6f6828fb8d093d0f458053a8a134d693fae837c44eb249c8fa89a02a9efc6fc5d8e9b5e357b3e106020b8269c53cd4c813325bfa673e6e3a1188db92ba18331c64949f6280f35bf06794720bc7b2eab28a5300e841bc0bf13c0bb78622c6211bc868e00a775431a75e2bb90312e13465eeacf2a891278a0626857dcf8ace953fe137030f1ed29208b9e216d4a078231aaee4437978dd9c7078851c4acfa1eea4e18d00ac5ed68f5b9ee068bb56a0880cd3b790629178f7725fce87db01b38212307989a7eed9ccc65d6453290fe3cc4014f89387ca3b74835bf74b250b1aea93d6e804dc5dfed36be68fb8292683ad4c9551e0b5205f69198bf2821b8579bd7b637ce38130da6b1a69ae9ea22543a7eec19220af7cac390c60bcce0c60476d232352b54077f16502eba75bc071be3d9577e3c00103d0e8dca71851d25380a8e0fce3a7265e6c44a380799ceff3e720a980dc8cf5110dc089301bff7eb2b3d23c4163a2a4885ca83678c7e91e51b6f330514fa62947967a53ce03cdf6d1207b367a14cb926007561d41ae8d16ac42b1368c146b1712d94c26b25c20394d545af56cc16171ff9937fe702ff58db518879b6b63f1d0c500dbc9f29ab9e2fa87edade1d4c354763790264b9885435c1f20cd74280a7d60b45e3f29659e7183aa1482748ce555c88b465d3f9eb1321cfbb85232e049f472c5c02adb738dcfe6be5e0f090734e19daa4b951e1ce4378dcd7b972db5b7861fe250181d1e411f792e4b721b3778b154012b29e90ce513d2e5efa046854c56172d26271952fd22f084f67c6638697ab92f080d36c133118d04e24134eadd6ffa896d4527a44e755ceb438f12a9d71aff4e1c050a83c3a1b38947cc257928f157d125a3c019f1871bc07bcb1a0732fddc299d7d5e516c9333a5e88f69d60e32d0cf4267a51d41472ee05f15ca2c76eb0a6ec9b4bb2467e7ec3707e5496daaa32d0a8b730927b61854d6344f034c6d6824f6a73af4ac9dccc42eeddb59d37c547b013eb7acc8671012f25f010477382850f2bd17223f3a3feaa6c4c267b8055e3364fcbee25be881d30ba09ae0328da8cb01205e0b432fe46f6fca32c69969c65a951daa63a6f7e5ea0fe0ac11b75ca65feba8ae7c70485102456e5f6aaebf43ecc98586213532f02dbc78c6884a62aa54eb990db7d27b24a59ed18cce47ee89d9224993ffb8dcb88b4a7f46bd186c0e4966a4d6f3c54673b904d90421325853c6385b7cc2d88f24e820ad6b1fdbb9a0e3bcd4104a1bd963465956f3afdb0936cdc5064596b024bf13db85e47210fc6c9f1573c2e1410d352f4e89e0f2572288f8cbf7f9cfbaa31a9abe744848ec123200d641033bf34607ce4707859fa975b5ff9e4a763dc1a26eec3f6568ef2465dd5cd21e7f6639df1453c328ec166f8e4a029c196f7342798893459c3184c92905f76a626deed8e99e995ba60bfdd10252a8a7ca12f9c426296c5d1cab0789eddffdebbb6843e9e953050bdc54d41b34bd5abd2bd2141ae1cbfc17c8e2ec4f0387cf3327c425d3674fece60faaa6d23fd46f1515758145a262e204adda9302298b3424b768b0e3f0698506e2adfb759e8bf09a7ec1f535e5c0a10476f43b9ae3ad55f2624489a7ec6109d7c0f3f06b31d1cd09e3ee62483dc9e73dd5bd2c1855c266d6d23d06c9c2b1c3f61cbacf5080f6f50c5a9a672fb76a2072de9b89c97121d714d1017d935c56a3e28a9ac270dd69042579011d2d7b62c84a13218cd2a652de9d1ca9c7a954d514d4cfcf3efe5735ad9e3ac39da7810df4b2d9f3188d5b99b8cb50d593db2a65c09a2ae69f2f6c560f82de6c95a4f13e74cdaba9576a3a264950e1bebf9691ea585a38757f84de69e03ca36730abf9fc46640de0cc0c4485af17d54d124e59cc72c0da309bf1ae36ebcbf209200e543b5a8c80efdd337a0ad68f7421b9b02911d1ad377474fcc8842051cf1b0ea7c9db7866b2f364581bfe779948fb313d87e8061064e0a3fbded077da78847a", &(0x7f0000003ac0)=@buf="829d483e531686bc67179ac0de6ce367b8c9a3041aa22fe5af6ad2f5e381"}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000001c00)={0x2, 0x5, 0x1000, &(0x7f0000000c00)=""/4096}) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a8010"], 0x34}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r8, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1000}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='j8'], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m44.654716708s ago: executing program 4 (id=45): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003300)=[{0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1}], 0x1, 0x24044894) recvmsg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x94) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x1e, 0x0) syz_usb_connect(0x1, 0x3f, 0x0, 0x0) ioctl$EVIOCRMFF(r5, 0x83c0550b, 0x0) 6m30.657796901s ago: executing program 4 (id=63): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m29.450810682s ago: executing program 4 (id=68): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r3 = syz_io_uring_setup(0xcd9, &(0x7f0000000400)={0x0, 0x2386, 0x10000, 0x0, 0xba}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x4, r3, 0x6, {0x4, 0x8}, 0x5}, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x20, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x47ea, 0x3}}}}}, 0x20}}, 0x4000054) 6m14.032452715s ago: executing program 32 (id=68): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r3 = syz_io_uring_setup(0xcd9, &(0x7f0000000400)={0x0, 0x2386, 0x10000, 0x0, 0xba}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x4, r3, 0x6, {0x4, 0x8}, 0x5}, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x20, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x47ea, 0x3}}}}}, 0x20}}, 0x4000054) 3m53.986716379s ago: executing program 3 (id=322): prlimit64(0x0, 0x7, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000040)="fcbf", 0x2}], 0x1, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, r2]}}], 0x20, 0x4c045}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x4e24, 0x9, @loopback, 0x106}, 0x1c) r8 = fcntl$dupfd(r7, 0x406, r7) write$binfmt_elf64(r8, &(0x7f0000000300)=ANY=[], 0xfffffdcf) 3m52.601669088s ago: executing program 3 (id=324): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) ioprio_get$pid(0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in={{0x2, 0x4e23, @multicast2}}, 0x4, 0x400}, &(0x7f00000001c0)=0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=@getchain={0x2c, 0x11, 0x839, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xffe0}, {0x1, 0x4}, {0x1, 0xfff1}}, [{0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 3m49.857063856s ago: executing program 1 (id=327): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000029c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x5, 0x3, "91"}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100), 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003b00)={r3, &(0x7f0000002ac0)="95ecbb0e9a88580b78800dfa21265d52393f23f6ce89f68cf27c7c1eb5f141dfd556cb7757e7be39a026384ce1a295ab42aa22daf9153c88af4c17cd3cb865b08dbb3e3803679a5c145c2bb21b3752047bcb819c65ed90fbeb599a3a9c14369df6014bcf9bd630ddd1d3afde0014f7252db8421b7680e5923a26ad91536c18e335ff21dc3bd4a55bc8869013009ebf71c35331db37e364d72c0a66b71c4eff43a9cd2bdffeab3497e55163f30c0630ffa26ccf826881d91930a2f59f0f3a9c331bc4e84f3802fa1aaeb90562b47b4a62a2f8ec1cb8a3779e7cb736071518b9c42b5d6b5150b1c22ae13a4a315418bc07ffa341927b70ca794ce0097b47a9bdd9501e29467ddf14303c0ecb87f76cb06887a0e2970ac855be7dbadb55fd0c287e9e3324334d2ecc4ecc6000cbb6de06f3fd994d3cc562a77cb5d8e82951d54cfcf7bf4f3bf27f8d484473f915acf84ed35a61178d5ac32ba29904b5586a66c74f65ca562f46f449d971e176bd3b295fce74be6ee4dc234f3cc4b4b46802c51076c6fd6fa80209678ba451667f3e6c063a2cbb04a88bad0f9ba6868872ef66c32ca2556401679de31fb1a399f46b845e038a5defea975c9f52c266d2753ba8d6ec92f85cc886f4913b5fe7c2a70bc87ca8d0954fb477de03fd80fcd0a737e3f47475b261972426ecd18165695fb386ec6cc7a1faffdc0694869ac0a74cfa27ba280bf83480676799d3fc237c0957e70c66948ee1aa24abb8bcdd299fe446065041ad7ae43b53013f3fb43767950f263b99c6f4a5fcb336583feeb0722a8be8d35ac8799993f42bb8ce915e5391ea03ad334b81930adec75f287ebb7ff01bb18ce3bf1570b215b2cea422a7fed67ec7b8008e89c125b83d803b56edff2baf7c0835244035c5cc9a5def62fc00960b98715321e9d769bd3e9116d8bb1ea337a41c93f66bf40710250924f7d138a4aa416b3ef723f2caeff798ce794cdd3608a1225405d62d8bc0c73971257245d28932ce03a5d514d3496b87cb620c78151423acb1a7f1728b881c3acc841010d146f755b8c7a68d997b89fe19dbe71d85adb2ca963af381f8ab109e79d8feb3b3532b275d95db7a9c014080c976f1c38b43f31b272a7ddd19ad1ec56775e28b54609168f33999969ddfcaa0bbf7ea3e7cadc9ea66f63145f6ad76613a7a38e1c64347efd2fd0a0b1503bea505af9bda9a3ba8dcfe5175c710e9f3f89c364a42765ccb1a1484a2ac7a7a6b714c5efdfdfce3a6465733b3bc0e53858b4c9b56b9b60ab67006ce717cfb28731612c74b26526c589569137025cae94b86d689d1d0cb9b867777f50df84ecb3cc7a328ad2aa20b7190d0094d5238be39d109afef09185f686f971373bb09af0f04fe25d9db48979aa99500147d16dcb0f72b1cc88cb7811a5ed86dac99fd3998b7e0520d83ff370923f70e2ca8f4365ea9b0bc74db880a0cb555f329dd18544b6261e0aa73ef5c2918ba55f2a40091927bdfb13899ce54c09bebbd7a3154f7b01c4564468ac3385505dda59b31bac3cb9b22216049f1039a35b207f13121fc41fcfcfa2185dceefe70fbca328a737c9d92a1282ba43181470f718c3320ecbca2afd5c6d62f897dad0cc78e69de007cbaab2584c6920c221e400c4cd9af7045acc579fc0e81459fdd10397f68057127e042a8711add1055198be0eaa67a04924873059209c1ec7c276a378c65bf0e019ae0e94b2783a86ac4711f59ca720b763e7427f7af1bb995679e94d7483987a40cfe67fa2670e7e008edca7ed87e3b556ec6cfe73a6bc45c9ead544361b3aa2242bcafb28ab22d40a2481a1a00f698ecce2c22fc99aae42a2c60ba2b20b59de08ebd88d3257cfc212a2cbd8f69c5ed6c185dddec2a4eadf2007143dc2f05ba71317da0567417d1ba8e0ecd843334ac43c2e577093fe5f7a3cd306fa588e9dc329abbd5faaed4d808165b06d645ce8cb3fd660993ebb7e8259d6f39ee6a4ccd0a810925b8522b8f1be5a046612406beca1d76a20fc3423fd50d85373d91cf5ce6a7e63fb2ded5c48c8fb00e438b7d0830cce6f1444bb518b93218dd56b2b764f78ae5aa50d5801eb7973ceeda39e03a7a72e63fe74823664fb01ca5d215d9c691018b107eb166256f056d6c05534361fbba1ec6b22078dc3f7672003ba4a36786dc4450a0b805074ad415a3613cb07fe6eae6e55cdc2dbd9fd17252676d39b4d1bdd8dc1105b10a4d9ac3732ee62a64ace58de362ae6d1496cbbf2dd20d80a29e63437aa679e2d0c750d9deef762d3e532812cfadda734edbdd851cf92c286b0aec72a1ece5c7ef035922249982a13e2895fb9b7f6e9d300120d0b0f87a465f1f2fdd18422dba0ca8c1882cb320be447e27c76e6c431563e521c246e292dfca8a663f980259b446da0bbf8d286eb3cc9ee3a3e16037bbc3c2fd8a7b40cefefaa5c26e0e1de87c3660c8a3a410769e7306a760ab807f5efdcbc45eca57b9395cf425976a05795545848fbd687e82861e72567b881efff60503803fedd50ac56a423d638fe09031cdf5cb565ca6b5a835b0fae1d75962a4822eb50ca208214ab119c6d3310cdf84978210f0cb1cda79b0f346e5d08c2cbf4772eb2e9abc676dce70ab4c8709d2954e1d84953e065048d51065322ab5123d3e6e75a41d40a3204f8110d8c45a5f08b4f124f8a01df0c51539370e6e3a97c9f21b64144e444e2082cde61ecec0fc6abf5b2edd601abe68b2777d0dc94390daac0d1a04655cb9db2f76fbc71ee28415d0f1f3ee4679173e238c6fdd48d7e85158130a7b6415124be66659b89e8f3510c3d91e0460c10e5ab2f70ccc01fad5d1a2d4cf02910f5d43a9f50fcc19fdab0f7ae26b0bc0ef5e7804796ac7a72d48b92a5209c7faf94ede6cc559962d67f3c48394b38e82785213f537292fa7db95a8eaff0ea8ac0e5e199fbf95a532acda805c196aa3e7dce95bc4230006ba7a2f46d4489eb6c3e1f5a00ab27f566481f3522e4ddf5834eeffc969898f71ffa881aed5c48f84d0e2a9b7cfb155b5d3e2bb19881384190659f022063967f534a1871da7856376600e57a596d212142074eca1178cdfd842346fb2cd675ac9807d2e10018b1b5baf6d9b600615bbf7b4432561a2fce7f9f3db89f82e5888ca74f856d2f0ae7710e873a282490ffe10ca2e9fd754b2362e14e7b751747c62f5370c2d6611e3aacefddb076e79e2d4250e2fb5e27a635cfbb6b1cda1c2d0bc7e395c130ff49ba5b1ed52ce28026ab902ca01e28e93361196ef69ad1a7d50693af66522b787811e2fce51764db9b8a5384d9058cc08b3a3b2b923acd11f461f4025b10bd74b207835fba116464fe9ba6b0c34cf75ca6405063545681413612d07756477f855af8ccd2d3fb36a0ba7ec1f528fd94fa4a01beb2b868ade67ca932c0f35863e483d1f262127a4a23ccd0d990214251f9fb8762f923a870798ddb8e2a14d33331302bb7994a9a23d2378b3e2d252137d2d86205961ffb670716b48e5acc68164cf18a1043a97fcd8793e314d24d4000bc314a6182ed838b7bc811e6c4b61f891f3b9c684736307391e5a9a31b63377edc240c10ae9bb43b9e6f6f09e689f0961ef9567c2576f8dfd17bd97db61bd71e301e789ec2b0591f1b5714802dab2523ba29db176ac02b59381d70808ca2c76e691a5857ff0ddac2945c584a7322261faa1d7b534c1166756c62f13383ed1c185b9b72b382459191ac0bab1629954eefac8d42b00008324d5d96df75b6f6828fb8d093d0f458053a8a134d693fae837c44eb249c8fa89a02a9efc6fc5d8e9b5e357b3e106020b8269c53cd4c813325bfa673e6e3a1188db92ba18331c64949f6280f35bf06794720bc7b2eab28a5300e841bc0bf13c0bb78622c6211bc868e00a775431a75e2bb90312e13465eeacf2a891278a0626857dcf8ace953fe137030f1ed29208b9e216d4a078231aaee4437978dd9c7078851c4acfa1eea4e18d00ac5ed68f5b9ee068bb56a0880cd3b790629178f7725fce87db01b38212307989a7eed9ccc65d6453290fe3cc4014f89387ca3b74835bf74b250b1aea93d6e804dc5dfed36be68fb8292683ad4c9551e0b5205f69198bf2821b8579bd7b637ce38130da6b1a69ae9ea22543a7eec19220af7cac390c60bcce0c60476d232352b54077f16502eba75bc071be3d9577e3c00103d0e8dca71851d25380a8e0fce3a7265e6c44a380799ceff3e720a980dc8cf5110dc089301bff7eb2b3d23c4163a2a4885ca83678c7e91e51b6f330514fa62947967a53ce03cdf6d1207b367a14cb926007561d41ae8d16ac42b1368c146b1712d94c26b25c20394d545af56cc16171ff9937fe702ff58db518879b6b63f1d0c500dbc9f29ab9e2fa87edade1d4c354763790264b9885435c1f20cd74280a7d60b45e3f29659e7183aa1482748ce555c88b465d3f9eb1321cfbb85232e049f472c5c02adb738dcfe6be5e0f090734e19daa4b951e1ce4378dcd7b972db5b7861fe250181d1e411f792e4b721b3778b154012b29e90ce513d2e5efa046854c56172d26271952fd22f084f67c6638697ab92f080d36c133118d04e24134eadd6ffa896d4527a44e755ceb438f12a9d71aff4e1c050a83c3a1b38947cc257928f157d125a3c019f1871bc07bcb1a0732fddc299d7d5e516c9333a5e88f69d60e32d0cf4267a51d41472ee05f15ca2c76eb0a6ec9b4bb2467e7ec3707e5496daaa32d0a8b730927b61854d6344f034c6d6824f6a73af4ac9dccc42eeddb59d37c547b013eb7acc8671012f25f010477382850f2bd17223f3a3feaa6c4c267b8055e3364fcbee25be881d30ba09ae0328da8cb01205e0b432fe46f6fca32c69969c65a951daa63a6f7e5ea0fe0ac11b75ca65feba8ae7c70485102456e5f6aaebf43ecc98586213532f02dbc78c6884a62aa54eb990db7d27b24a59ed18cce47ee89d9224993ffb8dcb88b4a7f46bd186c0e4966a4d6f3c54673b904d90421325853c6385b7cc2d88f24e820ad6b1fdbb9a0e3bcd4104a1bd963465956f3afdb0936cdc5064596b024bf13db85e47210fc6c9f1573c2e1410d352f4e89e0f2572288f8cbf7f9cfbaa31a9abe744848ec123200d641033bf34607ce4707859fa975b5ff9e4a763dc1a26eec3f6568ef2465dd5cd21e7f6639df1453c328ec166f8e4a029c196f7342798893459c3184c92905f76a626deed8e99e995ba60bfdd10252a8a7ca12f9c426296c5d1cab0789eddffdebbb6843e9e953050bdc54d41b34bd5abd2bd2141ae1cbfc17c8e2ec4f0387cf3327c425d3674fece60faaa6d23fd46f1515758145a262e204adda9302298b3424b768b0e3f0698506e2adfb759e8bf09a7ec1f535e5c0a10476f43b9ae3ad55f2624489a7ec6109d7c0f3f06b31d1cd09e3ee62483dc9e73dd5bd2c1855c266d6d23d06c9c2b1c3f61cbacf5080f6f50c5a9a672fb76a2072de9b89c97121d714d1017d935c56a3e28a9ac270dd69042579011d2d7b62c84a13218cd2a652de9d1ca9c7a954d514d4cfcf3efe5735ad9e3ac39da7810df4b2d9f3188d5b99b8cb50d593db2a65c09a2ae69f2f6c560f82de6c95a4f13e74cdaba9576a3a264950e1bebf9691ea585a38757f84de69e03ca36730abf9fc46640de0cc0c4485af17d54d124e59cc72c0da309bf1ae36ebcbf209200e543b5a8c80efdd337a0ad68f7421b9b02911d1ad377474fcc8842051cf1b0ea7c9db7866b2f364581bfe779948fb313d87e8061064e0a3fbded077da78847a", &(0x7f0000003ac0)=@buf="829d483e531686bc67179ac0de6ce367b8c9a3041aa22fe5af6ad2f5e381"}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000001c00)={0x2, 0x5, 0x1000, &(0x7f0000000c00)=""/4096}) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a8010"], 0x34}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r8, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1000}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='j8'], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m45.942801755s ago: executing program 3 (id=331): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x3, 0x2, 0x1, 0x3, 0x80000}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)="4de9", 0x2}], 0x1, 0x8, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r4, &(0x7f000000b700), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) syz_emit_ethernet(0xa9, &(0x7f00000013c0)=ANY=[], 0x0) io_cancel(0x0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000000d40), 0x0, 0x3, 0x0, 0x1}, &(0x7f0000001340)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r6, &(0x7f0000001140)=[{{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f00000004c0)=""/246, 0xf6}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f00000006c0)=""/164, 0xa4}, {&(0x7f0000000940)=""/224, 0xe0}, {&(0x7f0000000a40)=""/139, 0x8b}, {&(0x7f0000000b00)=""/249, 0xf9}, {&(0x7f0000000c00)=""/141, 0x8d}], 0x8, &(0x7f0000000d40)}, 0x5}, {{&(0x7f0000000d80)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e00)=""/195, 0xc3}, {&(0x7f0000000f00)=""/221, 0xdd}, {&(0x7f0000001000)=""/86, 0x56}], 0x3, &(0x7f00000010c0)=""/91, 0x5b}, 0x9}], 0x2, 0x102, &(0x7f00000011c0)={0x77359400}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff31, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0x0}}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x34, 0x66, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0xd, 0xfff2}, {0xb, 0xfff1}}, [{0x8, 0xb, 0x8000}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000880) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000002500)=""/4102, 0x100000}], 0x10000000000001e1, 0x3000, 0x0, 0x11) readv(r8, &(0x7f0000000d40)=[{&(0x7f0000000780)=""/131, 0x83}, {&(0x7f0000001200)=""/243, 0xf3}, {&(0x7f0000001480)=""/167, 0xa7}], 0x3) 3m45.83605642s ago: executing program 1 (id=332): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}}, 0x0, 0x2a}, 0x28) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) close(r1) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c000200010000001500000014000c80080001000b00000008000300020000000600030001000000160b204174e2cedb441e8d0c58ce76e810c8eb"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@multicast1}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000500)=0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@cache_readahead}, {@cache_none}, {@version_9p2000}, {@uname={'uname', 0x3d, '+#\\-b.@[@'}}]}}) 3m43.981193956s ago: executing program 3 (id=333): r0 = fsopen(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}}, 0x0, 0x2a}, 0x28) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0xd0) close(r1) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c000200010000001500000014000c80080001000b00000008000300020000000600030001000000160b204174e2cedb441e8d0c58ce76e810c8eb"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@multicast1}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000500)=0xe8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@cache_readahead}, {@cache_none}, {@version_9p2000}, {@uname={'uname', 0x3d, '+#\\-b.@[@'}}]}}) 3m43.94549651s ago: executing program 1 (id=334): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c0102030109021200"], 0x0) 3m42.487874275s ago: executing program 3 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = creat(0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0xb2c, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="bdbd279d1d3c10948005d74502e4337532aeb17bd66277f667aca125f193c39e21a1fe1719e3f8cd599c404d2831158e42d4d1fbd29554308121677d75c7c498b2a3647c1defdf3e2a3ba271316aee44fe6db4cfcc76c9765ea1aa23401b8ef7d8865c42abfb499996c8268fcb5cb18eb6bf2a81adfff757f16d6f911575983336ac6fe5005ff58391233ba06796760fe8a2a08b0e50d8f158a13112d581fb160bdc0fab828f54ed0ffc4a441a3fba897ac5d1f1f16150393cfab69616775ebad26fea53d4cff40d7a", @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES64=r0], 0x50) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) 3m40.157442337s ago: executing program 3 (id=336): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}}, 0x0, 0x2a}, 0x28) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) eventfd(0x5f0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) close(r0) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@multicast1}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000500)=0xe8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@cache_readahead}, {@cache_none}, {@version_9p2000}, {@uname={'uname', 0x3d, '+#\\-b.@[@'}}]}}) 3m39.877562214s ago: executing program 1 (id=338): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x76357}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) kcmp(r2, r3, 0x4, 0xffffffffffffffff, r1) 3m38.48204378s ago: executing program 1 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = creat(0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0xb2c, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="bdbd279d1d3c10948005d74502e4337532aeb17bd66277f667aca125f193c39e21a1fe1719e3f8cd599c404d2831158e42d4d1fbd29554308121677d75c7c498b2a3647c1defdf3e2a3ba271316aee44fe6db4cfcc76c9765ea1aa23401b8ef7d8865c42abfb499996c8268fcb5cb18eb6bf2a81adfff757f16d6f911575983336ac6fe5005ff58391233ba06796760fe8a2a08b0e50d8f158a13112d581fb160bdc0fab828f54ed0ffc4a441a3fba897ac5d1f1f16150393cfab69616775ebad26fea53d4cff40d7a", @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES64=r0], 0x50) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000980)=@IORING_OP_SYMLINKAT={0x26, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 3m36.466818999s ago: executing program 1 (id=341): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000029c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x5, 0x3, "91"}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100), 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003b00)={r3, &(0x7f0000002ac0)="95ecbb0e9a88580b78800dfa21265d52393f23f6ce89f68cf27c7c1eb5f141dfd556cb7757e7be39a026384ce1a295ab42aa22daf9153c88af4c17cd3cb865b08dbb3e3803679a5c145c2bb21b3752047bcb819c65ed90fbeb599a3a9c14369df6014bcf9bd630ddd1d3afde0014f7252db8421b7680e5923a26ad91536c18e335ff21dc3bd4a55bc8869013009ebf71c35331db37e364d72c0a66b71c4eff43a9cd2bdffeab3497e55163f30c0630ffa26ccf826881d91930a2f59f0f3a9c331bc4e84f3802fa1aaeb90562b47b4a62a2f8ec1cb8a3779e7cb736071518b9c42b5d6b5150b1c22ae13a4a315418bc07ffa341927b70ca794ce0097b47a9bdd9501e29467ddf14303c0ecb87f76cb06887a0e2970ac855be7dbadb55fd0c287e9e3324334d2ecc4ecc6000cbb6de06f3fd994d3cc562a77cb5d8e82951d54cfcf7bf4f3bf27f8d484473f915acf84ed35a61178d5ac32ba29904b5586a66c74f65ca562f46f449d971e176bd3b295fce74be6ee4dc234f3cc4b4b46802c51076c6fd6fa80209678ba451667f3e6c063a2cbb04a88bad0f9ba6868872ef66c32ca2556401679de31fb1a399f46b845e038a5defea975c9f52c266d2753ba8d6ec92f85cc886f4913b5fe7c2a70bc87ca8d0954fb477de03fd80fcd0a737e3f47475b261972426ecd18165695fb386ec6cc7a1faffdc0694869ac0a74cfa27ba280bf83480676799d3fc237c0957e70c66948ee1aa24abb8bcdd299fe446065041ad7ae43b53013f3fb43767950f263b99c6f4a5fcb336583feeb0722a8be8d35ac8799993f42bb8ce915e5391ea03ad334b81930adec75f287ebb7ff01bb18ce3bf1570b215b2cea422a7fed67ec7b8008e89c125b83d803b56edff2baf7c0835244035c5cc9a5def62fc00960b98715321e9d769bd3e9116d8bb1ea337a41c93f66bf40710250924f7d138a4aa416b3ef723f2caeff798ce794cdd3608a1225405d62d8bc0c73971257245d28932ce03a5d514d3496b87cb620c78151423acb1a7f1728b881c3acc841010d146f755b8c7a68d997b89fe19dbe71d85adb2ca963af381f8ab109e79d8feb3b3532b275d95db7a9c014080c976f1c38b43f31b272a7ddd19ad1ec56775e28b54609168f33999969ddfcaa0bbf7ea3e7cadc9ea66f63145f6ad76613a7a38e1c64347efd2fd0a0b1503bea505af9bda9a3ba8dcfe5175c710e9f3f89c364a42765ccb1a1484a2ac7a7a6b714c5efdfdfce3a6465733b3bc0e53858b4c9b56b9b60ab67006ce717cfb28731612c74b26526c589569137025cae94b86d689d1d0cb9b867777f50df84ecb3cc7a328ad2aa20b7190d0094d5238be39d109afef09185f686f971373bb09af0f04fe25d9db48979aa99500147d16dcb0f72b1cc88cb7811a5ed86dac99fd3998b7e0520d83ff370923f70e2ca8f4365ea9b0bc74db880a0cb555f329dd18544b6261e0aa73ef5c2918ba55f2a40091927bdfb13899ce54c09bebbd7a3154f7b01c4564468ac3385505dda59b31bac3cb9b22216049f1039a35b207f13121fc41fcfcfa2185dceefe70fbca328a737c9d92a1282ba43181470f718c3320ecbca2afd5c6d62f897dad0cc78e69de007cbaab2584c6920c221e400c4cd9af7045acc579fc0e81459fdd10397f68057127e042a8711add1055198be0eaa67a04924873059209c1ec7c276a378c65bf0e019ae0e94b2783a86ac4711f59ca720b763e7427f7af1bb995679e94d7483987a40cfe67fa2670e7e008edca7ed87e3b556ec6cfe73a6bc45c9ead544361b3aa2242bcafb28ab22d40a2481a1a00f698ecce2c22fc99aae42a2c60ba2b20b59de08ebd88d3257cfc212a2cbd8f69c5ed6c185dddec2a4eadf2007143dc2f05ba71317da0567417d1ba8e0ecd843334ac43c2e577093fe5f7a3cd306fa588e9dc329abbd5faaed4d808165b06d645ce8cb3fd660993ebb7e8259d6f39ee6a4ccd0a810925b8522b8f1be5a046612406beca1d76a20fc3423fd50d85373d91cf5ce6a7e63fb2ded5c48c8fb00e438b7d0830cce6f1444bb518b93218dd56b2b764f78ae5aa50d5801eb7973ceeda39e03a7a72e63fe74823664fb01ca5d215d9c691018b107eb166256f056d6c05534361fbba1ec6b22078dc3f7672003ba4a36786dc4450a0b805074ad415a3613cb07fe6eae6e55cdc2dbd9fd17252676d39b4d1bdd8dc1105b10a4d9ac3732ee62a64ace58de362ae6d1496cbbf2dd20d80a29e63437aa679e2d0c750d9deef762d3e532812cfadda734edbdd851cf92c286b0aec72a1ece5c7ef035922249982a13e2895fb9b7f6e9d300120d0b0f87a465f1f2fdd18422dba0ca8c1882cb320be447e27c76e6c431563e521c246e292dfca8a663f980259b446da0bbf8d286eb3cc9ee3a3e16037bbc3c2fd8a7b40cefefaa5c26e0e1de87c3660c8a3a410769e7306a760ab807f5efdcbc45eca57b9395cf425976a05795545848fbd687e82861e72567b881efff60503803fedd50ac56a423d638fe09031cdf5cb565ca6b5a835b0fae1d75962a4822eb50ca208214ab119c6d3310cdf84978210f0cb1cda79b0f346e5d08c2cbf4772eb2e9abc676dce70ab4c8709d2954e1d84953e065048d51065322ab5123d3e6e75a41d40a3204f8110d8c45a5f08b4f124f8a01df0c51539370e6e3a97c9f21b64144e444e2082cde61ecec0fc6abf5b2edd601abe68b2777d0dc94390daac0d1a04655cb9db2f76fbc71ee28415d0f1f3ee4679173e238c6fdd48d7e85158130a7b6415124be66659b89e8f3510c3d91e0460c10e5ab2f70ccc01fad5d1a2d4cf02910f5d43a9f50fcc19fdab0f7ae26b0bc0ef5e7804796ac7a72d48b92a5209c7faf94ede6cc559962d67f3c48394b38e82785213f537292fa7db95a8eaff0ea8ac0e5e199fbf95a532acda805c196aa3e7dce95bc4230006ba7a2f46d4489eb6c3e1f5a00ab27f566481f3522e4ddf5834eeffc969898f71ffa881aed5c48f84d0e2a9b7cfb155b5d3e2bb19881384190659f022063967f534a1871da7856376600e57a596d212142074eca1178cdfd842346fb2cd675ac9807d2e10018b1b5baf6d9b600615bbf7b4432561a2fce7f9f3db89f82e5888ca74f856d2f0ae7710e873a282490ffe10ca2e9fd754b2362e14e7b751747c62f5370c2d6611e3aacefddb076e79e2d4250e2fb5e27a635cfbb6b1cda1c2d0bc7e395c130ff49ba5b1ed52ce28026ab902ca01e28e93361196ef69ad1a7d50693af66522b787811e2fce51764db9b8a5384d9058cc08b3a3b2b923acd11f461f4025b10bd74b207835fba116464fe9ba6b0c34cf75ca6405063545681413612d07756477f855af8ccd2d3fb36a0ba7ec1f528fd94fa4a01beb2b868ade67ca932c0f35863e483d1f262127a4a23ccd0d990214251f9fb8762f923a870798ddb8e2a14d33331302bb7994a9a23d2378b3e2d252137d2d86205961ffb670716b48e5acc68164cf18a1043a97fcd8793e314d24d4000bc314a6182ed838b7bc811e6c4b61f891f3b9c684736307391e5a9a31b63377edc240c10ae9bb43b9e6f6f09e689f0961ef9567c2576f8dfd17bd97db61bd71e301e789ec2b0591f1b5714802dab2523ba29db176ac02b59381d70808ca2c76e691a5857ff0ddac2945c584a7322261faa1d7b534c1166756c62f13383ed1c185b9b72b382459191ac0bab1629954eefac8d42b00008324d5d96df75b6f6828fb8d093d0f458053a8a134d693fae837c44eb249c8fa89a02a9efc6fc5d8e9b5e357b3e106020b8269c53cd4c813325bfa673e6e3a1188db92ba18331c64949f6280f35bf06794720bc7b2eab28a5300e841bc0bf13c0bb78622c6211bc868e00a775431a75e2bb90312e13465eeacf2a891278a0626857dcf8ace953fe137030f1ed29208b9e216d4a078231aaee4437978dd9c7078851c4acfa1eea4e18d00ac5ed68f5b9ee068bb56a0880cd3b790629178f7725fce87db01b38212307989a7eed9ccc65d6453290fe3cc4014f89387ca3b74835bf74b250b1aea93d6e804dc5dfed36be68fb8292683ad4c9551e0b5205f69198bf2821b8579bd7b637ce38130da6b1a69ae9ea22543a7eec19220af7cac390c60bcce0c60476d232352b54077f16502eba75bc071be3d9577e3c00103d0e8dca71851d25380a8e0fce3a7265e6c44a380799ceff3e720a980dc8cf5110dc089301bff7eb2b3d23c4163a2a4885ca83678c7e91e51b6f330514fa62947967a53ce03cdf6d1207b367a14cb926007561d41ae8d16ac42b1368c146b1712d94c26b25c20394d545af56cc16171ff9937fe702ff58db518879b6b63f1d0c500dbc9f29ab9e2fa87edade1d4c354763790264b9885435c1f20cd74280a7d60b45e3f29659e7183aa1482748ce555c88b465d3f9eb1321cfbb85232e049f472c5c02adb738dcfe6be5e0f090734e19daa4b951e1ce4378dcd7b972db5b7861fe250181d1e411f792e4b721b3778b154012b29e90ce513d2e5efa046854c56172d26271952fd22f084f67c6638697ab92f080d36c133118d04e24134eadd6ffa896d4527a44e755ceb438f12a9d71aff4e1c050a83c3a1b38947cc257928f157d125a3c019f1871bc07bcb1a0732fddc299d7d5e516c9333a5e88f69d60e32d0cf4267a51d41472ee05f15ca2c76eb0a6ec9b4bb2467e7ec3707e5496daaa32d0a8b730927b61854d6344f034c6d6824f6a73af4ac9dccc42eeddb59d37c547b013eb7acc8671012f25f010477382850f2bd17223f3a3feaa6c4c267b8055e3364fcbee25be881d30ba09ae0328da8cb01205e0b432fe46f6fca32c69969c65a951daa63a6f7e5ea0fe0ac11b75ca65feba8ae7c70485102456e5f6aaebf43ecc98586213532f02dbc78c6884a62aa54eb990db7d27b24a59ed18cce47ee89d9224993ffb8dcb88b4a7f46bd186c0e4966a4d6f3c54673b904d90421325853c6385b7cc2d88f24e820ad6b1fdbb9a0e3bcd4104a1bd963465956f3afdb0936cdc5064596b024bf13db85e47210fc6c9f1573c2e1410d352f4e89e0f2572288f8cbf7f9cfbaa31a9abe744848ec123200d641033bf34607ce4707859fa975b5ff9e4a763dc1a26eec3f6568ef2465dd5cd21e7f6639df1453c328ec166f8e4a029c196f7342798893459c3184c92905f76a626deed8e99e995ba60bfdd10252a8a7ca12f9c426296c5d1cab0789eddffdebbb6843e9e953050bdc54d41b34bd5abd2bd2141ae1cbfc17c8e2ec4f0387cf3327c425d3674fece60faaa6d23fd46f1515758145a262e204adda9302298b3424b768b0e3f0698506e2adfb759e8bf09a7ec1f535e5c0a10476f43b9ae3ad55f2624489a7ec6109d7c0f3f06b31d1cd09e3ee62483dc9e73dd5bd2c1855c266d6d23d06c9c2b1c3f61cbacf5080f6f50c5a9a672fb76a2072de9b89c97121d714d1017d935c56a3e28a9ac270dd69042579011d2d7b62c84a13218cd2a652de9d1ca9c7a954d514d4cfcf3efe5735ad9e3ac39da7810df4b2d9f3188d5b99b8cb50d593db2a65c09a2ae69f2f6c560f82de6c95a4f13e74cdaba9576a3a264950e1bebf9691ea585a38757f84de69e03ca36730abf9fc46640de0cc0c4485af17d54d124e59cc72c0da309bf1ae36ebcbf209200e543b5a8c80efdd337a0ad68f7421b9b02911d1ad377474fcc8842051cf1b0ea7c9db7866b2f364581bfe779948fb313d87e8061064e0a3fbded077da78847a", &(0x7f0000003ac0)=@buf="829d483e531686bc67179ac0de6ce367b8c9a3041aa22fe5af6ad2f5e381"}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000001c00)={0x2, 