last executing test programs: 2m38.379418062s ago: executing program 1 (id=1005): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000400"/25], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f00000033c0)=""/4113, 0x1011}, {&(0x7f00000015c0)=""/228, 0xe4}, {&(0x7f00000016c0)=""/211, 0xd3}], 0x4}, 0x401}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x0, 0x0) 2m34.333232927s ago: executing program 1 (id=1010): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @pic={0x0, 0x0, 0x68, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x8], [0xff, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff], [0xfff]], '\x00', [{0x7fffffff, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x2}, {0x0, 0x3def}, {0x0, 0xfffffffc}, {0x3, 0x40000000}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000a40), 0x1, 0x1) (async) r3 = syz_open_dev$sndpcmp(&(0x7f0000000a40), 0x1, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000300)={0x5, [[0x2, 0x42212d2b, 0x8, 0x33, 0x5, 0x6e8f, 0x6, 0x7], [0x2, 0x7, 0x5, 0x3, 0x4, 0xb, 0x6, 0x7], [0x0, 0x3, 0x0, 0x8, 0x8f59, 0x401, 0x8, 0x5]], '\x00', [{0x5, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x81, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x499, 0x80000000, 0x1, 0x1, 0x0, 0x1}, {0x45f, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x9, 0xc, 0x1, 0x1, 0x0, 0x1}, {0xb39, 0x200, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xa, 0x2, 0x0, 0x1, 0x1}, {0x9af, 0x10001}, {0xff8b, 0xc, 0x1}, {0x3ff, 0x400, 0x1, 0x0, 0x1}], '\x00', 0x3}) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000300)={0x5, [[0x2, 0x42212d2b, 0x8, 0x33, 0x5, 0x6e8f, 0x6, 0x7], [0x2, 0x7, 0x5, 0x3, 0x4, 0xb, 0x6, 0x7], [0x0, 0x3, 0x0, 0x8, 0x8f59, 0x401, 0x8, 0x5]], '\x00', [{0x5, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x81, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x499, 0x80000000, 0x1, 0x1, 0x0, 0x1}, {0x45f, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x9, 0xc, 0x1, 0x1, 0x0, 0x1}, {0xb39, 0x200, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xa, 0x2, 0x0, 0x1, 0x1}, {0x9af, 0x10001}, {0xff8b, 0xc, 0x1}, {0x3ff, 0x400, 0x1, 0x0, 0x1}], '\x00', 0x3}) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000002d03010000000000bf67000000000000150002000fff5d004507000007fffe00d606feff0ee60000bf1600000000000040700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa7eb8d33ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4b427ee5b708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340f2249cc60a8dec5b8a9ac6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d400009541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff674781281c6b93447312cc93c738b6a83a2e83225af295e0776d033557913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a2e04f657a7259922602ffdd3375a4b0f864db09907c7b8e97abb824c1f3167cff71e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe6e94c5a080fe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82, 0xca9a3b}], 0x1, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3ff}, [@generic={0x91, 0x1, 0x1, 0x69}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3ff}, [@generic={0x91, 0x1, 0x1, 0x69}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000365000/0x2000)=nil, 0x2000, 0x600000, 0x6, &(0x7f0000a00000/0x600000)=nil) 2m32.76369124s ago: executing program 0 (id=1016): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 2m32.546338581s ago: executing program 0 (id=1017): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001080)={0x0, 0xfffffe00}, &(0x7f00000010c0)=0x8) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b00000018010000646c6c2500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b7030000020000000000000000b5030000000000008500000076000800b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x800, &(0x7f0000000180)={0xc9, 0x3, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001100)=@deltfilter={0xa194, 0x2d, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x3, 0x5}, {0xb, 0x8}, {0xfff3, 0x249636bfdf735df7}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_matchall={{0xd}, {0x595c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0x5950, 0x2, [@m_vlan={0xcc, 0x11, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xab, 0x5, 0x6, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9da}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7cd}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfff, 0x7fffffff, 0x6, 0x5, 0x3}, 0x2}}]}, {0x47, 0x6, "1b809500e3c57390eb0f0cea7f7b0969c6251631e41613e7ccdbb8673d6812abb1eba2436fce769ab9dbbf4e961d611fb1743671c2a86c3db668281e7f4dfb46492da7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x152c, 0x20, 0x0, 0x0, {{0xb}, {0x14e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x72a}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0x0, 0x5, 0x400, {0x2, 0x2, 0xd, 0x8, 0x1, 0x401}, {0x5, 0x2, 0x2, 0x280, 0x1000, 0x7660}, 0x9, 0x86, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x0, 0x10, 0x3, 0xa, 0x5, 0x7, 0x6, 0x9, 0x9, 0x8, 0x4, 0xa334, 0x0, 0x9, 0x4, 0x1, 0x0, 0xfffffff8, 0x8, 0x2, 0x7, 0x2, 0x20000000, 0x7, 0x2, 0x9, 0x9, 0xfffffff7, 0x1, 0x3, 0x7, 0x9, 0x9, 0x1ff, 0x1000, 0x1000, 0x2c, 0x7, 0x1, 0x9, 0x5, 0x2, 0x7, 0x0, 0x5, 0x8, 0x0, 0x3, 0x81, 0x8, 0x4, 0xfff, 0x4, 0x3, 0x4, 0xf, 0x8000, 0x5445, 0x1, 0x6c, 0x4, 0x1, 0x2, 0xed, 0x2, 0x8, 0x8, 0x8, 0x0, 0x5, 0x800, 0x6, 0x8, 0x24000000, 0x7ff, 0x8000, 0xa966, 0x3, 0x4, 0x209, 0x2, 0x3, 0x1aa0, 0x4, 0xf, 0x689, 0x7, 0x51, 0x6, 0xffffffff, 0x3, 0x5, 0x0, 0x0, 0x2, 0x6, 0xf6f4, 0xd2, 0xfff, 0x7, 0x2, 0xc, 0xffff, 0x101, 0x65, 0xd2, 0x1ff, 0x4, 0x8, 0x7ff, 0xbee1, 0xc68, 0x8, 0x8, 0x7, 0xfffffff1, 0x8e5e, 0x7, 0x3, 0x2, 0x0, 0x18, 0x2, 0xcc, 0x3, 0x2, 0x8001, 0x75a0, 0x9, 0x7, 0x7f, 0x9, 0x3, 0x1000, 0x2727, 0x2, 0x81, 0xffff, 0x2, 0x7, 0x7, 0xf, 0x32, 0x8, 0x4, 0x9a6, 0x10, 0x5, 0xffff, 0x101, 0x7, 0x8, 0x2, 0x65a3, 0x3, 0x2267, 0x2, 0x6, 0xffff, 0x2, 0x7fffffff, 0x8, 0x2, 0x6, 0x0, 0x10000, 0x4769082f, 0x8000, 0xfffeffff, 0x40, 0x3, 0x0, 0x7ff, 0x8000, 0x1, 0x3, 0x6c2, 0x1, 0x0, 0x8, 0x3, 0x7d, 0xf, 0x0, 0x835, 0x0, 0x2, 0x2, 0x0, 0x139, 0x5, 0xa, 0x420c, 0x10000, 0x0, 0x40, 0x6, 0x8, 0x0, 0x0, 0x10000, 0x3, 0x80000000, 0x4, 0x8, 0x1, 0x1ff, 0x8, 0x1, 0x100, 0x9, 0xe4, 0xffffffff, 0x101, 0x3ff, 0x80000000, 0x9, 0x100, 0x3, 0x0, 0x3b, 0x9, 0x30d, 0xffffffff, 0x0, 0xf24000, 0x80000001, 0x7, 0x6, 0x40, 0x101, 0x2, 0x4, 0x6, 0x80, 0x7, 0x8, 0x0, 0x2, 0x2, 0xd9c80000, 0x671b, 0x2, 0x2, 0x6, 0x5, 0x400, 0x2, 0x58, 0x7, 0x1ff, 0x2, 0x3, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xffffffff, 0xf, 0x1, 0x2, 0x2, 0x0, 0x7, 0x2, 0x5, 0x9, 0x7, 0x1, 0x0, 0x4, 0x9, 0xffffffff, 0x9, 0x800, 0x7, 0x2, 0x5, 0x8, 0x5, 0x2, 0x2, 0x8d, 0x3, 0x2, 0x9, 0x92bd, 0xf40e, 0x2, 0x5, 0x2, 0x7, 0x7f, 0x1, 0x7, 0x2, 0x5, 0x1, 0x4, 0x1ff, 0x7, 0x5, 0x6, 0x5, 0x8c8d, 0x951, 0x2, 0x1, 0x0, 0x5, 0x5, 0x6, 0x8, 0x7fff, 0x7, 0xfffffff9, 0x10001, 0x7, 0x6, 0x7ff, 0xfffffff9, 0x7, 0x8, 0x4, 0x400, 0x3, 0x3, 0x4, 0x9, 0xf5, 0xa, 0x7, 0x8, 0x8, 0x1, 0x2, 0x3, 0x8, 0x6, 0x0, 0x6, 0x9, 0xfffffffd, 0x1, 0x4, 0x0, 0xfffffffe, 0xfffffff8, 0xc5, 0xab, 0x0, 0x87f, 0xfff, 0x6, 0xb71b, 0x6, 0x4, 0x7fd, 0x1, 0x8001, 0x8001, 0x1, 0x3, 0x7, 0xa, 0xac3, 0x80000001, 0x7fffffff, 0x9, 0x7ff, 0xf, 0x0, 0x8, 0x3, 0x9, 0x4, 0xfffffff7, 0x9f9c, 0x5b, 0x9, 0x28, 0x4, 0x6, 0x1000, 0x10001, 0xfe7f, 0x1000, 0x4, 0xfffffff9, 0x3, 0x5, 0xf, 0x4, 0x5, 0x401, 0x3, 0xa, 0xc, 0xf, 0x800, 0xe, 0x2, 0x2, 0x3, 0x1, 0x3, 0x0, 0xd8, 0x2, 0x4, 0x8, 0x3, 0x2, 0x5, 0xce, 0x9, 0x3, 0x2, 0x8, 0x4, 0x99, 0x200, 0x1ff, 0x5158, 0x8, 0x7, 0x9, 0x9, 0x101, 0x4, 0x101, 0x6, 0xa, 0x6, 0x4, 0xf, 0x9, 0xe, 0x7, 0xffffc46d, 0x1, 0xad5, 0x0, 0x80000001, 0xbe, 0x404c, 0x8, 0x6, 0x80000000, 0x0, 0x1, 0x5, 0xc, 0x8, 0x33c, 0x0, 0x6, 0xffffffff, 0x8, 0x7fffffff, 0xfffff19b, 0xe, 0x7, 0x10000, 0x100, 0x9, 0x1, 0x2, 0x101, 0xbc, 0xb4, 0x9, 0x40800000, 0x1, 0x4, 0x8, 0x3, 0xfffffbff, 0x800, 0x6, 0xd1, 0x43, 0x5, 0x0, 0x0, 0x80, 0x3, 0x800, 0x10000, 0xa00000, 0x5, 0x8000, 0x6, 0x0, 0x9, 0x7, 0x9, 0x1000, 0x7fff, 0xc, 0x6, 0x4, 0x80000000, 0x1, 0x8, 0x51702e4e, 0x7fffffff, 0x0, 0x4, 0xc, 0x9, 0xa091d87]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0x10, 0x5, 0x7, {0xe, 0x2, 0xfff, 0x400, 0x2796, 0x2}, {0x8, 0x2, 0xa, 0x8, 0x972d, 0x3}, 0x3a, 0x7, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0x9c22, 0x0, 0x7ff, 0x7, 0xe, 0x6, 0xb, 0xfffffffb, 0x3, 0x6, 0x163, 0x7, 0x1000, 0x7fffffff, 0x800, 0x3b2, 0x0, 0xc6, 0x10000, 0xfffffffc, 0x0, 0x4, 0x2, 0x5ac5, 0x5, 0xd, 0x9, 0x2, 0x9, 0x7, 0x1, 0x80000001, 0xffff05d9, 0x3, 0x1, 0x7, 0x2, 0x3, 0x4, 0x200, 0x2, 0x6, 0xffffffff, 0x8, 0x1, 0x5, 0x8, 0x1, 0xfffffff8, 0x2, 0x4, 0x7, 0xe7ba, 0x800, 0x100, 0x0, 0x4, 0x4, 0x8, 0x3, 0xfff, 0x4, 0x9, 0xffffffff, 0x200, 0x8, 0x6, 0x3, 0x2, 0x5, 0x52f0, 0xf5c3, 0x1, 0x2c, 0x9, 0x5, 0x9, 0x5, 0x6, 0x80, 0x5, 0x100, 0x6, 0xfffffff7, 0xd, 0x6, 0xa65c, 0x0, 0x11, 0x3, 0x2, 0x1, 0xa, 0x8c2b, 0x461, 0x4, 0x3, 0xffff9fe5, 0xb21, 0x7, 0x1, 0x7, 0x0, 0x48000000, 0x4, 0x2, 0x5, 0x3e9bfbd0, 0x5, 0x3, 0x2, 0x10000, 0x10001, 0x10000, 0xf, 0x83, 0x401, 0xc76c8600, 0xd, 0x2, 0x7fffffff, 0x1f6, 0x8000, 0xd, 0x8, 0x80000000, 0x5, 0x3, 0x80000000, 0x4, 0x7fffffff, 0x9, 0x4, 0x3, 0x3, 0x1d4, 0xfffffff8, 0x4, 0x5, 0x6, 0x2, 0xe, 0xde0, 0xa2, 0xf, 0x3, 0x8, 0x0, 0x10001, 0x7, 0x4, 0x14e4, 0x8000, 0x6d, 0x8, 0x7ff, 0xcea, 0x2, 0xfffffff8, 0x2, 0xfffeffff, 0x9, 0x4, 0x2, 0x6, 0x4, 0x9, 0x2, 0xa, 0x7, 0xfff, 0x6, 0x2, 0x6, 0x452, 0x7, 0x1, 0x80000000, 0x1, 0x3, 0xfffffbce, 0x237f, 0x6, 0x7ff, 0x1, 0x10000, 0x3a5, 0x5, 0x8, 0x2, 0x6, 0x5, 0xc, 0x5, 0xffffed31, 0x1, 0x8, 0x5, 0x4, 0x3, 0x9, 0x9, 0x8, 0x5, 0x80000001, 0x6, 0x1, 0x966, 0x800, 0x81, 0x92ee, 0xfe37, 0x8, 0x74c2090d, 0x57, 0xf7c, 0x2, 0xfff, 0x7, 0xfffffffc, 0xc1, 0xdea, 0x8, 0x5, 0x4, 0x4, 0x79f0, 0x7, 0xbd0, 0x1eb, 0x800, 0xffffff99, 0xffffffff, 0x192b, 0xffff, 0x3, 0x8, 0x1, 0x8, 0x7, 0x8760, 0x0, 0x8, 0x8000, 0x8001, 0x800, 0x69, 0x7, 0x4, 0x8, 0x1, 0x10001, 0x0, 0xfffffc00, 0x200, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x9, 0x313a07ff, 0x4, 0x10001, 0x4, 0x4, 0x0, 0xfffffff7, 0x80000001, 0x3, 0x73, 0x80, 0x7, 0x57a, 0xfffffff9, 0x3, 0x4f3, 0x3ff, 0xffff, 0x8, 0x8, 0x4, 0x1ff, 0x8, 0x0, 0x44f9, 0x7, 0x1, 0x10, 0x41b, 0x7, 0xd, 0xfffffffd, 0x5, 0x5, 0x1, 0x3, 0xfffffff8, 0x4, 0x80000001, 0x10, 0xffffffff, 0x8, 0xffff8000, 0xffffffff, 0xb4d, 0x3, 0x2, 0xa179, 0x9, 0xfffffffa, 0x4, 0x33, 0x400, 0xc7, 0x38, 0x7, 0x9, 0x80, 0x78e, 0x3, 0x4, 0x6, 0x2, 0x7, 0x2, 0x0, 0x8, 0x359, 0x0, 0x0, 0x3, 0xd2, 0x81, 0x0, 0x10001, 0x8, 0x6, 0xc, 0x5be1bb4d, 0x2, 0xffff, 0xb38, 0x8, 0x1, 0x4, 0x6, 0x7, 0x0, 0x7, 0x5, 0x8001, 0x5, 0x8, 0x401, 0x8, 0x1800000, 0x8, 0xf, 0x80000001, 0x7, 0x8, 0x5, 0x1, 0x3, 0x10000, 0xfffffff9, 0x0, 0x40, 0x2, 0x800, 0x10, 0x6, 0xff, 0x1, 0x919c, 0x2, 0x7f, 0x5, 0x233, 0x6, 0x4c30, 0x24963e27, 0x8, 0x28c0a251, 0x401, 0x4, 0x1, 0x2, 0x1, 0xce99, 0x9, 0xc1, 0x2, 0xd3, 0x8, 0x3, 0x2, 0xfffffff9, 0x2, 0x0, 0x2, 0x1, 0x2, 0x3, 0x401, 0x8, 0x9, 0x101, 0x10001, 0x13d58f4, 0xf, 0x0, 0xffffffff, 0x3ff, 0x4, 0x6, 0x1, 0xfffffff7, 0x80000000, 0xf, 0xb, 0x4000, 0x10000, 0x8, 0x8, 0xecf0, 0x0, 0x6, 0x9, 0xe1a, 0xa, 0xfa6a, 0x9, 0x7, 0x54f, 0x82, 0x3, 0x9, 0x10, 0x3, 0x4, 0x7f, 0x5, 0x1, 0x2, 0xffff, 0x80000000, 0xdf21, 0x5, 0x0, 0x7, 0x3, 0x6, 0xa, 0x6, 0x3, 0x80000001, 0x4, 0xf2, 0x10, 0xfff, 0x2, 0xffff, 0x101, 0x2, 0x10, 0xca, 0x4, 0xe6c, 0x400, 0x0, 0x2, 0x7fff, 0x80, 0xa, 0x80000000, 0x50, 0x800, 0x61, 0xdbe, 0x8, 0x8, 0x1, 0x1, 0x8, 0x7, 0x1ff, 0x9, 0xc, 0x5, 0x2, 0xf, 0x9, 0x101, 0x2, 0x0, 0x9, 0x2, 0x9, 0x98c6, 0x4, 0x9, 0x4, 0xf9, 0x9, 0xf, 0xffffffff, 0x2, 0x3000, 0x6, 0x1, 0x3, 0x8, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xb, 0x18, 0x6, 0x5, 0x99, 0x4, 0x200, 0x1ff, 0x7fff, 0x7f, 0x4, 0xfff, 0x10, 0x5b, 0xbae, 0x2, 0x7, 0x4, 0x8001, 0x9, 0x1, 0x7, 0x2, 0x3, 0x2d6c, 0x4b, 0x2, 0x6, 0x1, 0xc, 0x2, 0x0, 0x9, 0x91, 0xd, 0x4, 0xfffffffb, 0x7, 0x0, 0x1, 0x4, 0x0, 0xff, 0x8001, 0x7, 0x3, 0x1, 0x7, 0xb, 0x100, 0x0, 0x882, 0x3, 0x7f, 0x401, 0x5, 0x2, 0x3, 0xf5, 0xf5, 0xffff, 0xbb, 0x2, 0x853, 0x80000001, 0x200, 0x3, 0x80000000, 0x80000000, 0x80, 0xffffffff, 0xff, 0x1, 0xf, 0x822f, 0x0, 0x0, 0x5, 0x2, 0x0, 0x8000, 0x401, 0xa68d, 0x217, 0x2, 0x3, 0x8000, 0xf97, 0x6, 0x0, 0x6, 0x100, 0xfffffff3, 0x4, 0x3, 0x6, 0x17, 0x1, 0xffffffff, 0xd26, 0x5, 0x8, 0x3, 0x32d1ea04, 0x3, 0x80, 0x8001, 0x7, 0xffffffff, 0x4, 0x6, 0x1, 0x800, 0x33e, 0x0, 0x4, 0x8, 0x3, 0x4, 0x2, 0x2, 0x4, 0x41a, 0x8, 0x3, 0x3, 0x7fff, 0x1c0, 0x1, 0x10001, 0x9, 0x1, 0x5, 0xfffffffa, 0xd4b, 0x3864, 0x3, 0x10000, 0xc0000000, 0xf, 0x7, 0xfff, 0x3, 0x40, 0x8, 0x81, 0x200, 0xfffffffc, 0x1, 0x6, 0x4, 0xfff, 0xfe, 0xc, 0xa, 0x10, 0x200, 0x9, 0x8, 0x4, 0x6, 0xfffff91b, 0x0, 0x5, 0x2, 0x8e6, 0x0, 0x2, 0x4, 0x2, 0x1, 0x3, 0x2, 0x0, 0x5, 0x0, 0x800, 0xffffaa48, 0x4, 0xa95, 0x100, 0x3, 0x400, 0x4646, 0x7, 0x5, 0x6df, 0x10000, 0xf770, 0x1, 0x5, 0x1, 0x7, 0x14000000, 0x0, 0x1000, 0x5, 0x7f, 0x2, 0x2, 0x0, 0x0, 0x9, 0x0, 0xb2, 0xce4a434, 0x4, 0xe, 0x2, 0x2400, 0x72f, 0x5, 0x401, 0x6, 0x7, 0x5, 0x7, 0x7, 0x7, 0x1, 0x40, 0x6, 0x6, 0x0, 0x101, 0x3, 0x401, 0xff, 0x2, 0x7f, 0x800, 0x2, 0xd6d5, 0x4b, 0x5, 0x5, 0x8, 0x9, 0x46, 0xff, 0xf0, 0x100, 0x2, 0xd, 0x6, 0xe, 0x1, 0x4b, 0x4e, 0x80000001, 0x836, 0x0, 0x1, 0xffff3a70, 0x3]}]]}, {0x19, 0x6, "83f8d7fb4bfcf487a654505800bc55cef8b94c2165"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xac, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffeffff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x20000000}]}, {0x68, 0x6, "0ee0204e77aae0f3cc15565375927b2b567d5ed3b29cff36ba230ef685ca242f0a1c7c9ff23bd83b3fda36f476336db45d6f35a06a17e344584e26f5685dda814eed2a063d329731c9c3bbbe6978cfe183a29288ceab00b8fe1759fb6cee5ea5116d3197"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x110, 0x1d, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xc1, 0x6, "e8dc86eca1cef221b93f516e9e2ace2a6d8c477e332a0d0a982e5bc6f11e0dca238faef871eedf4b9adc7fb0b7dfe6dcb9c028fa090eba0d7cbbeab9e29308a30a4207676f9a40320b56e4773d29cc8c17413accc37b298b2eb1081a7da3f186108be77161a293d0da237a8dfda7f355be24a3537c8360e883c625d4701d2f688761befbcf7a88998d5e3096f29ecbba7ec2525bd0e8511f6370395dfc7ad606a02d21839e5874aa3ba35ce8f16fe6a122a0919002b7a6ed52ac59140b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_vlan={0xb4, 0x2, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc0c}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8a7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x5, 0x5, 0x8, 0x401}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1ffc7136, 0x6, 0x4, 0x9, 0x5b545a41}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000000, 0x423b9600, 0xffffffffffffffff, 0xe6, 0x94eb4e2f}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_pedit={0x3b9c, 0x11, 0x0, 0x0, {{0xa}, {0x3b4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xfffffffb, 0x0, 0x8, 0x2, 0x6}, 0xa, 0x6, [{0x4, 0x2, 0x8, 0x1, 0x735b8ebb, 0x2da}, {0x2, 0x7, 0x80000001, 0x101, 0xf, 0x3}, {0x7f, 0x7, 0x6, 0xff, 0x6, 0x1}]}, [{0xffff, 0x80, 0x1, 0x5b940bbf, 0x5, 0xb}, {0x4, 0x8, 0x31b7eb82, 0x7fff, 0x0, 0x1}, {0x4, 0x6, 0x3, 0x5137, 0xcb6, 0xe0000}, {0x2, 0x16, 0x4, 0x5, 0x1, 0x8}, {0x2, 0x3ff, 0x2, 0x9, 0x8}, {0x2, 0x0, 0x2, 0xc00, 0xffff}, {0x8, 0x6, 0x7f, 0x7, 0x9, 0x20ae}, {0x8, 0x8, 0x7, 0x4, 0x9, 0x9}, {0x400, 0xfffffffb, 0x8, 0x9, 0x2, 0x4}, {0x8, 0x3, 0x4, 0x1, 0x1, 0x9}, {0x9, 0x0, 0xe, 0xdfd, 0x6, 0xffff}, {0x7ff, 0x200, 0x9, 0x2, 0x0, 0x1}, {0x54da, 0x2, 0x3c2, 0x6, 0x1, 0x9}, {0x9, 0x1, 0xe, 0x63c, 0x2, 0x4c}, {0x3, 0x8, 0x6, 0xffff0b43, 0x5, 0x101}, {0xffffffff, 0x8, 0x5, 0x6, 0xffffff7f, 0x81}, {0x1, 0x2, 0xb, 0x7022, 0x9, 0x9}, {0xd9, 0x2, 0x9, 0x7, 0xc16a, 0x5}, {0x9, 0x823, 0x7ff, 0x10001, 0x3, 0x7}, {0x9, 0x4, 0xfffffffe, 0x7, 0x1, 0x3ff}, {0x6878, 0x4, 0x5, 0x3, 0x8, 0x10}, {0x9d3a, 0x4, 0x4, 0x4, 0x8001, 0x1}, {0x8, 0x5, 0x7, 0x9, 0x7fffffff, 0x3}, {0x7, 0x4, 0x7, 0x513, 0x4, 0xffffffff}, {0x100, 0x8, 0x4, 0x8, 0x5, 0x42}, {0x100, 0x3, 0x10000, 0x1, 0x53, 0xffffff81}, {0x7, 0x2, 0x18, 0x7, 0x0, 0x8000}, {0x5, 0x729876f9, 0x200, 0x1, 0x58746a88, 0x9}, {0x6, 0xf, 0xd, 0x8, 0xe0e7, 0x4}, {0x8, 0x5, 0x3, 0x55, 0x8, 0xa4d}, {0xffffffff, 0xfff, 0x0, 0xc7, 0x1, 0x3}, {0x80000001, 0x6, 0x1ff, 0x6869f096, 0x6, 0xfffffff8}, {0xfffffffa, 0x5, 0x0, 0x5, 0x5, 0x1}, {0xa, 0x3, 0x4, 0x1, 0x7fffffff, 0x1}, {0x9, 0x400, 0x952423e, 0x101, 0x7fffffff, 0x8}, {0x1, 0x7, 0x4, 0x200, 0x7, 0x9}, {0x9, 0xf, 0x3, 0x1, 0xffffffff, 0x8b1}, {0x100, 0x3a00000, 0x1, 0x80000001, 0xb8}, {0x40, 0x4, 0xb, 0x5, 0x7ff, 0x9a16}, {0x5, 0x5, 0x7fd, 0x7, 0x2, 0x34}, {0x1, 0x3, 0x1, 0x4, 0x1, 0x8}, {0xffff, 0x84, 0x6, 0xc, 0x0, 0x8000}, {0x4, 0x16, 0x2fc, 0xeae4, 0x0, 0x4}, {0x80, 0xf, 0x8, 0xfffffff7, 0x28, 0x8}, {0x2, 0x4, 0x7, 0x401, 0xb4, 0xffff}, {0x2a2, 0x4, 0x100, 0x8, 0xb1f3, 0x22}, {0x3, 0x8, 0x1, 0x5, 0x3, 0x28ac9d53}, {0x6a9c9a01, 0x4, 0x1000, 0x400, 0x7fffffff, 0x8b14}, {0x100, 0x7, 0x7fffffff, 0x2, 0xd4e}, {0x0, 0xff, 0x5a4, 0x93a, 0xffff, 0x4b82}, {0x10000, 0xa, 0x401, 0xfa, 0xff}, {0x7, 0x4, 0x401, 0x9, 0xc92, 0x5}, {0x800, 0x1000, 0x5, 0x8001, 0x3, 0x6}, {0x1, 0x34, 0x2, 0xff, 0x500}, {0x0, 0x8, 0x96, 0x7fff, 0x7fffffff, 0x6}, {0x3, 0x4, 0x816, 0x0, 0x0, 0x8}, {0xffff, 0x54, 0x7, 0x2, 0xc5, 0x1}, {0x3a3d, 0x1, 0x1, 0x9, 0xfa8, 0x1}, {0x1000, 0x40, 0xfffffffd, 0x9, 0x298a, 0x4}, {0x4d6, 0x3, 0xfff, 0x3, 0x2, 0x4}, {0x10000, 0xde, 0x126, 0xffffffff, 0x9, 0xdb4}, {0xfffffff1, 0xc95, 0x8, 0x7, 0x2, 0x3}, {0x5, 0x9, 0x5, 0x6, 0x1800, 0x5b35}, {0x7, 0x7734, 0x3, 0x80, 0x4, 0x101}, {0x5, 0x3, 0x5, 0xffff, 0x3, 0x8}, {0x4, 0x3, 0x4, 0xe00, 0x9, 0x2}, {0x0, 0x3, 0x4, 0x1, 0x8c1, 0xf6}, {0x3eb000, 0x2, 0x0, 0x100, 0x0, 0xffff0348}, {0x9, 0x2df6d9e7, 0x7352, 0x3ac1, 0x1, 0x5}, {0x2, 0x5, 0x9, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x8, 0x0, 0xf, 0x8}, {0x7, 0x2, 0x6, 0xe, 0x3, 0x2}, {0x3, 0x4, 0x3, 0x9, 0xffff8000, 0xbed}, {0x5, 0xc0, 0x6, 0xfffffffd, 0xf423, 0x100}, {0x5, 0x8, 0x8f, 0x4, 0x2, 0x7}, {0x7, 0x7, 0x3, 0xbf, 0x1, 0x2}, {0x6, 0x654, 0xe0, 0x2, 0x7, 0x6d}, {0x8, 0x0, 0x4, 0xfff, 0x1, 0x4}, {0x5, 0x100, 0x2, 0x40, 0x6, 0x96}, {0x9, 0x7fffffff, 0x0, 0x6, 0xb1, 0x9}, {0xb, 0x8000, 0x3, 0xffd, 0x10001, 0xffffff17}, {0x3, 0x3, 0x5, 0x4, 0x7b9, 0x3}, {0xa, 0x0, 0x8, 0x4, 0xa711, 0x4}, {0x3fff800, 0x8, 0xffff, 0x201e, 0x8, 0xc60}, {0x2, 0xff, 0x1, 0x4, 0x467c4b9f, 0x7}, {0x8, 0x4, 0x7ff, 0x8, 0x6, 0x9}, {0xfffffff9, 0x4c8, 0x5, 0x10000, 0x182c486d, 0x6}, {0x3, 0xa2, 0x9, 0x3, 0x0, 0xa08da322}, {0x5, 0xff, 0x1, 0xd3, 0x137a63e8, 0x5}, {0x7, 0xa7ae, 0x400, 0x6e, 0x9, 0x6}, {0x9, 0x5, 0xfffffe00, 0x3, 0x7, 0xcd}, {0x3, 0x5, 0x0, 0x81, 0x8, 0x10}, {0x4ca3, 0x3, 0x21, 0x401, 0xff, 0x1000}, {0x5, 0x7fffffff, 0x7fffffff, 0x80000001, 0xb, 0x40}, {0x76, 0x400, 0x101, 0xe, 0x2, 0x7}, {0x1, 0x6, 0x6, 0x3, 0x0, 0x4}, {0xfffffffc, 0x8, 0x5, 0x7, 0x0, 0xb}, {0x2, 0xc, 0x10001, 0x5, 0x2, 0x7}, {0x1, 0xfffffffa, 0x9, 0x100, 0xd69, 0xe}, {0xfffffffe, 0x9000, 0x101, 0x2ced, 0x2, 0x3}, {0x1ff, 0x7, 0x3, 0x3, 0x80000000, 0xfffffffe}, {0x2, 0xfffff001, 0x3, 0x7, 0x0, 0x8}, {0x7, 0xfffffffc, 0x1, 0x3a, 0x7fff, 0x5}, {0x4, 0x400, 0xff, 0x9, 0x0, 0x101}, {0x5, 0x401, 0x8, 0x8, 0x6087}, {0xa17, 0x0, 0x1, 0x0, 0x7f, 0xd}, {0x0, 0xe, 0x9, 0x7fff, 0x8000, 0x100}, {0x8, 0x703, 0x6, 0x6, 0x7fffffff, 0xf792}, {0x2, 0x6, 0x204, 0xc5, 0xf7, 0x7}, {0x1, 0x7, 0xffff, 0x4, 0x6, 0x9}, {0x2247, 0x6, 0x7fff, 0x6c3, 0x6, 0x100}, {0xd, 0x0, 0x2951, 0xffffffff, 0x6, 0x2}, {0xffffffff, 0xd70000, 0x800, 0x9, 0x5, 0x5}, {0x100, 0x6, 0x5, 0x80000000, 0x0, 0x10}, {0x3, 0x8001, 0x1000, 0x9, 0x0, 0xb7a6}, {0x1, 0x10001, 0x7, 0x3ff, 0x81, 0x10001}, {0x0, 0x9, 0x8, 0x3, 0x0, 0x6}, {0x7, 0xa, 0x0, 0xffff8633, 0x6, 0xa}, {0x2, 0x5, 0x8, 0x8, 0x8, 0x7f}, {0x401, 0x7, 0x78, 0x7fff, 0x9, 0x1}, {0x3ffc0000, 0x1, 0x1, 0x0, 0xa97, 0xd1}, {0x9, 0x101, 0x3, 0x8, 0x1}, {0x4, 0x89, 0xf321, 0x7, 0x81, 0x4}, {0x6, 0x3, 0x37bf, 0x1, 0xffffffd3, 0x5}, {0x3, 0x401, 0x4, 0xc25, 0x6, 0xe}, {0x0, 0x1, 0xa3f, 0xfffffffa, 0x1, 0xe}, {0x5, 0x3, 0x6, 0x13, 0x1, 0xff}, {0x5, 0x0, 0x6, 0x4, 0x2, 0xffffffff}], [{0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x1}, {0x2}, {}, {0x1, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0xc}, {0x5}, {0x4, 0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0x2}, {0x5, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xfffffffc, 0x2, 0xffffffffffffffff, 0x81ee, 0x6}, 0x21, 0x31, [{0x5, 0x5, 0x80, 0x6, 0x40000, 0x6}]}, [{0x80000000, 0x7, 0x1ff, 0x0, 0x101, 0x10001}, {0x303a, 0x877, 0x0, 0x3, 0x6}, {0x71e, 0x7fffffff, 0xffffff01, 0x1, 0x6, 0x4}, {0xad, 0x9, 0xb6, 0x10, 0x7ac, 0x3}, {0xab, 0x2, 0x40, 0x71, 0x5, 0x7fffffff}, {0x401, 0x3, 0xf7f4, 0x3, 0xc136, 0xc}, {0x2, 0x5, 0x1000, 0xffff6392, 0x100, 0x5}, {0x501, 0xffffffce, 0x3, 0x0, 0x42b, 0x1000}, {0x4, 0x2, 0x9, 0x10, 0x11, 0xa0000}, {0x86a, 0xff, 0x0, 0x10000, 0xffff516b, 0x7ff}, {0x0, 0x8c, 0x5, 0x6, 0xa, 0x7}, {0xe396, 0x90000000, 0x1, 0x6, 0x800, 0x9}, {0x7, 0x2, 0x7d31, 0x4, 0x8, 0x2}, {0x9, 0x6, 0x69, 0xc, 0x0, 0x1d1}, {0x5, 0x4, 0x8, 0x6, 0x9, 0xb}, {0x7, 0xfffffff8, 0x3, 0x2, 0x0, 0x1da}, {0xfff, 0x9, 0xc, 0x5, 0x8064, 0xe}, {0xcc4, 0x800, 0x1, 0x4, 0x2, 0x9}, {0x20000, 0x7, 0x6, 0x3, 0x0, 0x6}, {0xffff, 0x1, 0x0, 0x5, 0x3}, {0x8001, 0x1ff, 0xff, 0xfffffffe, 0x6, 0x1}, {0x3, 0x1, 0x7, 0x10000, 0xe, 0x7}, {0x1, 0x6b1274df, 0x3, 0xd1d0, 0x8000, 0xfffffff9}, {0x2, 0x2, 0x4, 0xd4c1, 0x2, 0x1}, {0x5, 0x2, 0x6, 0x6, 0x200001, 0x5313dc5f}, {0xffffffff, 0x4, 0xb7, 0x3, 0x8, 0x8}, {0x7, 0x3, 0xfffffff9, 0x0, 0xa95, 0x6}, {0x1, 0x7, 0x0, 0xfff, 0x15dd6c6, 0x2}, {0x1, 0x8, 0x1ff, 0x3, 0x915b, 0xfff}, {0xa2, 0x101, 0x401, 0x9, 0x100000, 0x4}, {0x7, 0x80, 0x4, 0xf6cb, 0x7c00000, 0xc8}, {0x39, 0x7fff, 0x8000, 0x4, 0x58, 0x7ff}, {0xfffffff7, 0xfffffffa, 0xe6b, 0x9, 0x101, 0xfffffffc}, {0x2, 0x4, 0x1a7df1c9, 0x5, 0x7, 0xb}, {0x9, 0xeb, 0x9, 0x7000, 0x4, 0xfffffff3}, {0x1, 0x8, 0x0, 0x400, 0x2, 0x10000}, {0x1, 0x8, 0x4, 0x10, 0x1, 0x7}, {0x3, 0x9, 0x0, 0xad2, 0x7, 0xffffff80}, {0xe4d, 0x5, 0x3ff, 0x7ff, 0xaf2e, 0x7}, {0xfffffff7, 0x0, 0x8, 0xf4, 0x9, 0x2}, {0x1ff, 0xb, 0x800, 0xffc, 0xfffffffc, 0x6}, {0xb, 0x7, 0x4, 0x38000, 0x7, 0x9}, {0x800, 0x400, 0x200, 0xe, 0x6, 0x800}, {0xe, 0x2, 0x6, 0x9, 0x5, 0x7}, {0x0, 0x80000000, 0x8, 0x7, 0x4, 0x10001}, {0x2, 0x5, 0xa, 0x1, 0x7fff, 0x9}, {0x7fffffff, 0x5, 0x1, 0x6, 0x0, 0x7f}, {0x200, 0x40, 0x8533, 0x84, 0x0, 0x8}, {0x3, 0xfffffffc, 0x5, 0x2df05d47, 0x1, 0x80000000}, {0x8, 0x6, 0x7, 0xf4, 0x2, 0x5}, {0x100, 0x8bdc, 0xb, 0x0, 0x0, 0x1bb}, {0x80, 0x465, 0x0, 0xfffff7a0, 0x5, 0x80}, {0x0, 0x1000, 0x30, 0x5, 0x4, 0x1}, {0x6d, 0xfffffffe, 0xd, 0xfffff6c0, 0xebbb, 0x8}, {0x5, 0x7a0, 0x8, 0xd90, 0x78, 0xd}, {0xe, 0x2, 0xd78, 0xfffffc50, 0x5, 0x8}, {0x398, 0x0, 0xf1, 0xffffff77, 0x7, 0x92}, {0x8, 0x5, 0xff, 0x4, 0x3b50000, 0xff}, {0x0, 0x7d, 0x7, 0x6, 0x0, 0x1}, {0x3ff, 0x3, 0x0, 0x8000, 0x5, 0x3ff}, {0x10001, 0x7, 0x3, 0xd30f, 0x2, 0x4}, {0x1000, 0x40, 0x986f, 0xac18, 0x9}, {0x7, 0x7, 0x4, 0x81, 0xd4, 0x8f6}, {0x6, 0x7fff, 0x9, 0x6, 0x5, 0xb5}, {0x6, 0x2, 0x0, 0xf, 0xe81, 0x5}, {0x5, 0x1, 0x56, 0x86, 0x1, 0x9f1}, {0x0, 0x2, 0x3, 0x3, 0xfffffff8, 0x1}, {0x2, 0x6d, 0x32, 0xfffff47f, 0xd4c, 0x73}, {0x8000, 0x200, 0x10000, 0x4, 0x3, 0x5}, {0x8, 0x5, 0x1bb0, 0x2bf3, 0x4b, 0x1}, {0x2, 0x40, 0xb, 0xfffffff9, 0x1, 0xf3}, {0x9, 0x7f, 0x80000001, 0x9, 0xce, 0x5}, {0xffff0904, 0x8, 0x3, 0x7, 0x6, 0xcf76}, {0x8, 0x7, 0x2, 0x6fe1, 0x4, 0x5}, {0x101, 0xf2, 0x6, 0x4d11, 0x767, 0x80}, {0x52dd, 0x6, 0x4, 0xe346, 0x8, 0x5}, {0xfffffff7, 0xa, 0x0, 0x8, 0x80000000, 0x10001}, {0x2, 0x7, 0x7, 0x6a2, 0x100, 0xfffffff7}, {0x8, 0x2e700000, 0x5, 0x9, 0x233, 0x7f}, {0xffffff80, 0x0, 0x7fffffff, 0x5, 0x6}, {0x1, 0xa8e, 0x9, 0x6, 0xfffffff7, 0x9}, {0x7, 0x1000, 0x9, 0x101, 0x3, 0x8000}, {0x7, 0xb, 0x7fff, 0x6, 0x8, 0x7}, {0x0, 0x6, 0xffff, 0x0, 0x2, 0x6}, {0x4, 0x329e, 0xe3, 0x9, 0x5, 0x1}, {0xe, 0x9, 0xfffffffe, 0x1, 0xc5, 0x78000}, {0x7, 0x7fff, 0x7f, 0x3, 0xfffffffa, 0x5}, {0x67, 0x3ff, 0x400, 0x10001, 0x2, 0x3}, {0x14ab, 0x4, 0x7, 0x60, 0x8, 0x6}, {0x8001, 0x0, 0x10001, 0x0, 0xe, 0x9a}, {0x5a, 0xc1, 0xfff, 0xb9, 0x7, 0x6}, {0x8000, 0x5, 0x3, 0x39, 0x9, 0x101}, {0x876c, 0x2, 0xa4, 0x8001, 0x6, 0x97}, {0x80000001, 0xffffff7e, 0x7fffffff, 0x8, 0x5, 0x5}, {0xfffff800, 0x5, 0x80000000, 0x6, 0x8800, 0x1}, {0x3, 0x9, 0x8, 0x4, 0xb6d, 0x3}, {0xdfe, 0x2, 0x3, 0x2, 0x1, 0xffff0000}, {0xd5c6, 0xfffffffd, 0x7ff, 0x612, 0x1000, 0x3bb4}, {0x9, 0xffffffff, 0x3, 0x10000, 0x9, 0xffffff49}, {0x2, 0x9, 0x1ab, 0x4, 0x1bad1d4}, {0x40, 0xd54d, 0x10001, 0x6, 0x3, 0xa2}, {0x5, 0xfffffffe, 0x7, 0x81, 0x7f, 0x1}, {0x6, 0x7a7, 0x6, 0x800, 0x9, 0x1}, {0xbe3, 0xa6, 0x7, 0x80000001, 0x10001, 0x5}, {0x6, 0x40000000, 0xfffffffe, 0x7, 0x3ff, 0x5}, {0x8, 0xc, 0x4, 0x8, 0x8, 0x1000}, {0x5, 0x2, 0x0, 0x0, 0x1, 0x5}, {0xfffffffd, 0x3, 0x200, 0x5, 0x4, 0x2}, {0x2, 0xfae, 0x4, 0x9, 0xffff, 0x10000}, {0x7, 0x5, 0x7, 0x9, 0x8, 0x2}, {0x7, 0xd, 0x1, 0x1, 0xc0eb, 0x9}, {0x3, 0x4be9, 0x20000, 0xfffffff4, 0x3473, 0x8}, {0x7, 0xffffffff, 0x40, 0x0, 0x10001}, {0x4, 0x98f, 0x81, 0xd21, 0x3, 0x6}, {0x1, 0x2, 0x9, 0x1, 0x6, 0xfff}, {0x6, 0x4, 0xfffffff3, 0xff, 0x5, 0x3}, {0x10, 0x0, 0x8, 0x1, 0x100, 0xa}, {0x10, 0x1, 0xfffffffb, 0x1, 0x4, 0x5}, {0xe, 0x0, 0x10, 0xd, 0x6, 0x35e7}, {0x1000, 0x8, 0x8, 0x14f, 0x10000, 0xd}, {0x109, 0x200, 0x3ff, 0x9, 0xe, 0x1}, {0x0, 0x9, 0x1, 0x101, 0x2, 0x3ff}, {0xbf, 0x8, 0x5, 0xa0, 0x3, 0x81}, {0x8, 0x2, 0x9, 0x3, 0x3, 0x3ff}, {0x7a9, 0x101, 0x1, 0x8}, {0x4, 0x5, 0x6, 0x1, 0x4, 0x7}, {0x101, 0x9, 0xf142, 0x4, 0x1ff, 0x2}, {0x0, 0x8, 0x8, 0xec, 0x0, 0x7}], [{0x3, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x2}, {0x4}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0xddf93b412316196c}, {0x5, 0x1}, {0x5}, {0x1}, {}, {0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x2, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x1}, {0x6, 0x439e191eeedc8255}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x70, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x80000001, 0x1, 0x9, 0x8, 0x4}, 0x67, 0x7, [{0x5, 0xffffffd4, 0x6, 0x5, 0x1, 0x7c}, {0x4, 0xd73e, 0x2, 0xa150, 0x3, 0x6}, {0xfffffff2, 0x8, 0x401, 0x10000, 0xd9c, 0x35}, {0x9, 0x8, 0x6, 0x3, 0x7}, {0x40, 0x76d, 0x101, 0x9012, 0xfffffffb, 0x6}, {0xccf2, 0x4, 0x3ff, 0x1, 0x8, 0x5}, {0x4, 0x7, 0xa, 0x3, 0x3, 0x5}]}, [{0x9, 0xfffffffd, 0x5, 0x131, 0x8, 0x5}, {0xd53, 0x81, 0x1cafb0ac, 0x5, 0x1, 0x200}, {0x78, 0x0, 0x9, 0x1, 0xf, 0x5}, {0x1, 0x3, 0x3ff, 0x10001, 0xffffffff, 0x4}, {0x3, 0x2, 0x2, 0xf0000000, 0x13d7, 0xc6}, {0x9, 0x1, 0x589b47d2, 0xefaa, 0x4, 0x2}, {0xb, 0x5, 0x2, 0x1c3, 0xff}, {0xffffffc0, 0x3, 0xfffffffb, 0x81, 0x0, 0x4}, {0x0, 0x7fff, 0x1, 0x5, 0x629859b1, 0x81}, {0x7, 0x80, 0x1, 0xfffffe00, 0x2, 0xfffffffb}, {0xae81, 0x7, 0x3, 0x3, 0xf, 0x651c}, {0xfffffc00, 0xf, 0x6e6, 0x200, 0x4, 0x77dd}, {0x4, 0x7, 0x3cc9, 0x2, 0x8, 0x800}, {0x7, 0xd, 0x0, 0x10000, 0x200, 0x10000}, {0x3ff, 0x80000000, 0x9, 0x2, 0x80000001, 0x8990}, {0x2, 0x8, 0x5, 0x1, 0x1, 0x5}, {0x1, 0x3, 0x24, 0x2, 0x86, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x5, 0x400}, {0xfffffffd, 0x8, 0x4, 0x2, 0xe, 0x162}, {0x0, 0x10000, 0x4, 0x0, 0x9, 0x5}, {0x9, 0xff, 0x2, 0x8, 0x6, 0x5}, {0x3, 0x3ff, 0x4962, 0x7, 0xac87, 0x5}, {0xb, 0x7f, 0x4, 0x2, 0x4, 0x3}, {0xf, 0x52, 0x9, 0xd, 0xee, 0x9375}, {0x4, 0x5, 0x7, 0x0, 0xb, 0x3}, {0x4, 0x8000, 0x9, 0x2, 0xf, 0xf8}, {0x0, 0x9, 0xfffffff8, 0x9, 0x1, 0x101}, {0x2, 0x8, 0x4, 0x7f, 0x40, 0x7}, {0x4, 0xb796, 0x41f, 0x7, 0xff, 0x40}, {0x0, 0x9, 0x5, 0x1, 0x3, 0x3}, {0x7, 0x8, 0x3, 0x2, 0x86, 0x3}, {0x3, 0xffff5894, 0x2, 0x2, 0x800, 0xb8ad}, {0x80, 0x10, 0xffffff01, 0x7f00, 0x7, 0x6}, {0x2, 0x3, 0x0, 0x2, 0x7, 0xf}, {0x4, 0xe8f95c4e, 0x8, 0x6, 0x4, 0x1}, {0x5, 0x1, 0xa, 0x8, 0x1}, {0x5, 0x7f, 0x101, 0x2, 0x3, 0x5}, {0x7, 0x3, 0x6, 0x9, 0x3, 0xfffffff7}, {0xca, 0x8, 0xfd5b, 0x5, 0xd, 0x101}, {0xa5, 0x5, 0x1, 0x82, 0x3e4d, 0x5}, {0x4, 0x4, 0xb3e, 0x2, 0x8, 0x8}, {0x0, 0xf6b, 0x5, 0xcf7c, 0x4, 0x10}, {0x4, 0x9, 0xd9b, 0xf, 0x10001, 0x5}, {0x8, 0x8f0, 0x6, 0xffffff40, 0x53fa6a32, 0x8}, {0xfffffffa, 0x7, 0xfffffffd, 0x0, 0x7, 0x8}, {0x3, 0x9, 0x8, 0x4, 0x400, 0xca7}, {0x0, 0x8, 0x7f, 0x2, 0x4, 0xfff}, {0x2, 0x80, 0x9, 0x36ee, 0x8}, {0x5, 0x6, 0x4, 0x4, 0x7, 0x7}, {0x3, 0x80000001, 0x1b2, 0x3, 0x1000, 0xef}, {0x7, 0x80, 0x8, 0x8, 0x69, 0x80000000}, {0x401, 0x9, 0x4bd, 0x5, 0x5, 0x10001}, {0x7fff, 0x804, 0x7, 0x5, 0x9, 0x9}, {0x5, 0x3, 0x9, 0x5, 0x3, 0x1}, {0x5, 0x7, 0x0, 0x8, 0x0, 0x6}, {0x7, 0xef, 0x7, 0x3, 0x0, 0x2}, {0x4, 0x400, 0xfff, 0x931, 0x8, 0x1000}, {0x1d7c, 0x6, 0xc, 0x1ff, 0x1d6, 0x80000000}, {0x1, 0x3, 0x1ff, 0x8, 0x6a, 0x4}, {0x5, 0x7fff, 0x1, 0xfffffffc, 0x3, 0x7}, {0x8, 0x3, 0xaf9, 0xfffffff9, 