last executing test programs: 3m45.675359336s ago: executing program 3 (id=1636): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x2) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) 3m45.424413799s ago: executing program 3 (id=1638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9def915d56ea54c7beef915d564c90c200", 0x18) 3m44.40533822s ago: executing program 3 (id=1641): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004011851000000600000018020000", @ANYRES32, @ANYBLOB="00000000100000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x10000000}, 0x78) 3m44.142700097s ago: executing program 3 (id=1644): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x100) bind$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffee1) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r2, &(0x7f0000000280)={0x20, 0x0, r3, {0x0, 0x10}}, 0x20) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10020, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000002640)={0x14, 0x21, 0xa, 0x801}, 0x14}}, 0x0) syz_usb_connect(0x2, 0x2ca, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x0) 3m40.494363074s ago: executing program 3 (id=1655): r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) r1 = syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20004000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="01804d1316c2000002bbbbbbbb01019078ac1e0001ac1414aa05009078e00000e047000000000000000011000064010102ac1614aa004404000300"/74], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000cdff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002400000000808"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000952342c5886ac2978b5fd84beee53aa351d239fc19fd8d0aff75da9ff455e5d448c69793964dd7a0e3792c4cd9f4d7281e5b30e8ab082f0853afe9b377ac96e75ab725f733a785a6d66b60c071a2d89c3619af9549aebe169a9816d196919f2a671a8352a55013be429e8f72bf7a4409ec8f9f374eea09c4ebd47be3de400f1db76c02ee15f1444c9345a09d1dbe25a2ea8a85d563745a919478e4a0135ccf096f9dc29657788c6112497f64d577bd7d8be0b29f0e8fcbe8fcf550f98fd53dd49169a7ec2b9d4c60542c25fddd834f6b74386685339ffa0b72bba6bf11864bf99eab8b"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) open_by_handle_at(r6, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x64380) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) 3m37.297441327s ago: executing program 3 (id=1660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r3) 3m21.809948853s ago: executing program 32 (id=1660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r3) 11.052102402s ago: executing program 1 (id=2223): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b80)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [{0x20, 0x1}], {0x10, 0x7}}, 0x2c, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x20, 0x14, 0x1, '%'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0x846503215b16faa2, 0x2, 'LU'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.702935616s ago: executing program 5 (id=2226): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0xc0, 0xa0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00') 8.620220446s ago: executing program 5 (id=2230): r0 = getpgrp(0x0) ioprio_set$pid(0x1, r0, 0x6000) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', '}#]]]--[@\x00'}) ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0xfffffffffffffff8, 0x0, 0x1}, &(0x7f00000000c0)=[{}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='br_fdb_external_learn_add\x00', r2}, 0x18) r4 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) read$smackfs_cipsonum(r4, &(0x7f0000000240), 0x14) r5 = accept4$bt_l2cap(r2, &(0x7f0000000280), &(0x7f00000002c0)=0xe, 0x800) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) fstatfs(r3, &(0x7f0000000340)=""/217) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000480)=@req={0x6, 0x8000, 0x81, 0x4}, 0x10) ioctl$TIOCGSID(r6, 0x5429, &(0x7f00000004c0)=0x0) ptrace$setopts(0x4200, r7, 0x401, 0x4) r8 = syz_open_dev$MSR(&(0x7f0000000500), 0x2, 0x0) r9 = geteuid() getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000580)={@private, @remote, 0x0}, &(0x7f00000005c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x3, 0x2, 0x64, @dev={0xfe, 0x80, '\x00', 0x3a}, @remote, 0x20, 0x7, 0x7, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@dellink={0x48, 0x11, 0x101, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, 0x110, 0x10000}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x18045}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd248}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_io_uring_setup(0x549f, &(0x7f0000000800)={0x0, 0x8509, 0x1000, 0x2, 0x17e}, &(0x7f0000000880)=0x0, &(0x7f00000008c0)) r16 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x30, r6, 0x10000000) r17 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r15, r16, &(0x7f0000000900)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x20, 0x4000, @fd=r3, 0x401, 0x0, 0x0, 0xe, 0x0, {0x0, r17}}) write$FUSE_DIRENT(r2, &(0x7f0000000940)={0x100, 0xfffffffffffffffe, 0x0, [{0x0, 0x6, 0x0, 0x7fffffff}, {0x6, 0x4, 0xa, 0x0, '}#]]]--[@\x00'}, {0x6, 0x10001, 0xa, 0x200, '}#]]]--[@\x00'}, {0x4, 0x2, 0xa, 0x3, '}#]]]--[@\x00'}, {0x2, 0x2, 0x1, 0xe, '}'}, {0x3, 0x400, 0x7, 0x1c, '-(+!