last executing test programs: 12.971863961s ago: executing program 0 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)='./file1\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r9) r10 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x4, &(0x7f0000000280)={[{}]}) syz_open_dev$vim2m(&(0x7f0000000200), 0x5, 0x2) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) read$char_usb(r11, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 9.145374192s ago: executing program 3 (id=226): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0xfffffffffffffdcb, 0x2}]}, @IFLA_LINKMODE={0x5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x44}}, 0x8054) pause() socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x48}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ffffffff000000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 8.494697484s ago: executing program 0 (id=228): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020784400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x317, @time={0x65757100, 0x8}}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x300}, 0x8) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xffffffff, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x40) 7.791809068s ago: executing program 2 (id=230): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000045000000700000001000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\t\x00'/14], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001300)={r3, &(0x7f0000000340), 0x0}, 0x20) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x67, @mcast1, 0x2}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x4c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x9, @local, 0x3}]}, &(0x7f0000000300)=0x10) listen(r2, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdb2504000010211200b1407697243d72b51509beb9cf"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 6.763483188s ago: executing program 3 (id=232): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='.'], 0x20) preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x38011, r3, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000000)={0x3, 0x7}) 6.389499296s ago: executing program 1 (id=234): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x28, 0xa, 0x3, "3258c54601cccfcf1e0092000900000000000013000000000000000000b28d00", 0x32314d59}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r8, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x58}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x20000020) syz_open_dev$evdev(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, &(0x7f0000000500)={0x2, 0x29, 0x0, 0x8000, 0x287b, 0x0, 0x8000000000000000, 0x1ff}, &(0x7f0000000380)={0xfdd, 0x0, 0x7, 0x8, 0x20, 0x1, 0x5, 0x2}, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x40]}, 0x8}) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYRESDEC=r3], 0x38}, 0x0) 6.089718517s ago: executing program 3 (id=235): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) 5.794717102s ago: executing program 2 (id=236): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x4d40, &(0x7f0000001840)={0x0, 0xca66, 0x10000, 0x1, 0x4}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) recvmmsg(r0, &(0x7f0000001700)=[{{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000500)=""/160, 0xa0}], 0x1}, 0xa}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/87, 0x57}, {&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f0000000880)=""/241, 0xf1}, {&(0x7f0000000980)=""/166, 0xa6}, {&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f0000000a40)=""/244, 0xf4}, {&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000380)=""/62, 0x3e}], 0x8, &(0x7f0000000bc0)=""/34, 0x22}, 0x2}, {{&(0x7f0000000c00)=@caif=@dbg, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c80)=""/38, 0x26}, {&(0x7f0000000cc0)=""/183, 0xb7}, {&(0x7f0000000d80)=""/125, 0x7d}, {&(0x7f0000000e00)=""/133, 0x85}, {&(0x7f0000000ec0)=""/38, 0x26}], 0x5, &(0x7f0000000f80)=""/248, 0xf8}, 0x8000}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/215, 0xd7}], 0x1, &(0x7f00000011c0)=""/198, 0xc6}, 0xffffff81}], 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/11, 0xfffffffffffffde1}}], 0x400000000000179, 0x10022, 0x0) 5.174542743s ago: executing program 1 (id=237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x300, 0x3}, 0x3f2d, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c4, 0x10000000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000440)={'mangle\x00', 0x4, "ca8ac3a6"}, &(0x7f00000000c0)=0x28) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000100)) socket(0x18, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) 5.073236603s ago: executing program 4 (id=238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0001080000302c7adeb9d8df0883665f7f320000000000000000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014080000b703000000000000850400000500ee5223ff61310000bca900000000000035090100000000009500000000000000b509020002000000739a04fe00000000b509000000000000c39a04fee1000000ffbfa4fe8c357b8922d90db65900000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x9d0000, 0xfffffff2, 0x6e, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9909db, 0xc, '\x00', @p_u16=&(0x7f0000000140)=0x6}}) 4.605586113s ago: executing program 3 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x1c00, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1bd4, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0x8}}, @TCA_BPF_ACT={0x1bb0, 0x1, [@m_gact={0xbc, 0x8, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1b000, 0x0, 0x10000000, 0x1000, 0x9c}}]}, {0x75, 0x6, "042dde06afe5bc74f723fed6a98caf00609881e11eb0925c7c2a8448612c5fdda5597c233a5d7326fa030b93d7a199417c84c03014e0f28c0b8159ad270a8c511eb9ab4803d559a0a948ca20fd48d82611328b8cf18d670898d54a2928444ec972318f04b5c0c145f2b0c5def18e34e2c8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x1a28, 0x10, 0x0, 0x0, {{0xb}, {0x1908, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x6, 0x8001, 0x8, 0x8, 0xc69d, 0x80000001, 0x5, 0x3c, 0x100, 0x101, 0x9, 0x3ff, 0x0, 0x3, 0x8, 0x6, 0xfffffff9, 0x6, 0xc8b, 0x8, 0x20cc10f0, 0x8, 0xffffffff, 0x80000001, 0x4, 0x1ff, 0xf, 0xffffffff, 0x6bde, 0xd, 0x7, 0x2af, 0x6ac6cfc5, 0xb, 0x8, 0x7, 0xd, 0x0, 0x9, 0xfffffe00, 0xffffff80, 0x5, 0x200, 0x2, 0x9, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x1, 0x2, 0x1, 0x5, 0x400, 0x4, 0xfffffff0, 0x7, 0x1, 0x7ff, 0x64, 0x9e8e, 0x0, 0x5, 0x9, 0x6, 0x9, 0x101, 0x100, 0x40, 0x6, 0x1ff, 0x1, 0x100, 0xfffffffb, 0x7fff, 0x6, 0xb0, 0x8, 0x1, 0x2e000543, 0x6, 0x3ff, 0x2, 0xa3, 0x1, 0x9, 0x80000001, 0xb, 0x80, 0x0, 0x40, 0x7, 0x2000000, 0x1, 0x3, 0x1138, 0x4, 0xffffff18, 0x9, 0xfff, 0xfffffff7, 0x8, 0x3ff, 0x0, 0xce000000, 0x0, 0x6b, 0x3, 0xfffffffe, 0x97b, 0x4, 0x3, 0x3, 0x6, 0x9, 0xac, 0xc, 0x2, 0xfffffffb, 0x6, 0xeb, 0x8001, 0x4, 0x3, 0x800, 0x0, 0x1, 0x49fe, 0x81, 0x6, 0xc, 0x80000000, 0x0, 0x8, 0x19d, 0x101, 0x6, 0x3e480000, 0x8, 0x7a8, 0xfff, 0x6e25, 0x9, 0x1000, 0x5, 0xffff30c6, 0x5ece, 0x0, 0x8001, 0x9, 0x7, 0x7ff, 0x8001, 0x401, 0x240000, 0x8, 0x0, 0x5, 0x60f5, 0x101, 0xedf4, 0x9, 0x80, 0x1, 0xe42f, 0xc86c, 0x1, 0x5, 0x5, 0xe694, 0x7ff, 0xc6f, 0xe42b, 0x2, 0x1, 0xff, 0x8, 0x1, 0x3, 0x8, 0x155, 0x747, 0x7315, 0xf30, 0x5, 0x28b, 0x5, 0x61f2626c, 0x401, 0x4, 0x9, 0x8, 0x23, 0xdc, 0x7b60, 0x6, 0x7, 0x9, 0x7, 0xe, 0x0, 0x1ff, 0x442b, 0x2, 0x9, 0x3, 0x2, 0x5, 0x6, 0x1, 0x401, 0x1, 0x5, 0xd3ae, 0x73, 0x1, 0x9, 0x81, 0xffffff4c, 0x8b, 0x4, 0x6, 0x3, 0x0, 0x8, 0xffffffff, 0x7, 0xdbc, 0x5, 0x8, 0x0, 0x8, 0xa, 0x1, 0x0, 0x1, 0x8, 0xffff, 0x5, 0x1, 0x4, 0x9, 0xd5, 0x9, 0x200, 0x4, 0xd, 0x9, 0x1, 0x2, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x0, 0x1ff, 0x9, 0x80000000, {0x1, 0x2, 0x4, 0x9, 0x1, 0x8}, {0x1, 0x0, 0x896, 0x4, 0x98, 0x4e84}, 0x8, 0x0, 0xe}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0x0, 0x0, 0xcc8a, 0x47309ac, 0x400000, 0x28000000, 0xa, 0x8, 0x31c, 0xc2ee, 0x101, 0x2, 0x0, 0x6, 0x8, 0xffff749f, 0x8, 0xa12, 0x3, 0x1, 0x6, 0x1c25, 0x3, 0x8, 0x28, 0x4, 0x9, 0x46, 0x7, 0x5, 0x8, 0x5, 0x6, 0xa, 0x0, 0x7f, 0x2eb, 0x10000, 0xed, 0x9, 0xca16, 0x6ef8fe75, 0x11a5, 0x7, 0xa5e, 0x8, 0x0, 0x9, 0x100, 0x5, 0x7fffffff, 0x3ff, 0x7, 0x0, 0x1, 0x55, 0x1, 0x800, 0x401, 0x6, 0x800, 0xffffffff, 0x0, 0x9, 0xfffffff8, 0x1, 0x400, 0x3, 0x7fff, 0x4, 0x4000, 0x9, 0x6, 0xeda, 0xa76, 0x8, 0x5, 0xc4, 0x1000, 0x94d7, 0x80000001, 0xdbd, 0xfffffffc, 0x7, 0x8, 0x2, 0x10, 0x8, 0xfffffff6, 0x5, 0x0, 0x10, 0x1b, 0x81, 0x3, 0xbc5, 0x6, 0x1e, 0x1, 0x8, 0x2, 0xfc408c9, 0x0, 0x22bc52ba, 0x4, 0x9, 0xffffabc6, 0x5, 0xfffffc50, 0x7, 0x1, 0x24a, 0x0, 0x6, 0x101, 0x8000, 0xe, 0xecb, 0x0, 0x8f29, 0xd, 0x7fffffff, 0x7, 0x646, 0x2, 0x1ff, 0x80000000, 0x4, 0x6, 0x1000, 0xe, 0xd6, 0xf, 0x1, 0x2, 0x1, 0xfffffffa, 0x2, 0x6, 0xeaea, 0x4, 0x7, 0x2, 0x7, 0x6452, 0xfff, 0x6, 0x9, 0xffffffff, 0x5, 0x2, 0x7, 0xffff6eb5, 0x7, 0x1000, 0x10000, 0x4, 0x24, 0x10000, 0x0, 0x2469, 0x800, 0x6, 0x2, 0x3, 0xc17f, 0x9, 0xed25, 0x2, 0x3, 0x3ff, 0xaf, 0x2, 0x29, 0x6, 0x2, 0x9, 0x5, 0x24ff, 0x9, 0x10000, 0x8, 0x8, 0x7, 0x5, 0xb01, 0x7, 0x3, 0x4, 0x7, 0xb3b, 0x3732, 0xdd44, 0x7, 0x7fff, 0x5, 0x0, 0x9, 0x7ff, 0x2, 0x6, 0x8, 0x5, 0xc2d3, 0x4, 0x23, 0x1000, 0x1, 0x0, 0x9, 0xa, 0x4, 0x401, 0x8680, 0x6, 0x8, 0x6, 0xff, 0x3, 0x8, 0x1, 0x2, 0x807f, 0xf4, 0x9, 0x3ff, 0x9, 0xc, 0x9, 0x6, 0x8, 0x0, 0x4, 0x9, 0x80, 0xfffffffb, 0x3, 0x1, 0x3, 0xfffffff8, 0x0, 0x6, 0x5, 0x401, 0x2, 0x101, 0x6, 0xffff, 0x1000, 0x2, 0x1c0000, 0x5c7c, 0x7, 0x8a05]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x2, 0x0, 0x9, 0x10000, 0x9, 0x8, 0x8, 0x99, 0x2, 0xfa43, 0xfffffffd, 0x9, 0x9, 0x4, 0x7, 0xfff, 0x8, 0x7fff, 0x6, 0x1, 0x8000, 0x1, 0x4, 0x2, 0x9cab, 0x80000000, 0x7f, 0x0, 0x8, 0x80000000, 0x1215, 0x5, 0xa, 0x1c1, 0xb, 0x6, 0x2, 0x5, 0x10001, 0x9, 0x4, 0x7fff, 0x0, 0x5, 0xfffffffc, 0x4, 0x3, 0x2, 0x1000, 0x5, 0x9, 0x3, 0x9, 0x3, 0x0, 0x4, 0x80000000, 0x4, 0x6, 0x40, 0x0, 0x1, 0xfffffffe, 0x7, 0x52c6, 0x9, 0x7fffffff, 0xe, 0x0, 0x3, 0x156f, 0x4, 0xc, 0x1ff, 0x8, 0x5, 0x3, 0x5, 0x1, 0x7, 0x9, 0x3, 0x10, 0xffffffff, 0x1, 0x8, 0x3, 0x1000, 0x9, 0xfffffffe, 0x4, 0x1, 0x7fffffff, 0x2, 0x3, 0x5, 0xfffffff4, 0x9, 0x3, 0xe8, 0x7, 0x50, 0x4, 0x8, 0x12182ea1, 0x8000, 0xbff, 0x0, 0x69d, 0x0, 0x2, 0x2, 0x7, 0x4, 0x7, 0x3, 0x0, 0xfffffff9, 0x3ff, 0x5d2, 0x0, 0x0, 0xfffffffc, 0xffffff7f, 0x3, 0x9, 0x1c0, 0x5, 0xfff, 0x101, 0xe061, 0xffff, 0xbc, 0xfffffffa, 0x7, 0x9, 0x3, 0xc, 0x1, 0x5, 0xffff, 0x7, 0x41, 0x2, 0x1ff, 0x1, 0xfff, 0x6, 0xffff, 0x200, 0x5, 0xf7, 0xd, 0x7, 0x1, 0x7, 0x651bd7b5, 0x8000, 0x8, 0xfffff000, 0x2, 0x84, 0x200, 0x9, 0x44, 0x5, 0xc, 0x2, 0x3, 0x2, 0x2, 0x6523, 0xfffffffb, 0xb1, 0x0, 0x8000, 0xe6, 0x6, 0x0, 0x5, 0x1, 0x7f, 0x3, 0x7, 0x8, 0x5f3ab808, 0x7, 0x10001, 0x6, 0x1f746115, 0x261, 0xd16, 0x6, 0x101, 0x6, 0x3ff, 0x5, 0xffffffb4, 0x9, 0xfffffbb0, 0x3, 0x7, 0x4, 0x0, 0x9f, 0x4, 0xc6e, 0x1, 0x4, 0x7, 0x1, 0x8, 0xb4, 0x6, 0x8, 0x4444e259, 0x3, 0x43, 0x99, 0x1e6, 0x2, 0x1, 0x6, 0x5, 0x0, 0x1, 0x9, 0x2, 0x40000000, 0x3, 0x6, 0x3, 0x4, 0x4, 0x1, 0x4, 0x6, 0x9a8, 0x4, 0xdb, 0x8, 0x8, 0x1, 0x800, 0x259, 0x8001, 0xd, 0x2, 0x78b2463a, 0x6, 0x4, 0x9, 0x9, 0x0, 0xb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x10000000, 0x7, 0x40, 0x3, {0x7, 0x0, 0x9, 0x4, 0x6, 0xfffffffc}, {0x0, 0x0, 0x5, 0x6, 0x4, 0x4be}, 0x3, 0x5, 0x5}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff52}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0x5, 0x9, 0xfff, 0x8, 0x2, 0x7fffffff, 0x7, 0x1, 0x8, 0x5, 0x4e6, 0x1000, 0xee, 0x0, 0x4, 0x80000001, 0x4, 0xf, 0x80000000, 0x4, 0x1700, 0x1, 0xa2, 0xc9f3, 0x800, 0xeb1, 0x65da, 0x5, 0x3, 0x400, 0x7, 0x40, 0x1, 0xc, 0x67f56dc4, 0x415, 0x5, 0x7fffffff, 0x5, 0x6, 0xfff, 0xea, 0xe, 0xa, 0x0, 0x0, 0x7, 0xf, 0xffffffa1, 0x4, 0x3, 0x400, 0x853, 0x10001, 0x3e0, 0xc64, 0x4, 0xfff, 0x1c0, 0x2, 0x6, 0x63, 0x81, 0x1, 0xfbe4, 0x8, 0x1, 0x1, 0x4, 0x2, 0x2c3, 0x0, 0xbad8, 0x4d9a, 0x8, 0x3, 0x13, 0x3, 0x101, 0x6, 0x7, 0x7, 0x4, 0xe, 0x15, 0x6, 0x3, 0x8000, 0x5, 0x7ff, 0x81, 0x5, 0x80000000, 0x3e, 0x5, 0x7, 0x7fffffff, 0x8, 0x7, 0x10001, 0x96, 0x9538, 0x9, 0x7, 0xfffffff9, 0x4, 0x3, 0x29d, 0xf2fc, 0x1, 0x7, 0x9, 0x8, 0x7, 0xf396, 0x4, 0x5, 0x1, 0x9, 0x0, 0x7, 0x8a, 0x0, 0x1000, 0xffffffff, 0x401, 0x8, 0x8, 0x9, 0xffffd0a8, 0x1, 0x80, 0x4, 0x0, 0x8000, 0x5, 0x3, 0x4ff, 0xffffffff, 0x8000, 0x6, 0x1, 0x2, 0x8, 0x3, 0x6, 0x24c, 0x7ff, 0x8000, 0x64, 0x6, 0xe86, 0x5, 0x81, 0xfffffff9, 0x1, 0x5, 0xa04, 0x8000, 0x5, 0x80000001, 0x1b8, 0x9, 0xc730, 0x9, 0x31489687, 0xfffffffb, 0x0, 0x56, 0xffffffff, 0xb, 0x7, 0x81, 0x5, 0x8, 0x1f87, 0x26f7, 0x4be, 0x58d, 0x6, 0x0, 0x3, 0x4, 0x4, 0x80000001, 0x0, 0x5, 0x7, 0x0, 0x4, 0x4, 0x401, 0x3ff, 0x1, 0xd, 0x5, 0x7fffffff, 0x5, 0x9, 0x4, 0x0, 0x6, 0x25, 0x1, 0x9, 0x7ff, 0x5, 0x101, 0x1a00, 0xf8c, 0x2, 0x8, 0x7fffffff, 0x5, 0x7, 0x604, 0x3, 0x76, 0xa, 0x9, 0x475, 0xf, 0x7, 0x8, 0x10001, 0x5, 0xfd, 0x5, 0xb4, 0x22d0, 0x4, 0x9, 0x8, 0x2, 0xa6, 0x8000, 0x18000, 0x8000, 0x4, 0x3, 0x200, 0x80, 0x6, 0x0, 0xffffffff, 0xb, 0x2, 0x5, 0xf82, 0x0, 0xffff7fff, 0x5, 0x67, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7355, 0x64, 0x5, 0xc40, 0x2, 0x7fffffff, 0x3, 0x9, 0x4, 0x0, 0xb, 0x1, 0x7, 0x0, 0x7, 0x1, 0x8, 0xe2a, 0x0, 0x37, 0xa, 0x0, 0x5, 0x35f2, 0x7, 0x80000000, 0x5, 0x9, 0x0, 0x7, 0x8, 0xffffffff, 0x80cf, 0x8, 0x8, 0x2, 0x8, 0x75a0, 0xa0, 0xece1, 0x7, 0xfe, 0x800000, 0x7, 0x7d08, 0x10, 0x7, 0x3, 0x5e0, 0x0, 0x45, 0x6ce, 0x1ff, 0xcbd, 0x2b, 0x6, 0x2, 0x8, 0x800, 0x8, 0x9, 0x4, 0x6, 0x6, 0xa948, 0x6e, 0x7f, 0x6, 0x6, 0x6, 0x0, 0x2, 0x4, 0x401, 0x6, 0xffffffff, 0xffff, 0x0, 0x3, 0x4, 0xfffffffa, 0x9, 0x8001, 0x101, 0x3, 0x9, 0xfff, 0x9, 0x8, 0x16d, 0x5, 0x2, 0x0, 0xc, 0x58, 0x9, 0xb, 0x32, 0x3, 0x9, 0x4, 0x4, 0x4, 0x6, 0x0, 0x4, 0x9, 0xffffffff, 0x98, 0xb, 0x8, 0xffff, 0x4, 0x242f, 0x5, 0xd, 0x8, 0x29e30efc, 0x1ff, 0x1, 0xa32, 0x101, 0x8, 0x32, 0x7, 0x1, 0x81, 0xf4, 0x0, 0xfe1, 0x3, 0x8, 0xffffffd4, 0x6, 0x986, 0x6, 0x3c4, 0x8ed, 0x401, 0xd89345f1, 0xe, 0x0, 0x1, 0x7, 0x8b9, 0x7fff, 0x40, 0x3, 