0x5, 0x1000, &(0x7f0000000c00)=""/4096}) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a8010"], 0x34}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r8, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1000}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='j8'], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m23.922495105s ago: executing program 33 (id=336): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}}, 0x0, 0x2a}, 0x28) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) eventfd(0x5f0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) close(r0) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@multicast1}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000500)=0xe8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@cache_readahead}, {@cache_none}, {@version_9p2000}, {@uname={'uname', 0x3d, '+#\\-b.@[@'}}]}}) 3m20.671525531s ago: executing program 34 (id=341): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000029c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x5, 0x3, "91"}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100), 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003b00)={r3, &(0x7f0000002ac0)="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", &(0x7f0000003ac0)=@buf="829d483e531686bc67179ac0de6ce367b8c9a3041aa22fe5af6ad2f5e381"}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000001c00)={0x2, 0x5, 0x1000, &(0x7f0000000c00)=""/4096}) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a8010"], 0x34}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r8, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1000}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='j8'], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 32.459215318s ago: executing program 0 (id=498): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x0, 0x4f, 0x8, 0x3, 0x74c, 0x3}) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x89) close(r0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000002c0)={@loopback, @loopback, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0xd, &(0x7f0000000200)={@dev, 0x0}, &(0x7f0000000380)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000003c0)={@remote, 0x0}, &(0x7f0000000400)=0x14) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r8, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005bc0)={&(0x7f0000000480)=@deltfilter={0x5338, 0x2d, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x2, 0x2}, {0x1, 0xe}, {0x1, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xee}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_u32={{0x8}, {0x494, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'caif0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x7d}, @TCA_U32_POLICE={0x46c, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffff00, 0x10000000, 0x2, 0x0, 0x4, {0x6, 0x2, 0xc, 0xaf, 0x1ff}, {0x6, 0x2, 0x8001, 0x8, 0x7a0, 0x2}, 0x1, 0x7, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0xfffffffc, 0xfffffff8, 0xe, 0x3, 0x10001, 0x3, 0x7, 0x4, 0x80000000, 0x7, 0x0, 0xfffff078, 0x4e68734c, 0xffff, 0xfff, 0x5, 0xe, 0x800, 0x5, 0x800, 0x4, 0x6, 0x0, 0xc, 0xc2f9, 0x1ff, 0x73, 0x4, 0x7c10, 0x6, 0x7f, 0x5, 0x2, 0x3a69, 0xfff, 0xc, 0x7, 0x3, 0x7, 0xfffffff8, 0xb71, 0x3, 0xa70, 0xff, 0x9, 0x80000001, 0xbb9, 0x2, 0x2, 0xd31c, 0x4, 0x0, 0xfffffffc, 0x7, 0x5, 0x7f, 0x400, 0x81, 0x3, 0x9, 0x200, 0x3, 0x3, 0x2, 0xd6ca, 0x10001, 0x6, 0x101, 0x2, 0x20000, 0x2, 0x1, 0x800, 0x6, 0x1ff, 0x3ff, 0xffff3056, 0x8, 0x81, 0x8, 0xffffffff, 0xf, 0x7, 0x215, 0x9, 0x5, 0x9, 0x4, 0x1, 0x0, 0x1, 0x0, 0xf00, 0x6, 0x8de8, 0x1, 0x8, 0x2, 0x1ff, 0x1, 0x7fffffff, 0x7b, 0x2, 0x3ff, 0x9, 0x7, 0x3, 0x10000, 0x3, 0x4, 0x10000, 0x7, 0x3, 0x3, 0x1, 0xd, 0x6, 0x4, 0x1bc42b82, 0xfb8, 0x0, 0x9, 0x0, 0x80000000, 0x0, 0x2, 0xb, 0x7, 0x0, 0x10000, 0x7, 0x8a9, 0x7, 0xb, 0xffffffff, 0x8, 0x40000, 0xf6, 0x670, 0x6, 0x9, 0x3, 0x1, 0x7fffffff, 0x1, 0x6, 0x8, 0x5, 0xfff, 0xfff, 0x3, 0x2, 0x401, 0x8001, 0x5, 0xa4, 0x0, 0xd2f, 0x0, 0xf515, 0xffffffff, 0x828, 0x7fff, 0x75, 0x2c, 0x8, 0x8, 0x6, 0x0, 0x13, 0x0, 0x10, 0x40, 0x2, 0x158, 0x1, 0x3, 0x98, 0xfffffffb, 0x8000000, 0x7fffffff, 0xeff, 0x4, 0xaf, 0xea21, 0x4, 0x7bb, 0xa6, 0xfffff801, 0x8, 0x3, 0x62, 0x7, 0x5, 0x9, 0x1, 0x5, 0xdf, 0x24, 0x8, 0x5, 0xaf, 0x6, 0x4891, 0xffff0001, 0x6, 0x8, 0xf, 0x10, 0xe82, 0x9, 0x4, 0x4, 0x9, 0x1000, 0xfffffffe, 0x6, 0x7fffffff, 0xfffffbc0, 0x9cda, 0x10000, 0x0, 0x4, 0x5, 0x5, 0x4, 0x5, 0xee, 0x7fff, 0x3000, 0x0, 0x0, 0x1, 0x9, 0x4, 0x4, 0x8, 0x7f, 0x4, 0x6, 0x7, 0x7fffffff, 0xc6, 0x800, 0xffff, 0xfffff540, 0xfffffc00, 0x5, 0x80, 0x0, 0x9, 0xaf, 0x8000, 0xb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_U32_LINK={0x8, 0x3, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x59}}, @filter_kind_options=@f_route={{0xa}, {0x4e4c, 0x2, [@TCA_ROUTE4_ACT={0x4a4, 0x6, [@m_sample={0xe4, 0x18, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10001}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffff0000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x36}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffffff81}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x8, 0x4, 0x45af, 0x4ac}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xa}]}, {0x5d, 0x6, "7db79dcd7060a9930ec6385c3c7c235c1fe40db45906172cce231da1b73e5133b2035111e19032a338d85fbc5beae9a34b0e6e6ccb8ae2257aec3be8ff0c6561cd63612660fbac788cc08a711cb7cefc80dee390eeace1b781"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xb8, 0x0, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}]}, {0x75, 0x6, "1ad0478d49795763326b48c8d290e5dffce1cb876abdec2a0a9a970936729c58eca02a8d3ba45ef59dccac8177a6ae6e2c8d039d2e86607550522e8fd1effdf7aeb91c93e6acec7330b18ede96dc7c29590f0af6319fbb025c7d7997805795125ee8aaad38219be949f6fdb707a6dbe90c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x15c, 0x7, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6, 0x2, 0x0, 0xfffff000}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x1, 0x2, 0x2}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x945d, 0x20000000, 0x401, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8, 0x10000000, 0x2}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9, 0x0, 0x7fff, 0x8}, 0x1, r9}}]}, {0x90, 0x6, "fe0681de6015f80ee2038e50e41b72ec91716f9ae9a6c966fc519f0a2e212eeb9a6cedce04a549b8b3e02361cd875aa229ee9a7735fd6a1db9c07fabe3909d81826c51ab71e72158d1e4bd6cd22c54a1632ed1f52fdf456ce937d50f0ff640a3079256a2bf8066c6254e54aa99646d5fe112446625215586cdcca5d41b6795a231fc800f16a89f0e03042ec6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x1a8, 0x18, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8, 0x28, 0x10}, @rand_addr=0x64010102, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x6, 0x5, 0x1e, 0x81}, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x10, 0x4, 0x401, 0x9}, @empty, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x0, 0x8, 0x800}, @private=0xa010101, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x0, 0x6, 0x7, 0x8}, @remote, @private=0xa010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff8b10, 0x0, 0x6, 0x5, 0x5}, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, 0xff}}]}, {0x8f, 0x6, "9906f61c7805b8316b3415d89b85cec35fc7f4618a8e5e89e848bc6be9ece8a6de7664a8ad9e0a32487988ea3a9f4adbd417586ac19a99d20695415d6722d6d958e9f61b71585391a4d9095ac3e06bd11c2ac187690d99cde5530fb5e2cd72834598625a6e22cbf3043290d84072a29cc640e638c4d461cce56f8078dd75d33f785957ce644fcab2842f90"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_ROUTE4_ACT={0x4918, 0x6, [@m_csum={0x10f4, 0x12, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x4, 0xfffffffd, 0x8000}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9df, 0xffffffffffffffff, 0xfffffff8, 0x64a}, 0xe}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x7, 0x0, 0x3}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x8, 0xffffffffffffffff, 0x9, 0x1000}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xe, 0x8, 0x9, 0x80000000}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x5, 0xe, 0x5}, 0xf}}]}, {0x1004, 0x6, "ca6220f097e338ef6d8b57caccc7a307c4855d8cd73928c92f38f5e4a74cf674a1b4aaf7f7f3f5b72ccf8f4bbf8d7714cb9b847dc810cf85478abac1f2a20a003b6ddc83af50fe7701c28600829f8c9dc06fbbee9e4c1fb141f78d12395dcc98f48e8856533fbefac834a0b02769d7e4798d84d5dd5fda83b5411a626019a4faa87713c38b6bf117955b5f1b3f75d59213c39be636ded193e11cf79a1a49f1540767dbad15173b442edceb338b4f8c0d150699060f5e262a804d27fceadbbd71d788193e84354d6c29c4afc52eab1653afb5586c24b1609ca4e74600feb67bf8c8fbbe11b5525e7d8b7a78588482aaee36c7837d1cbbd2b1b0aa0898266fd416272b42e79ce47789663c52560a8a341ee8ce94b1c9d756db8c33cc3d03909b05d3aaf4dd04b5affc09a8914db20c9bc12625e43a6c1c8e6783e0ad2c3d1a7cdd8e254dc38f4211c0757517b41a638870c189701e4f04d9bcd33fb80542c4007fdbe9618d252c924f3372ac77d06ceaeb9d1c2a47d59057ba1c44c6285d2dc98e2e8a264b67539d3912a41e7a308da186ca5d3bf7bc67af6801e43a1f370c5efeedb2f5faa848ab7f0a62766babdde5d94ebdc26e59253aed6b283f985bb80e248ad9d482a75378357f7aed189f2714d7c6c28dc7857d209e2690ccdea363a0b7a57c7877924540ea3d59f243273457db4bbe076993eef5a163c8ea4fded966445326ff461d7878bf10b73459c739bd74e7a9438e4820675dc3c6c250ce5306a1fecc080c721b9f690a34c7c11e6387902da302e019ab67d18b6b11a29f4db1bf6b99e7dc2cb3fb1d465a80b3f3ba74c2cc670b4f6ca624097a6a2633c66d5852d2e279070287f447482a0a85cde6cbc404387538c74ef6c288295754c3c7e08ba04714223acb48848aac8f86b5d5419529b307ef5b37d9e5c4cd65111c3a8eddf4a7e1eb47badeb12a88e4bdbec3a91f6da8a19447c8f9ec769875afc97775d968d71315ad171f02210bd86601339c88b20faeb2e282d72d779add4d324422bc4eda8618337794b5fa85ac0b5478f6b37a4062ae5663d8210635f40c8d18895f43276c1c80ce32237e4efc769e6be67b4bec2c0fa443a3f90d38b31e3584aa94fc01e7c7c3958d9022738bf1fbe5a7b65756382dbed3b843505135c577995c508becb5b7337728f24c03c39625493ce786ee170397fe64abc74ff2a723c8d09cee0e4fa833e4308a46cdc131bdfb8b4121669342df5863807b14670e1669eb9f6ff9167aee764a006a197609615f8907b18482813ec933cc6437d8cca132b2d0ba777696316df84f5bdb828074a5aa4f6664c630ef2077b2f0e28d2681be438508cf35c6c1d9172d5f2310461cb36312f6931ee9a605d23b46e8343593cac1ca13d85a160680bbead195140ddbd4caed1a8ad14280e2df969934a5e317b277e3656f3b0bf701e2e3847da09fe973f2d81d0595c542babc9d4cbde6572ead8f70541f6fd3631c792273fa505346495b715789c96d44e334b321ee512e559c9d4c32cfcecb72febdf69d43955cfacf75a70f935548a528188bbb3653a26f8b8e8f0d8634347c10bd7563fba8b9e0e03cb746319c97c89b42f350091d9084c49c890d2a72065e7fc16db542d585729df9184271da2f265548d56c7cbc1557121ff4a09861ae3439e67926e4ebcb8615f57f37c6c6e33d557672b9810f48edccf77d31df6cc8b8e468bfddfb685b0c4d8348bd7e07fc15b89c9f56b677d40dfd3f045a0bb559b5ee895ce7d66fe90ad45feb7d1ac7b64ddf657fb837a6314869b1bf94fb7518fd5f93091e7ef163a7c1d1e58c060483d3f1ee597cfa2d69175f4d5aaf311a43dd61bddea92424e88aca36418003d251553b4af1bd514883986906a94bdda2fce4d9982e39cefaa5a74b4f178d957e252e4b20c42b92502275842eb8ce7bb0d517d84c97dab7acf20d5607d97c3a95d9781f09cbad171ade3d8b7538b92df9602c552c6466dcfa19762c7bf3e0465730d916c312bfea084d1fceed8505f8280da64e4794d93012e15f93f9a5e2b79bf8ac99e5aec8188c0f9357b1e38d866efac76ddfbc407ab2cd43790d18e3c5214b211b65e3d3450a7ec4f8ecf342d3f9f6735fb806b9ccc0d8349704f089dc8df422e8bbee94bfa2101cbda41a62f4b1f924452fc15b3ab81bd6f2b917235a2c6439741184ecaca57322eb46dab4c1cdc55deb1e4e7c8c404a1d7a7244edcd1ac149af9d04c6dd5ab7b34c95491adb19d9d111261c87d15e2457625621331c2022dfc3703263deb111581f2fb587c9a07526112fa442cc313a95675c4bbd6441f290d4769854c10edb9f9dc65cf9eb0ef8f5f1417dc6fe6b612899fdccc1829b3d4360094d53b70b50b51379adc3af12ca2f960d61565446021c9475fd195a41ce36bfda02ca2cd2826dee23072b17ec17086a0e48aa71d26cefd00ef7152a1d3795096030c55e0b3791e0031b4356cb7fcbe2891a26a9cb7c1cbd102f641c021f4bbb35248375e217eb538ba589ea8ac22e0962e1d27f8b2925123ddce029d7ef4e9ab8e8426a83a5e7ce6feaf79023e449a133ee805407b2c0a6340458bcbee27df98b7504f3604e485c7ecc4fa326d0afd20b85da35c7648c13381364e29166b93791de532e03a68d0822eb1da8351d8172cd8eb0554259d32904bbbc8b4c7366156bab9f6f354899e2c10b7cd8a81f544db21fbd78aa99a6d6de475fcc3d633440e3ffce0e8103ca2e4348a9647e8017dc8f431b4d5db39b052a064241d440154f5b39f3a676bc864b4c4478ca3058a78256b5ba771ee0d974c89f41c1f064371235bc5fc45010f86408c7250e8a4a8cc16ec60dc07781630cd3e4629a87a4968ef548042ef6ea4a094316278d29a96e934f0e55965742abe4f86e5d25e2375b13b72bfa5f8e1f80d7f5ca624f249e5c2e57f863f537c71ff5e753af19dc44ffae8407338ad3cbaaad9976d751b2324236004442c5cc95e54c4d08a9dd9749b96bc0a0457d46e322312d9b0716dbb5ace8f8ec190c49d99946204546490d6e9293f7ba3b56c865451903b87d8950aa5f8563e738dfba53c30c26afd89799f1cef25179fd17305de63b1ff92278a50e755a5c6ad02d33d96621507765c9865e44870ef222cd5fb6d2cabab1d0e3b6fb5245f49d0524e10b24e2970aa8babdc02c1e1bab77c852be7da0d0c28a50b9e6567990fbbbca2578a9f530ca4ac14cceab960fc17e18102d94dcba96937464b73ba4ef4c9c4b31137ec0065c70685c5f6949961a3a2718c431ceec2485493ceba16a5b619dcdcb7eef8fcf0af58086baa8bd5f1d566e2cc9a822112aaa7a99a72788c8aab0fe06ef89bbdcfd93da70fdee775b83ba25dcb7e871f2d6f2349fc5531b4d9320d1a66bf55f0d0dc4de052a5065d13b569db131a8093117d6692d570fc681770f4308890b791e5c743c6ccea3eafa68db992e02af42d97652ff6749c4da772caec47cbd701f4f83dbb4df5e460738b098d4d4c1e1880d6d209ae707d11216bf47642732dfd786763c1c571d11bdf0940d3b6d7beee6ee13e251d9110ede3ed8232162f8945ce72f8ec7b3ee263a785f0a3dcdefa7ed3eda2ec94163aa3bd92b0edcccac33bee3fdd868b57a0696dde2f31208b85ecb047f26a0c104e2bffe50925908f139f96d2ee576ae74fed727ba26edddc4e3f857f51880cb127c16846cddcef090d67c0673c4311f2f351dd0cdd9a7e950f9ccd1038bbd84de903e85b0191167879ce1df4ffbd56bfbd80a4747f2aff02743eb2a705ce97d6258a85d34318e64d0268f5de131b2ae2d0593ceb501e20fb336a4eff5ae276eaf04a32f3d2da82e134efd4a8254e94921b4857abda9f5a89fef9dba569ab7698c473ff352bce1ad6d0702ce53b62e087a9ac8cc511510ca6c4ce39003008dc7b6a274a52973c78e30871595c7ab7c43a80460573bf0547e4934b35609a834d6294882a4498c3d163411f764a3a4b42786eab92dfbf96d929e77ed70b3e08e6308c0fb34e207d41e2c9bf5d5ad3ae361ee22fe6a7619e517869109bcf87e9f5d05ed8ed3e3854b6587b914c2a1b6644e76a98bd80385eefc846d901299e729e85ad425696d180aba68110029416ce81ced282658c0d732d698568905659938c00d66346ce415be2de0b612f620f1e3a3261fb7c5b4a35d570cf337b9075cca5ad5b6cd3e7eb408d2986e12a283d01f245c265f27e9620a5f178441d33cb7f3af9c3d02199a8e50609efefdab7f359fe1baf1187b4aef6d125677391aa4bde48517411c40db941e99d5e56a40043f6d5b6aa09ddd81c2a2c93d72618ce7c713c608827c8c06006c11ef68833732bd88931d3081323c1d60fef8bc1e64853e8cbcf8980078756020a07276fd64add037ab74c6b08f411d744f0d128909b8fe13f56fcd60d78e987bdeabe279394bc0328d833f65eddd20533b0c74f8eff16af8c8f9b282b7e6df519b2f43508deb029da4eff1b1075c8020c31933158050e22decffac2677ea19e0240f92c3b7ebdc48acbee58eee92d2f38311d90d080fa0bcf51f3ca324a38394ee2d88f9ab7e397bfa90f3879b18269d59cb653f162e4054feb59bac0f40fac991fcf86490cf1122ef88a7844a0b4a7f78a489296d0868b3013a624e4dacd9543e39e5d41a4b566c118aab0fd142bea3d1d07ad560ee2cae1c600ecfda0a29f1b6183abce3e0d110347b8dfd3936fba80b018c22dad1e92714da5d24d3ee1ecbce06fb8a711bb3460657c064528d852a8cec560600643a97ed4ee96bda0308aba4d623a750b43542bcfad0259cc7e217c5125f3982e27f975bd606e4ae7a1b37874c04d99b93a6917eb2b2df7eb05472f0121db3046e7965a564eb25930e309f4d5e0f09c2ba34441b0ffd179d90d03066b6184ebc358b394d994db87174de377a3d269bafbe73ef339faa14a6a9917f185bbe9b9392a821d6ceb55cf4b323e0056acb8f8183165d4226dcf36ce772d062e885feca2a07d23055bc13695fca785f2eb67f495feb0bd920f12703f00a306132719fdb7715b041c758ea8e854a903c3fe21c58310e500b42bf36b83d1589083a590ef99ad480ad717da698c7875c460afe38a20f71cbe105f3d86ec25c31214540152e2fff385e47730040e7ac1f007256970b40d296028eebc6ed9ca5d2e91737af8f17c8fb4a3f765d2c9c34f4062d96976b3f6a13b48c573820cbdb1a30436b695eda1f628a16b32b55dfd0f5e5660f8161d4a525da6b157b67b18380ac5fe819c2c1ce2ab4e870d4a5350caedc492f52997c6718bc8dfe3b9692c71a44ef35158d19b73ce8e52162fb86fb2caf5cac4b8795304d11c77fbdb974d4e6fa39804bdf64b0035cef4d53de85c796dff5ab3ce9a672b39115e3aba63b524d89393cbf8eea1ce12a15c416cb8684f85eea2b1c1e14f20f40354ff302b422a45ca27ff94a99850c06a6efce76b307a785009fe9dd0bbdc30854f5c7b2e246ff00d0346c400ac272054454408448179b6b06195b61859b11c30a574542fe8a7def7a47b78637eeeef6115dc6d1168e5bea24d41b8f6128fc77d73caf93274440f59350706855677eee11b02a273f96aa212bcddc84112026ba4a7b05b9db0a5de13c6c10e69b6c9373c3d7ef7e6f5d2757cf0739cef7048a24840d0c9c884cd1c03c82b1341913c3efc371acb5b2c94e6649c9d1a833ab35ee9bc5a01250f9eb3fcc0fb1b900fbd5b2fced12ccea1321440a42420614a8cc135a06eae3aeb62e4df843677274"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x1b8, 0x1e, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x6, 0x0, 0x9, 0x5}, @empty, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x2, 0x8, 0x1, 0x5}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffe, 0x4, 0x4, 0x3, 0x5}, @loopback, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3f2, 0x20000000, 0x9256, 0xd}, @multicast2, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x383d, 0x8, 0x4, 0x79, 0x6}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xce94, 0x0, 0x7, 0x6, 0x10000}, @multicast2, @rand_addr=0x64010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0x5, 0x4, 0x7, 0x8b}, @private=0xa010102, @rand_addr=0x64010101, 0xffffffff}}]}, {0x78, 0x6, "27ea2a64bc30b7be1b855c7f5f0cfc434c268dd7216e67041fdcbe09bda282a7960e8ac5738eba77e2ea8517ef59af40a728807f265bda1b802c6b12aa0ef879936b26064a7561ed1173e64fc73c43581d1bda007123d20e3bee2560af3739ccef5080c7a87ff68941271bbe5f340cf2f2999818"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_skbedit={0x190, 0x9, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xa}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x200}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x800, 0x3, 0x0, 0xffffffc0}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xe34, 0xf, 0x0, 0x91, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x190, 0x1a, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0xffffffff, 0x2, 0x6}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x2, 0xe01, 0x9}, @rand_addr=0x64010102, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x550e, 0x1, 0x20000000, 0x7, 0x3ff}, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xfffffc00, 0x2000000c, 0x9c9, 0x5}, @multicast1, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8d9, 0xff, 0x7, 0x10, 0x4}, @loopback, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x401, 0x1, 0xfffffffffffffffe, 0x3, 0x80000001}, @broadcast, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x74b7, 0x2, 0x2, 0x9, 0x10}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x33}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x7, 0x0, 0x9}, @initdev={0xac, 0x1e, 0x7, 0x0}, @multicast1, 0xffffff00}}]}, {0x26, 0x6, "2b44a79b982f95740f7937e1fcd8f64a20868135c6386d26feedd1c8fe378433f38a"}, {0xc, 0x7, {0x0, 0xf0a48415f3f68129}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x198, 0x13, 0x0, 0x0, {{0x7}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xb3, 0x6, "855df89d2aab5e0f3d063ca5fb79d15bb679b61fc09a8b123cf4c3c77f5bf6cc135dc5bcf3412033d16ec3e40567ab2e8a7d92d35bff402362332ab8fb81d9f69e8874b273e75215910d581848555b9398f6ed89c9fc334164a5f8fe29a6eb8f3d1c50dafaa8931cd319882e6e1be660a3e96acf92c4af4be2cc52f4b3060946d0e8f5755d99517e320e81dadc1260c3cc1b3402659c96631ee922545ec8992b8f82351d53dd75f258f37205434338"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x4c, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x1, 0x20000001, 0x3, 0x9}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_csum={0x1dc, 0x1d, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6e3, 0xff, 0x4, 0x1, 0x6}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x7, 0x1, 0x8001}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x4, 0x8, 0xfff}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0xa00d, 0x8, 0x7f, 0x6}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd40, 0x8, 0x1, 0x0, 0x727}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xe1, 0x2, 0x7fff, 0x5}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0x2, 0x3, 0x8, 0xfff}, 0x1}}]}, {0xe9, 0x6, "c71a58d88f24e88a0c1fb75eb2d724163c5f9655d9fae0b0a2ae9ca2c6f29d88c7fe66061fc0b82f3771e19815ba06fd4b4888721591ceb4457c1f983bedc56cc728c20c15b14b8879cd815bf892645a2914d54a5d2145cfacb3a9561bb228d040078f48f18accae9a83c7fae753ca7ce1ccd970b473d0baead6be2af75ade857d0188674b392207c404685e5df5459fb86e4eee16b284d3ab766e0c798e14444450f940dcc5c0d752f57854b66639df5ba8e12033bd1a6e89dce8b1e145d1864fcaeccc7b99be37304b4313b23f88288bf4ffd395e6680c1b8b45327e0e650ccd25ecf576"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xec, 0x3, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x4fa, 0x5, 0xfffffffe, 0xfffffffe}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xa}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x5, 0x1, 0xc, 0x10}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x60, 0x6, "e1a6a9a693e012e79bf01a91bfaa16edd8cfedd8f57909a23aada08307f95d55b104a4ead8104e031ddb108d6f3a5f454172c69400a53c7dde6e470befcbf7c4a975ac963f23fbe086621159fca96e7e3a9de1f41a15c39989345a0a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2e04, 0x1e, 0x0, 0x0, {{0xb}, {0x2d40, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffff9a}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x90, 0x8, 0x6, 0x21, 0x1, 0x6, 0x9ee6, 0xc45e, 0x9, 0x1, 0x8, 0x9, 0x4, 0x80000000, 0xd, 0x6, 0x9, 0x3, 0x6, 0x400, 0x7ff, 0x1, 0x1, 0xe74, 0x800, 0xd, 0xfffffffd, 0x3, 0xf, 0xff, 0xf, 0x0, 0xd, 0x80000001, 0x7fffffff, 0x5, 0x4, 0x2, 0x10, 0x8, 0x1, 0x6, 0xffff03c0, 0x7, 0x5, 0xef7, 0x8, 0x7, 0x3, 0xd, 0x4, 0xd8, 0x7, 0x2, 0x7fffffff, 0x800, 0xfffffff8, 0x8f, 0x7b2, 0x1, 0x4, 0x7, 0x3, 0x5, 0x8, 0x3, 0x3, 0xfffffff7, 0x9, 0xf858, 0x82, 0x9, 0xe8c6, 0x101, 0x8, 0x1, 0x6, 0x0, 0x7, 0x3, 0x3, 0x1edf, 0x3, 0x0, 0x5, 0x0, 0x6, 0x28f, 0x8, 0x5, 0xfffffffb, 0xfffffff7, 0x6, 0xfffffff9, 0x4, 0x1, 0x1, 0x59f, 0x1, 0x8001, 0xcf6, 0x5a, 0xffffffff, 0x2817, 0xd000000, 0x5, 0x6, 0xffff, 0xf57e, 0x9, 0xd, 0x7f, 0x9, 0x180000, 0x1, 0x0, 0x2, 0x4, 0x6, 0x5, 0x80, 0xfffffff8, 0x58e, 0x400, 0x50c2, 0x7, 0x3, 0x8, 0x8, 0xf, 0x3, 0x1, 0x7, 0x2, 0x3, 0xf368, 0x57300e8f, 0xd, 0x7fff, 0x1, 0xffffffff, 0x3, 0x0, 0xff, 0x7f, 0xb, 0x401, 0x6, 0x336, 0x7fff, 0x5, 0x7fff, 0xc7, 0xffffffff, 0x9, 0x8000, 0x100, 0x4, 0x8, 0x8, 0x8, 0xf40, 0x1632, 0x6, 0x5, 0x7, 0x4, 0xffff, 0x708, 0x377, 0xece1, 0x3, 0xfffff854, 0x8, 0xc9, 0x6, 0xfffffffc, 0x1, 0x8, 0x0, 0x80000000, 0x335, 0x2, 0xaf, 0x100, 0x874e, 0x2c1, 0x1, 