^{}'}, {0x0, 0x100, 0x8, 0x25bb, 'syztnl1\x00'}]}, 0x100) ioctl$TCFLSH(r2, 0x540b, 0x1) r18 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r18, 0x6, 0xd, &(0x7f0000000a40)='nv\x00', 0x3) sendmmsg$unix(r6, &(0x7f0000006700)=[{{&(0x7f0000000a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b00)="50095e55214488554463b56a351dc89510bdbae15830126ab2507cd43de80242d541aa5a88934749e4d9f668eda55872b5b4bc91718a8d90f433b2213c2874ca75b61a0efa071fc7e38e3bffee13410ae96252cda90f1077529c19c7cdc487c7041cceed0aa51d5e779aad88382310417675743805e6dc812467cd69c3744a0aab9c634430109c77bb74c955dec403b4457005a7e05ad5dc", 0x98}, {&(0x7f0000000bc0)="f9971fb7b56b3db9da65cfd8a074219f14b02e111d4e8c5de519413c9ace2611a601481fbf7c69830a7012c103e7b2439aa11e17d3efcee02420034a0eeb73fd4ab09afc2138a752a89c22e529921c586af5481dbe129de0740f52eed3226b7ee2dc040768a9f93bf23c51548a6a4c026f48824ae3f68fb94e07177c6c83a762a3", 0x81}, {&(0x7f0000000c80)="41b9584af7c9ee6aa8a64a8370780cba1f6b280d2d836c7e61df071dbaeba35f4ce2ff88c5e68fd69ae522f814e0827ff5057d52a945728175ed9ffe201ee145400e5ae45bc8e78e50c2fdcae6f7502d", 0x50}], 0x3, &(0x7f0000002100)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x58, 0x4008000}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002180)="eb3bb66026076328325d64fe1275c31bae26172cb479e992be0ed18674e8c694fd01cc591e15104474406e4a6309b894f97bea3854b84b1aa2df4d9a8749aa560f99d28933b5e26ba59ae9ec56d11b29884c2b24d5d30e08ffc80bba9bab4438034e767e5668c61b658387af9d5cb10b877341a637f862c1aa33adaf9fecc440fee6c646c29c8bf4ee2e945f3e79fbf53aea278c8e2b896c6296905ca12a7df928f3afe19fcf124973e5de08b0a935be639a3185d8f47d63651516b1086914a9eb75a5f57870d4f28e8daea5a4671114ac6f5239a15589cf9ec350b921", 0xdd}, {&(0x7f0000002280)="075728f47bfe1ebf46535db867c2a7d96545be99811edf94bf73de9d5b6bc340b6cb0868cd8a31172f200da3040c8877a06c96c337541786b8abc70463f1dd17511f29b53b6c9a98c2ae45d01a79cc6ecbe176ae848367cbbd27372625ef4e5c0bbc520b45c123d11c0f2ba2a521a6fdff92582581a9621eae5b5ab589b0372ae588f0d72fd03105fd7a1852b8ca67611196d762202ef76c65d9d39b900ba74cebdea9df7ff36407bc614faeecde0fcd9dc34c11d927b5fa94fbbe", 0xbb}, {&(0x7f0000002340)="ac789b560788ef70ee2a58f02c9bedb8e6ac9c09a9444c7407477a02121e7df37adfb45d5971e112ac55dc6868ad9dc47bfef8ebab098a18bae8b20914b4fadd8b7dfb2e27b76781f3d7c839cf71", 0x4e}, {&(0x7f00000023c0)="b2e0010700345309c3265629185f791f9835cd5816606fe3bb68b83daf52b8d97e95eff360932d6d0660e341bbc5e1bb35a1f0ec7c527ff6eb0de74093b8e4d65c4fa52b5182146f15e5482242020113bcd7f7a112e275d6d1a487f63b80917011f4f39475b3e0cd380c5572c85399ff9139b6f27e2ce4d1957b13596d2b4ccbe550fdb4a4511862ef14cf008c3b7e5e6562", 0x92}, {&(0x7f0000002480)="7831726badd32437a5499fa0c7d516fd98cb0e07e709fcd6f897341e666f4c7fc7bb935a947ee71533e37834c5c67add5cfd79edf264abc74631f0eafb1388ffac128f6ccb02b2af7b2fff0252f604906943d457898a18079962057ae4be326ea5160da8174769532df6d2c66722bbb5e3f1ed556e5996709c342bbaa68fe2a6d0469d7da9045fdac1943883336653300bded249d17e6a45186761c5f33be46bd06820fc930e89e522d7f567a4f32a8dd2dc4e95af5da16230719fdeb3779aa750a0d3b56943008904a9da790195902330c2099645822552a743d126dcfc5b61ffe5f7fc581af876d5db119ffecf7a2ad3446b8a4043", 0xf6}, {&(0x7f0000002580)="09641c047ab2f010ebb1249d599f1b0507ec2a46d98c7479dffc3093e4fa4926f3a6ab5c19e05bbebb9c2a1712aca2f89e9534b0bf94cd292ad942b5ef3370c56a0d5dbcb69eaaad8e0376680ab66392ae930280d276a92ea37ff4469f9e", 0x5e}, {&(0x7f0000002600)="7beae0fcd58384ce4b90b9d93805e5a930a23d31d00b955a10a1a3d5a931a2da6f6d", 0x22}], 0x7, &(0x7f00000028c0)=[@rights={{0x24, 0x1, 0x1, [r13, 0xffffffffffffffff, r3, r13, r6]}}, @rights={{0x18, 0x1, 0x1, [r2, r13]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r18, r5, r8, r6, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9}}}], 0xc0, 0x24004000}}, {{&(0x7f0000002980)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002a00)="9575bd1351818f83fc1a237065ef6c8cbf7dca10c261481598d60dfe6b6d1df43ca775769a8ab7d0655e4ff1b8c84ade6c46b5a3fa3c2e57af697e676a7ff8954df7b6a6ba781ea9f85fe0d613e306424113192a5cd71bd6d8356ada6d4aa04bf793c459b20c1c31f4e6f524dddcc8beacbde196fa528f793489", 0x7a}, {&(0x7f0000002a80)="ffb0dc4d972d9e64ce11051d8601986cccbb6921ae54d80d616bdb74341b70e4849df9ce1c5bcf6de442cdd7d1a111c2b3fd3632061f5ca153b829ebbded454757a8cf324e7856a658dac3a06b6a9454fbb1482177cbebd242f996ab1427186154f5e9491bedaf52f67d24c19e8af8b87627c187b91ec2b9", 0x78}], 0x2, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {r0, r9}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r18, r18, r6, r13, r2]}}, @rights={{0x20, 0x1, 0x1, [r12, r6, r1, r13]}}, @rights={{0x1c, 0x1, 0x1, [r8, r13, r13]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x20, 0x1, 0x1, [r8, r3, r12, r5]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, 0xffffffffffffffff}}}], 0x120, 0x20044081}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000002e00)="31d1b636eb406b4c47d0ac6b53c18a6c037e74a9bd74048fff57ee40a134539036b7cfee21419066e4f3d46592cba539a3a6e19109db703a156d0b66767faf04e8fecb5cbf19", 0x46}, {&(0x7f0000002e80)="e60e26add2984981ecf150d70ec37a749c6708f9fb3a521c63a0637bafc4ce6958b576d123e1372ca09eeba46d285c848e2d46ad1cdaf0ed58e09eb19d793e30333f144c4c0503", 