0x1c500, 0xb, 0x4, 0x3, 0x915, 0x2, 0x1, 0x9, 0x3ff, 0xc, 0xb, 0x2, 0xa07c514, 0x9, 0x572, 0x7f, 0xff, 0x7, 0x3, 0xffffffff, 0x4080000, 0x8, 0x6, 0x8000000, 0x0, 0x2, 0xc4c, 0x6, 0x8, 0x9, 0x5, 0x9, 0x9, 0x100, 0x6, 0x2, 0x0, 0x7, 0x800, 0x8, 0x9, 0x7, 0x61a9, 0x9, 0xbfec, 0x3, 0x4ae, 0x376, 0x58, 0xfffffff4, 0x9, 0x10, 0x5, 0x8, 0x401, 0xc9bf, 0x1, 0x6, 0x3, 0x7fff, 0x3, 0xe7bd, 0x6, 0xfffff596, 0x1ff, 0x4, 0xfffffb34, 0x800, 0x5, 0x400, 0x96, 0x9, 0x0, 0xf8c, 0x1, 0x513, 0x2, 0x7f, 0x3, 0x5, 0x8, 0x9, 0xffffffff, 0x1, 0xc, 0x1, 0x1, 0x1, 0x6, 0x200, 0x1, 0x7, 0x7, 0xa, 0xc, 0x40, 0x8, 0x7, 0x80000000, 0x8, 0x3, 0x9, 0x10001, 0x3, 0x40, 0x375500, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x1, 0xfffffdd4, 0x2, 0x9, 0x3, 0x5, 0xd54, 0x8, 0x0, 0x5, 0x800, 0x7, 0x7fff, 0x7, 0x9, 0x5, 0x8, 0x9, 0x2, 0xac5e, 0x8, 0x8, 0x1, 0xa3, 0x5, 0x92, 0x0, 0x7ff, 0x9, 0x1, 0x77da, 0x0, 0x7ff0000, 0x3, 0x7, 0x5, 0x9, 0x8, 0x6, 0x735ab543, 0x4, 0x1, 0xfff, 0x7f, 0x800, 0x8, 0x9, 0x3df, 0x3, 0x6, 0x3, 0x5, 0x7fff, 0xb3, 0x8, 0x200, 0x3, 0xfff, 0x800, 0x8, 0x3, 0x1, 0x7fffffff, 0x6, 0xdf, 0x2c53, 0x10, 0x5, 0x8, 0xfffffffa, 0x6, 0xffff, 0x0, 0x10001, 0x3, 0x54d4, 0x601, 0x2, 0x2, 0x9, 0x101, 0x8, 0x0, 0x1, 0x6, 0x0, 0xbb, 0x1, 0x1fc0000, 0x0, 0x7, 0x7, 0x5, 0x1, 0xfffffffb, 0x10001, 0x1b070266, 0x7, 0x6, 0x4, 0x3, 0x38a6, 0x4, 0x3ff, 0xbc79, 0xfd, 0x0, 0x2, 0x8, 0x0, 0x8, 0xa241, 0x60, 0x9, 0x0, 0x6, 0x87a, 0x3, 0x9, 0x4, 0x6, 0x34, 0x7f, 0xfffffd40, 0x8000, 0x3dac, 0xfffffffe, 0x2, 0x9, 0x3, 0x2, 0x81, 0x7, 0x9, 0x2, 0xff, 0x2107, 0x1, 0x1, 0x7, 0x80000001, 0x3, 0x5, 0x15, 0x9, 0x0, 0x32, 0x25e, 0xad, 0x7fff, 0x4, 0x0, 0x8000, 0xfffffffd, 0x9, 0x7fff, 0xb, 0x8001, 0x3, 0x7fff, 0x1, 0x7, 0x78a, 0x2, 0xff, 0x7fff, 0x80000000, 0x653f, 0xb, 0x3, 0xf9, 0x0, 0x0, 0x1, 0x7fd5, 0x0, 0x1ff, 0x3, 0xd, 0x6, 0x773, 0x7ff, 0xecf, 0xfffffffd, 0x1, 0xa5a, 0x5, 0x33e, 0xe, 0x1, 0x7, 0x7f, 0x5, 0x3, 0xa14, 0x7fffffff, 0x7, 0x5, 0x1, 0x1ff, 0xffff, 0x61be734b, 0x4, 0x4, 0x1, 0x6, 0x1, 0x34c, 0x5, 0x0, 0x40, 0x0, 0x0, 0x3, 0x4, 0x2, 0x5, 0x0, 0x5, 0x4, 0xb73, 0xfffffff1, 0xf4d, 0x1, 0x69c8eafe, 0x5750ef5d, 0x1, 0x1, 0x401, 0x8, 0x3, 0x9, 0x2, 0x0, 0x6, 0x1, 0x0, 0x1, 0x29, 0x6, 0x0, 0x6, 0x2, 0x585, 0x41, 0x94, 0x4, 0xbc9, 0x8, 0x5, 0xffffffff, 0x0, 0x3ff, 0x6, 0x101]}, @TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3f9}]]}, {0xf6, 0x6, "f7365d032fc6448b96927b64759f70171cd7949d755c9aee434386ce36e053f04dca33cdac24eaf2530a7084ea7a3bc7f0fd8fc6e8596043f1c33f36a5746cbf84d5e22ecd0da2f6cdab55a7530e4acdd1c81f2985f7bb9d3b58d46b55912f652f8ae66b21e89217f45b66a93845eddf9d53e21e491a4d3de7bf643407b1c6e66ba7ad4f035945edea20aa554414be26e2b32e50a5a8d8a9667cb317220ee0bbe4a60bed81621c1bbd64bc1d4ff41b1e463662242e7310fee5f3f25d80d1cebae6f7572c0bfcfa27d818fb0a05963f107e992173a5534b0b059bc413e92a82669a5aefada14ce5953af5d8d8e0a5d7ae5eb8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_gact={0xc8, 0x15, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xff, 0x1, 0x0, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x401, 0x20000006, 0x4, 0x14}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x12bb, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x400, 0x8, 0x0, 0xffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x944}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x437, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0x2, 0x79ac0a7d, 0xfffff5ea}}]}, {0x17, 0x6, "b7da10de3e6172f9cdef6eb62ac04114b04bf9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x1c00}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4.318418754s ago: executing program 4 (id=240): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="001800"/17], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x460, &(0x7f0000000340)={0x0, 0x40000020, 0x100, 0x2, 0x34d}, &(0x7f00000000c0), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000001880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x9, [@datasec={0x3, 0x3, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x985}, {0x4, 0x100}, {0x4, 0x9, 0x3}], "3f2bd8"}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0xb, 0x3}, {0xe}, {0x2, 0x3}, {0x6, 0x3}, {0x8, 0x3}, {0xc, 0x1}]}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0x5}, @datasec={0xd, 0x8, 0x0, 0xf, 0x2, [{0x5, 0xb, 0xf71}, {0x2, 0x8, 0xffff}, {0x3, 0x4, 0x1}, {0x4, 0x5, 0x7}, {0x4, 0x4, 0x2dd5}, {0x1, 0xc, 0xfebb}, {0x5, 0x3, 0xfffffff8}, {0x3, 0x8, 0xffc2}], "d8f8"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x4}}, @union={0x9, 0x5, 0x0, 0x5, 0x0, 0x7, [{0x1, 0x2, 0x5}, {0xe, 0x0, 0x6}, {0x8, 0x4, 0x4}, {0xf, 0x2, 0xffff}, {0xe, 0x5, 0x7fffffff}]}]}, {0x0, [0x30, 0x61, 0x61, 0x61, 0x30, 0x5f, 0x0]}}, &(0x7f0000000400)=""/18, 0x185, 0x12, 0x1, 0x400, 0x206591a814994681, @value}, 0x28) sendmmsg$inet6(r3, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x4000007}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6119ae545) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x4}}, 0x10) semget$private(0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000700)="b40547d445ebe42e77db9ce0aeab14ef7867fcad92ca943eac47b04ff95a0000000000000db254521b705cccc1f635a974e3194d5ac67379e213d1fbc85db0df66d5ad8a79a010c2e2f8bff9b2a1209cce4c501bf4ffc0ea50565b6776be02cda7fcf0392cf0818f00c9708d286a21b4d8d98358e8ab017e0106809782578ab1e751dc8461e6239376e6f3a3d8b81f587d920836f2b939a02aa4f54bb9c91ccf538f79b580afad1a924ff4dd43cead5a295c1fb2758c75869ec1fc141bd3a44029a48223f3cc7d8c972a29f4040bac71eef5b5bcb2b913771210a994ebfb419f3b75cf97b7a9c461da520c0b4964f498f0c7c38d", 0xf4}, {0x0}], 0x2) 3.702151719s ago: executing program 1 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r2, 0x5501) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000500)=0x0) timer_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x8010, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/rt_acct\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000001740)=[{&(0x7f0000001800)="c0b3f641e93358db730fa114ef6fd9c6705352e1b8dfb95390d3ebb8cd73712ed6131a236b661abbe3038b46fa6f7c0f1e5c157cc3b5089582c0ef2a0fb81c4b6d478f7be370faea02f562a6fdead5a874b85495136d707a1cef985f3a56aeab38fa694e94d9e726bc11b61f00000000000000ed469d85cbf48688f6f8b4cd643a32a94ab6ec8efc569356a30a982aeae44ce595e461a425b08c032a84b79b477b410627d19c42cbb08d", 0xaa}, {&(0x7f0000000100)="8323000000001d39afc62ceefc8936f299eecf", 0x13}, {&(0x7f0000000180)}, {&(0x7f00000001c0)}, {&(0x7f0000000700)="820566a0e5038adaeacf19e7470234a058fa1a347381c790661dde230dc4150ae23ec76b77396270f45644f86e8d09edab75a26acb1e6209b5be5b40d09ba299b5c626c28448e5f04342e71e03d98aab89bf23721c77e3d1d2553eef61a61dc700000000000010bc27d1586457875f2878644dc8f4c8d47c9edc1bdb46392e3b52895de73f4d8808e1bd71ed7a571dc4f41465e8ad35", 0x96}, {&(0x7f0000000380)="c77d467908bfdef41403f806aa8abd7163a810e03642f3dea6321a7b21b738ed132db614140e7dc513a4f44adab6b69a9208bc55cf77e018bf5821baa9521cedb29a6d43c72b87ca91a291", 0x4b}, {&(0x7f0000000400)="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", 0x1de}], 0x7, 0x0) pread64(r5, &(0x7f0000001240)=""/102387, 0x18ff3, 0x2000000000) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) close_range(r1, r8, 0x0) 3.681248297s ago: executing program 2 (id=242): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) socket(0xa, 0x3, 0x87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="01000100000000000000010001", 0xd, 0xfffffffffffffffd) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r2, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x24}}, 0x8000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000008280)={0x2020, 0x0, 0x0}, 0x206f) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0/../file0/file0\x00', 0x0, 0x2000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x300000, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) 3.267274887s ago: executing program 0 (id=243): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket(0x2, 0x80805, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r2, 0x2}, 0xffffffffffffff0d) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x1, r4, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xca1}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="100000000914033f00000000000000009abe08189e88bc4662c170fd0e1bdcc5f4315d86b5db2088f787dd8670a3e4255ad63723ae0d1bcbb2669e7a9c23409a5f2d1242b62083131ca2260f00cbc09c86a2aaaf0b4e91006bd0facdc2425e5a440a9a8d"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18060000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB="000000ddff000000b703000000000000850000000c000000b7070000000000001801ffffff7f000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000000400000000000700850000000600000095000000000000001083ceced6311983890bf89162f2cba3d302873c2e896a6555670bdca14a1fa3bb7201893b9678e3cc2cd04d2d8219da3c6e61131994cf3791c7ba1058b6f5c7b8"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x3a) sendmmsg(r8, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000113, 0x1000000) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendto$l2tp(r6, &(0x7f0000000040)="e5786a0d000000000000c8", 0xb, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvmsg(r6, 0x0, 0x20) landlock_create_ruleset(&(0x7f0000000400)={0x0, 0x3, 0x2}, 0x18, 0x2) 3.266155864s ago: executing program 3 (id=244): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) r3 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x3, 0x3e}, &(0x7f00000001c0), &(0x7f00000000c0)) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) write$char_usb(r1, 0x0, 0xfefd) syz_usb_disconnect(r0) 3.106473627s ago: executing program 0 (id=245): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000300)=0xe8) r3 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$tun(r6, &(0x7f0000000000)=ANY=[@ANYRES32], 0x1c) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1118004, &(0x7f0000000500)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}, {@allow_other}], [{@obj_role={'obj_role', 0x3d, '{\\-J&%'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@fowner_gt={'fowner>', r4}}, {@uid_gt={'uid>', r8}}, {@obj_type={'obj_type', 0x3d, 'SEG6\x00'}}, {@subj_user={'subj_user', 0x3d, '/\\#'}}, {@subj_role}]}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000004000280", @ANYRES32=r9, @ANYBLOB, @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r12, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, r12, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd7}]}, 0x38}}, 0x40004) 2.947176759s ago: executing program 4 (id=246): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000045000000700000001000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\t\x00'/14], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001300)={r3, &(0x7f0000000340), 0x0}, 0x20) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x67, @mcast1, 0x2}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x4c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x9, @local, 0x3}]}, &(0x7f0000000300)=0x10) listen(r2, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdb2504000010211200b1407697243d72b51509beb9cf"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 2.59644046s ago: executing program 2 (id=247): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) bind$tipc(r0, 0x0, 0x0) 2.162513507s ago: executing program 1 (id=248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000000000000000002e00000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0xd06, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 1.557053761s ago: executing program 2 (id=249): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000045000000700000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\t\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001300)={r3, &(0x7f0000000340), 0x0}, 0x20) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x67, @mcast1, 0x2}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x4c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x9, @local, 0x3}]}, &(0x7f0000000300)=0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdb2504000010211200b1407697243d72b51509beb9cf"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.434770387s ago: executing program 1 (id=250): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x11, 0xdc0, 0xdc0, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 1.334679197s ago: executing program 4 (id=251): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, "a002424a2533e3a864800907fa13b7096d0ae2"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, 0x1ba8847c99}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61103400000000006113440000000000bfa00000000000000700000008ffffffd50301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e033200008c71ef2885634a8270e7112b00"/30], 0xffdd) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000040)={@local, @rand_addr=0x64010101}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aa001c000000000002907800000000e00003001100907800000000"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.287146249s ago: executing program 1 (id=252): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) fchdir(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x0, 0x10000, 0x100000001, 0x8}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r6, 0x0, 0x0) bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x31008060}, 0xc) move_mount(r1, &(0x7f00000002c0)='\x00', r1, &(0x7f0000000340)='./file0\x00', 0x100) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7fff, 0x0, 0x7}}}}]}, 0x44}}, 0x4000004) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r9, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r9, 0x0, 0x0, 0xa7, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xfff1}, {0xe, 0x3}}}, 0x24}}, 0x4040840) 1.202941846s ago: executing program 0 (id=253): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0x4, 0x519b}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x1, 0x0, &(0x7f00000001c0)=[{0x9, 