0x100, 0xfffffff8, 0xfffffff5, 0x3, 0x7, 0x5, 0x9b90, 0x3, 0x0, 0xc9, 0x9, 0x1, 0x8, 0x8, 0xf, 0xad97, 0x6, 0x8, 0x4000, 0xffffc6da, 0x500000, 0x80000001, 0xfffffffe, 0x5, 0x4, 0x7, 0x6, 0xd, 0x1, 0x1, 0x0, 0x7, 0x8, 0xbe, 0xc1, 0x35, 0x0, 0x5, 0x400, 0xdd8, 0x3ff, 0x80000000, 0x200, 0xb, 0x1, 0x1, 0x2, 0x100, 0x6, 0x8, 0x37d, 0xfffffff9, 0x0, 0x6, 0x52, 0x200, 0x7f, 0x6, 0x8, 0x3, 0x0, 0x1, 0x4d4c, 0x8588, 0x3, 0x1ff, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8fda, 0x6, 0x80000000, 0xa, 0xb7b5, 0x7f, 0x4, 0x8, 0x0, 0x7, 0x80000000, 0x134, 0x51de, 0xf1b8, 0x0, 0x32f, 0x6, 0x4, 0x4, 0x7, 0x7, 0xa283, 0xc33, 0x3ff, 0x3, 0x6, 0x3, 0x4, 0x2, 0x1, 0x7, 0x2, 0x7, 0x6, 0x1, 0x10001, 0x5e7, 0x0, 0x0, 0x2, 0xad, 0x2, 0x1000, 0x0, 0x7, 0x2, 0x7fffffff, 0x81, 0x0, 0x10, 0xe, 0x7, 0x10, 0x1, 0xffff, 0xfffffffa, 0x8, 0x3, 0x9, 0x3, 0x7fff, 0x7, 0x3, 0x7fff, 0xfff, 0xffff, 0xe, 0x4f531d95, 0x4, 0x8, 0x2, 0xffffffff, 0x0, 0x6, 0x1, 0x1, 0x7f, 0x6, 0x101, 0xb5e, 0x9, 0x2, 0x0, 0x720f, 0x7, 0x4, 0x40, 0xffffffff, 0x3ff, 0x7fffffff, 0x4, 0x9, 0xd, 0x0, 0xd, 0x1, 0x6, 0x9, 0x4, 0x1000, 0x0, 0x3, 0x8, 0xfffff000, 0x5, 0xa, 0x7, 0x3, 0x7ca, 0x1, 0x877, 0x8, 0x6, 0x401, 0x0, 0x6, 0xffffff7f, 0x10, 0x4, 0x2, 0xe5, 0x7, 0x9, 0x5, 0xfffffe00, 0x5, 0x6, 0x2, 0x401, 0x2, 0xfe, 0x4, 0x1, 0x9, 0xff, 0xfffffff9, 0x21, 0x3, 0x3, 0x4, 0x14, 0xffffffff, 0x1, 0x8, 0x8, 0x10, 0x1, 0x9, 0x1, 0x0, 0x6, 0x5e6, 0x9, 0xfffffff6, 0x1b5, 0x9, 0x5, 0x1, 0xffffffff, 0x80, 0x5, 0x6, 0x4000000, 0x8, 0x2, 0x0, 0x8001, 0x3, 0x800, 0x5, 0x7, 0x9, 0x8, 0x6, 0x4, 0xdafc, 0xfffffff9, 0x9, 0x0, 0x2, 0x6, 0x8, 0x100, 0x2000000, 0x9, 0x9, 0xf, 0x10001, 0x4, 0x2, 0x7, 0xa7, 0x4, 0x6, 0x42, 0x3, 0x96, 0xa, 0x5c, 0x4, 0xf84a, 0x5, 0x6dd, 0xe, 0x1f60, 0x80000001, 0x1, 0x80000001, 0x7f, 0x3, 0x81, 0x9, 0xff, 0x5, 0x1, 0x0, 0x5, 0x3, 0x0, 0x1, 0x7fff, 0x5, 0x9, 0x6, 0xa, 0x9, 0x8, 0x8, 0x3, 0x4, 0x4, 0x0, 0xfffffffc, 0x0, 0x4a, 0xfffffffb, 0x3, 0x6, 0x0, 0x7, 0xc9f2, 0xfffffff5, 0xffffd146, 0x3, 0x80000001, 0xa, 0x6, 0x8, 0xa2f, 0x8, 0x6, 0x2, 0x0, 0x1, 0x6, 0x7fffffff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x8001, 0x3, 0x2, 0x5, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0xb, 0x30b, 0x7, 0x3, 0x7, 0x5b6, 0x9, 0x7, 0x6, 0x5a4, 0x7f, 0x0, 0x8001, 0xc, 0x7fff, 0x80000001, 0x8, 0x0, 0xdcb7, 0xffff, 0x2, 0x200, 0xffffff7f, 0x4, 0x9, 0x3, 0x3, 0x4, 0x2, 0xd8, 0x7, 0x6, 0x401, 0x0, 0x9, 0xffff, 0x1, 0x8, 0xf, 0x8, 0x9, 0x9, 0x9, 0xa8f8, 0x7, 0xfffffff7, 0x4, 0x7fffffff, 0x2568, 0x7, 0x1000, 0xffffc6ce, 0x7fffffff, 0x5, 0xffff, 0x7e, 0x7, 0x2, 0x36e, 0x4, 0x5, 0x5, 0x7, 0x9, 0x7fffffff, 0xe87a, 0xcb2a, 0xfffffff8, 0x0, 0x8000, 0x8, 0xe6ae94aa, 0x0, 0x6ee4, 0x7, 0x7, 0x7, 0x2, 0xfffffff6, 0x0, 0xff, 0xd1f, 0x401, 0x8, 0x74bb, 0x2, 0x3, 0x71, 0x2, 0x4, 0x2, 0x80, 0x4, 0x80, 0x2, 0xae2, 0x4, 0x4, 0x8, 0x1, 0x5, 0x100, 0xfffffffe, 0x2, 0x6, 0x9, 0x5, 0x4a7, 0x9, 0x8000000, 0x2b1, 0x1, 0xffffff98, 0x97, 0xb, 0x5, 0x7f, 0x5, 0x7, 0x7, 0xffffffff, 0x2, 0x1ff, 0x1b0, 0x6c, 0x1, 0x1, 0x80000000, 0x8, 0x40, 0x4, 0x5fb1e342, 0x300, 0x100, 0x7fff, 0x7fffffff, 0x3, 0x4, 0x3, 0x1, 0x1000, 0x6, 0x9, 0x1000, 0x8, 0x7fffffff, 0x1, 0x1, 0x8, 0xa00a, 0xefb, 0x0, 0x4, 0x1, 0x923, 0x1, 0x101, 0xf2, 0x8, 0x8001, 0x8, 0x78b2, 0x8, 0x8, 0x6a0, 0x80000001, 0x5, 0x8, 0x9, 0x5, 0x4, 0x0, 0x4, 0x5, 0x0, 0x9, 0xdfb, 0x7, 0x5, 0x6, 0x9, 0x7, 0xfffffff5, 0xf, 0x8, 0x8, 0x6, 0x4a, 0x6, 0x4, 0x5, 0xe834, 0x9, 0x8000, 0x6, 0x4, 0x3ff, 0x9, 0xfffffffe, 0x4, 0x7fffffff, 0x5, 0x9, 0x10000, 0x4, 0x8, 0x0, 0x55d, 0x0, 0x9, 0x8621, 0x9, 0x7, 0x9, 0xc, 0x1ff, 0xc, 0x79, 0x348c, 0x7, 0xffff, 0x5, 0x2, 0x2, 0x2, 0xfffff801, 0xdd4, 0x16d, 0x3, 0x6, 0x7, 0xa, 0x8, 0x1000, 0x5, 0x101, 0x3ff, 0x6, 0x81, 0xfe, 0x3, 0x0, 0x5, 0x6, 0x1c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x747b, 0xc, 0x9, {0x6, 0x1, 0x3, 0x5, 0x7, 0x8}, {0x0, 0x0, 0x7, 0x4, 0x2, 0xdf}, 0x8, 0x1ff, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffce0, 0x0, 0x1, 0x7, 0x9, 0x1000, 0x6da, 0x534, 0x2, 0xa542, 0x5, 0x9, 0xfdff, 0x6, 0x2, 0x4, 0x0, 0x3, 0xb, 0xcc6c, 0x597a, 0x9, 0x5, 0x7fffffff, 0x9ab, 0x10000, 0x2, 0x81, 0x7, 0x9, 0xffff, 0x101, 0x3, 0x0, 0x8, 0xb21, 0x7ff, 0x1, 0x10001, 0x6, 0x4, 0x6, 0x80000000, 0x8, 0x9, 0x57b, 0x9, 0x5, 0x7, 0x7, 0x3ce, 0xa, 0x8, 0x80, 0x8, 0x655, 0x10001, 0x9, 0x800, 0x1b9, 0x80000001, 0x0, 0x3, 0x0, 0x3ff, 0x8000, 0x2, 0x7, 0x5, 0x4, 0x7, 0x5, 0x43, 0x80000001, 0x0, 0x2, 0xa0c, 0x4, 0xb, 0xe379, 0x8, 0x1, 0x1ff, 0xd3ab, 0x9, 0x2, 0x6, 0x7, 0xfff, 0x4, 0x2, 0xcaab, 0x8, 0x9, 0x3, 0x401, 0xba5e, 0x3ff, 0x8, 0x6, 0x1, 0x0, 0xa8f0, 0x7, 0x100, 0x4, 0x8, 0x3, 0x0, 0x1, 0x3e9f, 0x9, 0x1, 0x7, 0x7, 0x8, 0x1, 0x3, 0x6, 0x4, 0x1ff, 0x7b391e88, 0x0, 0x0, 0x1, 0x3, 0xffff, 0x0, 0x80000000, 0x1, 0xff, 0x3, 0x0, 0xffffff61, 0x7, 0x400, 0x7e9, 0x9, 0x8, 0x4, 0x4, 0x1, 0x2, 0x8, 0x0, 0x6, 0x7, 0x7fffffff, 0x0, 0x0, 0xff, 0x5, 0x5, 0x296b, 0xff, 0x5, 0x4, 0x77b, 0x27, 0x8, 0x6, 0xdd, 0x1, 0x0, 0x3, 0xfff, 0x9, 0x6, 0x713, 0x4, 0x5, 0x7, 0x200, 0x3, 0x3, 0x6, 0xbe, 0xb8cd, 0x7fff, 0x6e, 0x5, 0xfffffffa, 0x5, 0x7, 0x10, 0x9, 0xffff, 0x2, 0x2, 0x5, 0x7ff, 0x1, 0xff, 0x7, 0x7, 0x1e, 0x0, 0xffffffff, 0xa1b6, 0x916, 0x3, 0x6, 0x1, 0x80, 0x1ff, 0x0, 0x5, 0xdc2c, 0x3, 0xbcc2, 0xfffffffe, 0x7, 0x1, 0x2, 0xffffffff, 0x5, 0x2, 0x40, 0x0, 0x8, 0x7ff, 0x53, 0xef6b, 0x2, 0x7, 0xc, 0xf, 0x401, 0x99, 0xffff8001, 0x0, 0x5, 0xc, 0x4, 0x7, 0x7406, 0x5, 0x1, 0x401, 0xb3d1, 0x3ff, 0x5, 0x6, 0xba51, 0x8cb, 0x4, 0x0, 0x5, 0x4, 0x9, 0x6d, 0x7fff, 0x2d77, 0x568, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x4, 0x3, 0x7, 0x2, 0xfffffffd, 0x5, 0x9, 0x1, 0xebc, 0x1, 0x1, 0x5, 0x7, 0x6, 0x7, 0xb8, 0x0, 0x10000, 0x8, 0xfffffffd, 0x1eb, 0xcb34, 0x7, 0x4, 0x4, 0x80, 0xc, 0x5, 0xfffffff7, 0x5, 0x3ff, 0x120, 0x7, 0x8, 0x2, 0xfffffffc, 0x5, 0x8, 0x8, 0xc0, 0x10001, 0xffffffff, 0x10001, 0xfffffe01, 0x7, 0x1ad, 0x9, 0xda, 0x7, 0x7, 0xb, 0x81, 0x7fffffff, 0xa, 0x9, 0x10, 0x1, 0x4458, 0x7ff, 0x8, 0x10000, 0x10001, 0x7, 0x5, 0x3, 0x8000, 0x7, 0x6a, 0x1, 0x1, 0x7f, 0xfffffff8, 0x1, 0xd3a, 0x2, 0x7, 0xfffffffc, 0xa79, 0x1, 0xfff, 0xfffffffe, 0x2, 0xd, 0xffff8000, 0xffffffff, 0xfffffff9, 0x9, 0x9, 0x3, 0x6, 0x7fffffff, 0x1, 0x2, 0x81, 0x0, 0x9, 0x10000, 0x401, 0x8001, 0xcef, 0x10001, 0xf, 0x2, 0x200, 0x5c6, 0x6e4, 0x0, 0x1f38, 0x8000, 0x7, 0x8, 0x1, 0x7, 0x6, 0x7, 0x2, 0x7, 0x101, 0x13, 0x6, 0x10000, 0xffffffff, 0x8001, 0x9, 0xffffffff, 0x8, 0x6, 0xf, 0x6, 0x6, 0x10, 0x6, 0x7a, 0xfffffffd, 0x8, 0xfff, 0x3, 0x8, 0x8, 0x1c4, 0x81, 0x0, 0x400, 0x3, 0x2, 0xd, 0x0, 0x6, 0x7, 0x400, 0x472, 0xffffff97, 0xe, 0xffff7fff, 0xffffff01, 0x7, 0x4, 0x3, 0x0, 0x8, 0x0, 0xfffffffe, 0x3, 0x7fff, 0x8, 0x85f, 0x1, 0x400, 0x7, 0x7fffffff, 0x45320, 0xfffffffc, 0x2, 0x0, 0xb, 0xba1, 0x7, 0x2, 0x8, 0x9, 0x5d, 0x4, 0xfffff70a, 0x5, 0xfff, 0x10001, 0x4, 0x9, 0xee, 0x0, 0x9, 0x1000, 0x0, 0x7fffffff, 0x77f33bf2, 0x8b, 0x1, 0xd, 0x2, 0x0, 0x7f, 0x9, 0x6, 0xfffffffb, 0x0, 0xd4, 0x8000, 0x400, 0x6, 0x3, 0x2, 0x7, 0x3, 0x1ff, 0x9, 0x7d9b, 0x7ff, 0x12f5, 0x6, 0x6, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x0, 0x10000, 0x9, 0x4, 0x7fffffff, 0x5, 0x0, 0x1, 0x1000, 0xbc3, 0x8, 0x2, 0xf, 0x19, 0xed3, 0x3800, 0x747, 0x3ff, 0x4, 0x0, 0x9, 0x9, 0xfffffffd, 0x9, 0x5447251b, 0x2, 0x7, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xc4, 0xf0, 0x6, 0x43, 0x6, 0x86, 0x7e355b20, 0x5, 0x1, 0x4, 0x7, 0x9, 0x1, 0x4, 0x5, 0x6ad9d92b, 0x9, 0xea, 0x3, 0x10, 0x5, 0x0, 0x9, 0x9, 0x2, 0xf71, 0x3, 0xd8f, 0x80000001, 0x0, 0x1, 0x7f, 0x5, 0x1, 0x3, 0x3, 0x2, 0x0, 0x4, 0x1, 0x4, 0x8, 0x2, 0xff, 0xf, 0x4, 0x7, 0x8, 0x0, 0x7fffffff, 0x9, 0x9, 0x10001, 0x1, 0x7, 0x101, 0x0, 0x3, 0x1, 0xcc4, 0xffffffec, 0xffff, 0x9, 0x4b56, 0x80, 0x28b, 0x3, 0xf8d, 0x8a6f, 0x0, 0x2, 0x80000000, 0x2, 0x4ed8, 0xffff, 0x82, 0x2214f7bc, 0x0, 0xc5, 0x3, 0x6, 0xe, 0x5, 0x3ff, 0x7, 0x2, 0xa0000, 0x5, 0x3, 0x6, 0x2, 0x9, 0x400, 0x40, 0x2, 0x7, 0x7f, 0x7, 0x5, 0x4, 0x80000000, 0x4, 0x3, 0xfffffc02, 0x56aec36e, 0x2, 0x7, 0x6, 0x8001, 0x9, 0x2, 0x6, 0x10, 0x5, 0xa, 0x10000, 0xfcf2, 0x2, 0x3, 0x0, 0x81, 0x2, 0xfffffffe, 0xb, 0x61, 0x7, 0x3, 0x9, 0x4, 0x8, 0xfffffff8, 0x5, 0x0, 0x2, 0x8, 0x0, 0x800, 0x81d8, 0x1a91, 0x5d8, 0x6, 0x1, 0xf, 0x4a, 0x9, 0x8, 0x80, 0x81, 0xffff, 0x3, 0xe39b, 0x7d886983, 0x9, 0x2, 0x5cb9, 0x4, 0x7, 0x8, 0x2, 0x800, 0x6, 0x6, 0x7, 0x678a, 0x0, 0x3, 0x0, 0x8, 0x4, 0x9, 0x4fe, 0x7, 0x4, 0x9, 0x7, 0x5, 0xffffff96, 0x8, 0x6, 0x1200, 0x1, 0x0, 0xfffffff7, 0x400, 0x8000000, 0x2e, 0x9, 0xfffff826, 0x0, 0x5, 0x9, 0xfd51, 0x6, 0x7, 0xe5, 0x4, 0x1, 0x1000000, 0xfffffffe, 0x0, 0x3, 0x8, 0x6, 0xffffffff, 0xd, 0x6, 0x7, 0xf30, 0x3, 0x5, 0x7f41, 0x7, 0x7b2, 0xcc7, 0xfffffffb, 0x80000000, 0x5, 0x4, 0x90000000, 0x6, 0x3495, 0x6, 0x1, 0x9, 0x9, 0x3, 0x1, 0x3, 0x8, 0x5a, 0x0, 0x9, 0xf3fe, 0xfff, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffffe, 0x3, 0x6, 0x7, 0x9, 0x10, 0x6, 0x1ff, 0x9, 0x5, 0xe422, 0x1, 0x80000000, 0xfffffffc, 0x0, 0x10]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x1, 0xb22, 0x9, {0x8, 0x2, 0x6, 0x8, 0x1, 0xfffffffc}, {0x7, 0x189dae04f6965904, 0x1ff, 0x9, 0xff00, 0x5}, 0xd, 0x21c3, 0x59d}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x400, 0xfffffffc, 0x1c, 0x7, 0x8, 0xfffffff0, 0x44, 0x9, 0x3, 0x6, 0x5, 0x4f24, 0x101, 0x7fff, 0x10002000, 0x9, 0x4, 0x1, 0x7, 0x2, 0x6, 0x7ff, 0x9, 0x7, 0x350, 0x8, 0x5, 0x8, 0x80000000, 0x3, 0x2, 0x7, 0x0, 0x7, 0x5, 0x8001, 0x7, 0xfffffeff, 0xfffffff7, 0xfffffffc, 0x401, 0x40, 0x2, 0x1, 0x1, 0x8, 0x101, 0x7, 0x0, 0x4, 0x8, 0x800, 0x57e3, 0x7a, 0xd, 0x7fff, 0x7fffffff, 0x8, 0xfffffff7, 0x6, 0x1, 0x4, 0x6, 0x9, 0x6, 0x2, 0x0, 0x6, 0x7ff, 0x10001, 0x5, 0x3, 0x1, 0x5, 0x0, 0xd, 0x40, 0x2, 0x1, 0x2, 0x6, 0xb89, 0x3, 0x9b5c, 0x7, 0x9, 0x19530000, 0x8001, 0x8, 0x9, 0x1, 0x1, 0x6, 0x6, 0x6, 0x5, 0x8, 0x3, 0x0, 0x956, 0x7, 0x8, 0x10001, 0x401, 0x4, 0x5, 0x18000, 0xfff, 0x7, 0x3, 0x5b, 0x7, 0x9, 0x1, 0x1, 0x400, 0x2, 0x6, 0x8861, 0x401, 0x8, 0x8, 0x2, 0x8, 0x7, 0x7, 0x5, 0x7, 0x9, 0x4000000, 0xc000000, 0x6, 0x2, 0x3, 0x5, 0x3, 0x11e, 0x4, 0x1ff, 0x101, 0x0, 0x81, 0x6, 0x5, 0x8b, 0x0, 0x0, 0x2, 0x8, 0xffff, 0x80, 0x1, 0x8, 0x5, 0x2, 0x8, 0xfffffffd, 0x9, 0x6, 0x6, 0x0, 0x400, 0x0, 0x6, 0x7, 0x0, 0x5, 0x6, 0x80000001, 0xff, 0x8, 0x5, 0x5d, 0x3, 0x7ec2, 0xffffffac, 0x6d, 0x9b, 0xb2, 0x5, 0x150fa, 0xeb, 0x9, 0x8028, 0x6, 0x0, 0x2, 0xfffffffe, 0x7, 0x8, 0x7f, 0x6, 0x0, 0xffff168d, 0xc, 0x4, 0x7, 0x0, 0x8, 0x9, 0xffffffff, 0x1, 0xfffffff3, 0x800, 0x7, 0x9, 0x8001, 0x8, 0x11b59158, 0x7, 0xfffffffe, 0x76, 0x7, 0x20ca, 0x2e1, 0x4, 0x4, 0x4, 0x2, 0x0, 0x9ae9, 0x61, 0x7, 0x8, 0x10, 0x6, 0x8, 0x2, 0x0, 0x5, 0x2, 0xfa, 0x7fff, 0x1, 0x8, 0x521d, 0x4800000, 0x58f, 0x1, 0x3, 0x800, 0x5, 0x3, 0x10, 0x1, 0x5, 0x6, 0x101, 0x1, 0x3, 0x80, 0x4ae, 0x9, 0xfffffffe, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xb, 0xc945, 0xa6d, 0x9, 0x5e, 0x7, 0x100, 0x3, 0x8, 0x6, 0x7, 0xdea4, 0x5, 0x80000000, 0x1ff, 0x5, 0x0, 0x900, 0xe, 0x3, 0x7, 0xff, 0x2, 0x8, 0x17ba, 0x10000, 0x0, 0x7, 0xc1, 0x1, 0x8, 0x3, 0x8000, 0x6, 0x4, 0x1, 0x8, 0x1f02, 0xfffffffe, 0x5d50cbe7, 0x1489, 0x4, 0x401, 0x10001, 0x4b, 0x5, 0x8, 0x0, 0xffff6b4e, 0x8, 0x2, 0xae27, 0x80000000, 0x5, 0x1, 0x3ff, 0x91, 0x7e, 0x92, 0xfe63, 0xffff58c1, 0x7e46, 0x10, 0x7, 0x5, 0x5, 0xfffffffa, 0x5, 0x1, 0xcb, 0x2, 0xcb, 0x10, 0x8683, 0x0, 0x1, 0x7, 0x7, 0x9, 0x2, 0x8001, 0x7, 0x5, 0x2, 0x2b57, 0x0, 0x4, 0xfffffff8, 0x1, 0x0, 0x5, 0x25d931f4, 0x3, 0x4dc9, 0x3, 0x8, 0x10000, 0xe6a0, 0x756, 0x6, 0x800, 0x3, 0x2, 0x1, 0x5, 0x898, 0x80000000, 0x7ff, 0xf19, 0xf22, 0x7, 0x0, 0x10, 0x51, 0x800, 0xcd, 0x1, 0xf, 0x4, 0x4, 0x0, 0xaff, 0x7, 0x6, 0x8, 0x5, 0x5, 0x101, 0x400, 0x7f, 0xdd3, 0x6, 0x10001, 0x1000, 0x900000, 0x1, 0x3ff, 0x40, 0xfffffff9, 0x7fff, 0xffffffff, 0x200, 0x1, 0x3, 0x100, 0x3, 0x5, 0x9, 0xd5, 0x8, 0x1, 0x7, 0x3, 0x2, 0x2, 0x8, 0x2, 0x1000, 0x0, 0x65b4898d, 0xc8, 0x7, 0x3, 0x8001, 0x4, 0x8, 0x5, 0x7, 0x40, 0x4, 0x2, 0x0, 0x4, 0x64, 0x7, 0x61e2, 0x43c6, 0x1, 0x0, 0x0, 0x1, 0x10000, 0x9, 0xc1ba, 0xf, 0x5, 0xcb, 0x4, 0xffffffc0, 0x6a, 0x8, 0x8f0, 0x40, 0x90f, 0x7, 0xaa4, 0x10, 0x6, 0x3, 0xb732, 0x4f, 0x6, 0x9, 0x4, 0x401, 0x7, 0x5, 0xffffffff, 0x5, 0x4, 0xfffffffb, 0x7fff, 0x4cb, 0xd376, 0x8, 0x4, 0x5, 0x0, 0xea49, 0xff, 0x6, 0x3, 0x7db3, 0x2, 0x8001, 0x0, 0x6, 0x7f, 0x7, 0x1ff, 0x3, 0x8, 0x40, 0x863, 0x1, 0xffffffff, 0x100, 0x3, 0x9, 0x5, 0x9, 0x8, 0x80, 0x1, 0x4, 0x250, 0x7, 0x3, 0x2, 0x3a7, 0x2, 0x4, 0x7, 0x10001, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8b800000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd1, 0x0, 0x5, 0x2, 0xb, 0x5, 0xdb, 0xa370, 0x0, 0x4, 0x7, 0x40, 0x5, 0x8000, 0xfffffff7, 0x0, 0xe4, 0xffffffff, 0x7, 0x9, 0x50, 0x77, 0x3ff, 0xe441, 0xa4d, 0x0, 0x2e, 0xff, 0x100, 0x1, 0x1a0, 0x7, 0x6, 0xbbe8, 0xb4, 0xfffffff8, 0x0, 0x10001, 0x91e, 0x1, 0x0, 0x17e, 0x5, 0xa4e, 0x101, 0x0, 0x8, 0x148b, 0x3, 0x7, 0x20000007, 0xfffffffe, 0x100, 0x3, 0x7fffffff, 0xfffffffd, 0x8, 0x9, 0x5, 0x2, 0x0, 0x7, 0x0, 0x5, 0x1, 0x12fc1559, 0x9, 0x7, 0x1ff, 0xd, 0x0, 0x587c9c27, 0x6, 0x4, 0x8, 0x8, 0xd, 0x0, 0x1, 0xffff, 0x8, 0x1d, 0xb, 0x4, 0xf, 0x4, 0x4, 0x9a, 0x80000000, 0x7fffffff, 0x76a5, 0x1, 0x9, 0x91b2, 0x8, 0x3, 0xffffffff, 0x9, 0x400, 0x7, 0x101, 0x2, 0xed9, 0x6, 0x8, 0x91ee32c7, 0x1, 0x9c, 0x36, 0x5, 0x200, 0x7fff, 0x5, 0x3, 0x100, 0xa, 0xecff, 0x0, 0x5, 0x0, 0x101, 0x4, 0x7, 0x3, 0x6, 0xc, 0x0, 0x6, 0xe, 0x100, 0x8, 0x4, 0x2e, 0x8, 0x100, 0x4, 0x8, 0x4, 0x2, 0x7, 0x4, 0x2, 0x4, 0x9, 0x9, 0x9, 0x5, 0x9, 0x6, 0x0, 0x4, 0x6c3abdd4, 0x2, 0x1, 0x7, 0x7, 0xf, 0x9, 0x295e, 0x81, 0x1ab, 0x401, 0x1, 0xffff, 0x5, 0x9, 0x10, 0x2, 0x7, 0x58e, 0x9, 0x400, 0x8, 0xa5e, 0x401, 0x7ff, 0xb96d, 0x8f4, 0x5, 0x10000000, 0x7, 0x7, 0x6, 0x7, 0x1000, 0x0, 0x5, 0x7, 0x6, 0xfffffff8, 0xb, 0x3, 0x7, 0x0, 0x7, 0x2, 0xffffff00, 0x2, 0x2, 0x9, 0xa62, 0x4, 0x1, 0x7f, 0x26, 0x80000001, 0xfdd0, 0x2122, 0xfffffff8, 0x7, 0x6, 0x3, 0x7, 0x1, 0x7fff, 0xfffffff7, 0x7e, 0xfff, 0x85c, 0xdb0, 0x3, 0xc0a0, 0x3, 0x6b9d, 0x7, 0xff, 0x7, 0x9831, 0x1, 0xdf, 0x6, 0xfffffff6, 0x4, 0x0, 0x7, 0x5, 0x5, 0x4, 0x5, 0x9, 0xfff, 0x7f, 0x101, 0x3, 0x4ccd, 0x9, 0x9, 0x6, 0x9, 0x9, 0x4, 0x7, 0x0, 0x415, 0x8, 0x5]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0xd, 0x10000, 0x7, 0x54b2, 0x4, 0x5, 0x4f, 0x3, 0x9, 0xffff, 0x7, 0xd6d, 0xf89, 0xc1, 0x101, 0x80000000, 0x4, 0x100, 0x6, 0xfffffffa, 0x8, 0x400, 0x7, 0x3f, 0x0, 0x0, 0x7ff, 0x710c, 0x80, 0xdb8, 0x1, 0x8dbe, 0x8, 0xfffffffc, 0xff, 0x6, 0x3, 0xfffffffd, 0xfffff800, 0x9, 0x80, 0x1ff, 0x9, 0xac, 0x3, 0x8, 0x2, 0x9ea, 0x3, 0x10000, 0x2, 0x1, 0x1, 0x8, 0x9, 0x2, 0x200, 0x0, 0xe, 0x200, 0x1, 0x2, 0x9, 0x291, 0x9, 0x80000000, 0x3ff, 0x0, 0x5, 0x6, 0x59, 0x4, 0x4, 0x0, 0x0, 0x5, 0xffff22f4, 0x412, 0xfffffffd, 0x5, 0xff, 0xc, 0xfffffffd, 0x7fffffff, 0x6, 0x8, 0x80000000, 0x9, 0x8, 0x3, 0xeca00000, 0x753d, 0x2, 0x9, 0x80000000, 0x0, 0x3, 0x7, 0x7fff, 0x7a, 0x9c, 0x0, 0x80000000, 0x3, 0xe, 0x1, 0x8, 0x80, 0x24, 0x2c, 0x9, 0x522e47, 0x7, 0xd, 0x1, 0xb, 0x7fffffff, 0x6, 0x7fffffff, 0xad, 0x7ff, 0x9, 0x112, 0x200, 0x4c, 0xb3ea, 0x4, 0xffff182f, 0x0, 0x800, 0x7, 0x2, 0xb, 0x6, 0xd, 0x4, 0x8001, 0x3, 0xc12, 0x2, 0x5, 0x2, 0x81, 0x2, 0x7, 0x7, 0x7, 0x1, 0x7fffffff, 0x8, 0x101, 0x5, 0x87a, 0x3ff, 0x4, 0x2, 0x2, 0xed9c, 0x1, 0x7, 0x65, 0x2, 0xe, 0x9, 0x71, 0xff, 0x7, 0xfffffffb, 0x6, 0x1ca6, 0x101, 0x7, 0x1, 0x2, 0x8, 0x2, 0xfff, 0xffffffff, 0x7, 0x8, 0x82, 0x7, 0x7, 0x8, 0x7, 0x2, 0x0, 0x8, 0x349, 0x9978, 0xfffffff8, 0x8, 0x3, 0x3, 0x3e5, 0x5, 0x6d2d, 0x2, 0xa2a, 0x7, 0x4, 0x5, 0x4, 0x7, 0x2, 0x4a, 0x400, 0xcb3, 0x10001, 0x5bfc, 0x1, 0x6, 0xfffffffa, 0x10000, 0xff, 0x2, 0x9, 0x0, 0x9ae, 0x3, 0x0, 0x6, 0x3, 0x5, 0x2f, 0x7, 0x400, 0xffff2bd3, 0x6, 0x800, 0x7, 0x10001, 0x6, 0xc87, 0x2, 0x5, 0x8, 0x2, 0xfffffffd, 0x1, 0x1, 0xfff, 0x7, 0x0, 0x6, 0xb90, 0x98, 0x7, 0x800, 0x7, 0x5, 0x0, 0x3, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x8, 0x0, 0x7, 0x7f, 0x0, 0x9, 0x272, 0x8, 0x40, 0x7, 0xffffffff, 0xe, 0x7, 0x2b45, 0x14, 0x7, 0x6, 0x8, 0x10, 0x4, 0xf, 0x3, 0x7, 0x4, 0x7ff, 0x7, 0x9, 0x9, 0x4, 0x16d6, 0x4, 0x3e13, 0x7, 0x40, 0x10000, 0x1, 0xaec, 0x6, 0x5, 0x9, 0x3f23, 0x5, 0x2, 0x9, 0x8, 0x1, 0xe88c, 0x0, 0x101, 0x6, 0x1, 0x1, 0x8, 0x0, 0x0, 0x8, 0x1, 0x7, 0x7, 0xb, 0x7, 0x6, 0x6, 0xe686, 0x1652, 0x5, 0x1, 0x40, 0xfffff801, 0xb, 0x5, 0x4, 0x0, 0x2, 0x7, 0x1, 0x0, 0x52, 0xee, 0x5, 0x2, 0xdc, 0x8, 0x4, 0x80, 0x1, 0x0, 0x3, 0x3, 0x9, 0x3, 0xa, 0x4, 0x200, 0xffffffff, 0x4140, 0x8, 0x0, 0x10, 0xff, 0x0, 0x6, 0x9, 0xfc, 0x10, 0x8000000, 0x90a8, 0xf6, 0x3, 0x101, 0x6, 0x4, 0x75b, 0x1, 0x7f, 0x3, 0x1, 0x1, 0x519, 0xffffffff, 0x7, 0x9, 0x33a7, 0x6, 0x1, 0x1f3, 0x0, 0x1, 0x100, 0x7, 0x1, 0x1, 0x6, 0xb, 0x1ff000, 0x6, 0x5d4c, 0x5d0e, 0x9, 0xd1c0, 0xcb61, 0x80, 0x5, 0xf03a, 0x6, 0x5, 0x0, 0x5, 0xd84a, 0xc29, 0xca54, 0x7, 0x5, 0xe, 0xd4, 0xd, 0x40, 0x8, 0x2, 0x2, 0xa, 0x8, 0x5, 0x9, 0xdc, 0x200, 0x2, 0x5, 0x8, 0x1, 0x9, 0x80000000, 0x5, 0x1, 0x0, 0x0, 0x6, 0x6, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x21, 0x3, 0x9, 0x3, 0x9, 0x101, 0x5, 0x6, 0x3, 0x5, 0x9, 0xffff, 0x7, 0x100, 0xfffffffe, 0x0, 0xa, 0x7fffffff, 0x4, 0x60, 0x5, 0xf, 0x5, 0x4, 0x1000, 0x4, 0x5, 0x1ff, 0x9, 0x4c, 0xa, 0x2657, 0x4, 0x0, 0x5, 0x5, 0x312b, 0x6, 0xffff, 0x7, 0x101, 0xffff, 0xa, 0x90, 0x3ff, 0x100, 0x80000001, 0x1, 0x4, 0x7, 0x0, 0x8, 0xffffffff, 0x3f, 0x4800, 0x101, 0x10, 0x9, 0x7ff, 0xffffffff, 0x9, 0xc38, 0xb3, 0x0, 0x1000, 0x7f, 0x5, 0x450, 0x9, 0x7f, 0x1f0, 0xfffffff9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7720}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3862}]]}, {0x9b, 0x6, "c42f20192c9a287072c8705d86a54899d6ab9a7d09290e79419f1e78abccc9cecf879fa1c6f9fd17ea94a67d7c9b5878ff2bfa971c47826b4f12824c72f3ac8fa55ec767e8a29e90364b0e740f711c8cca8452fff2dcfd8e7a6690c501106b7b0f2ed1a04095f7040e7a09afe6279a3e70a46c09ccacfedc12e1fb118d92e08adf4fd2a3fd274d87983567690e1aebd9ca0f720c86582b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x98, 0x13, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xffe0}}]}, {0x62, 0x6, "3da22b2bfc46a8780685dd58eacd9ed7b717d00e4637707970f5d7d18046e16fa01c9f44e3e919c0ea3ebebf15baf04c6b1f5155c361ec12bf8a09fcd0913509b96558353dcc3036ea0fb010cc26b2f66962fa201b616acd20626c14d752"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_POLICE={0x84, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0x2, 0x8, 0x7fff, 0xcef, {0xc, 0x0, 0x6, 0x3e5, 0x51, 0x5267}, {0x3, 0x1, 0xd, 0x6, 0x1}, 0x7, 0x9, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x9, 0x8, 0x9, {0x2, 0x1, 0x3, 0x1, 0xd78, 0x2f}, {0x7c, 0x1, 0x8, 0xbd1e, 0x5, 0x1}, 0x400, 0x9, 0x3}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x94}]}}]}, 0x5338}, 0x1, 0x0, 0x0, 0x80}, 0x1) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r11, 0x400c55cb, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080)="802198671225", 0x6, r3) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7030000000000008500000087000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000180)=@newtaction={0x58, 0x30, 0x9, 0x0, 0x0, {}, [{0x44, 0x1, [@m_bpf={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 31.468698211s ago: executing program 0 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = creat(0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0xb2c, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="bdbd279d1d3c10948005d74502e4337532aeb17bd66277f667aca125f193c39e21a1fe1719e3f8cd599c404d2831158e42d4d1fbd29554308121677d75c7c498b2a3647c1defdf3e2a3ba271316aee44fe6db4cfcc76c9765ea1aa23401b8ef7d8865c42abfb499996c8268fcb5cb18eb6bf2a81adfff757f16d6f911575983336ac6fe5005ff58391233ba06796760fe8a2a08b0e50d8f158a13112d581fb160bdc0fab828f54ed0ffc4a441a3fba897ac5d1f1f16150393cfab69616775ebad26fea53d4cff40d7a", @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES64=r0], 0x50) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000980)=@IORING_OP_SYMLINKAT={0x26, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r11) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x30, r12, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 28.972319006s ago: executing program 0 (id=500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0xb48b, 0x0, 0x2, 0x15c}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000140)) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) fstat(r2, &(0x7f0000000340)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010001000000f60002000500", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="0400010000000000100007000000000020"], 0x34, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setfsuid(0xee00) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x23, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) 28.568559567s ago: executing program 0 (id=501): syz_open_dev$mtd(&(0x7f0000000100), 0x4048a99fbe, 0x4000) 28.247740311s ago: executing program 0 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = creat(0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0xb2c, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) 27.005854616s ago: executing program 0 (id=503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2aa181) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x149) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x786a, 0x1000, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2263, 0x8000, 0x0, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r10, '\x00', {0x3, 0xf51, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r14 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r14, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0xfffffffe, 0x5}) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r15 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r15, 0x403c6f2b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 10.779346553s ago: executing program 35 (id=503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2aa181) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x149) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x786a, 0x1000, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2263, 0x8000, 0x0, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r10, '\x00', {0x3, 0xf51, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r14 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r14, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0xfffffffe, 0x5}) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r15 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r15, 0x403c6f2b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.913276587s ago: executing program 2 (id=514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (fail_nth: 2) 3.614788845s ago: executing program 2 (id=515): rseq(&(0x7f0000000000), 0x20, 0x2000000000000000, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xffffff6e, 0x4000000000001, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = semget$private(0x0, 0x4, 0x130) semtimedop(r1, &(0x7f0000000140)=[{0x3, 0xff, 0x800}, {0x7, 0x0, 0x2800}, {0x0, 0x3, 0x1000}, {0x4, 0x46, 0x1800}, {0x4, 0x2, 0x800}, {0x1, 0xfeff, 0x1800}, {0x4, 0x5, 0x1800}, {0x3, 0x8, 0x1000}, {0x2, 0x1000, 0x1000}, {0x3, 0x0, 0x800}], 0xa, 0x0) futex_waitv(&(0x7f0000002040)=[{0x2, &(0x7f00000001c0)=0x3, 0x2}, {0x2, &(0x7f0000000200)=0x53d, 0x82}, {0x0, &(0x7f0000000240)=0xfffffffffffffffc, 0x82}, {0x7b1bef23, &(0x7f0000000280)=0x8, 0x80}, {0x80000001, &(0x7f0000000300)=0x5, 0x2}, {0x1d4, &(0x7f0000000340)=0x4, 0x2}, {0x80000000, &(0x7f00000003c0)=0x4, 0x82}, {0x3, &(0x7f0000000400)=0x7, 0x82}, {0x3, &(0x7f0000000440)=0xf, 0x2}, {0x570c5f99, &(0x7f0000000480)=0x7, 0x82}, {0x4, &(0x7f00000004c0)=0x7, 0x82}, {0x400a, &(0x7f0000000500)=0x2, 0x2}, {0x8, &(0x7f0000000540)=0x4, 0x2}, {0xf1, &(0x7f0000000580)=0x1, 0x82}, {0x4, &(0x7f00000005c0)=0x8, 0x2}, {0x100, &(0x7f0000000600)=0xcb48, 0x2}, {0x4, &(0x7f0000000640)=0xf8, 0x82}, {0x100, &(0x7f0000000680)=0x305b592e, 0x2}, {0x80, &(0x7f00000006c0)=0x9c, 0x82}, {0xb2, &(0x7f0000000700), 0x2}, {0xfffffffffffffffa, &(0x7f0000000740)=0x10000, 0x82}, {0x3, &(0x7f0000000780)=0x3, 0x82}, {0x11526c52, &(0x7f00000007c0)=0x2, 0x2}, {0xb, &(0x7f0000000800)=0x1, 0x2}, {0x6, &(0x7f0000000840)=0xfffffffffffffff9, 0x2}, {0x9, &(0x7f0000000880)=0xfffffffffffffff5, 0x82}, {0x5, &(0x7f00000008c0)=0xac, 0x2}, {0x4, &(0x7f0000000900)=0x8, 0x82}, {0xacc9, &(0x7f0000000940)=0x6000000000, 0x2}, {0x8, &(0x7f0000000980)=0x4, 0x2}, {0x4, &(0x7f00000009c0)=0xa, 0x2}, {0xef, &(0x7f0000000a00)=0x8, 0x2}, {0x8, &(0x7f0000000a40)=0xd8bf, 0x2}, {0x5, &(0x7f0000000ac0)=0x8001, 0x2}, {0x10000, &(0x7f0000000b00)=0xf8}, {0x8c27, &(0x7f0000000b40)=0xfffffffffffffffa}, {0x9, &(0x7f0000000b80)=0x2, 0x2}, {0x9, 0x0, 0x82}, {0x8, &(0x7f0000000c40)=0xfffffffffffffffc, 0x82}, {0x800, &(0x7f0000000c80)=0x8, 0x2}, {0x3ff, &(0x7f0000000cc0)=0x10, 0x82}, {0x7, 0x0, 0x82}, {0x100, &(0x7f0000000d40)=0x6, 0x82}, {0x13b6, &(0x7f0000000d80)=0x3, 0x2}, {0x9, &(0x7f0000000dc0)=0x1, 0x2}, {0x1, &(0x7f0000000e00)=0x4, 0x82}, {0x8001, &(0x7f0000000ec0)=0x8, 0x2}, {0x0, &(0x7f0000000f00)=0x72fc9bdb, 0x3f1afd704a7535cf}, {0x7, &(0x7f0000000f40)=0x4a}, {0x2, &(0x7f0000000fc0)=0x2, 0x82}, {0x7, 0x0, 0x82}, {0x15c, 0x0, 0x2}, {0x8, &(0x7f0000001080)=0x3, 0x2}, {0x7, &(0x7f00000010c0)=0x4, 0x82}, {0xfffffffffffffff6, &(0x7f0000001100)=0x3, 0x82}, {0x8001, &(0x7f0000001140)=0x81, 0x82}, {0x4800, &(0x7f0000001180), 0x2}, {0x8, 0x0, 0x82}, {0xa, &(0x7f0000001200)=0x200, 0x2}, {0x5, &(0x7f0000001240)=0x3, 0x82}, {0x4eb5800000000, &(0x7f0000001280)=0x1, 0x2}, {0x7, &(0x7f00000012c0)=0x7ff, 0x82}, {0x0, 0x0, 0x82}, {0x9, &(0x7f0000001340)=0x5, 0x82}, {0xe1e, &(0x7f0000001380)=0x7ff, 0x82}, {0x1, &(0x7f00000013c0)=0x1}, {0x8, &(0x7f0000001400)=0x6, 0x82}, {0x9, &(0x7f0000001440)=0x6, 0x82}, {0x2, &(0x7f0000001480)=0x9, 