0x47}, {&(0x7f0000002f00)="42bb0ea7f0d4ff28a8cd323488a4261b697551a3f1d13b8ad6ee739f90af87692e0645553863d0a75edae9d62fa50a096c735d4f5a48c44ea61789e84c4afab685e788f5c4eff683005b81dac4b7f2c6d6bf9e0a8e4757c1aaf252c5933908cbc907178585c44d5f", 0x68}, {&(0x7f0000002f80)="52d9afd412dbaa416ec65f3fe47d660366bf884bb5a7b30ce41ca310f2f4a7ad2ab3f405cd44772d78189f8875af1380781b888ba039aedae912d50b1ec3a739b5e4c725f82e19ee387f69741477de3fe570f8bda1f62f35531062451cdb7471609f24a0f396ef09be2aafecf3bcef437b4f27ce568a45781551394ff2ebce1310e15e458bd06380a3bf5407fd6ab49eebaf6072fc23049c7a84df0c40c5b5030998429dcb45124e8d207a00316536626d012db51251f9ba6e372e485cd16a8e72a1cacc1bd139dcc94bf8ddc25b171d815602e250ca717c7112b4d873a1ddff872948a873f756", 0xe7}, {&(0x7f0000003080)="2ae4c67f02dd05a43ecdafee8ef38200d1c59e65173489f6560f344e7ed410c0d92677003378c17110d94dd980ef621ab3b161841c9760b12417b519dbd971e1e72d45b248b2455ac062245c8b5dac3a677a5358d9f56e05fc63ee722801c7f9adb42e3a2c7e565d36a628d9fd9decb9fefdc3287015861642aef48c369b819be10eb0709dfedd631e984ab00bf398bd829d2d95f042d4b106f6bc78cbd6def9450eb484b6734cb38840d695abd3bbb92d606d73e964a3d4ad2ccebc3c43bdc26aee32ed974d4d8a8533eda354d5c801bde1082b6071b48a64cd198e00be89d890e4bf2d", 0xe4}, {&(0x7f0000003180)="9e4268b7c03f62384eda26246f78f10e6fafe2800168eabaa145f3edc0ede302e139b1ea2e05fef78fe3538c93b23765a9cb5937243f31e5543b5c9c8dd9b7c5387dc03d3b94d40c7491818451e909a8667c1946c037cf49aade0158790e05e3abacda9d9da1d19d60d86a2da1332377fd4d8638e3fa95ecf492282446aa9f88a80ec72cf68aad868b460d33ee217f5805314982d21b6b644cf8e37a292cd6d50f62f856a7991ab725acd303581dc8b2d269ebddc1de840c3746f74c4016685d5d3da62f6a", 0xc5}, {&(0x7f0000003280)="b40463d15bbe6c5713d9806ef084e353242e42d84cb3cfd59c924f23fef190531f0787caa75ef7ed712b78c9ddac12ff77eeb09ef76fdcc0db58bb575e06160fc22782cf8d41042d24e4ce381a40e3228d56d890d80e64a16fe1ab06859ee36f9aae85b9a2c4f67b457e05f6fc7c921e719015b9c3f51f39925fdeaa30deae68149d972d061b4b598f05989176175d1f055153dc9c6f6b60ab48cce4b83da9e2fe8352a33678962e2c531fd1f3a45cb5c8449eea307f38c8b5cafc74c7d77d95beba308e3c7b3395dfb74316abca9b6e60b2bd0d6667e3f168df7e2202c27d8618fe5a6797c08c88", 0xe8}, {&(0x7f0000003380)="1132800afc9e53f1854c0b632372358d47681f8abe73b1", 0x17}], 0x8, &(0x7f00000036c0)=[@rights={{0x24, 0x1, 0x1, [r13, 0xffffffffffffffff, r5, r3, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r13, r18, r5, r8]}}, @rights={{0x28, 0x1, 0x1, [r12, r5, r6, r8, r1, r8]}}, @rights={{0x24, 0x1, 0x1, [r3, r13, r13, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r14, r8]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00}}}], 0x110, 0x80}}, {{&(0x7f0000003800)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003880)="b4fbdd02d2bb4ed0b92fecbbba934f6d301292f8acab13d78794c0f56dd43bc96a100d7daed69428bba1774172ba32006261d06f69485cd9b34dd071ac316c96089fdc6152bed37f61d0bb923a67de7b03b40aabb7bd8c4b0ccbd08c54a6b85810b9e6af73f3b112f138382b6d6d3549bf93ca38812b135b2e5b9ee4c03798ec3f745358b2b00288a26e9bf978fa3e97f25e0bbbf09c33db24", 0x99}, {&(0x7f0000003940)="5f21d4ae7f70efebc98d7f1c7853ca45533f4f579217502eb0c98893e066f160f68859eba184b3014656a011d9bce75a948f403959649342bcfe0e72392e2998517a1848ccff52ab6559bb2d0ea5e98d23a117199a2d54d19fd281caf384bc58168cd90c57d153fc89814fea94df346a", 0x70}, {&(0x7f00000039c0)="c595504bcbc61e358b82f17e886c22d618c9d5ed", 0x14}, {&(0x7f0000003a00)="fd04e909953961161f0e0effec6016eff0c9d2653fd7b9df662168e959c9cb", 0x1f}, {&(0x7f0000003a40)="ba9de9c82e050245e5b59907d7151361fd3bdf495c08b481734edbfd1cca4ea6c78434aecba17daaf4fc520380a68f19f7d4cc482d8f212d069164e58e3e93089c9a6e3ed93fe217c34f73348fc1a77298ecdc1e1fb75410a31ac32612c313d07f5ddc053414d5d8ccea45f86c5d46ef9fd9c4c3b3c5814d631067ed0590c34e530de4134e192c5fdd4778579d67151d44f3b6bf966904182c16fac8ded7962da9827639397eef8c9a65d75add", 0xad}], 0x5, &(0x7f0000003d40)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r0, r9}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0x58, 0x40011}}, {{&(0x7f0000003dc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005240)=[{&(0x7f0000003e40)="f262410842547f1685fd3357c5aec67ae49f0f1f9c50e930abec6ce591b399b8eb1e6f3727d8043230e80e40e02e49e91819ecf1a9f1f2a54be6056cd3319f2a089ff0b88cdfec2fb9d400f67638d2ea6512b3bad5dbf2d55b0e2d6ffc8951a1e75c93e6405063bd20c4b13b884745f397bc900fe054f445b2b380b435ddf12b613fd220fe2b8f05f97e6f0f409af7d8dca04857adc7680d975f6348a987f1e8a82b8fffebccfadaaf93c405a9359d224ad371916b7ab17d25689ca9f9738f2057e1a0ca7060", 0xc6}, {&(0x7f0000003f40)}, {&(0x7f0000003f80)="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", 0x1000}, {&(0x7f0000004f80)="e0dcdbc4b9a55f4b4724c7d16657ad4e1b81fae070f57f549bf4", 0x1a}, {&(0x7f0000004fc0)="dc6825d82a23b177c699650b8ad4f4e943200c68876d20d942d85515cfd3b12fe65b7f28d9454bf6ed658f5b5d61c991a3fc9abae03654fb168611d9bb50c3298ddf6694c7d0f1ae7ee9c2abc51fd361f0278b05a2a5f52e", 0x58}, {&(0x7f0000005040)="c8d60b000355cf253975fb675c99179928e87543a7015759f6cc8bd5a1bdcfaf0402f7e8c8b7ede2676361baee7bf88246c7e7febcef2e20817508b41021e2876900816342c27e3c8ac6d7e1b997fa33c8eabca6dc5c675a", 0x58}, {&(0x7f00000050c0)="9656af20f5a7a318201a4bc05290710fe17df7c877aa19c8db5db74869a206bb7c91d6e1ebec0e3e6548bbd0fab517b5b05e95ba79f05e35e5f20dc693f2ca711dcdbf0edf40ef4941bf60e10b00531226fd0efa92", 