0xc}]}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1bb30400000000000000010000000c000600020000000200000008000300", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x60) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x8000, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0x8}}], [{@obj_user={'obj_user', 0x3d, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, {@subj_type={'subj_type', 0x3d, '#:'}}, {@measure}, {@fsname={'fsname', 0x3d, 'aname'}}]}}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 1.130550459s ago: executing program 4 (id=254): syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00', @ANYBLOB="0d0729bd7000040000000000000006001d0025080000050012000b00000006000e000200000008001900640101010500130008000000062f1b004e210000050004000500000006001b004e22000008d85d23"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x20}}, 0x4000010) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)}, 0x20000000) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x200c0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r7, 0x3b84, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) 129.643218ms ago: executing program 4 (id=255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x1c00, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1bd4, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0x8}}, @TCA_BPF_ACT={0x1bb0, 0x1, [@m_gact={0xbc, 0x8, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1b000, 0x0, 0x10000000, 0x1000, 0x9c}}]}, {0x75, 0x6, "042dde06afe5bc74f723fed6a98caf00609881e11eb0925c7c2a8448612c5fdda5597c233a5d7326fa030b93d7a199417c84c03014e0f28c0b8159ad270a8c511eb9ab4803d559a0a948ca20fd48d82611328b8cf18d670898d54a2928444ec972318f04b5c0c145f2b0c5def18e34e2c8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x1a28, 0x10, 0x0, 0x0, {{0xb}, {0x1908, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x6, 0x8001, 0x8, 0x8, 0xc69d, 0x80000001, 0x5, 0x3c, 0x100, 0x101, 0x9, 0x3ff, 0x0, 0x3, 0x8, 0x6, 0xfffffff9, 0x6, 0xc8b, 0x8, 0x20cc10f0, 0x8, 0xffffffff, 0x80000001, 0x4, 0x1ff, 0xf, 0xffffffff, 0x6bde, 0xd, 0x7, 0x2af, 0x6ac6cfc5, 0xb, 0x8, 0x7, 0xd, 0x0, 0x9, 0xfffffe00, 0xffffff80, 0x5, 0x200, 0x2, 0x9, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x1, 0x2, 0x1, 0x5, 0x400, 0x4, 0xfffffff0, 0x7, 0x1, 0x7ff, 0x64, 0x9e8e, 0x0, 0x5, 0x9, 0x6, 0x9, 0x101, 0x100, 0x40, 0x6, 0x1ff, 0x1, 0x100, 0xfffffffb, 0x7fff, 0x6, 0xb0, 0x8, 0x1, 0x2e000543, 0x6, 0x3ff, 0x2, 0xa3, 0x1, 0x9, 0x80000001, 0xb, 0x80, 0x0, 0x40, 0x7, 0x2000000, 0x1, 0x3, 0x1138, 0x4, 0xffffff18, 0x9, 0xfff, 0xfffffff7, 0x8, 0x3ff, 0x0, 0xce000000, 0x0, 0x6b, 0x3, 0xfffffffe, 0x97b, 0x4, 0x3, 0x3, 0x6, 0x9, 0xac, 0xc, 0x2, 0xfffffffb, 0x6, 0xeb, 0x8001, 0x4, 0x3, 0x800, 0x0, 0x1, 0x49fe, 0x81, 0x6, 0xc, 0x80000000, 0x0, 0x8, 0x19d, 0x101, 0x6, 0x3e480000, 0x8, 0x7a8, 0xfff, 0x6e25, 0x9, 0x1000, 0x5, 0xffff30c6, 0x5ece, 0x0, 0x8001, 0x9, 0x7, 0x7ff, 0x8001, 0x401, 0x240000, 0x8, 0x0, 0x5, 0x60f5, 0x101, 0xedf4, 0x9, 0x80, 0x1, 0xe42f, 0xc86c, 0x1, 0x5, 0x5, 0xe694, 0x7ff, 0xc6f, 0xe42b, 0x2, 0x1, 0xff, 0x8, 0x1, 0x3, 0x8, 0x155, 0x747, 0x7315, 0xf30, 0x5, 0x28b, 0x5, 0x61f2626c, 0x401, 0x4, 0x9, 0x8, 0x23, 0xdc, 0x7b60, 0x6, 0x7, 0x9, 0x7, 0xe, 0x0, 0x1ff, 0x442b, 0x2, 0x9, 0x3, 0x2, 0x5, 0x6, 0x1, 0x401, 0x1, 0x5, 0xd3ae, 0x73, 0x1, 0x9, 0x81, 0xffffff4c, 0x8b, 0x4, 0x6, 0x3, 0x0, 0x8, 0xffffffff, 0x7, 0xdbc, 0x5, 0x8, 0x0, 0x8, 0xa, 0x1, 0x0, 0x1, 0x8, 0xffff, 0x5, 0x1, 0x4, 0x9, 0xd5, 0x9, 0x200, 0x4, 0xd, 0x9, 0x1, 0x2, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x0, 0x1ff, 0x9, 0x80000000, {0x1, 0x2, 0x4, 0x9, 0x1, 0x8}, {0x1, 0x0, 0x896, 0x4, 0x98, 0x4e84}, 0x8, 0x0, 0xe}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0x0, 0x0, 0xcc8a, 0x47309ac, 0x400000, 0x28000000, 0xa, 0x8, 0x31c, 0xc2ee, 0x101, 0x2, 0x0, 0x6, 0x8, 0xffff749f, 0x8, 0xa12, 0x3, 0x1, 0x6, 0x1c25, 0x3, 0x8, 0x28, 0x4, 0x9, 0x46, 0x7, 0x5, 0x8, 0x5, 0x6, 0xa, 0x0, 0x7f, 0x2eb, 0x10000, 0xed, 0x9, 0xca16, 0x6ef8fe75, 0x11a5, 0x7, 0xa5e, 0x8, 0x0, 0x9, 0x100, 0x5, 0x7fffffff, 0x3ff, 0x7, 0x0, 0x1, 0x55, 0x1, 0x800, 0x401, 0x6, 0x800, 0xffffffff, 0x0, 0x9, 0xfffffff8, 0x1, 0x400, 0x3, 0x7fff, 0x4, 0x4000, 0x9, 0x6, 0xeda, 0xa76, 0x8, 0x5, 0xc4, 0x1000, 0x94d7, 0x80000001, 0xdbd, 0xfffffffc, 0x7, 0x8, 0x2, 0x10, 0x8, 0xfffffff6, 0x5, 0x0, 0x10, 0x1b, 0x81, 0x3, 0xbc5, 0x6, 0x1e, 0x1, 0x8, 0x2, 0xfc408c9, 0x0, 0x22bc52ba, 0x4, 0x9, 0xffffabc6, 0x5, 0xfffffc50, 0x7, 0x1, 0x24a, 0x0, 0x6, 0x101, 0x8000, 0xe, 0xecb, 0x0, 0x8f29, 0xd, 0x7fffffff, 0x7, 0x646, 0x2, 0x1ff, 0x80000000, 0x4, 0x6, 0x1000, 0xe, 0xd6, 0xf, 0x1, 0x2, 0x1, 0xfffffffa, 0x2, 0x6, 0xeaea, 0x4, 0x7, 0x2, 0x7, 0x6452, 0xfff, 0x6, 0x9, 0xffffffff, 0x5, 0x2, 0x7, 0xffff6eb5, 0x7, 0x1000, 0x10000, 0x4, 0x24, 0x10000, 0x0, 0x2469, 0x800, 0x6, 0x2, 0x3, 0xc17f, 0x9, 0xed25, 0x2, 0x3, 0x3ff, 0xaf, 0x2, 0x29, 0x6, 0x2, 0x9, 0x5, 0x24ff, 0x9, 0x10000, 0x8, 0x8, 0x7, 0x5, 0xb01, 0x7, 0x3, 0x4, 0x7, 0xb3b, 0x3732, 0xdd44, 0x7, 0x7fff, 0x5, 0x0, 0x9, 0x7ff, 0x2, 0x6, 0x8, 0x5, 0xc2d3, 0x4, 0x23, 0x1000, 0x1, 0x0, 0x9, 0xa, 0x4, 0x401, 0x8680, 0x6, 0x8, 0x6, 0xff, 0x3, 0x8, 0x1, 0x2, 0x807f, 0xf4, 0x9, 0x3ff, 0x9, 0xc, 0x9, 0x6, 0x8, 0x0, 0x4, 0x9, 0x80, 0xfffffffb, 0x3, 0x1, 0x3, 0xfffffff8, 0x0, 0x6, 0x5, 0x401, 0x2, 0x101, 0x6, 0xffff, 0x1000, 0x2, 0x1c0000, 0x5c7c, 0x7, 0x8a05]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x2, 0x0, 0x9, 0x10000, 0x9, 0x8, 0x8, 0x99, 0x2, 0xfa43, 0xfffffffd, 0x9, 0x9, 0x4, 0x7, 0xfff, 0x8, 0x7fff, 0x6, 0x1, 0x8000, 0x1, 0x4, 0x2, 0x9cab, 0x80000000, 0x7f, 0x0, 0x8, 0x80000000, 0x1215, 0x5, 0xa, 0x1c1, 0xb, 0x6, 0x2, 0x5, 0x10001, 0x9, 0x4, 0x7fff, 0x0, 0x5, 0xfffffffc, 0x4, 0x3, 0x2, 0x1000, 0x5, 0x9, 0x3, 0x9, 0x3, 0x0, 0x4, 0x80000000, 0x4, 0x6, 0x40, 0x0, 0x1, 0xfffffffe, 0x7, 0x52c6, 0x9, 0x7fffffff, 0xe, 0x0, 0x3, 0x156f, 0x4, 0xc, 0x1ff, 0x8, 0x5, 0x3, 0x5, 0x1, 0x7, 0x9, 0x3, 0x10, 0xffffffff, 0x1, 0x8, 0x3, 0x1000, 0x9, 0xfffffffe, 0x4, 0x1, 0x7fffffff, 0x2, 0x3, 0x5, 0xfffffff4, 0x9, 0x3, 0xe8, 0x7, 0x50, 0x4, 0x8, 0x12182ea1, 0x8000, 0xbff, 0x0, 0x69d, 0x0, 0x2, 0x2, 0x7, 0x4, 0x7, 0x3, 0x0, 0xfffffff9, 0x3ff, 0x5d2, 0x0, 0x0, 0xfffffffc, 0xffffff7f, 0x3, 0x9, 0x1c0, 0x5, 0xfff, 0x101, 0xe061, 0xffff, 0xbc, 0xfffffffa, 0x7, 0x9, 0x3, 0xc, 0x1, 0x5, 0xffff, 0x7, 0x41, 0x2, 0x1ff, 0x1, 0xfff, 0x6, 0xffff, 0x200, 0x5, 0xf7, 0xd, 0x7, 0x1, 0x7, 0x651bd7b5, 0x8000, 0x8, 0xfffff000, 0x2, 0x84, 0x200, 0x9, 0x44, 0x5, 0xc, 0x2, 0x3, 0x2, 0x2, 0x6523, 0xfffffffb, 0xb1, 0x0, 0x8000, 0xe6, 0x6, 0x0, 0x5, 0x1, 0x7f, 0x3, 0x7, 0x8, 0x5f3ab808, 0x7, 0x10001, 0x6, 0x1f746115, 0x261, 0xd16, 0x6, 0x101, 0x6, 0x3ff, 0x5, 0xffffffb4, 0x9, 0xfffffbb0, 0x3, 0x7, 0x4, 0x0, 0x9f, 0x4, 0xc6e, 0x1, 0x4, 0x7, 0x1, 0x8, 0xb4, 0x6, 0x8, 0x4444e259, 0x3, 0x43, 0x99, 0x1e6, 0x2, 0x1, 0x6, 0x5, 0x0, 0x1, 0x9, 0x2, 0x40000000, 0x3, 0x6, 0x3, 0x4, 0x4, 0x1, 0x4, 0x6, 0x9a8, 0x4, 0xdb, 0x8, 0x8, 0x1, 0x800, 0x259, 0x8001, 0xd, 0x2, 0x78b2463a, 0x6, 0x4, 0x9, 0x9, 0x0, 0xb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x10000000, 0x7, 0x40, 0x3, {0x7, 0x0, 0x9, 0x4, 0x6, 0xfffffffc}, {0x0, 0x0, 0x5, 0x6, 0x4, 0x4be}, 0x3, 0x5, 0x5}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff52}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0x5, 0x9, 0xfff, 0x8, 0x2, 0x7fffffff, 0x7, 0x1, 0x8, 0x5, 0x4e6, 0x1000, 0xee, 0x0, 0x4, 0x80000001, 0x4, 0xf, 0x80000000, 0x4, 0x1700, 0x1, 0xa2, 0xc9f3, 0x800, 0xeb1, 0x65da, 0x5, 0x3, 0x400, 0x7, 0x40, 0x1, 0xc, 0x67f56dc4, 0x415, 0x5, 0x7fffffff, 0x5, 0x6, 0xfff, 0xea, 0xe, 0xa, 0x0, 0x0, 0x7, 0xf, 0xffffffa1, 0x4, 0x3, 0x400, 0x853, 0x10001, 0x3e0, 0xc64, 0x4, 0xfff, 0x1c0, 0x2, 0x6, 0x63, 0x81, 0x1, 0xfbe4, 0x8, 0x1, 0x1, 0x4, 0x2, 0x2c3, 0x0, 0xbad8, 0x4d9a, 0x8, 0x3, 0x13, 0x3, 0x101, 0x6, 0x7, 0x7, 0x4, 0xe, 0x15, 0x6, 0x3, 0x8000, 0x5, 0x7ff, 0x81, 0x5, 0x80000000, 0x3e, 0x5, 0x7, 0x7fffffff, 0x8, 0x7, 0x10001, 0x96, 0x9538, 0x9, 0x7, 0xfffffff9, 0x4, 0x3, 0x29d, 0xf2fc, 0x1, 0x7, 0x9, 0x8, 0x7, 0xf396, 0x4, 0x5, 0x1, 0x9, 0x0, 0x7, 0x8a, 0x0, 0x1000, 0xffffffff, 0x401, 0x8, 0x8, 0x9, 0xffffd0a8, 0x1, 0x80, 0x4, 0x0, 0x8000, 0x5, 0x3, 0x4ff, 0xffffffff, 0x8000, 0x6, 0x1, 0x2, 0x8, 0x3, 0x6, 0x24c, 0x7ff, 0x8000, 0x64, 0x6, 0xe86, 0x5, 0x81, 0xfffffff9, 0x1, 0x5, 0xa04, 0x8000, 0x5, 0x80000001, 0x1b8, 0x9, 0xc730, 0x9, 0x31489687, 0xfffffffb, 0x0, 0x56, 0xffffffff, 0xb, 0x7, 0x81, 0x5, 0x8, 0x1f87, 0x26f7, 0x4be, 0x58d, 0x6, 0x0, 0x3, 0x4, 0x4, 0x80000001, 0x0, 0x5, 0x7, 0x0, 0x4, 0x4, 0x401, 0x3ff, 0x1, 0xd, 0x5, 0x7fffffff, 0x5, 0x9, 0x4, 0x0, 0x6, 0x25, 0x1, 0x9, 0x7ff, 0x5, 0x101, 0x1a00, 0xf8c, 0x2, 0x8, 0x7fffffff, 0x5, 0x7, 0x604, 0x3, 0x76, 0xa, 0x9, 0x475, 0xf, 0x7, 0x8, 0x10001, 0x5, 0xfd, 0x5, 0xb4, 0x22d0, 0x4, 0x9, 0x8, 0x2, 0xa6, 0x8000, 0x18000, 0x8000, 0x4, 0x3, 0x200, 0x80, 0x6, 0x0, 0xffffffff, 0xb, 0x2, 0x5, 0xf82, 0x0, 0xffff7fff, 0x5, 0x67, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7355, 0x64, 0x5, 0xc40, 0x2, 0x7fffffff, 0x3, 0x9, 0x4, 0x0, 0xb, 0x1, 0x7, 0x0, 0x7, 0x1, 0x8, 0xe2a, 0x0, 0x37, 0xa, 0x0, 0x5, 0x35f2, 0x7, 0x80000000, 0x5, 0x9, 0x0, 0x7, 0x8, 0xffffffff, 0x80cf, 0x8, 0x8, 0x2, 0x8, 0x75a0, 0xa0, 0xece1, 0x7, 0xfe, 0x800000, 0x7, 0x7d08, 0x10, 0x7, 0x3, 0x5e0, 0x0, 0x45, 0x6ce, 0x1ff, 0xcbd, 0x2b, 0x6, 0x2, 0x8, 0x800, 0x8, 0x9, 0x4, 0x6, 0x6, 0xa948, 0x6e, 0x7f, 0x6, 0x6, 0x6, 0x0, 0x2, 0x4, 0x401, 0x6, 0xffffffff, 0xffff, 0x0, 0x3, 0x4, 0xfffffffa, 0x9, 0x8001, 0x101, 0x3, 0x9, 0xfff, 0x9, 0x8, 0x16d, 0x5, 0x2, 0x0, 0xc, 0x58, 0x9, 0xb, 0x32, 0x3, 0x9, 0x4, 0x4, 0x4, 0x6, 0x0, 0x4, 0x9, 0xffffffff, 0x98, 0xb, 0x8, 0xffff, 0x4, 0x242f, 0x5, 0xd, 0x8, 0x29e30efc, 0x1ff, 0x1, 0xa32, 0x101, 0x8, 0x32, 0x7, 0x1, 0x81, 0xf4, 0x0, 0xfe1, 0x3, 0x8, 0xffffffd4, 0x6, 0x986, 0x6, 0x3c4, 0x8ed, 0x401, 0xd89345f1, 0xe, 0x0, 0x1, 0x7, 0x8b9, 0x7fff, 0x40, 0x3, 0x1c500, 0xb, 0x4, 0x3, 0x915, 0x2, 0x1, 0x9, 0x3ff, 0xc, 0xb, 0x2, 0xa07c514, 0x9, 0x572, 0x7f, 0xff, 0x7, 0x3, 0xffffffff, 0x4080000, 0x8, 0x6, 0x8000000, 0x0, 0x2, 0xc4c, 0x6, 0x8, 0x9, 0x5, 0x9, 0x9, 0x100, 0x6, 0x2, 0x0, 0x7, 0x800, 0x8, 0x9, 0x7, 0x61a9, 0x9, 0xbfec, 0x3, 0x4ae, 0x376, 0x58, 0xfffffff4, 0x9, 0x10, 0x5, 0x8, 0x401, 0xc9bf, 0x1, 0x6, 0x3, 0x7fff, 0x3, 0xe7bd, 0x6, 0xfffff596, 0x1ff, 0x4, 0xfffffb34, 0x800, 0x5, 0x400, 0x96, 0x9, 0x0, 0xf8c, 0x1, 0x513, 0x2, 0x7f, 0x3, 0x5, 0x8, 0x9, 0xffffffff, 0x1, 0xc, 0x1, 0x1, 0x1, 0x6, 0x200, 0x1, 0x7, 0x7, 0xa, 0xc, 0x40, 0x8, 0x7, 0x80000000, 0x8, 0x3, 0x9, 0x10001, 0x3, 0x40, 0x375500, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x1, 0xfffffdd4, 0x2, 0x9, 0x3, 0x5, 0xd54, 0x8, 0x0, 0x5, 0x800, 0x7, 0x7fff, 0x7, 0x9, 0x5, 0x8, 0x9, 0x2, 0xac5e, 0x8, 0x8, 0x1, 0xa3, 0x5, 0x92, 0x0, 0x7ff, 0x9, 0x1, 0x77da, 0x0, 0x7ff0000, 0x3, 0x7, 0x5, 0x9, 0x8, 0x6, 0x735ab543, 0x4, 0x1, 0xfff, 0x7f, 0x800, 0x8, 0x9, 0x3df, 0x3, 0x6, 0x3, 0x5, 0x7fff, 0xb3, 0x8, 0x200, 0x3, 0xfff, 0x800, 0x8, 0x3, 0x1, 0x7fffffff, 0x6, 0xdf, 0x2c53, 0x10, 0x5, 0x8, 0xfffffffa, 0x6, 0xffff, 0x0, 0x10001, 0x3, 0x54d4, 0x601, 0x2, 0x2, 0x9, 0x101, 0x8, 0x0, 0x1, 0x6, 0x0, 0xbb, 0x1, 0x1fc0000, 0x0, 0x7, 0x7, 0x5, 0x1, 0xfffffffb, 0x10001, 0x1b070266, 0x7, 0x6, 0x4, 0x3, 0x38a6, 0x4, 0x3ff, 0xbc79, 0xfd, 0x0, 0x2, 0x8, 0x0, 0x8, 0xa241, 0x60, 0x9, 0x0, 0x6, 0x87a, 0x3, 0x9, 0x4, 0x6, 0x34, 0x7f, 0xfffffd40, 0x8000, 0x3dac, 0xfffffffe, 0x2, 0x9, 0x3, 0x2, 0x81, 0x7, 0x9, 0x2, 0xff, 0x2107, 0x1, 0x1, 0x7, 0x80000001, 0x3, 0x5, 0x15, 0x9, 0x0, 0x32, 0x25e, 0xad, 0x7fff, 0x4, 0x0, 0x8000, 0xfffffffd, 0x9, 0x7fff, 0xb, 0x8001, 0x3, 0x7fff, 0x1, 0x7, 0x78a, 0x2, 0xff, 0x7fff, 0x80000000, 0x653f, 0xb, 0x3, 0xf9, 0x0, 0x0, 0x1, 0x7fd5, 0x0, 0x1ff, 0x3, 0xd, 0x6, 0x773, 0x7ff, 0xecf, 0xfffffffd, 0x1, 0xa5a, 0x5, 0x33e, 0xe, 0x1, 0x7, 0x7f, 0x5, 0x3, 0xa14, 0x7fffffff, 0x7, 0x5, 0x1, 0x1ff, 0xffff, 0x61be734b, 0x4, 0x4, 0x1, 0x6, 0x1, 0x34c, 0x5, 0x0, 0x40, 0x0, 0x0, 0x3, 0x4, 0x2, 0x5, 0x0, 0x5, 0x4, 0xb73, 0xfffffff1, 0xf4d, 0x1, 0x69c8eafe, 0x5750ef5d, 0x1, 0x1, 0x401, 0x8, 0x3, 0x9, 0x2, 0x0, 0x6, 0x1, 0x0, 0x1, 0x29, 0x6, 0x0, 0x6, 0x2, 0x585, 0x41, 0x94, 0x4, 0xbc9, 0x8, 0x5, 0xffffffff, 0x0, 0x3ff, 0x6, 0x101]}, @TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3f9}]]}, {0xf6, 0x6, "f7365d032fc6448b96927b64759f70171cd7949d755c9aee434386ce36e053f04dca33cdac24eaf2530a7084ea7a3bc7f0fd8fc6e8596043f1c33f36a5746cbf84d5e22ecd0da2f6cdab55a7530e4acdd1c81f2985f7bb9d3b58d46b55912f652f8ae66b21e89217f45b66a93845eddf9d53e21e491a4d3de7bf643407b1c6e66ba7ad4f035945edea20aa554414be26e2b32e50a5a8d8a9667cb317220ee0bbe4a60bed81621c1bbd64bc1d4ff41b1e463662242e7310fee5f3f25d80d1cebae6f7572c0bfcfa27d818fb0a05963f107e992173a5534b0b059bc413e92a82669a5aefada14ce5953af5d8d8e0a5d7ae5eb8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_gact={0xc8, 0x15, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xff, 0x1, 0x0, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x401, 0x20000006, 0x4, 0x14}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x12bb, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x400, 0x8, 0x0, 0xffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x944}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x437, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0x2, 0x79ac0a7d, 0xfffff5ea}}]}, {0x17, 0x6, "b7da10de3e6172f9cdef6eb62ac04114b04bf9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x1c00}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 76.21281ms ago: executing program 0 (id=256): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x8040, 0x0) syz_pidfd_open(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x4, 0x541502) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x208040, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r4, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) r5 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x4, &(0x7f0000000080)=ANY=[]) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x2}, 0x0) syz_io_uring_setup(0x449f, &(0x7f0000000500)={0x0, 0x5d1, 0x1, 0x7ffc, 