0x8, 0x7}, {0xe869, 0x40, 0x4, 0xffff, 0x9, 0x8}, {0x8, 0x200, 0x0, 0x80000000, 0x401, 0x2}, {0x9, 0x8, 0x1, 0x400, 0x10000, 0x5}, {0x1000, 0x1, 0x3, 0x1080, 0x39, 0x6}, {0xe, 0x10000, 0x5, 0x101, 0x1}, {0x4, 0xffffffd1, 0x6, 0x4, 0xaaef, 0x2}, {0x8, 0x5, 0x3, 0x3ff, 0x4, 0x1}, {0x4, 0x1f44, 0xc79, 0x3eb, 0x8, 0x1}, {0x4, 0x1, 0x8, 0x0, 0x7, 0x54}, {0x8, 0xffffffff, 0xb, 0x3383a161, 0x7, 0x1}, {0x5947c459, 0x3, 0x4, 0xf, 0xffffedc7, 0xe}, {0xb, 0xb, 0x200, 0x800, 0x5, 0x57f6}, {0xfffffff4, 0x7, 0xfffffffb, 0x1, 0x7f, 0x6}, {0xfffffff7, 0x7, 0x81, 0x8, 0xfffffffb, 0x9}, {0xe3, 0x8001, 0x9, 0xd3, 0xfffffff3, 0x3}, {0x7, 0xfffffffa, 0x3b, 0x1ff, 0xd782, 0x1}, {0x10001, 0x9, 0x81, 0x9, 0x33cc43c4, 0x8fe9}, {0x6, 0xfffffe00, 0x9, 0xff, 0x4, 0x2}, {0x10000, 0x52, 0xfffffffd, 0x200, 0x9, 0x9}, {0x4, 0x40, 0x5, 0x4, 0x8, 0x7}, {0x3, 0x7fffffff, 0xfffffff1, 0x9, 0x6, 0xa}, {0x40, 0x4, 0x10001, 0x2, 0x0, 0xfab}, {0xe12, 0x1, 0x5, 0x3113, 0x8, 0x935}, {0x9, 0x0, 0xf, 0x0, 0x1, 0x2}, {0x37e22aa5, 0x8000, 0x0, 0x1ff, 0xf}, {0x6, 0x0, 0x3, 0x4a, 0x4ce, 0x8}, {0xc, 0x4, 0xcc, 0x0, 0x3, 0x4}, {0x2, 0x4, 0x401, 0xa9, 0x7, 0x401}, {0x5, 0x5, 0x4, 0x6, 0x0, 0x100}, {0x9, 0x73a, 0x3, 0x2, 0xcdd4}, {0x81, 0x1223, 0xffff, 0xc4ec, 0x3, 0x1}, {0x7, 0x6, 0xfffffffa, 0x1000, 0xfffffff7, 0xfffffffa}, {0xffff44f3, 0xfffff86e, 0x2, 0x3, 0x21a, 0x4}, {0x7ff, 0x9, 0xfffffffb, 0x3, 0x9, 0x2}, {0xf3, 0x9, 0xad4, 0x4, 0x9, 0x1}, {0x3, 0x3, 0x40, 0x19fe, 0x4, 0x2}, {0x101, 0x0, 0x2, 0x6, 0x4, 0x24}, {0x7f, 0x7, 0xf92, 0x2, 0x1, 0x1}, {0x6, 0x800, 0xffffffff, 0xfffffd6f, 0x401}, {0x8, 0x8000, 0xaa00000, 0x9, 0x3, 0x2}, {0x80, 0x5, 0xffff, 0x4, 0x1, 0x8}, {0x100, 0x81, 0xdc, 0x9, 0xdfd6, 0xf}, {0xff, 0x10001, 0x5, 0xa, 0x5, 0x5}, {0xfffffff1, 0x0, 0x1, 0x8, 0x80000000, 0x1}, {0x40, 0x4, 0xc, 0x0, 0x7fffffff, 0xfff}, {0x0, 0x3, 0x7, 0x80, 0x5, 0x55a7}, {0xf644, 0x3, 0xc6, 0x2, 0xd2, 0x8}, {0x0, 0x4, 0x2, 0x7, 0x7, 0xe6b1}, {0x4, 0xfff, 0x96, 0x2, 0xfffffff8, 0x619}, {0x2, 0xc, 0x7, 0x3ff, 0x400, 0x4}, {0x200, 0x1c00000, 0xffff93b0, 0xe, 0x0, 0x1}, {0x3, 0x8382, 0x3, 0xb, 0x2, 0x3ff}, {0x5, 0x8, 0xc7dd, 0x6, 0x0, 0x1}, {0x1ff, 0xfffffffd, 0x6, 0x6, 0x3, 0x5}, {0x1, 0x1, 0xa6cd, 0x48000000, 0x5, 0x4}, {0x7f, 0xb4, 0x9, 0x0, 0xdc, 0x7fffffff}, {0x7, 0x6, 0x9, 0x8, 0xffffff07, 0x1ff}, {0xb391, 0x7, 0xffffffff, 0x7, 0x101, 0x9}, {0xfff, 0x9, 0x9, 0x4000, 0x5, 0x7fffffff}, {0x5, 0x1, 0x400, 0x4, 0xfffffff7, 0xf}, {0x1, 0x10, 0xedb4, 0x5aea, 0x4, 0xfffffffe}, {0xd7, 0x1000, 0x7, 0xc18, 0x3, 0x40}, {0x20000000, 0x3, 0x0, 0x1, 0x0, 0x6}, {0x0, 0x4, 0x3, 0xde, 0x161, 0xb}, {0x9, 0x7f, 0x11, 0x4, 0x4, 0x400}, {0x80000000, 0xec3, 0x8e, 0x0, 0x6, 0x8000}, {0x8, 0x9f, 0x7ff, 0x1000, 0x1, 0x1}], [{0x5}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1097c20627534a42, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x3}, {0x3}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1}, {0x6, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x3, 0x2}, {0x3}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x93f5e5077a5a44d8}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0xff32918a471c7484}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0xfffffffffffffffd, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x6}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5d602c8fe6ddf00e}, {0x1, 0x1}, {0x4}, {0x3}, {0x3}, {0x5}, {}, {}, {0x3, 0x1}, {}, {0x1}, {0x3}, {0x5}, {0x6}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x4}, {0x4}, {}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0xa8, 0x5, 0x0, 0x1, [{0x4}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x8, 0x2, 0xffffffffffffffff, 0x200, 0xfffffff8}, 0x80, 0x0, [{0xffff, 0x3, 0x8069, 0xd9, 0xfffffff9, 0x2}, {0x81, 0x4, 0x8001, 0x5, 0x9, 0x3}, {0xfffffff9, 0x8, 0x1, 0x6, 0x8, 0x4}, {0x3, 0x91b4, 0x9, 0x7, 0x2, 0x200}, {0xffffffff, 0x800, 0x2c6f, 0x151, 0x315, 0x4}, {0x2, 0x1, 0x7, 0x3, 0xb, 0xfff}, {0x5, 0x8, 0xff, 0x401, 0x0, 0x100}]}, [{0x7fffffff, 0x6, 0x1, 0x5, 0xff, 0x7}, {0xa, 0x6, 0x3, 0x3, 0x9, 0x8}, {0x6, 0x7fff, 0xe, 0x58, 0x6, 0x8}, {0x5, 0x80000000, 0x3fad, 0x401, 0xd77d, 0x80000000}, {0x6, 0x58c8, 0x1, 0x3, 0x5, 0x8001}, {0x100, 0xffffffff, 0x6, 0x5, 0x4, 0x9}, {0x0, 0x2, 0xca2, 0xffffff80, 0x3, 0x1}, {0x2, 0x0, 0x80000000, 0x0, 0x6, 0x35}, {0x4, 0x0, 0x81, 0x8, 0x2, 0x1}, {0xbc, 0x2, 0xffff, 0xfffffffb, 0x10000, 0x3}, {0x1000, 0xbda7, 0x2, 0x7, 0xa65c, 0x2}, {0xfffffffb, 0x2, 0x6, 0x6, 0x5, 0x775}, {0x1, 0x8001, 0x56d7, 0xffffffff, 0x300, 0x5}, {0x1, 0x17a051d6, 0x401, 0x7fffffff, 0x2, 0x200}, {0x1, 0x0, 0x4, 0x200, 0x68167065, 0xb}, {0x2, 0x4, 0x0, 0x4, 0x9, 0x101}, {0x8, 0x1, 0x8, 0x8, 0xec4}, {0x0, 0xfffffffe, 0x7, 0xfda, 0x0, 0x80000000}, {0x1, 0x9, 0xfffffffb, 0x0, 0x1c000000, 0xfffffffd}, {0x1000, 0x0, 0x7, 0x2, 0x7fff, 0x10}, {0x10, 0xd1, 0x0, 0x101, 0x4, 0x4}, {0x2b79, 0x3, 0x2, 0x1, 0x7ff000, 0x8}, {0x7, 0x6, 0x7, 0x0, 0x3, 0xe7}, {0x7, 0x10001, 0x1, 0x800, 0x81}, {0x5, 0x6, 0x3, 0x1, 0x4, 0x1}, {0x7, 0x20000000, 0x9, 0x1, 0x1, 0x7ff}, {0x6, 0x2, 0x9, 0x6, 0x4, 0xd}, {0x9, 0x4ff41ce2, 0x5, 0xfffffff7, 0x80000000, 0x4}, {0x3, 0x1ff, 0x68b, 0x9, 0x9, 0x4}, {0x3ed5, 0x4, 0x100, 0x40, 0x9}, {0x7, 0x6, 0x9, 0xffffffc0, 0x1e2, 0x80}, {0x9, 0x0, 0x7, 0x0, 0x6, 0xa}, {0xffffffff, 0x5a, 0x4, 0xc88, 0xfffffff3, 0x8}, {0x10000, 0x5, 0x7, 0x2, 0x3, 0x4}, {0x1, 0x9, 0x2, 0x1b, 0x7, 0x5}, {0x5, 0x40, 0xff, 0x9, 0x7, 0x1}, {0x5, 0x1, 0x4, 0x90, 0x7fff}, {0xfffffffd, 0xf5d5, 0x8001, 0x3, 0x0, 0xc75e}, {0x6, 0x6, 0x80000001, 0x8, 0xa89, 0x3}, {0x0, 0x80000000, 0x1, 0x2, 0x8001, 0x800}, {0x1, 0x1c19, 0xfffffff9, 0x5, 0x7, 0x23f}, {0x7ff, 0x6, 0x6, 0x9, 0x6, 0x2}, {0x9, 0x1, 0xf, 0x10000, 0x2, 0x80}, {0x800, 0x9, 0x7, 0x3, 0xd, 0x1}, {0x1, 0x7, 0x9, 0x5, 0x6, 0xe}, {0x1, 0x7, 0x5, 0x8, 0xc9, 0x401}, {0x4, 0x5, 0x7f, 0x1ff, 0x2, 0x7}, {0x1, 0xe22, 0x2, 0x0, 0x5, 0x264}, {0x5, 0x3ff, 0x5, 0xd8e, 0xfff, 0x2}, {0xff, 0x9, 0xf, 0x5, 0xc7, 0x10000}, {0xfffffff6, 0x6d0, 0x1000, 0x4, 0x80000000, 0x4}, {0x2, 0x1c9a00, 0x7, 0x401, 0xfffffff6, 0xffffff88}, {0x1b4d, 0xb26, 0xd, 0x3, 0x4, 0x7fffffff}, {0x400, 0x2, 0xac30, 0x6, 0x7, 0xffff8152}, {0x1, 0x6, 0xf, 0x0, 0x2, 0x4}, {0x7, 0xb, 0x40, 0x39, 0x2}, {0xa8, 0x8, 0x5, 0x31b, 0x9, 0xff}, {0x8001, 0x8, 0x200, 0x10001, 0x0, 0x9}, {0x7, 0x4, 0x5, 0x8, 0x9}, {0x7f, 0x0, 0x7fffffff, 0x0, 0x8, 0x1}, {0x4, 0x4, 0x6, 0xfffffff7, 0x2, 0x120}, {0x0, 0x1, 0x1, 0x7, 0x202000, 0x28fa}, {0x2, 0xe25, 0x5, 0x3, 0x9, 0x81}, {0x80008000, 0x4, 0xffffffff, 0x3, 0xe, 0x60dada2e}, {0xffffffff, 0x80000001, 0x2, 0x633f, 0xb5, 0x1}, {0x9, 0xd, 0x9, 0x9, 0xc81, 0x7}, {0x0, 0x8, 0xb, 0x80000001, 0x6d1a610e, 0x800}, {0x5f2e, 0x7fffffff, 0x0, 0x0, 0xd, 0x7}, {0x10, 0x0, 0x2, 0x3, 0x68, 0x4}, {0x3, 0x401, 0x0, 0x8, 0x3, 0x5}, {0xc1, 0x0, 0x40, 0x9, 0x9, 0x4}, {0x4, 0x1, 0x0, 0x7f, 0x4, 0x1}, {0x8, 0x3, 0xcfa, 0xf, 0x7, 0x1}, {0x9, 0x472, 0x200, 0x3, 0x862, 0x5}, {0xffffffff, 0x4, 0x7, 0x6, 0x2ccc, 0x7}, {0x8000, 0x200, 0x0, 0x8, 0x83, 0x9}, {0x2, 0x1, 0x2, 0x5, 0x7, 0x1}, {0x4, 0x0, 0x0, 0x721f, 0x1}, {0xb7a8d5a, 0x7, 0x0, 0x101, 0x7fff, 0x8}, {0xc29, 0x400, 0xd, 0x0, 0x0, 0xc0}, {0x1000, 0x73de, 0x3, 0x9, 0xe72, 0x4}, {0x80, 0x7, 0x0, 0x9, 0xda, 0x10}, {0x9, 0x79, 0xffff, 0x7, 0x1, 0x8}, {0x1, 0x44bd, 0x9, 0x3, 0x6, 0x2}, {0x8, 0x0, 0x1, 0x6, 0x4}, {0x3, 0x6, 0xa, 0xfca3, 0x3, 0xfffeffff}, {0x1, 0x29bf, 0x9, 0x1, 0x7, 0x1}, {0x4, 0x7ff, 0xff, 0x0, 0x1, 0x9}, {0xfce, 0x5, 0x9b4, 0x80000001, 0x2, 0x3}, {0x4, 0x1, 0x80, 0x9, 0x10000}, {0xc, 0xfffffff9, 0xff, 0x4, 0xe, 0x25}, {0x4, 0x9, 0x5, 0xfff, 0xfffffff8, 0xd}, {0x40, 0x2, 0xb8, 0x9, 0x642}, {0xffffffff, 0x5, 0xbe, 0x3, 0x80000001, 0x80}, {0x7, 0x10000, 0xffffffff, 0x1, 0xa1e, 0xa}, {0xfff, 0x2, 0x8, 0x0, 0x2, 0xeb0}, {0xffffffff, 0x401, 0x2, 0x1b79c635, 0x8, 0x9}, {0x4, 0x7, 0x4, 0x0, 0x7, 0xb}, {0xff, 0xb, 0x8a38, 0x2290, 0x1, 0xd1c}, {0x3, 0x5, 0xb2, 0x1, 0x3, 0x14c}, {0xd, 0x7ff, 0xb826, 0x7c47, 0x7, 0x7}, {0x3c, 0xffffff81, 0x86, 0x7, 0xf518b9d, 0x800}, {0xb, 0x4, 0x7, 0x80, 0x4, 0x9}, {0x8, 0x4, 0xf6c, 0x2, 0x1, 0x4}, {0x7fffffff, 0x5, 0xe0, 0xff, 0x5, 0xe}, {0x3, 0x39dd8213, 0x7, 0xa, 0x3, 0x7dcfb53c}, {0x51, 0xfffffffe, 0x5, 0x44f, 0x5, 0x8}, {0xffffffc0, 0x3, 0x7fff, 0xa, 0x3}, {0x7ff, 0x9, 0x7e, 0x4, 0x401, 0x7}, {0xfff, 0x1b, 0x0, 0x4, 0x8000, 0x1}, {0x40, 0x3e, 0x40, 0x81, 0xa, 0x2}, {0x9, 0xcd, 0x5, 0x88, 0x5, 0xa}, {0x2, 0xffffff80, 0x8, 0x7, 0x9, 0xffff8001}, {0x8, 0xfffffff5, 0x0, 0x9, 0xdb, 0x10000}, {0x401, 0x9, 0x726, 0x2705a49b, 0x8, 0x9}, {0x101, 0x4, 0x8, 0xbf93, 0x2, 0x7}, {0x0, 0x0, 0x0, 0xd67, 0x7, 0x2}, {0xfffffff9, 0x2a67f548, 0x3, 0x7, 0x2, 0x40}, {0x7, 0xb, 0xffffc962, 0x401, 0xffff, 0xe067}, {0x3ff, 0xa1000000, 0x0, 0x9, 0xc, 0x6}, {0x9, 0x206c, 0x2cdc, 0x5, 0x1ff}, {0x7, 0x10001, 0x6, 0xffffff02, 0xb3, 0x7}, {0x5, 0x0, 0xffffffff, 0x6, 0x81, 0x400}, {0x8, 0x4, 0xee4, 0xc, 0xfffffffe}, {0x9, 0x7, 0x4, 0x4, 0xe1f, 0xffff}, {0x7fffffff, 0xb3, 0x3, 0x59, 0x100, 0xfffffa76}, {0x3, 0x6, 0xff, 0x1, 0x9, 0x180}, {0xffff, 0xfff, 0x8, 0x40, 0x6, 0x8}], [{0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {}, {0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x52c21e267fbb6802, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0xd3a39957be1b2cbd, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x3315206f944917f0}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x2}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {}, {0x5}, {0x5701a8ca19f1536f}, {0x3, 0x1}]}}]}, {0x25, 0x6, "0a710605bc584ecd26153dccfa2452d859a02968c547ac1bd77ce78adc25168022"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x144, 0x1e, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x9d, 0x7, 0xb}, {0x1ff, 0x7f}, {0x8000, 0x1, 0x0, 0x6}, {0x3, 0x8, 0x4, 0x42bd261c}, {0x81, 0x3, 0xd6, 0x9}]}]}, {0xef, 0x6, "a070fcb03d1654bc3fb4feeef6b88762e87bb89da974ee67ab8de8a9f3e242dcb03b4edc5715af96da2b17b77e704a1c096958e745ffab04225c1134c40d3778b38f7580c9fa528f0e74075d15f7818b7224ee7dcce87a692ffebdef01a8a4db571b96c3bff961c377262161862d3ff2d26b2999ebfb38e759a05690b84682aab626359e800e3b4d8ac676f836a342bfa6a716c11e27264b4163f773d8aaab95b3c420b54f4dc82c79d02e6ae4c77734de32a21299cb5617f5355325fa4fc284ce9e6d04a1685a698b25fe761c3d84e50a9606635ae20f1429a166c1dbbb32b0311d7b493ff6f52e88ebda"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xfc, 0x18, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x10001, 0x10000000, 0xc3ed, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x222, 0x2, 0x7, 0xb0, 0x4}}, @TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}]}, {0x8e, 0x6, "6dd36ace3e679092aacccb023d6651eac398e13c0ba75d57fbcc7cb48ff10fe6bce5e2bb4379fea5e28d5f381f57c76c2fabaa917563484f9c647ec04f7f006c47c6d9f881514ae00d8c723065826167ed90a4808e26019144ffba88e4550e61b274bef7390c2af54ebf1fda461f52a9e4c8550aa3bed8ef8300241e5919c99205f3b8c676d51f78d358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x308, 0x1c, 0x0, 0x0, {{0x7}, {0x28c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x112, 0x6, {0x7fff, 'filter\x00', 0x1, 0x9, "499ca3ef37d65e03ddb6f1f7136c6d74d48bc11d1e2dfbd05e15037d7af13a82117d02b647ce4b1ac541b3a295c8d16a87c98c8ff322f73e6eacfd48723ce35518697a4289eda4df91d93ab61ae15f4362dc8f9ab6d15f58e273351b6434d439b1cb35ada8fd62d18e07ddfbafe202f36aa3f238db6e70fdeaacff42516b96e1b1d53068abeb369d45b9b31039879c8b10b2bbdbb0c7073c365ecaa4fbb5787493e51d854e8decc297ca85dbd216c99917a2d2d037a81deee5ec968ef7fc35178c841d8dcb55cbf9539a7cf263886c37aac2b735558afbe4476646bcca2fcf958bfe131dd47d6c81"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x105, 0x6, {0x0, 'mangle\x00', 0x6, 0x101, "9a67dfc270c306e6361f89eb4f114262f58f41b93da77b59aea454cefea0121f5fdfa581dd9aafb03d96e5661e5586a836e325e6871b00361c6c0e991f7464e110fd923f877119b26471140190eaba3b9e4c3626de78d4b0c3ba07979838bcd4fd06ab9d499bdd4d0067761019cec14355ed697e3d12b6d064bce918625eacb01614d2ccbf3e00b0ef3cc1fb55b802a0822005fafc207ec81c5a1832ab9484f1c650da8bb79a5b2fd65e1b2a301a4bfab7214c4702c2732a8c061b20d30c9cae356b96fa3fc20f0f0dd6676ed8e23e29b81dde59501910b838e8b8"}}]}, {0x58, 0x6, "1e7da48e8cc40a3d13233c8c5b724ac5d1797aeed43074c6701eb07eae4205ea6733e992e7466924f316656ba3482f52def5791d63b2ff84865a793a0339b6280aeb6dc37f62587f5a8e4e0f5297c374c2022a5a"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xa, 0xfb}}, @filter_kind_options=@f_flow={{0x9}, {0x918, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x15, 0xfff2}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x6103}, @TCA_FLOW_POLICE={0x4e0, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x7, 0x8, 0xfffffff8, {0x0, 0x1, 0x7ff, 0xff, 0xfff1, 0x800}, {0x0, 0x2, 0x6, 0x0, 0x5, 0x8}, 0x0, 0x4, 0x80000000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x4, 0x1, 0x35e, {0x6, 0x1, 0x2, 0x2, 0x9, 0xbbd}, {0xb, 0x2, 0x0, 0x3, 0x3, 0x6fb75986}, 0x0, 0x1, 0x60}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x9, 0x2e, 0x1, {0xbc, 0x2, 0xc760, 0x2, 0x5, 0x3}, {0x0, 0x0, 0xffff, 0x1, 0x4, 0x9}, 0x800, 0x3, 0xeb56}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0xb, 0x7fffffff, 0x4e6b2a2c, 0x1ff, 0x9, 0x90d4, 0x0, 0x9950, 0x8, 0x698, 0x8, 0x1, 0x0, 0x7, 0xffffffff, 0x7146395f, 0xfffffff7, 0x8, 0x9, 0x10001, 0x1, 0x1ff, 0x80000001, 0xffff, 0x1, 0x200, 0x7ff, 0x6, 0x3ff, 0xfffffffd, 0xb5, 0x2, 0x1c, 0x2, 0x9, 0x7, 0x2051cc6c, 0x7f, 0x4, 0x3ff, 0x80000000, 0x6, 0xff, 0x4, 0x35c88000, 0x7fffffff, 0xfe58, 0x6, 0x10001, 0x9, 0x9, 0x7, 0x4, 0x1ad, 0xe3c, 0x6, 0xc721, 0x9, 0x5, 0x4, 0x1, 0x8, 0x5, 0x2, 0x6, 0x0, 0x2400, 0x2, 0x2, 0x54, 0x2, 0x200, 0x5, 0x200, 0x80000001, 0x2, 0x4, 0x1ff, 0x7, 0x3ff, 0x3, 0x9, 0x0, 0x4, 0x80000000, 0xfff, 0x1, 0x7f, 0x2, 0x7, 0x7, 0x9, 0x6b1, 0xa00, 0x1, 0x264, 0x1, 0x3, 0xff, 0x5, 0x81, 0x758f, 0x8000, 0x101, 0xfff, 0x726, 0xc0e, 0x80000001, 0x0, 0x6, 0x7, 0x0, 0x0, 0x6, 0x7f, 0x7fff, 0xffffffff, 0x2, 0x5, 0x5, 0x8, 0x5, 0x3713, 0xdbd, 0xc, 0x0, 0xae, 0x4, 0x0, 0x4, 0xffff, 0x1ff, 0x9, 0xe, 0x3, 0x5, 0x2, 0x2, 0x0, 0x7f, 0x6, 0x1ff, 0x5, 0x4, 0x0, 0x437, 0x1, 0x7, 0xfffffbce, 0x5, 0x0, 0x4, 0x35a, 0x4, 0x6, 0x9, 0x3ff, 0x8ec9, 0xf7, 0x3, 0x3, 0x9, 0xffffffff, 0x2, 0xa74, 0xca08, 0x80000001, 0x9, 0x3, 0x9, 0x0, 0x400, 0x2, 0x5, 0xfffffffa, 0x5, 0x40, 0x30, 0x4, 0x9, 0x40, 0xd29d, 0x1, 0x100, 0x4, 0x2, 0x9, 0xfffffffb, 0x5, 0xe, 0xf, 0x2, 0xf, 0x7fffffff, 0x5, 0x5, 0x1fe, 0x80000001, 0x5, 0x302, 0x3, 0x0, 0x2, 0x8, 0x80000000, 0x2, 0x1000, 0xff3, 0x2, 0x5b, 0x3, 0x9, 0x3, 0x7, 0x30000, 0x5, 0x80000000, 0x9, 0x4, 0x8b8, 0x6, 0x9, 0x88, 0xa5, 0x80000001, 0x2, 0x1, 0xfd41, 0x4, 0x2, 0x0, 0x8, 0x9, 0x2, 0x6, 0x4, 0xfffffbff, 0xd213, 0x8, 0x31d7, 0x1398, 0xab, 0x4, 0x7ff, 0x6e, 0x81, 0x0, 0x7, 0x0, 0x100, 0x5, 0x8774, 0x0, 0x5, 0x2]}]}, @TCA_FLOW_ACT={0x41c, 0x9, 0x0, 0x1, [@m_ct={0x190, 0x16, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "1f5dfcaf9187c1cd187689606184aa2c"}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x36}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_LABELS_MASK={0x14, 0x8, "1ad67871721fc545024126eb1cf1478a"}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_ACTION={0x6, 0x3, 0x28}]}, {0x103, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xc0, 0xc, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x42af, 0xc20, 0x6, 0x9, 0x51}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x8b, 0x5, 0x6, 0x7}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3a374}, @TCA_MPLS_PROTO={0x6, 0x4, 0x7}, @TCA_MPLS_BOS={0x5}]}, {0x3c, 0x6, "224e3c28a619b9b4dd588d668db42e89a7cf67661edfb11429a8407208dd2e2ae9ed43885f8b82e4077f5c6f4a923062ca2e905a1e41f493"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x130, 0x1a, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x8, 0x6, 0x8, 0x8}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x0, 0x8, 0x80000001, 0x3}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x8d, 0x6, "e73bdb22f7633f5fcd585a3455afd9fcce3063c87883f99fdf5f18bf79150c0e8e65f3f3b1930eebd13f0826ac2efe8ce2888385735eeb0fe420d26a684e403c2dce0a4bea724e5c36948b62fe157e199d6be2095a6537f4c2731bd1fae3c542d683d3cbdac70ed3d8f1ad753db02c549f4d1e5d3869d79bda34ae51a0894f9c4e8b8c5b157aa663dd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x98, 0x1e, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}]}, {0x5c, 0x6, "91191a7309b091ca877e2c1dcbda78c6496849de32ae7cb69c86c21feb077a147ced694839d46ef1edf0e187bd4e1d1db0ad0d3973b88888d7efe91c4c08f70bfe71d1cae186711cc2892c90d861140fa3fe2e12ccadbb11"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x3e5c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0x4}}, @TCA_MATCHALL_ACT={0x3e40, 0x2, [@m_simple={0x110, 0xb, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x752b, 0xf, 0x429, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7fff, 0x1, 0x361, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x13, 0x7, 0x3, 0x80000000, 0xffffffff}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x7, 0x0, 0x3, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x8597, 0x4, 0x3, 0x7}}, @TCA_DEF_DATA={0x6, 0x3, ':\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x49, 0x6, "cba2bcd7c1c2136aed65985d064d0331332807fc514851f68d58b3a19d660560f1f438de8446f034f218621fccfd75a0d87ba156d41ce8a443a8f9acece1f101cbda37fd24"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x3c14, 0x1f, 0x0, 0x0, {{0xa}, {0x3bb8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x8, 0x6, 0x7, 0x1000}, 0x8, 0x9, [{0x1, 0x7, 0x0, 0x1f, 0x7, 0xc0a1}, {0x4, 0x2, 0x6, 0x7, 0xcb14, 0x8}, {0x180, 0x8, 0x3, 0x9e90, 0xa, 0x9}, {0x40, 0x3, 0x4, 0x7, 0x5}, {0x7, 0x8ea, 0xab, 0x9, 0x1, 0x81}, {0xffff, 0x1, 0x6, 0x8, 0x6, 0x6}]}, [{0x197, 0xc0, 0x563, 0x0, 0x3, 0x8}, {0x6, 0x8, 0x7, 0x2, 0x5, 0x6}, {0x8, 0x2, 0x3, 0x3, 0x5, 0x1}, {0x4, 0x3, 0x6, 0x5, 0x2, 0x1fd8}, {0x7, 0x5, 0x5, 0x7, 0xc}, {0x7, 0x800, 0x4, 0xfffffffa, 0x2fb, 0x2d826b9f}, {0x800, 0x2, 0x6, 0x44b, 0x80, 0x3}, {0x40, 0x7, 0x7fffffff, 0xc49c, 0x4, 0x7}, {0x5, 0x8000, 0x4, 0xffffff56, 0x5, 0x10}, {0x6, 0xffff883a, 0x63, 0x7, 0x4, 0x9}, {0x7fff, 0x6, 0x2, 0x4, 0x389a0000, 0x4}, {0x4b01, 0x7, 0x8, 0x4, 0x9, 0xd}, {0x6, 0xf, 0x7, 0x80, 0x4}, {0x5, 0x651, 0xc, 0x7, 0xb2af, 0x5}, {0xb, 0x3, 0x3, 0xce, 0x8, 0x8}, {0x6, 0x1ff, 0x6, 0x5, 0xf, 0x8}, {0x40, 0xff, 0x2, 0xa, 0x8000, 0x1}, {0x7, 0xc8e, 0x7fffffff, 0x4, 0xff, 0x3}, {0x0, 0x0, 0x10, 0x0, 0x5, 0x7fffffff}, {0x2, 0x4000, 0x8, 0x9, 0x3}, {0x4, 0x7f, 0x100, 0x1000, 0x4, 0xb873}, {0x7, 0x7fff, 0xfffffffd, 0xfffffe00, 0x6, 0x5}, {0x17, 0x401, 0x4, 0x7f, 0xd, 0xc0f}, {0x0, 0x401, 0x0, 0x1000, 0xd}, {0x1, 0xffff, 0x3, 0x3, 0x8, 0x2}, {0x400, 0x67, 0x4, 0xfffffff9, 0x7, 0xfffffffd}, {0x9, 0xd, 0x0, 0xb, 0x8, 0x7}, {0x2, 0x6, 0x7, 0x7, 0x2d, 0xffff0000}, {0x6, 0x2, 0x5, 0xb, 0x3, 0xc6f}, {0xd2, 0x4, 0x1, 0xffff, 0xd, 0xed6}, {0x101, 0x0, 0xc00, 0x80, 0x4, 0x1}, {0x2, 0x0, 0x0, 0x81, 0x2, 0x8}, {0x7f, 0x2, 0x7, 0x7fff, 0x0, 0x80}, {0x80000000, 0x7fff, 0x7, 0x1, 0x6, 0x4}, {0x8, 0xfffffff7, 0x3ce, 0x4, 0x7, 0x31}, {0x0, 0x9, 0x2, 0x7, 0x1, 0xfff}, {0x5, 0x5, 0x8a, 0x5, 0x4, 0x1}, {0x800, 0x4, 0xc, 0x4, 0x21, 0x5}, {0x1, 0x4, 0x81, 0xff, 0x9, 0xa8c}, {0x1, 0xfffffff8, 0x9, 0x3, 0x3, 0x81}, {0xffffffff, 0x4, 0x9, 0xc6ff, 0x5}, {0x6f20cdf1, 0xc, 0x6f4f892f, 0x2, 0x3, 0x4}, {0x4, 0x4, 0xe, 0x9, 0x4, 0x3}, {0x4, 0x5, 0x8, 0x1, 0x2, 0x2}, {0x2, 0x38, 0x0, 0x1, 0xff, 0x68e}, {0x3, 0x561c3373, 0x7, 0x48d, 0x1, 0x2}, {0x4, 0x7fff, 0xffffffff, 0x2, 0x6, 0x400}, {0x8, 0x3, 0x80000000, 0x3ff, 0x40000000, 0xfffffc00}, {0x1, 0xa, 0x5, 0x0, 0x6, 0x8}, {0x427, 0x3, 0x400, 0x32b76b8f, 0x8, 0x8}, {0x4, 0x0, 0x3, 0xc, 0x100}, {0xfffffffc, 0x84, 0x561, 0x3}, {0x3, 0x25, 0x7fffffff, 0x8, 0x0, 0x3}, {0xffffffff, 0xac38, 0x1, 0x9, 0x4, 0x9}, {0xffff9b2f, 0xfffffff8, 0x3ff, 0x2, 0x8, 0x4}, {0xa2, 0x2, 0x2, 0x3d97, 0x6, 0x1ff}, {0xfffffffb, 0x1, 0x3, 0x2, 0x42, 0x4}, {0x9, 0x8001, 0xc62e, 0x8, 0xffff, 0x46}, {0x8, 0x5, 0x8, 0x0, 0x10, 0x401}, {0x8, 0x7, 0x800, 0x8}, {0x2, 0x224, 0x7, 0x5, 0x200, 0x10}, {0xd0c, 0x58, 0x4, 0xffffffff, 0x8, 0x1aa2}, {0xfffffffd, 0xa, 0x4, 0x867, 0x796, 0x4}, {0x3, 0x32, 0xac, 0x2, 0x4, 0x3}, {0xe1, 0x0, 0x3, 0x6, 0x7fff, 0x1}, {0x9, 0xf5, 0x800, 0x4, 0x9, 0x7}, {0xc0000, 0x1, 0xfffffffb, 0xce, 0x1, 0x5}, {0x1000, 0x6, 0x1000, 0x401, 0xc, 0xb02}, {0x6, 0x1, 0x1, 0x9, 0x7, 0x14e3}, {0xcf, 0x4, 0xee9d, 0x5, 0xfffffffa, 0x2}, {0xa, 0x40, 0x5, 0x9, 0x7fffffff, 0x200}, {0x9, 0x5, 0x5, 0x2, 0x100, 0x8}, {0x3, 0x0, 0x200, 0x46380000, 0x6, 0x6}, {0x8001, 0x5, 0x2, 0x3, 0x5777, 0x90000}, {0x2, 0xd, 0x6, 0x7, 0x3, 0x10000}, {0x6, 0x3ff, 0x7, 0x4, 0x0, 0x7}, {0x5, 0x4, 0xe386, 0x6, 0x8, 0x5}, {0x1f, 0x6ee, 0x7f, 0x8, 0x0, 0x2}, {0x0, 0x5, 0x0, 0x7f, 0x5, 0x3}, {0x4, 0x3, 0x5, 0x8, 0x80000001, 0xffff}, {0x1, 0xc, 0x476, 0x5, 0x3, 0x7}, {0x62, 0xe, 0x9, 0x800, 0x8000}, {0xf5b0, 0x8, 0x9, 0x8, 0xd, 0x2}, {0xee, 0x9, 0x8a9f, 0xfff, 0x64da, 0x4}, {0xc0, 0x8, 0x8, 0x3, 0x1, 0x1}, {0x1, 0x81, 0x3, 0x7f, 0x3, 0x7}, {0x10000, 0xd5, 0x4, 0xc, 0x7fff, 0x6}, {0x1, 0x4, 0x2, 0x5, 0x7, 0x4}, {0x9, 0x1, 0x7, 0xffffffff, 0x10001, 0xa}, {0x8, 0x2, 0x0, 0xfffffe01, 0x4, 0xff}, {0xc, 0x3, 0x8, 0x7fffffff, 0xab8a, 0x9}, {0xd, 0x3, 0xe, 0x7, 0x4, 0xffff0000}, {0x9, 0x8, 0x9, 0x5, 0x7, 0x5}, {0x6, 0x3, 0x4, 0x8, 0x8001, 0x4}, {0x800, 0xe700000, 0x6, 0xfffffbff, 0x4, 0xffffff81}, {0x60d, 0xc, 0xffffde53, 0x5, 0x3, 0x3}, {0x9, 0x8, 0x0, 0xe4, 0x9, 0x4}, {0x4, 0x5, 0x7, 0x1ff, 0x8, 0x6}, {0x9, 0xdd6, 0x901, 0xef9a, 0x4, 0x3}, {0xfffffffd, 0x9, 0x200, 0x0, 0x9, 0x9}, {0x4, 0x0, 0x4, 0x518, 0x6, 0x101}, {0x6, 0xb5, 0x2, 0x10000, 0x0, 0x5}, {0x6, 0x9, 0x5, 0x1, 0x37, 0x2}, {0x800, 0x7, 0x80000000, 0x0, 0x7, 0x4}, {0x3, 0x1b47, 0x0, 0x5, 0x5, 0xf445}, {0x0, 0x8, 0x7, 0x7, 0x7f, 0x5}, {0xfffffffc, 0x1, 0xffff, 0x0, 0xd, 0x2}, {0xffff, 0x4, 0x0, 0x9, 0xff, 0x9}, {0x10000, 0x5f6c, 0x4, 0x5, 0x9, 0x80}, {0xde63, 0x9, 0xde6f, 0x400, 0x5, 0xec4c}, {0x158, 0x26, 0x0, 0x7f, 0x1, 0x10}, {0x0, 0x8, 0x1, 0x10000, 0x397, 0x3dfe0d0e}, {0x4, 0x6, 0xffffffff, 0x3, 0x9, 0x5}, {0x3, 0x3, 0x4, 0x1ff, 0xe, 0x4}, {0x1, 0x1ff, 0x2, 0xa, 0x0, 0x1}, {0x2, 0xe, 0x7ff, 0xe067ab6d, 0x7, 0x9}, {0x10001, 0x3, 0xe1, 0x0, 0x6, 0xffffffff}, {0x8, 0x7, 0x2, 0x2, 0xe, 0x8}, {0xfffffeff, 0xb, 0xa, 0xc0, 0xe04b, 0x4}, {0x8, 0x9e2, 0x7, 0x43, 0x2, 0xe860}, {0x1, 0x2, 0x4, 0xb, 0xfff, 0x10}, {0x0, 0x0, 0x2, 0x9, 0x45, 0x7fff}, {0x20f75788, 0x10001, 0x9ba, 0x10000, 0x2a2, 0x7}, {0x0, 0x3, 0x2c0f, 0x1, 0x2, 0xfffffffb}, {0xc, 0x80000000, 0x1, 0x5, 0x3, 0x3}, {0xa, 0x2, 0x5, 0x81, 0x3, 0x44}, {0xffff, 0xe, 0x7f5d1ed5, 0x8, 0x80000000, 0x4}, {0x9, 0x3, 0x4, 0x1, 0x2}], [{0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x2}, {0x1}, {0x5}, {0x3}, {0x4}, {0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {}, {0xb, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x7, 0x1}, {0xe32abb7f5bd9b33b, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {}, {0x1}, {0x1, 0x2}, {0x4}, {0x4}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xa0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x557, 0x7, 0x6, 0x3, 0x3}, 0xb, 0x6, [{0x3, 0x40, 0x15, 0xa8, 0x8, 0xfffc0000}, {0x6, 0x8, 0x4, 0x1, 0x2, 0x1}, {0xfffffffd, 0x1, 0x2, 0x8b47, 0x3}]}, [{0x4cb, 0xffff, 0x3, 0x5, 0x4, 0x2}, {0x6, 0xa2, 0xffffffff, 0x9, 0x1000, 0xc8ed}, {0x66f, 0x8, 0x2, 0x968, 0x884, 0x4}, {0x1ff, 0x1, 0x7, 0x3, 0x3, 0xffffff7f}, {0x4, 0x2, 0xf, 0x6, 0x6b, 0x1}, {0xe, 0x800, 0xe, 0x2, 0x100, 0x5}, {0xe24, 0x8, 0x0, 0xbca, 0x1, 0x237f36aa}, {0x61, 0x401, 0xc, 0x1a3, 0x3ff, 0x200}, {0x2, 0x6, 0x1, 0x6, 0x7ff, 0x6}, {0xf56d, 0x1, 0x6, 0x8, 0x6, 0x4}, {0x7fffffff, 0xfffff016, 0x7, 0x80000001, 0xf, 0x7}, {0x2, 0x9, 0x400, 0xfffff000, 0x9, 0x7fffffff}, {0x2, 0x1, 0x10000, 0x5, 0x7, 0x5}, {0xe8, 0x2, 0x5, 0x7, 0x400, 0x8}, {0x400, 0xf086, 0x3, 0x0, 0x6, 0x3}, {0xc92, 0x200, 0x0, 0x3, 0x67, 0x9}, {0x7, 0x0, 0x0, 0x2, 0x80000000, 0x5}, {0x6, 0x5, 0x9, 0x3ff, 0xffff, 0xb}, {0x10, 0xe133, 0xfcc, 0x600000, 0x80000001, 0x8001}, {0xffff, 0x80000000, 0x4b, 0x3659, 0x100, 0x8001}, {0x2, 0x6, 0x40, 0x4, 0x9, 0x3ff}, {0x8001, 0xd, 0x9, 0x7, 0x6}, {0x1, 0x6bdf14ca, 0x0, 0x9, 0x2, 0x8}, {0x7, 0xf, 0x2, 0x7, 0x8}, {0x8, 0x10000, 0x65dad18, 0x1, 0x6, 0xfff}, {0x7ff, 0xfff, 0x401, 0x2, 0x8001, 0x465}, {0x5, 0x9, 0x0, 0x9, 0xffffffa4, 0x6ddf5f28}, {0x8, 0x600000, 0x10000, 0x8000, 0x68a, 0x6}, {0x7, 0x3, 0x3, 0x5, 0x1, 0x893}, {0x6, 0x8b, 0x5a, 0x80000001, 0x8, 0xa}, {0x80000000, 0x5, 0xf89, 0xdc2, 0x9, 0x5}, {0x2, 0x8, 0x76, 0x1, 0x8, 0x7}, {0xe0e, 0x4, 0x2, 0xe3, 0x4, 0x6}, {0x0, 0xc, 0x7fffffff, 0x8a9, 0x9, 0x800}, {0x2, 0x7, 0x7, 0x9, 0x1, 0x9}, {0xee, 0x2, 0x10000, 0x2, 0x6, 0x30}, {0x2, 0x2, 0x7, 0x4, 0x7, 0xcda5}, {0x6, 0xfffffffe, 0xc74, 0x0, 0x7, 0xc6d}, {0x0, 0x6, 0xdf4d, 0x7, 0x4}, {0x7, 0x4, 0xff, 0x3ff, 0xfffffff9, 0x6}, {0x8, 0x8bc9, 0x81, 0xe4, 0x800, 0x3}, {0x1, 0x7, 0xbc, 0x8, 0x177d, 0x8449}, {0x5, 0xfffffffb, 0x1, 0x4, 0x9, 0xff}, {0x7, 0x46e9, 0x81, 0x0, 0x0, 0x9}, {0x24, 0x6, 0x9, 0x8, 0x8, 0x7fffffff}, {0x9, 0x2, 0x1, 0x8, 0x4, 0x9}, {0xd801, 0x9, 0xf, 0x9, 0x4, 0x2}, {0x5, 0x9, 0x0, 0x4, 0x80000001, 0x80}, {0x4, 0xd, 0x8, 0x3, 0x8, 0x5}, {0x7, 0x6, 0xfffffff7, 0x5, 0x9, 0x6}, {0xfffffffd, 0x80000001, 0x9, 0xe, 0x400, 0xe}, {0x0, 0x4, 0x8c0, 0x7, 0x1ff, 0xb7}, {0x8, 0x7, 0x623, 0xd84, 0x2, 0x6}, {0x9, 0x7, 0x5, 0xd9, 0xb4f9, 0x80}, {0x8, 0x0, 0x8001, 0x9668b83, 0x6, 0x3}, {0xfffffff7, 0x8, 0x383, 0x7, 0x1ff, 0x9}, {0xa, 0x9, 0x1, 0x9, 0x80000000, 0xf27}, {0xa6a, 0x57, 0x8001, 0x1, 0xff, 0x9d}, {0x5, 0x1, 0x6, 0xfff, 0x1, 0x8}, {0x3, 0x0, 0x5, 0x6, 0xfffff68d, 0x1}, {0xffffffe9, 0x7fff, 0x2, 0x6, 0xcf2, 0x3}, {0x2, 0x5, 0x0, 0x8, 0xfffffff8, 0x1}, {0x7, 0x101, 0x9f, 0x8, 0x61a4, 0x5}, {0xf6e, 0xa, 0xb, 0xf, 0x0, 0x9}, {0x1, 0x4, 0x6, 0xafb, 0x5, 0x14b}, {0xc, 0x7f, 0x8, 0x0, 0x890, 0x20000000}, {0xf3, 0x9, 0x80000000, 0x9, 0x40a84940, 0x5b}, {0x8, 0x63b, 0x6, 0x9, 0x6, 0x200}, {0x7fffffff, 0x9, 0x3, 0x8000, 0x8, 0xc}, {0x2, 0x3, 0x9, 0x3, 0xff, 0xfff}, {0x7, 0x9, 0x3, 0x10001, 0x6, 0xfff}, {0xfffffffe, 0x8, 0x400, 0x2, 0x1, 0x3}, {0x0, 0x0, 0x0, 0x7, 0x1, 0x8}, {0x549f1647, 0x0, 0x5a, 0x44, 0x8, 0xae}, {0x7, 0xfffffffb, 0x5, 0x89fd, 0x1, 0x7fff}, {0x6, 0x7, 0x6, 0xa, 0xd489, 0x6}, {0x200, 0x9, 0x7fff, 0x7139eabf, 0x57a, 0xfff}, {0x62, 0x1, 0x8, 0x101, 0x100, 0x2}, {0x3, 0x9, 0x10001, 0xfffffff9, 0x800, 0x7}, {0x8, 0x101, 0x3cd7f0ff, 0x21c1cb0f, 0x81, 0x1}, {0x0, 0x101, 0xff, 0x9, 0x5, 0x2}, {0x49, 0x65, 0x3, 0xdd90, 0x7, 0x1}, {0x3, 0x10000, 0x5, 0x5, 0x401, 0x1}, {0x2, 0xfffffff7, 0x4, 0x0, 0xe, 0xc}, {0x8, 0x4, 0xe67, 0x4, 0x6, 0x3}, {0x1, 0x80000001, 0x2, 0x9282, 0x5, 0x9}, {0x1000, 0x100, 0x2, 0xffffffff, 0x4}, {0x1000, 0xbc3, 0x101, 0x7, 0x7, 0x1}, {0xff, 0x0, 0x6, 0xfff, 0x9}, {0x0, 0x4, 0x5, 0xfef, 0xb3, 0x7}, {0x3, 0x1, 0x6, 0x6, 0x547ddab, 0xff}, {0x4, 0x4cd, 0x0, 0x8000000, 0x9, 0x3}, {0x33, 0x0, 0xfffffe00, 0xe, 0x5, 0x1}, {0x7, 0x8, 0x6, 0x200, 0x61, 0x4}, {0x9, 0x5, 0x9, 0x8, 0xf8, 0x7}, {0x6f86, 0x18a, 0x10000, 0x8000, 0x1, 0x26d}, {0xdd57, 0x0, 0x4, 0x9, 0x8, 0xffffffff}, {0x7, 0x80000000, 0x5, 0x437474f4, 0x4, 0xf}, {0x4, 0x50e, 0xfffffff7, 0x9, 0x2000, 0x6}, {0x800, 0x9, 0x1, 0x1000, 0x9, 0x2}, {0x8, 0x1, 0x10001, 0x8000, 0x80000001, 0x2}, {0x7ea, 0x5, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0xfffff469, 0xa4, 0x3c, 0x4}, {0xf70, 0x4c5f33f9, 0xffff7176, 0x8e1, 0x8}, {0x6, 0x7, 0x8, 0x6fd, 0x7}, {0x6, 0x3ff, 0xfffffffe, 0x3, 0x8, 0xfff}, {0x1, 0xfffffffe, 0x3, 0x8001, 0x5, 0x8}, {0xa4c, 0x200, 0x80000001, 0x5, 0xfffffff2, 0xb}, {0x101, 0x1, 0x3ff, 0x4, 0x1, 0xf9ab000}, {0x6, 0xb3, 0x10, 0x0, 0x1, 0x3}, {0x2d1, 0x7a, 0x47, 0x2, 0x38, 0x2}, {0x9, 0x5, 0x3, 0x0, 0xbcd6, 0xe}, {0x8, 0x634c, 0x9, 0x7bab, 0xffffde4e, 0x4}, {0x1, 0x3, 0x81, 0x1ff, 0x3, 0x7fffffff}, {0xe261, 0x9, 0x1ff, 0xffff, 0x80000000, 0x1ff}, {0x48d, 0x4, 0x8000, 0x1, 0x3, 0x1}, {0x0, 0x3677, 0xffffff01, 0x0, 0x4, 0x1}, {0x2, 0x7, 0x9, 0x6, 0x6}, {0x3, 0x401, 0x7ff, 0x2, 0x3, 0x100}, {0x6, 0xfffffff7, 0x1, 0xa, 0x1, 0x5}, {0x3000, 0x0, 0x10000, 0x5, 0x3, 0xc758}, {0x59, 0x5, 0xc4f, 0x10, 0x2, 0x4}, {0x80000001, 0xd, 0x5, 0xfa, 0xfff, 0x1}, {0x5, 0x6, 0x3, 0xc, 0xff, 0x25f3}, {0x4, 0x546, 0x4, 0xfffffffe, 0x10, 0x401}, {0x3, 0x1ff, 0xc00, 0x7fffffff, 0x9, 0x3e77}, {0x7, 0x7, 0x4, 0xff, 0x6, 0x353}, {0x0, 0x67e, 0x960, 0x0, 0x9, 0x40}], [{0x3}, {0x2}, {}, {0x5, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x7, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2}, {0x1, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x5}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x5}, {0x1, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0xe26341b3b2972b02}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x2}, {0x5}, {0x4}, {0x4}, {}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x3}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x5, 0x1, 0x3, 0x8, 0x3}, 0x9, 0x81, [{0x0, 0x9, 