0x2}, {0x6, &(0x7f00000014c0)=0x80000000, 0x80}, {0xfffffffffffffff7, &(0x7f0000001500)=0x9, 0x2}, {0x101, &(0x7f0000001540)=0x24, 0x82}, {0xb, &(0x7f0000001580)=0xb5, 0x2}, {0x1e000000000, &(0x7f00000015c0)=0x1, 0x82}, {0x7, &(0x7f0000001600)=0x78, 0x82}, {0x5, &(0x7f0000001640)=0x8001, 0x2}, {0x4, &(0x7f0000001680)=0xc, 0x82}, {0x7, &(0x7f00000016c0)=0xd1, 0x2}, {0x7d5, &(0x7f0000001700), 0x2}, {0x1, &(0x7f0000001740)=0x8000000000000001, 0x2}, {0xfff, &(0x7f00000017c0)=0x6, 0x2}, {0x5, &(0x7f0000001800)=0xfffffffffffffff8, 0x82}, {0x7f, &(0x7f0000001880)=0x7, 0x2}, {0x3, &(0x7f00000018c0)=0xa, 0x82}, {0xdf, &(0x7f0000001900)=0x6, 0x82}, {0x100, 0x0, 0x82}, {0x7, &(0x7f0000001980)=0x7, 0x2}, {0xff, &(0x7f0000001a00), 0x82}, {0x0, &(0x7f0000001a40)=0xb, 0x2}, {0xbb3, &(0x7f0000001a80)=0x3ff, 0x2}, {0x139, &(0x7f0000001ac0)=0xf292, 0x82}, {0x8, &(0x7f0000001b00)=0x1, 0x2}, {0x9, &(0x7f0000001b40)=0x7, 0x186}, {0x4, &(0x7f0000001b80)=0xfffffffffffffffa, 0x2}, {0x774, &(0x7f0000001c00)=0x100000001, 0x2}, {0xe7e, &(0x7f0000001c40)=0x3, 0x2}, {0xffffffffffffa33f, &(0x7f0000001c80)=0x3, 0x2}, {0x5, &(0x7f0000001cc0), 0x2}, {0x5, &(0x7f0000001d00)=0x7, 0x2}, {0x21eb8000000, &(0x7f0000001d40)=0x9, 0x2}, {0xfffffffffffffffd, &(0x7f0000001d80)=0x100000001, 0x82}, {0x5, &(0x7f0000001dc0)=0x29f1, 0x2}, {0x96, &(0x7f0000001e00), 0x2}, {0x4, &(0x7f0000001e40)=0x8, 0x2}, {0x4, &(0x7f0000001e80)=0xfffffffffffffff9, 0x80}, {0xca07, &(0x7f0000001f00)=0x5, 0x2}, {0x12ba1a4c, &(0x7f0000001f40)=0x1ff, 0x2}, {0x2ec6, &(0x7f0000001f80)=0x3, 0x2}, {0x9, &(0x7f0000001fc0)=0x7, 0x82}], 0x6d, 0x0, &(0x7f0000002b80)={0x0, 0x989680}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x40, 0x6, 0x5, {{0x15, 0x4, 0x0, 0x2a, 0x54, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x1c, 0x8f, 0x3, 0xe, [{@loopback, 0xffffffba}, {@empty, 0xb}, {@empty, 0xc1cc}]}, @timestamp={0x44, 0x18, 0x34, 0x0, 0x7, [0x7, 0x0, 0x3, 0x4, 0x10001]}, @lsrr={0x83, 0xb, 0x73, [@remote, @multicast2]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfffb}]}}}]}, 0x58}}, 0x4000010) 3.121669892s ago: executing program 2 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x23, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) 2.838068018s ago: executing program 2 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (fail_nth: 2) 1.444306037s ago: executing program 2 (id=518): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0xf0, &(0x7f00000001c0)={@local, @random, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0xffffe, 0x0, 0x1}, {0x3fd06}, {0x7, 0x0, 0x1}, {0xb8}, {0x3}, {0x7fff, 0x0, 0x1}, {0x9}, {0x4, 0x0, 0x1}], @llc={@snap={0x0, 0xaa, "13", "f8094b", 0xa00, "3da7126f35b8fc02282020eb1a85e416b5b2fa25f863113ccfebfee76997976aafb285609ad0ba79c8ac7753b89810e7f5b54198e2aaf8c9bae3efa743dd3f49cc49853a8748a8af799fb124b7654ab7f8c1c2d1560ca9bf650cd92ebad2b915f0e5622b91d91e56bb6b07da65b71f782aac0512c268642ae528b443d904e858d8e69604d1b3bdd57d437fe4bbfa7d85ef4a21a00805333840550dac6d92ccc6fc0e2820a7a2c453b0a7e70e1e7bd50c000000000010"}}}}}}, 0x0) 0s ago: executing program 2 (id=519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = creat(0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0xb2c, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_SYMLINKAT={0x26, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) kernel console output (not intermixed with test programs): d_str(high-speed) [ 109.849836][ T5816] vhci_hcd vhci_hcd.0: Device attached [ 109.875251][ T5805] vhci_hcd vhci_hcd.0: Device attached [ 110.089401][ T5821] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.202362][ T5820] vhci_hcd vhci_hcd.0: port 0 already used [ 110.204242][ T5817] vhci_hcd: connection closed [ 110.213773][ T5813] vhci_hcd: connection closed [ 110.217835][ T5812] vhci_hcd: connection closed [ 110.229309][ T5808] vhci_hcd: connection closed [ 110.242034][ T5810] vhci_hcd: connection closed [ 110.271355][ T5806] vhci_hcd: connection closed [ 110.271655][ T5803] vhci_hcd: connection reset by peer [ 110.309073][ T5821] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4'. [ 110.323539][ T1468] vhci_hcd vhci_hcd.0: stop threads [ 110.326225][ T1468] vhci_hcd vhci_hcd.0: release socket [ 110.362202][ T1468] vhci_hcd vhci_hcd.0: disconnect device [ 110.363549][ T1468] vhci_hcd vhci_hcd.0: stop threads [ 110.363574][ T1468] vhci_hcd vhci_hcd.0: release socket [ 110.389299][ T1468] vhci_hcd vhci_hcd.0: disconnect device [ 110.405244][ T1468] vhci_hcd vhci_hcd.0: stop threads [ 110.405273][ T1468] vhci_hcd vhci_hcd.0: release socket [ 110.424601][ T1468] vhci_hcd vhci_hcd.0: disconnect device [ 110.436962][ T1468] vhci_hcd vhci_hcd.0: stop threads [ 110.436991][ T1468] vhci_hcd vhci_hcd.0: release socket [ 110.456966][ T1468] vhci_hcd vhci_hcd.0: disconnect device [ 110.467591][ T1468] vhci_hcd vhci_hcd.0: stop threads [ 110.467622][ T1468] vhci_hcd vhci_hcd.0: release socket [ 110.467705][ T1468] vhci_hcd vhci_hcd.0: disconnect device [ 110.468143][ T1468] vhci_hcd vhci_hcd.0: stop threads [ 110.468159][ T1468] vhci_hcd vhci_hcd.0: release socket [ 110.468239][ T1468] vhci_hcd vhci_hcd.0: disconnect device [ 110.468553][ T1468] vhci_hcd vhci_hcd.0: stop threads [ 110.468568][ T1468] vhci_hcd vhci_hcd.0: release socket [ 110.468604][ T1468] vhci_hcd vhci_hcd.0: disconnect device [ 111.503033][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.619068][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.619091][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.637029][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.739611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.759613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.769617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.779616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.789635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.799611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.809608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.819610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.829608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.839611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.992941][ T1463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.066848][ T1463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.145706][ T1463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.170832][ T1463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.170910][ T1463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.170937][ T1463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.526967][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.526988][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.018938][ T5743] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 115.226858][ T2299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.226878][ T2299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.276261][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.276284][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.241040][ T1463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.241063][ T1463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.527094][ T5841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'. [ 117.388222][ T5849] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 119.144679][ T5869] [U] ^A [ 120.015441][ T5876] FAULT_INJECTION: forcing a failure. [ 120.015441][ T5876] name failslab, interval 1, probability 0, space 0, times 1 [ 120.015498][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.015528][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.015550][ T5876] Call Trace: [ 120.015558][ T5876] [ 120.015567][ T5876] dump_stack_lvl+0xe8/0x150 [ 120.015619][ T5876] should_fail_ex+0x467/0x600 [ 120.015660][ T5876] should_failslab+0xa8/0x100 [ 120.015724][ T5876] kmem_cache_alloc_node_noprof+0xae/0x670 [ 120.015750][ T5876] ? __alloc_skb+0x1d7/0x7a0 [ 120.015772][ T5876] ? __alloc_skb+0x1d7/0x7a0 [ 120.015802][ T5876] __alloc_skb+0x1d7/0x7a0 [ 120.015829][ T5876] netlink_sendmsg+0x5d4/0xb40 [ 120.015858][ T5876] ? lockdep_unlock+0x5d/0xd0 [ 120.015887][ T5876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.015917][ T5876] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 120.015958][ T5876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.015984][ T5876] sock_sendmsg_nosec+0x13a/0x180 [ 120.016022][ T5876] ____sys_sendmsg+0x565/0x870 [ 120.016049][ T5876] ? __might_fault+0xaf/0x130 [ 120.016079][ T5876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.016117][ T5876] ? import_iovec+0x73/0xa0 [ 120.016147][ T5876] ___sys_sendmsg+0x2a5/0x360 [ 120.016206][ T5876] ? __lock_acquire+0x683/0x2ce0 [ 120.016235][ T5876] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.016298][ T5876] ? __fget_files+0x2a/0x420 [ 120.016322][ T5876] ? __fget_files+0x3a8/0x420 [ 120.016356][ T5876] __x64_sys_sendmsg+0x1b7/0x290 [ 120.016387][ T5876] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.016432][ T5876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.016460][ T5876] do_syscall_64+0x174/0x580 [ 120.016479][ T5876] ? trace_irq_disable+0x3b/0x140 [ 120.016494][ T5876] ? clear_bhb_loop+0x40/0x90 [ 120.016513][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.016529][ T5876] RIP: 0033:0x7f169fd3de99 [ 120.016549][ T5876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.016562][ T5876] RSP: 002b:00007f169df96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.016584][ T5876] RAX: ffffffffffffffda RBX: 00007f169ffc5fa0 RCX: 00007f169fd3de99 [ 120.016595][ T5876] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 120.016605][ T5876] RBP: 00007f169df96090 R08: 0000000000000000 R09: 0000000000000000 [ 120.016614][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.016623][ T5876] R13: 00007f169ffc6038 R14: 00007f169ffc5fa0 R15: 00007ffeb93e17b8 [ 120.016646][ T5876] [ 121.104025][ T5882] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 121.339160][ T5883] process 'syz.1.17' launched './file1' with NULL argv: empty string added [ 121.557531][ T5887] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18'. [ 123.054796][ T5895] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 123.054817][ T5895] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 123.054937][ T5895] vhci_hcd vhci_hcd.0: Device attached [ 123.164621][ T5895] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 123.164643][ T5895] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 123.164714][ T5895] vhci_hcd vhci_hcd.0: Device attached [ 123.185787][ T5899] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 123.185849][ T5899] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 123.186044][ T5899] vhci_hcd vhci_hcd.0: Device attached [ 123.207379][ T5905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 123.238012][ T5902] vhci_hcd: connection closed [ 123.241716][ T5901] vhci_hcd: connection closed [ 123.244459][ T1024] vhci_hcd vhci_hcd.1: stop threads [ 123.244478][ T1024] vhci_hcd vhci_hcd.1: release socket [ 123.244507][ T1024] vhci_hcd vhci_hcd.1: disconnect device [ 123.245040][ T1024] vhci_hcd vhci_hcd.1: stop threads [ 123.245052][ T1024] vhci_hcd vhci_hcd.1: release socket [ 123.245077][ T1024] vhci_hcd vhci_hcd.1: disconnect device [ 123.302237][ T5896] vhci_hcd: connection closed [ 123.322220][ T1468] vhci_hcd vhci_hcd.1: stop threads [ 123.322257][ T1468] vhci_hcd vhci_hcd.1: release socket [ 123.322298][ T1468] vhci_hcd vhci_hcd.1: disconnect device [ 123.951493][ T1247] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 123.951537][ T1247] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 123.951563][ T1247] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 123.951587][ T1247] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 123.951611][ T1247] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 123.951636][ T1247] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 123.951660][ T1247] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 123.951684][ T1247] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 123.951709][ T1247] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 123.951734][ T1247] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 125.764252][ T1247] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 126.751656][ T5921] fido_id[5921]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.661653][ T5934] FAULT_INJECTION: forcing a failure. [ 127.661653][ T5934] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.661683][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.1.29 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.661702][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.661712][ T5934] Call Trace: [ 127.661718][ T5934] [ 127.661725][ T5934] dump_stack_lvl+0xe8/0x150 [ 127.661758][ T5934] should_fail_ex+0x467/0x600 [ 127.661790][ T5934] _copy_from_user+0x2d/0xb0 [ 127.661814][ T5934] __copy_msghdr+0x390/0x590 [ 127.661840][ T5934] ___sys_sendmsg+0x213/0x360 [ 127.661860][ T5934] ? __lock_acquire+0x683/0x2ce0 [ 127.661883][ T5934] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.661908][ T5934] ? kstrtouint+0x6e/0xe0 [ 127.661956][ T5934] ? __fget_files+0x2a/0x420 [ 127.661975][ T5934] ? __fget_files+0x3a8/0x420 [ 127.662000][ T5934] __sys_sendmmsg+0x279/0x4d0 [ 127.662026][ T5934] ? __pfx___sys_sendmmsg+0x10/0x10 [ 127.662056][ T5934] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 127.662098][ T5934] ? ksys_write+0x248/0x270 [ 127.662123][ T5934] ? __pfx_ksys_write+0x10/0x10 [ 127.662156][ T5934] __x64_sys_sendmmsg+0xa0/0xc0 [ 127.662183][ T5934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.662205][ T5934] do_syscall_64+0x174/0x580 [ 127.662236][ T5934] ? trace_irq_disable+0x3b/0x140 [ 127.662258][ T5934] ? clear_bhb_loop+0x40/0x90 [ 127.662285][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.662307][ T5934] RIP: 0033:0x7f30ea48de99 [ 127.662326][ T5934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.662344][ T5934] RSP: 002b:00007f30e86e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.662367][ T5934] RAX: ffffffffffffffda RBX: 00007f30ea715fa0 RCX: 00007f30ea48de99 [ 127.662385][ T5934] RDX: 0000000000000001 RSI: 0000200000003240 RDI: 0000000000000003 [ 127.662399][ T5934] RBP: 00007f30e86e6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.662413][ T5934] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 127.662426][ T5934] R13: 00007f30ea716038 R14: 00007f30ea715fa0 R15: 00007fffd1468008 [ 127.662459][ T5934] [ 128.212699][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.28'. [ 128.928071][ T5743] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.981406][ T5944] syz.2.31 (5944) used greatest stack depth: 18512 bytes left [ 130.124697][ T5939] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 130.772291][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.892978][ T5743] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 130.893022][ T5743] usb 5-1: can't read configurations, error -71 [ 131.439370][ T5957] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 131.872686][ T5961] FAULT_INJECTION: forcing a failure. [ 131.872686][ T5961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.872724][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.872748][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.872761][ T5961] Call Trace: [ 131.872769][ T5961] [ 131.872778][ T5961] dump_stack_lvl+0xe8/0x150 [ 131.872818][ T5961] should_fail_ex+0x467/0x600 [ 131.872859][ T5961] _copy_from_iter+0x1d3/0x1660 [ 131.872886][ T5961] ? __pfx__copy_from_iter+0x10/0x10 [ 131.872904][ T5961] ? trace_kmalloc+0x2a/0xf0 [ 131.872923][ T5961] ? __kmalloc_noprof+0x43b/0x780 [ 131.872940][ T5961] ? kernfs_fop_write_iter+0x158/0x540 [ 131.872968][ T5961] kernfs_fop_write_iter+0x19b/0x540 [ 131.872994][ T5961] vfs_write+0x61e/0xbb0 [ 131.873020][ T5961] ? __pfx_vfs_write+0x10/0x10 [ 131.873042][ T5961] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 131.873061][ T5961] ? lockdep_hardirqs_on+0x7a/0x110 [ 131.873110][ T5961] ? mutex_lock_nested+0x152/0x1d0 [ 131.873145][ T5961] ? fdget_pos+0x252/0x320 [ 131.873172][ T5961] ksys_write+0x156/0x270 [ 131.873195][ T5961] ? __pfx_ksys_write+0x10/0x10 [ 131.873221][ T5961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.873238][ T5961] do_syscall_64+0x174/0x580 [ 131.873256][ T5961] ? trace_irq_disable+0x3b/0x140 [ 131.873272][ T5961] ? clear_bhb_loop+0x40/0x90 [ 131.873311][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.873333][ T5961] RIP: 0033:0x7f169fd3de99 [ 131.873353][ T5961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.873370][ T5961] RSP: 002b:00007f169df96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.873391][ T5961] RAX: ffffffffffffffda RBX: 00007f169ffc5fa0 RCX: 00007f169fd3de99 [ 131.873405][ T5961] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000009 [ 131.873417][ T5961] RBP: 00007f169df96090 R08: 0000000000000000 R09: 0000000000000000 [ 131.873429][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.873440][ T5961] R13: 00007f169ffc6038 R14: 00007f169ffc5fa0 R15: 00007ffeb93e17b8 [ 131.873474][ T5961] [ 132.255580][ T5964] ip6gre1: entered promiscuous mode [ 132.255609][ T5964] ip6gre1: entered allmulticast mode [ 132.451291][ T5800] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.599723][ T5800] usb 2-1: Using ep0 maxpacket: 32 [ 132.620046][ T5800] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 132.620075][ T5800] usb 2-1: config 0 has no interface number 0 [ 132.620135][ T5800] usb 2-1: config 0 interface 12 has no altsetting 0 [ 132.628959][ T5800] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 132.628989][ T5800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.629008][ T5800] usb 2-1: Product: syz [ 132.629022][ T5800] usb 2-1: Manufacturer: syz [ 132.629036][ T5800] usb 2-1: SerialNumber: syz [ 132.783843][ T5800] usb 2-1: config 0 descriptor?? [ 133.058796][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.058993][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.887861][ T5800] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 133.887910][ T5800] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 133.887923][ T5800] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 133.887994][ T5800] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 134.042681][ T5800] usb 2-1: USB disconnect, device number 2 [ 136.596579][ T6004] FAULT_INJECTION: forcing a failure. [ 136.596579][ T6004] name failslab, interval 1, probability 0, space 0, times 0 [ 136.596614][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 136.596638][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.596651][ T6004] Call Trace: [ 136.596658][ T6004] [ 136.596667][ T6004] dump_stack_lvl+0xe8/0x150 [ 136.596709][ T6004] should_fail_ex+0x467/0x600 [ 136.596750][ T6004] should_failslab+0xa8/0x100 [ 136.596780][ T6004] kmem_cache_alloc_node_noprof+0xae/0x670 [ 136.596806][ T6004] ? __alloc_skb+0x1d7/0x7a0 [ 136.596827][ T6004] ? __alloc_skb+0x1d7/0x7a0 [ 136.596862][ T6004] __alloc_skb+0x1d7/0x7a0 [ 136.596891][ T6004] netlink_sendmsg+0x5d4/0xb40 [ 136.596929][ T6004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.596968][ T6004] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 136.597003][ T6004] ? __kernel_text_address+0xd/0x30 [ 136.597031][ T6004] ? unwind_get_return_address+0x4d/0x90 [ 136.597060][ T6004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.597087][ T6004] sock_sendmsg_nosec+0x13a/0x180 [ 136.597125][ T6004] ____sys_sendmsg+0x565/0x870 [ 136.597152][ T6004] ? __might_fault+0xaf/0x130 [ 136.597183][ T6004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.597221][ T6004] ? import_iovec+0x73/0xa0 [ 136.597252][ T6004] ___sys_sendmsg+0x2a5/0x360 [ 136.597278][ T6004] ? __lock_acquire+0x683/0x2ce0 [ 136.597307][ T6004] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.597372][ T6004] ? __fget_files+0x2a/0x420 [ 136.597396][ T6004] ? __fget_files+0x3a8/0x420 [ 136.597431][ T6004] __x64_sys_sendmsg+0x1b7/0x290 [ 136.597462][ T6004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.597507][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.597543][ T6004] do_syscall_64+0x174/0x580 [ 136.597570][ T6004] ? trace_irq_disable+0x3b/0x140 [ 136.597592][ T6004] ? clear_bhb_loop+0x40/0x90 [ 136.597620][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.597643][ T6004] RIP: 0033:0x7f30ea48de99 [ 136.597663][ T6004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.597681][ T6004] RSP: 002b:00007f30e86e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.597703][ T6004] RAX: ffffffffffffffda RBX: 00007f30ea715fa0 RCX: 00007f30ea48de99 [ 136.597719][ T6004] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 136.597732][ T6004] RBP: 00007f30e86e6090 R08: 0000000000000000 R09: 0000000000000000 [ 136.597745][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.597757][ T6004] R13: 00007f30ea716038 R14: 00007f30ea715fa0 R15: 00007fffd1468008 [ 136.597789][ T6004] [ 137.294129][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.50'. [ 137.294197][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.50'. [ 137.383364][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 137.606622][ T6002] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 138.358037][ T6023] ip6gre1: entered promiscuous mode [ 138.358063][ T6023] ip6gre1: entered allmulticast mode [ 139.265917][ T6028] ALSA: mixer_oss: invalid OSS volume '' [ 139.266691][ T6028] ALSA: mixer_oss: invalid OSS volume 'üÄ6q.Xí%ç!:ðZZÓýÉ(ð/=ºÑ>fî½¢' [ 140.363410][ T6030] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 141.228436][ T6038] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 141.275512][ T6038] VFS: Can't find a romfs filesystem on dev nullb0. [ 141.275512][ T6038] [ 142.305203][ T6041] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.697588][ T5856] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 147.157652][ T6045] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 147.169892][ T6045] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 147.175766][ T6045] vhci_hcd vhci_hcd.0: Device attached [ 147.330905][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 147.561039][ T6053] vhci_hcd: connection closed [ 147.565767][ T157] vhci_hcd vhci_hcd.1: stop threads [ 147.565798][ T157] vhci_hcd vhci_hcd.1: release socket [ 147.565877][ T157] vhci_hcd vhci_hcd.1: disconnect device [ 147.577252][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.577334][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.577569][ T5856] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 147.577628][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.065352][ T5856] usb 3-1: config 0 descriptor?? [ 148.225758][ T5856] usb 3-1: can't set config #0, error -71 [ 148.396658][ T5856] usb 3-1: USB disconnect, device number 2 [ 148.486481][ T6051] Zero length message leads to an empty skb [ 150.196760][ T6072] [U] ^A [ 150.376795][ T6075] Illegal XDP return value 4294967201 on prog (id 18) dev syz_tun, expect packet loss! [ 150.553143][ T37] audit: type=1804 audit(1785012797.212:2): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.66" name="/newroot/14/file0" dev="tmpfs" ino=93 res=1 errno=0 [ 151.283259][ T6070] ref_ctr increment failed for inode: 0x5d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803747ec00 [ 151.337165][ T6075] uprobe: syz.0.66:6075 failed to unregister, leaking uprobe [ 151.425915][ T37] audit: type=1800 audit(1785012798.152:3): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.68" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 151.428722][ T6083] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 151.428763][ T6083] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 151.428783][ T6083] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 151.678231][ T6079] netlink: 'syz.2.69': attribute type 1 has an invalid length. [ 152.119976][ T198] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 152.284561][ T198] usb 1-1: Using ep0 maxpacket: 16 [ 152.336579][ T198] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 152.336613][ T198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.336634][ T198] usb 1-1: Product: syz [ 152.336648][ T198] usb 1-1: Manufacturer: syz [ 152.336663][ T198] usb 1-1: SerialNumber: syz [ 152.545610][ T198] usb 1-1: config 0 descriptor?? [ 152.634497][ T198] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 153.109962][ T198] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 153.184324][ T198] usb 1-1: USB disconnect, device number 2 [ 153.475506][ T6074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.475533][ T6074] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 154.426998][ T6074] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.427024][ T6074] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 154.550317][ T5800] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 154.719914][ T5800] usb 4-1: Using ep0 maxpacket: 8 [ 154.743544][ T5800] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 154.743566][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.743580][ T5800] usb 4-1: Product: syz [ 154.743591][ T5800] usb 4-1: Manufacturer: syz [ 154.743601][ T5800] usb 4-1: SerialNumber: syz [ 154.886264][ T5800] usb 4-1: config 0 descriptor?? [ 154.900193][ T6115] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 155.071206][ T6074] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.071231][ T6074] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 155.222393][ T5800] gspca_main: se401-2.14.0 probing 047d:5003 [ 155.477635][ T6074] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.477705][ T6074] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 155.830047][ T6074] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.830127][ T6074] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 155.955884][ T5800] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 157.424548][ T6126] netlink: 'syz.0.77': attribute type 1 has an invalid length. [ 157.622584][ T5800] usb 4-1: USB disconnect, device number 2 [ 161.388441][ T6162] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.395156][ T6169] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 163.310858][ T6178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.88'. [ 165.558007][ T6207] FAULT_INJECTION: forcing a failure. [ 165.558007][ T6207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.558034][ T6207] CPU: 0 UID: 0 PID: 6207 Comm: syz.2.92 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.558052][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.558062][ T6207] Call Trace: [ 165.558068][ T6207] [ 165.558074][ T6207] dump_stack_lvl+0xe8/0x150 [ 165.558104][ T6207] should_fail_ex+0x467/0x600 [ 165.558133][ T6207] _copy_from_user+0x2d/0xb0 [ 165.558153][ T6207] sctp_getsockopt_encap_port+0x111/0x450 [ 165.558175][ T6207] ? __pfx_sctp_getsockopt_encap_port+0x10/0x10 [ 165.558207][ T6207] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 165.558230][ T6207] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.558252][ T6207] sctp_getsockopt+0xa15/0xb90 [ 165.558270][ T6207] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 165.558297][ T6207] do_sock_getsockopt+0x51d/0x7e0 [ 165.558320][ T6207] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 165.558355][ T6207] ? __fget_files+0x3a8/0x420 [ 165.558371][ T6207] ? __fget_files+0x2a/0x420 [ 165.558393][ T6207] __x64_sys_getsockopt+0x1aa/0x250 [ 165.558416][ T6207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.558433][ T6207] do_syscall_64+0x174/0x580 [ 165.558451][ T6207] ? trace_irq_disable+0x3b/0x140 [ 165.558466][ T6207] ? clear_bhb_loop+0x40/0x90 [ 165.558485][ T6207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.558501][ T6207] RIP: 0033:0x7f4c322ade99 [ 165.558516][ T6207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.558528][ T6207] RSP: 002b:00007f4c30506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 165.558544][ T6207] RAX: ffffffffffffffda RBX: 00007f4c32535fa0 RCX: 00007f4c322ade99 [ 165.558556][ T6207] RDX: 0000000000000084 RSI: 0000000000000084 RDI: 0000000000000003 [ 165.558565][ T6207] RBP: 00007f4c30506090 R08: 0000200000000000 R09: 0000000000000000 [ 165.558575][ T6207] R10: 00002000000022c0 R11: 0000000000000246 R12: 0000000000000001 [ 165.558584][ T6207] R13: 00007f4c32536038 R14: 00007f4c32535fa0 R15: 00007ffe365c8198 [ 165.558608][ T6207] [ 166.535245][ T6221] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.935516][ T6230] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 167.950533][ T6230] VFS: Can't find a romfs filesystem on dev nullb0. [ 167.950533][ T6230] [ 170.875943][ T6246] netlink: 44 bytes leftover after parsing attributes in process `syz.3.101'. [ 172.044177][ T6251] [U] ^A [ 173.679337][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.726887][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.741932][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.015815][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.048994][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.126388][ T6273] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.299201][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.318996][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.328018][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.329343][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.356303][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.722698][ T6282] netlink: 44 bytes leftover after parsing attributes in process `syz.1.106'. [ 175.448493][ T6291] FAULT_INJECTION: forcing a failure. [ 175.448493][ T6291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.448531][ T6291] CPU: 0 UID: 0 PID: 6291 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 175.448555][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 175.448569][ T6291] Call Trace: [ 175.448577][ T6291] [ 175.448586][ T6291] dump_stack_lvl+0xe8/0x150 [ 175.448630][ T6291] should_fail_ex+0x467/0x600 [ 175.448672][ T6291] _copy_to_user+0x31/0xb0 [ 175.448701][ T6291] simple_read_from_buffer+0xe1/0x170 [ 175.448731][ T6291] proc_fail_nth_read+0x1be/0x230 [ 175.448753][ T6291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.448774][ T6291] ? rw_verify_area+0x250/0x4d0 [ 175.448796][ T6291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.448822][ T6291] vfs_read+0x219/0xa90 [ 175.448850][ T6291] ? __pfx_vfs_read+0x10/0x10 [ 175.448873][ T6291] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 175.448893][ T6291] ? lockdep_hardirqs_on+0x7a/0x110 [ 175.448913][ T6291] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 175.448931][ T6291] ? mutex_lock_nested+0x152/0x1d0 [ 175.448955][ T6291] ? fdget_pos+0x252/0x320 [ 175.448980][ T6291] ksys_read+0x156/0x270 [ 175.449003][ T6291] ? __pfx_ksys_read+0x10/0x10 [ 175.449031][ T6291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.449049][ T6291] do_syscall_64+0x174/0x580 [ 175.449069][ T6291] ? trace_irq_disable+0x3b/0x140 [ 175.449086][ T6291] ? clear_bhb_loop+0x40/0x90 [ 175.449106][ T6291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.449123][ T6291] RIP: 0033:0x7f4c3226e6ce [ 175.449139][ T6291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 175.449152][ T6291] RSP: 002b:00007f4c30505fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.449169][ T6291] RAX: ffffffffffffffda RBX: 00007f4c305066c0 RCX: 00007f4c3226e6ce [ 175.449182][ T6291] RDX: 000000000000000f RSI: 00007f4c305060a0 RDI: 0000000000000004 [ 175.449192][ T6291] RBP: 00007f4c30506090 R08: 0000000000000000 R09: 0000000000000000 [ 175.449202][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.449211][ T6291] R13: 00007f4c32536038 R14: 00007f4c32535fa0 R15: 00007ffe365c8198 [ 175.449237][ T6291] [ 176.386787][ T5614] Bluetooth: hci5: command tx timeout [ 178.461427][ T5614] Bluetooth: hci5: command tx timeout [ 178.799353][ T6314] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 178.811249][ T6314] VFS: Can't find a romfs filesystem on dev nullb0. [ 178.811249][ T6314] [ 180.540194][ T5614] Bluetooth: hci5: command tx timeout [ 181.570010][ T6334] [U] ^A [ 182.005545][ T157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.671740][ T5614] Bluetooth: hci5: command tx timeout [ 182.874829][ T6352] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 182.885764][ T6352] VFS: Can't find a romfs filesystem on dev nullb0. [ 182.885764][ T6352] [ 184.841385][ T5718] hid_parser_main: 7 callbacks suppressed [ 184.841410][ T5718] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 184.841440][ T5718] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 184.841467][ T5718] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 184.841500][ T5718] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 184.841525][ T5718] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 184.841550][ T5718] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 184.841577][ T5718] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 184.841603][ T5718] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 184.841628][ T5718] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 184.841660][ T5718] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 185.011837][ T6358] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 185.264849][ T5718] hid-generic 0006:0004:0009.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 186.424470][ T6379] fido_id[6379]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 187.514034][ T6393] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.009217][ T157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.442892][ T6412] ubi3: attaching mtd0 [ 189.549053][ T157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.849739][ T5856] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 189.999655][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 190.002066][ T5856] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.002099][ T5856] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.002122][ T5856] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 190.002150][ T5856] usb 1-1: config 0 interface 0 has no altsetting 0 [ 190.002185][ T5856] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 190.002216][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.403931][ T5856] usb 1-1: config 0 descriptor?? [ 190.571022][ T5856] usbhid 1-1:0.0: can't add hid device: -22 [ 190.571110][ T5856] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 190.658191][ T5856] usb 1-1: USB disconnect, device number 3 [ 190.953859][ T157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.002985][ T6425] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 194.009858][ T6445] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 194.019210][ T6445] VFS: Can't find a romfs filesystem on dev nullb0. [ 194.019210][ T6445] [ 194.570409][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.570482][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.531351][ T6455] FAULT_INJECTION: forcing a failure. [ 195.531351][ T6455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.531376][ T6455] CPU: 0 UID: 0 PID: 6455 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.531393][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 195.531403][ T6455] Call Trace: [ 195.531409][ T6455] [ 195.531415][ T6455] dump_stack_lvl+0xe8/0x150 [ 195.531444][ T6455] should_fail_ex+0x467/0x600 [ 195.531473][ T6455] _copy_to_user+0x31/0xb0 [ 195.531495][ T6455] simple_read_from_buffer+0xe1/0x170 [ 195.531516][ T6455] proc_fail_nth_read+0x1be/0x230 [ 195.531536][ T6455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.531556][ T6455] ? rw_verify_area+0x250/0x4d0 [ 195.531586][ T6455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.531602][ T6455] vfs_read+0x219/0xa90 [ 195.531628][ T6455] ? __pfx_vfs_read+0x10/0x10 [ 195.531649][ T6455] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 195.531668][ T6455] ? lockdep_hardirqs_on+0x7a/0x110 [ 195.531686][ T6455] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 195.531704][ T6455] ? mutex_lock_nested+0x152/0x1d0 [ 195.531727][ T6455] ? fdget_pos+0x252/0x320 [ 195.531757][ T6455] ksys_read+0x156/0x270 [ 195.531779][ T6455] ? __pfx_ksys_read+0x10/0x10 [ 195.531805][ T6455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.531822][ T6455] do_syscall_64+0x174/0x580 [ 195.531840][ T6455] ? trace_irq_disable+0x3b/0x140 [ 195.531856][ T6455] ? clear_bhb_loop+0x40/0x90 [ 195.531875][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.531890][ T6455] RIP: 0033:0x7f169fcfe6ce [ 195.531904][ T6455] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.531917][ T6455] RSP: 002b:00007f169df95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.531933][ T6455] RAX: ffffffffffffffda RBX: 00007f169df966c0 RCX: 00007f169fcfe6ce [ 195.531944][ T6455] RDX: 000000000000000f RSI: 00007f169df960a0 RDI: 0000000000000005 [ 195.531953][ T6455] RBP: 00007f169df96090 R08: 0000000000000000 R09: 0000000000000000 [ 195.531963][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.531971][ T6455] R13: 00007f169ffc6038 R14: 00007f169ffc5fa0 R15: 00007ffeb93e17b8 [ 195.531996][ T6455] [ 200.207436][ T6488] netlink: 'syz.1.149': attribute type 1 has an invalid length. [ 200.296042][ T157] bridge_slave_1: left allmulticast mode [ 200.296158][ T157] bridge_slave_1: left promiscuous mode [ 200.309957][ T1247] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 200.343902][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.519660][ T1247] usb 3-1: Using ep0 maxpacket: 16 [ 200.525005][ T1247] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 200.525036][ T1247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.525056][ T1247] usb 3-1: Product: syz [ 200.525071][ T1247] usb 3-1: Manufacturer: syz [ 200.525086][ T1247] usb 3-1: SerialNumber: syz [ 200.540113][ T1247] usb 3-1: config 0 descriptor?? [ 200.600251][ T1247] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 200.645984][ T157] bridge_slave_0: left allmulticast mode [ 200.646014][ T157] bridge_slave_0: left promiscuous mode [ 200.647523][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.776027][ T1247] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 200.827511][ T1247] usb 3-1: USB disconnect, device number 3 [ 200.893427][ T822] hid_parser_main: 7 callbacks suppressed [ 200.893452][ T822] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.893482][ T822] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.893508][ T822] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.893533][ T822] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.893558][ T822] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.893584][ T822] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.893609][ T822] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.893635][ T822] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.893659][ T822] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.893684][ T822] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 201.061662][ T822] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 201.125688][ T6501] fido_id[6501]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.709783][ T6509] netlink: 76 bytes leftover after parsing attributes in process `syz.1.156'. [ 202.608714][ T5856] hid-generic 0006:0004:0009.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 202.835616][ T6515] fido_id[6515]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.650452][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.710444][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.754792][ T157] bond0 (unregistering): Released all slaves [ 204.005783][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 204.444017][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.447359][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.447598][ T6218] bridge_slave_0: entered allmulticast mode [ 204.474068][ T6218] bridge_slave_0: entered promiscuous mode [ 204.481435][ T6218] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.481924][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.482183][ T6218] bridge_slave_1: entered allmulticast mode [ 204.554036][ T6218] bridge_slave_1: entered promiscuous mode [ 205.261019][ T6540] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 205.261683][ T6540] VFS: Can't find a romfs filesystem on dev nullb0. [ 205.261683][ T6540] [ 205.576312][ T6218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.627819][ T6218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.105806][ T6548] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 206.760925][ T5822] hid_parser_main: 24 callbacks suppressed [ 206.760947][ T5822] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 206.760972][ T5822] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 206.760993][ T5822] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 206.761013][ T5822] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 206.761034][ T5822] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 206.761054][ T5822] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 206.761074][ T5822] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 206.761095][ T5822] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 206.761115][ T5822] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 206.761136][ T5822] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 206.984427][ T5822] hid-generic 0006:0004:0009.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 207.031769][ T6218] team0: Port device team_slave_0 added [ 207.056837][ T6218] team0: Port device team_slave_1 added [ 207.131679][ T6556] fido_id[6556]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.474197][ T6567] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 208.480626][ T6567] VFS: Can't find a romfs filesystem on dev nullb0. [ 208.480626][ T6567] [ 209.274906][ T6580] netlink: 152 bytes leftover after parsing attributes in process `syz.2.168'. [ 209.855524][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 209.881689][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.881704][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.881724][ T6218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.056027][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.056044][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.056070][ T6218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.461485][ T6218] hsr_slave_0: entered promiscuous mode [ 210.462715][ T6218] hsr_slave_1: entered promiscuous mode [ 210.463554][ T6218] debugfs: 'hsr0' already exists in 'hsr' [ 210.463574][ T6218] Cannot create hsr debugfs directory [ 210.805686][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.174'. [ 212.680873][ T6626] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 212.685599][ T6626] VFS: Can't find a romfs filesystem on dev nullb0. [ 212.685599][ T6626] [ 214.118263][ T6633] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 214.209347][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 214.525151][ T6644] netlink: 40 bytes leftover after parsing attributes in process `syz.3.182'. [ 214.958757][ T5822] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 215.259730][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 215.435885][ T5822] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 215.435925][ T5822] usb 4-1: config 0 has no interface number 0 [ 215.608254][ T5822] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 215.608286][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.608315][ T5822] usb 4-1: Product: syz [ 215.608330][ T5822] usb 4-1: Manufacturer: syz [ 215.608346][ T5822] usb 4-1: SerialNumber: syz [ 215.876222][ T5822] usb 4-1: config 0 descriptor?? [ 216.257148][ T6659] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 216.313554][ T157] hsr_slave_0: left promiscuous mode [ 216.363697][ T157] hsr_slave_1: left promiscuous mode [ 216.402747][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.402864][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.430455][ T5822] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 216.430487][ T5822] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 216.639370][ T5822] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 216.687387][ T5822] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 216.820317][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.820355][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.421939][ T157] veth1_macvtap: left promiscuous mode [ 217.422133][ T157] veth0_macvtap: left promiscuous mode [ 217.442867][ T157] veth1_vlan: left promiscuous mode [ 217.516592][ T157] veth0_vlan: left promiscuous mode [ 218.094445][ T5822] usb 4-1: USB disconnect, device number 3 [ 219.834143][ T6686] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 219.834721][ T6686] VFS: Can't find a romfs filesystem on dev nullb0. [ 219.834721][ T6686] [ 221.458755][ T6691] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 222.478676][ T6689] netlink: 'syz.0.190': attribute type 12 has an invalid length. [ 224.231941][ T157] team0 (unregistering): Port device team_slave_1 removed [ 224.484364][ T157] team0 (unregistering): Port device team_slave_0 removed [ 226.774117][ T6711] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 228.139166][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.162561][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.189702][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.197118][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.198581][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.774335][ T6660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.786208][ T6660] bond1: (slave bond2): making interface the new active one [ 228.791864][ T6660] bond1: (slave bond2): Enslaving as an active interface with an up link [ 228.883162][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 228.900615][ T6715] bridge0: port 3(netdevsim1) entered blocking state [ 228.900886][ T6715] bridge0: port 3(netdevsim1) entered disabled state [ 228.947002][ T6715] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 228.994766][ T6724] netlink: 44 bytes leftover after parsing attributes in process `syz.1.197'. [ 229.277721][ T6715] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 230.301175][ T5614] Bluetooth: hci4: command tx timeout [ 230.420748][ T6715] bridge0: port 3(netdevsim1) entered blocking state [ 230.420936][ T6715] bridge0: port 3(netdevsim1) entered forwarding state [ 232.793645][ T5614] Bluetooth: hci4: command tx timeout [ 234.860046][ T5614] Bluetooth: hci4: command tx timeout [ 236.321457][ T6748] [U] ^A [ 236.940059][ T5614] Bluetooth: hci4: command tx timeout [ 237.192634][ T6761] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 237.192865][ T6761] /dev/nullb0: Can't open blockdev [ 238.007441][ T6779] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 238.008048][ T6779] VFS: Can't find a romfs filesystem on dev nullb0. [ 238.008048][ T6779] [ 239.554662][ T6785] [U] ^A [ 240.385872][ T6793] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 240.395567][ T6793] VFS: Can't find a romfs filesystem on dev nullb0. [ 240.395567][ T6793] [ 242.112075][ T6809] netlink: 44 bytes leftover after parsing attributes in process `syz.1.215'. [ 244.830211][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 245.221153][ T6820] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 246.535875][ T6831] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 247.864315][ T6838] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.909082][ T6854] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 251.525680][ T6864] FAULT_INJECTION: forcing a failure. [ 251.525680][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 251.525732][ T6864] CPU: 0 UID: 0 PID: 6864 Comm: syz.3.224 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.525772][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 251.525786][ T6864] Call Trace: [ 251.525795][ T6864] [ 251.525805][ T6864] dump_stack_lvl+0xe8/0x150 [ 251.525848][ T6864] should_fail_ex+0x467/0x600 [ 251.525887][ T6864] should_failslab+0xa8/0x100 [ 251.525915][ T6864] kmem_cache_alloc_noprof+0xa4/0x650 [ 251.525938][ T6864] ? dst_alloc+0x105/0x170 [ 251.525965][ T6864] ? dst_alloc+0x105/0x170 [ 251.525996][ T6864] ? __pfx_ip6_dst_gc+0x10/0x10 [ 251.526031][ T6864] dst_alloc+0x105/0x170 [ 251.526070][ T6864] ip6_pol_route+0xba1/0x14d0 [ 251.526105][ T6864] ? ip6_pol_route+0x163/0x14d0 [ 251.526153][ T6864] ? __pfx_ip6_pol_route+0x10/0x10 [ 251.526187][ T6864] ? __lock_acquire+0x683/0x2ce0 [ 251.526215][ T6864] ? trace_irq_disable+0x3b/0x140 [ 251.526250][ T6864] fib6_rule_lookup+0x36b/0x730 [ 251.526286][ T6864] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 251.526308][ T6864] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 251.526344][ T6864] ? ip6_route_output_flags+0x2e/0x5d0 [ 251.526369][ T6864] ? ip6_route_output_flags+0x2e/0x5d0 [ 251.526396][ T6864] ? dev_get_by_index_rcu+0xee/0x110 [ 251.526435][ T6864] ip6_route_output_flags+0x364/0x5d0 [ 251.526455][ T6864] ? ip6_route_output_flags+0x2e/0x5d0 [ 251.526480][ T6864] ip6_dst_lookup_tail+0x1a1/0x1610 [ 251.526511][ T6864] ? rt_spin_unlock+0x163/0x200 [ 251.526552][ T6864] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 251.526582][ T6864] ? __pfx_get_random_u32+0x10/0x10 [ 251.526632][ T6864] ip6_dst_lookup_flow+0x89/0x150 [ 251.526661][ T6864] tcp_v6_connect+0xe87/0x1cf0 [ 251.526712][ T6864] ? __pfx_tcp_v6_connect+0x10/0x10 [ 251.526748][ T6864] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 251.526774][ T6864] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.526800][ T6864] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 251.526830][ T6864] __inet_stream_connect+0x258/0xe00 [ 251.526880][ T6864] ? __pfx___inet_stream_connect+0x10/0x10 [ 251.526913][ T6864] ? __local_bh_enable+0x1e1/0x2f0 [ 251.526948][ T6864] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 251.526976][ T6864] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.527009][ T6864] inet_stream_connect+0x66/0xa0 [ 251.527047][ T6864] __sys_connect+0x336/0x470 [ 251.527075][ T6864] ? __pfx___sys_connect+0x10/0x10 [ 251.527095][ T6864] ? kvm_sched_clock_read+0x11/0x20 [ 251.527140][ T6864] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 251.527170][ T6864] ? rcu_is_watching+0x15/0xb0 [ 251.527200][ T6864] ? trace_csd_function_exit+0x81/0x1e0 [ 251.527230][ T6864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.527255][ T6864] __x64_sys_connect+0x7a/0x90 [ 251.527280][ T6864] do_syscall_64+0x174/0x580 [ 251.527309][ T6864] ? clear_bhb_loop+0x40/0x90 [ 251.527336][ T6864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.527357][ T6864] RIP: 0033:0x7fbe17d4de99 [ 251.527376][ T6864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.527393][ T6864] RSP: 002b:00007fbe15f85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 251.527417][ T6864] RAX: ffffffffffffffda RBX: 00007fbe17fd6090 RCX: 00007fbe17d4de99 [ 251.527431][ T6864] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000004 [ 251.527444][ T6864] RBP: 00007fbe15f85090 R08: 0000000000000000 R09: 0000000000000000 [ 251.527456][ T6864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.527467][ T6864] R13: 00007fbe17fd6128 R14: 00007fbe17fd6090 R15: 00007ffcc9e83ac8 [ 251.527503][ T6864] [ 251.924145][ T6874] 9p: Bad value for 'rfdno' [ 253.815665][ T6889] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 254.367645][ T6717] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.367772][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.368008][ T6717] bridge_slave_0: entered allmulticast mode [ 254.403659][ T6717] bridge_slave_0: entered promiscuous mode [ 254.420602][ T6717] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.420720][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.420899][ T6717] bridge_slave_1: entered allmulticast mode [ 254.429268][ T6717] bridge_slave_1: entered promiscuous mode [ 254.534304][ T6717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.550541][ T6717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.593820][ T6892] netlink: 'syz.2.232': attribute type 1 has an invalid length. [ 255.905399][ T6717] team0: Port device team_slave_0 added [ 255.934723][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.934794][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.989257][ T6717] team0: Port device team_slave_1 added [ 256.004978][ T6902] netlink: 44 bytes leftover after parsing attributes in process `syz.3.235'. [ 257.998853][ T6908] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 258.724201][ T6717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.724218][ T6717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.724244][ T6717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.825221][ T6717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.825238][ T6717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.825267][ T6717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.855271][ T6919] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 261.190706][ T6717] hsr_slave_0: entered promiscuous mode [ 261.211295][ T6939] netlink: 'syz.0.243': attribute type 1 has an invalid length. [ 261.217349][ T6717] hsr_slave_1: entered promiscuous mode [ 261.217988][ T6717] debugfs: 'hsr0' already exists in 'hsr' [ 261.218004][ T6717] Cannot create hsr debugfs directory [ 261.931813][ T6950] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 261.936860][ T6950] VFS: Can't find a romfs filesystem on dev nullb0. [ 261.936860][ T6950] [ 262.722695][ T155] bridge_slave_1: left allmulticast mode [ 262.722733][ T155] bridge_slave_1: left promiscuous mode [ 262.722989][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.938578][ T155] bridge_slave_0: left allmulticast mode [ 262.938605][ T155] bridge_slave_0: left promiscuous mode [ 262.938823][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.396683][ T6963] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.299879][ T6970] FAULT_INJECTION: forcing a failure. [ 264.299879][ T6970] name failslab, interval 1, probability 0, space 0, times 0 [ 264.299914][ T6970] CPU: 0 UID: 0 PID: 6970 Comm: syz.0.251 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 264.299937][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 264.299951][ T6970] Call Trace: [ 264.299959][ T6970] [ 264.299968][ T6970] dump_stack_lvl+0xe8/0x150 [ 264.300008][ T6970] should_fail_ex+0x467/0x600 [ 264.300050][ T6970] should_failslab+0xa8/0x100 [ 264.300080][ T6970] __kmalloc_noprof+0xfe/0x780 [ 264.300115][ T6970] ? tomoyo_encode+0x2ad/0x570 [ 264.300143][ T6970] ? tomoyo_encode+0x2ad/0x570 [ 264.300180][ T6970] tomoyo_encode+0x2ad/0x570 [ 264.300216][ T6970] tomoyo_realpath_from_path+0x5fa/0x640 [ 264.300274][ T6970] ? tomoyo_path_number_perm+0x219/0x5f0 [ 264.300300][ T6970] tomoyo_path_number_perm+0x246/0x5f0 [ 264.300329][ T6970] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 264.300353][ T6970] ? __lock_acquire+0x683/0x2ce0 [ 264.300394][ T6970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 264.300419][ T6970] ? hook_file_ioctl+0x1f3/0x600 [ 264.300453][ T6970] ? lockdep_hardirqs_on+0x7a/0x110 [ 264.300499][ T6970] ? __fget_files+0x2a/0x420 [ 264.300526][ T6970] ? __fget_files+0x2a/0x420 [ 264.300548][ T6970] ? __fget_files+0x3a8/0x420 [ 264.300571][ T6970] ? __fget_files+0x2a/0x420 [ 264.300600][ T6970] security_file_ioctl+0xc3/0x2a0 [ 264.300628][ T6970] __se_sys_ioctl+0x47/0x170 [ 264.300659][ T6970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.300683][ T6970] do_syscall_64+0x174/0x580 [ 264.300709][ T6970] ? trace_irq_disable+0x3b/0x140 [ 264.300730][ T6970] ? clear_bhb_loop+0x40/0x90 [ 264.300758][ T6970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.300781][ T6970] RIP: 0033:0x7f169fd3de99 [ 264.300801][ T6970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.300819][ T6970] RSP: 002b:00007f169df75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.300841][ T6970] RAX: ffffffffffffffda RBX: 00007f169ffc6090 RCX: 00007f169fd3de99 [ 264.300856][ T6970] RDX: 0000200000000140 RSI: 00000000800454e1 RDI: 0000000000000003 [ 264.300869][ T6970] RBP: 00007f169df75090 R08: 0000000000000000 R09: 0000000000000000 [ 264.300882][ T6970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.300894][ T6970] R13: 00007f169ffc6128 R14: 00007f169ffc6090 R15: 00007ffeb93e17b8 [ 264.300929][ T6970] [ 264.300949][ T6970] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.526878][ T6056] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 264.759365][ T6056] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 264.759398][ T6056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.759419][ T6056] usb 3-1: Product: syz [ 264.759434][ T6056] usb 3-1: Manufacturer: syz [ 264.759449][ T6056] usb 3-1: SerialNumber: syz [ 265.044456][ T6962] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 265.049115][ T6962] VFS: Can't find a romfs filesystem on dev nullb0. [ 265.049115][ T6962] [ 266.057028][ T6056] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 266.130676][ T6056] usb 3-1: USB disconnect, device number 4 [ 266.169139][ T6056] usblp0: removed [ 266.671017][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.610550][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.676885][ T155] bond0 (unregistering): Released all slaves [ 268.397616][ T6994] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 268.893112][ T6998] netlink: 44 bytes leftover after parsing attributes in process `syz.1.258'. [ 269.119796][ T155] hsr_slave_0: left promiscuous mode [ 270.070741][ T155] hsr_slave_1: left promiscuous mode [ 270.071797][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.134476][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.564053][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 273.792299][ T155] team0 (unregistering): Port device team_slave_1 removed [ 273.894321][ T155] team0 (unregistering): Port device team_slave_0 removed [ 275.146190][ T7042] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 275.150738][ T7042] VFS: Can't find a romfs filesystem on dev nullb0. [ 275.150738][ T7042] [ 276.654215][ T7053] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 278.556428][ T7070] netlink: 'syz.3.272': attribute type 1 has an invalid length. [ 279.815068][ T7068] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 280.752241][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 280.959647][ T5856] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 281.157146][ T5856] usb 4-1: Using ep0 maxpacket: 16 [ 281.272879][ T7110] netlink: 'syz.1.281': attribute type 1 has an invalid length. [ 281.370249][ T5856] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 281.370544][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 281.370858][ T5856] usb 4-1: New USB device found, idVendor=046d, idProduct=c08d, bcdDevice= 0.00 [ 281.370969][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.881130][ T5856] usb 4-1: config 0 descriptor?? [ 282.388039][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.389770][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.686352][ T5856] logitech-hidpp-device 0003:046D:C08D.0006: unexpected long global item [ 282.687146][ T5856] logitech-hidpp-device 0003:046D:C08D.0006: hidpp_probe:parse failed [ 282.687227][ T5856] logitech-hidpp-device 0003:046D:C08D.0006: probe with driver logitech-hidpp-device failed with error -22 [ 282.955253][ T5856] usb 4-1: USB disconnect, device number 4 [ 284.775615][ T7140] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 285.352591][ T7151] netlink: 44 bytes leftover after parsing attributes in process `syz.0.289'. [ 286.751570][ T7166] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 287.161119][ T7162] netlink: 'syz.1.291': attribute type 1 has an invalid length. [ 288.111643][ T7172] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 288.705352][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.747144][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.798268][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.826493][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.848830][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.940549][ T5614] Bluetooth: hci5: command tx timeout [ 291.249646][ T7233] netlink: 'syz.2.304': attribute type 1 has an invalid length. [ 291.859717][ T5822] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 292.020987][ T5822] usb 1-1: not running at top speed; connect to a high speed hub [ 292.022074][ T5822] usb 1-1: config 8 has an invalid interface number: 130 but max is 0 [ 292.022093][ T5822] usb 1-1: config 8 has no interface number 0 [ 292.022124][ T5822] usb 1-1: config 8 interface 130 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 292.022143][ T5822] usb 1-1: config 8 interface 130 has no altsetting 0 [ 292.026407][ T5822] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0119, bcdDevice=8c.18 [ 292.026428][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.026442][ T5822] usb 1-1: Product: syz [ 292.026452][ T5822] usb 1-1: Manufacturer: syz [ 292.026463][ T5822] usb 1-1: SerialNumber: syz [ 292.124646][ T7228] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 292.157971][ T5822] kvaser_usb 1-1:8.130: error -ENODEV: Cannot get usb endpoint(s) [ 292.997489][ T5822] usb 1-1: USB disconnect, device number 4 [ 293.031416][ T5614] Bluetooth: hci5: command tx timeout [ 295.102014][ T5614] Bluetooth: hci5: command tx timeout [ 297.179785][ T5614] Bluetooth: hci5: command tx timeout [ 297.369082][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 297.866457][ T7276] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 297.871852][ T7276] VFS: Can't find a romfs filesystem on dev nullb0. [ 297.871852][ T7276] [ 300.094455][ T7294] ieee802154 phy0 wpan0: encryption failed: -22 [ 303.881507][ T5800] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 305.006427][ T7311] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 305.119759][ T5800] usb 1-1: Using ep0 maxpacket: 16 [ 305.120971][ T5800] usb 1-1: no configurations [ 305.120993][ T5800] usb 1-1: can't read configurations, error -22 [ 305.361035][ T5800] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 305.550996][ T5800] usb 1-1: Using ep0 maxpacket: 16 [ 305.551923][ T5800] usb 1-1: no configurations [ 305.551936][ T5800] usb 1-1: can't read configurations, error -22 [ 305.552362][ T5800] usb usb1-port1: attempt power cycle [ 305.930253][ T5800] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 305.985323][ T5800] usb 1-1: Using ep0 maxpacket: 16 [ 305.986144][ T5800] usb 1-1: no configurations [ 305.986157][ T5800] usb 1-1: can't read configurations, error -22 [ 306.119937][ T5800] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 306.143454][ T5800] usb 1-1: Using ep0 maxpacket: 16 [ 306.145545][ T5800] usb 1-1: no configurations [ 306.145563][ T5800] usb 1-1: can't read configurations, error -22 [ 306.145996][ T5800] usb usb1-port1: unable to enumerate USB device [ 307.139182][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 311.536983][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.537070][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.537254][ T7184] bridge_slave_0: entered allmulticast mode [ 311.564463][ T7184] bridge_slave_0: entered promiscuous mode [ 313.430856][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.430943][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.431126][ T7184] bridge_slave_1: entered allmulticast mode [ 313.592094][ T7184] bridge_slave_1: entered promiscuous mode [ 315.259061][ T7381] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 316.053545][ T7392] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 316.459654][ T822] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 316.540709][ T7184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.607248][ T7184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.618890][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 316.621317][ T822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.621334][ T822] usb 2-1: config 0 has no interfaces? [ 316.652869][ T822] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 316.652898][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.652913][ T822] usb 2-1: Product: syz [ 316.652923][ T822] usb 2-1: Manufacturer: syz [ 316.652933][ T822] usb 2-1: SerialNumber: syz [ 316.743350][ T822] usb 2-1: config 0 descriptor?? [ 317.124039][ T822] usb 2-1: USB disconnect, device number 3 [ 319.272941][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.273013][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.739831][ T2299] bridge_slave_1: left allmulticast mode [ 319.739866][ T2299] bridge_slave_1: left promiscuous mode [ 319.740121][ T2299] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.863386][ T2299] bridge_slave_0: left allmulticast mode [ 320.863412][ T2299] bridge_slave_0: left promiscuous mode [ 320.865156][ T2299] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.463322][ T2299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.636963][ T2299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.733091][ T2299] bond0 (unregistering): Released all slaves [ 328.935588][ T7184] team0: Port device team_slave_0 added [ 328.964127][ T7184] team0: Port device team_slave_1 added [ 332.431808][ T7184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.431826][ T7184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.431853][ T7184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.504914][ T7184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.504931][ T7184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.504957][ T7184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.203931][ T7447] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 333.209178][ T7447] VFS: Can't find a romfs filesystem on dev nullb0. [ 333.209178][ T7447] [ 334.082759][ T2299] hsr_slave_0: left promiscuous mode [ 334.161712][ T2299] hsr_slave_1: left promiscuous mode [ 334.164910][ T2299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.214426][ T2299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.552451][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.604719][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.614096][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.621692][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.636941][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.021523][ T2299] team0 (unregistering): Port device team_slave_1 removed [ 338.248779][ T2299] team0 (unregistering): Port device team_slave_0 removed [ 338.939767][ T5614] Bluetooth: hci4: command tx timeout [ 340.196222][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.240784][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.246803][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.276354][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.280112][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.019590][ T5614] Bluetooth: hci4: command tx timeout [ 342.460141][ T5614] Bluetooth: hci0: command tx timeout [ 342.818721][ T7184] hsr_slave_0: entered promiscuous mode [ 342.826918][ T7184] hsr_slave_1: entered promiscuous mode [ 342.840118][ T7184] debugfs: 'hsr0' already exists in 'hsr' [ 342.840145][ T7184] Cannot create hsr debugfs directory [ 343.102433][ T5614] Bluetooth: hci4: command tx timeout [ 343.781368][ T7495] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 343.786152][ T7495] VFS: Can't find a romfs filesystem on dev nullb0. [ 343.786152][ T7495] [ 344.540132][ T5614] Bluetooth: hci0: command tx timeout [ 345.179837][ T5614] Bluetooth: hci4: command tx timeout [ 345.838100][ T1247] hid_parser_main: 7 callbacks suppressed [ 345.838118][ T1247] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 345.838139][ T1247] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 345.838157][ T1247] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 345.838175][ T1247] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 345.838193][ T1247] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 345.838211][ T1247] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 345.838229][ T1247] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 345.838247][ T1247] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 345.838264][ T1247] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 345.838282][ T1247] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 346.033401][ T1247] hid-generic 0006:0004:0009.0007: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 346.686719][ T5614] Bluetooth: hci0: command tx timeout [ 347.100379][ T7523] fido_id[7523]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 347.192735][ T7518] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 347.680026][ T7532] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 347.687361][ T7532] VFS: Can't find a romfs filesystem on dev nullb0. [ 347.687361][ T7532] [ 348.563370][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 348.699604][ T5614] Bluetooth: hci0: command tx timeout [ 350.536335][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.565705][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.568743][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.615218][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.617585][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.415203][ T2299] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.699715][ T5614] Bluetooth: hci1: command tx timeout [ 353.843602][ T2299] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.933269][ T5614] Bluetooth: hci1: command tx timeout [ 357.980013][ T5614] Bluetooth: hci1: command tx timeout [ 359.796734][ T2299] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.060061][ T5614] Bluetooth: hci1: command tx timeout [ 363.193896][ T7618] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 363.207851][ T2299] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.632714][ T7461] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.632931][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.633142][ T7461] bridge_slave_0: entered allmulticast mode [ 364.635980][ T7461] bridge_slave_0: entered promiscuous mode [ 364.719041][ T7461] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.719168][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.719432][ T7461] bridge_slave_1: entered allmulticast mode [ 364.746057][ T7461] bridge_slave_1: entered promiscuous mode [ 366.268297][ T7461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.518278][ T7461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.054723][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.054902][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.055408][ T7471] bridge_slave_0: entered allmulticast mode [ 367.093841][ T7471] bridge_slave_0: entered promiscuous mode [ 367.257405][ T7461] team0: Port device team_slave_0 added [ 367.259312][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.272996][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.273246][ T7471] bridge_slave_1: entered allmulticast mode [ 367.306146][ T7471] bridge_slave_1: entered promiscuous mode [ 367.474407][ T7461] team0: Port device team_slave_1 added [ 367.957480][ T2299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.855265][ T7471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.867316][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.867333][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.867361][ T7461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.878374][ T7471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.962237][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.962255][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.962296][ T7461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.346319][ T2299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.422845][ T7471] team0: Port device team_slave_0 added [ 371.504372][ T7471] team0: Port device team_slave_1 added [ 373.509913][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'. [ 373.726701][ T7709] netlink: 'syz.0.382': attribute type 7 has an invalid length. [ 373.749987][ T2299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.834517][ T7471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.834535][ T7471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.834564][ T7471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.905860][ T7461] hsr_slave_0: entered promiscuous mode [ 373.909357][ T7461] hsr_slave_1: entered promiscuous mode [ 373.925104][ T7461] debugfs: 'hsr0' already exists in 'hsr' [ 373.925133][ T7461] Cannot create hsr debugfs directory [ 373.979998][ T7471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.980016][ T7471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.980042][ T7471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.170496][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.170646][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.171415][ T7548] bridge_slave_0: entered allmulticast mode [ 374.175989][ T7548] bridge_slave_0: entered promiscuous mode [ 374.587573][ T2299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.280118][ T7721] syz.2.385 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 377.327715][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.327844][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.328045][ T7548] bridge_slave_1: entered allmulticast mode [ 377.331602][ T7548] bridge_slave_1: entered promiscuous mode [ 377.947863][ T7471] hsr_slave_0: entered promiscuous mode [ 377.962740][ T7471] hsr_slave_1: entered promiscuous mode [ 377.966500][ T7471] debugfs: 'hsr0' already exists in 'hsr' [ 377.966527][ T7471] Cannot create hsr debugfs directory [ 380.541613][ T7548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.587149][ T7548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.008855][ T7746] netlink: 'syz.0.389': attribute type 1 has an invalid length. [ 382.015626][ T7548] team0: Port device team_slave_0 added [ 382.204195][ T7548] team0: Port device team_slave_1 added [ 382.292228][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 383.504259][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.504277][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.504305][ T7548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.668726][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.668739][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.668759][ T7548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.904431][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.904503][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.706898][ T7548] hsr_slave_0: entered promiscuous mode [ 384.708361][ T7548] hsr_slave_1: entered promiscuous mode [ 384.723052][ T7548] debugfs: 'hsr0' already exists in 'hsr' [ 384.723080][ T7548] Cannot create hsr debugfs directory [ 385.171413][ T2299] bridge_slave_1: left allmulticast mode [ 385.171440][ T2299] bridge_slave_1: left promiscuous mode [ 385.193892][ T2299] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.265753][ T2299] bridge_slave_0: left allmulticast mode [ 386.265788][ T2299] bridge_slave_0: left promiscuous mode [ 386.266092][ T2299] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.040013][ T2299] bridge_slave_1: left allmulticast mode [ 388.040040][ T2299] bridge_slave_1: left promiscuous mode [ 388.040224][ T2299] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.130952][ T2299] bridge_slave_0: left allmulticast mode [ 388.130979][ T2299] bridge_slave_0: left promiscuous mode [ 388.131205][ T2299] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.880423][ T2299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.920589][ T2299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.942204][ T2299] bond0 (unregistering): Released all slaves [ 389.440752][ T2299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.480462][ T2299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.502206][ T2299] bond0 (unregistering): Released all slaves [ 389.673683][ T7774] ªªªªªª: renamed from vlan0 (while UP) [ 391.927813][ T2299] rxrpc: Call