last executing test programs: 23.116333587s ago: executing program 4 (id=154): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000300)={'gre0\x00', 0x1}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x10, 0x0, 0xe}, 0x2c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x10}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0x0, 0xf0, 0x40, 0xfd, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0xffff1000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x0, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x6, 0x3, 0xfc, 0x1}, {0x100000, 0x0, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x2000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x805}, {0xdddd1000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x9, 0x0, 0xeeef0000, [0x10000, 0x402, 0x8, 0x8]}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) set_mempolicy(0x2, 0x0, 0x4) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x2404c802) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0xf) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) 20.232817319s ago: executing program 1 (id=158): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 20.14469679s ago: executing program 3 (id=159): r0 = socket(0xa, 0x3, 0x3a) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 18.002862396s ago: executing program 1 (id=160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r5, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r5, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 17.201817698s ago: executing program 3 (id=161): syz_emit_ethernet(0x76, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x48, {0x0, 0x6, "fd3a85", 0xff, 0x89, 0x0, @remote, @local, [], "85e7d2e1a48a75fc"}}}}}}}, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(0x0, &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) unlink(&(0x7f0000000000)='./file0\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) 15.616062878s ago: executing program 4 (id=164): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = io_uring_setup(0xf08, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000001900)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) close(r4) 14.048196374s ago: executing program 0 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r5, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec2424", 0x30, 0x4008044, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0x0) sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 13.956831668s ago: executing program 1 (id=166): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, &(0x7f0000000040)=0x59) 13.334377042s ago: executing program 1 (id=167): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) r1 = getpgrp(0x0) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r5, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x200, 0x2a}}}}}, 0x28}}, 0x40840) 12.556754939s ago: executing program 0 (id=168): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'batadv0\x00', {'wlan1\x00'}}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20200) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x13, &(0x7f0000001200)=@raw=[@call={0x85, 0x0, 0x0, 0x1f}, @alu={0x7, 0x0, 0x3, 0x8, 0x1, 0xffffffffffffffff, 0x10}, @func, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9cd}, @alu={0x4, 0x1, 0x4, 0x9, 0xe, 0x30, 0xfffffffffffffff0}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r7}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xba}}], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="010028bd700001", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x40000) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x3, @win={{0x100002, 0x5, 0x0, 0x3}, 0x6, 0x5, &(0x7f0000000280)={{0x1, 0xc490, 0x7, 0xffffff28}}, 0x753, &(0x7f00000002c0), 0x76}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 11.697802491s ago: executing program 2 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x3}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r5, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x3, 0x600400) sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831", 0xb7, 0x0, 0x0, 0x0) 10.643621804s ago: executing program 2 (id=170): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20200) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x11, &(0x7f0000001200)=@raw=[@call={0x85, 0x0, 0x0, 0x1f}, @alu={0x7, 0x0, 0x3, 0x8, 0x1, 0xffffffffffffffff, 0x10}, @func, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9cd}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xba}}], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc880}, 0x40000) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x3, @win={{0x100002, 0x5, 0x0, 0x3}, 0x6, 0x5, 0x0, 0x753, 0x0, 0x76}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 10.524759035s ago: executing program 1 (id=171): r0 = socket(0xa, 0x3, 0x3a) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 10.448339365s ago: executing program 3 (id=172): semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x40, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x2008040) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 8.160859414s ago: executing program 2 (id=173): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) 7.938254909s ago: executing program 0 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008c40)=@newtfilter={0x1f3c, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x1f10, 0x2, [@TCA_FW_POLICE={0xa4, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xebd6, 0x2, 0xffff, 0xeab3, 0x3, {0x3, 0x2, 0x6, 0x3, 0x2, 0x800}, {0x5, 0x2, 0x1, 0x7ff, 0x9}, 0x2, 0x8217, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff319, 0xffffffffffffffff, 0xfff, 0x0, 0x3, {0x3, 0x0, 0x20, 0x3, 0x0, 0xc69}, {0x0, 0x0, 0xc4, 0x0, 0x40, 0x1ff}, 0x7, 0x4a, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2c0a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_FW_ACT={0x148, 0x4, [@m_tunnel_key={0xe4, 0xc, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xa1, 0x6, "65d99b23d8268a92d95df38a5c95888f1d0b40c4b3f31084c9666ebce01334b002e128df77afdc486c40145752e95a956dd32d3b9e254b6bd44ba8dacb4864758f260db5fa1912b141f40211be0987033c543a22a7b652e8212665472befdaeac892dc3a47d91416364fd417f6dee09acf71e4ea8accf23f36e63d1d1cf764a909ed2dd02ef348f4b142919340a76f550bd73a0d28a904cc1f271d5f08"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x60, 0x16, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x23}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "2ff161440093adb40306cb3a3b55a549"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_ACT={0x1d20, 0x4, [@m_gact={0x90, 0x19, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x25e6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1fe6, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xe, 0x8, 0x7f, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6c09, 0xdb, 0x20000000, 0x4, 0x10}}]}, {0x1a, 0x6, "1b87f35759c07c2d63b2a3b927532f336cfd8613be6e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0xf50c9628ecde09ed}}}}, @m_pedit={0x1c8c, 0xc, 0x0, 0x0, {{0xa}, {0x1c60, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0x7, 0x4, 0x80, 0x80000000}, 0x30, 0xb5}, [{0x10001, 0x9618, 0x4, 0xff, 0xff, 0x1}, {0x7, 0xe, 0x8001, 0x2c1c, 0x7fff, 0xfffffffc}, {0x7, 0x4cb, 0xd, 0x7, 0x80, 0xf48c}, {0x800, 0x4, 0x5, 0x5, 0x36, 0x8}, {0x5, 0x7, 0x7, 0x4, 0x0, 0xfff}, {0xf, 0x7bb, 0xf781, 0xcb, 0x1000, 0x192000}, {0x7f, 0x0, 0x1, 0xffff7fff, 0x6}, {0x3, 0x0, 0x3, 0x388abac8, 0x7, 0x7}, {0x12, 0x5, 0x9, 0x1, 0x5, 0x8}, {0x7, 0xa, 0x5, 0x8, 0x8, 0x3}, {0x80000000, 0x2, 0x6, 0x10, 0x1, 0x5}, {0x6, 0x377a, 0x7, 0x5, 0x1, 0xffffffff}, {0x8, 0xffff, 0x5, 0x80000000, 0x40, 0x4}, {0x239c, 0x4, 0x1, 0x5, 0x7fff, 0x4}, {0x5, 0xc7, 0x2f78, 0xfffffffc, 0x80, 0x9}, {0x20, 0x8, 0x0, 0xa, 0x4, 0x1}, {0x8000, 0x6, 0x7, 0x81, 0x9, 