0x0, 0x3, 0x4, 0x8}, {0x7, 0x8, 0xfa69, 0x0, 0x8000, 0x8001}, {0x5, 0xa2a, 0x6, 0x4, 0xffffff1d, 0x7}, {0x1ff, 0x5, 0x7, 0x200, 0x1, 0x8}, {0xc7d, 0x5, 0xfffffff9, 0x1000, 0x9, 0x6}, {0x5d8d, 0x7, 0x2, 0x81, 0x1, 0x4}, {0x5, 0xdb7, 0x9, 0x2, 0x401, 0x4}, {0x4, 0x5, 0x7afc, 0x0, 0x6, 0xb96a}]}, [{0x4ec, 0x6, 0x2, 0x6, 0x338, 0x174e}, {0x0, 0x7, 0x6, 0xfff, 0xb3a9, 0xba}, {0x1, 0x866e, 0x8000, 0x9, 0x0, 0x1}, {0x2, 0x1ff, 0x7fffffff, 0xb, 0x292, 0xffffe616}, {0xc7, 0x30, 0x40, 0xffffffff, 0xa08, 0x9}, {0xa2ea, 0xa0000000, 0x8, 0x1, 0x9, 0x4}, {0x9, 0x8, 0xcf, 0xa2, 0x1, 0x4}, {0x789, 0x3, 0x2, 0x7ff, 0x2, 0x10}, {0x0, 0xffff245e, 0x5, 0x101, 0xd176, 0x8001}, {0x5, 0xfffffffe, 0x8, 0xff, 0x9c4c}, {0x8000, 0x9, 0x4, 0x2, 0x0, 0x7}, {0x7, 0x80000001, 0x18d, 0x40, 0x6, 0x6}, {0x6, 0x4, 0x6eca, 0x1, 0xffffff35, 0x10}, {0x8, 0x4, 0x7, 0x4, 0x0, 0x8}, {0x10000, 0x3, 0x7, 0x1000, 0x6, 0x4}, {0x65f81b5, 0x80, 0x9, 0x6, 0x3ff, 0x7}, {0x4, 0x3ff, 0xfffffd97, 0x2, 0x0, 0x3}, {0x1000, 0x7fffffff, 0x3ff, 0x8, 0x401, 0x7}, {0x6, 0x343704f9, 0x6, 0x0, 0x7, 0x400}, {0x641, 0x8001, 0xc, 0x7, 0xba, 0x1}, {0x1, 0xf4, 0x1, 0x9, 0xa4, 0x78e}, {0x1, 0x8, 0x1, 0xc01c, 0x1000, 0x5}, {0x6, 0x7, 0x200, 0x8a4, 0x0, 0x58b1}, {0x6, 0x8001, 0x0, 0x8, 0x5, 0xd892}, {0xba9, 0x9, 0x7c, 0x74, 0xd, 0x9}, {0x3, 0x1, 0x4, 0x4, 0xfffff801, 0x7}, {0x7, 0xbc0f0b3, 0x2, 0x3, 0xa2e}, {0x7ac, 0x7fff, 0x0, 0x1, 0x0, 0x3ea}, {0x10, 0x8, 0x3, 0x3, 0x5, 0x5}, {0x6, 0x2, 0x1400000, 0x8651, 0x1000, 0xffffffff}, {0x100, 0x1, 0x4, 0x3, 0x100000, 0x4595}, {0xfcc, 0xa75, 0x10, 0x1, 0x0, 0x9}, {0x3, 0xa, 0x8001, 0xffffffd9, 0x3, 0x6}, {0x7, 0x51d9, 0x1000, 0x9, 0xc, 0x1}, {0x6, 0x200, 0x6c86, 0x2, 0x562, 0xffffffff}, {0x101, 0x1, 0x2, 0x5231, 0x1, 0x5}, {0x8, 0x4, 0x1, 0xc11, 0x2, 0x3}, {0x200, 0x3, 0xc64, 0x1, 0xa9}, {0x6, 0x8, 0x4000, 0x9, 0xd, 0x1ff}, {0x1ff, 0x5, 0x9, 0x1, 0x3, 0x7}, {0x9, 0x4, 0x81, 0x5, 0x87}, {0x7, 0x8, 0xfffffffb, 0x4, 0x0, 0x4}, {0x3, 0x4, 0x7, 0xfffffff1, 0x8001, 0x8}, {0x1, 0x0, 0x4, 0x1, 0xccb}, {0x23, 0xb2, 0xffffffff, 0x7, 0x8, 0xf}, {0x73, 0x7, 0x3, 0x5, 0xfff, 0x40}, {0x8c98, 0x8001, 0x0, 0x10, 0x7, 0x9}, {0xaee9, 0xbe, 0xa, 0x3, 0xb, 0x2}, {0x3, 0x303, 0xe, 0x10001, 0x3, 0x2}, {0xee, 0x7, 0x0, 0x8, 0x2}, {0x1, 0x7, 0xfffffffe, 0x9b, 0x0, 0x9}, {0x7aab69c3, 0x40d, 0x6, 0xfffffffd, 0x0, 0x5}, {0xab3, 0x800, 0xd, 0x4, 0xfffffff8, 0x9}, {0xd9, 0x2, 0xfff, 0x2a21, 0x9, 0x7}, {0xffffff96, 0x0, 0x7f, 0x1, 0x1b}, {0x777, 0x6, 0x4, 0x6, 0x4, 0x5}, {0x7, 0x9, 0x1, 0x2, 0x3, 0x8}, {0x9, 0x0, 0x8, 0x5, 0xc9a3b2c2, 0x9}, {0xca, 0x6, 0xb2, 0xa696, 0x1, 0x2}, {0x5, 0x0, 0x6, 0xb, 0x401, 0xd}, {0x1, 0x8ba, 0xf, 0x5, 0x8, 0x3}, {0x3, 0x28, 0xd42, 0x3, 0xfffffff8, 0x13d}, {0x9, 0x400, 0x3, 0x3, 0x7, 0x7fff}, {0x6, 0x2, 0x2, 0x6396, 0x4ee, 0x5}, {0xc, 0x3, 0x0, 0x3f0, 0x9, 0x8001}, {0x9, 0x1000, 0x3, 0x4, 0x2, 0xbd1}, {0x5, 0x5, 0x8, 0x40, 0x7, 0x38e}, {0x80000001, 0xc43, 0x8001, 0xfffff943, 0x9, 0x144}, {0x0, 0x1, 0xd, 0x0, 0x5, 0x8}, {0x1ff, 0x9b, 0x3, 0xcb, 0x1, 0x7ff}, {0x0, 0x2, 0x6, 0x0, 0x7, 0x81}, {0x8, 0x401, 0xfffffbff, 0x2, 0xd6, 0x7}, {0x81, 0x9, 0x3, 0xffffffff, 0x2, 0x80}, {0x7f, 0x9, 0x8, 0x6, 0x0, 0xb}, {0x9, 0x6, 0x3, 0x7f, 0x3365, 0x400}, {0x1000, 0x2, 0x6, 0x2, 0x7, 0x101}, {0x1, 0x8, 0x9, 0x3ff, 0x2}, {0xfff, 0x1, 0x8, 0x6, 0x4, 0x2}, {0x7fffffff, 0x8107, 0x5, 0x9, 0x5, 0xe}, {0x6, 0x8, 0x7fffffff, 0xe, 0x7fff, 0x8}, {0xa7, 0x3, 0x8, 0x0, 0xc, 0x67}, {0x0, 0x724e7e7a, 0x5, 0x8, 0x76, 0xa}, {0x136, 0x0, 0x8, 0x1ff, 0x29d, 0x8000}, {0x0, 0x80000000, 0x9, 0xeded, 0x1, 0x1}, {0x9, 0x7, 0x7, 0x7, 0x1, 0x1}, {0x80000001, 0x4, 0x5, 0xa, 0xffff}, {0x6, 0x6, 0x6, 0xe2b, 0x8}, {0x7, 0x40, 0xa0, 0xfff, 0x1000, 0x4}, {0x3, 0x3ae4, 0x9, 0xe, 0x3, 0x1}, {0x4, 0x8, 0x2, 0x3, 0x81, 0x724}, {0x4, 0x1, 0x1d25, 0x1ff, 0x5, 0x4}, {0x9, 0x7fffffff, 0x0, 0x7fffffff, 0x8, 0x10}, {0x6, 0x8, 0x8000, 0x5, 0x3, 0x2}, {0x2, 0x40, 0x950, 0x0, 0x40, 0x3}, {0x4, 0x7, 0x80, 0x540c, 0x81, 0xefe}, {0x23, 0x5, 0x0, 0x8, 0x2, 0x4}, {0x8, 0x7, 0x400, 0x9, 0x8, 0x5}, {0x5, 0x101, 0xf, 0x800, 0x1, 0x4}, {0x1, 0x7fff, 0xfffffff9, 0x3, 0x3, 0x8}, {0x0, 0x6, 0x9, 0x6, 0xfffffffa, 0x9}, {0x7, 0x1, 0x3, 0x2, 0x9, 0xe}, {0x8, 0x8, 0x400, 0x8, 0xddb1, 0xfffffff2}, {0x40, 0x989, 0x5, 0x5, 0x9, 0x3}, {0x7, 0x2, 0xfe5, 0x986, 0xc, 0x622aa56c}, {0x0, 0x400, 0x2, 0x800, 0xd10, 0x265}, {0xfffffffe, 0x80, 0xf, 0x5, 0x7, 0xfffffffe}, {0x4, 0x3ff, 0xff, 0x9, 0x5, 0x6}, {0xd55, 0x1, 0x7ff, 0xa, 0x638}, {0xf, 0x9, 0xe98c, 0x8, 0x2, 0x1}, {0xf, 0x0, 0x7, 0x3, 0x7ff, 0xa}, {0x7ca6, 0x5, 0x4, 0x4, 0x3, 0x5}, {0x4, 0x6, 0x5, 0x7, 0x8, 0x464b}, {0x9, 0x3, 0x2, 0xf, 0x2, 0x2}, {0x8, 0xb, 0x1, 0x6, 0x40, 0x1}, {0xfffff91a, 0xc8, 0x4, 0x2, 0x9}, {0x6, 0x2, 0x9, 0x8, 0x7de4564a, 0x4}, {0x2, 0x5, 0x0, 0x4, 0x322, 0x101}, {0x0, 0x9, 0x3b, 0x80000000, 0x38, 0xb8}, {0x6, 0x400, 0x9, 0x9, 0x10, 0x8}, {0x7f, 0x3, 0x7, 0x7, 0x7, 0x309}, {0x8, 0xfffffff9, 0x6, 0xfffffeff, 0x2, 0x3}, {0x2fe, 0x6, 0x10001, 0x6, 0x6}, {0x7, 0x535, 0x7, 0x3, 0x80000000}, {0x9f, 0x200, 0xe37, 0x3, 0x80000000}, {0x81, 0x1000, 0x5, 0x14f508d0, 0x1, 0x5d022680}, {0x1d, 0x2, 0x7, 0x0, 0x4, 0x8000}, {0x3, 0x2, 0x3, 0x1, 0xf, 0xd02d}, {0xd, 0x89000000, 0x800, 0x6242, 0x7fffffff, 0x3ff}], [{0x5}, {0x8, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x0, 0x6c94734fc007239c}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x88fbd9cda0ee0087}, {0x4}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2}, {}, {0x2}, {0x2}, {}, {0x7, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x3}, {0x0, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1, 0xefde0c004e7685e0}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x7, 0xffff155f, 0x10000000, 0x5, 0x2}, 0x3, 0x1, [{0x7, 0x22e2, 0xc, 0x1, 0x6, 0xff}, {0xf7e, 0x81, 0x200, 0x1, 0x3, 0x85d}, {0x8b, 0x4, 0x3, 0x7ff, 0x22d7, 0xa}, {0xfffffffc, 0x3ff, 0x3, 0x0, 0x1, 0x9}, {0x9, 0xfffffeff, 0x10000, 0xe, 0x1, 0x3}, {0x3, 0x24be69ee, 0x3ff, 0x8, 0x100, 0x7}, {0x0, 0x3, 0x54, 0x9, 0x3, 0x2}, {0x9, 0x5, 0x3, 0xe, 0x3bae, 0x4}]}, [{0xba9, 0x6, 0x7, 0x2, 0xe, 0x2}, {0xfffffffa, 0x6, 0x7, 0x41, 0x6, 0xe}, {0x6, 0x0, 0x2, 0x5, 0x8000, 0x800}, {0x6, 0x6, 0x1, 0x701, 0x401, 0x1}, {0x6c32, 0x1, 0x5e4e, 0x1ff, 0x10000, 0x7}, {0x8, 0x5, 0x2, 0x2, 0x2, 0xc14}, {0x3, 0x6, 0x3, 0x3, 0x845}, {0x4eb, 0x9aa, 0x3, 0xdf, 0x1f6d3ffe, 0xb6}, {0x3, 0x8, 0x2, 0x7, 0x40, 0x6f54}, {0x2, 0x2, 0xfffff001, 0x2, 0x401, 0x1}, {0x0, 0x3, 0xd2fe, 0x2, 0x9, 0x7f}, {0x9, 0x2, 0x4, 0xa1fb, 0xa450, 0x6}, {0x430, 0x1000, 0x1, 0x8, 0x8, 0x2c7}, {0x2, 0x96, 0x100, 0x1, 0x50, 0x1}, {0x9, 0x2, 0xfffffffa, 0x3ff, 0x3, 0x4}, {0xf, 0xa7e0, 0x8, 0x8, 0x2, 0x1ff}, {0x7, 0x400, 0x9, 0x3dfd, 0x3, 0x40}, {0x6c, 0xf4, 0x4, 0x5, 0x8d496ca, 0x219}, {0x3, 0x2, 0x0, 0x101, 0x1, 0x10000}, {0x3, 0x0, 0x8, 0x7, 0xfffffff8, 0x8000}, {0x9, 0x2, 0x5, 0x1, 0x5, 0x2800000}, {0x8, 0x40, 0x1, 0x1, 0xc, 0x89}, {0xfffffff7, 0x1e, 0x2, 0x2, 0x40, 0x10001}, {0x9, 0x2, 0x2, 0x4, 0x6bfe, 0x9a}, {0x4, 0x100, 0x400, 0x8, 0x7, 0x3}, {0x0, 0x6, 0x4, 0x0, 0x9, 0x6}, {0x9, 0x3, 0xa, 0x7, 0x100, 0xfffffe00}, {0x6, 0x4, 0x300, 0x4, 0x5, 0x4}, {0x4, 0x1, 0x6, 0x1, 0x4f17e16e, 0xf18}, {0xffffffff, 0x10001, 0x4, 0x1, 0x4, 0x3}, {0xf2e, 0xfd, 0xc4da, 0x2, 0x9, 0x86f}, {0x7fff, 0x3, 0x40, 0x8001, 0xffffffff, 0x1}, {0x10001, 0xb5, 0xac, 0xd, 0x5000, 0x3}, {0x0, 0x81, 0x7, 0x2, 0x80, 0x3}, {0x800, 0x2, 0x4, 0x8, 0x7, 0x7}, {0x9, 0x5, 0x8, 0x9, 0x9, 0x4}, {0xffffffff, 0x4, 0x8, 0x9, 0x1ff, 0xc9c}, {0xf38, 0x0, 0x5, 0xbf5a, 0xe2, 0x6}, {0xc3a, 0x5, 0x800, 0x5, 0x7, 0xd}, {0xffffffff, 0x2, 0x7fffffff, 0x1, 0xff, 0x1}, {0x5, 0x1, 0x2905, 0x6, 0x7, 0xb2}, {0x7, 0x5, 0x3, 0x2, 0x7, 0x5}, {0x2, 0x8000, 0xc91, 0x1, 0x5, 0xfffffe01}, {0x5, 0x3, 0xffff0cd6, 0x10, 0x3, 0xffff}, {0x9, 0x90f, 0xfffffffd, 0xfffffffb, 0x8000, 0x8}, {0x4, 0x1, 0x0, 0x7, 0x4000, 0x2}, {0x7, 0x5, 0x0, 0x4, 0x1, 0x1}, {0x40, 0xf, 0x1ff, 0x6, 0xfffff800, 0x388a}, {0x800, 0x6, 0x295, 0x0, 0x1, 0x2}, {0x9, 0x7ff, 0x101, 0x4, 0x6, 0x7}, {0x5, 0x177, 0x3, 0xb, 0x9, 0xef}, {0x40000000, 0x7, 0x33d4e92f, 0x4, 0xa, 0x4}, {0x6f, 0x486e2ca6, 0x2, 0x48e340ed, 0x7, 0x10e87276}, {0xe, 0x80000001, 0x1, 0x8, 0x6, 0xc}, {0x66, 0x6, 0xae49, 0x7, 0x7, 0x6}, {0x0, 0x8, 0x400, 0xa46, 0x57c0000, 0x80000000}, {0x7, 0x7, 0x48ce, 0x9, 0x7, 0x8000}, {0x7, 0x9, 0x401, 0xe425, 0x1ff, 0xb}, {0x2, 0x3, 0x1, 0x3, 0x10, 0xd30}, {0x9, 0x8, 0x2, 0xffffffff, 0x6, 0xffff}, {0x8, 0x0, 0x55, 0xfffffff9, 0x81, 0x1}, {0x644e, 0x6, 0x10001, 0x1, 0x6, 0xfff}, {0xffff978e, 0x1, 0x401, 0x10001, 0x0, 0x7}, {0x401, 0x7f, 0x7ff, 0x10001, 0x7c4e243c, 0xf0}, {0x7f, 0x6, 0x3, 0x1561, 0x5, 0x1}, {0x8, 0x7, 0x107, 0x8, 0xce0, 0xa8}, {0xfff, 0x2, 0x9, 0x9, 0x8, 0x9}, {0x2, 0x7, 0xea, 0x100, 0x0, 0xffff}, {0x7, 0xff, 0xfe0, 0x400, 0xffffffff, 0x10}, {0x1ff, 0x7, 0x2, 0x0, 0x5, 0x7fffffff}, {0x7, 0xf87, 0x9, 0x743, 0xc}, {0xfffffffd, 0x3, 0x9, 0xfffffffd, 0x4, 0x1}, {0x4, 0x4, 0x8, 0xfffffff7, 0xbc, 0x70000}, {0x9, 0x1, 0x4, 0x7, 0x5, 0x4}, {0x400, 0x8, 0x9, 0x1, 0x7260, 0xa8}, {0x7, 0x5, 0x5, 0x836b, 0x0, 0x6}, {0xe, 0x4, 0x80, 0x4, 0x7, 0x7f}, {0x1, 0x8, 0x2, 0xbf40, 0x7f, 0x3}, {0x5, 0x9, 0x4, 0x7, 0xb, 0x3}, {0x3664, 0x10000, 0x3ff, 0x9, 0x0, 0x7fffffff}, {0xf6, 0x9ae, 0x1, 0x1, 0x1000, 0x8}, {0x1, 0xd5, 0x9, 0x7, 0x3, 0x1}, {0x1, 0x10001, 0x7, 0x2, 0x9, 0x7}, {0xfffffff7, 0x9edf, 0x2e0d0365, 0xcb2a, 0x8, 0xffffffff}, {0x9, 0x7, 0x81, 0x8, 0xfff, 0x8}, {0x7, 0xfffffffb, 0x10001, 0xffffff01, 0x10, 0xefb6}, {0x1, 0x0, 0xd, 0xff, 0xca, 0x46a1}, {0x77, 0x21, 0x6, 0x0, 0x9, 0x5}, {0x7ff, 0x5, 0xffffff00, 0x100, 0x1, 0xffffff99}, {0x7, 0x1, 0xb2c7, 0x8, 0x10000}, {0x10000, 0x6, 0x8, 0x4, 0x8, 0x6}, {0x2, 0x9, 0x3, 0xb, 0x8}, {0x80000000, 0x9, 0x9, 0x3, 0x5, 0x9}, {0x9, 0x0, 0x0, 0x9, 0x0, 0x400}, {0x0, 0x4, 0x5, 0x5, 0x800, 0x2f7}, {0xfffffff6, 0x1, 0x7ff, 0x6, 0x3, 0x3}, {0x400, 0xffffffff, 0x7fa, 0x1e12, 0xfffffff8, 0x200}, {0x5, 0x7, 0x6, 0x401, 0xa, 0x6}, {0x0, 0x2, 0xfffffff9, 0x0, 0x2}, {0x3, 0xc4428ea5, 0xebb9, 0x8, 0x0, 0x3}, {0x10, 0x3, 0x800, 0xd, 0x0, 0xf}, {0x12000000, 0x6, 0x81, 0x0, 0x2a, 0x1}, {0x1000, 0x0, 0x5, 0x9, 0xfffff985, 0xb7c}, {0x80, 0x200, 0x4, 0x5, 0x8, 0x4}, {0x7, 0x6, 0x8, 0x1, 0x3, 0x80000001}, {0xb80, 0x7ff, 0x8, 0x3, 0x190200, 0x3}, {0x7, 0x9, 0xfff, 0x2ed, 0x0, 0xfffffff7}, {0x7, 0x8, 0xfce7, 0x7, 0xf6ce, 0x2}, {0x4e, 0x5, 0xabe, 0x8, 0x0, 0x76}, {0x1, 0x0, 0x2, 0x5, 0x0, 0x6}, {0x2, 0x7, 0x8, 0x1ff, 0x8000, 0x5d6}, {0x5be, 0xfffffffc, 0x3, 0x77d6, 0x6, 0x6}, {0x4, 0x5, 0x1, 0x6, 0xffffffff, 0x2}, {0x4, 0x9, 0x3, 0x3fc, 0x7, 0x7bd3e8b6}, {0x400, 0x7, 0x6, 0x9, 0x72f3, 0x4}, {0x7, 0x7, 0x5, 0x8, 0x0, 0x1f67}, {0x3, 0x1, 0x1, 0x8, 0xfe, 0xffff}, {0x83f9, 0x7ff, 0x0, 0x6, 0x1}, {0x100, 0x4, 0x1, 0x7, 0x1, 0x7}, {0x4a, 0xfffffffa, 0x5, 0x1, 0x2, 0x939}, {0xd, 0x6, 0x1, 0x400, 0x1, 0xb}, {0x53, 0x59, 0x8, 0x5, 0x7, 0xc0000}, {0xffffffff, 0x1ff, 0x5c, 0xbb5, 0x9, 0x44ca}, {0xe, 0x3, 0x9, 0x484, 0x1, 0x9}, {0x3, 0x4, 0x2, 0x7fffffff, 0xfffffff7, 0x8}, {0xc30, 0x641, 0x1, 0x3, 0x4, 0x9}, {0x3cf, 0x852, 0x4, 0xffff, 0x10001, 0x10001}, {0x1000, 0x4, 0x0, 0x4, 0x2, 0x8}], [{0x4}, {0x5}, {0x5, 0x1}, {0x2db549f5365d76fe}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0xf3b756d4cd10ce}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x3bacce599e3540cc, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0xe5a2c0ba42c979fa}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x4}, {0x3}, {0x5}, {0x19d1201a9fb1d1c1, 0x1}, {0x4}, {0x2}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x4}, {0x4}, {0x2}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x6}, {0x3}, {0x2}, {0x4b7c1abf034ada51}, {0x4, 0x1}, {}, {0x3}, {0x2}, {0x2}, {0x2, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x3c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x31, 0x6, "257cf6feefc42ad4b0e7bac5e145016df7047c7cc0205067bb6269b4b750be53e9eeb95ba3300fd8c0330355da"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x118, 0x10, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0xc2, 0x6, "469a7a19236afd2786e659aa8ed2018c63f3989345908d50e5fda15b19df4cc7fb0681664ee2e94918eb3e1e3a9db80ab5fe28651c35a0c625d7be1aec153ad6d51d0e3257b501b53727fe0ee7b0c8abfec1bca99dce43a1605de2333d1d460420b42f044e712269627695f82150ea79cefb65ae4d3adf236caaee2c5076ed6c76bf51b060999eb98c9e98a009b0417e0c5f24f140355ba0e077215c4792da6850453f3fd31f02ed8cf0eb11e9dce6f6aad7e7b314967c0b8ccec6112b42"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private1}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x77}]}, 0xa194}}, 0x44) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x4a1, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x1, 0x0, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r9, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48047) r10 = dup(r8) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x2e, 0xffffffb9, 0x1a}, 0x9c) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0xde1b, 0xffff000000000000, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r11, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1b, 0xe, 0x1f1, 0x0}) 2m30.211338868s ago: executing program 1 (id=1024): syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000700)={{0x0, 0xd84, 0x2, 0x4, 0x5, 0xa5, 0x100, 0x4, 0x4, 0x0, 0x10, 0x1, 0x4, 0xc12, 0x6}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic'], 0x86) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) gettid() timer_create(0x0, &(0x7f0000001500)={0x0, 0x25, 0x800000000004, @thr={&(0x7f0000001400)="d10873198b2ad60d8e5eb97da8abf0b272824d3206574d061fb0d8c5a1be8b1d77ad0ebe5993ff6a92776cb65d654743973c7caed51257a258d78ee4c99c9b1e7fc9278ca92ea96e399aedd071b75b99b447632f73e253045707d8119c0b1bd56be96d3c85d941d8fd97809ff991b985a8b2df726569ed8eeee4008b5b1a94fa29bdb1ae6fcd7753c52fbe15cc3490524116bacb3459b2e75c77d55f254069f18fce8afd99a5203765f9a3ec08c813b87a65d02c0af35073ec92fd970d23e3aa6ab34624be323e966c4824f2", &(0x7f00000012c0)="f0cad4dd1f2e032df1f95538e299740fbca07cea073b5a7f63c0e0604d662d44865816b7032f378c4d7444f5ae6b161ee3bfcbfc41aaa81ae02fbe442d82cfbe48802489398838c04b1aaf3bd028a86ce2513e29a6fb987022a93e491f3bf4f26cebc887ad28b303e7e9116a8debb8b333fb72c4700be5d708973a4c1b80eba6622251271978ab1646c0"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) dup3(r1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=ANY=[@ANYBLOB="c2e29b7577295c66bd716cea4bd3c0dfcd93a3b34c3c9bcc9cbb6972aaa8f0"], 0x20}, 0x1, 0x0, 0x0, 0x8883}, 0x2004c850) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1e4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 2m30.004058852s ago: executing program 0 (id=1025): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r4 = inotify_init() io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0xd1c, 0xfffd, {0x2, 0x1}, {0x5b, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x6, 0x1, 0x46, 0x6, 0xfd}]}) 2m27.530871344s ago: executing program 0 (id=1027): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002000b3"], 0x24}}, 0x0) (fail_nth: 2) 2m26.759307992s ago: executing program 0 (id=1030): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, 0x0) fchown(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ext4\x00', 0x0) 2m26.759005558s ago: executing program 1 (id=1031): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x78, 0x2, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) (fail_nth: 2) 2m25.18760677s ago: executing program 1 (id=1034): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2m20.068361252s ago: executing program 1 (id=1038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "7a65ccdf8c4823a0", "f4eab929c39039b9c219a2b5f2a7b56bfdd61d26356d56ac8f2d48ec73e10d98", "467922f7", "e3727f2a17aa166e"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x381, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r4, &(0x7f0000000080)='\x00', 0x1}]) shutdown(r3, 0x1) rt_sigqueueinfo(0x0, 0x38, 0x0) io_uring_enter(0xffffffffffffffff, 0x6234, 0xef03, 0x50cc5b163abd581f, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) 2m18.64494474s ago: executing program 0 (id=1041): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="0c0099"], 0x40}}, 0x0) close_range(r0, r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffff00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010004f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030386d8ba45fd23d56c2f"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b31080008"], 0x6c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008070) setresuid(r3, r3, 0x0) r12 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)=[@wr_crn={0x67, 0x20, {0x8, 0x7}}, @nested_amd_vmload={0x182, 0x18}, @rdmsr={0x66, 0x18, {0xc0000378}}, @wrmsr={0x65, 0x20, {0x2c4, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xe, 0x7fff, 0x1}}, @cpuid={0x64, 0x18, {0x5, 0x6}}, @nested_amd_invlpga={0x17d, 0x20, {0xb000, 0xd4ac}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x7, 0x12, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0xffffffffffffff43}}, @out_dx={0x6a, 0x28, {0x41f7, 0x1, 0xff}}, @wr_crn={0x67, 0x20, {0x9, 0x4}}, @nested_create_vm={0x12d, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x22f, 0x4}}, @set_irq_handler={0xc8, 0x20, {0x23, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x1, 0x8001}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x50, 0xf, 0xff, 0x8}}, @uexit={0x0, 0x18, 0x8}, @nested_amd_invlpga={0x17d, 0x20, {0x10c000, 0xdb4d}}, @cpuid={0x64, 0x18, {0x1, 0x97b}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @uexit={0x0, 0x18}, @wrmsr={0x65, 0x20, {0x648, 0x100000000}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area, 0x1, 0x5, 0x6}}, @cpuid={0x64, 0x18, {0x2, 0x5}}, @nested_amd_invlpga={0x17d, 0x20, {0xffff1000, 0x59d}}, @uexit={0x0, 0x18, 0x9}], 0x398}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000540)={[0x5, 0xa0, 0x1, 0x7fffffffffffffff, 0x80, 0x1, 0xfff, 0x3, 0x8000, 0xa09, 0x1000, 0x5, 0xffffffffffffff1a, 0x0, 0x2a, 0x5], 0x5000, 0x98080}) setuid(r3) 2m3.94764203s ago: executing program 32 (id=1038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "7a65ccdf8c4823a0", "f4eab929c39039b9c219a2b5f2a7b56bfdd61d26356d56ac8f2d48ec73e10d98", "467922f7", "e3727f2a17aa166e"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x381, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r4, &(0x7f0000000080)='\x00', 0x1}]) shutdown(r3, 0x1) rt_sigqueueinfo(0x0, 0x38, 0x0) io_uring_enter(0xffffffffffffffff, 0x6234, 0xef03, 0x50cc5b163abd581f, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) 2m3.543090455s ago: executing program 33 (id=1041): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="0c0099"], 0x40}}, 0x0) close_range(r0, r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffff00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010004f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030386d8ba45fd23d56c2f"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b31080008"], 0x6c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008070) setresuid(r3, r3, 0x0) r12 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)=[@wr_crn={0x67, 0x20, {0x8, 0x7}}, @nested_amd_vmload={0x182, 0x18}, @rdmsr={0x66, 0x18, {0xc0000378}}, @wrmsr={0x65, 0x20, {0x2c4, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xe, 0x7fff, 0x1}}, @cpuid={0x64, 0x18, {0x5, 0x6}}, @nested_amd_invlpga={0x17d, 0x20, {0xb000, 0xd4ac}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x7, 0x12, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0xffffffffffffff43}}, @out_dx={0x6a, 0x28, {0x41f7, 0x1, 0xff}}, @wr_crn={0x67, 0x20, {0x9, 0x4}}, @nested_create_vm={0x12d, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x22f, 0x4}}, @set_irq_handler={0xc8, 0x20, {0x23, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x1, 0x8001}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x50, 0xf, 0xff, 0x8}}, @uexit={0x0, 0x18, 0x8}, @nested_amd_invlpga={0x17d, 0x20, {0x10c000, 0xdb4d}}, @cpuid={0x64, 0x18, {0x1, 0x97b}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @uexit={0x0, 0x18}, @wrmsr={0x65, 0x20, {0x648, 0x100000000}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area, 0x1, 0x5, 0x6}}, @cpuid={0x64, 0x18, {0x2, 0x5}}, @nested_amd_invlpga={0x17d, 0x20, {0xffff1000, 0x59d}}, @uexit={0x0, 0x18, 0x9}], 0x398}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000540)={[0x5, 0xa0, 0x1, 0x7fffffffffffffff, 0x80, 0x1, 0xfff, 0x3, 0x8000, 0xa09, 0x1000, 0x5, 0xffffffffffffff1a, 0x0, 0x2a, 0x5], 0x5000, 0x98080}) setuid(r3) 2m1.931130723s ago: executing program 3 (id=1057): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) read(r0, 0x0, 0x0) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="ea5e20b98851a6eaead63575c97a84ea748ee0445c"]}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x490, 0x0, 0x21a}]}) syz_usb_control_io$uac3(r1, &(0x7f0000000140)={0x14, &(0x7f0000001600)=ANY=[], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x372, 0x0, r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',G']) r9 = open(&(0x7f0000000100)='./file0\x00', 0xc4001, 0x110) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f00000001c0), 0x4) 1m58.627266096s ago: executing program 3 (id=1060): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0be}}, 0x0, 0x0}, 0x0) socket$vsock_stream(0x28, 0x1, 0x28) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) 1m53.212996332s ago: executing program 3 (id=1065): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000c0000000c0001800800", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1) 1m52.270395108s ago: executing program 3 (id=1066): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x40012122) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000018c0)=ANY=[], 0x144c}, 0x1, 0x0, 0x0, 0x40000}, 0x40048d0) 1m51.723378395s ago: executing program 3 (id=1068): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0xb0a8, 0x80, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) setfsgid(0xee01) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') r7 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r7, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}, 0x2503}], 0x1, 0x2, 0x0) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r8 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(r8, &(0x7f0000000240)='wchan\x00') pread64(r9, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) r11 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x10) dup3(r5, r10, 0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) timer_getoverrun(r4) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000000)=0x4, 0x4) 1m45.563868495s ago: executing program 3 (id=1075): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x2, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x9, &(0x7f0000000280)) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') sendmsg$AUDIT_SET(r2, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf, 0x0, &(0x7f00000002c0)=0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x100, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb80a}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fd}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x100}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x440088c4) 1m44.91547852s ago: executing program 4 (id=1076): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x40012122) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000018c0)=ANY=[], 0x144c}, 0x1, 0x0, 0x0, 0x40000}, 0x40048d0) 1m44.588161108s ago: executing program 4 (id=1077): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r1, 0x0, 0x0) 1m44.358834058s ago: executing program 4 (id=1078): socket$pptp(0x18, 0x1, 0x2) futex(0x0, 0x5, 0x10000000, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f000000f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r6, 0x0, 0x0) 1m42.235323829s ago: executing program 2 (id=1079): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000130001002dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0060000083010000080029004101000014000300766c616e30000000000000000000000008002800798592"], 0x44}, 0x1, 0x0, 0x0, 0x80640c1}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004600)=""/102400, 0x19000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r4, 0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x5}, 0xc) 1m40.935798289s ago: executing program 4 (id=1080): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x5}, 0xc) 1m40.761544103s ago: executing program 4 (id=1081): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m39.93628526s ago: executing program 2 (id=1082): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x101002, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x49c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x488, 0x1, [@m_police={0x484, 0x1, 0x0, 0x0, {{0xb}, {0x458, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x8, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x1, 0x0, 0x3}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x8, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x8, 0xd, 0x203, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x6, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0xfffffffc, 0xfd, 0xfffffffa, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x80007f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xffdffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x1, 0x6, 0x7bfd, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x85, 0x8, 0xba, 0x2, 0xc9, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x20000001, 0x2, 0xf, 0x24b9, 0x39, 0xe01, 0x1, 0x6430, 0xb, 0x8, 0x4000, 0x3, 0x7eb6, 0x3, 0x0, 0x203, 0x4, 0x9, 0xff, 0xa, 0x6, 0xf9, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x3, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x6, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0xc, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0xfffffffe, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0xc93b7bc0, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x49c}, 0x1, 0x0, 0x0, 0x50}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000100008d"], 0x0, 0x3c, 0x0, 0x1}, 0x28) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) r7 = syz_open_pts(r6, 0x20800) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0x44) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000014000180060001000200000008000300ac1414bbd77e99a720e342ff539467b33c822b61ab44d501529950a0fe7f862a6b6f71ffe43f3e06f936cef663805d76ec7fa8ca832659b678c33b3f51cfe12edcd1f0e0895fe1879a5991176237af1429b066c2112c94e69ff15db099cccdac4a2bcc785de0e48b74ed36febea8d6e825b6725f409a367f6fdfdd9732639b7650f7f07899ad4f79840f1e605393dd0211510744fe4e69e5a42fa9d25148"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 1m39.935298164s ago: executing program 4 (id=1083): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000003a40), 0x9, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c32fe2"]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c32fe2"]) 1m37.368259816s ago: executing program 2 (id=1084): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x8, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000a40)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x32) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdc03, {0x0, 0x0, 0x0, r5, 0x64e90, 0x36801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x4048002) fcntl$setpipe(r2, 0x407, 0x8) 1m36.012693119s ago: executing program 2 (id=1085): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1}, 0x40012122) sendmsg$TIPC_NL_KEY_FLUSH(r1, 0x0, 0x40048d0) 1m35.116124626s ago: executing program 2 (id=1086): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0xffffffff}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x6) r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) syz_pidfd_open(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20002002}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x40000000}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38002a5f4cd42e3726b7048de8f0d815d39181", @ANYRES16=r5, @ANYBLOB="010000000000fddbdf25020000000800030078f490e20f5be3e0482c", @ANYRES32=r4, @ANYRES32=r0], 0x38}}, 0x20000010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="a40000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400200100000000000000000000000000020c00028005000100000000003c0001800c00028005000100000000002c00018014000300fc02000000000000000000000300000014000400fe8000000000000000000000000000aa0800074000000001100005800a000100512e393331"], 0xa4}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 1m34.863371766s ago: executing program 2 (id=1087): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa, 0x1}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r1, &(0x7f0000000300)=""/180, 