ffff888039c73d40 still in use (1,Complete,1409,0)! [ 392.185900][ T7461] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.264816][ T7461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.308057][ T7461] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.366612][ T7461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.581103][ T7461] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.668477][ T7461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.721138][ T7461] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 392.813031][ T7461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.235689][ T7471] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 393.388865][ T7471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.403686][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 393.412478][ T7471] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 393.464897][ T7471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.981375][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 394.024055][ T7471] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 394.047213][ T7471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.060861][ T7471] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 394.089163][ T7471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 394.142170][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 394.206462][ T31] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 394.206493][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.206512][ T31] usb 3-1: Product: syz [ 394.206527][ T31] usb 3-1: Manufacturer: syz [ 394.206547][ T31] usb 3-1: SerialNumber: syz [ 394.256364][ T31] usb 3-1: config 0 descriptor?? [ 394.277840][ T31] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 394.661020][ T31] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 395.738978][ T7461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.897632][ T7461] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.956743][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.956973][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.990651][ T7471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.077274][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.077424][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.441038][ T7471] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.521615][ T198] usb 3-1: USB disconnect, device number 5 [ 396.648833][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.648969][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.842134][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.842253][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.077957][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.111709][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.119942][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.146357][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.156426][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.977239][ T7854] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 398.985657][ T7854] VFS: Can't find a romfs filesystem on dev nullb0. [ 398.985657][ T7854] [ 399.868065][ T7548] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 400.103475][ T7548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.300796][ T5611] Bluetooth: hci5: command tx timeout [ 400.513284][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.527263][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.532920][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.578117][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.583253][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.606147][ T7548] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 400.735710][ T7548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.751567][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 400.752816][ T7548] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 400.891781][ T7548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.918902][ T7548] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 401.652885][ T7548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.714691][ T5611] Bluetooth: hci5: command tx timeout [ 403.714745][ T5611] Bluetooth: hci4: command tx timeout [ 403.859761][ T5800] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 404.044375][ T5800] usb 3-1: Using ep0 maxpacket: 16 [ 404.057581][ T5800] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 404.057612][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.057633][ T5800] usb 3-1: Product: syz [ 404.057648][ T5800] usb 3-1: Manufacturer: syz [ 404.057662][ T5800] usb 3-1: SerialNumber: syz [ 404.108829][ T5800] usb 3-1: config 0 descriptor?? [ 404.178754][ T5800] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 404.535665][ T5800] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 404.583300][ T5800] usb 3-1: USB disconnect, device number 6 [ 405.167877][ T7548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.762261][ T5611] Bluetooth: hci4: command tx timeout [ 406.089616][ T5611] Bluetooth: hci5: command tx timeout [ 407.148416][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 408.058457][ T5611] Bluetooth: hci4: command tx timeout [ 408.523640][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10 [ 408.982172][ T5611] Bluetooth: hci5: command tx timeout [ 410.151654][ T5611] Bluetooth: hci4: command tx timeout [ 410.275407][ T7864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 410.304741][ T7864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 410.321688][ T7864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 410.341502][ T7864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 410.344010][ T7864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.696878][ T5264] 8021q: adding VLAN 0 to HW filter on device eth11 [ 411.979016][ T7838] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.979216][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.982813][ T7838] bridge_slave_0: entered allmulticast mode [ 412.032045][ T7838] bridge_slave_0: entered promiscuous mode [ 412.157104][ T7838] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.157235][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.157954][ T7838] bridge_slave_1: entered allmulticast mode [ 412.469671][ T5611] Bluetooth: hci0: command tx timeout [ 412.816474][ T7838] bridge_slave_1: entered promiscuous mode [ 412.987332][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.987461][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.987728][ T7863] bridge_slave_0: entered allmulticast mode [ 413.022320][ T7863] bridge_slave_0: entered promiscuous mode [ 413.154379][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.154516][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.154795][ T7863] bridge_slave_1: entered allmulticast mode [ 413.184748][ T7863] bridge_slave_1: entered promiscuous mode [ 413.932332][ T7838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.955823][ T7977] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 414.031807][ T7838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.064797][ T7863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.125995][ T7863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.024683][ T5611] Bluetooth: hci0: command tx timeout [ 416.063042][ T7838] team0: Port device team_slave_0 added [ 416.201566][ T7838] team0: Port device team_slave_1 added [ 416.206232][ T7863] team0: Port device team_slave_0 added [ 417.027090][ T7863] team0: Port device team_slave_1 added [ 417.124079][ T7987] netlink: 'syz.0.419': attribute type 1 has an invalid length. [ 417.167361][ T7838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.167379][ T7838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.167404][ T7838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.276738][ T7838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.276756][ T7838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.276779][ T7838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.278678][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.278692][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.278718][ T7863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.404161][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.404174][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.404193][ T7863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.840017][ T7838] hsr_slave_0: entered promiscuous mode [ 417.841066][ T7838] hsr_slave_1: entered promiscuous mode [ 417.846668][ T7838] debugfs: 'hsr0' already exists in 'hsr' [ 417.846687][ T7838] Cannot create hsr debugfs directory [ 418.066803][ T5611] Bluetooth: hci0: command tx timeout [ 418.873804][ T7863] hsr_slave_0: entered promiscuous mode [ 418.898945][ T7863] hsr_slave_1: entered promiscuous mode [ 418.907465][ T7863] debugfs: 'hsr0' already exists in 'hsr' [ 418.907509][ T7863] Cannot create hsr debugfs directory [ 419.240890][ T5800] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 419.409637][ T5800] usb 1-1: Using ep0 maxpacket: 32 [ 419.412920][ T5800] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 419.412947][ T5800] usb 1-1: config 0 has no interface number 0 [ 419.419199][ T5800] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 419.419229][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.419249][ T5800] usb 1-1: Product: syz [ 419.419264][ T5800] usb 1-1: Manufacturer: syz [ 419.419279][ T5800] usb 1-1: SerialNumber: syz [ 419.492382][ T5800] usb 1-1: config 0 descriptor?? [ 419.524260][ T5800] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 421.011486][ T5611] Bluetooth: hci0: command tx timeout [ 421.320169][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 9 [ 421.392618][ T5800] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 421.547580][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 421.582601][ T5800] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 421.656430][ T5800] usb 1-1: USB disconnect, device number 9 [ 421.851124][ T5800] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 421.887455][ T5264] 8021q: adding VLAN 0 to HW filter on device eth12 [ 421.917369][ T5800] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 421.931876][ T5800] quatech2 1-1:0.51: device disconnected [ 423.266107][ T8030] openvswitch: netlink: Actions may not be safe on all matching packets [ 428.670611][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.670739][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.671008][ T7944] bridge_slave_0: entered allmulticast mode [ 428.977154][ T7944] bridge_slave_0: entered promiscuous mode [ 429.203005][ T8055] ip6gre1: entered promiscuous mode [ 429.203154][ T8055] ip6gre1: entered allmulticast mode [ 429.675387][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.675540][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.675826][ T7944] bridge_slave_1: entered allmulticast mode [ 429.710578][ T7944] bridge_slave_1: entered promiscuous mode [ 430.084874][ T8071] FAULT_INJECTION: forcing a failure. [ 430.084874][ T8071] name failslab, interval 1, probability 0, space 0, times 0 [ 430.084917][ T8071] CPU: 1 UID: 0 PID: 8071 Comm: syz.2.429 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 430.084936][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 430.084954][ T8071] Call Trace: [ 430.084961][ T8071] [ 430.085014][ T8071] dump_stack_lvl+0xe8/0x150 [ 430.085052][ T8071] should_fail_ex+0x467/0x600 [ 430.085086][ T8071] should_failslab+0xa8/0x100 [ 430.085109][ T8071] __kmalloc_noprof+0xfe/0x780 [ 430.085127][ T8071] ? tomoyo_encode+0x2ad/0x570 [ 430.085149][ T8071] ? tomoyo_encode+0x2ad/0x570 [ 430.085176][ T8071] tomoyo_encode+0x2ad/0x570 [ 430.085202][ T8071] tomoyo_realpath_from_path+0x5fa/0x640 [ 430.085234][ T8071] ? tomoyo_path_number_perm+0x219/0x5f0 [ 430.085253][ T8071] tomoyo_path_number_perm+0x246/0x5f0 [ 430.085274][ T8071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 430.085292][ T8071] ? __lock_acquire+0x683/0x2ce0 [ 430.085323][ T8071] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 430.085343][ T8071] ? hook_file_ioctl+0x1f3/0x600 [ 430.085371][ T8071] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.085407][ T8071] ? __fget_files+0x2a/0x420 [ 430.085428][ T8071] ? __fget_files+0x2a/0x420 [ 430.085445][ T8071] ? __fget_files+0x3a8/0x420 [ 430.085461][ T8071] ? __fget_files+0x2a/0x420 [ 430.085486][ T8071] security_file_ioctl+0xc3/0x2a0 [ 430.085508][ T8071] __se_sys_ioctl+0x47/0x170 [ 430.085534][ T8071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.085556][ T8071] do_syscall_64+0x174/0x580 [ 430.085575][ T8071] ? trace_irq_disable+0x3b/0x140 [ 430.085592][ T8071] ? clear_bhb_loop+0x40/0x90 [ 430.085613][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.085636][ T8071] RIP: 0033:0x7f4c322ade99 [ 430.085667][ T8071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.085681][ T8071] RSP: 002b:00007f4c304e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.085700][ T8071] RAX: ffffffffffffffda RBX: 00007f4c32536090 RCX: 00007f4c322ade99 [ 430.085712][ T8071] RDX: 0000200000000180 RSI: 00000000400454d1 RDI: 0000000000000003 [ 430.085723][ T8071] RBP: 00007f4c304e5090 R08: 0000000000000000 R09: 0000000000000000 [ 430.085733][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.085743][ T8071] R13: 00007f4c32536128 R14: 00007f4c32536090 R15: 00007ffe365c8198 [ 430.085772][ T8071] [ 430.105078][ T8071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 430.136617][ T5264] 8021q: adding VLAN 0 to HW filter on device eth13 [ 430.234003][ T8072] netlink: 44 bytes leftover after parsing attributes in process `syz.0.430'. [ 430.281032][ T7944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.170773][ T7944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.015896][ T37] audit: type=1326 audit(1785013079.752:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.433" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c322ade99 code=0x0 [ 436.177680][ T8091] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 439.219758][ T8103] netlink: 'syz.2.438': attribute type 1 has an invalid length. [ 439.922889][ T7944] team0: Port device team_slave_0 added [ 440.009107][ T7944] team0: Port device team_slave_1 added [ 440.035767][ T8110] syz.0.439 (8110): drop_caches: 2 [ 440.138415][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.138433][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.138459][ T7944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.217162][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.217180][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.217207][ T7944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.010109][ T5822] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 441.113719][ T7944] hsr_slave_0: entered promiscuous mode [ 441.117015][ T7944] hsr_slave_1: entered promiscuous mode [ 441.121300][ T7944] debugfs: 'hsr0' already exists in 'hsr' [ 441.121413][ T7944] Cannot create hsr debugfs directory [ 441.161655][ T5822] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 441.161700][ T5822] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 441.161746][ T5822] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 441.161771][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.240957][ T5822] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 445.372192][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.372265][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.376855][ T5822] usb 3-1: USB disconnect, device number 7 [ 445.914319][ T5264] 8021q: adding VLAN 0 to HW filter on device eth14 [ 448.248756][ T8166] comedi comedi0: reset error (fatal) [ 448.387013][ T8174] ======================================================= [ 448.387013][ T8174] WARNING: The mand mount option has been deprecated and [ 448.387013][ T8174] and is ignored by this kernel. Remove the mand [ 448.387013][ T8174] option from the mount to silence this warning. [ 448.387013][ T8174] ======================================================= [ 448.994334][ T8174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.450'. [ 451.822622][ T5264] 8021q: adding VLAN 0 to HW filter on device eth15 [ 457.651443][ T5264] 8021q: adding VLAN 0 to HW filter on device eth16 [ 462.022994][ T7864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 462.160630][ T8259] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 462.161254][ T8259] VFS: Can't find a romfs filesystem on dev nullb0. [ 462.161254][ T8259] [ 462.922498][ T7864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 462.927327][ T7864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 462.957457][ T7864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 462.986242][ T7864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 464.215538][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 464.258919][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 464.281138][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 464.304302][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 464.326837][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 465.099674][ T7864] Bluetooth: hci1: command tx timeout [ 466.539696][ T7864] Bluetooth: hci6: command tx timeout [ 467.179619][ T7864] Bluetooth: hci1: command tx timeout [ 468.619728][ T7864] Bluetooth: hci6: command tx timeout [ 469.266410][ T7864] Bluetooth: hci1: command tx timeout [ 471.635643][ T7864] Bluetooth: hci6: command tx timeout [ 471.635681][ T7864] Bluetooth: hci1: command tx timeout [ 473.659563][ T5611] Bluetooth: hci6: command tx timeout [ 473.862703][ T7864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.898895][ T7864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.917114][ T7864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.940386][ T7864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.978971][ T7864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 476.333858][ T7864] Bluetooth: hci5: command tx timeout [ 478.565453][ T7864] Bluetooth: hci5: command tx timeout [ 480.621913][ T7864] Bluetooth: hci5: command tx timeout [ 481.914877][ T8395] netlink: 'syz.0.476': attribute type 1 has an invalid length. [ 482.703293][ T7864] Bluetooth: hci5: command tx timeout [ 483.823857][ T8420] netlink: 'syz.2.479': attribute type 1 has an invalid length. [ 489.958050][ T8465] FAULT_INJECTION: forcing a failure. [ 489.958050][ T8465] name failslab, interval 1, probability 0, space 0, times 0 [ 489.958113][ T8465] CPU: 1 UID: 0 PID: 8465 Comm: syz.2.485 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 489.958139][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 489.958153][ T8465] Call Trace: [ 489.958162][ T8465] [ 489.958172][ T8465] dump_stack_lvl+0xe8/0x150 [ 489.958222][ T8465] should_fail_ex+0x467/0x600 [ 489.958281][ T8465] should_failslab+0xa8/0x100 [ 489.958312][ T8465] __kmalloc_noprof+0xfe/0x780 [ 489.958338][ T8465] ? tomoyo_encode+0x2ad/0x570 [ 489.958367][ T8465] ? tomoyo_encode+0x2ad/0x570 [ 489.958404][ T8465] tomoyo_encode+0x2ad/0x570 [ 489.958441][ T8465] tomoyo_realpath_from_path+0x5fa/0x640 [ 489.958484][ T8465] ? tomoyo_path_number_perm+0x219/0x5f0 [ 489.958509][ T8465] tomoyo_path_number_perm+0x246/0x5f0 [ 489.958538][ T8465] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 489.958562][ T8465] ? __lock_acquire+0x683/0x2ce0 [ 489.958604][ T8465] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 489.958629][ T8465] ? hook_file_ioctl+0x1f3/0x600 [ 489.958687][ T8465] ? __fget_files+0x2a/0x420 [ 489.958715][ T8465] ? __fget_files+0x2a/0x420 [ 489.958738][ T8465] ? __fget_files+0x3a8/0x420 [ 489.958761][ T8465] ? __fget_files+0x2a/0x420 [ 489.958797][ T8465] security_file_ioctl+0xc3/0x2a0 [ 489.958826][ T8465] __se_sys_ioctl+0x47/0x170 [ 489.958857][ T8465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.958883][ T8465] do_syscall_64+0x174/0x580 [ 489.958912][ T8465] ? clear_bhb_loop+0x40/0x90 [ 489.958940][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.958964][ T8465] RIP: 0033:0x7f4c322ade99 [ 489.958984][ T8465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.959004][ T8465] RSP: 002b:00007f4c304c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.959027][ T8465] RAX: ffffffffffffffda RBX: 00007f4c32536180 RCX: 00007f4c322ade99 [ 489.959042][ T8465] RDX: 0000200000000000 RSI: 00000000c0045002 RDI: 0000000000000006 [ 489.959056][ T8465] RBP: 00007f4c304c4090 R08: 0000000000000000 R09: 0000000000000000 [ 489.959069][ T8465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.959081][ T8465] R13: 00007f4c32536218 R14: 00007f4c32536180 R15: 00007ffe365c8198 [ 489.959115][ T8465] [ 489.959263][ T8465] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.781671][ T8472] 9p: Bad value for 'rfdno' [ 494.514569][ T8483] netlink: 'syz.2.488': attribute type 1 has an invalid length. [ 494.913781][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.913926][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.914210][ T8272] bridge_slave_0: entered allmulticast mode [ 494.917161][ T8272] bridge_slave_0: entered promiscuous mode [ 495.016952][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.034091][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.034360][ T8272] bridge_slave_1: entered allmulticast mode [ 495.062216][ T8272] bridge_slave_1: entered promiscuous mode [ 495.465698][ T8272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.968702][ T8272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.980897][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.982256][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.983261][ T8252] bridge_slave_0: entered allmulticast mode [ 496.051399][ T8252] bridge_slave_0: entered promiscuous mode [ 500.712159][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.712267][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.712484][ T8252] bridge_slave_1: entered allmulticast mode [ 500.755861][ T8252] bridge_slave_1: entered promiscuous mode [ 502.487338][ T8272] team0: Port device team_slave_0 added [ 502.605595][ T8272] team0: Port device team_slave_1 added [ 502.634773][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.763574][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.018474][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.018493][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.018530][ T8272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.178692][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.178705][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.178725][ T8272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.309893][ T8252] team0: Port device team_slave_0 added [ 503.430555][ T8252] team0: Port device team_slave_1 added [ 504.167737][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.167751][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.167771][ T8252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.305369][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.305381][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.305401][ T8252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.773062][ T8272] hsr_slave_0: entered promiscuous mode [ 504.790332][ T8272] hsr_slave_1: entered promiscuous mode [ 504.797885][ T8272] debugfs: 'hsr0' already exists in 'hsr' [ 504.797978][ T8272] Cannot create hsr debugfs directory [ 506.782674][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.782747][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.737098][ T8252] hsr_slave_0: entered promiscuous mode [ 507.745425][ T8252] hsr_slave_1: entered promiscuous mode [ 507.749373][ T8252] debugfs: 'hsr0' already exists in 'hsr' [ 507.751852][ T8252] Cannot create hsr debugfs directory [ 507.807858][ T8537] warning: `syz.0.498' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 508.026339][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.026468][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.026780][ T8341] bridge_slave_0: entered allmulticast mode [ 508.056239][ T8341] bridge_slave_0: entered promiscuous mode [ 508.154395][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.154607][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.156589][ T8341] bridge_slave_1: entered allmulticast mode [ 509.875657][ T8341] bridge_slave_1: entered promiscuous mode [ 511.027967][ T8341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.431385][ T8341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.295059][ T8341] team0: Port device team_slave_0 added [ 516.449017][ T8341] team0: Port device team_slave_1 added [ 516.608452][ T8578] FAULT_INJECTION: forcing a failure. [ 516.608452][ T8578] name failslab, interval 1, probability 0, space 0, times 0 [ 516.608488][ T8578] CPU: 0 UID: 0 PID: 8578 Comm: syz.2.504 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 516.608514][ T8578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 516.608528][ T8578] Call Trace: [ 516.608536][ T8578] [ 516.608545][ T8578] dump_stack_lvl+0xe8/0x150 [ 516.608586][ T8578] should_fail_ex+0x467/0x600 [ 516.608628][ T8578] should_failslab+0xa8/0x100 [ 516.608658][ T8578] __kmalloc_noprof+0xfe/0x780 [ 516.608685][ T8578] ? tomoyo_encode+0x2ad/0x570 [ 516.608713][ T8578] ? tomoyo_encode+0x2ad/0x570 [ 516.608750][ T8578] tomoyo_encode+0x2ad/0x570 [ 516.608787][ T8578] tomoyo_realpath_from_path+0x5fa/0x640 [ 516.608828][ T8578] ? tomoyo_path_number_perm+0x219/0x5f0 [ 516.608854][ T8578] tomoyo_path_number_perm+0x246/0x5f0 [ 516.608883][ T8578] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 516.608906][ T8578] ? __lock_acquire+0x683/0x2ce0 [ 516.608947][ T8578] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 516.608973][ T8578] ? hook_file_ioctl+0x1f3/0x600 [ 516.609006][ T8578] ? lockdep_hardirqs_on+0x7a/0x110 [ 516.609051][ T8578] ? __fget_files+0x2a/0x420 [ 516.609078][ T8578] ? __fget_files+0x2a/0x420 [ 516.609099][ T8578] ? __fget_files+0x3a8/0x420 [ 516.609122][ T8578] ? __fget_files+0x2a/0x420 [ 516.609149][ T8578] security_file_ioctl+0xc3/0x2a0 [ 516.609177][ T8578] __se_sys_ioctl+0x47/0x170 [ 516.609208][ T8578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.609233][ T8578] do_syscall_64+0x174/0x580 [ 516.609259][ T8578] ? trace_irq_disable+0x3b/0x140 [ 516.609283][ T8578] ? clear_bhb_loop+0x40/0x90 [ 516.609319][ T8578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.609342][ T8578] RIP: 0033:0x7f4c322ade99 [ 516.609363][ T8578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.609384][ T8578] RSP: 002b:00007f4c30506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.609406][ T8578] RAX: ffffffffffffffda RBX: 00007f4c32535fa0 RCX: 00007f4c322ade99 [ 516.609422][ T8578] RDX: 0000000000000000 RSI: 0000000040104d14 RDI: 0000000000000003 [ 516.609435][ T8578] RBP: 00007f4c30506090 R08: 0000000000000000 R09: 0000000000000000 [ 516.609447][ T8578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.609459][ T8578] R13: 00007f4c32536038 R14: 00007f4c32535fa0 R15: 00007ffe365c8198 [ 516.609493][ T8578] [ 516.699651][ T8578] ERROR: Out of memory at tomoyo_realpath_from_path. [ 517.738785][ T8341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.738805][ T8341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.738836][ T8341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.810810][ T8341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.810824][ T8341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.810845][ T8341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.709274][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 520.755282][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 520.771720][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 520.776997][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 520.793439][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 520.969311][ T8341] hsr_slave_0: entered promiscuous mode [ 521.009129][ T8341] hsr_slave_1: entered promiscuous mode [ 521.025752][ T8341] debugfs: 'hsr0' already exists in 'hsr' [ 521.025781][ T8341] Cannot create hsr debugfs directory [ 521.825944][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.888093][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 521.905853][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 521.918299][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 521.923831][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.939583][ T5611] Bluetooth: hci0: command tx timeout [ 523.425013][ T8626] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 523.425723][ T8626] VFS: Can't find a romfs filesystem on dev nullb0. [ 523.425723][ T8626] [ 524.140908][ T5611] Bluetooth: hci4: command tx timeout [ 526.675494][ T5611] Bluetooth: hci0: command tx timeout [ 526.675529][ T5611] Bluetooth: hci4: command tx timeout [ 528.700578][ T7864] Bluetooth: hci4: command tx timeout [ 528.700612][ T7864] Bluetooth: hci0: command tx timeout [ 529.674681][ T7864] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 529.678947][ T7864] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 529.743172][ T7864] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 529.746409][ T7864] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 529.760324][ T7864] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 532.489830][ T5611] Bluetooth: hci0: command tx timeout [ 532.489866][ T5611] Bluetooth: hci4: command tx timeout [ 532.555540][ T7864] Bluetooth: hci7: command tx timeout [ 533.867103][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 533.898213][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 533.906864][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 533.950461][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.978700][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 534.620682][ T5611] Bluetooth: hci7: command tx timeout [ 535.522601][ T8720] FAULT_INJECTION: forcing a failure. [ 535.522601][ T8720] name failslab, interval 1, probability 0, space 0, times 0 [ 535.522638][ T8720] CPU: 0 UID: 0 PID: 8720 Comm: syz.2.514 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 535.522673][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 535.522687][ T8720] Call Trace: [ 535.522695][ T8720] [ 535.522704][ T8720] dump_stack_lvl+0xe8/0x150 [ 535.522744][ T8720] should_fail_ex+0x467/0x600 [ 535.522788][ T8720] should_failslab+0xa8/0x100 [ 535.522818][ T8720] kmem_cache_alloc_node_noprof+0xae/0x670 [ 535.522844][ T8720] ? __alloc_skb+0x1d7/0x7a0 [ 535.522866][ T8720] ? __alloc_skb+0x1d7/0x7a0 [ 535.522895][ T8720] __alloc_skb+0x1d7/0x7a0 [ 535.522923][ T8720] netlink_sendmsg+0x5d4/0xb40 [ 535.522963][ T8720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.522992][ T8720] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 535.523028][ T8720] ? __kernel_text_address+0xd/0x30 [ 535.523050][ T8720] ? unwind_get_return_address+0x4d/0x90 [ 535.523078][ T8720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.523104][ T8720] sock_sendmsg_nosec+0x13a/0x180 [ 535.523146][ T8720] ____sys_sendmsg+0x565/0x870 [ 535.523168][ T8720] ? __might_fault+0xaf/0x130 [ 535.523189][ T8720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.523215][ T8720] ? import_iovec+0x73/0xa0 [ 535.523237][ T8720] ___sys_sendmsg+0x2a5/0x360 [ 535.523255][ T8720] ? __lock_acquire+0x683/0x2ce0 [ 535.523275][ T8720] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.523320][ T8720] ? __fget_files+0x2a/0x420 [ 535.523336][ T8720] ? __fget_files+0x3a8/0x420 [ 535.523360][ T8720] __x64_sys_sendmsg+0x1b7/0x290 [ 535.523382][ T8720] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.523446][ T8720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.523477][ T8720] do_syscall_64+0x174/0x580 [ 535.523497][ T8720] ? trace_irq_disable+0x3b/0x140 [ 535.523513][ T8720] ? clear_bhb_loop+0x40/0x90 [ 535.523532][ T8720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.523549][ T8720] RIP: 0033:0x7f4c322ade99 [ 535.523563][ T8720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.523576][ T8720] RSP: 002b:00007f4c30506028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.523593][ T8720] RAX: ffffffffffffffda RBX: 00007f4c32535fa0 RCX: 00007f4c322ade99 [ 535.523605][ T8720] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 535.523615][ T8720] RBP: 00007f4c30506090 R08: 0000000000000000 R09: 0000000000000000 [ 535.523624][ T8720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.523633][ T8720] R13: 00007f4c32536038 R14: 00007f4c32535fa0 R15: 00007ffe365c8198 [ 535.523663][ T8720] [ 536.060898][ T5611] Bluetooth: hci3: command tx timeout [ 536.158681][ T8591] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.158903][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.159170][ T8591] bridge_slave_0: entered allmulticast mode [ 536.172143][ T8591] bridge_slave_0: entered promiscuous mode [ 536.191223][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.191345][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.196404][ T8609] bridge_slave_0: entered allmulticast mode [ 536.259215][ T8609] bridge_slave_0: entered promiscuous mode [ 536.329533][ T8591] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.329741][ T8591] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.330048][ T8591] bridge_slave_1: entered allmulticast mode [ 536.364807][ T8591] bridge_slave_1: entered promiscuous mode [ 536.385908][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.386035][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.386316][ T8609] bridge_slave_1: entered allmulticast mode [ 536.417037][ T8609] bridge_slave_1: entered promiscuous mode [ 536.699771][ T5611] Bluetooth: hci7: command tx timeout [ 537.000883][ T8591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.080063][ T8748] FAULT_INJECTION: forcing a failure. [ 537.080063][ T8748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.080134][ T8748] CPU: 1 UID: 0 PID: 8748 Comm: syz.2.517 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 537.080169][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 537.080183][ T8748] Call Trace: [ 537.080192][ T8748] [ 537.080201][ T8748] dump_stack_lvl+0xe8/0x150 [ 537.080241][ T8748] should_fail_ex+0x467/0x600 [ 537.080284][ T8748] _copy_from_iter+0x1d3/0x1660 [ 537.080308][ T8748] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 537.080347][ T8748] ? alloc_pages_mpol+0x7d/0x280 [ 537.080376][ T8748] ? __pfx__copy_from_iter+0x10/0x10 [ 537.080403][ T8748] ? alloc_pages_mpol+0x115/0x280 [ 537.080441][ T8748] copy_page_from_iter+0x219/0x2d0 [ 537.080470][ T8748] tun_get_user+0x1b68/0x4380 [ 537.080509][ T8748] ? tun_get_user+0x6e7/0x4380 [ 537.080562][ T8748] ? __schedule+0x16f2/0x5500 [ 537.080586][ T8748] ? __pfx_tun_get_user+0x10/0x10 [ 537.080624][ T8748] ? __lock_acquire+0x683/0x2ce0 [ 537.080664][ T8748] ? ref_tracker_alloc+0x353/0x4c0 [ 537.080690][ T8748] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 537.080714][ T8748] ? tun_get+0x1c/0x2f0 [ 537.080750][ T8748] ? tun_get+0x1c/0x2f0 [ 537.080790][ T8748] ? tun_get+0x1c/0x2f0 [ 537.080824][ T8748] ? tun_get+0x1c/0x2f0 [ 537.080863][ T8748] tun_chr_write_iter+0x119/0x200 [ 537.080901][ T8748] vfs_write+0x61e/0xbb0 [ 537.080940][ T8748] ? __pfx_vfs_write+0x10/0x10 [ 537.080981][ T8748] ? __fget_files+0x2a/0x420 [ 537.081015][ T8748] ksys_write+0x156/0x270 [ 537.081048][ T8748] ? __pfx_ksys_write+0x10/0x10 [ 537.081086][ T8748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.081112][ T8748] do_syscall_64+0x174/0x580 [ 537.081140][ T8748] ? clear_bhb_loop+0x40/0x90 [ 537.081175][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.081199][ T8748] RIP: 0033:0x7f4c3226e6ce [ 537.081219][ T8748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 537.081238][ T8748] RSP: 002b:00007f4c304c3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 537.081260][ T8748] RAX: ffffffffffffffda RBX: 00007f4c304c46c0 RCX: 00007f4c3226e6ce [ 537.081275][ T8748] RDX: 000000000000002e RSI: 0000200000000500 RDI: 00000000000000c8 [ 537.081289][ T8748] RBP: 00007f4c304c4090 R08: 0000000000000000 R09: 0000000000000000 [ 537.081301][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.081313][ T8748] R13: 00007f4c32536218 R14: 00007f4c32536180 R15: 00007ffe365c8198 [ 537.081347][ T8748] [ 537.723023][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.731790][ T8591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.786387][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.037181][ T8591] team0: Port device team_slave_0 added [ 538.214278][ T5611] Bluetooth: hci3: command tx timeout [ 538.282078][ T8609] team0: Port device team_slave_0 added [ 538.285974][ T8591] team0: Port device team_slave_1 added [ 539.259765][ T8609] team0: Port device team_slave_1 added [ 539.294301][ T5611] Bluetooth: hci7: command tx timeout [ 541.089989][ T38] INFO: task kworker/u8:20:2299 blocked for more than 143 seconds. [ 541.090013][ T38] Not tainted syzkaller #0 [ 541.090022][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.090030][ T38] task:kworker/u8:20 state:D stack:21168 pid:2299 tgid:2299 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 541.090082][ T38] Workqueue: netns cleanup_net [ 541.090106][ T38] Call Trace: [ 541.090113][ T38] [ 541.090123][ T38] __schedule+0x16dc/0x5500 [ 541.090150][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 541.090176][ T38] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 541.090209][ T38] ? rt_spin_lock+0x1e0/0x400 [ 541.090239][ T38] ? __pfx___schedule+0x10/0x10 [ 541.090296][ T38] ? schedule+0x90/0x2b0 [ 541.090320][ T38] schedule+0x164/0x2b0 [ 541.090339][ T38] rxrpc_destroy_all_calls+0x443/0x570 [ 541.090364][ T38] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 541.090387][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 541.090415][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 541.090435][ T38] ? __timer_delete_sync+0x538/0x600 [ 541.090458][ T38] rxrpc_exit_net+0x6f/0xc0 [ 541.090477][ T38] ops_undo_list+0x43d/0x8d0 [ 541.090501][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 541.090517][ T38] ? rt_spin_unlock+0x157/0x200 [ 541.090545][ T38] ? idr_destroy+0x21b/0x2a0 [ 541.090563][ T38] ? rt_spin_unlock+0x163/0x200 [ 541.090591][ T38] cleanup_net+0x575/0x810 [ 541.090611][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 541.090634][ T38] ? rcu_is_watching+0x15/0xb0 [ 541.090659][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 541.090682][ T38] process_scheduled_works+0xa8e/0x14e0 [ 541.090725][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 541.090752][ T38] ? assign_work+0x3cf/0x5d0 [ 541.090780][ T38] worker_thread+0xa47/0xfb0 [ 541.090816][ T38] ? __kthread_parkme+0x71/0x1f0 [ 541.090850][ T38] kthread+0x388/0x470 [ 541.090878][ T38] ? __pfx_worker_thread+0x10/0x10 [ 541.090898][ T38] ? __pfx_kthread+0x10/0x10 [ 541.090926][ T38] ret_from_fork+0x514/0xb70 [ 541.090959][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 541.090988][ T38] ? __switch_to+0xc89/0x1420 [ 541.091016][ T38] ? __pfx_kthread+0x10/0x10 [ 541.091044][ T38] ret_from_fork_asm+0x1a/0x30 [ 541.091076][ T38] [ 541.091242][ T38] [ 541.091242][ T38] Showing all locks held in the system: [ 541.091258][ T38] 2 locks held by kworker/u8:0/12: [ 541.091280][ T38] 1 lock held by khungtaskd/38: [ 541.091306][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 541.091401][ T38] 3 locks held by kworker/u8:20/2299: [ 541.091413][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 541.091470][ T38] #1: ffffc90007bcfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 541.091524][ T38] #2: ffffffff8f5a2e80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 541.091585][ T38] 2 locks held by getty/5360: [ 541.091597][ T38] #0: ffff8880367ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 541.091654][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 541.091719][ T38] 1 lock held by syz-executor/5606: [ 541.091731][ T38] #0: ffff88802dc08058 (&info->lock){+.+.}-{3:3}, at: shmem_getattr+0x124/0x4b0 [ 541.091800][ T38] 1 lock held by syz-executor/8591: [ 541.091812][ T38] #0: ffffffff8f5b1a38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 541.091864][ T38] 2 locks held by syz-executor/8609: [ 541.091877][ T38] #0: ffffffff8ed16868 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 541.091937][ T38] #1: ffffffff8f5b1a38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 541.091990][ T38] 3 locks held by syz-executor/8658: [ 541.092004][ T38] 2 locks held by syz-executor/8697: [ 541.092016][ T38] #0: ffffffff8f5a2e80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 541.092065][ T38] #1: ffffffff8f5b1a38 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 541.092131][ T38] 1 lock held by dhcpcd-run-hook/8766: [ 541.092144][ T38] 3 locks held by syz.2.519/8768: [ 541.092157][ T38] [ 541.092163][ T38] ============================================= [ 541.092163][ T38] [ 541.092180][ T38] NMI backtrace for cpu 1 [ 541.092196][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 541.092220][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 541.092234][ T38] Call Trace: [ 541.092242][ T38] [ 541.092251][ T38] dump_stack_lvl+0xe8/0x150 [ 541.092294][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 541.092330][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 541.092368][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 541.092408][ T38] sys_info+0x135/0x170 [ 541.092437][ T38] watchdog+0xfd7/0x1030 [ 541.092467][ T38] ? watchdog+0x1c7/0x1030 [ 541.092495][ T38] kthread+0x388/0x470 [ 541.092530][ T38] ? __pfx_watchdog+0x10/0x10 [ 541.092548][ T38] ? __pfx_kthread+0x10/0x10 [ 541.092582][ T38] ret_from_fork+0x514/0xb70 [ 541.092618][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 541.092652][ T38] ? __switch_to+0xc89/0x1420 [ 541.092683][ T38] ? __pfx_kthread+0x10/0x10 [ 541.092718][ T38] ret_from_fork_asm+0x1a/0x30 [ 541.092757][ T38] [ 541.092771][ T38] Sending NMI from CPU 1 to CPUs 0: [ 541.092800][ C0] NMI backtrace for cpu 0 [ 541.092814][ C0] CPU: 0 UID: 0 PID: 8658 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 541.092835][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 541.092846][ C0] RIP: 0010:mark_lock+0x3/0x190 [ 541.092869][ C0] Code: 3a 90 41 89 e9 48 89 df 48 8b 2c 24 e9 b6 fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 41 55 41 54 53 8b 46 20 89 c1 81 e1 00 00 03 00 83 f9 01 bb [ 541.092889][ C0] RSP: 0018:ffffc90004276400 EFLAGS: 00000046 [ 541.092905][ C0] RAX: 0000000000000004 RBX: ffff88801e778c78 RCX: 0000000000000002 [ 541.092917][ C0] RDX: 0000000000000008 RSI: ffff88801e778c58 RDI: ffff88801e778000 [ 541.092930][ C0] RBP: 0000000000000000 R08: ffffffff8177725f R09: 0000000000000000 [ 541.092941][ C0] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000004 [ 541.092953][ C0] R13: ffff88801e778c58 R14: ffff88801e778000 R15: 0000000000000002 [ 541.092967][ C0] FS: 000055557abdb500(0000) GS:ffff888125c42000(0000) knlGS:0000000000000000 [ 541.092982][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.092995][ C0] CR2: 00007ffe365c6db0 CR3: 000000004c0c4000 CR4: 00000000003526f0 [ 541.093011][ C0] Call Trace: [ 541.093018][ C0] [ 541.093025][ C0] __lock_acquire+0x683/0x2ce0 [ 541.093046][ C0] ? __update_page_owner_handle+0x5a/0x580 [ 541.093066][ C0] ? __update_page_owner_handle+0x512/0x580 [ 541.093088][ C0] ? unwind_next_frame+0x8f/0x2550 [ 541.093111][ C0] ? unwind_next_frame+0x8f/0x2550 [ 541.093130][ C0] lock_acquire+0x106/0x350 [ 541.093147][ C0] ? unwind_next_frame+0x8f/0x2550 [ 541.093170][ C0] ? unwind_next_frame+0x8f/0x2550 [ 541.093189][ C0] ? rtnl_newlink_create+0x310/0xb00 [ 541.093209][ C0] ? unwind_next_frame+0x8f/0x2550 [ 541.093228][ C0] unwind_next_frame+0xac/0x2550 [ 541.093247][ C0] ? unwind_next_frame+0x8f/0x2550 [ 541.093270][ C0] ? br_dev_newlink+0x6a/0x160 [ 541.093297][ C0] ? unwind_next_frame+0x8f/0x2550 [ 541.093317][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 541.093336][ C0] arch_stack_walk+0x11b/0x150 [ 541.093358][ C0] ? rtnl_newlink_create+0x310/0xb00 [ 541.093380][ C0] stack_trace_save+0xa9/0x100 [ 541.093408][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 541.093437][ C0] ? __lock_acquire+0x683/0x2ce0 [ 541.093459][ C0] kasan_save_track+0x3e/0x80 [ 541.093476][ C0] ? kasan_save_track+0x3e/0x80 [ 541.093492][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 541.093510][ C0] ? kmem_cache_alloc_noprof+0x355/0x650 [ 541.093527][ C0] ? __kernfs_new_node+0xe7/0xa70 [ 541.093547][ C0] ? kernfs_new_node+0xea/0x140 [ 541.093564][ C0] ? __kernfs_create_file+0x4b/0x2e0 [ 541.093588][ C0] ? sysfs_add_file_mode_ns+0x237/0x300 [ 541.093613][ C0] ? internal_create_group+0x679/0x1180 [ 541.093631][ C0] ? br_sysfs_addbr+0x2a/0x160 [ 541.093654][ C0] ? br_device_event+0x2c9/0xa20 [ 541.093676][ C0] ? notifier_call_chain+0x1a5/0x3d0 [ 541.093701][ C0] ? register_netdevice+0x18c0/0x1ed0 [ 541.093724][ C0] ? br_dev_newlink+0x6a/0x160 [ 541.093749][ C0] ? rtnl_newlink_create+0x310/0xb00 [ 541.093796][ C0] __kasan_slab_alloc+0x6c/0x80 [ 541.093816][ C0] kmem_cache_alloc_noprof+0x355/0x650 [ 541.093833][ C0] ? __kernfs_new_node+0xe7/0xa70 [ 541.093851][ C0] ? __kernfs_new_node+0xe7/0xa70 [ 541.093874][ C0] __kernfs_new_node+0xe7/0xa70 [ 541.093893][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 541.093914][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 541.093936][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 541.093955][ C0] ? kernfs_root+0x1c/0x230 [ 541.093976][ C0] ? kernfs_root+0x1c/0x230 [ 541.093993][ C0] ? kernfs_root+0x1c/0x230 [ 541.094009][ C0] ? kernfs_root+0x1c/0x230 [ 541.094029][ C0] kernfs_new_node+0xea/0x140 [ 541.094051][ C0] __kernfs_create_file+0x4b/0x2e0 [ 541.094077][ C0] sysfs_add_file_mode_ns+0x237/0x300 [ 541.094107][ C0] internal_create_group+0x679/0x1180 [ 541.094132][ C0] ? br_vlan_bridge_event+0x529/0x600 [ 541.094149][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 541.094171][ C0] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 541.094195][ C0] br_sysfs_addbr+0x2a/0x160 [ 541.094219][ C0] br_device_event+0x2c9/0xa20 [ 541.094242][ C0] ? __pfx_br_device_event+0x10/0x10 [ 541.094267][ C0] ? lockdep_rtnl_is_held+0x26/0x40 [ 541.094294][ C0] notifier_call_chain+0x1a5/0x3d0 [ 541.094325][ C0] register_netdevice+0x18c0/0x1ed0 [ 541.094346][ C0] ? alloc_netdev_mqs+0xd5a/0x12c0 [ 541.094377][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 541.094407][ C0] br_dev_newlink+0x6a/0x160 [ 541.094433][ C0] ? rtnl_newlink_create+0x2fd/0xb00 [ 541.094453][ C0] ? __pfx_br_dev_newlink+0x10/0x10 [ 541.094480][ C0] rtnl_newlink_create+0x310/0xb00 [ 541.094501][ C0] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 541.094531][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 541.094556][ C0] ? rtnl_newlink+0x8a3/0x1bd0 [ 541.094575][ C0] ? full_name_hash+0x92/0xe0 [ 541.094596][ C0] rtnl_newlink+0x167f/0x1bd0 [ 541.094621][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 541.094643][ C0] ? __lock_acquire+0x683/0x2ce0 [ 541.094664][ C0] ? __lock_acquire+0x683/0x2ce0 [ 541.094685][ C0] ? unwind_next_frame+0x8f/0x2550 [ 541.094708][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 541.094741][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 541.094771][ C0] ? __lock_acquire+0x683/0x2ce0 [ 541.094791][ C0] ? kernel_text_address+0xa5/0xe0 [ 541.094809][ C0] ? __kernel_text_address+0xd/0x30 [ 541.094826][ C0] ? unwind_get_return_address+0x4d/0x90 [ 541.094846][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 541.094862][ C0] ? arch_stack_walk+0xfb/0x150 [ 541.094886][ C0] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 541.094911][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 541.094928][ C0] rtnetlink_rcv_msg+0x802/0xc00 [ 541.094944][ C0] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 541.094964][ C0] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 541.094981][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.094999][ C0] ? __lock_acquire+0x683/0x2ce0 [ 541.095023][ C0] netlink_rcv_skb+0x226/0x4a0 [ 541.095044][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.095063][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.095089][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.095110][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.095133][ C0] netlink_unicast+0x7f5/0x990 [ 541.095156][ C0] netlink_sendmsg+0x813/0xb40 [ 541.095183][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.095205][ C0] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 541.095235][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.095256][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 541.095285][ C0] __sys_sendto+0x41e/0x5d0 [ 541.095306][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 541.095323][ C0] ? errseq_sample+0x40/0x70 [ 541.095358][ C0] ? rcu_is_watching+0x15/0xb0 [ 541.095383][ C0] __x64_sys_sendto+0xde/0x100 [ 541.095402][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.095422][ C0] do_syscall_64+0x174/0x580 [ 541.095443][ C0] ? trace_irq_disable+0x3b/0x140 [ 541.095461][ C0] ? clear_bhb_loop+0x40/0x90 [ 541.095481][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.095499][ C0] RIP: 0033:0x7fafeee7e6ce [ 541.095514][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 541.095529][ C0] RSP: 002b:00007ffd6e617c98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 541.095547][ C0] RAX: ffffffffffffffda RBX: 000055557abdb500 RCX: 00007fafeee7e6ce [ 541.095561][ C0] RDX: 000000000000004c RSI: 00007fafefc74670 RDI: 0000000000000003 [ 541.095578][ C0] RBP: 0000000000000001 R08: 00007ffd6e617d14 R09: 000000000000000c [ 541.095589][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 541.095599][ C0] R13: 0000000000000000 R14: 00007fafefc74670 R15: 0000000000000000 [ 541.095618][ C0] [ 541.095808][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 541.095823][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 541.095848][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 541.095861][ T38] Call Trace: [ 541.095884][ T38] [ 541.095893][ T38] vpanic+0x56c/0xa60 [ 541.095920][ T38] ? __pfx_vpanic+0x10/0x10 [ 541.095953][ T38] panic+0xc5/0xd0 [ 541.095974][ T38] ? __pfx_panic+0x10/0x10 [ 541.095999][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 541.096026][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 541.096066][ T38] watchdog+0x1030/0x1030 [ 541.096096][ T38] ? watchdog+0x1c7/0x1030 [ 541.096123][ T38] kthread+0x388/0x470 [ 541.096157][ T38] ? __pfx_watchdog+0x10/0x10 [ 541.096176][ T38] ? __pfx_kthread+0x10/0x10 [ 541.096211][ T38] ret_from_fork+0x514/0xb70 [ 541.096247][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 541.096289][ T38] ? __switch_to+0xc89/0x1420 [ 541.096322][ T38] ? __pfx_kthread+0x10/0x10 [ 541.096357][ T38] ret_from_fork_asm+0x1a/0x30 [ 541.096396][ T38] [ 541.097005][ T38] Kernel Offset: disabled