0xffffffc0}, {0x10001, 0x9, 0x3, 0xfffffffb, 0x200, 0x6}, {0x4, 0x1, 0x9, 0x2, 0x10, 0x3}, {0x2, 0x4000000, 0x1, 0xffff, 0x8, 0x9}, {0x0, 0x80000000, 0x2, 0x40c2, 0x9, 0x8}, {0x5, 0x9, 0x2, 0x5, 0x8, 0x9}, {0x5c, 0x5, 0xffffffff, 0x0, 0x2}, {0x5, 0x8, 0x800, 0xfffffff8, 0x3, 0x8}, {0x80000001, 0x8001, 0x1, 0x8, 0x9, 0x4f5}, {0x9, 0x101, 0x8, 0x3, 0x8, 0xa5b}, {0x1, 0xfffffffe, 0x6, 0x4, 0x2, 0x82}, {0x9, 0x7, 0x6, 0x6, 0x5, 0x9}, {0x26, 0x7, 0x49, 0x9fd8, 0x90c, 0x7}, {0x8, 0x6, 0xd, 0x4a, 0x1, 0x80}, {0x8, 0x2, 0x5, 0x6, 0xffff, 0x81}, {0x9, 0x3, 0xc, 0xb, 0x5, 0x9}, {0x6, 0x32c4, 0x9, 0x884, 0xfffffff7, 0x57f3}, {0x9, 0x5, 0x5, 0x2, 0xff}, {0x4, 0x1, 0x10000, 0x7, 0x8, 0x1}, {0xfe, 0x2, 0x10001, 0xa937, 0x3, 0x8}, {0x2, 0x693, 0x2, 0x3, 0x1, 0x8}, {0x5, 0x4, 0x41, 0x0, 0xfffffbff, 0x8}, {0x1, 0x7f, 0x7b, 0x7fffffff, 0x3, 0x4}, {0x6, 0x0, 0x247, 0x1, 0x9, 0x9}, {0xf9, 0x1, 0x9, 0x3, 0x1, 0x2}, {0x3, 0x5, 0xa, 0x8, 0x4e, 0x7d1}, {0x7ff, 0x4f9, 0x80000000, 0x7fff, 0x1ff, 0x1000}, {0x5, 0x9d, 0x2, 0x3, 0x8, 0x8}, {0x1927f552, 0x1, 0x4, 0x200, 0x2, 0x4}, {0x5, 0x40, 0x0, 0x5, 0x3be, 0x8}, {0x2, 0x3, 0x0, 0x8, 0x2814, 0x4}, {0x1, 0xc2, 0x7, 0x9, 0x0, 0x100}, {0x81, 0xa, 0x81, 0x10, 0xffff6c88, 0xaa}, {0x9f9, 0x5a2e9935, 0x6, 0x400, 0x3, 0x84e1}, {0x7, 0x9, 0x7, 0x8, 0x3, 0xfffffffc}, {0xffffffff, 0xffff, 0x4, 0x80000000, 0x91, 0x3}, {0xffff, 0x6, 0x1, 0x64, 0x4, 0x9}, {0x5af0, 0x5, 0x1, 0x4, 0x2, 0x2}, {0xac74, 0x0, 0xfffffffa, 0x2, 0x1000, 0xb}, {0x1, 0x0, 0xe, 0x3, 0xc, 0x1}, {0x3ff, 0x80000001, 0x840, 0x6, 0x15f, 0xfffffffa}, {0x1fd, 0x3, 0x0, 0x5, 0x80000001, 0xffffffff}, {0xffffffff, 0x0, 0xfffff629, 0xa9, 0x9, 0x4}, {0x5, 0x80, 0x7ff, 0x9, 0x7, 0x8f}, {0xfffffff9, 0x1, 0x40, 0x1, 0x7, 0x7}, {0x4, 0x3ff, 0x0, 0xfffffffa, 0x3, 0x7}, {0xcd6b, 0x82, 0x4, 0x4, 0x9, 0xfffffff4}, {0xffffff3a, 0x4, 0x8000, 0x2, 0x10001, 0x2}, {0x9, 0x0, 0x6, 0x80000001, 0x0, 0x9}, {0x944e, 0xfffffff7, 0xd, 0x7, 0x2, 0x3}, {0xf940, 0x1ff, 0x10000, 0x2, 0x3, 0x8}, {0x5, 0x3b85d4ca, 0x200, 0x3ff, 0xf, 0x2}, {0x5, 0x4039, 0xe, 0x0, 0xe, 0x1}, {0x81, 0x4, 0x8, 0x600, 0x6, 0x80000001}, {0x5, 0x8, 0x7, 0x5, 0x1000, 0x401}, {0x1ff, 0x6, 0x69f, 0x3, 0x4, 0x7}, {0x3, 0x9, 0x3, 0x2, 0x2, 0x81}, {0x1, 0x2, 0x0, 0x7ae74748, 0x63, 0x1ff}, {0x8, 0x9, 0x101, 0x22c, 0x7, 0x10001}, {0x1, 0x9, 0x4, 0x5, 0x6, 0x4}, {0x7, 0xa, 0x5, 0xfffffe00, 0x7, 0x8}, {0x8, 0x5, 0x4, 0x1, 0x9, 0xcdc}, {0x9, 0x1, 0x9, 0x5, 0xd, 0x9}, {0x3, 0x7, 0x7, 0x1, 0xc96, 0x7000000}, {0xfa, 0x8, 0xfffff4de, 0x4, 0x1c1, 0xf}, {0xfe000000, 0xfffffff6, 0x2eb6, 0x3, 0x4, 0x1}, {0x9, 0x8, 0x3, 0x1b9c, 0x8, 0x2}, {0x8000, 0x3, 0x1ff, 0x3, 0xfffffffa, 0x1}, {0x6, 0x8, 0x2, 0x2, 0x41dc, 0x4}, {0x7, 0x1, 0x2, 0x0, 0x9, 0x1}, {0x9, 0x0, 0x6, 0xc, 0x1ea4, 0x10000}, {0xffffff80, 0xc, 0xd29f, 0x6, 0x0, 0xdd64}, {0x10, 0x3, 0x7fff, 0x1, 0x8, 0x5}, {0x0, 0x7, 0x40, 0x8001, 0x4, 0x6}, {0x1, 0x60, 0x800, 0xf, 0x7, 0x6}, {0x8, 0x3, 0x6, 0x0, 0x55, 0x1}, {0x5, 0x4, 0x4, 0x7f, 0x8000, 0x6}, {0x8, 0x6, 0x2, 0x0, 0x9793, 0xa}, {0x200, 0x3, 0x8, 0xf, 0x5, 0x1}, {0x6, 0x10000, 0x0, 0x6, 0x8, 0x3}, {0x8, 0x2, 0x1, 0x7, 0xfffffffc, 0xaf}, {0x1, 0x2, 0x613, 0x0, 0x100, 0x6}, {0x8, 0x8, 0x8, 0x1, 0x3, 0x8}, {0x7fffffff, 0x2, 0x401, 0x80000000, 0x9da, 0x7}, {0x401, 0x2, 0x5f, 0x0, 0x3, 0x5}, {0x1c0000, 0x1, 0x7, 0x10, 0x0, 0x6315}, {0x3, 0x80, 0x6, 0xb, 0x0, 0x1}, {0x80, 0x8, 0x2, 0xffffffff, 0x8000, 0x4}, {0x3, 0x9, 0xe8, 0x99, 0x6, 0x6}, {0x6, 0x2ee, 0x0, 0x2, 0x10001, 0x7fffffff}, {0x5, 0x8000, 0x1ff, 0x5, 0x7ff, 0xbf4}, {0x4c, 0x9, 0xfffffff3, 0x6, 0xfffffffe, 0x7}, {0x4, 0x50ef6e86, 0x7, 0x200, 0x300, 0x6}, {0x38, 0xef, 0x834, 0x5, 0x2, 0xffff0000}, {0x400, 0x7, 0x2, 0x8, 0x3ba5, 0xd}, {0x6, 0x3, 0x1, 0x0, 0x8fd, 0x100}, {0x0, 0x80000001, 0x2, 0xfffdfffb, 0x5}, {0x0, 0xad, 0x2, 0x6, 0x5, 0x1}, {0x0, 0xff, 0x3, 0x0, 0x10001, 0x3}, {0xffffff45, 0x7, 0x2, 0xffff0001, 0x40}, {0x3, 0x1ff, 0x1a4, 0x3, 0xb, 0x1}, {0x4, 0x81, 0x200, 0x0, 0xba8e, 0x1ff}, {0x1ff, 0x60, 0x9, 0x9, 0x5, 0x1ff}, {0x2915, 0x401, 0x80000001, 0x9, 0x1, 0xa9}, {0x2, 0x4, 0x702, 0x4, 0x2, 0x9}, {0x5, 0x2, 0xbb5, 0x2, 0x3, 0x7}, {0x1, 0x4000, 0x474, 0xb, 0x80, 0x7}, {0xe, 0x7e, 0xb2, 0xfff, 0x754a, 0xb}, {0x8, 0x5, 0x13b, 0x8, 0x0, 0xe3}, {0x91, 0xfb3d, 0x4, 0x0, 0x1, 0x1}, {0x20000, 0xf, 0x7, 0x7fff, 0x2, 0x7}, {0x2, 0x4, 0x3ff, 0x2, 0x6}], [{0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x2}, {0x5}, {0x4}, {0x3}, {0x5}, {0x5}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x2}, {0x5, 0x1}, {0x6}, {0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x1}, {0x4}, {0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x5}, {0x2, 0x1}, {0x2}, {0x3, 0xd6388b92c1ab6c9}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x1}, {0x5}, {0x5}, {0x3}, {0x5}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x852, 0xf, 0x0, 0x0, 0x8}, 0x7f, 0x9, [{0x2, 0x5, 0xfffffff9, 0x1, 0x3, 0xf88}]}, [{0x7, 0x200, 0x0, 0x7, 0x4, 0x5}, {0x600000, 0xfffffffe, 0x0, 0x0, 0x200}, {0x1, 0x7fffffff, 0x7fffffff, 0x69, 0x2, 0xfffffffd}, {0x2, 0x9, 0x3, 0x5, 0x9}, {0x8, 0x3c000, 0x7, 0x7, 0xfffffff9, 0xffff}, {0x3, 0x3, 0xb, 0x7, 0x138, 0x2}, {0x0, 0x6, 0x10001, 0xff, 0x4, 0xef}, {0x5a15, 0x7, 0x0, 0x7, 0x9, 0x8001}, {0x4, 0x647, 0x10000, 0xfff, 0xd29}, {0xd9, 0x2, 0x4, 0xff, 0x109, 0x8}, {0xfff, 0x9, 0x1, 0x2, 0x5, 0x9}, {0x9, 0xd0e5, 0x1, 0x2, 0x8}, {0x8, 0x6, 0x3, 0x7f, 0x5, 0x6}, {0xfffff238, 0x3, 0x8, 0x8, 0x5, 0x1}, {0x80, 0x6, 0x7, 0x1ff, 0x7fffffff, 0x9}, {0x6, 0x8, 0x81, 0x7, 0x4, 0xe}, {0x2, 0x813b, 0x5, 0xffffff7f, 0x0, 0x9}, {0x440, 0x0, 0x4, 0xe2, 0xc, 0x6}, {0x7ff, 0x0, 0x1, 0x5, 0x8001, 0x10001}, {0x5, 0xf50, 0x2a06, 0x5d4, 0xef, 0x3}, {0x0, 0x5, 0xc02, 0xec, 0x9, 0xe}, {0x3, 0x4, 0x4915, 0x9, 0x3, 0x9}, {0x6, 0x0, 0x402, 0x1, 0x1, 0x2}, {0x9, 0x9, 0xffff3331, 0x64b, 0x8, 0x5}, {0x8, 0x200000, 0x8, 0x0, 0x7f370c96, 0x3ff}, {0x12000, 0x0, 0x8, 0x101, 0x8, 0x7ff}, {0xff, 0x4, 0x2, 0x0, 0x2, 0x3}, {0x1, 0x71, 0x1, 0x4, 0x6, 0x10001}, {0xfffffeff, 0x9, 0x200, 0x80, 0x0, 0x2}, {0x0, 0x578, 0x0, 0x1, 0x81, 0x142e}, {0x9, 0x9, 0x6000000, 0x400, 0x0, 0x8}, {0xfff, 0xd53, 0x7ff, 0x3, 0x10, 0xb4}, {0x5af, 0x80c, 0xb67, 0x11dac504, 0x6, 0x2}, {0xfffffff9, 0xffffffff, 0x2, 0xc, 0xad65, 0x4}, {0x6, 0x2, 0x862, 0xffff, 0x401, 0x8000}, {0x9, 0x72d, 0x9, 0x5, 0x7, 0x38e9}, {0x7, 0xc, 0x1, 0xfef2, 0x1, 0x3}, {0x7, 0x7, 0x4, 0x725, 0x6, 0xb410}, {0x8, 0x0, 0x2, 0x731, 0x2, 0xffffff01}, {0x0, 0x8000, 0x0, 0x0, 0x6, 0x5}, {0x10001, 0x3, 0x3, 0xfffffff8, 0x8}, {0xfffffffd, 0xd, 0x1, 0x3, 0xf5c4, 0x3}, {0x4, 0x8001, 0x1000, 0xfffffe01, 0x9, 0x6}, {0x401, 0x80000001, 0x5, 0xeb9d, 0x2b, 0x3}, {0x77ee, 0xd3, 0x0, 0xd, 0x8a, 0xfffff047}, {0x4, 0x4, 0xdad, 0x1, 0xffffffff, 0x1}, {0x7, 0x81, 0xfffffffe, 0x40, 0x8, 0x8}, {0xb28, 0x6, 0x4, 0xbc, 0x6, 0x9}, {0x5, 0x6, 0x7, 0x80000000, 0x80, 0x8000}, {0x0, 0x3ff, 0x80000001, 0x401, 0x0, 0x2}, {0x8, 0x7, 0xca, 0xfffffff3, 0x1, 0xf07}, {0x1, 0x0, 0x9, 0x7, 0x7, 0xa975}, {0x8, 0x7ff, 0x5, 0xfffffffc, 0x2, 0x7}, {0x3, 0x88db, 0xffffff26, 0x101, 0x6, 0x8}, {0x3608, 0x4, 0x80000000, 0x8, 0x4}, {0xf, 0x3ffc00, 0x0, 0x401, 0xffffffff, 0x9}, {0x9b7, 0x1, 0x6c, 0x6, 0x3, 0x1ff}, {0x3, 0x5, 0xfff, 0x3, 0x7}, {0x8, 0x9, 0x8, 0x6, 0xaed8dba, 0x4}, {0x5, 0x2, 0x7, 0x3, 0x3bade1e9, 0x8}, {0x6, 0x0, 0x1e, 0x10, 0x3, 0x6}, {0x6, 0x5, 0x9, 0x6f, 0x8, 0x7fffffff}, {0x38, 0xfc0a7560, 0x8da, 0x5, 0x5, 0x4}, {0x8, 0x4, 0x7, 0x1, 0x8, 0x8}, {0x400, 0x4, 0x6, 0x5, 0x6, 0x2}, {0xffff, 0x2, 0x2, 0x6, 0x0, 0xffff7fff}, {0x4, 0x4, 0x7, 0x2, 0x1c8, 0x9}, {0x80000001, 0xa, 0x1, 0x3, 0x3, 0xa35}, {0x6, 0x5, 0x0, 0x2, 0x7, 0x4}, {0x7, 0x7, 0x5, 0x2, 0x3, 0x5}, {0x80000001, 0x81, 0x2365, 0x3, 0xffffffff, 0xb4}, {0x9, 0x6de5, 0x0, 0x0, 0x7, 0x4}, {0xf88e, 0x0, 0x6, 0x5, 0x4, 0x9a}, {0xfff, 0x2, 0x7, 0x80000000, 0x6, 0xfffffffe}, {0x8, 0x5, 0x2, 0x21c8adc3, 0x6, 0x400}, {0x8001, 0x10000, 0x0, 0x4, 0x1, 