0xb4, 0x120, &(0x7f0000000180)={0x2, 0x0, @private}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x2, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x60002000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x24, 0x18, 0x1, 0x0, 0x8, {0xa, 0x37, 0x3f, 0x0, 0x0, 0xbc4}, [@IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x24}}, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 1m30.172491853s ago: executing program 34 (id=1075): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x2, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x9, &(0x7f0000000280)) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') sendmsg$AUDIT_SET(r2, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf, 0x0, &(0x7f00000002c0)=0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x100, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb80a}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fd}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x100}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x440088c4) 1m27.699858046s ago: executing program 6 (id=1052): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000002700), &(0x7f0000000000)=0x4) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)) unshare(0x2000680) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x8786f63180a9930d, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3, 0x6}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x60) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000340)=0x400) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000001400128009000100766574680000ff000400028008002000010000000994feb2be2ad748f3335dd6df0d391fa9d39ef41459ed904717cec817c6efdadfd9dabe7d082697c36a6f4709488209d220b6ce4c714666e24f8aed64dbb35a60e078b84fbaf86a5711de2712d688022c23c52891ed541ea1011ce794a4184a4256dfcbab9e550b159e5690041749aeb7904634725289cd17367ede71b0f29a8cc1ffdd0005ffec0ac280d7"], 0x3c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r1], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001000000000000000000000000a00"/28], 0x50) close(r10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB="ff0f000000000000000000009bc93ac100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) r11 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000180)=0x7) ioctl$TCSETA(r11, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffd, 0x0, "bc820e0400000054"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r10}, &(0x7f00000001c0), &(0x7f0000000380)='%ps \x00'}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000004acb2547b8af8ff00000000bfa200000004000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r12, r10}, 0xc) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) 1m24.086020361s ago: executing program 35 (id=1083): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000003a40), 0x9, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c32fe2"]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c32fe2"]) 1m18.531077793s ago: executing program 36 (id=1087): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa, 0x1}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r1, &(0x7f0000000300)=""/180, 0xb4, 0x120, &(0x7f0000000180)={0x2, 0x0, @private}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x2, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x60002000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x24, 0x18, 0x1, 0x0, 0x8, {0xa, 0x37, 0x3f, 0x0, 0x0, 0xbc4}, [@IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x24}}, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 1m12.625995938s ago: executing program 37 (id=1052): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000002700), &(0x7f0000000000)=0x4) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)) unshare(0x2000680) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x8786f63180a9930d, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3, 0x6}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x60) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000340)=0x400) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000001400128009000100766574680000ff000400028008002000010000000994feb2be2ad748f3335dd6df0d391fa9d39ef41459ed904717cec817c6efdadfd9dabe7d082697c36a6f4709488209d220b6ce4c714666e24f8aed64dbb35a60e078b84fbaf86a5711de2712d688022c23c52891ed541ea1011ce794a4184a4256dfcbab9e550b159e5690041749aeb7904634725289cd17367ede71b0f29a8cc1ffdd0005ffec0ac280d7"], 0x3c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r1], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001000000000000000000000000a00"/28], 0x50) close(r10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB="ff0f000000000000000000009bc93ac100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) r11 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000180)=0x7) ioctl$TCSETA(r11, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffd, 0x0, "bc820e0400000054"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r10}, &(0x7f00000001c0), &(0x7f0000000380)='%ps \x00'}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000004acb2547b8af8ff00000000bfa200000004000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r12, r10}, 0xc) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) 53.383346212s ago: executing program 5 (id=1117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 52.667711465s ago: executing program 5 (id=1118): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0xffff, @empty, 0x6f}], 0x1c) 52.607463869s ago: executing program 5 (id=1119): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="780600003f000701feffffff00000000037c000004004280600601"], 0x678}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_io_uring_setup(0x31aa, &(0x7f0000000280)={0x0, 0xfffffffd, 0x800, 0x3, 0x179}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x6000, @fd=r2, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000300)="00000000042000", 0x7}], 0x1}) io_uring_enter(r3, 0x4d10, 0x2, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip_mr_vif\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x47, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) ioctl$VIDIOC_DV_TIMINGS_CAP(r8, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, '\x00', @bt={0xff, 0x5, 0x7, 0x3, 0xfffffffffffffffc, 0x7, 0x1, 0x8}}) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000000) 52.111335223s ago: executing program 5 (id=1120): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r1, 0x1275, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x18000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3aff8ff1001000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x4233579eadffed37, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x13) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000580)={0x20000000000000c4, &(0x7f0000000540)=[{0x65, 0x1, 0x6}]}) signalfd(r2, &(0x7f0000000040), 0x8) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @mcast2, 0x3}], 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000c, 0x10, 0xffffffffffffffff, 0xffffc000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) (async, rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) 51.855402219s ago: executing program 5 (id=1121): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000080201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f00000000c0)=0x6) r3 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f00000004c0)={r3, &(0x7f0000000340)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x200200, &(0x7f0000000000)={@_ha_fsid={[0x4, 0x2]}, {0x9, 0x8, 0x2, 0xe39}}, 0x5, 0x0, &(0x7f0000000100)=0x6}) pipe2(&(0x7f0000000040), 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0xfe3, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0xfe, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x3, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x2, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x806, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x0, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x0, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 50.450127647s ago: executing program 5 (id=1122): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x8, [@ptr={0x4}, @func={0x3, 0x0, 0x0, 0xc, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x1}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x25, 0x4}, @ptr={0x6, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x61, 0x5f, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000700)=""/4096, 0x60, 0x1000, 0x0, 0x77e9}, 0x28) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x9}, {0x0, 0x0, 0xfffffffc, 0xa}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xc, 0x4, 0x7fff0000}]}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r7) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0x81, '\x00', 0x2}) r9 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2c, &(0x7f0000000500)={0x0, {{0xa, 0x4e20, 0x7d7, @remote, 0x10}}, {{0xa, 0x4e21, 0x5, @mcast2}}}, 0x108) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r10, 0x8) 38.733765225s ago: executing program 7 (id=1127): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x28) r1 = socket(0x10, 0x803, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x6, 0x2fef8dda, 0x6, 0x5, 0x8, 0x5, 0x3, 0x9}, &(0x7f0000000040)={0x2, 0xc4c, 0xb, 0x3, 0x5d3f, 0x0, 0xdc, 0xfff}, &(0x7f00000000c0)={0x586, 0x3, 0x4, 0x9, 0x7, 0xfffffffeffffffff, 0x0, 0x8}, &(0x7f0000000180)={r2, r3/1000+10000}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x40}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000380)="1a00000002800000", 0x8) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@RTM_GETMDB={0x0, 0x56, 0xd08, 0x70bd28, 0x25dfdbfd, {0x7, r5}, ["", ""]}, 0x12}, 0x1, 0x0, 0x0, 0x48815}, 0x814) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000003c0)={0x101, {{0xa, 0x4e21, 0x4, @local, 0x7}}}, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000400000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000001"], 0x48) 38.487507127s ago: executing program 7 (id=1129): read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x21, 0x801, 0xfffffffc, 0xfffffffc, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg$inet(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) socket$inet6(0xa, 0xa, 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 35.699520784s ago: executing program 7 (id=1130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xcc) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="3fa24975e4d05a6bbb8a8588898fb351a22c8898db26a423ca8d15", 0x1b}], 0x1}}], 0x2, 0x4000001) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206010400000000000000000000002314000780080011400000000005001500110000000500010007000000050005000a00000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}, 0x1, 0x0, 0x0, 0x22004004}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000001140)={0x3, 0x7, 0xfb8, 0x6, 0x6, 0x4}) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r5 = dup(r0) sendto$inet(r5, &(0x7f0000000080)='M', 0x1, 0x4801, 0x0, 0x0) 35.602683286s ago: executing program 9 (id=1092): shutdown(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(r0, 0x5450) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 35.415455784s ago: executing program 9 (id=1131): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 35.300400904s ago: executing program 38 (id=1122): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x8, [@ptr={0x4}, @func={0x3, 0x0, 0x0, 0xc, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x1}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x25, 0x4}, @ptr={0x6, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x61, 0x5f, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000700)=""/4096, 0x60, 0x1000, 0x0, 0x77e9}, 0x28) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x9}, {0x0, 0x0, 0xfffffffc, 0xa}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xc, 0x4, 0x7fff0000}]}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r7) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0x81, '\x00', 0x2}) r9 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2c, &(0x7f0000000500)={0x0, {{0xa, 0x4e20, 0x7d7, @remote, 0x10}}, {{0xa, 0x4e21, 0x5, @mcast2}}}, 0x108) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r10, 0x8) 35.205149144s ago: executing program 9 (id=1133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 34.769148902s ago: executing program 9 (id=1135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000480)={r0, &(0x7f0000000340)='taprio\x00', 0x210000, &(0x7f0000000380)={@_ha_fsid={[0xb33, 0x9]}, {0x6, 0x4, 0x1000, 0xfffffffffffffffa}}, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x3}) connect$qrtr(r4, &(0x7f00000004c0)={0x2a, 0x0, 0x1}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x3c, 0x2e, 0x4, 0x1070bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1, 0x10}, {0x5, 0xf}, {0x7, 0xffe0}}, [{0x8, 0xb, 0x40}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r12, {0xffe0}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_red={{0x8}, {0xc, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250100000008000300", @ANYRES32=r13, @ANYBLOB="10d161997ec2c103b526722015de6dcd12414e3cc01eba8498d3a53e8a3910b5725d1822a77b1f95be55b065fc34525123287cd3e7858b7a4ac98c74a529e9e41db8d4546b77"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 34.154629752s ago: executing program 7 (id=1137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x9, "36aea79335d6e4b255a242bce8c0c216b3c39ab4078a20524bfb11b5fd2e3574"}) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0xa0881) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x20, 0x1, 0x0, 0x8, 0x1, 0xfffffff7, &(0x7f0000000000)='k'}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)='15', 0xfffffdd2}], 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x24, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x9, 0x1, 0x1, 0x7ff, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8b9}, @jmp={0x5, 0x1, 0x7, 0x4, 0x2, 0x20, 0x1}, @ldst={0x2, 0x1, 0x2, 0x5, 0x9, 0x40}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x6c}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x6ec09e1c, 0x38, &(0x7f00000002c0)=""/56, 0x41000, 0x34, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x7, 0x7, 0xc}, 0x10, 0x23b2c, r1, 0x3, &(0x7f00000003c0)=[r1], &(0x7f0000000440)=[{0x0, 0x1, 0xb, 0x9}, {0x4, 0x2, 0x5, 0x6}, {0x2, 0x1, 0x3}], 0x10, 0x9}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000005240)=""/4125, 0x101d}, {&(0x7f0000000140)=""/92, 0x5c}, {&(0x7f0000002a80)=""/139, 0x8b}, {&(0x7f0000002b40)=""/194, 0xc2}, {0x0}, {&(0x7f0000000040)=""/180, 0xb4}], 0x6}, 0x10100) 33.63959342s ago: executing program 7 (id=1138): unshare(0x22020600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) (fail_nth: 2) 33.18900934s ago: executing program 7 (id=1139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002001400010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xd5dfe8a8053da4f1}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0xffe0}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8080, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 21.354148401s ago: executing program 8 (id=1147): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 18.09535108s ago: executing program 39 (id=1135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000480)={r0, &(0x7f0000000340)='taprio\x00', 0x210000, &(0x7f0000000380)={@_ha_fsid={[0xb33, 0x9]}, {0x6, 0x4, 0x1000, 0xfffffffffffffffa}}, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x3}) connect$qrtr(r4, &(0x7f00000004c0)={0x2a, 0x0, 0x1}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x3c, 0x2e, 0x4, 0x1070bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1, 0x10}, {0x5, 0xf}, {0x7, 0xffe0}}, [{0x8, 0xb, 0x40}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r12, {0xffe0}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_red={{0x8}, {0xc, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250100000008000300", @ANYRES32=r13, @ANYBLOB="10d161997ec2c103b526722015de6dcd12414e3cc01eba8498d3a53e8a3910b5725d1822a77b1f95be55b065fc34525123287cd3e7858b7a4ac98c74a529e9e41db8d4546b77"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 17.839243969s ago: executing program 40 (id=1139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002001400010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xd5dfe8a8053da4f1}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0xffe0}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8080, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 17.782313937s ago: executing program 8 (id=1150): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x8864, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x66, 0x0, 0x6, 0x4, 0x0, @private=0xa010101, @private=0xa010102}}}}}, 0x0) 17.347617691s ago: executing program 8 (id=1151): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 16.53385246s ago: executing program 8 (id=1152): r0 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 16.39899848s ago: executing program 8 (id=1153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2717, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) 15.811509961s ago: executing program 8 (id=1154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 0s ago: executing program 41 (id=1154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) kernel console output (not intermixed with test programs): ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.210250][ T8856] ? unwind_get_return_address+0x4d/0x90 [ 363.210278][ T8856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 363.210313][ T8856] ____sys_sendmsg+0x94c/0x9c0 [ 363.210343][ T8856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.210377][ T8856] ? import_iovec+0x73/0xa0 [ 363.210413][ T8856] ___sys_sendmsg+0x2a5/0x360 [ 363.210442][ T8856] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.210503][ T8856] ? __fget_files+0x2a/0x420 [ 363.210530][ T8856] ? __fget_files+0x3a6/0x420 [ 363.210571][ T8856] __x64_sys_sendmsg+0x1c3/0x2a0 [ 363.210597][ T8856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.210630][ T8856] ? __pfx_ksys_write+0x10/0x10 [ 363.210676][ T8856] do_syscall_64+0x14d/0xf80 [ 363.210708][ T8856] ? trace_irq_disable+0x3b/0x150 [ 363.210734][ T8856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.210757][ T8856] ? clear_bhb_loop+0x40/0x90 [ 363.210785][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.210808][ T8856] RIP: 0033:0x7fb7a959c799 [ 363.210828][ T8856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.210848][ T8856] RSP: 002b:00007fb7a77f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.210872][ T8856] RAX: ffffffffffffffda RBX: 00007fb7a9815fa0 RCX: 00007fb7a959c799 [ 363.210888][ T8856] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 363.210903][ T8856] RBP: 00007fb7a77f6090 R08: 0000000000000000 R09: 0000000000000000 [ 363.210916][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.210938][ T8856] R13: 00007fb7a9816038 R14: 00007fb7a9815fa0 R15: 00007fff2b4d76c8 [ 363.210974][ T8856] [ 364.235082][ T8863] FAULT_INJECTION: forcing a failure. [ 364.235082][ T8863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.235123][ T8863] CPU: 0 UID: 0 PID: 8863 Comm: syz.1.933 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 364.235153][ T8863] Tainted: [L]=SOFTLOCKUP [ 364.235161][ T8863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.235174][ T8863] Call Trace: [ 364.235184][ T8863] [ 364.235193][ T8863] dump_stack_lvl+0xe8/0x150 [ 364.235232][ T8863] should_fail_ex+0x46b/0x600 [ 364.235266][ T8863] _copy_to_user+0x31/0xb0 [ 364.235383][ T8863] simple_read_from_buffer+0xe1/0x170 [ 364.235477][ T8863] proc_fail_nth_read+0x1be/0x230 [ 364.235534][ T8863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.235565][ T8863] ? rw_verify_area+0x2ac/0x4e0 [ 364.235598][ T8863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.235627][ T8863] vfs_read+0x212/0xa80 [ 364.235668][ T8863] ? __pfx_vfs_read+0x10/0x10 [ 364.235704][ T8863] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 364.235804][ T8863] ? lockdep_hardirqs_on+0x7a/0x110 [ 364.235836][ T8863] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 364.235869][ T8863] ? mutex_lock_nested+0x152/0x1d0 [ 364.235893][ T8863] ? fdget_pos+0x252/0x320 [ 364.235949][ T8863] ksys_read+0x156/0x270 [ 364.235985][ T8863] ? __pfx_ksys_read+0x10/0x10 [ 364.236031][ T8863] do_syscall_64+0x14d/0xf80 [ 364.236063][ T8863] ? trace_irq_disable+0x3b/0x150 [ 364.236090][ T8863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.236114][ T8863] ? clear_bhb_loop+0x40/0x90 [ 364.236143][ T8863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.236165][ T8863] RIP: 0033:0x7fb7a955cfce [ 364.236187][ T8863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.236206][ T8863] RSP: 002b:00007fb7a77d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 364.236230][ T8863] RAX: ffffffffffffffda RBX: 00007fb7a77d56c0 RCX: 00007fb7a955cfce [ 364.236247][ T8863] RDX: 000000000000000f RSI: 00007fb7a77d50a0 RDI: 0000000000000007 [ 364.236261][ T8863] RBP: 00007fb7a77d5090 R08: 0000000000000000 R09: 0000000000000000 [ 364.236274][ T8863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.236287][ T8863] R13: 00007fb7a9816128 R14: 00007fb7a9816090 R15: 00007fff2b4d76c8 [ 364.236323][ T8863] [ 366.270654][ T8884] netlink: 'syz.3.940': attribute type 24 has an invalid length. [ 366.270678][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 366.308366][ T5808] usb 5-1: USB disconnect, device number 27 [ 366.729103][ T8884] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 367.368944][ T5966] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 369.766355][ T5966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.766430][ T5966] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 369.766456][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.859072][ T5966] usb 1-1: config 0 descriptor?? [ 370.075352][ T5966] usb 1-1: can't set config #0, error -71 [ 370.166476][ T5966] usb 1-1: USB disconnect, device number 24 [ 370.486728][ T8906] netlink: 56 bytes leftover after parsing attributes in process `syz.1.948'. [ 371.778947][ T5966] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 371.941954][ T5966] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 371.941987][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.986939][ T5966] usb 3-1: config 0 descriptor?? [ 372.258463][ T5966] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 372.545866][ T8917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.547139][ T8917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.802492][ T8917] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 372.802514][ T8917] netlink: 'syz.2.951': attribute type 2 has an invalid length. [ 372.943509][ T5966] [drm:udl_init] *ERROR* Selecting channel failed [ 373.473787][ T5966] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 373.473814][ T5966] [drm] Initialized udl on minor 2 [ 373.531443][ T5966] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 373.584188][ T5966] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 373.635340][ T6660] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 373.637686][ T6660] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 373.698934][ T5966] usb 3-1: USB disconnect, device number 26 [ 374.577025][ T6660] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 374.749235][ T6660] usb 4-1: Using ep0 maxpacket: 8 [ 374.758674][ T6660] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 374.759080][ T6660] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 374.759199][ T6660] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 374.759254][ T6660] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.759378][ T6660] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 374.759432][ T6660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.301378][ T6660] usb 4-1: GET_CAPABILITIES returned e6 [ 375.301503][ T6660] usbtmc 4-1:16.0: can't read capabilities [ 375.801414][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 375.852933][ T8948] xfrm1: entered promiscuous mode [ 375.852962][ T8948] xfrm1: entered allmulticast mode [ 375.962997][ T8949] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 375.963020][ T8949] netlink: 216 bytes leftover after parsing attributes in process `syz.2.960'. [ 376.291250][ T8958] FAULT_INJECTION: forcing a failure. [ 376.291250][ T8958] name failslab, interval 1, probability 0, space 0, times 0 [ 376.291302][ T8958] CPU: 1 UID: 0 PID: 8958 Comm: syz.1.964 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 376.291330][ T8958] Tainted: [L]=SOFTLOCKUP [ 376.291337][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.291356][ T8958] Call Trace: [ 376.291364][ T8958] [ 376.291373][ T8958] dump_stack_lvl+0xe8/0x150 [ 376.291409][ T8958] should_fail_ex+0x46b/0x600 [ 376.291440][ T8958] should_failslab+0xa8/0x100 [ 376.291463][ T8958] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 376.291494][ T8958] ? __alloc_skb+0x1d0/0x7d0 [ 376.291523][ T8958] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.291559][ T8958] __alloc_skb+0x1d0/0x7d0 [ 376.291592][ T8958] netlink_sendmsg+0x5d4/0xb40 [ 376.291630][ T8958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.291661][ T8958] ? unwind_get_return_address+0x4d/0x90 [ 376.291686][ T8958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.291719][ T8958] ____sys_sendmsg+0x94c/0x9c0 [ 376.291746][ T8958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.291776][ T8958] ? import_iovec+0x73/0xa0 [ 376.291810][ T8958] ___sys_sendmsg+0x2a5/0x360 [ 376.291835][ T8958] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.291890][ T8958] ? __fget_files+0x2a/0x420 [ 376.291916][ T8958] ? __fget_files+0x3a6/0x420 [ 376.291952][ T8958] __x64_sys_sendmsg+0x1c3/0x2a0 [ 376.291976][ T8958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.292006][ T8958] ? __pfx_ksys_write+0x10/0x10 [ 376.292046][ T8958] do_syscall_64+0x14d/0xf80 [ 376.292076][ T8958] ? trace_irq_disable+0x3b/0x150 [ 376.292100][ T8958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.292121][ T8958] ? clear_bhb_loop+0x40/0x90 [ 376.292147][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.292168][ T8958] RIP: 0033:0x7fb7a959c799 [ 376.292212][ T8958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.292231][ T8958] RSP: 002b:00007fb7a77f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.292255][ T8958] RAX: ffffffffffffffda RBX: 00007fb7a9815fa0 RCX: 00007fb7a959c799 [ 376.292271][ T8958] RDX: 0000000000020080 RSI: 0000200000000400 RDI: 0000000000000003 [ 376.292285][ T8958] RBP: 00007fb7a77f6090 R08: 0000000000000000 R09: 0000000000000000 [ 376.292298][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.292311][ T8958] R13: 00007fb7a9816038 R14: 00007fb7a9815fa0 R15: 00007fff2b4d76c8 [ 376.292345][ T8958] [ 378.233527][ T5808] usb 4-1: USB disconnect, device number 27 [ 378.520768][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.520851][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.671408][ T8982] random: crng reseeded on system resumption [ 380.493793][ T8990] FAULT_INJECTION: forcing a failure. [ 380.493793][ T8990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.493834][ T8990] CPU: 1 UID: 0 PID: 8990 Comm: syz.1.971 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.493863][ T8990] Tainted: [L]=SOFTLOCKUP [ 380.493871][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.493884][ T8990] Call Trace: [ 380.493892][ T8990] [ 380.493902][ T8990] dump_stack_lvl+0xe8/0x150 [ 380.493962][ T8990] should_fail_ex+0x46b/0x600 [ 380.493995][ T8990] _copy_from_user+0x2d/0xb0 [ 380.494027][ T8990] kstrtouint_from_user+0xd6/0x180 [ 380.494057][ T8990] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 380.494105][ T8990] ? __lock_acquire+0x6b5/0x2cf0 [ 380.494136][ T8990] proc_fail_nth_write+0x8e/0x210 [ 380.494163][ T8990] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 380.494197][ T8990] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 380.494225][ T8990] vfs_write+0x2a3/0xba0 [ 380.494267][ T8990] ? __pfx_vfs_write+0x10/0x10 [ 380.494313][ T8990] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 380.494344][ T8990] ? lockdep_hardirqs_on+0x7a/0x110 [ 380.494374][ T8990] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 380.494408][ T8990] ? mutex_lock_nested+0x152/0x1d0 [ 380.494431][ T8990] ? fdget_pos+0x252/0x320 [ 380.494466][ T8990] ksys_write+0x156/0x270 [ 380.494499][ T8990] ? __pfx_ksys_write+0x10/0x10 [ 380.494542][ T8990] do_syscall_64+0x14d/0xf80 [ 380.494573][ T8990] ? trace_irq_disable+0x3b/0x150 [ 380.494597][ T8990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.494618][ T8990] ? clear_bhb_loop+0x40/0x90 [ 380.494644][ T8990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.494665][ T8990] RIP: 0033:0x7fb7a955cfce [ 380.494684][ T8990] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.494702][ T8990] RSP: 002b:00007fb7a77b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 380.494723][ T8990] RAX: ffffffffffffffda RBX: 00007fb7a77b46c0 RCX: 00007fb7a955cfce [ 380.494738][ T8990] RDX: 0000000000000001 RSI: 00007fb7a77b40a0 RDI: 0000000000000005 [ 380.494751][ T8990] RBP: 00007fb7a77b4090 R08: 0000000000000000 R09: 0000000000000000 [ 380.494769][ T8990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.494781][ T8990] R13: 00007fb7a9816218 R14: 00007fb7a9816180 R15: 00007fff2b4d76c8 [ 380.494815][ T8990] [ 381.877212][ T9004] netlink: 'syz.3.972': attribute type 1 has an invalid length. [ 382.013594][ T9006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.972'. [ 382.099203][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.972'. [ 383.302139][ T8988] syzkaller1: entered promiscuous mode [ 383.302165][ T8988] syzkaller1: entered allmulticast mode [ 383.338296][ T8998] syzkaller1: entered promiscuous mode [ 383.338323][ T8998] syzkaller1: entered allmulticast mode [ 383.366028][ T9004] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 385.880433][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 386.029050][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 386.032723][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.032757][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.032781][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 386.032825][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 386.032849][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.097013][ T31] usb 1-1: config 0 descriptor?? [ 386.341060][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.345135][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.640449][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.660520][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.701547][ T9028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.734914][ T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 386.734971][ T31] microsoft 0003:045E:07DA.0005: item fetching failed at offset 21/34 [ 386.735792][ T31] microsoft 0003:045E:07DA.0005: parse failed [ 386.735888][ T31] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 388.456857][ T31] usb 1-1: USB disconnect, device number 25 [ 388.710607][ T5883] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 388.868079][ T5883] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 388.879428][ T5883] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.879508][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.879564][ T5883] usb 5-1: Product: ä” å¥å¾°î‡¥é¾£ç¬¨ë¬Šë”銶ᤛ惦⟺â€ä¿’킃༳⟱펧è¤é¯±ì´®ã‘™ï–œåœ©ìŠšï¶˜é— ç‹¥6䤫ꯙ瑖㸿쑘àªï¿½ãŽä¼ê•ˆá†œç‘®ïˆ‘ì‘…êŠå¬¯â‘§èˆ…ç¶åµ·ã™Œì®„縅漳뾔핗맞떌쵫躂뵯舵뼚쭓é¯í’¿å¾ªæ¦–뺩跰뙻캮å§ã–¾ì‡˜ê­‰ìŒ‚ꊅï¸å‚®ï´¸ [ 388.879653][ T5883] usb 5-1: Manufacturer: Ð [ 388.879703][ T5883] usb 5-1: SerialNumber: Љ [ 389.042422][ T9059] FAULT_INJECTION: forcing a failure. [ 389.042422][ T9059] name failslab, interval 1, probability 0, space 0, times 0 [ 389.042469][ T9059] CPU: 1 UID: 0 PID: 9059 Comm: syz.1.990 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 389.042498][ T9059] Tainted: [L]=SOFTLOCKUP [ 389.042506][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.042518][ T9059] Call Trace: [ 389.042527][ T9059] [ 389.042536][ T9059] dump_stack_lvl+0xe8/0x150 [ 389.042573][ T9059] should_fail_ex+0x46b/0x600 [ 389.042607][ T9059] should_failslab+0xa8/0x100 [ 389.042632][ T9059] __kmalloc_noprof+0xdf/0x7b0 [ 389.042665][ T9059] ? tomoyo_encode+0x28b/0x550 [ 389.042778][ T9059] tomoyo_encode+0x28b/0x550 [ 389.042808][ T9059] tomoyo_realpath_from_path+0x58d/0x5d0 [ 389.042847][ T9059] ? tomoyo_path_number_perm+0x219/0x630 [ 389.042907][ T9059] tomoyo_path_number_perm+0x246/0x630 [ 389.042945][ T9059] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 389.042982][ T9059] ? __lock_acquire+0x6b5/0x2cf0 [ 389.043037][ T9059] ? __fget_files+0x2a/0x420 [ 389.043068][ T9059] ? __fget_files+0x2a/0x420 [ 389.043093][ T9059] ? __fget_files+0x3a6/0x420 [ 389.043118][ T9059] ? __fget_files+0x2a/0x420 [ 389.043149][ T9059] security_file_ioctl+0xc3/0x2a0 [ 389.043203][ T9059] __se_sys_ioctl+0x47/0x170 [ 389.043240][ T9059] do_syscall_64+0x14d/0xf80 [ 389.043273][ T9059] ? trace_irq_disable+0x3b/0x150 [ 389.043308][ T9059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.043329][ T9059] ? clear_bhb_loop+0x40/0x90 [ 389.043355][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.043376][ T9059] RIP: 0033:0x7fb7a959c799 [ 389.043395][ T9059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.043413][ T9059] RSP: 002b:00007fb7a77d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.043441][ T9059] RAX: ffffffffffffffda RBX: 00007fb7a9816090 RCX: 00007fb7a959c799 [ 389.043457][ T9059] RDX: 0000200000000080 RSI: 0000000040107447 RDI: 0000000000000003 [ 389.043471][ T9059] RBP: 00007fb7a77d5090 R08: 0000000000000000 R09: 0000000000000000 [ 389.043484][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.043496][ T9059] R13: 00007fb7a9816128 R14: 00007fb7a9816090 R15: 00007fff2b4d76c8 [ 389.043528][ T9059] [ 389.043548][ T9059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 389.558956][ T5966] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 389.713855][ T5966] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 389.713896][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.747434][ T5966] usb 1-1: config 0 descriptor?? [ 389.774203][ T5808] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 389.921272][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 389.925887][ T5808] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6 [ 389.925920][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 389.980368][ T5808] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 389.980468][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.980491][ T5808] usb 4-1: Product: syz [ 389.980507][ T5808] usb 4-1: Manufacturer: syz [ 389.980523][ T5808] usb 4-1: SerialNumber: syz [ 390.082408][ T5966] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 390.100807][ T5808] usb 4-1: config 0 descriptor?? [ 390.238613][ T5808] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 390.322764][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.341566][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.616737][ T5883] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 390.638432][ T5883] usb 5-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 390.638460][ T5883] usb 5-1: found format II with max.bitrate = 63488, frame size=7 [ 390.638479][ T5883] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 390.758865][ T5883] usb 5-1: unit 1 not found! [ 390.851999][ T9061] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 390.852024][ T9061] netlink: 'syz.0.989': attribute type 2 has an invalid length. [ 391.186647][ T5966] [drm:udl_init] *ERROR* Selecting channel failed [ 391.392787][ T1477] usb 4-1: Failed to submit usb control message: -110 [ 391.392828][ T1477] usb 4-1: unable to send the bmi data to the device: -110 [ 391.392849][ T1477] usb 4-1: unable to get target info from device [ 391.392957][ T1477] usb 4-1: could not get target info (-110) [ 391.393045][ T1477] usb 4-1: could not probe fw (-110) [ 391.495868][ T5966] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 391.495895][ T5966] [drm] Initialized udl on minor 2 [ 391.520845][ T5966] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 391.521301][ T5966] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 391.522422][ T5808] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 391.551290][ T5808] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 391.551542][ T5808] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 391.802532][ T5966] usb 1-1: USB disconnect, device number 26 [ 392.094414][ T9084] FAULT_INJECTION: forcing a failure. [ 392.094414][ T9084] name failslab, interval 1, probability 0, space 0, times 0 [ 392.094454][ T9084] CPU: 1 UID: 0 PID: 9084 Comm: syz.4.996 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 392.094485][ T9084] Tainted: [L]=SOFTLOCKUP [ 392.094493][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.094506][ T9084] Call Trace: [ 392.094515][ T9084] [ 392.094524][ T9084] dump_stack_lvl+0xe8/0x150 [ 392.094562][ T9084] should_fail_ex+0x46b/0x600 [ 392.094597][ T9084] should_failslab+0xa8/0x100 [ 392.094622][ T9084] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 392.094663][ T9084] ? __alloc_skb+0x1d0/0x7d0 [ 392.094693][ T9084] ? lockdep_hardirqs_on+0x7a/0x110 [ 392.094732][ T9084] __alloc_skb+0x1d0/0x7d0 [ 392.094769][ T9084] netlink_sendmsg+0x5d4/0xb40 [ 392.094809][ T9084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.094843][ T9084] ? unwind_get_return_address+0x4d/0x90 [ 392.094870][ T9084] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.094909][ T9084] ____sys_sendmsg+0x94c/0x9c0 [ 392.094939][ T9084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.094971][ T9084] ? import_iovec+0x73/0xa0 [ 392.095008][ T9084] ___sys_sendmsg+0x2a5/0x360 [ 392.095037][ T9084] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.095097][ T9084] ? __fget_files+0x2a/0x420 [ 392.095124][ T9084] ? __fget_files+0x3a6/0x420 [ 392.095161][ T9084] __x64_sys_sendmsg+0x1c3/0x2a0 [ 392.095188][ T9084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.095222][ T9084] ? __pfx_ksys_write+0x10/0x10 [ 392.095267][ T9084] do_syscall_64+0x14d/0xf80 [ 392.095298][ T9084] ? trace_irq_disable+0x3b/0x150 [ 392.095325][ T9084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.095348][ T9084] ? clear_bhb_loop+0x40/0x90 [ 392.095375][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.095399][ T9084] RIP: 0033:0x7efca569c799 [ 392.095420][ T9084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.095439][ T9084] RSP: 002b:00007efca38ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.095463][ T9084] RAX: ffffffffffffffda RBX: 00007efca5915fa0 RCX: 00007efca569c799 [ 392.095479][ T9084] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 392.095493][ T9084] RBP: 00007efca38ee090 R08: 0000000000000000 R09: 0000000000000000 [ 392.095507][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.095520][ T9084] R13: 00007efca5916038 R14: 00007efca5915fa0 R15: 00007ffd3dae4938 [ 392.095554][ T9084] [ 392.475096][ T31] usb 4-1: USB disconnect, device number 28 [ 392.585775][ T9090] FAULT_INJECTION: forcing a failure. [ 392.585775][ T9090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.585815][ T9090] CPU: 1 UID: 0 PID: 9090 Comm: syz.0.1000 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 392.585845][ T9090] Tainted: [L]=SOFTLOCKUP [ 392.585852][ T9090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.585866][ T9090] Call Trace: [ 392.585874][ T9090] [ 392.585884][ T9090] dump_stack_lvl+0xe8/0x150 [ 392.585925][ T9090] should_fail_ex+0x46b/0x600 [ 392.585960][ T9090] _copy_to_user+0x31/0xb0 [ 392.585994][ T9090] bpf_prog_test_run_syscall+0x337/0x4c0 [ 392.586101][ T9090] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 392.586140][ T9090] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 392.586172][ T9090] bpf_prog_test_run+0x2cd/0x340 [ 392.586207][ T9090] __sys_bpf+0x643/0x950 [ 392.586236][ T9090] ? __pfx___sys_bpf+0x10/0x10 [ 392.586261][ T9090] ? rt_mutex_slowunlock+0x1cb/0x300 [ 392.586304][ T9090] ? ksys_write+0x248/0x270 [ 392.586338][ T9090] ? __pfx_ksys_write+0x10/0x10 [ 392.586378][ T9090] __x64_sys_bpf+0x7c/0x90 [ 392.586403][ T9090] do_syscall_64+0x14d/0xf80 [ 392.586435][ T9090] ? trace_irq_disable+0x3b/0x150 [ 392.586459][ T9090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.586482][ T9090] ? clear_bhb_loop+0x40/0x90 [ 392.586510][ T9090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.586533][ T9090] RIP: 0033:0x7f23be53c799 [ 392.586555][ T9090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.586573][ T9090] RSP: 002b:00007f23bc78e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.586596][ T9090] RAX: ffffffffffffffda RBX: 00007f23be7b5fa0 RCX: 00007f23be53c799 [ 392.586620][ T9090] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 392.586635][ T9090] RBP: 00007f23bc78e090 R08: 0000000000000000 R09: 0000000000000000 [ 392.586648][ T9090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.586661][ T9090] R13: 00007f23be7b6038 R14: 00007f23be7b5fa0 R15: 00007fff0b1c2d68 [ 392.586696][ T9090] [ 392.789050][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 392.968874][ T5883] usb 5-1: USB disconnect, device number 28 [ 393.050302][ T9093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.106611][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 393.122302][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 393.122327][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 393.230337][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.230368][ T10] usb 2-1: config 0 has no interface number 0 [ 393.230407][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.230431][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.230466][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 393.230486][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.910011][ T10] usb 2-1: config 0 descriptor?? [ 394.596614][ T9107] FAULT_INJECTION: forcing a failure. [ 394.596614][ T9107] name failslab, interval 1, probability 0, space 0, times 0 [ 394.596671][ T9107] CPU: 1 UID: 0 PID: 9107 Comm: syz.2.1003 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 394.596716][ T9107] Tainted: [L]=SOFTLOCKUP [ 394.596723][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.596736][ T9107] Call Trace: [ 394.596745][ T9107] [ 394.596754][ T9107] dump_stack_lvl+0xe8/0x150 [ 394.596791][ T9107] should_fail_ex+0x46b/0x600 [ 394.596825][ T9107] should_failslab+0xa8/0x100 [ 394.596849][ T9107] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 394.596886][ T9107] ? __get_vm_area_node+0x171/0x350 [ 394.596996][ T9107] __get_vm_area_node+0x171/0x350 [ 394.597034][ T9107] __vmalloc_node_range_noprof+0x372/0x1730 [ 394.597066][ T9107] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 394.597109][ T9107] ? __lock_acquire+0x6b5/0x2cf0 [ 394.597139][ T9107] ? kernel_text_address+0xa5/0xe0 [ 394.597169][ T9107] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 394.597201][ T9107] ? arch_stack_walk+0xfb/0x150 [ 394.597238][ T9107] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 394.597265][ T9107] __vmalloc_noprof+0xd2/0x120 [ 394.597297][ T9107] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 394.597327][ T9107] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 394.597359][ T9107] bpf_prog_alloc+0x3c/0x1a0 [ 394.597390][ T9107] bpf_prog_load+0x7ba/0x1ae0 [ 394.597433][ T9107] ? __pfx_bpf_prog_load+0x10/0x10 [ 394.597483][ T9107] ? bpf_lsm_bpf+0x9/0x20 [ 394.597503][ T9107] ? security_bpf+0x7e/0x2d0 [ 394.597528][ T9107] __sys_bpf+0x618/0x950 [ 394.597557][ T9107] ? __pfx___sys_bpf+0x10/0x10 [ 394.597581][ T9107] ? rt_mutex_slowunlock+0x1cb/0x300 [ 394.597645][ T9107] ? ksys_write+0x248/0x270 [ 394.597681][ T9107] ? __pfx_ksys_write+0x10/0x10 [ 394.597721][ T9107] __x64_sys_bpf+0x7c/0x90 [ 394.597747][ T9107] do_syscall_64+0x14d/0xf80 [ 394.597780][ T9107] ? trace_irq_disable+0x3b/0x150 [ 394.597805][ T9107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.597829][ T9107] ? clear_bhb_loop+0x40/0x90 [ 394.597857][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.597881][ T9107] RIP: 0033:0x7f2ca951c799 [ 394.597902][ T9107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.597928][ T9107] RSP: 002b:00007f2ca7776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 394.597954][ T9107] RAX: ffffffffffffffda RBX: 00007f2ca9795fa0 RCX: 00007f2ca951c799 [ 394.597971][ T9107] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 394.597985][ T9107] RBP: 00007f2ca7776090 R08: 0000000000000000 R09: 0000000000000000 [ 394.597999][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.598012][ T9107] R13: 00007f2ca9796038 R14: 00007f2ca9795fa0 R15: 00007ffdd4226748 [ 394.598046][ T9107] [ 394.938448][ T9107] syz.2.1003: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 394.938539][ T9107] CPU: 1 UID: 0 PID: 9107 Comm: syz.2.1003 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 394.938566][ T9107] Tainted: [L]=SOFTLOCKUP [ 394.938573][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.938585][ T9107] Call Trace: [ 394.938594][ T9107] [ 394.938602][ T9107] dump_stack_lvl+0xe8/0x150 [ 394.938638][ T9107] warn_alloc+0x263/0x3e0 [ 394.938734][ T9107] ? __pfx_warn_alloc+0x10/0x10 [ 394.938754][ T9107] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 394.938787][ T9107] ? __get_vm_area_node+0x171/0x350 [ 394.938819][ T9107] ? __get_vm_area_node+0x2e1/0x350 [ 394.938855][ T9107] __vmalloc_node_range_noprof+0x397/0x1730 [ 394.938908][ T9107] ? __lock_acquire+0x6b5/0x2cf0 [ 394.938955][ T9107] ? kernel_text_address+0xa5/0xe0 [ 394.938985][ T9107] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 394.939018][ T9107] ? arch_stack_walk+0xfb/0x150 [ 394.939054][ T9107] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 394.939083][ T9107] __vmalloc_noprof+0xd2/0x120 [ 394.939116][ T9107] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 394.939148][ T9107] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 394.939184][ T9107] bpf_prog_alloc+0x3c/0x1a0 [ 394.939215][ T9107] bpf_prog_load+0x7ba/0x1ae0 [ 394.939259][ T9107] ? __pfx_bpf_prog_load+0x10/0x10 [ 394.939310][ T9107] ? bpf_lsm_bpf+0x9/0x20 [ 394.939333][ T9107] ? security_bpf+0x7e/0x2d0 [ 394.939359][ T9107] __sys_bpf+0x618/0x950 [ 394.939389][ T9107] ? __pfx___sys_bpf+0x10/0x10 [ 394.939413][ T9107] ? rt_mutex_slowunlock+0x1cb/0x300 [ 394.939458][ T9107] ? ksys_write+0x248/0x270 [ 394.939493][ T9107] ? __pfx_ksys_write+0x10/0x10 [ 394.939534][ T9107] __x64_sys_bpf+0x7c/0x90 [ 394.939560][ T9107] do_syscall_64+0x14d/0xf80 [ 394.939611][ T9107] ? trace_irq_disable+0x3b/0x150 [ 394.939636][ T9107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.939660][ T9107] ? clear_bhb_loop+0x40/0x90 [ 394.939688][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.939712][ T9107] RIP: 0033:0x7f2ca951c799 [ 394.939734][ T9107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.939754][ T9107] RSP: 002b:00007f2ca7776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 394.939777][ T9107] RAX: ffffffffffffffda RBX: 00007f2ca9795fa0 RCX: 00007f2ca951c799 [ 394.939794][ T9107] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 394.939809][ T9107] RBP: 00007f2ca7776090 R08: 0000000000000000 R09: 0000000000000000 [ 394.939823][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.939837][ T9107] R13: 00007f2ca9796038 R14: 00007f2ca9795fa0 R15: 00007ffdd4226748 [ 394.939872][ T9107] [ 395.199253][ T9107] Mem-Info: [ 395.199272][ T9107] active_anon:255 inactive_anon:9329 isolated_anon:0 [ 395.199272][ T9107] active_file:16516 inactive_file:37305 isolated_file:0 [ 395.199272][ T9107] unevictable:768 dirty:351 writeback:0 [ 395.199272][ T9107] slab_reclaimable:9821 slab_unreclaimable:102341 [ 395.199272][ T9107] mapped:35974 shmem:4234 pagetables:1288 [ 395.199272][ T9107] sec_pagetables:0 bounce:0 [ 395.199272][ T9107] kernel_misc_reclaimable:0 [ 395.199272][ T9107] free:1300263 free_pcp:15193 free_cma:0 [ 395.199336][ T9107] Node 0 active_anon:1020kB inactive_anon:37316kB active_file:65864kB inactive_file:149220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143896kB dirty:1404kB writeback:0kB shmem:15400kB kernel_stack:13632kB pagetables:4996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 395.199387][ T9107] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 395.199440][ T9107] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.199506][ T9107] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 395.199554][ T9107] Node 0 DMA32 free:1249404kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1020kB inactive_anon:37316kB active_file:65864kB inactive_file:149220kB unevictable:1536kB writepending:1404kB zspages:0kB present:3129332kB managed:2566540kB mlocked:0kB bounce:0kB free_pcp:60772kB local_pcp:25124kB free_cma:0kB [ 395.199643][ T9107] lowmem_reserve[]: 0 0 0 0 0 [ 395.199679][ T9107] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.199746][ T9107] lowmem_reserve[]: 0 0 0 0 0 [ 395.199784][ T9107] Node 1 Normal free:3936288kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.199852][ T9107] lowmem_reserve[]: 0 0 0 0 0 [ 395.199888][ T9107] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 395.200020][ T9107] Node 0 DMA32: 348*4kB (UME) 1409*8kB (UE) 67*16kB (UME) 162*32kB (UME) 206*64kB (UME) 60*128kB (UE) 75*256kB (UME) 33*512kB (UME) 22*1024kB (UME) 4*2048kB (UM) 279*4096kB (M) = 1249384kB [ 395.200203][ T9107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 395.200466][ T9107] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 5*16kB (UM) 7*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 959*4096kB (M) = 3936288kB [ 395.200646][ T9107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 395.200665][ T9107] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 395.200682][ T9107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 395.200699][ T9107] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 395.200723][ T9107] 58051 total pagecache pages [ 395.200735][ T9107] 0 pages in swap cache [ 395.200743][ T9107] Free swap = 124996kB [ 395.200751][ T9107] Total swap = 124996kB [ 395.200760][ T9107] 2097051 pages RAM [ 395.200767][ T9107] 0 pages HighMem/MovableOnly [ 395.200774][ T9107] 423696 pages reserved [ 395.200782][ T9107] 0 pages cma reserved [ 395.563991][ T9109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.761993][ T7652] udevd[7652]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.788568][ T9109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.069092][ T10] uclogic 0003:28BD:0071.0006: failed retrieving string descriptor #100: -71 [ 396.069211][ T10] uclogic 0003:28BD:0071.0006: failed retrieving pen parameters: -71 [ 396.069261][ T10] uclogic 0003:28BD:0071.0006: pen probing failed: -71 [ 396.069314][ T10] uclogic 0003:28BD:0071.0006: failed probing parameters: -71 [ 396.069424][ T10] uclogic 0003:28BD:0071.0006: probe with driver uclogic failed with error -71 [ 398.187763][ T10] usb 2-1: USB disconnect, device number 26 [ 399.828932][ T5966] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 399.829199][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 399.958873][ T5966] usb 3-1: device descriptor read/64, error -32 [ 400.208894][ T5966] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 401.316432][ T9143] FAULT_INJECTION: forcing a failure. [ 401.316432][ T9143] name failslab, interval 1, probability 0, space 0, times 0 [ 401.316468][ T9143] CPU: 1 UID: 0 PID: 9143 Comm: syz.2.1014 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 401.316496][ T9143] Tainted: [L]=SOFTLOCKUP [ 401.316503][ T9143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.316515][ T9143] Call Trace: [ 401.316523][ T9143] [ 401.316532][ T9143] dump_stack_lvl+0xe8/0x150 [ 401.316567][ T9143] should_fail_ex+0x46b/0x600 [ 401.316598][ T9143] should_failslab+0xa8/0x100 [ 401.316621][ T9143] __kmalloc_noprof+0xdf/0x7b0 [ 401.316652][ T9143] ? tomoyo_encode+0x28b/0x550 [ 401.316681][ T9143] tomoyo_encode+0x28b/0x550 [ 401.316711][ T9143] tomoyo_realpath_from_path+0x58d/0x5d0 [ 401.316746][ T9143] ? tomoyo_path_number_perm+0x219/0x630 [ 401.316780][ T9143] tomoyo_path_number_perm+0x246/0x630 [ 401.316819][ T9143] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 401.316855][ T9143] ? __lock_acquire+0x6b5/0x2cf0 [ 401.316909][ T9143] ? __fget_files+0x2a/0x420 [ 401.316938][ T9143] ? __fget_files+0x2a/0x420 [ 401.316963][ T9143] ? __fget_files+0x3a6/0x420 [ 401.316987][ T9143] ? __fget_files+0x2a/0x420 [ 401.317017][ T9143] security_file_ioctl+0xc3/0x2a0 [ 401.317040][ T9143] __se_sys_ioctl+0x47/0x170 [ 401.317075][ T9143] do_syscall_64+0x14d/0xf80 [ 401.317105][ T9143] ? trace_irq_disable+0x3b/0x150 [ 401.317129][ T9143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.317151][ T9143] ? clear_bhb_loop+0x40/0x90 [ 401.317177][ T9143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.317198][ T9143] RIP: 0033:0x7f2ca951c799 [ 401.317217][ T9143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.317234][ T9143] RSP: 002b:00007f2ca7755028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.317256][ T9143] RAX: ffffffffffffffda RBX: 00007f2ca9796090 RCX: 00007f2ca951c799 [ 401.317278][ T9143] RDX: 0000200000000200 RSI: 00000000400448c8 RDI: 0000000000000004 [ 401.317291][ T9143] RBP: 00007f2ca7755090 R08: 0000000000000000 R09: 0000000000000000 [ 401.317304][ T9143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.317316][ T9143] R13: 00007f2ca9796128 R14: 00007f2ca9796090 R15: 00007ffdd4226748 [ 401.317349][ T9143] [ 401.478163][ T9143] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.780865][ T9147] loop5: detected capacity change from 0 to 7 [ 401.815672][ T7652] loop5: [ 401.815708][ T7652] loop5: partition table partially beyond EOD, truncated [ 401.836903][ T9147] loop5: [ 401.836941][ T9147] loop5: partition table partially beyond EOD, truncated [ 401.910753][ T5966] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 402.067925][ T5966] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 402.067956][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.067977][ T5966] usb 5-1: Product: syz [ 402.067991][ T5966] usb 5-1: Manufacturer: syz [ 402.068005][ T5966] usb 5-1: SerialNumber: syz [ 402.124153][ T5966] usb 5-1: config 0 descriptor?? [ 402.145891][ T5966] hub 5-1:0.0: bad descriptor, ignoring hub [ 402.145931][ T5966] hub 5-1:0.0: probe with driver hub failed with error -5 [ 402.531634][ T5966] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 402.569028][ T5966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 402.573934][ T5966] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 402.575278][ T5966] usb 5-1: media controller created [ 403.215957][ T9155] FAULT_INJECTION: forcing a failure. [ 403.215957][ T9155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.215995][ T9155] CPU: 1 UID: 0 PID: 9155 Comm: syz.3.1018 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 403.216023][ T9155] Tainted: [L]=SOFTLOCKUP [ 403.216031][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.216042][ T9155] Call Trace: [ 403.216051][ T9155] [ 403.216064][ T9155] dump_stack_lvl+0xe8/0x150 [ 403.216098][ T9155] should_fail_ex+0x46b/0x600 [ 403.216130][ T9155] _copy_to_user+0x31/0xb0 [ 403.216164][ T9155] simple_read_from_buffer+0xe1/0x170 [ 403.216195][ T9155] proc_fail_nth_read+0x1be/0x230 [ 403.216225][ T9155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.216253][ T9155] ? rw_verify_area+0x2ac/0x4e0 [ 403.216283][ T9155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.216308][ T9155] vfs_read+0x212/0xa80 [ 403.216345][ T9155] ? __pfx_vfs_read+0x10/0x10 [ 403.216379][ T9155] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 403.216430][ T9155] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 403.216463][ T9155] ? mutex_lock_nested+0x152/0x1d0 [ 403.216499][ T9155] ? fdget_pos+0x252/0x320 [ 403.216535][ T9155] ksys_read+0x156/0x270 [ 403.216596][ T9155] ? __pfx_ksys_read+0x10/0x10 [ 403.216642][ T9155] do_syscall_64+0x14d/0xf80 [ 403.216674][ T9155] ? trace_irq_disable+0x3b/0x150 [ 403.216700][ T9155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.216722][ T9155] ? clear_bhb_loop+0x40/0x90 [ 403.216749][ T9155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.216771][ T9155] RIP: 0033:0x7fe2bcaecfce [ 403.216793][ T9155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 403.216812][ T9155] RSP: 002b:00007fe2bad64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 403.216836][ T9155] RAX: ffffffffffffffda RBX: 00007fe2bad656c0 RCX: 00007fe2bcaecfce [ 403.216852][ T9155] RDX: 000000000000000f RSI: 00007fe2bad650a0 RDI: 0000000000000004 [ 403.216865][ T9155] RBP: 00007fe2bad65090 R08: 0000000000000000 R09: 0000000000000000 [ 403.216878][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.216891][ T9155] R13: 00007fe2bcda6128 R14: 00007fe2bcda6090 R15: 00007ffc3e542698 [ 403.216926][ T9155] [ 403.299902][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 403.313116][ T9142] Bluetooth: hci3: command 0x0c1a tx timeout [ 403.893403][ T5966] DVB: Unable to find symbol dib7000p_attach() [ 403.893447][ T5966] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 404.258826][ T5966] rc_core: IR keymap rc-dib0700-rc5 not found [ 404.258847][ T5966] Registered IR keymap rc-empty [ 404.259677][ T5966] dvb-usb: could not initialize remote control. [ 404.259690][ T5966] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 404.416583][ T5966] usb 5-1: USB disconnect, device number 29 [ 405.672880][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout [ 405.742719][ T5966] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 407.274555][ T9190] FAULT_INJECTION: forcing a failure. [ 407.274555][ T9190] name failslab, interval 1, probability 0, space 0, times 0 [ 407.274583][ T9190] CPU: 0 UID: 0 PID: 9190 Comm: syz.0.1027 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 407.274604][ T9190] Tainted: [L]=SOFTLOCKUP [ 407.274610][ T9190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.274620][ T9190] Call Trace: [ 407.274625][ T9190] [ 407.274632][ T9190] dump_stack_lvl+0xe8/0x150 [ 407.274659][ T9190] should_fail_ex+0x46b/0x600 [ 407.274701][ T9190] should_failslab+0xa8/0x100 [ 407.274719][ T9190] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 407.274745][ T9190] ? __alloc_skb+0x1d0/0x7d0 [ 407.274779][ T9190] ? lockdep_hardirqs_on+0x7a/0x110 [ 407.274806][ T9190] __alloc_skb+0x1d0/0x7d0 [ 407.274832][ T9190] netlink_sendmsg+0x5d4/0xb40 [ 407.274860][ T9190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.274882][ T9190] ? unwind_get_return_address+0x4d/0x90 [ 407.274899][ T9190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.274925][ T9190] ____sys_sendmsg+0x94c/0x9c0 [ 407.274944][ T9190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.274965][ T9190] ? import_iovec+0x73/0xa0 [ 407.274990][ T9190] ___sys_sendmsg+0x2a5/0x360 [ 407.275009][ T9190] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.275047][ T9190] ? __fget_files+0x2a/0x420 [ 407.275067][ T9190] ? __fget_files+0x3a6/0x420 [ 407.275093][ T9190] __x64_sys_sendmsg+0x1c3/0x2a0 [ 407.275110][ T9190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.275131][ T9190] ? __pfx_ksys_write+0x10/0x10 [ 407.275162][ T9190] do_syscall_64+0x14d/0xf80 [ 407.275185][ T9190] ? trace_irq_disable+0x3b/0x150 [ 407.275210][ T9190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.275226][ T9190] ? clear_bhb_loop+0x40/0x90 [ 407.275245][ T9190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.275260][ T9190] RIP: 0033:0x7f23be53c799 [ 407.275275][ T9190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.275288][ T9190] RSP: 002b:00007f23bc78e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.275305][ T9190] RAX: ffffffffffffffda RBX: 00007f23be7b5fa0 RCX: 00007f23be53c799 [ 407.275316][ T9190] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 407.275326][ T9190] RBP: 00007f23bc78e090 R08: 0000000000000000 R09: 0000000000000000 [ 407.275335][ T9190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.275344][ T9190] R13: 00007f23be7b6038 R14: 00007f23be7b5fa0 R15: 00007fff0b1c2d68 [ 407.275367][ T9190] [ 407.709874][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout [ 413.162275][ T9217] nfs: Unknown parameter 'ÿÿÿÿ' [ 414.365631][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 415.897871][ T9232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1041'. [ 416.015547][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 416.048953][ T36] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 416.198828][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 416.202136][ T36] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 416.202170][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 140, changing to 11 [ 416.202200][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59326, setting to 1024 [ 416.206100][ T36] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 416.206130][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.206152][ T36] usb 4-1: Product: syz [ 416.206167][ T36] usb 4-1: Manufacturer: syz [ 416.206183][ T36] usb 4-1: SerialNumber: syz [ 416.295924][ T36] usb 4-1: config 0 descriptor?? [ 416.297151][ T9228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.516130][ T36] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 416.536456][ T36] usb 4-1: USB disconnect, device number 30 [ 416.601453][ T1477] usb 4-1: Failed to submit usb control message: -71 [ 416.601482][ T1477] usb 4-1: unable to send the bmi data to the device: -71 [ 416.601496][ T1477] usb 4-1: unable to get target info from device [ 416.601507][ T1477] usb 4-1: could not get target info (-71) [ 416.601748][ T1477] usb 4-1: could not probe fw (-71) [ 423.779397][ T9234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.523665][ T9249] mac80211_hwsim hwsim10 ªªªªª;: renamed from wlan0 (while UP) [ 430.377867][ T9277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.575672][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 430.863534][ T9283] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 430.863565][ T9283] bridge1: entered promiscuous mode [ 430.863585][ T9283] bridge1: entered allmulticast mode [ 433.348954][ T809] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 433.498944][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 433.502108][ T809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 433.504517][ T809] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 433.507550][ T809] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 433.507579][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.507601][ T809] usb 4-1: Product: syz [ 433.507617][ T809] usb 4-1: Manufacturer: syz [ 433.507632][ T809] usb 4-1: SerialNumber: syz [ 434.423670][ T9142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.569885][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 434.589900][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.640830][ T9306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 434.709138][ T9306] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.718518][ T9306] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.748925][ T9306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 434.749602][ T9306] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.750835][ T9306] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 434.751217][ T9306] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 435.516488][ T809] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 435.517184][ T809] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 435.729430][ T9295] chnl_net:caif_netlink_parms(): no params data found [ 436.191889][ T9295] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.242116][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.242371][ T9295] bridge_slave_0: entered allmulticast mode [ 436.248321][ T9295] bridge_slave_0: entered promiscuous mode [ 436.908990][ T5118] Bluetooth: hci5: command tx timeout [ 436.909429][ T5118] Bluetooth: hci6: command tx timeout [ 437.061762][ T9295] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.061937][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.062531][ T9295] bridge_slave_1: entered allmulticast mode [ 437.107087][ T9295] bridge_slave_1: entered promiscuous mode [ 437.171768][ T9295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.176129][ T9295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.266148][ T9295] team0: Port device team_slave_0 added [ 437.275987][ T9295] team0: Port device team_slave_1 added [ 437.348929][ T5966] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 437.384857][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.384874][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.384902][ T9295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.447743][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.447762][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.447792][ T9295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.508859][ T5966] usb 3-1: Using ep0 maxpacket: 32 [ 437.511349][ T5966] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 437.511381][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 140, changing to 11 [ 437.511410][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59326, setting to 1024 [ 437.559149][ T5966] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 437.559181][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.559202][ T5966] usb 3-1: Product: syz [ 437.559216][ T5966] usb 3-1: Manufacturer: syz [ 437.559231][ T5966] usb 3-1: SerialNumber: syz [ 437.629252][ T5966] usb 3-1: config 0 descriptor?? [ 437.630280][ T9326] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 437.732696][ T809] usb 4-1: USB disconnect, device number 31 [ 437.747526][ T5966] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 437.887906][ T68] usb 3-1: Failed to submit usb control message: -71 [ 437.887955][ T68] usb 3-1: unable to send the bmi data to the device: -71 [ 437.887975][ T68] usb 3-1: unable to get target info from device [ 437.887991][ T68] usb 3-1: could not get target info (-71) [ 437.888082][ T68] usb 3-1: could not probe fw (-71) [ 438.048484][ T5966] usb 3-1: USB disconnect, device number 29 [ 438.215345][ T9331] udevd[9331]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.986813][ T809] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 438.988947][ T9142] Bluetooth: hci5: command tx timeout [ 438.998908][ T5118] Bluetooth: hci6: command tx timeout [ 440.072563][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.072637][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.069256][ T9142] Bluetooth: hci5: command tx timeout [ 441.069355][ T5118] Bluetooth: hci6: command tx timeout [ 441.487235][ T9295] hsr_slave_0: entered promiscuous mode [ 441.499355][ T9295] hsr_slave_1: entered promiscuous mode [ 441.502195][ T9295] debugfs: 'hsr0' already exists in 'hsr' [ 441.502222][ T9295] Cannot create hsr debugfs directory [ 441.504685][ T9302] chnl_net:caif_netlink_parms(): no params data found [ 443.306757][ T9142] Bluetooth: hci5: command tx timeout [ 443.307951][ T5118] Bluetooth: hci6: command tx timeout [ 445.476479][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.477745][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.576406][ T9302] bridge_slave_0: entered allmulticast mode [ 445.718242][ T9302] bridge_slave_0: entered promiscuous mode [ 446.154695][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.154827][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.155081][ T9302] bridge_slave_1: entered allmulticast mode [ 446.187311][ T9302] bridge_slave_1: entered promiscuous mode [ 446.638335][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.695680][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.280956][ T9302] team0: Port device team_slave_0 added [ 448.315381][ T9302] team0: Port device team_slave_1 added [ 448.935657][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.935678][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.935714][ T9302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.000803][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.000823][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.000854][ T9302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.072763][ T9388] FAULT_INJECTION: forcing a failure. [ 449.072763][ T9388] name fail_futex, interval 1, probability 0, space 0, times 1 [ 449.072810][ T9388] CPU: 1 UID: 0 PID: 9388 Comm: syz.4.1074 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 449.072868][ T9388] Tainted: [L]=SOFTLOCKUP [ 449.072882][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.072906][ T9388] Call Trace: [ 449.072915][ T9388] [ 449.072925][ T9388] dump_stack_lvl+0xe8/0x150 [ 449.072964][ T9388] should_fail_ex+0x46b/0x600 [ 449.073000][ T9388] get_futex_key+0x1ac/0x1690 [ 449.073042][ T9388] ? perf_lock_task_context+0xf3/0x850 [ 449.073153][ T9388] ? __lock_acquire+0x6b5/0x2cf0 [ 449.073176][ T9388] ? __pfx_get_futex_key+0x10/0x10 [ 449.073209][ T9388] ? __lock_acquire+0x6b5/0x2cf0 [ 449.073241][ T9388] futex_wake+0x114/0x580 [ 449.073274][ T9388] ? __lock_acquire+0x6b5/0x2cf0 [ 449.073300][ T9388] ? __pfx_futex_wake+0x10/0x10 [ 449.073328][ T9388] ? do_raw_spin_lock+0x12b/0x2f0 [ 449.073371][ T9388] do_futex+0x395/0x420 [ 449.073400][ T9388] ? __pfx_do_futex+0x10/0x10 [ 449.073426][ T9388] ? __might_fault+0xaf/0x130 [ 449.073524][ T9388] mm_release+0x103/0x290 [ 449.073558][ T9388] exit_mm+0x51/0x220 [ 449.073580][ T9388] ? unwind_deferred_task_exit+0x67/0xa0 [ 449.073608][ T9388] do_exit+0x6a2/0x23c0 [ 449.073634][ T9388] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 449.073674][ T9388] ? __pfx_do_exit+0x10/0x10 [ 449.073695][ T9388] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 449.073722][ T9388] ? reacquire_held_locks+0x104/0x190 [ 449.073747][ T9388] ? rt_spin_lock+0x1e0/0x400 [ 449.073786][ T9388] do_group_exit+0x21b/0x2d0 [ 449.073810][ T9388] ? rt_spin_unlock+0x160/0x200 [ 449.073840][ T9388] get_signal+0x125c/0x1310 [ 449.073893][ T9388] arch_do_signal_or_restart+0xbc/0x830 [ 449.073923][ T9388] ? __pfx___x64_sys_wait4+0x10/0x10 [ 449.073951][ T9388] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 449.074001][ T9388] exit_to_user_mode_loop+0x86/0x480 [ 449.074033][ T9388] ? rcu_is_watching+0x15/0xb0 [ 449.074062][ T9388] do_syscall_64+0x32d/0xf80 [ 449.074096][ T9388] ? trace_irq_disable+0x3b/0x150 [ 449.074121][ T9388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.074144][ T9388] ? clear_bhb_loop+0x40/0x90 [ 449.074172][ T9388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.074195][ T9388] RIP: 0033:0x7efca569c799 [ 449.074216][ T9388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.074236][ T9388] RSP: 002b:00007efca38cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 449.074260][ T9388] RAX: fffffffffffffe00 RBX: 00007efca5916090 RCX: 00007efca569c799 [ 449.074283][ T9388] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 449.074297][ T9388] RBP: 00007efca38cd090 R08: 0000000000000000 R09: 0000000000000000 [ 449.074311][ T9388] R10: 0000200000001c00 R11: 0000000000000246 R12: 0000000000000001 [ 449.074325][ T9388] R13: 00007efca5916128 R14: 00007efca5916090 R15: 00007ffd3dae4938 [ 449.074361][ T9388] [ 450.710125][ T9302] hsr_slave_0: entered promiscuous mode [ 450.711638][ T9302] hsr_slave_1: entered promiscuous mode [ 450.712672][ T9302] debugfs: 'hsr0' already exists in 'hsr' [ 450.712697][ T9302] Cannot create hsr debugfs directory [ 452.216017][ T9295] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 453.982932][ T9295] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 454.484106][ T9295] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 455.472975][ T9295] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 457.269123][ T9302] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 458.047078][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.062306][ T9302] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 458.395508][ T9302] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 459.136922][ T9302] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 459.572417][ T9295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.994113][ T9295] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.031368][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.031519][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.086320][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.086709][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.297140][ T9302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.393256][ T9302] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.437769][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.437895][ T6249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.496947][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.497082][ T6249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.060777][ T9302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.322833][ T9295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.936146][ T9302] veth0_vlan: entered promiscuous mode [ 461.976002][ T9302] veth1_vlan: entered promiscuous mode [ 462.089991][ T9302] veth0_macvtap: entered promiscuous mode [ 462.117040][ T9302] veth1_macvtap: entered promiscuous mode [ 462.192852][ T9295] veth0_vlan: entered promiscuous mode [ 462.198244][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.244677][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.245563][ T9295] veth1_vlan: entered promiscuous mode [ 462.303164][ T1380] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.306207][ T1380] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.310098][ T1380] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.338387][ T1380] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.134999][ T9295] veth0_macvtap: entered promiscuous mode [ 463.169014][ T9295] veth1_macvtap: entered promiscuous mode [ 463.277835][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.277858][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.314919][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.146351][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.241132][ T1116] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.243623][ T1116] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.360234][ T1116] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.378675][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.378844][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.382562][ T1116] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.694530][ T9142] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 464.707442][ T9142] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 464.716184][ T9142] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 464.735576][ T9142] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 464.736253][ T9142] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 466.833883][ T9142] Bluetooth: hci7: command tx timeout [ 467.973356][ T9483] sp0: Synchronizing with TNC [ 467.984558][ T9478] [U] è [ 468.909100][ T9142] Bluetooth: hci7: command tx timeout [ 470.008234][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.008255][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.243903][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.243926][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.991470][ T9142] Bluetooth: hci7: command tx timeout [ 471.013353][ T9475] chnl_net:caif_netlink_parms(): no params data found [ 471.199237][ T5118] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 471.203974][ T5118] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 471.220863][ T5118] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 471.244960][ T5118] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 471.283408][ T5118] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 471.385471][ T9475] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.414957][ T9475] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.431585][ T9475] bridge_slave_0: entered allmulticast mode [ 471.474442][ T9475] bridge_slave_0: entered promiscuous mode [ 471.958969][ T9475] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.959102][ T9475] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.959708][ T9475] bridge_slave_1: entered allmulticast mode [ 471.966386][ T9475] bridge_slave_1: entered promiscuous mode [ 472.178437][ T9475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.213078][ T9475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.316645][ T9475] team0: Port device team_slave_0 added [ 472.334067][ T9475] team0: Port device team_slave_1 added [ 472.563013][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.563032][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.563062][ T9475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.565669][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.565683][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.565710][ T9475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.068942][ T5118] Bluetooth: hci7: command tx timeout [ 473.342654][ T5118] Bluetooth: hci8: command tx timeout [ 474.256135][ T9475] hsr_slave_0: entered promiscuous mode [ 474.268215][ T9475] hsr_slave_1: entered promiscuous mode [ 474.275795][ T9475] debugfs: 'hsr0' already exists in 'hsr' [ 474.275822][ T9475] Cannot create hsr debugfs directory [ 476.192304][ T9496] chnl_net:caif_netlink_parms(): no params data found [ 476.738785][ T5118] Bluetooth: hci8: command tx timeout [ 477.568828][ T808] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 477.743821][ T808] usb 6-1: Using ep0 maxpacket: 32 [ 477.747702][ T808] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 477.747734][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 140, changing to 11 [ 477.747763][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59326, setting to 1024 [ 477.802477][ T808] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 477.802506][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.802526][ T808] usb 6-1: Product: syz [ 477.802548][ T808] usb 6-1: Manufacturer: syz [ 477.802563][ T808] usb 6-1: SerialNumber: syz [ 477.869229][ T808] usb 6-1: config 0 descriptor?? [ 477.870256][ T9510] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 477.912487][ T808] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 478.076752][ T9510] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1093'. [ 478.201069][ T9142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 478.226195][ T9142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 478.234582][ T9142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 478.255567][ T9142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 478.267719][ T9142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 478.758793][ T5118] Bluetooth: hci8: command tx timeout [ 478.994798][ T3513] usb 6-1: Failed to submit usb control message: -110 [ 478.994836][ T3513] usb 6-1: unable to send the bmi data to the device: -110 [ 478.994854][ T3513] usb 6-1: unable to get target info from device [ 478.994869][ T3513] usb 6-1: could not get target info (-110) [ 478.994952][ T3513] usb 6-1: could not probe fw (-110) [ 479.402076][ T5804] usb 6-1: USB disconnect, device number 2 [ 479.864813][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.864941][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.865140][ T9496] bridge_slave_0: entered allmulticast mode [ 479.902517][ T9496] bridge_slave_0: entered promiscuous mode [ 479.962053][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.962206][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.962684][ T9496] bridge_slave_1: entered allmulticast mode [ 479.965576][ T9496] bridge_slave_1: entered promiscuous mode [ 480.060508][ T9475] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 480.532832][ T5118] Bluetooth: hci0: command tx timeout [ 480.650823][ T9475] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 480.838914][ T5118] Bluetooth: hci8: command tx timeout [ 480.961931][ T808] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 481.045818][ T808] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 481.138914][ T5891] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 481.288950][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 481.336489][ T5891] usb 6-1: unable to get BOS descriptor or descriptor too short [ 481.349089][ T5891] usb 6-1: config 1 has an invalid interface number: 190 but max is 0 [ 481.349114][ T5891] usb 6-1: config 1 has no interface number 0 [ 481.349157][ T5891] usb 6-1: config 1 interface 190 altsetting 3 bulk endpoint 0xB has invalid maxpacket 1023 [ 481.349182][ T5891] usb 6-1: config 1 interface 190 altsetting 3 bulk endpoint 0x4 has invalid maxpacket 64 [ 481.349232][ T5891] usb 6-1: config 1 interface 190 has no altsetting 0 [ 481.387955][ T5891] usb 6-1: string descriptor 0 read error: -22 [ 481.388104][ T5891] usb 6-1: New USB device found, idVendor=12d1, idProduct=77ff, bcdDevice=ab.d3 [ 481.388130][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.449560][ T9496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.471977][ T9475] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 481.601085][ T9527] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 481.601217][ T9527] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 481.606490][ T5891] option 6-1:1.190: GSM modem (1-port) converter detected [ 481.664617][ T9496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.855067][ T9475] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 482.218428][ T9142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 482.241653][ T9142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 482.243143][ T9142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 482.244481][ T9142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 482.245584][ T9142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 482.436714][ T9496] team0: Port device team_slave_0 added [ 482.497246][ T9496] team0: Port device team_slave_1 added [ 482.588899][ T9142] Bluetooth: hci0: command tx timeout [ 482.740071][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.740086][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.740106][ T9496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.806959][ T5891] usb 6-1: USB disconnect, device number 3 [ 482.827353][ T5891] option 6-1:1.190: device disconnected [ 482.986641][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.986658][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.986698][ T9496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.416312][ T9544] gretap0: entered promiscuous mode [ 483.589577][ T9496] hsr_slave_0: entered promiscuous mode [ 483.591078][ T9496] hsr_slave_1: entered promiscuous mode [ 483.592062][ T9496] debugfs: 'hsr0' already exists in 'hsr' [ 483.592086][ T9496] Cannot create hsr debugfs directory [ 484.353949][ T9142] Bluetooth: hci4: command tx timeout [ 484.668816][ T9142] Bluetooth: hci0: command tx timeout [ 484.717081][ T9515] chnl_net:caif_netlink_parms(): no params data found [ 485.834299][ T9515] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.834429][ T9515] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.834698][ T9515] bridge_slave_0: entered allmulticast mode [ 485.865749][ T9515] bridge_slave_0: entered promiscuous mode [ 485.898383][ T9515] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.898528][ T9515] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.928939][ T9515] bridge_slave_1: entered allmulticast mode [ 485.933761][ T9515] bridge_slave_1: entered promiscuous mode [ 486.195710][ T9515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.279386][ T9531] chnl_net:caif_netlink_parms(): no params data found [ 486.348012][ T9515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.428956][ T9142] Bluetooth: hci4: command tx timeout [ 486.749228][ T9142] Bluetooth: hci0: command tx timeout [ 486.825647][ T9515] team0: Port device team_slave_0 added [ 486.891090][ T9515] team0: Port device team_slave_1 added [ 487.656589][ T9475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.663669][ T9496] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 488.508996][ T9142] Bluetooth: hci4: command tx timeout [ 488.606428][ T9496] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 488.811852][ T9515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.811871][ T9515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.811903][ T9515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.814845][ T9496] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 489.177231][ T9515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.177249][ T9515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.177277][ T9515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.237643][ T9496] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 490.101889][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.102019][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.102220][ T9531] bridge_slave_0: entered allmulticast mode [ 490.105165][ T9531] bridge_slave_0: entered promiscuous mode [ 490.174782][ T9531] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.191187][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.191481][ T9531] bridge_slave_1: entered allmulticast mode [ 490.194207][ T9531] bridge_slave_1: entered promiscuous mode [ 490.446501][ T9531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.470729][ T9475] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.491908][ T9515] hsr_slave_0: entered promiscuous mode [ 490.493221][ T9515] hsr_slave_1: entered promiscuous mode [ 490.494164][ T9515] debugfs: 'hsr0' already exists in 'hsr' [ 490.494188][ T9515] Cannot create hsr debugfs directory [ 490.495932][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1106'. [ 490.536748][ T9531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.589159][ T9142] Bluetooth: hci4: command tx timeout [ 490.744401][ T9531] team0: Port device team_slave_0 added [ 490.759564][ T9589] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 492.911182][ T1380] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.914533][ T1380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.936314][ T9531] team0: Port device team_slave_1 added [ 493.464538][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.464765][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.602933][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.602952][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.604465][ T9531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.674322][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.674340][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.674370][ T9531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.161282][ T9531] hsr_slave_0: entered promiscuous mode [ 494.162955][ T9531] hsr_slave_1: entered promiscuous mode [ 494.163922][ T9531] debugfs: 'hsr0' already exists in 'hsr' [ 494.164038][ T9531] Cannot create hsr debugfs directory [ 498.320725][ T9515] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 498.535507][ T9610] FAULT_INJECTION: forcing a failure. [ 498.535507][ T9610] name failslab, interval 1, probability 0, space 0, times 0 [ 498.535542][ T9610] CPU: 1 UID: 0 PID: 9610 Comm: syz.5.1111 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 498.535568][ T9610] Tainted: [L]=SOFTLOCKUP [ 498.535575][ T9610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.535586][ T9610] Call Trace: [ 498.535593][ T9610] [ 498.535602][ T9610] dump_stack_lvl+0xe8/0x150 [ 498.535636][ T9610] should_fail_ex+0x46b/0x600 [ 498.535665][ T9610] should_failslab+0xa8/0x100 [ 498.535686][ T9610] __kmalloc_noprof+0xdf/0x7b0 [ 498.535714][ T9610] ? __lock_acquire+0x6b5/0x2cf0 [ 498.535732][ T9610] ? bpf_test_init+0x9f/0x150 [ 498.535760][ T9610] bpf_test_init+0x9f/0x150 [ 498.535788][ T9610] bpf_prog_test_run_skb+0x36f/0x1c90 [ 498.535824][ T9610] ? __fget_files+0x2a/0x420 [ 498.535848][ T9610] ? __fget_files+0x3a6/0x420 [ 498.535871][ T9610] ? __fget_files+0x2a/0x420 [ 498.535900][ T9610] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 498.535925][ T9610] bpf_prog_test_run+0x2cd/0x340 [ 498.535953][ T9610] __sys_bpf+0x643/0x950 [ 498.535979][ T9610] ? __pfx___sys_bpf+0x10/0x10 [ 498.536000][ T9610] ? rt_mutex_slowunlock+0x1cb/0x300 [ 498.536038][ T9610] ? ksys_write+0x248/0x270 [ 498.536076][ T9610] ? __pfx_ksys_write+0x10/0x10 [ 498.536111][ T9610] __x64_sys_bpf+0x7c/0x90 [ 498.536133][ T9610] do_syscall_64+0x14d/0xf80 [ 498.536161][ T9610] ? trace_irq_disable+0x3b/0x150 [ 498.536183][ T9610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.536203][ T9610] ? clear_bhb_loop+0x40/0x90 [ 498.536226][ T9610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.536246][ T9610] RIP: 0033:0x7f0b4b4ec799 [ 498.536264][ T9610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.536281][ T9610] RSP: 002b:00007f0b4973e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 498.536302][ T9610] RAX: ffffffffffffffda RBX: 00007f0b4b765fa0 RCX: 00007f0b4b4ec799 [ 498.536316][ T9610] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 498.536328][ T9610] RBP: 00007f0b4973e090 R08: 0000000000000000 R09: 0000000000000000 [ 498.536340][ T9610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.536351][ T9610] R13: 00007f0b4b766038 R14: 00007f0b4b765fa0 R15: 00007ffdc1959608 [ 498.536381][ T9610] [ 499.017961][ T9515] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 499.106279][ T9515] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 499.270388][ T9614] FAULT_INJECTION: forcing a failure. [ 499.270388][ T9614] name failslab, interval 1, probability 0, space 0, times 0 [ 499.270429][ T9614] CPU: 1 UID: 0 PID: 9614 Comm: syz.5.1113 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 499.270459][ T9614] Tainted: [L]=SOFTLOCKUP [ 499.270467][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.270480][ T9614] Call Trace: [ 499.270488][ T9614] [ 499.270497][ T9614] dump_stack_lvl+0xe8/0x150 [ 499.270535][ T9614] should_fail_ex+0x46b/0x600 [ 499.270570][ T9614] should_failslab+0xa8/0x100 [ 499.270595][ T9614] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 499.270628][ T9614] ? __alloc_skb+0x1d0/0x7d0 [ 499.270658][ T9614] ? __pfx_tcp_current_mss+0x10/0x10 [ 499.270764][ T9614] __alloc_skb+0x1d0/0x7d0 [ 499.270801][ T9614] tcp_stream_alloc_skb+0x3f/0x5c0 [ 499.270894][ T9614] tcp_sendmsg_locked+0x137b/0x5490 [ 499.270923][ T9614] ? __lock_acquire+0x6b5/0x2cf0 [ 499.270966][ T9614] ? __lock_acquire+0x6b5/0x2cf0 [ 499.271013][ T9614] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 499.271054][ T9614] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 499.271082][ T9614] ? lockdep_hardirqs_on+0x7a/0x110 [ 499.271125][ T9614] tcp_sendmsg+0x2f/0x50 [ 499.271156][ T9614] ____sys_sendmsg+0x7da/0x9c0 [ 499.271183][ T9614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.271213][ T9614] ? import_iovec+0x73/0xa0 [ 499.271248][ T9614] ___sys_sendmsg+0x2a5/0x360 [ 499.271275][ T9614] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.271349][ T9614] ? __fget_files+0x2a/0x420 [ 499.271377][ T9614] ? __fget_files+0x3a6/0x420 [ 499.271416][ T9614] __x64_sys_sendmsg+0x1c3/0x2a0 [ 499.271442][ T9614] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.271474][ T9614] ? __pfx_ksys_write+0x10/0x10 [ 499.271520][ T9614] do_syscall_64+0x14d/0xf80 [ 499.271551][ T9614] ? trace_irq_disable+0x3b/0x150 [ 499.271577][ T9614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.271601][ T9614] ? clear_bhb_loop+0x40/0x90 [ 499.271628][ T9614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.271651][ T9614] RIP: 0033:0x7f0b4b4ec799 [ 499.271672][ T9614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.271693][ T9614] RSP: 002b:00007f0b4973e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.271716][ T9614] RAX: ffffffffffffffda RBX: 00007f0b4b765fa0 RCX: 00007f0b4b4ec799 [ 499.271733][ T9614] RDX: 0000000004000081 RSI: 00002000000005c0 RDI: 0000000000000003 [ 499.271747][ T9614] RBP: 00007f0b4973e090 R08: 0000000000000000 R09: 0000000000000000 [ 499.271761][ T9614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.271774][ T9614] R13: 00007f0b4b766038 R14: 00007f0b4b765fa0 R15: 00007ffdc1959608 [ 499.271808][ T9614] [ 499.768872][ T9515] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 501.396573][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.396639][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.997596][ T9636] netlink: 'syz.5.1119': attribute type 1 has an invalid length. [ 502.248418][ T9531] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.392438][ T9496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.577660][ T9475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.658399][ T9496] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.708049][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.708250][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.814187][ T1380] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.814384][ T1380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.874051][ T9515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.101901][ T9515] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.270693][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.270840][ T6255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.851846][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.858026][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.090749][ T9496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.936940][ T9515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.071566][ T9475] veth0_vlan: entered promiscuous mode [ 506.144979][ T9475] veth1_vlan: entered promiscuous mode [ 506.572341][ T9496] veth0_vlan: entered promiscuous mode [ 506.660444][ T9496] veth1_vlan: entered promiscuous mode [ 506.734468][ T9475] veth0_macvtap: entered promiscuous mode [ 506.774627][ T9475] veth1_macvtap: entered promiscuous mode [ 506.878489][ T9496] veth0_macvtap: entered promiscuous mode [ 506.897219][ T9475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.946891][ T9496] veth1_macvtap: entered promiscuous mode [ 506.966242][ T9475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.151501][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.156703][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.184140][ T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.206661][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.247407][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.833037][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.102148][ T1028] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.108450][ T1028] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.544154][ T1028] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.545041][ T9515] veth0_vlan: entered promiscuous mode [ 508.546233][ T1028] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.944663][ T9515] veth1_vlan: entered promiscuous mode [ 510.820997][ T6247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.821016][ T6247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.027800][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.027820][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.045138][ T9515] veth0_macvtap: entered promiscuous mode [ 511.105482][ T9515] veth1_macvtap: entered promiscuous mode [ 511.153755][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.153775][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.500237][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.500261][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.508136][ T9515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.571079][ T9515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.611236][ T70] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.611992][ T70] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.612183][ T70] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.612360][ T70] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.530871][ T9702] netlink: 'syz.7.1126': attribute type 1 has an invalid length. [ 515.549909][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.549930][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.702471][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.702494][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.975173][ T9728] netlink: 'syz.9.1135': attribute type 6 has an invalid length. [ 520.064917][ T9731] netlink: 'syz.8.1136': attribute type 1 has an invalid length. [ 520.118650][ T5118] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 520.150094][ T5118] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 520.155784][ T5118] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 520.157479][ T5118] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 520.180613][ T5118] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 520.738432][ T9735] syz.7.1137 (9735): /proc/9734/oom_adj is deprecated, please use /proc/9734/oom_score_adj instead. [ 520.895557][ T9737] FAULT_INJECTION: forcing a failure. [ 520.895557][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 520.895595][ T9737] CPU: 1 UID: 0 PID: 9737 Comm: syz.7.1138 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 520.895622][ T9737] Tainted: [L]=SOFTLOCKUP [ 520.895629][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.895641][ T9737] Call Trace: [ 520.895648][ T9737] [ 520.895656][ T9737] dump_stack_lvl+0xe8/0x150 [ 520.895692][ T9737] should_fail_ex+0x46b/0x600 [ 520.895723][ T9737] should_failslab+0xa8/0x100 [ 520.895746][ T9737] __kmalloc_noprof+0xdf/0x7b0 [ 520.895777][ T9737] ? tomoyo_encode+0x28b/0x550 [ 520.895807][ T9737] tomoyo_encode+0x28b/0x550 [ 520.895836][ T9737] tomoyo_realpath_from_path+0x58d/0x5d0 [ 520.895872][ T9737] ? tomoyo_path_number_perm+0x219/0x630 [ 520.895903][ T9737] tomoyo_path_number_perm+0x246/0x630 [ 520.895937][ T9737] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 520.895972][ T9737] ? sb_end_write+0xe9/0x1c0 [ 520.895996][ T9737] ? vfs_write+0x9ce/0xba0 [ 520.896059][ T9737] ? ksys_write+0x202/0x270 [ 520.896115][ T9737] security_file_ioctl+0xc3/0x2a0 [ 520.896139][ T9737] __se_sys_ioctl+0x47/0x170 [ 520.896175][ T9737] do_syscall_64+0x14d/0xf80 [ 520.896208][ T9737] ? trace_irq_disable+0x3b/0x150 [ 520.896234][ T9737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.896256][ T9737] ? clear_bhb_loop+0x40/0x90 [ 520.896283][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.896305][ T9737] RIP: 0033:0x7fc37e6fc799 [ 520.896325][ T9737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.896345][ T9737] RSP: 002b:00007fc37c94e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.896369][ T9737] RAX: ffffffffffffffda RBX: 00007fc37e975fa0 RCX: 00007fc37e6fc799 [ 520.896385][ T9737] RDX: 0000000000000000 RSI: 000000004008af60 RDI: 0000000000000003 [ 520.896399][ T9737] RBP: 00007fc37c94e090 R08: 0000000000000000 R09: 0000000000000000 [ 520.896412][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.896425][ T9737] R13: 00007fc37e976038 R14: 00007fc37e975fa0 R15: 00007ffd0f77c288 [ 520.896468][ T9737] [ 520.896488][ T9737] ERROR: Out of memory at tomoyo_realpath_from_path. [ 522.269173][ T9142] Bluetooth: hci9: command tx timeout [ 522.875873][ T9746] FAULT_INJECTION: forcing a failure. [ 522.875873][ T9746] name failslab, interval 1, probability 0, space 0, times 0 [ 522.875923][ T9746] CPU: 0 UID: 0 PID: 9746 Comm: syz.8.1140 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 522.875954][ T9746] Tainted: [L]=SOFTLOCKUP [ 522.875961][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 522.875974][ T9746] Call Trace: [ 522.875983][ T9746] [ 522.875992][ T9746] dump_stack_lvl+0xe8/0x150 [ 522.876029][ T9746] should_fail_ex+0x46b/0x600 [ 522.876063][ T9746] should_failslab+0xa8/0x100 [ 522.876089][ T9746] __kmalloc_cache_noprof+0x84/0x690 [ 522.876125][ T9746] ? snd_pcm_oss_change_params_locked+0x1ae/0x3e00 [ 522.876259][ T9746] snd_pcm_oss_change_params_locked+0x1ae/0x3e00 [ 522.876293][ T9746] ? __lock_acquire+0x6b5/0x2cf0 [ 522.876340][ T9746] ? irqentry_exit+0x59e/0x620 [ 522.876376][ T9746] ? do_raw_spin_lock+0x12b/0x2f0 [ 522.876406][ T9746] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 522.876452][ T9746] ? lockdep_hardirqs_on+0x7a/0x110 [ 522.876483][ T9746] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 522.876518][ T9746] ? snd_pcm_oss_write+0x20d/0xbe0 [ 522.876560][ T9746] snd_pcm_oss_write+0x282/0xbe0 [ 522.876599][ T9746] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 522.876630][ T9746] vfs_write+0x2a3/0xba0 [ 522.876669][ T9746] ? __pfx_vfs_write+0x10/0x10 [ 522.876700][ T9746] ? __fget_files+0x2a/0x420 [ 522.876728][ T9746] ? __fget_files+0x2a/0x420 [ 522.876751][ T9746] ? __fget_files+0x3a6/0x420 [ 522.876775][ T9746] ? __fget_files+0x2a/0x420 [ 522.876810][ T9746] ksys_write+0x156/0x270 [ 522.876843][ T9746] ? __pfx_ksys_write+0x10/0x10 [ 522.876883][ T9746] do_syscall_64+0x14d/0xf80 [ 522.876914][ T9746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.876936][ T9746] ? clear_bhb_loop+0x40/0x90 [ 522.876961][ T9746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.876982][ T9746] RIP: 0033:0x7f711f0fc799 [ 522.877001][ T9746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.877020][ T9746] RSP: 002b:00007f711d32d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 522.877047][ T9746] RAX: ffffffffffffffda RBX: 00007f711f376090 RCX: 00007f711f0fc799 [ 522.877079][ T9746] RDX: 0000000000088020 RSI: 0000200000002000 RDI: 0000000000000003 [ 522.877094][ T9746] RBP: 00007f711d32d090 R08: 0000000000000000 R09: 0000000000000000 [ 522.877107][ T9746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.877137][ T9746] R13: 00007f711f376128 R14: 00007f711f376090 R15: 00007ffc9d856c38 [ 522.877173][ T9746] [ 524.399066][ T9142] Bluetooth: hci9: command tx timeout [ 525.986066][ T9732] chnl_net:caif_netlink_parms(): no params data found [ 526.209707][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.209942][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.210164][ T9732] bridge_slave_0: entered allmulticast mode [ 526.213003][ T9732] bridge_slave_0: entered promiscuous mode [ 526.217292][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.217505][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.217708][ T9732] bridge_slave_1: entered allmulticast mode [ 526.289233][ T9732] bridge_slave_1: entered promiscuous mode [ 526.357380][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.382654][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.428985][ T9142] Bluetooth: hci9: command tx timeout [ 526.473274][ T9732] team0: Port device team_slave_0 added [ 528.266758][ T9732] team0: Port device team_slave_1 added [ 528.363975][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.363991][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.364017][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.366259][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.366273][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.366300][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.509023][ T9142] Bluetooth: hci9: command tx timeout [ 528.535442][ T9732] hsr_slave_0: entered promiscuous mode [ 528.538567][ T9732] hsr_slave_1: entered promiscuous mode [ 528.551010][ T9732] debugfs: 'hsr0' already exists in 'hsr' [ 528.551036][ T9732] Cannot create hsr debugfs directory [ 529.258933][ T6660] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 529.438942][ T6660] usb 9-1: Using ep0 maxpacket: 8 [ 529.472028][ T6660] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.490379][ T6660] usb 9-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 529.490411][ T6660] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.490433][ T6660] usb 9-1: Product: syz [ 529.490449][ T6660] usb 9-1: Manufacturer: syz [ 529.490464][ T6660] usb 9-1: SerialNumber: syz [ 529.496028][ T6660] usb 9-1: config 0 descriptor?? [ 529.569603][ T6660] cdc_acm 9-1:0.0: Zero length descriptor references [ 529.569666][ T6660] cdc_acm 9-1:0.0: probe with driver cdc_acm failed with error -22 [ 533.059291][ T6660] usb 9-1: USB disconnect, device number 2 [ 536.836692][ T9786] bridge0: port 3(syz_tun) entered blocking state [ 536.859100][ T9786] bridge0: port 3(syz_tun) entered disabled state [ 536.860004][ T9786] syz_tun: entered allmulticast mode [ 536.863893][ T9786] syz_tun: entered promiscuous mode [ 536.866843][ T9786] bridge0: port 3(syz_tun) entered blocking state [ 536.866991][ T9786] bridge0: port 3(syz_tun) entered forwarding state [ 537.292237][ T9790] netlink: 'syz.8.1151': attribute type 2 has an invalid length. [ 537.440590][ T5118] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 537.463203][ T5118] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 537.464977][ T5118] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 537.466502][ T5118] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 537.521839][ T5809] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 537.546119][ T5809] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 537.560225][ T5809] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 537.564167][ T5809] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 537.565231][ T5809] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 537.610224][ T5118] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 538.826587][ T9794] chnl_net:caif_netlink_parms(): no params data found [ 538.889319][ T9788] chnl_net:caif_netlink_parms(): no params data found [ 539.628963][ T5118] Bluetooth: hci11: command tx timeout [ 539.709033][ T5118] Bluetooth: hci10: command tx timeout [ 541.710521][ T9142] Bluetooth: hci11: command tx timeout [ 541.789049][ T5118] Bluetooth: hci10: command tx timeout [ 543.442431][ T9142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.445686][ T9142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.447208][ T9142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.448495][ T9142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.492523][ T9142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.789110][ T9142] Bluetooth: hci11: command tx timeout [ 543.868884][ T9142] Bluetooth: hci10: command tx timeout [ 545.868932][ T9142] Bluetooth: hci11: command tx timeout [ 545.948818][ T5118] Bluetooth: hci10: command tx timeout [ 545.948926][ T9142] Bluetooth: hci2: command tx timeout [ 548.032942][ T9142] Bluetooth: hci2: command tx timeout [ 550.108907][ T9142] Bluetooth: hci2: command tx timeout [ 552.188766][ T9142] Bluetooth: hci2: command tx timeout [ 554.301890][ T1477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.642996][ T9794] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.643138][ T9794] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.643367][ T9794] bridge_slave_0: entered allmulticast mode [ 554.647071][ T9794] bridge_slave_0: entered promiscuous mode [ 554.718414][ T9794] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.718526][ T9794] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.733363][ T9794] bridge_slave_1: entered allmulticast mode [ 554.749536][ T9794] bridge_slave_1: entered promiscuous mode [ 554.751552][ T9788] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.751662][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.751854][ T9788] bridge_slave_0: entered allmulticast mode [ 554.754279][ T9788] bridge_slave_0: entered promiscuous mode [ 554.757041][ T9788] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.757155][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.757377][ T9788] bridge_slave_1: entered allmulticast mode [ 554.812254][ T9788] bridge_slave_1: entered promiscuous mode [ 555.235191][ T9788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.253403][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 555.273847][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 555.275161][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 555.277483][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 555.280410][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 555.443827][ T9788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.495479][ T9794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.687341][ T9794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.302494][ T9788] team0: Port device team_slave_0 added [ 556.723675][ T9788] team0: Port device team_slave_1 added [ 556.852277][ T9794] team0: Port device team_slave_0 added [ 557.389251][ T9142] Bluetooth: hci3: command tx timeout [ 557.528370][ T9794] team0: Port device team_slave_1 added [ 557.672928][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.672945][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.672997][ T9788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.791446][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.791463][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.791489][ T9788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.854483][ T9794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.854501][ T9794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.854531][ T9794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.936614][ T9794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.936632][ T9794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.936663][ T9794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.337761][ T9788] hsr_slave_0: entered promiscuous mode [ 558.346564][ T9788] hsr_slave_1: entered promiscuous mode [ 558.347569][ T9788] debugfs: 'hsr0' already exists in 'hsr' [ 558.347593][ T9788] Cannot create hsr debugfs directory [ 558.432422][ T9794] hsr_slave_0: entered promiscuous mode [ 558.433818][ T9794] hsr_slave_1: entered promiscuous mode [ 558.434731][ T9794] debugfs: 'hsr0' already exists in 'hsr' [ 558.434754][ T9794] Cannot create hsr debugfs directory [ 559.024031][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 559.469040][ T5809] Bluetooth: hci3: command tx timeout [ 559.796405][ T5809] Bluetooth: hci5: command 0x0406 tx timeout [ 561.549902][ T9142] Bluetooth: hci3: command tx timeout [ 562.840529][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.840606][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.206250][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.206487][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.206698][ T9813] bridge_slave_0: entered allmulticast mode [ 563.255180][ T9813] bridge_slave_0: entered promiscuous mode [ 563.258151][ T9823] chnl_net:caif_netlink_parms(): no params data found [ 563.292640][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.292751][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.292967][ T9813] bridge_slave_1: entered allmulticast mode [ 563.295606][ T9813] bridge_slave_1: entered promiscuous mode [ 563.528122][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.561246][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.636479][ T9142] Bluetooth: hci3: command tx timeout [ 564.645652][ T9813] team0: Port device team_slave_0 added [ 564.689839][ T9813] team0: Port device team_slave_1 added [ 564.715786][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.715963][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.716180][ T9823] bridge_slave_0: entered allmulticast mode [ 564.764567][ T9823] bridge_slave_0: entered promiscuous mode [ 564.801591][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.801711][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.801914][ T9823] bridge_slave_1: entered allmulticast mode [ 564.804460][ T9823] bridge_slave_1: entered promiscuous mode [ 564.854085][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.854102][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.854126][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.858239][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.858253][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.858288][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.994317][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.009169][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.675450][ T9813] hsr_slave_0: entered promiscuous mode [ 565.677047][ T9813] hsr_slave_1: entered promiscuous mode [ 565.678123][ T9813] debugfs: 'hsr0' already exists in 'hsr' [ 565.678147][ T9813] Cannot create hsr debugfs directory [ 565.711352][ T9823] team0: Port device team_slave_0 added [ 565.714855][ T9823] team0: Port device team_slave_1 added [ 565.802231][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.802249][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.802276][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.872416][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.872435][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.872460][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.074314][ T9823] hsr_slave_0: entered promiscuous mode [ 566.075912][ T9823] hsr_slave_1: entered promiscuous mode [ 566.077824][ T9823] debugfs: 'hsr0' already exists in 'hsr' [ 566.077850][ T9823] Cannot create hsr debugfs directory [ 580.188500][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 580.206968][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 580.217827][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 580.226763][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 580.227525][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 580.814582][ T9846] chnl_net:caif_netlink_parms(): no params data found [ 581.019733][ T9846] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.019952][ T9846] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.020587][ T9846] bridge_slave_0: entered allmulticast mode [ 581.023322][ T9846] bridge_slave_0: entered promiscuous mode [ 581.027213][ T9846] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.027401][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.027610][ T9846] bridge_slave_1: entered allmulticast mode [ 581.098583][ T9846] bridge_slave_1: entered promiscuous mode [ 581.192433][ T9846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.197286][ T9846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.278591][ T9846] team0: Port device team_slave_0 added [ 581.289600][ T9846] team0: Port device team_slave_1 added [ 581.343827][ T9846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.343844][ T9846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.343870][ T9846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.346200][ T9846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.346214][ T9846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.346242][ T9846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.575879][ T9846] hsr_slave_0: entered promiscuous mode [ 581.590840][ T9846] hsr_slave_1: entered promiscuous mode [ 581.591837][ T9846] debugfs: 'hsr0' already exists in 'hsr' [ 581.591860][ T9846] Cannot create hsr debugfs directory [ 582.348933][ T5809] Bluetooth: hci6: command tx timeout [ 584.431564][ T5809] Bluetooth: hci6: command tx timeout [ 586.509735][ T9142] Bluetooth: hci6: command tx timeout [ 588.590705][ T5809] Bluetooth: hci6: command tx timeout [ 590.517671][ T5809] Bluetooth: hci7: command 0x0406 tx timeout [ 595.639984][ T9142] Bluetooth: hci8: command 0x0406 tx timeout [ 596.688078][ T9142] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 596.711725][ T9142] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 596.715300][ T9142] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 596.716370][ T9142] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 596.717118][ T9142] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 597.785338][ T5809] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 597.811575][ T5809] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 597.827577][ T5809] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 597.839570][ T5809] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 597.843695][ T5809] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 598.828950][ T5809] Bluetooth: hci12: command tx timeout [ 599.949057][ T5809] Bluetooth: hci13: command tx timeout [ 600.258140][ T9858] chnl_net:caif_netlink_parms(): no params data found [ 600.403728][ T9864] chnl_net:caif_netlink_parms(): no params data found [ 600.752440][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 600.896059][ T9858] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.896260][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.896509][ T9858] bridge_slave_0: entered allmulticast mode [ 600.908922][ T5809] Bluetooth: hci12: command tx timeout [ 600.946958][ T9858] bridge_slave_0: entered promiscuous mode [ 601.141325][ T9858] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.141454][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.141672][ T9858] bridge_slave_1: entered allmulticast mode [ 601.145388][ T9858] bridge_slave_1: entered promiscuous mode [ 601.147802][ T9864] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.147925][ T9864] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.148136][ T9864] bridge_slave_0: entered allmulticast mode [ 601.203622][ T9864] bridge_slave_0: entered promiscuous mode [ 601.272278][ T9864] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.272415][ T9864] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.272699][ T9864] bridge_slave_1: entered allmulticast mode [ 601.277190][ T9864] bridge_slave_1: entered promiscuous mode [ 601.355629][ T9858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.376557][ T9858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.030680][ T9142] Bluetooth: hci13: command tx timeout [ 602.497284][ T9864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.511526][ T9858] team0: Port device team_slave_0 added [ 602.988944][ T9142] Bluetooth: hci12: command tx timeout [ 603.446069][ T9864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.458561][ T9858] team0: Port device team_slave_1 added [ 603.745683][ T9864] team0: Port device team_slave_0 added [ 603.747569][ T9858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.747594][ T9858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.747621][ T9858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.826483][ T9864] team0: Port device team_slave_1 added [ 603.836869][ T9858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.836886][ T9858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.836914][ T9858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.104081][ T9858] hsr_slave_0: entered promiscuous mode [ 604.108887][ T9142] Bluetooth: hci13: command tx timeout [ 604.132877][ T9858] hsr_slave_1: entered promiscuous mode [ 604.145999][ T9858] debugfs: 'hsr0' already exists in 'hsr' [ 604.146025][ T9858] Cannot create hsr debugfs directory [ 604.220013][ T9864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.220031][ T9864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.220060][ T9864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.654200][ T9864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.654217][ T9864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.654243][ T9864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.068901][ T9142] Bluetooth: hci12: command tx timeout [ 605.874396][ T9142] Bluetooth: hci4: command 0x0406 tx timeout [ 606.017168][ T5118] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 606.033801][ T5118] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 606.037165][ T5118] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 606.066516][ T5118] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 606.067348][ T5118] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 606.189059][ T5809] Bluetooth: hci13: command tx timeout [ 606.284141][ T9864] hsr_slave_0: entered promiscuous mode [ 606.285597][ T9864] hsr_slave_1: entered promiscuous mode [ 606.286589][ T9864] debugfs: 'hsr0' already exists in 'hsr' [ 606.286611][ T9864] Cannot create hsr debugfs directory [ 607.518306][ T9879] chnl_net:caif_netlink_parms(): no params data found [ 607.800898][ T9879] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.801101][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.801314][ T9879] bridge_slave_0: entered allmulticast mode [ 607.804325][ T9879] bridge_slave_0: entered promiscuous mode [ 607.807493][ T9879] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.807670][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.807921][ T9879] bridge_slave_1: entered allmulticast mode [ 607.871693][ T9879] bridge_slave_1: entered promiscuous mode [ 607.933766][ T9879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.938157][ T9879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.004756][ T9879] team0: Port device team_slave_0 added [ 608.008578][ T9879] team0: Port device team_slave_1 added [ 608.064647][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.064666][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.064705][ T9879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.067023][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.067037][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.067079][ T9879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.108857][ T5809] Bluetooth: hci14: command tx timeout [ 609.236695][ T9879] hsr_slave_0: entered promiscuous mode [ 609.238278][ T9879] hsr_slave_1: entered promiscuous mode [ 609.252403][ T9879] debugfs: 'hsr0' already exists in 'hsr' [ 609.252428][ T9879] Cannot create hsr debugfs directory [ 610.188765][ T5809] Bluetooth: hci14: command tx timeout [ 612.269141][ T5809] Bluetooth: hci14: command tx timeout [ 614.348735][ T5809] Bluetooth: hci14: command tx timeout [ 614.815669][ T9142] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 614.829237][ T9142] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 614.832425][ T9142] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 614.861671][ T9142] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 614.881985][ T9142] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 615.270250][ T9890] chnl_net:caif_netlink_parms(): no params data found [ 615.440513][ T9890] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.440699][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.441281][ T9890] bridge_slave_0: entered allmulticast mode [ 615.443952][ T9890] bridge_slave_0: entered promiscuous mode [ 615.447553][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.447774][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.448012][ T9890] bridge_slave_1: entered allmulticast mode [ 615.518532][ T9890] bridge_slave_1: entered promiscuous mode [ 615.596547][ T9890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.615543][ T9890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.698120][ T9890] team0: Port device team_slave_0 added [ 615.708590][ T9890] team0: Port device team_slave_1 added [ 615.775692][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.775710][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.775738][ T9890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.777954][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.777975][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.778002][ T9890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.955912][ T9890] hsr_slave_0: entered promiscuous mode [ 615.957479][ T9890] hsr_slave_1: entered promiscuous mode [ 615.958589][ T9890] debugfs: 'hsr0' already exists in 'hsr' [ 615.982983][ T9890] Cannot create hsr debugfs directory [ 616.909244][ T9142] Bluetooth: hci15: command tx timeout [ 618.989444][ T9142] Bluetooth: hci15: command tx timeout [ 621.071824][ T9142] Bluetooth: hci15: command tx timeout [ 623.149386][ T9142] Bluetooth: hci15: command tx timeout [ 624.282071][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.282140][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 638.989565][ T38] INFO: task kworker/u8:4:68 blocked for more than 143 seconds. [ 638.989592][ T38] Tainted: G L syzkaller #0 [ 638.989603][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.989613][ T38] task:kworker/u8:4 state:D stack:21280 pid:68 tgid:68 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 638.989667][ T38] Workqueue: events_unbound free_mem_alloc_deferred [ 638.989837][ T38] Call Trace: [ 638.989845][ T38] [ 638.989861][ T38] __schedule+0x1553/0x5240 [ 638.989900][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 638.989946][ T38] ? __pfx___schedule+0x10/0x10 [ 638.989994][ T38] rt_mutex_schedule+0x76/0xf0 [ 638.990022][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 638.990070][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 638.990101][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 638.990130][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 638.990176][ T38] ? rcu_barrier+0x4c/0x580 [ 638.990210][ T38] ? rcu_barrier+0x4c/0x580 [ 638.990235][ T38] mutex_lock_nested+0x168/0x1d0 [ 638.990267][ T38] rcu_barrier+0x4c/0x580 [ 638.990306][ T38] free_mem_alloc_deferred+0x16/0x40 [ 638.990338][ T38] ? process_scheduled_works+0xa8d/0x18c0 [ 638.990367][ T38] process_scheduled_works+0xb6e/0x18c0 [ 638.990431][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 638.990469][ T38] ? assign_work+0x3d5/0x5e0 [ 638.990505][ T38] worker_thread+0xa53/0xfc0 [ 638.990566][ T38] kthread+0x388/0x470 [ 638.990590][ T38] ? __pfx_worker_thread+0x10/0x10 [ 638.990618][ T38] ? __pfx_kthread+0x10/0x10 [ 638.990644][ T38] ret_from_fork+0x51e/0xb90 [ 638.990678][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 638.990707][ T38] ? __switch_to+0xc7d/0x1450 [ 638.990738][ T38] ? __pfx_kthread+0x10/0x10 [ 638.990770][ T38] ret_from_fork_asm+0x1a/0x30 [ 638.990810][ T38] [ 638.991062][ T38] [ 638.991062][ T38] Showing all locks held in the system: [ 638.991074][ T38] 3 locks held by rcuc/0/20: [ 638.991088][ T38] 1 lock held by khungtaskd/38: [ 638.991099][ T38] #0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 638.991155][ T38] 3 locks held by kworker/u8:4/68: [ 638.991166][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 638.991219][ T38] #1: ffffc9000153fc40 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x1[ 638.991219][ T38] #1: ffffc9000153fc40 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 638.991272][ T38] #2: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 638.991331][ T38] 6 locks held by kworker/u8:12/1477: [ 638.991342][ T38] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 638.991395][ T38] #1: ffffc90005b3fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 638.991449][ T38] #2: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 638.991560][ T38] #3: ffff8880217d10d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0 [ 638.991654][ T38] #4: ffff88801ffa6300 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x3f0 [ 638.991703][ T38] #5: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 638.991770][ T38] 3 locks held by kworker/u8:16/3571: [ 638.991782][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 638.991835][ T38] #1: ffffc9000ea67c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 638.991889][ T38] #2: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 638.991940][ T38] 2 locks held by getty/5558: [ 638.991950][ T38] #0: ffff8880375a70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 638.992030][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 638.992085][ T38] 1 lock held by syz.1.1038/9222: [ 638.992096][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 638.992148][ T38] 1 lock held by syz.3.1075/9389: [ 638.992159][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 638.992208][ T38] 1 lock held by syz.4.1083/9417: [ 638.992219][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 638.992270][ T38] 1 lock held by syz.6.1052/9478: [ 638.992280][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 638.992331][ T38] 7 locks held by syz-executor/9531: [ 638.992341][ T38] #0: ffff888032e02480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 638.992400][ T38] #1: ffff888060066878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 638.992499][ T38] #2: ffff8880290252d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 638.992557][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 638.992657][ T38] #4: ffff888060c870d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 638.992735][ T38] #5: ffff88801ff84300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 638.992794][ T38] #6: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 638.992847][ T38] 1 lock held by syz.5.1122/9658: [ 638.992859][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 638.992908][ T38] 1 lock held by syz.9.1135/9727: [ 638.992918][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 638.992968][ T38] 4 locks held by syz-executor/9732: [ 638.992979][ T38] #0: ffff888032e02480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 638.993037][ T38] #1: ffff88803b893078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 638.993092][ T38] #2: ffff8880290252d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 638.993151][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 638.993207][ T38] 1 lock held by syz.7.1139/9738: [ 638.993218][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 638.993268][ T38] 4 locks held by syz-executor/9788: [ 638.993279][ T38] #0: ffff888032e02480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 638.993336][ T38] #1: ffff88804f9e0478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 638.993389][ T38] #2: ffff8880290252d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 638.993448][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 638.993505][ T38] 4 locks held by syz-executor/9794: [ 638.993517][ T38] #0: ffff888032e02480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 638.993575][ T38] #1: ffff88801eea8878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 638.993629][ T38] #2: ffff8880290252d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 638.993689][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 638.993745][ T38] 1 lock held by syz.8.1154/9809: [ 638.993755][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 638.993811][ T38] 4 locks held by syz-executor/9813: [ 638.993822][ T38] #0: ffff888032e02480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 638.993879][ T38] #1: ffff888057efc078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 638.993935][ T38] #2: ffff8880290252d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 638.993994][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 638.994050][ T38] 4 locks held by syz-executor/9823: [ 638.994062][ T38] #0: ffff888032e02480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 638.994118][ T38] #1: ffff8880804e9c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 638.994170][ T38] #2: ffff8880290252d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 638.994230][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 638.994288][ T38] 4 locks held by syz-executor/9846: [ 638.994299][ T38] #0: ffff888032e02480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 638.994355][ T38] #1: ffff88804f8d6478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 638.994410][ T38] #2: ffff8880290252d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 638.994469][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 638.994527][ T38] 4 locks held by syz-executor/9858: [ 638.994537][ T38] #0: ffff888032e02480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 638.994595][ T38] #1: ffff888058f75478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 638.994648][ T38] #2: ffff8880290252d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 638.994707][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 638.994774][ T38] 4 locks held by syz-executor/9864: [ 638.994785][ T38] #0: ffff888032e02480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 638.994843][ T38] #1: ffff888086d55478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 638.994897][ T38] #2: ffff8880290252d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 638.994957][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 638.995013][ T38] 4 locks held by syz-executor/9879: [ 638.995024][ T38] #0: ffff888032e02480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 638.995082][ T38] #1: ffff88805be7f478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 638.995138][ T38] #2: ffff8880290252d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 638.995197][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 638.995254][ T38] 4 locks held by syz-executor/9890: [ 638.995264][ T38] #0: ffff888032e02480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 638.995318][ T38] #1: ffff888041322478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 638.995373][ T38] #2: ffff8880290252d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 638.995432][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 638.995489][ T38] 1 lock held by dhcpcd/9903: [ 638.995500][ T38] #0: ffff888033a595f8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 638.995555][ T38] [ 638.995560][ T38] ============================================= [ 638.995560][ T38] [ 638.995575][ T38] NMI backtrace for cpu 1 [ 638.995591][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 638.995617][ T38] Tainted: [L]=SOFTLOCKUP [ 638.995623][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 638.995634][ T38] Call Trace: [ 638.995641][ T38] [ 638.995649][ T38] dump_stack_lvl+0xe8/0x150 [ 638.995679][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 638.995751][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 638.995786][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 638.995813][ T38] sys_info+0x135/0x170 [ 638.995832][ T38] watchdog+0xfd9/0x1030 [ 638.995861][ T38] ? watchdog+0x21a/0x1030 [ 638.995891][ T38] kthread+0x388/0x470 [ 638.995912][ T38] ? __pfx_watchdog+0x10/0x10 [ 638.995934][ T38] ? __pfx_kthread+0x10/0x10 [ 638.995955][ T38] ret_from_fork+0x51e/0xb90 [ 638.995984][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 638.996010][ T38] ? __switch_to+0xc7d/0x1450 [ 638.996037][ T38] ? __pfx_kthread+0x10/0x10 [ 638.996058][ T38] ret_from_fork_asm+0x1a/0x30 [ 638.996091][ T38] [ 638.996099][ T38] Sending NMI from CPU 1 to CPUs 0: [ 638.996123][ C0] NMI backtrace for cpu 0 [ 638.996138][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 638.996159][ C0] Tainted: [L]=SOFTLOCKUP [ 638.996165][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 638.996175][ C0] RIP: 0010:lock_acquire+0x79/0x2e0 [ 638.996192][ C0] Code: 0d 73 0d e8 c9 42 09 00 84 c0 0f 84 bc 01 00 00 83 3d aa 1a ca 0d 00 0f 84 c3 00 00 00 48 8b 74 24 68 4c 89 ef e8 57 2d 8a 00 <83> 3d 90 1a ca 0d 00 0f 84 c1 00 00 00 65 8b 05 53 50 ae 10 85 c0 [ 638.996207][ C0] RSP: 0018:ffffc90000196940 EFLAGS: 00000202 [ 638.996220][ C0] RAX: 0000000000000001 RBX: ffffffff895cc945 RCX: 0000000080000001 [ 638.996232][ C0] RDX: 0000000000000000 RSI: ffffffff81767e82 RDI: 1ffffffff1bb9730 [ 638.996244][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 638.996253][ C0] R10: ffffc90000196ad8 R11: ffffffff81af8890 R12: 0000000000000002 [ 638.996269][ C0] R13: ffffffff8ddcb980 R14: 0000000000000000 R15: 0000000000000000 [ 638.996279][ C0] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 638.996292][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.996303][ C0] CR2: 00007f599038f7b0 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 638.996317][ C0] Call Trace: [ 638.996323][ C0] [ 638.996331][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 638.996346][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 638.996399][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 638.996414][ C0] unwind_next_frame+0xc2/0x23c0 [ 638.996428][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 638.996445][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 638.996460][ C0] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 638.996475][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 638.996491][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 638.996513][ C0] arch_stack_walk+0x11b/0x150 [ 638.996531][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 638.996547][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 638.996570][ C0] stack_trace_save+0xa9/0x100 [ 638.996590][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 638.996613][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 638.996629][ C0] kasan_save_track+0x3e/0x80 [ 638.996679][ C0] ? kasan_save_track+0x3e/0x80 [ 638.996700][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 638.996721][ C0] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 638.996745][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 638.996766][ C0] ? synproxy_send_client_synack+0x172/0xe30 [ 638.996826][ C0] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 638.996841][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 638.996878][ C0] __kasan_slab_alloc+0x6c/0x80 [ 638.996902][ C0] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 638.996925][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 638.996949][ C0] __alloc_skb+0x1d0/0x7d0 [ 638.996973][ C0] synproxy_send_client_synack+0x172/0xe30 [ 638.997002][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 638.997025][ C0] ? nft_log_dump+0x20/0x4e0 [ 638.997061][ C0] ? synproxy_pernet+0x45/0x270 [ 638.997079][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 638.997097][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 638.997114][ C0] ? nf_ip_checksum+0x13c/0x510 [ 638.997150][ C0] nft_synproxy_do_eval+0x305/0x580 [ 638.997169][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 638.997183][ C0] ? ip_vs_service_find+0xa6b/0xf10 [ 638.997226][ C0] nft_do_chain+0x45e/0x1990 [ 638.997241][ C0] ? __pfx_tcp_conn_schedule+0x10/0x10 [ 638.997285][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 638.997328][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 638.997356][ C0] ? __pfx_ip_vs_out_hook+0x10/0x10 [ 638.997369][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 638.997387][ C0] nft_do_chain_inet+0x29d/0x380 [ 638.997442][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 638.997468][ C0] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 638.997492][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 638.997518][ C0] nf_hook_slow+0xc5/0x220 [ 638.997559][ C0] NF_HOOK+0x21f/0x3c0 [ 638.997575][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 638.997591][ C0] ? NF_HOOK+0x9e/0x3c0 [ 638.997605][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 638.997618][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 638.997636][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 638.997654][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 638.997671][ C0] NF_HOOK+0x336/0x3c0 [ 638.997684][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 638.997709][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 638.997724][ C0] ? NF_HOOK+0x9e/0x3c0 [ 638.997738][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 638.997754][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 638.997772][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 638.997786][ C0] ? process_backlog+0x271/0xc60 [ 638.997840][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 638.997856][ C0] process_backlog+0x569/0xc60 [ 638.997885][ C0] __napi_poll+0xaf/0x580 [ 638.997902][ C0] ? skb_defer_free_flush+0x233/0x260 [ 638.997924][ C0] net_rx_action+0x696/0xe00 [ 638.997943][ C0] ? __kasan_slab_free+0x5c/0x80 [ 638.997964][ C0] ? kmem_cache_free+0x185/0x6b0 [ 638.997985][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 638.998004][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 638.998031][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 638.998057][ C0] handle_softirqs+0x1de/0x6f0 [ 638.998084][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 638.998107][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 638.998121][ C0] rcu_cpu_kthread+0x9e8/0x1470 [ 638.998140][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 638.998158][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 638.998174][ C0] ? schedule+0x90/0x360 [ 638.998197][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 638.998220][ C0] smpboot_thread_fn+0x541/0xa50 [ 638.998244][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 638.998275][ C0] kthread+0x388/0x470 [ 638.998291][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 638.998313][ C0] ? __pfx_kthread+0x10/0x10 [ 638.998329][ C0] ret_from_fork+0x51e/0xb90 [ 638.998351][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 638.998372][ C0] ? __switch_to+0xc7d/0x1450 [ 638.998391][ C0] ? __pfx_kthread+0x10/0x10 [ 638.998407][ C0] ret_from_fork_asm+0x1a/0x30 [ 638.998429][ C0] [ 639.248845][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 639.248869][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 639.248897][ T38] Tainted: [L]=SOFTLOCKUP [ 639.248905][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 639.248917][ T38] Call Trace: [ 639.248925][ T38] [ 639.248935][ T38] vpanic+0x56c/0xa60 [ 639.248972][ T38] ? __pfx___schedule+0x10/0x10 [ 639.249002][ T38] ? __pfx_vpanic+0x10/0x10 [ 639.249042][ T38] panic+0xc5/0xd0 [ 639.249071][ T38] ? __pfx_panic+0x10/0x10 [ 639.249103][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 639.249135][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 639.249165][ T38] watchdog+0x1023/0x1030 [ 639.249197][ T38] ? watchdog+0x21a/0x1030 [ 639.249229][ T38] kthread+0x388/0x470 [ 639.249251][ T38] ? __pfx_watchdog+0x10/0x10 [ 639.249275][ T38] ? __pfx_kthread+0x10/0x10 [ 639.249298][ T38] ret_from_fork+0x51e/0xb90 [ 639.249331][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 639.249359][ T38] ? __switch_to+0xc7d/0x1450 [ 639.249388][ T38] ? __pfx_kthread+0x10/0x10 [ 639.249411][ T38] ret_from_fork_asm+0x1a/0x30 [ 639.249458][ T38] [ 639.250115][ T38] Kernel Offset: disabled