0x55}, {&(0x7f0000005140)="11c74ec65487e42cf4858767970fdab36ec43802aa74ae90cec837ed23edc9ec23677e08aab006f2c2203b129ebcfe61d2abcf79f211e52fcc2a9b93abc025833b864bdc40126bef7b8aeefce4eda3322585e90a27423539f96d3366a67d0a8f50abb180bfd60e5114abe3a5517a35a061b8b250943501b0548f37c8cae8f25a6437aade8d5ffe5aa74e35b0b2915bee37595d7db56faf06671a0e664406a569a966f981fd5a39e475c7fd3c57a952b3158106c8682cce946280301514aa6c815669e036d62f2c66e1fe69", 0xcb}], 0x8, 0x0, 0x0, 0x48080}}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000052c0)="635f20f7bcb57f6cbcf152546e87d0aabd1f69bae5a6f5b5d0a2c9018c930e231d0cb4059772cc097324736f86c5ad29a7d7be078801ce0dfe48b9283ea38f85d0d80bf714ab95cb833c54bffb84690705da2b88cb99e8878ccaab68808759c383d0c829581e94740bc5a0c1aaf02ea00d2fdc17ef71b46a351d66412353086e", 0x80}], 0x1, &(0x7f0000005480)=[@cred={{0x1c, 0x1, 0x2, {r7, r9}}}, @rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, r18, r12]}}, @rights={{0x30, 0x1, 0x1, [r14, r4, r5, r13, r13, r13, r12, r2]}}], 0x70, 0x20040810}}, {{&(0x7f0000005500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006680)=[{&(0x7f0000005580)="c5e9033e1955a16b37fe6fc7f18334754ff2a3d4c97ada900a298f9dc33521c6c70f61ac80349ae9797575c83deacd384f5e8bb3f8a9986b7760c7490cc48f290b641ee78732c3afbc3c68386c1ef62bde43f998962aa3eea8bb63e222315d556c506a21407e1d4b296976456274233d3fb2e1ae8bde7a8314ae2fff10aeaa027ea65ef0a5398047fec209c809743dd0ce5623de44ab79f6221ce5ffaad6b43932a82cb8910e1268f782e439aa62521d7ff6f5cac4694c23b42f119ae0804e0e676d95c0e60c336ce81ac80c71068cf4ebe3229c9438358b0ca97d25f4c0729c4827bc0e837f6c9baeca25b3b6ac2d9b647453792ab866a925a54ca26e7ce6", 0xff}, {&(0x7f0000005680)="6c34906de7298f362ba73292a707369b1930a5fa530aef769f8949cdc7605257014251ef1e713457aaf3fce42ddd7b477b1d9ed3880971492033e7a6a5b2df45145c56c2ab24fe8583e556c0ca269cd86e920bfaa14a756a65100f2a267f2cad51f7e05052e191384033bb2d287201011bed5d943d19cf92707c208dfcefd628396e793646fb0b6e72b2cfd8d80320121b6ab645fa2b382d6316f7e68c2c4182c159fcabed9d4a2a8aa898c73f5a2fa457dc0da44a58f174f835f66a98594e288f11240c6b5c97b5deed991285025b72e20216927749b58a9f01c2f6f8a3065e39528b9d5e6d8368212e5444e7f385cb7fd1b3b9104802dde5365923ab63ba20e7a81a6ac744408ae56b39ca93bf624dbf24d7c68c3609a84dcdfc7ca0fec9d4d5aa16fa574af6b97d27a288983aadb0d41894de38a49042a4adb99ec6a4d6bb8ebebc4abcd6abc1048797e46dc7f245411fc34f3ccda53936c0237dc08f109f1687e7ad65d948e431579444a07671d0811a71bae05c0a21d50469dcf4f08162ae9c22f87db68f455bad67edc64c4d62dc321712a2bd5bd3b77e775f02e4683ffaa29c7af5b767a166cf34ee116a703a1b58839f999558ad0cacd9f51dacaa99c5975a2bef73c167b95aa919a7d80c30d71aef9f8f7f0bc6b4ef9c441404a9ba63873b97da760cbe52a976ffc6c7f9293c7dfd059480896867cc04087d1a9bb18410e0c62208cbe6178f98ab412b5aafeaab12668e7c745124c6ec87d8fb2cf80ea6310a337450d2b5bed489718be2ec706ae24b8564f374df72e81424e06269be5797017ae76fb6f65b59e73a2b182934b87722f3e27cf86373047de6fc515f79d18cab79cb03d1e06952cb84f62b29cfbb813bb75450e86e7b255ca4f2cd7312d30a902c15b3b514d2e897ba6f38fc804d6faa01ef00af7843540c9fa59162be33f4c236a143deb80d3f41859ebcd6d1069d3ec46a21cdb275fa5b6d3e18c232fba8d5812bcd99e1c8da02681eadc687232c9845bf0632e3dae8a6097e00459e5051369a9bed7d7984c874483516c5241acd35c212a46fd44a90022c084abb833829eaa3deab1311ff934462adbef38e91b52a1f137cc41b0ef931058f53e9c00fb87dc22631533fbed97289346e0ffa2438a954e8fff0d477b5cd2c77e91b3efc0741b908cc15a233b6d008aaace13b7211a8497cc454ec507f054af44b00d24e233e67346c62639c3d973d494a1184519719e18374509fdce5f3ca4eca01d4e6b6d985ae0ecd101003bd9651a3a18ca7b14335bd585862ce71af3b902bc6bb3c982c81adb005361027c2d392ead2818282318fdcda799fdc8a00d1963dd35db8b302170d4f532546b99bd1df0e99dca3b689328c4ca39d4aa4cef2e9805c63a91baa4fd40561e04ac7aef257e0dd78b562f4f4f56ea5fcf1e3ca59b0741167c194c2ed2ab30a3f0939a16d9c43651306d7c280fc8cb8c0eaf4b0f00d46848be9bda59de17b361ec528a10912bf2a04b0ae48fdcdece642db02ee7633eed29635bc121f61a7529a4a777b9426a026993b029bc1427133e1a63c34eaa45c30f21b3833b01563dce485fcc030a5a336ace4b4b2badb85912850241693694158b7b55ccb8d3256290f7365577eac3a3b6bb6323b3d7923ee3ff825279ef9bb61f923a82c2aa4734eb4bbb6abda54ba5f7e335f8c0ffda514783b8e0ebe25f264a40e2dfcfc93aebae3f2a80ff6fdc00d8edff46b5767f5bdce4aa35e8d9e52216ce734e39fe641617686e25f3d2ae601aad3541d9950837ea53557675483b99f106c78999537d426b23b326968158746180500592d0ff865803a64a7df855e7561bcdc59ed4e956d809aec5dcf9ed3cda7b8820265a4145f10076c311f0a575e7b55e649e3eb4b666a0a504b238df813ec636b7e24c4d17c9d2a4da384dee1245ec226a67a6d56833375eb9ee1a897eac2a74658472dd97feadeb60150838e6445646177d8ec2ec44f02c2ae4a01783b7df05eb0b38d232ba1c44092ce68c8783873f7eb44098ec522f6c82dd14bdaf6d30accf2a8eff85f9e33c0019f26548caea272c6c07c5f09b0b5d2cb57083677b53c270f7f70e44d97c9e5725ec1fe94f445b9791a663406ced2083aaf313fdec81e2a69a0f73ea330e7351def69f0a23e42ffd5cb4955ba8eccf72bfa3f563b21939d08756fb073033d3b0400a6e8e5ffcb0717677c621dac3ad53687ee1f3b1917450fe53af233b82569de4650fb3677c362d1d66a05f4aad7b55e8800e8cf14de4adb3e519047574ed4a9fb989e60d5812658a9d8cf1185d6cbba40c743f42a3685a7a20625166d2726dbac282d23d37f4ce339c263f844127fc01410ae9214f4ac5e45c5d2719f52f038e139d40f7139027e125adfbd751840d5b86f8e61b43b0eb92db63d706c5e2ab2d12e7ccc110c3d7d070ccbdde59af3f1a6435c017063552da1450d8859d4cc66359961ee2c1107b542d69af4c0fd20631f99fd6a4a2680f6f33d5574fef3faa6336b923802704b540e1346f25fe6921072aac86fd59dce0fd2705