0x332, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 41.768488ms ago: executing program 2 (id=257): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ad, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x20}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=258): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0xfffffffffffffdcb, 0x2}]}, @IFLA_LINKMODE={0x5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x44}}, 0x8054) pause() socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x48}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ffffffff000000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 74.866140][ T5805] cgroup: Unknown subsys name 'net' [ 75.018351][ T5805] cgroup: Unknown subsys name 'cpuset' [ 75.027886][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.608749][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.910805][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.919653][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.928016][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.937067][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.944775][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.953910][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.962423][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.970010][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.979886][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.988241][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.997995][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.005846][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.013973][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.040110][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.054212][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.061980][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.065062][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.074777][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.077328][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.086926][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.136298][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.144625][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.167786][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.200134][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.212062][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.722055][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 81.817401][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 81.890625][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 82.058812][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.066702][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.073985][ T5815] bridge_slave_0: entered allmulticast mode [ 82.081412][ T5815] bridge_slave_0: entered promiscuous mode [ 82.110406][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 82.132705][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.140183][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.147471][ T5815] bridge_slave_1: entered allmulticast mode [ 82.154921][ T5815] bridge_slave_1: entered promiscuous mode [ 82.162190][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 82.312504][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.319790][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.327439][ T5827] bridge_slave_0: entered allmulticast mode [ 82.334828][ T5827] bridge_slave_0: entered promiscuous mode [ 82.345697][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.357997][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.397575][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.405202][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.412378][ T5827] bridge_slave_1: entered allmulticast mode [ 82.419753][ T5827] bridge_slave_1: entered promiscuous mode [ 82.444757][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.451880][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.459458][ T5823] bridge_slave_0: entered allmulticast mode [ 82.467210][ T5823] bridge_slave_0: entered promiscuous mode [ 82.475194][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.482335][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.490014][ T5823] bridge_slave_1: entered allmulticast mode [ 82.497750][ T5823] bridge_slave_1: entered promiscuous mode [ 82.593931][ T5815] team0: Port device team_slave_0 added [ 82.603721][ T5815] team0: Port device team_slave_1 added [ 82.653033][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.688039][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.697283][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.704864][ T5831] bridge_slave_0: entered allmulticast mode [ 82.712081][ T5831] bridge_slave_0: entered promiscuous mode [ 82.722043][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.738540][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.745986][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.753152][ T5819] bridge_slave_0: entered allmulticast mode [ 82.761138][ T5819] bridge_slave_0: entered promiscuous mode [ 82.770962][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.781114][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.788130][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.814553][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.826312][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.833796][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.841429][ T5831] bridge_slave_1: entered allmulticast mode [ 82.849456][ T5831] bridge_slave_1: entered promiscuous mode [ 82.858591][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.882581][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.890614][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.898638][ T5819] bridge_slave_1: entered allmulticast mode [ 82.906592][ T5819] bridge_slave_1: entered promiscuous mode [ 82.939385][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.946656][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.973191][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.034593][ T5827] team0: Port device team_slave_0 added [ 83.056973][ T5823] team0: Port device team_slave_0 added [ 83.078869][ T5827] team0: Port device team_slave_1 added [ 83.102936][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.115323][ T5823] team0: Port device team_slave_1 added [ 83.125656][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.128493][ T5826] Bluetooth: hci2: command tx timeout [ 83.138730][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.140479][ T5821] Bluetooth: hci1: command tx timeout [ 83.155140][ T56] Bluetooth: hci0: command tx timeout [ 83.181425][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.205820][ T5826] Bluetooth: hci3: command tx timeout [ 83.246379][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.253379][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.280088][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.290820][ T5826] Bluetooth: hci4: command tx timeout [ 83.311838][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.321896][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.349079][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.381332][ T5815] hsr_slave_0: entered promiscuous mode [ 83.388492][ T5815] hsr_slave_1: entered promiscuous mode [ 83.396288][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.403255][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.429544][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.454619][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.461636][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.488490][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.502314][ T5819] team0: Port device team_slave_0 added [ 83.511667][ T5819] team0: Port device team_slave_1 added [ 83.528020][ T5831] team0: Port device team_slave_0 added [ 83.571645][ T5831] team0: Port device team_slave_1 added [ 83.600383][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.607652][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.634105][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.711414][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.718736][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.745399][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.769358][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.776398][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.802888][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.821345][ T5827] hsr_slave_0: entered promiscuous mode [ 83.828197][ T5827] hsr_slave_1: entered promiscuous mode [ 83.835320][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.843062][ T5827] Cannot create hsr debugfs directory [ 83.881609][ T5823] hsr_slave_0: entered promiscuous mode [ 83.888316][ T5823] hsr_slave_1: entered promiscuous mode [ 83.894758][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.902363][ T5823] Cannot create hsr debugfs directory [ 83.921317][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.932290][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.958282][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.100135][ T5819] hsr_slave_0: entered promiscuous mode [ 84.106759][ T5819] hsr_slave_1: entered promiscuous mode [ 84.112870][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.120557][ T5819] Cannot create hsr debugfs directory [ 84.199586][ T5831] hsr_slave_0: entered promiscuous mode [ 84.206566][ T5831] hsr_slave_1: entered promiscuous mode [ 84.212670][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.220817][ T5831] Cannot create hsr debugfs directory [ 84.599899][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.638332][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.666562][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.691074][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.751038][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.768754][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.799730][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.820888][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.860839][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.891808][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.902052][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.916102][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.029008][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.059119][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.091253][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.098398][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.110050][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.189198][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.200435][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.208223][ T5826] Bluetooth: hci2: command tx timeout [ 85.208295][ T5821] Bluetooth: hci1: command tx timeout [ 85.213633][ T56] Bluetooth: hci0: command tx timeout [ 85.231847][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.254004][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.261349][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.294834][ T56] Bluetooth: hci3: command tx timeout [ 85.297063][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.307605][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.333149][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.342497][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.350003][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.364523][ T56] Bluetooth: hci4: command tx timeout [ 85.481082][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.541770][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.548980][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.563143][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.570325][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.595917][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.703560][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.727990][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.739197][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.746398][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.765701][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.772875][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.823099][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.833467][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.877730][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.885039][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.908329][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.937624][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.944860][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.966107][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.045435][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.108848][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.116082][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.186416][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.193695][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.326581][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.336471][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.491834][ T5815] veth0_vlan: entered promiscuous mode [ 86.560646][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.591971][ T5815] veth1_vlan: entered promiscuous mode [ 86.701544][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.728049][ T5815] veth0_macvtap: entered promiscuous mode [ 86.784064][ T5827] veth0_vlan: entered promiscuous mode [ 86.799035][ T5823] veth0_vlan: entered promiscuous mode [ 86.826104][ T5815] veth1_macvtap: entered promiscuous mode [ 86.850237][ T5823] veth1_vlan: entered promiscuous mode [ 86.886426][ T5827] veth1_vlan: entered promiscuous mode [ 