0x80000000}, {0x0, 0x6, 0x4, 0x1, 0x8, 0x4}, {0x256, 0x6, 0x8001, 0x1, 0x81, 0x4}, {0x4, 0x9, 0x3, 0x0, 0xc, 0x7ff}, {0x2, 0x233c1e08, 0x0, 0x6, 0x0, 0xfffffffb}, {0xe0000000, 0x1, 0x1, 0x4, 0x1, 0x3}, {0x7, 0xfffffff9, 0x5, 0x4, 0x8, 0x1ff}, {0x1ff, 0x3, 0x85, 0x5, 0xd7, 0x1}, {0x800, 0x3, 0x5, 0x7, 0x5, 0x1}, {0x4, 0x401, 0x7, 0xffff, 0xff, 0x5aca}, {0x624, 0x9, 0x4e, 0x2, 0x9, 0xe9}, {0x4de, 0x3ff, 0x1, 0x3, 0x80000000, 0x8}, {0x2, 0x4, 0x40, 0x400, 0x70, 0x9}, {0x863, 0x7, 0x2, 0x5, 0x80000001, 0x690}, {0x6, 0xc, 0x9, 0x8, 0x8001, 0x4}, {0xdc2, 0x30000000, 0x9, 0xfffffff9, 0x6, 0x1}, {0x1, 0x200, 0x6, 0x7, 0x6, 0x9}, {0x80, 0x52, 0x40, 0xe43, 0x4, 0x81}, {0x5, 0x98c, 0x931, 0x3, 0x8, 0x4}, {0x1, 0x5, 0x6, 0xfffffffd, 0x231, 0x5}, {0xb, 0x8394, 0x81, 0x2, 0x5, 0xffff8000}, {0x4, 0x3ff, 0x2, 0xffff, 0x4, 0x5}, {0x7, 0xe, 0x1, 0x6, 0x6, 0x6}, {0x4, 0x100, 0x8, 0x7d7a, 0x101, 0x5}, {0x5, 0x3, 0x8, 0x6, 0xff, 0x8000}, {0x5, 0x4, 0x0, 0x3, 0x7ff, 0x400}, {0x5, 0x9, 0x9a, 0x1, 0xc, 0x100}, {0x7db, 0x9, 0x63b, 0x4, 0x5, 0x2}, {0x0, 0x4, 0xb5d9, 0x7, 0x9, 0x4}, {0x1ff, 0x2045, 0x3, 0x9, 0x7, 0xd079}, {0xfff, 0x4e, 0x7, 0x7, 0x3, 0x4}, {0x0, 0x8, 0x1000, 0x5, 0x3, 0x8}, {0x9, 0x4, 0x7, 0x7fff, 0x4}, {0xed6, 0xff, 0x0, 0x200, 0x1, 0x80000000}, {0x4, 0xff, 0x400, 0x100, 0x4}, {0xfffffff0, 0xe6, 0x7, 0x8, 0x8, 0xfffffff9}, {0x80, 0xf, 0x800, 0x3, 0x6, 0x1}, {0x0, 0x5, 0x9, 0x7, 0x70, 0x1}, {0x34, 0x40, 0x401, 0x7, 0x0, 0x4be27028}, {0xfffffffb, 0xaa, 0x0, 0xd1b, 0x4, 0x31500000}, {0x4, 0x3, 0xe8, 0x3, 0x7fff, 0x4}, {0xd18, 0x9, 0x7b7e, 0x4000, 0x7fffffff, 0x80000000}, {0x48, 0x8, 0x51032e20, 0x8000, 0xc3d, 0x2}, {0x3, 0x6, 0x7ff, 0x7, 0x43a0, 0x6}, {0x3, 0x8001, 0x8000, 0x55, 0xa, 0x5}, {0xfffffffa, 0x7, 0x5, 0x4, 0x9, 0x549}, {0x9, 0x0, 0x5, 0xadd, 0x80000000, 0xffff940c}, {0x32, 0x8, 0xd59, 0x7ff, 0x6f89}, {0x0, 0x6, 0x7, 0x6, 0x6, 0x3}, {0x5, 0xd, 0x582, 0x1, 0x1ff, 0x6}, {0xff, 0xfffffffa, 0x74, 0x2, 0x2, 0x1}, {0x0, 0x2, 0x7, 0x8, 0x2856, 0x1}, {0x4ff7, 0x6, 0x3, 0x4, 0x8, 0x200}], [{0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0xd9f9bb0f437d1535}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x8fe91171f22f4571}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3}, {0x3}, {0x3}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x70d5c6bf73ac93e7}, {0x3}, {0x1}, {0x7, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {}, {0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x1}, {0x5}, {0x1}, {0x5}, {0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {}, {}, {}, {0x3}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x1f3c}}, 0x0) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x4, 0x1, {}, {0xee01}, 0x96c, 0x8000000000000000}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 6.823428949s ago: executing program 0 (id=175): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 6.479507322s ago: executing program 4 (id=176): io_uring_setup(0x2688, &(0x7f0000000300)={0x0, 0x600, 0x400, 0x8001002, 0x3d7}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r2, 0x89e1, 0x0) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="64796e2c6175746f63656c6c2c008b1187acc918d45c9c5c963ee4a1"]) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r3}, 0x20) 6.324205507s ago: executing program 1 (id=177): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e4000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000040)=@arm64={0x8, 0x0, 0x6, '\x00', 0x9}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) 5.523045362s ago: executing program 3 (id=178): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 5.408267741s ago: executing program 4 (id=179): connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x46, 0x0, @fd_index=0x1, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x40000) ioctl$UFFDIO_REGISTER(r5, 0xc020aa07, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) 5.332398424s ago: executing program 2 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x3}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r5, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x3, 0x600400) sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831", 0xb7, 0x0, 0x0, 0x0) 5.133459946s ago: executing program 3 (id=181): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4.361912412s ago: executing program 2 (id=182): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) r1 = getpgrp(0x0) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r5, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x200, 0x2a}}}}}, 0x28}}, 0x40840) 4.325005417s ago: executing program 0 (id=183): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000088) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.792579489s ago: executing program 3 (id=184): fanotify_mark(0xffffffffffffffff, 0x105, 0x44009975, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d046586cd70e6073194f835a7080003ffffffab43ea6e00000000ffcf0702aaaaaaaaaa12ff035a2246f60700ff0000000000000a0c02db6ae908000900"/73], 0x40) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) ioprio_get$pid(0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x5}) r2 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a5a440000000010109023b000101000000090400001202060000052406000005240000000d240f01000000000000000000090582020002000000090503020002040000"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000940)={0x14, &(0x7f0000000240)=ANY=[], &(0x7f0000000900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x1c, 0x0, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x8d}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x7}}) 1.643967753s ago: executing program 2 (id=185): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x5, 0x0, 0x0, 0x5}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) 1.55032029s ago: executing program 4 (id=186): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000810000000300", @ANYRES32, @ANYBLOB="ffffffff00006385062d3e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r0 = socket$inet6(0xa, 0x80002, 0xffffffff) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) pipe2$9p(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x11, 0x2, 0x1, 0x0, 0x80001b}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) getdents64(r5, &(0x7f0000002f40)=""/4090, 0xffa) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="9fede03507c901b5282a55940b2dd29111da720f36bdda6f27fe7459999fdd997fb5df1d6ac95160db6773a1546606d62094d25f6707d86abb7c4fc71dcbd5ed14fd8642e08d0bd0da63318f54e9b6941bfacbbc76abb544fa91fc0a43e09a2e959d09f52534ee9e3187bd11ff48e9ecd0a9b8f0d1219099092d4d0d85", 0x7d}], 0x1, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0xe}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="1131563db91429c3abc176acffd48a00f10103efb3eaeb154036193da275519233989efedc0b863113647827e32faafe050908af3f78bc9b86a3b1f2be06693bc8e75bbed1074d23788479238f99045c4559851d8b7bd1fd23749459e9f5f8015ae7356188ee721092e3ca36d91244e883c74594d75fa5ae91f9f07b119dd10b5a83e2e454482b92adcd14c4ad8766762f0bddc89daaceea32d40e986a0a737b74a75c9fbd78dba9f3de1a68618d1684692880823c185b19ae3d1d403bf76e48f96bd96c6599895e2dd1e922978ddc19dd2cc9f4", 0xd4}, {&(0x7f0000000440)="f883c5fd92aa21d34c590d4a6d946d1fc7c61e6fe3c487401b0f03fb7fb0963cca5965418a731ec623", 0x29}, {&(0x7f0000000480)}], 0x3, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0xa8}}], 0x3, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000080)=""/123, 0x7b, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x6}, 0x1c) 568.096524ms ago: executing program 4 (id=187): r0 = socket(0xa, 0x3, 0x3a) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 0s ago: executing program 0 (id=188): semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x40, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x2008040) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 