dcdf51ddbb650eca3fa494f8f9a9c232a9465ab4d3201c0b377c4f3375f7f5d3931684f9863d4da0f8c224dfae5f5269c68b99a84a7092d51a50acbe0fb225ae8ab2a013f0ae2419ff83c8c77df12137843838ab83cbe82dfb765d5db5367a13d4f4bea7dab3f9f3da4b0078f73f53774a6b15984f57a7ff6d4db5582b1874d2174ffb0449fcb6b6e29e8fb3d8f49902c3c7bf09d14c6d94dc073dcb82742e3d67ce8c3bbc5b39993ec24dbe18926843970e557fd0c5b69183e74576485aae18bb6bb9b9c437434a7a265d2da2e19d00a5c8a1c831768aed5dede8bc2ba4265013bb9018feecce71235dd4212c5008202776ac620ccf10e616643cf62f4430673e4261fe73236c736771247648e8b317a0e83c8e932be86635937705e0f0b8071c15d4a1eabf40054a8bc7d6d51c6b46308037089489414b9d7aa4cb79bdc33c9cd4fefb87410facf90e70aa0ab4577147777212c3949397dc08bda95ed4fc3867b80be8eb8e3a767de826ded42d0cabfe98a212104995eda56bcf61774aee76a2dcb1b38cb4575b66d983e27581b8d42cc4cb50fcc9fb33b820732d67ce0dad7848b509999ac653a22419a3561ff11f45c53b47dfc8df78ebe23a982838f4c9aa7980b32a934888debbec03b9e470ed9cfc93b5cb05423c7bc97123120f4eb41aaaf7a5564503cbe4617e00ad41522237753fad6485d5a49c671ecfb407c3df26ed69579f1fa6edb7273814c6a000fe4587f1a108d7693c8a7da677406d398b9d4e34f2e1fcc2074906b3e26a0e5a57431be7dae3d45f16a9ece3d74618f1b2862fbfe16bdb3274cbb48f6a1c5ae222628b4e2ff2b1ed969a52db619721ca3450a9453d77c25ed34c7101a7531117957ec26cdf18f78971e2cd1b9cc6da00afc27392385f5dea9eafda3b7db0c9a4a5024c750c242f9971ac038783a49b204386cce8bbff20e3fac780f7f11e88f581d5a0e438d581b8b1c9ff81cee9d033d614047d05fbd9bca9c3fc6b21c78ba04f24c001d00ac292b5d68414072c3eb6983d9800ddb281cc24cafb8d4a17bb02028bd9a4c8f1b3e9dfc3123cf084db7ec9f0c3a0fbf8ae2f0476da2527522c4b6aed7c6d4a1d45b12ac4fcad806f74b8bc69ff41b5e85c21d362e7ab5958dd6def544f0666797cda1fe521c2df96806e6e02d334d6b7a24572748e1e10374e3929293291bca08cb158e908babeae4cc22074c489c1536f255507cec9244a4a496b1c8d27d86960389466b376e2a80b2823ab4374479e58fcc3fdaaa3f0b932103120098c26c1a099780954a5a53b8406418a01380c5d23cc82702cad9237fc1c77bb08dfac4092b8b003752a46d60ac16d49e199dfb70ff836a9e0ce55fbe67c326ec6168d5f81b76205935dd27ca602531be6839e94621df98f5a768998e512e35cf8e90d97bdb574454e18e51825588a4b30d33e53c8078c03ecc5931075fac49f2c0b70b4c8170af6a1624d5056f5f5d46e3f97dd65de8fe6b1005764d06255b8fdb50ccb2a889dacd40abd689791888a5bf45cbb7d38ce7163326020f8b2a5d33270995c9d46e1e9834dd217fb2d6016928a20dc476a7870111d815eaf4b07a8667592a8bcabbfd2be36198183d5e6b9518019c52b67819b1a95e0f0f2526b4f831e582bfd6fa6a0e181fa09aae4a650dfeaf8020425653c98ceb2001da678dcc8313abe4aba66e55b8e44c3f2306d20f036577eaf65f521052c7d67ed90302fa6c0b2d73071db03c58d952ffc863eb600fe75eb3a10674c41110e9c214b049f90f2a7be2dd3ca0d16ee1b24c928a9a035b4e82e8ba87d054d4f377e1db72e3b3f69a8c01c89c18b85bbaf63445c0ec91c31f74a7161eaf751d329c900962ab5e64e3a5a701bb5140ac83c962b789fedb9db679e874f53892a2e12687aaa1d522f14e610955d0be0be53b74b9fb2a369743e69478ba1cdbc0eaaa00e53560aec73dc97769d723f752d917cf6176ba506ea2c5dfeca900e977e179ef6ff633a25bfc7f996af3b5cb36dfa2c616f60554e7469d60a716fe424bef1b93832c41dd8e29c8b84c35d0e6de7476d0ec23e2b4d568984a9e3afc225be7fc88f0d6d5cfa58d8afb7b743dca8a7f7c47880014b7393fe5f0bd3f46f85b7b646c7402da6383237b01684b229cbe1f64c82a262d505c7ad4fcb7ab053e6baa916173130d3a28fe1f57ae73babf23f8415423f7af10fd51f20a8b85323b249eba785ef86cac4efa9818901d3777e45244fcfcb63b2113974d2ac7869ab0f8a945111a90ed588d6b77315540b94a1a20f3647c0f4f55e256d78ae182150e8a641743d366451df64f4e3315e86986f1e5c0af6f4493a791c0bba0d451d68f07575065d587d14a2bbf6e77887683cd2922b70368877ed861a1c7376cf6dbcbfe5de1b1524053397bf1dc66351534967728109a465a2daa0531378d2ef3bcd2f8b68a61c59c9e681b2f92241459372806bc8015c64f416ae8a629dcb2f38eee74e88e8c6daeb40ce91fc2a4c7b7aa54107a1bfe1bbf68e86232a39b43be9eec28aa3f65a391b4f9d47025b9a85e195af74ff6d1847ae51d3e8e760a4d0ec6cb11eacebf2e27f9aa7c087e6511a9356e93fef0b941c2e3ccbc35584cba9791fb88f53c0711adff34303e132f0704276b1ed95b91a4a42bf1b3dbee5fecdc100d1e0e98d440eff3034b7ce2d8527e9acd69445a4b899452d6e016c4f54a3398dea4238251b9d2f0f10b746662a290a2163b8b21b21d5f86ace7e23857eb7daf15700b493eae0a5ca1cab002d18d3db4e7b03ad19bad7d77eb7d6285542051f0f5812129f5d0a708f4e8cfa8a06452ea0eab0f86ebd780ec0d0ae00e7fcd1542ae0a80acef0cf9f19d66684094d067bec4ce16afa58273029c53867f69bbc5faf6432c0e9f2b5c9cf7122aeaefd014a57d609e7a2b89854589616cbac3f3a5807442f4d8e7a859498aaac88af17e8ad8514a8e3256c042de33ea62f93ca558a290e9f76b65bc1c2666ef3737c097dd33501becbe662d3efd5cae053bcbda0d439216b03acfa5b2df54efd3339cd2a69c33065f62bcccef00f1543d876e5d84b9bf6b24bcb944f540a0d1792e551381ab7d31e9207e07f4f30489599e2ee83c409abf809c3b430ab713185e148d97a5c7c9366370c54efd5f3ff7a13ae453a24b3e4bc77ea401f39a6d3bcb969b3d8ad8e2da41d0983a634e99b5a36f7df13ae1f266", 0x1000}], 0x2, &(0x7f00000066c0)=[@rights={{0x18, 0x1, 0x1, [r6, r18]}}], 0x18}}], 0x8, 0x20000000) 7.583841897s ago: executing program 1 (id=2233): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x8, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x375}]}}]}, 0x54}}, 0x24000014) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) (async) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x3, 0xfff8, 0x7}, 0x18) (async) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) (rerun: 32) getsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r11 = accept4(r10, 0x0, 0x0, 0x80800) sendmmsg$inet(r11, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="96a6", 