86.918569][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.958193][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.983354][ T5831] veth0_vlan: entered promiscuous mode [ 87.032264][ T5823] veth0_macvtap: entered promiscuous mode [ 87.089519][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.107070][ T5831] veth1_vlan: entered promiscuous mode [ 87.125713][ T5827] veth0_macvtap: entered promiscuous mode [ 87.143337][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.157702][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.166706][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.175509][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.187048][ T5823] veth1_macvtap: entered promiscuous mode [ 87.207172][ T5827] veth1_macvtap: entered promiscuous mode [ 87.248561][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.259975][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.272317][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.284530][ T56] Bluetooth: hci2: command tx timeout [ 87.289258][ T5826] Bluetooth: hci1: command tx timeout [ 87.289958][ T56] Bluetooth: hci0: command tx timeout [ 87.319620][ T5819] veth0_vlan: entered promiscuous mode [ 87.335994][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.346580][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.358793][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.367254][ T56] Bluetooth: hci3: command tx timeout [ 87.385960][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.396798][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.407735][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.418268][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.429449][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.443202][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.454675][ T56] Bluetooth: hci4: command tx timeout [ 87.459312][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.470796][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.479884][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.503389][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.513884][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.524643][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.535194][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.546633][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.586529][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.595949][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.606724][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.615796][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.642995][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.645714][ T5831] veth0_macvtap: entered promiscuous mode [ 87.653219][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.675913][ T5819] veth1_vlan: entered promiscuous mode [ 87.710020][ T5831] veth1_macvtap: entered promiscuous mode [ 87.812160][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.822990][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.874212][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.887305][ T5819] veth0_macvtap: entered promiscuous mode [ 87.902557][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.908233][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.917272][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.930510][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.940999][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.950884][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.961348][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.976433][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.019305][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.038085][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.049700][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.060228][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.070762][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.080788][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.098196][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.109963][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.120359][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.126082][ T5819] veth1_macvtap: entered promiscuous mode [ 88.131265][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.167785][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.176681][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.177479][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.199025][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.212765][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.230061][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.315344][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.326994][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.337080][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.349549][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.360646][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.374404][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.374424][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.374442][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.382283][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.430956][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.430981][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.477883][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.477904][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.477914][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.477926][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.477935][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.477947][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.477956][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.477968][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.479136][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.518088][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.518132][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.518161][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.518188][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.777656][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.777681][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.794984][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.233987][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 89.277756][ T5896] usb 2-1: config 11 has an invalid interface number: 95 but max is 0 [ 89.388827][ T56] Bluetooth: hci1: command tx timeout [ 89.388872][ T56] Bluetooth: hci2: command tx timeout [ 89.400522][ T5821] Bluetooth: hci0: command tx timeout [ 89.448061][ T56] Bluetooth: hci3: command tx timeout [ 89.456142][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.491902][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.503660][ T5910] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.530392][ T56] Bluetooth: hci4: command tx timeout [ 89.592415][ T5896] usb 2-1: config 11 has no interface number 0 [ 89.592480][ T5896] usb 2-1: config 11 interface 95 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.620667][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.620689][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.656292][ T5896] usb 2-1: config 11 interface 95 has no altsetting 0 [ 89.663336][ T5918] mmap: syz.4.5 (5918) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.668736][ T5896] usb 2-1: language id specifier not provided by device, defaulting to English [ 89.758472][ T5896] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 89.758503][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.758525][ T5896] usb 2-1: Manufacturer: ᰉ [ 89.758540][ T5896] usb 2-1: SerialNumber: syz [ 89.839307][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.839330][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.281279][ T5896] usbtouchscreen 2-1:11.95: probe with driver usbtouchscreen failed with error -8 [ 90.898898][ T5896] usb 2-1: USB disconnect, device number 2 [ 91.114440][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.135331][ T5935] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.135390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 91.160541][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.214759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 91.274578][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 91.283166][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 91.354453][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 91.372712][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 91.419112][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.433027][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 91.502711][ T9] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 91.534914][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.542982][ T9] usb 4-1: Product: syz [ 91.572295][ T9] usb 4-1: Manufacturer: syz [ 91.591755][ T5944] input: syz0 as /devices/virtual/input/input6 [ 91.595281][ T9] usb 4-1: SerialNumber: syz [ 91.656059][ T9] usb 4-1: config 0 descriptor?? [ 91.673290][ T9] kvaser_usb 4-1:0.0: error -EMSGSIZE: Cannot get software info [ 91.743065][ T9] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 91.804331][ T24] cfg80211: failed to load regulatory.db [ 91.854122][ T5870] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.254204][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 92.644375][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.674383][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.702305][ T5870] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 92.749558][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.799979][ T5950] netlink: 'syz.2.13': attribute type 29 has an invalid length. [ 92.840010][ T5870] usb 1-1: config 0 descriptor?? [ 93.021974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.031473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 93.124344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 93.133661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.264077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 93.328736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.356939][ T9] usb 4-1: USB disconnect, device number 2 [ 93.534677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 93.931880][ T5870] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0001/input/input7 [ 94.214289][ T56] Bluetooth: hci0: command 0x0406 tx timeout [ 95.044785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.100411][ T5870] appleir 0003:05AC:8241.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 95.195103][ T5968] FAULT_INJECTION: forcing a failure. [ 95.195103][ T5968] name failslab, interval 1, probability 0, space 0, times 1 [ 95.287276][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: syz.2.16 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 95.287306][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 95.287325][ T5968] Call Trace: [ 95.287333][ T5968] [ 95.287345][ T5968] dump_stack_lvl+0x189/0x250 [ 95.287387][ T5968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.287431][ T5968] ? __pfx__printk+0x10/0x10 [ 95.287467][ T5968] ? __pfx___might_resched+0x10/0x10 [ 95.287495][ T5968] ? fs_reclaim_acquire+0x7d/0x100 [ 95.287520][ T5968] should_fail_ex+0x414/0x560 [ 95.287557][ T5968] should_failslab+0xa8/0x100 [ 95.287589][ T5968] __kmalloc_cache_noprof+0x70/0x3d0 [ 95.287617][ T5968] ? tcf_action_init_1+0x19f/0x6d0 [ 95.287650][ T5968] tcf_action_init_1+0x19f/0x6d0 [ 95.287685][ T5968] ? __pfx_tcf_action_init_1+0x10/0x10 [ 95.287712][ T5968] ? _raw_read_unlock+0x28/0x50 [ 95.287730][ T5968] ? tc_action_load_ops+0x214/0x4e0 [ 95.287781][ T5968] ? __nla_parse+0x40/0x60 [ 95.287806][ T5968] tcf_action_init+0x206/0x980 [ 95.287845][ T5968] ? __pfx_tcf_action_init+0x10/0x10 [ 95.287870][ T5968] ? stack_trace_save+0x9c/0xe0 [ 95.287916][ T5968] ? __x64_sys_sendmsg+0x19b/0x260 [ 95.287939][ T5968] ? do_syscall_64+0xf6/0x210 [ 95.287962][ T5968] ? __pfx___nla_validate_parse+0x10/0x10 [ 95.288024][ T5968] tc_ctl_action+0x430/0xbd0 [ 95.288062][ T5968] ? __pfx_tc_ctl_action+0x10/0x10 [ 95.288099][ T5968] ? rcu_is_watching+0x15/0xb0 [ 95.288172][ T5968] ? __pfx_tc_ctl_action+0x10/0x10 [ 95.288200][ T5968] rtnetlink_rcv_msg+0x779/0xb70 [ 95.288224][ T5968] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 95.288243][ T5968] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.288267][ T5968] ? ref_tracker_free+0x63a/0x7d0 [ 95.288290][ T5968] ? __copy_skb_header+0xa7/0x550 [ 95.288326][ T5968] netlink_rcv_skb+0x219/0x490 [ 95.288348][ T5968] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.288369][ T5968] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.288411][ T5968] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.288428][ T5968] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.288451][ T5968] netlink_unicast+0x758/0x8d0 [ 95.288489][ T5968] netlink_sendmsg+0x805/0xb30 [ 95.288515][ T5968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.288540][ T5968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 95.288558][ T5968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.288577][ T5968] __sock_sendmsg+0x219/0x270 [ 95.288609][ T5968] ____sys_sendmsg+0x505/0x830 [ 95.288636][ T5968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.288666][ T5968] ? import_iovec+0x74/0xa0 [ 95.288692][ T5968] ___sys_sendmsg+0x21f/0x2a0 [ 95.288718][ T5968] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.288777][ T5968] ? __fget_files+0x2a/0x420 [ 95.288805][ T5968] ? __fget_files+0x3a0/0x420 [ 95.288842][ T5968] __x64_sys_sendmsg+0x19b/0x260 [ 95.288869][ T5968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.288909][ T5968] ? do_syscall_64+0xba/0x210 [ 95.288935][ T5968] do_syscall_64+0xf6/0x210 [ 95.288959][ T5968] ? clear_bhb_loop+0x45/0xa0 [ 95.288983][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.289002][ T5968] RIP: 0033:0x7fe57cd8e969 [ 95.289026][ T5968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.289041][ T5968] RSP: 002b:00007fe57dc5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.289065][ T5968] RAX: ffffffffffffffda RBX: 00007fe57cfb6160 RCX: 00007fe57cd8e969 [ 95.289079][ T5968] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 95.289091][ T5968] RBP: 00007fe57dc5c090 R08: 0000000000000000 R09: 0000000000000000 [ 95.289103][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.289114][ T5968] R13: 0000000000000000 R14: 00007fe57cfb6160 R15: 00007fffe97ccb08 [ 95.289143][ T5968] [ 96.248278][ T5980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.342513][ T5980] netlink: 44 bytes leftover after parsing attributes in process `syz.1.20'. [ 96.726518][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.799279][ T978] usb 1-1: USB disconnect, device number 2 [ 96.902339][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 96.927196][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 96.994151][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 97.034109][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 97.105835][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 97.186241][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.210662][ T5994] capability: warning: `syz.4.23' uses 32-bit capabilities (legacy support in use) [ 97.229149][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 97.249471][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 97.261048][ T9] usb 4-1: Product: syz [ 97.267151][ T9] usb 4-1: Manufacturer: syz [ 97.279289][ T9] usb 4-1: SerialNumber: syz [ 97.717491][ T9] usb 4-1: config 0 descriptor?? [ 97.759310][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 97.790584][ T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 98.206147][ T975] usb 4-1: USB disconnect, device number 3 [ 98.212069][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 98.227188][ T5972] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 98.565630][ T6009] ldusb 4-1:0.0: Write buffer overflow, 64957 bytes dropped [ 98.597078][ T975] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 101.839065][ T6064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.671389][ T5820] IPVS: starting estimator thread 0... [ 102.824791][ T6074] IPVS: using max 37 ests per chain, 88800 per kthread [ 102.844104][ T6071] netlink: 'syz.4.43': attribute type 63 has an invalid length. [ 102.905893][ T6071] Zero length message leads to an empty skb [ 103.438353][ T6086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.539649][ T6090] process 'syz.3.49' launched './file0' with NULL argv: empty string added [ 103.626005][ T6090] capability: warning: `syz.3.49' uses deprecated v2 capabilities in a way that may be insecure [ 103.841638][ T5820] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.892837][ T6100] openvswitch: netlink: Key type 30 is not supported [ 103.965830][ T975] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.014098][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 104.024769][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.051815][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.077058][ T5820] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 104.089114][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.116595][ T5820] usb 1-1: config 0 descriptor?? [ 104.136394][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.163407][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.173905][ T975] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 104.192405][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.208630][ T975] usb 2-1: config 0 descriptor?? [ 104.991977][ T975] hid (null): unknown global tag 0xc [ 105.535823][ T975] steelseries 0003:1038:12B6.0003: unknown main item tag 0x7 [ 105.544090][ T975] steelseries 0003:1038:12B6.0003: unknown global tag 0xc [ 105.545032][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 105.551225][ T975] steelseries 0003:1038:12B6.0003: item 0 0 1 12 parsing failed [ 105.552189][ T975] steelseries 0003:1038:12B6.0003: probe with driver steelseries failed with error -22 [ 105.626276][ T5820] thrustmaster 0003:044F:B653.0002: unknown main item tag 0x0 [ 105.634312][ T5820] thrustmaster 0003:044F:B653.0002: unknown main item tag 0x0 [ 105.696141][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 105.814581][ T5820] thrustmaster 0003:044F:B653.0002: hidraw0: USB HID v0.04 Device [HID 044f:b653] on usb-dummy_hcd.0-1/input0 [ 105.875814][ T6126] Malformed UNC in devname [ 105.875814][ T6126] [ 105.882653][ T6126] CIFS: VFS: Malformed UNC in devname [ 105.926633][ T5820] thrustmaster 0003:044F:B653.0002: no inputs found [ 105.948119][ T24] IPVS: starting estimator thread 0... [ 105.992076][ T5820] usb 1-1: USB disconnect, device number 3 [ 106.075844][ T6138] IPVS: using max 31 ests per chain, 74400 per kthread [ 106.536607][ T6158] fuse: Unknown parameter 'grou [ 106.536607][ T6158] _i`' [ 107.538793][ T24] usb 2-1: USB disconnect, device number 3 [ 107.898638][ T6169] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 107.906339][ T6169] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.837205][ T6188] openvswitch: netlink: Key type 30 is not supported [ 109.505348][ T6198] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 110.090832][ T6201] input: syz0 as /devices/virtual/input/input8 [ 110.250148][ T6209] QAT: failed to copy from user. [ 110.252191][ T6208] sch_fq: defrate 0 ignored. [ 110.431559][ T978] IPVS: starting estimator thread 0... [ 110.590572][ T6212] IPVS: using max 27 ests per chain, 64800 per kthread [ 110.648946][ T6209] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 111.297648][ T6226] fuse: Bad value for 'fd' [ 112.247205][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.77'. [ 112.265029][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.474563][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 112.570648][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 112.803123][ T9] usb 3-1: config 0 has no interface number 0 [ 112.814870][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 112.873673][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 112.914931][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.925853][ T9] usb 3-1: Product: syz [ 112.930126][ T9] usb 3-1: Manufacturer: syz [ 112.939261][ T9] usb 3-1: SerialNumber: syz [ 112.947497][ T9] usb 3-1: config 0 descriptor?? [ 113.724151][ T978] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.942110][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 114.015377][ T9] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 114.031942][ T978] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.044485][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 114.059275][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 114.067401][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 114.082554][ T978] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 115.274435][ T9] usb 3-1: USB disconnect, device number 2 [ 115.284160][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.323630][ T978] usb 2-1: Product: syz [ 115.330490][ T978] usb 2-1: Manufacturer: syz [ 115.339472][ T978] usb 2-1: SerialNumber: syz [ 115.408151][ T978] usb 2-1: config 0 descriptor?? [ 115.803246][ T6265] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.004297][ T978] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.182880][ T978] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.213903][ T978] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.244365][ T978] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 116.288523][ T978] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.346446][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.361808][ T978] usb 3-1: Product: syz [ 116.377264][ T978] usb 3-1: Manufacturer: syz [ 116.409171][ T978] usb 3-1: SerialNumber: syz [ 116.444559][ T48] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.597311][ T5869] usb 2-1: USB disconnect, device number 4 [ 116.634307][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 116.678962][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.747655][ T6259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.755263][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.912518][ T48] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 116.943078][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.006586][ T48] usb 4-1: config 0 descriptor?? [ 117.009312][ T978] cdc_ncm 3-1:1.0: bind() failure [ 117.070051][ T978] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 117.100136][ T978] cdc_ncm 3-1:1.1: bind() failure [ 117.105504][ T5869] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.152115][ T978] usb 3-1: USB disconnect, device number 3 [ 117.297795][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 117.316068][ T5869] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 117.356352][ T5869] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 117.427212][ T6294] netlink: 'syz.2.92': attribute type 10 has an invalid length. [ 117.440561][ T48] thrustmaster 0003:044F:B653.0004: unknown main item tag 0x0 [ 117.459826][ T48] thrustmaster 0003:044F:B653.0004: unknown main item tag 0x0 [ 117.469416][ T5869] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 117.518978][ T48] thrustmaster 0003:044F:B653.0004: hidraw0: USB HID v0.04 Device [HID 044f:b653] on usb-dummy_hcd.3-1/input0 [ 117.524172][ T5869] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 117.550530][ T6294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.92'. [ 117.571672][ T48] thrustmaster 0003:044F:B653.0004: no inputs found [ 117.637615][ T6294] team0: entered promiscuous mode [ 117.649952][ T9] usb 4-1: USB disconnect, device number 4 [ 117.663899][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.692934][ T6294] team_slave_0: entered promiscuous mode [ 117.716187][ T5869] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 117.727594][ T6294] team_slave_1: entered promiscuous mode [ 117.734257][ T975] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.752092][ T5869] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 117.758558][ T6294] team0: entered allmulticast mode [ 117.780301][ T6294] team_slave_0: entered allmulticast mode [ 117.794233][ T5869] usb 2-1: Product: syz [ 117.808590][ T5869] usb 2-1: Manufacturer: syz [ 117.811632][ T6294] team_slave_1: entered allmulticast mode [ 117.890334][ T6294] bridge0: port 3(team0) entered blocking state [ 117.904639][ T5869] usb 2-1: SerialNumber: syz [ 117.924252][ T5869] usb 2-1: config 0 descriptor?? [ 117.939757][ T5869] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 117.941049][ T6294] bridge0: port 3(team0) entered disabled state [ 117.998153][ T5869] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 118.041626][ T975] usb 3-1: config 0 has no interfaces? [ 118.061137][ T6294] bridge0: port 3(team0) entered blocking state [ 118.067673][ T6294] bridge0: port 3(team0) entered forwarding state [ 118.162219][ T975] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 118.208443][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.232640][ T975] usb 3-1: Product: syz [ 118.246826][ T975] usb 3-1: Manufacturer: syz [ 118.251776][ T975] usb 3-1: SerialNumber: syz [ 118.280442][ T975] usb 3-1: config 0 descriptor?? [ 118.567011][ T48] usb 3-1: USB disconnect, device number 4 [ 120.030967][ T978] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 120.241235][ T978] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 120.274070][ T978] usb 4-1: config 7 has no interface number 0 [ 120.293749][ T978] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 120.295936][ T6321] netlink: 'syz.2.95': attribute type 10 has an invalid length. [ 120.324249][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.344551][ T978] usb 4-1: Product: syz [ 120.349187][ T978] usb 4-1: Manufacturer: syz [ 120.359975][ T978] usb 4-1: SerialNumber: syz [ 120.382029][ T6321] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 120.420204][ T6321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.205604][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.213638][ T6282] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 123.276251][ T5901] usb 2-1: USB disconnect, device number 5 [ 123.297843][ T5901] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 123.366310][ T6357] FAULT_INJECTION: forcing a failure. [ 123.366310][ T6357] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.414206][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 123.450760][ T9] usb 5-1: config 221 has no interfaces? [ 123.464862][ T9] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 123.479125][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.0.102 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 123.479157][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 123.479169][ T6357] Call Trace: [ 123.479177][ T6357] [ 123.479185][ T6357] dump_stack_lvl+0x189/0x250 [ 123.479232][ T6357] ? __lock_acquire+0xaac/0xd20 [ 123.479260][ T6357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.479286][ T6357] ? __pfx__printk+0x10/0x10 [ 123.479315][ T6357] ? __might_fault+0xb0/0x130 [ 123.479355][ T6357] should_fail_ex+0x414/0x560 [ 123.479391][ T6357] _copy_from_user+0x2d/0xb0 [ 123.479417][ T6357] ucma_write+0x158/0x2e0 [ 123.479442][ T6357] ? __pfx_ucma_write+0x10/0x10 [ 123.479462][ T6357] ? security_file_permission+0x75/0x290 [ 123.479485][ T6357] ? rw_verify_area+0x258/0x650 [ 123.479509][ T6357] ? __pfx_ucma_write+0x10/0x10 [ 123.479532][ T6357] vfs_write+0x27b/0xa90 [ 123.479566][ T6357] ? __pfx_vfs_write+0x10/0x10 [ 123.479592][ T6357] ? __fget_files+0x2a/0x420 [ 123.479623][ T6357] ? __fget_files+0x2a/0x420 [ 123.479650][ T6357] ? __fget_files+0x3a0/0x420 [ 123.479677][ T6357] ? __fget_files+0x2a/0x420 [ 123.479714][ T6357] ksys_write+0x145/0x250 [ 123.479742][ T6357] ? __pfx_ksys_write+0x10/0x10 [ 123.479771][ T6357] ? do_syscall_64+0xba/0x210 [ 123.479797][ T6357] do_syscall_64+0xf6/0x210 [ 123.479820][ T6357] ? clear_bhb_loop+0x45/0xa0 [ 123.479844][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.479863][ T6357] RIP: 0033:0x7f6e1fd8e969 [ 123.479880][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.479895][ T6357] RSP: 002b:00007f6e20bae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.479915][ T6357] RAX: ffffffffffffffda RBX: 00007f6e1ffb5fa0 RCX: 00007f6e1fd8e969 [ 123.479929][ T6357] RDX: 0000000000000018 RSI: 0000200000000100 RDI: 0000000000000003 [ 123.479940][ T6357] RBP: 00007f6e20bae090 R08: 0000000000000000 R09: 0000000000000000 [ 123.479952][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.479969][ T6357] R13: 0000000000000000 R14: 00007f6e1ffb5fa0 R15: 00007ffd54b9ef58 [ 123.479998][ T6357] [ 123.808178][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.828854][ T978] as10x_usb: device has been detected [ 123.835669][ T978] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 123.923264][ T978] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 123.968769][ T978] as10x_usb: error during firmware upload part1 [ 124.001333][ T978] Registered device Elgato EyeTV DTT Deluxe [ 124.012212][ T978] usb 4-1: USB disconnect, device number 5 [ 124.210495][ T5901] usb 5-1: USB disconnect, device number 2 [ 124.296770][ T978] Unregistered device Elgato EyeTV DTT Deluxe [ 124.493188][ T978] as10x_usb: device has been disconnected [ 124.956844][ T6380] input: syz0 as /devices/virtual/input/input9 [ 127.104269][ T978] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.240288][ T6408] netlink: 88 bytes leftover after parsing attributes in process `syz.0.120'. [ 127.587427][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 127.600771][ T978] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.613614][ T978] usb 2-1: config 0 has no interface number 0 [ 127.639221][ T978] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.670556][ T978] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.686825][ T978] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 127.715496][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.780183][ T978] usb 2-1: config 0 descriptor?? [ 130.740036][ T6423] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.356333][ T978] uclogic 0003:28BD:0071.0005: failed retrieving string descriptor #100: -71 [ 131.395444][ T978] uclogic 0003:28BD:0071.0005: failed retrieving pen parameters: -71 [ 131.415356][ T978] uclogic 0003:28BD:0071.0005: pen probing failed: -71 [ 131.423661][ T978] uclogic 0003:28BD:0071.0005: failed probing parameters: -71 [ 131.442209][ T978] uclogic 0003:28BD:0071.0005: probe with driver uclogic failed with error -71 [ 131.501007][ T978] usb 2-1: USB disconnect, device number 6 [ 131.585655][ T5896] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.748065][ T5896] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 131.800115][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.875086][ T5896] usb 1-1: config 0 descriptor?? [ 131.909614][ T5896] cp210x 1-1:0.0: cp210x converter detected [ 132.333437][ T5896] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 132.517977][ T6447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.297317][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.304057][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.411014][ T5896] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 133.474808][ T5896] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 134.059506][ T5896] usb 1-1: cp210x converter now attached to ttyUSB0 [ 134.204154][ T975] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.292247][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 134.442561][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 134.479163][ T975] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.505947][ T975] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.527379][ T975] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.556775][ T975] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.765511][ T975] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.776719][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.194279][ T975] usb 5-1: can't set config #16, error -71 [ 136.254836][ T975] usb 5-1: USB disconnect, device number 3 [ 136.350019][ T5896] usb 1-1: USB disconnect, device number 4 [ 136.384863][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 136.434565][ T5896] cp210x 1-1:0.0: device disconnected [ 141.533782][ T6523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.821264][ T6528] evm: overlay not supported [ 144.879927][ T30] audit: type=1326 audit(1746528192.404:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57cd8e969 code=0x7ffc0000 [ 144.931093][ T30] audit: type=1326 audit(1746528192.404:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57cd8e969 code=0x7ffc0000 [ 145.086494][ T30] audit: type=1326 audit(1746528192.884:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe57cd8e969 code=0x7ffc0000 [ 145.148260][ T30] audit: type=1326 audit(1746528192.884:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57cd8e969 code=0x7ffc0000 [ 145.274661][ T30] audit: type=1326 audit(1746528192.884:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57cd8e969 code=0x7ffc0000 [ 145.338897][ T6563] syz.3.159 uses obsolete (PF_INET,SOCK_PACKET) [ 145.485667][ T30] audit: type=1326 audit(1746528192.884:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe57cd8e969 code=0x7ffc0000 [ 145.527189][ T30] audit: type=1326 audit(1746528192.884:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57cd8e969 code=0x7ffc0000 [ 146.178436][ T30] audit: type=1326 audit(1746528192.884:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fe57cd8e969 code=0x7ffc0000 [ 146.274167][ T30] audit: type=1326 audit(1746528192.894:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57cd8e969 code=0x7ffc0000 [ 146.310251][ T30] audit: type=1326 audit(1746528192.894:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe57cd907fc code=0x7ffc0000 [ 147.353285][ T6581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.535763][ T6590] fuse: Bad value for 'fd' [ 150.500118][ T6615] binder: 6614:6615 ioctl c0306201 200000000240 returned -11 [ 151.565036][ T6631] bridge0: port 3(team0) entered disabled state [ 151.579624][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.590536][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.653419][ T6634] openvswitch: netlink: Key type 30 is not supported [ 151.727144][ T6631] netlink: 'syz.2.177': attribute type 16 has an invalid length. [ 151.734999][ T6631] netlink: 'syz.2.177': attribute type 17 has an invalid length. [ 151.752694][ T6631] bridge0: port 3(team0) entered blocking state [ 151.759185][ T6631] bridge0: port 3(team0) entered forwarding state [ 151.774829][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.782046][ T6631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.793553][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.800800][ T6631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.531320][ T6647] sctp: [Deprecated]: syz.2.181 (pid 6647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.531320][ T6647] Use struct sctp_sack_info instead [ 152.736180][ T6651] fuse: Bad value for 'fd' [ 153.648978][ T6656] syz.1.184: attempt to access beyond end of device [ 153.648978][ T6656] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 153.662269][ T6656] FAT-fs (loop3): unable to read boot sector [ 153.814260][ T5896] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.046008][ T6660] FAULT_INJECTION: forcing a failure. [ 154.046008][ T6660] name failslab, interval 1, probability 0, space 0, times 0 [ 154.084474][ T6660] CPU: 1 UID: 0 PID: 6660 Comm: syz.3.185 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 154.084501][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 154.084513][ T6660] Call Trace: [ 154.084520][ T6660] [ 154.084528][ T6660] dump_stack_lvl+0x189/0x250 [ 154.084564][ T6660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.084590][ T6660] ? __pfx__printk+0x10/0x10 [ 154.084626][ T6660] ? __pfx___might_resched+0x10/0x10 [ 154.084654][ T6660] ? fs_reclaim_acquire+0x7d/0x100 [ 154.084680][ T6660] should_fail_ex+0x414/0x560 [ 154.084716][ T6660] should_failslab+0xa8/0x100 [ 154.084746][ T6660] kmem_cache_alloc_noprof+0x73/0x3c0 [ 154.084773][ T6660] ? __proc_create+0x384/0x8f0 [ 154.084822][ T6660] __proc_create+0x384/0x8f0 [ 154.084875][ T6660] ? __pfx___proc_create+0x10/0x10 [ 154.084898][ T6660] ? rcu_is_watching+0x15/0xb0 [ 154.084927][ T6660] ? trace_kmalloc+0x1f/0xd0 [ 154.084952][ T6660] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 154.084981][ T6660] ? kstrdup+0x81/0x100 [ 154.085006][ T6660] proc_create_seq_private+0xa8/0x220 [ 154.085036][ T6660] htable_create+0x3f5/0x7a0 [ 154.085067][ T6660] hashlimit_mt_check_common+0x719/0xa10 [ 154.085099][ T6660] hashlimit_mt_check_v1+0x221/0x360 [ 154.085125][ T6660] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 154.085155][ T6660] ? xt_find_match+0x1f7/0x250 [ 154.085183][ T6660] xt_check_match+0x3ce/0xab0 [ 154.085203][ T6660] ? __pfx___mutex_lock+0x10/0x10 [ 154.085230][ T6660] ? __pfx_xt_check_match+0x10/0x10 [ 154.085254][ T6660] ? pcpu_alloc_noprof+0xfdb/0x16b0 [ 154.085283][ T6660] ? xt_find_match+0x1f7/0x250 [ 154.085311][ T6660] translate_table+0x150b/0x2000 [ 154.085365][ T6660] ? __pfx_translate_table+0x10/0x10 [ 154.085398][ T6660] ? __might_fault+0xb0/0x130 [ 154.085449][ T6660] ? _copy_from_user+0x94/0xb0 [ 154.085480][ T6660] do_ipt_set_ctl+0x967/0xcd0 [ 154.085506][ T6660] ? rcu_is_watching+0x15/0xb0 [ 154.085533][ T6660] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 154.085571][ T6660] ? __pfx___mutex_lock+0x10/0x10 [ 154.085593][ T6660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.085635][ T6660] nf_setsockopt+0x26c/0x290 [ 154.085658][ T6660] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 154.085681][ T6660] do_sock_setsockopt+0x257/0x3e0 [ 154.085708][ T6660] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 154.085728][ T6660] ? __fget_files+0x2a/0x420 [ 154.085762][ T6660] ? __fget_files+0x3a0/0x420 [ 154.085789][ T6660] ? __fget_files+0x2a/0x420 [ 154.085826][ T6660] __x64_sys_setsockopt+0x18b/0x220 [ 154.085863][ T6660] do_syscall_64+0xf6/0x210 [ 154.085887][ T6660] ? clear_bhb_loop+0x45/0xa0 [ 154.085911][ T6660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.085930][ T6660] RIP: 0033:0x7f660198e969 [ 154.085947][ T6660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.085963][ T6660] RSP: 002b:00007f65ff7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.085983][ T6660] RAX: ffffffffffffffda RBX: 00007f6601bb6160 RCX: 00007f660198e969 [ 154.085997][ T6660] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 154.086009][ T6660] RBP: 00007f65ff7b4090 R08: 0000000000000320 R09: 0000000000000000 [ 154.086020][ T6660] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000001 [ 154.086032][ T6660] R13: 0000000000000000 R14: 00007f6601bb6160 R15: 00007ffce68604a8 [ 154.086062][ T6660] [ 154.532122][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 154.823537][ T5896] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 154.833796][ T5896] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 154.854459][ T5896] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 154.869220][ T5896] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 154.883508][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.893162][ T5896] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 154.902734][ T5896] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 154.911506][ T5896] usb 3-1: Product: syz [ 154.918217][ T5896] usb 3-1: Manufacturer: syz [ 154.922854][ T5896] usb 3-1: SerialNumber: syz [ 154.938586][ T5896] usb 3-1: config 0 descriptor?? [ 154.955501][ T5896] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 154.971935][ T5896] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 155.329441][ T6666] binder: 6664:6666 ioctl c0306201 200000000240 returned -11 [ 155.357070][ T5896] usb 3-1: USB disconnect, device number 5 [ 155.357070][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 155.357677][ T6654] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 155.394172][ T6665] ldusb 3-1:0.0: Write buffer overflow, 64957 bytes dropped [ 155.464115][ T5896] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 156.088989][ T6677] openvswitch: netlink: Key type 30 is not supported [ 157.218845][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.191'. [ 158.059800][ T5826] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 158.152917][ T6675] sp0: Synchronizing with TNC [ 161.083127][ T5901] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.534221][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 162.553290][ T6717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.575221][ T6717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.738549][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.764089][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.785759][ T5901] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 162.861638][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.940064][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 162.984227][ T5901] usb 1-1: config 0 descriptor?? [ 163.103110][ T5901] usbhid 1-1:0.0: can't add hid device: -71 [ 163.555604][ T5901] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 163.577546][ T5901] usb 1-1: USB disconnect, device number 5 [ 163.814204][ T5870] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.200281][ T5870] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 164.240513][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.379237][ T5870] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.344091][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.352380][ T5870] usb 3-1: Product: syz [ 165.464306][ T5870] usb 3-1: Manufacturer: syz [ 165.494981][ T5870] usb 3-1: SerialNumber: syz [ 165.551021][ T5870] usb 3-1: config 0 descriptor?? [ 165.586173][ T5870] usb 3-1: selecting invalid altsetting 0 [ 165.799595][ T6735] FAULT_INJECTION: forcing a failure. [ 165.799595][ T6735] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 165.864470][ T6735] CPU: 1 UID: 0 PID: 6735 Comm: syz.2.204 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 165.864498][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 165.864508][ T6735] Call Trace: [ 165.864515][ T6735] [ 165.864523][ T6735] dump_stack_lvl+0x189/0x250 [ 165.864555][ T6735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.864580][ T6735] ? __pfx__printk+0x10/0x10 [ 165.864609][ T6735] ? fs_reclaim_acquire+0x7d/0x100 [ 165.864637][ T6735] should_fail_ex+0x414/0x560 [ 165.864667][ T6735] prepare_alloc_pages+0x213/0x610 [ 165.864695][ T6735] __alloc_frozen_pages_noprof+0x123/0x370 [ 165.864719][ T6735] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 165.864756][ T6735] alloc_pages_mpol+0x232/0x4a0 [ 165.864789][ T6735] alloc_pages_noprof+0xa9/0x190 [ 165.864817][ T6735] alloc_pages_exact_noprof+0x33/0x60 [ 165.864838][ T6735] snd_pcm_attach_substream+0x5cf/0xb20 [ 165.864870][ T6735] snd_pcm_open_substream+0xb9/0x23a0 [ 165.864895][ T6735] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 165.864919][ T6735] ? snd_pcm_open+0x196/0x670 [ 165.864943][ T6735] ? __pfx___mutex_lock+0x10/0x10 [ 165.864962][ T6735] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 165.864980][ T6735] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.865003][ T6735] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 165.865039][ T6735] snd_pcm_open+0x1f6/0x670 [ 165.865073][ T6735] ? __pfx_snd_pcm_open+0x10/0x10 [ 165.865095][ T6735] ? __pfx_default_wake_function+0x10/0x10 [ 165.865133][ T6735] snd_pcm_playback_open+0x6f/0xe0 [ 165.865160][ T6735] chrdev_open+0x4c9/0x5e0 [ 165.865190][ T6735] ? __pfx_chrdev_open+0x10/0x10 [ 165.865223][ T6735] ? __pfx_chrdev_open+0x10/0x10 [ 165.865249][ T6735] do_dentry_open+0xdf0/0x1970 [ 165.865282][ T6735] vfs_open+0x3b/0x340 [ 165.865298][ T6735] ? path_openat+0x2ecd/0x3830 [ 165.865321][ T6735] path_openat+0x2ee5/0x3830 [ 165.865340][ T6735] ? arch_stack_walk+0xfc/0x150 [ 165.865401][ T6735] ? __pfx_path_openat+0x10/0x10 [ 165.865425][ T6735] ? irqentry_exit+0x74/0x90 [ 165.865444][ T6735] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.865474][ T6735] do_filp_open+0x1fa/0x410 [ 165.865502][ T6735] ? __pfx_do_filp_open+0x10/0x10 [ 165.865543][ T6735] ? _raw_spin_unlock+0x28/0x50 [ 165.865559][ T6735] ? alloc_fd+0x64c/0x6c0 [ 165.865594][ T6735] do_sys_openat2+0x121/0x1c0 [ 165.865617][ T6735] ? __pfx_do_sys_openat2+0x10/0x10 [ 165.865639][ T6735] ? ksys_write+0x1f0/0x250 [ 165.865660][ T6735] ? rcu_is_watching+0x15/0xb0 [ 165.865692][ T6735] __x64_sys_openat+0x138/0x170 [ 165.865717][ T6735] do_syscall_64+0xf6/0x210 [ 165.865739][ T6735] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 165.865757][ T6735] ? clear_bhb_loop+0x45/0xa0 [ 165.865779][ T6735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.865796][ T6735] RIP: 0033:0x7fe57cd8d2d0 [ 165.865813][ T6735] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 165.865827][ T6735] RSP: 002b:00007fe57dc9db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 165.865846][ T6735] RAX: ffffffffffffffda RBX: 0000000000000800 RCX: 00007fe57cd8d2d0 [ 165.865858][ T6735] RDX: 0000000000000800 RSI: 00007fe57dc9dc10 RDI: 00000000ffffff9c [ 165.865870][ T6735] RBP: 00007fe57dc9dc10 R08: 0000000000000000 R09: 0000000000000000 [ 165.865881][ T6735] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 165.865891][ T6735] R13: 0000000000000000 R14: 00007fe57cfb5fa0 R15: 00007fffe97ccb08 [ 165.865919][ T6735] [ 166.227116][ T6766] batadv_slave_0: entered promiscuous mode [ 166.485304][ T6766] batadv_slave_0: left promiscuous mode [ 166.529632][ T5870] usb 3-1: USB disconnect, device number 6 [ 166.854757][ T6774] netlink: 'syz.1.212': attribute type 9 has an invalid length. [ 167.668223][ T6783] syz.1.216 (6783): attempted to duplicate a private mapping with mremap. This is not supported. [ 167.731148][ T6783] ======================================================= [ 167.731148][ T6783] WARNING: The mand mount option has been deprecated and [ 167.731148][ T6783] and is ignored by this kernel. Remove the mand [ 167.731148][ T6783] option from the mount to silence this warning. [ 167.731148][ T6783] ======================================================= [ 168.009457][ T6788] netlink: 212 bytes leftover after parsing attributes in process `syz.2.215'. [ 168.806385][ T48] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 168.947577][ T6803] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 168.965511][ T48] usb 1-1: device descriptor read/64, error -71 [ 168.971355][ T6803] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 169.000746][ T6803] bridge0: port 3(veth1_vlan) entered blocking state [ 169.030951][ T6803] bridge0: port 3(veth1_vlan) entered disabled state [ 169.041470][ T6803] veth1_vlan: entered allmulticast mode [ 169.060459][ T6803] veth1_vlan: left allmulticast mode [ 169.068898][ T6803] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 169.204491][ T48] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 169.416628][ T48] usb 1-1: device descriptor read/64, error -71 [ 169.740350][ T48] usb usb1-port1: attempt power cycle [ 170.414604][ T48] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 170.450414][ T48] usb 1-1: device descriptor read/8, error -71 [ 170.854282][ T48] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 171.108724][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 171.116131][ T48] usb 1-1: device descriptor read/8, error -32 [ 171.224600][ T48] usb usb1-port1: unable to enumerate USB device [ 172.325131][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 174.135411][ T6850] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 176.391241][ T6882] input: syz0 as /devices/virtual/input/input10 [ 176.666364][ T6886] fuse: Bad value for 'fd' [ 176.994103][ T5901] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.174191][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 177.523337][ T5901] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 177.653091][ T5901] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 177.677416][ T5901] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 177.688660][ T5901] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 177.704435][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.739961][ T5901] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 177.749145][ T5901] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 177.757713][ T5901] usb 4-1: Product: syz [ 177.761987][ T5901] usb 4-1: Manufacturer: syz [ 177.774217][ T5901] usb 4-1: SerialNumber: syz [ 177.786250][ T5901] usb 4-1: config 0 descriptor?? [ 177.804529][ T5901] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 177.837978][ T5901] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 178.349117][ T6904] tipc: Started in network mode [ 178.354536][ T6904] tipc: Node identity , cluster identity 4711 [ 178.360734][ T6904] tipc: Failed to set node id, please configure manually [ 178.368809][ T6904] tipc: Enabling of bearer rejected, failed to enable media [ 178.520270][ T5870] usb 4-1: USB disconnect, device number 6 [ 178.526580][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 178.535621][ T6891] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 178.544639][ T6907] ldusb 4-1:0.0: Write buffer overflow, 64957 bytes dropped [ 178.563299][ T5870] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 178.818648][ T6916] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 180.190406][ T6916] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 180.202359][ T6916] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 180.210800][ T6916] CPU: 1 UID: 0 PID: 6916 Comm: syz.1.252 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 180.222691][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 180.232753][ T6916] RIP: 0010:codel_change+0x4cb/0x930 [ 180.238047][ T6916] Code: e8 fa 5c 54 f8 49 89 dc 43 80 7c 25 00 00 74 08 4c 89 ff e8 c7 2c b4 f8 49 c7 07 00 00 00 00 4d 8d 6f 28 4c 89 e8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 dc 00 00 00 45 8b 6d 00 48 8b 84 24 90 [ 180.257667][ T6916] RSP: 0018:ffffc9000b987200 EFLAGS: 00010206 [ 180.263743][ T6916] RAX: 0000000000000005 RBX: ffff8880596f30d8 RCX: 0000000000080000 [ 180.271722][ T6916] RDX: ffffc9000ce2d000 RSI: 000000000000028c RDI: 000000000000028d [ 180.279700][ T6916] RBP: ffffc9000b987370 R08: 0000000000000003 R09: 0000000000000004 [ 180.287678][ T6916] R10: dffffc0000000000 R11: fffff52001730e30 R12: dffffc0000000000 [ 180.295653][ T6916] R13: 0000000000000028 R14: 00000000000001f8 R15: 0000000000000000 [ 180.303625][ T6916] FS: 00007f4dbf8bf6c0(0000) GS:ffff8881261fd000(0000) knlGS:0000000000000000 [ 180.312554][ T6916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.319137][ T6916] CR2: 0000001b2f71fffc CR3: 000000002f39c000 CR4: 00000000003526f0 [ 180.327111][ T6916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.335081][ T6916] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.343060][ T6916] Call Trace: [ 180.346342][ T6916] [ 180.349279][ T6916] ? __pfx_codel_change+0x10/0x10 [ 180.354316][ T6916] ? nla_strcmp+0x106/0x140 [ 180.358820][ T6916] ? nla_strcmp+0x106/0x140 [ 180.363323][ T6916] tc_modify_qdisc+0x1897/0x20b0 [ 180.368276][ T6916] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 180.373597][ T6916] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 180.378890][ T6916] rtnetlink_rcv_msg+0x779/0xb70 [ 180.383835][ T6916] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 180.388956][ T6916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 180.394421][ T6916] ? ref_tracker_free+0x63a/0x7d0 [ 180.399445][ T6916] ? __copy_skb_header+0xa7/0x550 [ 180.404481][ T6916] netlink_rcv_skb+0x219/0x490 [ 180.409275][ T6916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 180.414737][ T6916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.420034][ T6916] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.425230][ T6916] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.430443][ T6916] netlink_unicast+0x758/0x8d0 [ 180.435227][ T6916] netlink_sendmsg+0x805/0xb30 [ 180.440009][ T6916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.445309][ T6916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.450597][ T6916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.455884][ T6916] __sock_sendmsg+0x219/0x270 [ 180.460576][ T6916] ____sys_sendmsg+0x505/0x830 [ 180.465354][ T6916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.470659][ T6916] ? import_iovec+0x74/0xa0 [ 180.475185][ T6916] ___sys_sendmsg+0x21f/0x2a0 [ 180.479884][ T6916] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.485093][ T6916] ? inode_set_ctime_current+0x277/0xb40 [ 180.490749][ T6916] ? __fget_files+0x2a/0x420 [ 180.495350][ T6916] ? __fget_files+0x3a0/0x420 [ 180.500041][ T6916] __x64_sys_sendmsg+0x19b/0x260 [ 180.504987][ T6916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.510461][ T6916] ? do_syscall_64+0xba/0x210 [ 180.515146][ T6916] do_syscall_64+0xf6/0x210 [ 180.519667][ T6916] ? clear_bhb_loop+0x45/0xa0 [ 180.524352][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.530258][ T6916] RIP: 0033:0x7f4dbe98e969 [ 180.534678][ T6916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.554295][ T6916] RSP: 002b:00007f4dbf8bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.562720][ T6916] RAX: ffffffffffffffda RBX: 00007f4dbebb5fa0 RCX: 00007f4dbe98e969 [ 180.570697][ T6916] RDX: 0000000004040840 RSI: 0000200000000280 RDI: 0000000000000009 [ 180.578674][ T6916] RBP: 00007f4dbea10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 180.586652][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.594635][ T6916] R13: 0000000000000000 R14: 00007f4dbebb5fa0 R15: 00007ffd35eafb38 [ 180.602619][ T6916] [ 180.605666][ T6916] Modules linked in: [ 180.609743][ T6916] ---[ end trace 0000000000000000 ]--- [ 180.615244][ T6916] RIP: 0010:codel_change+0x4cb/0x930 [ 180.620545][ T6916] Code: e8 fa 5c 54 f8 49 89 dc 43 80 7c 25 00 00 74 08 4c 89 ff e8 c7 2c b4 f8 49 c7 07 00 00 00 00 4d 8d 6f 28 4c 89 e8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 dc 00 00 00 45 8b 6d 00 48 8b 84 24 90 [ 180.640161][ T6916] RSP: 0018:ffffc9000b987200 EFLAGS: 00010206 [ 180.646240][ T6916] RAX: 0000000000000005 RBX: ffff8880596f30d8 RCX: 0000000000080000 [ 180.654223][ T6916] RDX: ffffc9000ce2d000 RSI: 000000000000028c RDI: 000000000000028d [ 180.662211][ T6916] RBP: ffffc9000b987370 R08: 0000000000000003 R09: 0000000000000004 [ 180.670259][ T6916] R10: dffffc0000000000 R11: fffff52001730e30 R12: dffffc0000000000 [ 180.678258][ T6916] R13: 0000000000000028 R14: 00000000000001f8 R15: 0000000000000000 [ 180.686245][ T6916] FS: 00007f4dbf8bf6c0(0000) GS:ffff8881261fd000(0000) knlGS:0000000000000000 [ 180.695184][ T6916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.701762][ T6916] CR2: 0000001b2f71fffc CR3: 000000002f39c000 CR4: 00000000003526f0 [ 180.709747][ T6916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.717791][ T6916] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.725811][ T6916] Kernel panic - not syncing: Fatal exception in interrupt [ 180.733403][ T6916] Kernel Offset: disabled [ 180.737740][ T6916] Rebooting in 86400 seconds..