74.244716][ T5784] cgroup: Unknown subsys name 'net' [ 74.545700][ T5784] cgroup: Unknown subsys name 'cpuset' [ 74.611481][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.205925][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.869038][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.893475][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.894881][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.896182][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.897967][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.898924][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.899620][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.900222][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.910444][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.943195][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.944797][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.954080][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.958099][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.958852][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.960124][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.961867][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.016574][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.021691][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.023736][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.025668][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.036680][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.057220][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.069488][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.069491][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.087016][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.794373][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 80.815318][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 80.891365][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 80.963206][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 81.006215][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 81.164131][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.165177][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.165945][ T5809] bridge_slave_0: entered allmulticast mode [ 81.167633][ T5809] bridge_slave_0: entered promiscuous mode [ 81.216045][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.216136][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.216405][ T5814] bridge_slave_0: entered allmulticast mode [ 81.217763][ T5814] bridge_slave_0: entered promiscuous mode [ 81.219442][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.219558][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.219703][ T5809] bridge_slave_1: entered allmulticast mode [ 81.241680][ T5809] bridge_slave_1: entered promiscuous mode [ 81.299262][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.299359][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.299625][ T5814] bridge_slave_1: entered allmulticast mode [ 81.302037][ T5814] bridge_slave_1: entered promiscuous mode [ 81.365883][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.365956][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.366052][ T5796] bridge_slave_0: entered allmulticast mode [ 81.367411][ T5796] bridge_slave_0: entered promiscuous mode [ 81.422158][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.422273][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.422421][ T5796] bridge_slave_1: entered allmulticast mode [ 81.424085][ T5796] bridge_slave_1: entered promiscuous mode [ 81.429617][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.430350][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.430473][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.430626][ T5797] bridge_slave_0: entered allmulticast mode [ 81.434850][ T5797] bridge_slave_0: entered promiscuous mode [ 81.462997][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.501150][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.501242][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.501553][ T5797] bridge_slave_1: entered allmulticast mode [ 81.502995][ T5797] bridge_slave_1: entered promiscuous mode [ 81.503970][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.504063][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.504170][ T5798] bridge_slave_0: entered allmulticast mode [ 81.505503][ T5798] bridge_slave_0: entered promiscuous mode [ 81.509459][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.570371][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.586937][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.587022][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.587120][ T5798] bridge_slave_1: entered allmulticast mode [ 81.588481][ T5798] bridge_slave_1: entered promiscuous mode [ 81.638260][ T809] cfg80211: failed to load regulatory.db [ 81.640712][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.746022][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.954900][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.976964][ T5814] team0: Port device team_slave_0 added [ 81.991472][ T5809] team0: Port device team_slave_0 added [ 81.993331][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.995728][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.999138][ T5814] team0: Port device team_slave_1 added [ 82.021109][ T5807] Bluetooth: hci3: command tx timeout [ 82.039334][ T5809] team0: Port device team_slave_1 added [ 82.043945][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.066633][ T5796] team0: Port device team_slave_0 added [ 82.101020][ T5801] Bluetooth: hci4: command tx timeout [ 82.101261][ T5807] Bluetooth: hci0: command tx timeout [ 82.123726][ T5796] team0: Port device team_slave_1 added [ 82.125299][ T5797] team0: Port device team_slave_0 added [ 82.153401][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.153411][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.153425][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.171025][ T5801] Bluetooth: hci2: command tx timeout [ 82.171270][ T5807] Bluetooth: hci1: command tx timeout [ 82.171999][ T5797] team0: Port device team_slave_1 added [ 82.172952][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.172963][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.172986][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.177014][ T5798] team0: Port device team_slave_0 added [ 82.177712][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.177723][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.177746][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.218305][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.218321][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.218344][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.223509][ T5798] team0: Port device team_slave_1 added [ 82.236378][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.236393][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.236417][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.289636][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.289653][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.289676][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.298029][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.298044][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.298067][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.344202][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.344218][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.344241][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.346888][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.346901][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.346923][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.408317][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.408332][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.408355][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.494090][ T5814] hsr_slave_0: entered promiscuous mode [ 82.495746][ T5814] hsr_slave_1: entered promiscuous mode [ 82.536874][ T5809] hsr_slave_0: entered promiscuous mode [ 82.538234][ T5809] hsr_slave_1: entered promiscuous mode [ 82.539222][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 82.539331][ T5809] Cannot create hsr debugfs directory [ 82.613208][ T5796] hsr_slave_0: entered promiscuous mode [ 82.614410][ T5796] hsr_slave_1: entered promiscuous mode [ 82.615282][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 82.615303][ T5796] Cannot create hsr debugfs directory [ 82.646414][ T5797] hsr_slave_0: entered promiscuous mode [ 82.647673][ T5797] hsr_slave_1: entered promiscuous mode [ 82.648556][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 82.648577][ T5797] Cannot create hsr debugfs directory [ 82.722900][ T5798] hsr_slave_0: entered promiscuous mode [ 82.723671][ T5798] hsr_slave_1: entered promiscuous mode [ 82.724171][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 82.724192][ T5798] Cannot create hsr debugfs directory [ 83.825148][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.864954][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.897814][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.946206][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.031768][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.079340][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.091219][ T5807] Bluetooth: hci3: command tx timeout [ 84.095362][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.157892][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.181019][ T5807] Bluetooth: hci0: command tx timeout [ 84.181050][ T5807] Bluetooth: hci4: command tx timeout [ 84.251444][ T5801] Bluetooth: hci1: command tx timeout [ 84.251475][ T5801] Bluetooth: hci2: command tx timeout [ 84.279796][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.310209][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.334065][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.380342][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.481011][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.508695][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.552654][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.603636][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.724298][ T5798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.777012][ T5798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.808619][ T5798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.848316][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.849775][ T5798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.940802][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.961673][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.986324][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.987159][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.018613][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.018761][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.053581][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.088410][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.088630][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.103701][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.129445][ T1410] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.129564][ T1410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.197238][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.208871][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.245283][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.245431][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.304565][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.304703][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.329670][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.374689][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.377081][ T1410] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.377195][ T1410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.439718][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.440224][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.506514][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.575533][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.575671][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.614524][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.614753][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.729877][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.847043][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.044452][ T5814] veth0_vlan: entered promiscuous mode [ 86.103218][ T5814] veth1_vlan: entered promiscuous mode [ 86.116943][ T5796] veth0_vlan: entered promiscuous mode [ 86.154808][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.171879][ T5807] Bluetooth: hci3: command tx timeout [ 86.177672][ T5796] veth1_vlan: entered promiscuous mode [ 86.183153][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.251353][ T5807] Bluetooth: hci4: command tx timeout [ 86.251384][ T5807] Bluetooth: hci0: command tx timeout [ 86.278906][ T5814] veth0_macvtap: entered promiscuous mode [ 86.300665][ T5814] veth1_macvtap: entered promiscuous mode [ 86.331376][ T5801] Bluetooth: hci2: command tx timeout [ 86.331406][ T5801] Bluetooth: hci1: command tx timeout [ 86.368939][ T5796] veth0_macvtap: entered promiscuous mode [ 86.387730][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.399546][ T5796] veth1_macvtap: entered promiscuous mode [ 86.419610][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.419880][ T5809] veth0_vlan: entered promiscuous mode [ 86.444154][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.477366][ T5797] veth0_vlan: entered promiscuous mode [ 86.499749][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.514725][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.517252][ T5809] veth1_vlan: entered promiscuous mode [ 86.519911][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.537110][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.537868][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.592072][ T5797] veth1_vlan: entered promiscuous mode [ 86.596665][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.700910][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.707881][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.756386][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.780439][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.924915][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.924940][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.958227][ T5809] veth0_macvtap: entered promiscuous mode [ 87.030613][ T5809] veth1_macvtap: entered promiscuous mode [ 87.035845][ T5797] veth0_macvtap: entered promiscuous mode [ 87.073530][ T5797] veth1_macvtap: entered promiscuous mode [ 87.075810][ T1410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.075828][ T1410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.154143][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.154164][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.158663][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.223657][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.226610][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.227520][ T5798] veth0_vlan: entered promiscuous mode [ 87.296904][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.313391][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.313414][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.320025][ T1410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.352126][ T1410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.396754][ T1410] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.404798][ T5798] veth1_vlan: entered promiscuous mode [ 87.420160][ T1410] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.431456][ T1410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.511182][ T1410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.653443][ T1410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.177298][ T1129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.251104][ T5807] Bluetooth: hci3: command tx timeout [ 88.333670][ T5801] Bluetooth: hci4: command tx timeout [ 88.333714][ T5807] Bluetooth: hci0: command tx timeout [ 88.411079][ T5801] Bluetooth: hci2: command tx timeout [ 88.411122][ T5807] Bluetooth: hci1: command tx timeout [ 88.561096][ T5815] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.672381][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.672403][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.698029][ T5798] veth0_macvtap: entered promiscuous mode [ 88.722714][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.722734][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.761433][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.761465][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.762840][ T5815] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 88.762863][ T5815] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 88.762881][ T5815] usb 2-1: Manufacturer: syz [ 88.828354][ T5798] veth1_macvtap: entered promiscuous mode [ 88.844698][ T5815] usb 2-1: config 0 descriptor?? [ 88.854216][ T769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.854240][ T769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.033173][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.033199][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.114612][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.195578][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.265567][ T1129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.270044][ T1129] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.275376][ T1129] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.275417][ T1129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.356175][ T5815] usbhid 2-1:0.0: can't add hid device: -71 [ 89.356292][ T5815] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 89.390747][ T5815] usb 2-1: USB disconnect, device number 2 [ 89.570933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.910435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 89.927773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.036945][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.038056][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.155180][ T769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.155200][ T769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.520905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.830882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.831181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.832225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.833270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.834328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.835372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.793172][ T5949] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 93.603204][ T5961] syz.1.13 (5961) used greatest stack depth: 18656 bytes left [ 94.591464][ T5811] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.792629][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.792659][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.794800][ T5811] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.794825][ T5811] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 94.794836][ T5811] usb 2-1: Manufacturer: syz [ 94.798116][ T5811] usb 2-1: config 0 descriptor?? [ 96.081782][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 96.081884][ T5811] usbhid 2-1:0.0: can't add hid device: -32 [ 96.081955][ T5811] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 96.127786][ T5811] usb 2-1: USB disconnect, device number 3 [ 97.082366][ T5954] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.427414][ T5997] mmap: syz.1.24 (5997) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.464639][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 97.465158][ T5997] openvswitch: netlink: EtherType 0 is less than min 600 [ 97.529627][ T5954] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.534790][ T5954] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 97.534817][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.534836][ T5954] usb 3-1: SerialNumber: syz [ 98.944860][ T5954] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 98.945564][ T5954] usb-storage 3-1:1.0: USB Mass Storage device detected [ 99.033026][ T5954] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 99.737680][ T5954] usb 3-1: USB disconnect, device number 2 [ 102.870006][ T6025] Set syz1 is full, maxelem 6117 reached [ 104.013831][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 104.013861][ T6033] openvswitch: netlink: EtherType 0 is less than min 600 [ 105.911062][ T5811] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.419451][ T5811] usb 5-1: Using ep0 maxpacket: 8 [ 106.422373][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.422427][ T5811] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 106.422449][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.440253][ T5811] usb 5-1: config 0 descriptor?? [ 106.516756][ T5811] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 107.657430][ T5811] gspca_vc032x: reg_r err -110 [ 107.657498][ T5811] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 107.793139][ T6059] Set syz1 is full, maxelem 6117 reached [ 107.849315][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.037576][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.038714][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 108.038741][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.038760][ T10] usb 4-1: SerialNumber: syz [ 108.241034][ T5925] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.447923][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.447955][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.475802][ T5925] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 108.475821][ T5925] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 108.475832][ T5925] usb 2-1: Manufacturer: syz [ 108.532466][ T5925] usb 2-1: config 0 descriptor?? [ 108.684980][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 108.688000][ T10] usb-storage 4-1:1.0: USB Mass Storage device detected [ 108.767751][ T810] usb 5-1: USB disconnect, device number 2 [ 108.834760][ T10] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 109.070232][ T10] usb 4-1: USB disconnect, device number 2 [ 109.273027][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 109.273159][ T5925] usbhid 2-1:0.0: can't add hid device: -32 [ 109.273228][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 110.738485][ T5925] usb 2-1: USB disconnect, device number 4 [ 110.853621][ T6073] Set syz1 is full, maxelem 6117 reached [ 112.461309][ T6081] Bluetooth: MGMT ver 1.23 [ 116.462082][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.663128][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 116.685024][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.685079][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 116.685101][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.754420][ T6119] Zero length message leads to an empty skb [ 116.760541][ T10] usb 2-1: config 0 descriptor?? [ 116.777693][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 117.921091][ T6120] ODEBUG: Out of memory. ODEBUG disabled [ 118.600120][ T6120] Set syz1 is full, maxelem 6117 reached [ 119.584021][ T10] gspca_vc032x: reg_w err -71 [ 119.584105][ T10] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 119.623295][ T10] usb 2-1: USB disconnect, device number 5 [ 125.783555][ T6166] ufs: You didn't specify the type of your ufs filesystem [ 125.783555][ T6166] [ 125.783555][ T6166] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 125.783555][ T6166] [ 125.783555][ T6166] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 125.783754][ T6166] ufs: ufstype=old is supported read-only [ 125.788456][ T6166] ufs: ufs_fill_super(): bad magic number [ 129.491016][ T5811] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.641444][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 129.644711][ T5811] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 129.644737][ T5811] usb 4-1: config 0 has no interface number 0 [ 129.646980][ T5811] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 129.646996][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.647006][ T5811] usb 4-1: Product: syz [ 129.647013][ T5811] usb 4-1: Manufacturer: syz [ 129.647021][ T5811] usb 4-1: SerialNumber: syz [ 129.707602][ T5811] usb 4-1: config 0 descriptor?? [ 129.724058][ T5811] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 129.858858][ T6200] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.973310][ T5811] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 130.133289][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 130.202019][ T5811] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 130.262070][ T5811] usb 4-1: USB disconnect, device number 3 [ 130.285666][ T5811] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 130.308586][ T5811] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 130.325748][ T5811] quatech2 4-1:0.51: device disconnected [ 132.760181][ T6213] ======================================================= [ 132.760181][ T6213] WARNING: The mand mount option has been deprecated and [ 132.760181][ T6213] and is ignored by this kernel. Remove the mand [ 132.760181][ T6213] option from the mount to silence this warning. [ 132.760181][ T6213] ======================================================= [ 132.864193][ T6213] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 133.163097][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.163170][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.200947][ T5807] Bluetooth: hci4: link tx timeout [ 138.202733][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.204753][ T5807] Bluetooth: hci4: link tx timeout [ 138.204767][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.204884][ T5807] Bluetooth: hci4: link tx timeout [ 138.204894][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.204907][ T5807] Bluetooth: hci4: link tx timeout [ 138.204914][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.243609][ T5807] Bluetooth: hci4: link tx timeout [ 138.243634][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.243650][ T5807] Bluetooth: hci4: link tx timeout [ 138.243659][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.257184][ T5807] Bluetooth: hci4: link tx timeout [ 138.257202][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.257217][ T5807] Bluetooth: hci4: link tx timeout [ 138.257225][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.262805][ T5807] Bluetooth: hci4: link tx timeout [ 138.262823][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.262838][ T5807] Bluetooth: hci4: link tx timeout [ 138.262899][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.273709][ T5807] Bluetooth: hci4: link tx timeout [ 138.273728][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.273744][ T5807] Bluetooth: hci4: link tx timeout [ 138.273753][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.283726][ T5807] Bluetooth: hci4: link tx timeout [ 138.283747][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.283763][ T5807] Bluetooth: hci4: link tx timeout [ 138.283773][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.289261][ T5807] Bluetooth: hci4: link tx timeout [ 138.289277][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.289292][ T5807] Bluetooth: hci4: link tx timeout [ 138.289301][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.296086][ T5807] Bluetooth: hci4: link tx timeout [ 138.296104][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.296119][ T5807] Bluetooth: hci4: link tx timeout [ 138.296128][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.342038][ T5807] Bluetooth: hci4: link tx timeout [ 138.342059][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.342076][ T5807] Bluetooth: hci4: link tx timeout [ 138.342085][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.364487][ T5807] Bluetooth: hci4: link tx timeout [ 138.364507][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.364523][ T5807] Bluetooth: hci4: link tx timeout [ 138.364532][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.372573][ T5807] Bluetooth: hci4: link tx timeout [ 138.372592][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.372614][ T5807] Bluetooth: hci4: link tx timeout [ 138.372624][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.415575][ T5807] Bluetooth: hci4: link tx timeout [ 138.415603][ T5807] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.415618][ T5807] Bluetooth: hci4: link tx timeout [ 138.415628][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.262105][ T5807] Bluetooth: hci4: command 0x0406 tx timeout [ 140.863457][ T5925] IPVS: starting estimator thread 0... [ 140.971346][ T6262] IPVS: using max 15 ests per chain, 36000 per kthread [ 141.556418][ T6269] ufs: You didn't specify the type of your ufs filesystem [ 141.556418][ T6269] [ 141.556418][ T6269] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 141.556418][ T6269] [ 141.556418][ T6269] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 141.556439][ T6269] ufs: ufstype=old is supported read-only [ 141.556670][ T6269] ufs: ufs_fill_super(): bad magic number [ 142.832056][ T6274] overlayfs: overlapping lowerdir path [ 143.127417][ T5807] Bluetooth: hci4: command 0x0406 tx timeout [ 144.155881][ T6279] netlink: 48 bytes leftover after parsing attributes in process `syz.3.103'. [ 144.156025][ T6279] netlink: 48 bytes leftover after parsing attributes in process `syz.3.103'. [ 148.660463][ T5807] Bluetooth: hci4: command 0x0406 tx timeout [ 149.106738][ T5799] IPVS: starting estimator thread 0... [ 149.191124][ T6320] IPVS: using max 15 ests per chain, 36000 per kthread [ 149.235778][ T6322] netlink: 48 bytes leftover after parsing attributes in process `syz.2.118'. [ 149.235957][ T6322] netlink: 48 bytes leftover after parsing attributes in process `syz.2.118'. [ 155.331083][ T810] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 155.487824][ T6359] netlink: 48 bytes leftover after parsing attributes in process `syz.2.129'. [ 155.488068][ T6359] netlink: 48 bytes leftover after parsing attributes in process `syz.2.129'. [ 155.512194][ T810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.512228][ T810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.512251][ T810] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.512292][ T810] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 155.512315][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.065810][ T6366] netlink: 32 bytes leftover after parsing attributes in process `syz.0.123'. [ 156.395919][ T810] usb 4-1: config 0 descriptor?? [ 157.153038][ T810] ntrig 0003:1B96:0004.0001: unbalanced delimiter at end of report description [ 157.159126][ T810] ntrig 0003:1B96:0004.0001: parse failed [ 157.159234][ T810] ntrig 0003:1B96:0004.0001: probe with driver ntrig failed with error -22 [ 157.378230][ T5925] usb 4-1: USB disconnect, device number 4 [ 158.789642][ T5811] IPVS: starting estimator thread 0... [ 158.871043][ T6387] IPVS: using max 12 ests per chain, 28800 per kthread [ 160.392143][ T6391] Set syz1 is full, maxelem 6117 reached [ 164.811184][ T6409] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.183014][ T6457] Set syz1 is full, maxelem 6117 reached [ 181.783528][ T6513] ufs: You didn't specify the type of your ufs filesystem [ 181.783528][ T6513] [ 181.783528][ T6513] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 181.783528][ T6513] [ 181.783528][ T6513] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 181.783566][ T6513] ufs: ufstype=old is supported read-only [ 181.784054][ T6513] ufs: ufs_fill_super(): bad magic number [ 187.176565][ T6540] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 187.253741][ T6542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.175'. [ 187.473036][ T6540] bond1: (slave gretap1): making interface the new active one [ 187.527360][ T6540] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 187.814273][ T6542] macvlan2: entered promiscuous mode [ 187.814296][ T6542] macvlan2: entered allmulticast mode [ 187.815437][ T6542] bond1: entered promiscuous mode [ 187.815449][ T6542] gretap1: entered promiscuous mode [ 187.816224][ T6542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.816789][ T6542] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 187.817270][ T6542] bond1: left promiscuous mode [ 187.817280][ T6542] gretap1: left promiscuous mode [ 190.382374][ T6563] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 194.139347][ T6578] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 194.261229][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.261296][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.678430][ T6578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.902485][ C1] ------------[ cut here ]------------ [ 194.902495][ C1] 1 [ 194.902504][ C1] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#1: ktimers/1/29 [ 194.902529][ C1] Modules linked in: [ 194.902555][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 194.902566][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.902575][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 194.902588][ C1] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 194.902597][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 194.902605][ C1] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801d2bbc80 [ 194.902613][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 194.902618][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 194.902624][ C1] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000001 [ 194.902631][ C1] R13: 00000000ffffd640 R14: 1ffff92000147f4c R15: ffff88805ecedf38 [ 194.902637][ C1] FS: 0000000000000000(0000) GS:ffff888126443000(0000) knlGS:0000000000000000 [ 194.902645][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.902651][ C1] CR2: 0000200000026000 CR3: 00000000290c2000 CR4: 00000000003526f0 [ 194.902660][ C1] Call Trace: [ 194.902667][ C1] [ 194.902672][ C1] call_timer_fn+0x192/0x640 [ 194.902684][ C1] ? __pfx_stub_timer+0x10/0x10 [ 194.902692][ C1] ? call_timer_fn+0xd4/0x640 [ 194.902701][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 194.902710][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 194.902729][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.902743][ C1] ? __pfx_stub_timer+0x10/0x10 [ 194.902753][ C1] __run_timer_base+0x6a3/0x9f0 [ 194.902776][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 194.902799][ C1] run_timer_softirq+0xb7/0x170 [ 194.902814][ C1] handle_softirqs+0x1de/0x6f0 [ 194.902833][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 194.902847][ C1] run_ktimerd+0x69/0x100 [ 194.902862][ C1] smpboot_thread_fn+0x541/0xa50 [ 194.902877][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 194.902898][ C1] kthread+0x388/0x470 [ 194.902909][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 194.902922][ C1] ? __pfx_kthread+0x10/0x10 [ 194.902933][ C1] ret_from_fork+0x51e/0xb90 [ 194.902951][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 194.902965][ C1] ? __switch_to+0xc7d/0x1450 [ 194.902980][ C1] ? __pfx_kthread+0x10/0x10 [ 194.902991][ C1] ret_from_fork_asm+0x1a/0x30 [ 194.903010][ C1] [ 194.903019][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 194.903026][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 194.903037][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.903042][ C1] Call Trace: [ 194.903046][ C1] [ 194.903050][ C1] vpanic+0x56c/0xa60 [ 194.903065][ C1] ? __pfx__printk+0x10/0x10 [ 194.903076][ C1] ? __pfx_vpanic+0x10/0x10 [ 194.903089][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 194.903103][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 194.903120][ C1] panic+0xc5/0xd0 [ 194.903133][ C1] ? __pfx_panic+0x10/0x10 [ 194.903152][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 194.903164][ C1] __warn+0x315/0x4f0 [ 194.903177][ C1] ? stub_timer+0xa/0x20 [ 194.903187][ C1] ? stub_timer+0xa/0x20 [ 194.903196][ C1] __report_bug+0x29a/0x540 [ 194.903218][ C1] ? stub_timer+0xa/0x20 [ 194.903227][ C1] ? __pfx___report_bug+0x10/0x10 [ 194.903237][ C1] ? rcu_is_watching+0x15/0xb0 [ 194.903252][ C1] ? stub_timer+0xc/0x20 [ 194.903260][ C1] ? stub_timer+0xa/0x20 [ 194.903271][ C1] ? stub_timer+0xa/0x20 [ 194.903280][ C1] report_bug+0x16a/0x220 [ 194.903292][ C1] ? stub_timer+0xa/0x20 [ 194.903299][ C1] ? stub_timer+0xc/0x20 [ 194.903307][ C1] handle_bug+0x98/0x200 [ 194.903322][ C1] exc_invalid_op+0x1a/0x50 [ 194.903336][ C1] asm_exc_invalid_op+0x1a/0x20 [ 194.903346][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 194.903355][ C1] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 194.903362][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 194.903370][ C1] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801d2bbc80 [ 194.903377][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 194.903383][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 194.903389][ C1] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000001 [ 194.903395][ C1] R13: 00000000ffffd640 R14: 1ffff92000147f4c R15: ffff88805ecedf38 [ 194.903404][ C1] ? __pfx_stub_timer+0x10/0x10 [ 194.903414][ C1] ? stub_timer+0x9/0x20 [ 194.903426][ C1] ? stub_timer+0x9/0x20 [ 194.903433][ C1] call_timer_fn+0x192/0x640 [ 194.903443][ C1] ? __pfx_stub_timer+0x10/0x10 [ 194.903451][ C1] ? call_timer_fn+0xd4/0x640 [ 194.903460][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 194.903468][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 194.903486][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.903499][ C1] ? __pfx_stub_timer+0x10/0x10 [ 194.903509][ C1] __run_timer_base+0x6a3/0x9f0 [ 194.903530][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 194.903553][ C1] run_timer_softirq+0xb7/0x170 [ 194.903567][ C1] handle_softirqs+0x1de/0x6f0 [ 194.903586][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 194.903599][ C1] run_ktimerd+0x69/0x100 [ 194.903613][ C1] smpboot_thread_fn+0x541/0xa50 [ 194.903628][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 194.903647][ C1] kthread+0x388/0x470 [ 194.903657][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 194.903671][ C1] ? __pfx_kthread+0x10/0x10 [ 194.903682][ C1] ret_from_fork+0x51e/0xb90 [ 194.903696][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 194.903709][ C1] ? __switch_to+0xc7d/0x1450 [ 194.903723][ C1] ? __pfx_kthread+0x10/0x10 [ 194.903734][ C1] ret_from_fork_asm+0x1a/0x30 [ 194.903752][ C1] [ 194.904159][ C1] Kernel Offset: disabled