0x2}, {&(0x7f0000000a80)="01639b8a7adf76a596dc7603572fd5162b7be8e1de50d236eed43db325a51576bd9ed242d96de5a2fe685cef4802d2cc7339ed8c90d50f6162c922a6a4adaa230eb76571c0814d2cf0a44498438d173cf856294be399e42d8ea6916498fc3e52c09bcbed1d000000000000009cb163bf751be891c5f965591fbe56f2223b8eda1780406f61a512b5a0f49c8995ba8851cc2a633af7616c9d616c4f25c38a72e4ceaff69c7710b58f85f0be10ceb7ef1b2d5984794e0fee2931ea186a68da2053a6c11d4155410207c2c40d9bdfbeebda688710f17265a62caae90671", 0xdc}], 0x2}}], 0x1, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 64) 7.482065246s ago: executing program 5 (id=2234): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) eventfd(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = userfaultfd(0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000090000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x114}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r8 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r8, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x9) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 7.270507611s ago: executing program 4 (id=2237): syz_clone3(&(0x7f00000011c0)={0x2008400, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0xc}, &(0x7f00000000c0)=""/155, 0x9b, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=[0x0, 0x0, 0x0], 0x3}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x0, &(0x7f0000001240)) (async) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000001280)={r0, r0}) (async) semget$private(0x0, 0x2, 0xf0) (async) r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000012c0)={0x2, 0x0, @loopback}, &(0x7f0000001300)=0x10, 0x0) bind$inet(r3, &(0x7f0000001340)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) r4 = signalfd(r0, &(0x7f0000001380)={[0x8]}, 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000013c0)={0x3, 0xf91}) (async) prlimit64(r2, 0x7, &(0x7f0000001400)={0x0, 0x6}, &(0x7f0000001440)) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000001480)) (async) connect$inet(r3, &(0x7f00000014c0)={0x2, 0x4e20, @empty}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001500), 0x62040, 0x0) (async) ioctl$LOOP_SET_FD(r4, 0x4c00, r4) sendmsg$nl_route_sched(r4, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)=@getqdisc={0x38, 0x26, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0xd, 0xc}, {0x7, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x44000) sched_setaffinity(r2, 0x8, &(0x7f0000001640)=0x6) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001700)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r6, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r9 = getpid() prlimit64(r9, 0x9, &(0x7f0000001840)={0x2, 0xffff}, &(0x7f0000001880)) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0x100, r6, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x66}}}}, [@NL80211_ATTR_VENDOR_DATA={0xbe, 0xc5, "43e38673006327c91ac9dd7d136a8d1c4cfb9d2d1ce7040e5b3fd91ad942b7ff0d2f47215ad3921519276703fcee238dd56944ab8ec59a1f8fcf3d6486f7ccd4f020f594ebc64a8445a1b32fa2877f3289d3400c65dc52dd0b5ddcb03df28b82a70c487a05300d36058b279480fb2e79a47073e81115a7b921ddd53943a8801eb6f640c0b19ad5c219e4c92fae2d562d7b17d3561951a92d54f00242cc2428590291766af0a42fecee8056275581417b4ef396e7e17b097e3be9"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xd74}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}]}, 0x100}, 0x1, 0x0, 0x0, 0x44850}, 0x4040) (async) r10 = socket$kcm(0x29, 0x7, 0x0) fcntl$setlease(r10, 0x400, 0x2) (async) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) (async) syz_open_dev$dri(&(0x7f0000001a80), 0x70, 0x440102) (async) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000001ac0)) (async) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000001b00)={0x4, r4, 0x1}) (async) sched_setattr(r1, &(0x7f0000001b40)={0x38, 0x3, 0x20, 0x8, 0x80000000, 0x2, 0x401, 0xa}, 0x0) socket$inet6(0xa, 0x6, 0x7) 6.769311888s ago: executing program 1 (id=2238): r0 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x44005) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000001040711e0e17000000000001090224000100000000090400b921030000000921000805012205000905810300000702077b0cced69acb31bfed1aaef80bbdd094bed0deee897500273630d3083ad0d86d8dc11b5ceae33d5906f11cb92705e67ed15cfd15f9155f85a8e471afcf4a9f060577799a521539802381cd9f16a54d94ab689e155d0079feb64e7f8007e904d5553db2aa9f611daf4accb522772c9408b985a6eeccc811482e63ede16454d63e0aee196c7a6e89aaab53b97ba59dd22bada5774153c92d17"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 6.238250794s ago: executing program 4 (id=2241): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x40, 0x4}, 0x18) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000540)=""/217, 0xd9) (async) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'caif0\x00', {0x1}, 0x5}) (async) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) 5.827556598s ago: executing program 5 (id=2244): syz_emit_ethernet(0x56, &(0x7f00000010c0)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x20, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@dstopts={0x2c, 0x2, '\x00', [@generic={0xc5}, @hao={0xc9, 0x10, @local}]}]}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, 0x0, 0x4d) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x7}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000200)=""/99, 0x2e, 0x63, 0x1, 0x2}, 0x28) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet_icmp(0x2, 0x2, 0x1) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xa0, 0x81, 0x6, 0x7fffffff, 0x3, 0xffffffffffffffff}, {0x9, 0xd630, 0x1, 0xfffffffffffffdd7, 0x4, 0x8000000000000001}], ['\x00']}) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r7, 0x1}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xf, 0xe, &(0x7f0000000ac0)=ANY=[@ANYRES8=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.606496653s ago: executing program 4 (id=2245): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) unshare(0x20040600) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000200)="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", 0xfffffffffffffeff}], 0x1, 0xc) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.59598918s ago: executing program 0 (id=2246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x52d501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f0000000280)='security.SMACK64IPOUT\x00', &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRESDEC=r2], 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x220, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, &(0x7f0000000040), 0x0}, 0x20) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000440)=""/102400, 0x19000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100), 0x2) r5 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x6100, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r6, 0x4, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRES8=r6], 0x10) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, 0x0) 4.498364652s ago: executing program 2 (id=2247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0xfffffffffffffdfd, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) 4.354448489s ago: executing program 5 (id=2248): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000b80)={0x1c, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x1000000000000, 0x0, 0x8800}, 0x20040000) getsockopt(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.082046563s ago: executing program 2 (id=2249): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'net_prio'}, {0x2b, 'devices'}]}, 0x26) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) tkill(r1, 0xe) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'pcmad\x00', [0x7, 0x4f5, 0x8, 0x6, 0x4, 0x5, 0x7, 0xef5, 0xffff, 0x100, 0xe434, 0x1, 0xa000000, 0x5, 0x1, 0x800, 0xfff, 0x0, 0xdfd8, 0x6906, 0x401, 0x0, 0x10, 0x3, 0x10000, 0x0, 0x10000, 0x800, 0x8000, 0x2, 0xd, 0x8]}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x7, 0x20, 0x8, 0xffff1cf3, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @loopback, {[@noop, @rr={0x7, 0x7, 0x73, [@loopback]}]}}}}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @initdev, @multicast2}, &(0x7f0000000380)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x8, 0x800, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x700, 0x7800, 0x6, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000500)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000000540)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x69, 0xf3e, 0x40, @local, @remote, 0x8000, 0x20, 0x7, 0x10001}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x1, 0x10, 0x8, 0xffffffff, {{0x55, 0x4, 0x3, 0x28, 0x154, 0x65, 0x0, 0xff, 0x29, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x10, 0xb2, 0x0, 0x9, [0x7fff, 0x1, 0x4]}, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x6, 0x11, "390ba4779d5cc13bdd21dd9d936b29"}, {0x6, 0x9, "58af69e8fb206f"}, {0x2, 0xe, "75b2afdaee9b6d766416d829"}, {0x7, 0x8, "5fe993781104"}]}, @timestamp_prespec={0x44, 0x2c, 0xc9, 0x3, 0x8, [{@rand_addr=0x64010102, 0x68b}, {@rand_addr=0x64010101, 0x7}, {@empty}, {@local, 0xd7}, {@empty, 0xfffff09f}]}, @ssrr={0x89, 0x1f, 0xd3, [@private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @remote, @empty]}, @ssrr={0x89, 0x23, 0x44, [@loopback, @local, @broadcast, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local]}, @lsrr={0x83, 0xb, 0xa0, [@multicast1, @loopback]}, @timestamp_prespec={0x44, 0x44, 0x32, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3b}}, {@loopback, 0x80}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0xe}, {@dev={0xac, 0x14, 0x14, 0x40}, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x401}, {@broadcast, 0x7}]}, @noop, @generic={0x44, 0xf, "58344820a453016e2ca92512bd"}, @timestamp_addr={0x44, 0x2c, 0x45, 0x1, 0xb, [{@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x60000000}, {@private=0xa010101}, {@empty, 0x6}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xf4, 0x5a, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x20, 0x5dd, 0x9bae}}) getsockname$packet(r0, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000003180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003140)={&(0x7f0000000940)=@delchain={0x27e0, 0x65, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0, 0x7}, {0x2, 0xffff}, {0xb, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x27a4, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xf}}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_FW_ACT={0x140c, 0x4, [@m_vlan={0x114, 0x0, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x40, 0xa4, 0x0, 0x8, 0x3ff}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x200, 0x10000004, 0x6, 0xffffffdd}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x8e, 0x6, "6918c65db42e6623638b3636cbe7da08b716beb9ce238db559dde6b709ead258ed7f35042e82152fd1a0ec25aa57fb221771ea85867a2affc8c0a0e51474d6433a77c65ea144aa6adfdf506bbafe214a0e78b6199263140608cab2a3cc1ad6315bee6d13d7e484068e15bee08fdadf989539bb94c4da7b3dc4e4b7e723e2e4c6e2897a211f390d99fb28"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x1054, 0x10, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x6, 0x0, 0x9, 0xff}, 0x7}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0xd4, 0x12, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x35, 0x5, 0x7, 0x0, 0xd}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x5, 0x38e, 0x11}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x0, 0x7, 0x3}, 0x768}}]}, {0x4f, 0x6, "8ad58ed26b4cba81fe4115d96a0721d4250d1c48b22bb75ef0ecfa59ac2ad39329d26d3a64ef646f6f01569677ebe1e7e3d6283873539ac0a747f44798e708c75fc5b6073161b9a263e916"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0xdc, 0xa, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_PARMS={0x18, 0x1, {0x401, 0x4, 0x20000000, 0x400, 0x9c63}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d6974b11721d2b38e7297bbd3551bd96"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_ACTION={0x6, 0x3, 0x20}, @TCA_CT_LABELS={0x14, 0x7, "9fff66c3242bbbc1cf2ca6bc3ab60ffc"}]}, {0x29, 0x6, "350439fad586c482ea77e7aade1e612434b8b63a8fa80ecb2835d4872127cd79d08047038b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xf0, 0x0, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x19c1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1190, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xf, 0x279fa32f056aa582, 0x5, 0x7fff}}]}, {0x91, 0x6, "2d573b25103f8b6eb04c50c33590727e0aa687e5661c87f5adc4dabd57a8f214cba2dbe9c9590705eedac7ba904e0beed0caa5ab7d9475fc8aca1ce4f520a00ab4b3097acbff217c13a6772c2d29bcd7be3dd43d29f02c1f897a852fea29c48e56f154f06fbab9c2686606222c9ceac1c4a1006583258d28b3c2a1fb44056a0db4e82be419afa35e25375c2d41"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gretap0\x00'}, @TCA_FW_POLICE={0xc6c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x7, 0x8, 0x1, 0x9, 0x222832b7, 0x10, 0x3, 0x7, 0x3, 0x7f, 0x5, 0x6, 0x2, 0x1, 0xb9, 0x0, 0xa, 0xfbe, 0x2, 0x4, 0x7f, 0x4, 0xf, 0x400, 0x3, 0x6, 0x1, 0x6, 0x1, 0x5ce, 0x1, 0x9, 0x9, 0x3, 0xf, 0xffff, 0x0, 0x4, 0x8, 0xfa4, 0x4, 0x5, 0x20, 0x5, 0x8000, 0x2, 0x2, 0x9, 0xc, 0x6, 0x9, 0x5, 0x88d5, 0x3ff, 0x3, 0x200, 0x80000001, 0xffff, 0x9, 0x7f, 0x5, 0x2, 0xcd, 0xc92, 0x5, 0x10001, 0x9, 0xd8, 0x5, 0x3, 0x516, 0x5, 0x3, 0x5, 0x3, 0x5, 0x492, 0x1, 0x4, 0xb973, 0x5, 0x4, 0x1, 0x8, 0x0, 0xffff, 0x0, 0x7, 0x6, 0x3, 0xfffffff2, 0x0, 0xfff, 0x99b, 0xd, 0x4, 0x7, 0x4, 0xff, 0xb67, 0x6, 0x1, 0x8, 0x80, 0x7, 0x0, 0x1, 0x101, 0xed3, 0x8, 0xf4, 0x2, 0xfffffff0, 0x4, 0x80, 0x1a8, 0x8e, 0x3ff, 0x4, 0x6, 0x9, 0x7f21dccc, 0x9, 0x3be, 0x3, 0xc653, 0xa5e1, 0x400, 0x3, 0x6, 0x0, 0xcec1, 0x6, 0x8, 0x1, 0x7, 0x101, 0x10001, 0x9, 0x7f, 0x80, 0x1a, 0x8, 0x0, 0x4a4, 0x6, 0x9, 0x7ff, 0x33a, 0x5, 0x6, 0x800, 0x40, 0x6, 0x3, 0x7f, 0x5, 0xffff, 0x12000000, 0xfffffff9, 0x7, 0x5, 0xfffffffd, 0x5, 0xd, 0x8, 0x2, 0x4, 0x378d, 0xffffffff, 0x5, 0x3, 0x5, 0xf0e, 0x4, 0x1, 0xfffffffa, 0x1, 0x4, 0x5, 0x3, 0x3, 0x4, 0xfffffff8, 0x6, 0x16c, 0x3, 0x6, 0x4, 0x2, 0x3, 0x8000, 0x8, 0x7, 0x100, 0x3e, 0xfffffff5, 0x6, 0x1000, 0x4, 0x4, 0xa3d, 0xe0000000, 0x9, 0x401, 0x0, 0x8, 0x4, 0x8000, 0x8, 0x7, 0xfffffffe, 0x80, 0x2, 0x2, 0x5, 0x6, 0xffffffff, 0x401, 0x4, 0xfffffff3, 0x7, 0x1000, 0x2, 0xfffffff8, 0x3, 0x1, 0x4, 0x81, 0x80000001, 0x200, 0x10000, 0x3242, 0x3, 0x1c9bcad0, 0x9, 0x7, 0x4, 0x400, 0xfffffffd, 0x5, 0x1, 0x6c64, 0xba5, 0x1, 0x35, 0x6, 0x4, 0x4, 0x9, 0x0, 0x9, 0x6, 0x8001, 0xa8f]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x7, 0x800, 0x84, 0x10, 0x3286, 0x0, 0x7, 0x1, 0x6, 0x8, 0x0, 0x2, 0x0, 0x249a, 0x400, 0x7, 0xf, 0x3, 0x219, 0x2, 0x6, 0x3, 0x7, 0x1, 0x6, 0x7, 0x5, 0x4, 0x1000, 0x2, 0x8, 0x1ff, 0x80000001, 0x1000, 0x6, 0x8c85, 0x0, 0xfffffffb, 0xfa4, 0x200, 0x4, 0x7fffffff, 0x2, 0xe, 0x8000, 0x9, 0x8, 0x7ff, 0x8, 0x2, 0x4, 0x1, 0x101, 0xcba, 0x4, 0xc, 0x200, 0x401, 0x9, 0x3ec, 0x400, 0x5, 0x80, 0xd, 0xfff, 0x1, 0xffffffff, 0x1ff, 0x4, 0xe69, 0x8, 0x1ff, 0x5cfa, 0x6, 0x6, 0x1ff, 0x0, 0x0, 0x4, 0x6, 0x8, 0x5, 0x817, 0xbc0, 0x4, 0xfffffffa, 0x2, 0x7, 0x8, 0x2, 0x9, 0x5, 0x9, 0xfffffff2, 0x5b9, 0x2, 0x1, 0x0, 0x524, 0x8, 0x3ff, 0xff, 0x2, 0x1, 0x8, 0x3, 0x5, 0x4, 0x1000, 0x401, 0x8, 0x4, 0x97a3, 0x5, 0x101, 0x8, 0x100, 0xfffffff9, 0x3, 0x6, 0xf, 0x0, 0x0, 0x4, 0x4, 0x5, 0x8, 0x3961d84f, 0x7, 0x5, 0x4, 0x7f, 0xa4, 0x1000, 0x81, 0x2, 0x2, 0xff, 0x2, 0x200, 0x4, 0xea6, 0x2, 0x200, 0x8, 0x31ae, 0x10001, 0x7c1, 0x0, 0x1ff, 0x1, 0x7, 0x6, 0x200000, 0x2, 0xfffff000, 0x5, 0x100, 0x2, 0x6, 0x8, 0x8001, 0x10, 0x0, 0x9e, 0x2c, 0x7, 0x3, 0x6, 0x0, 0x0, 0xff, 0x400, 0x0, 0x3, 0x0, 0x1, 0x10000, 0x7, 0x9, 0x1, 0x0, 0x0, 0x3, 0x4a, 0x0, 0x80, 0x89c8, 0x7, 0x2, 0x4, 0x0, 0xfff, 0x80000000, 0x100, 0x1, 0x9, 0x3, 0x5, 0x3, 0x9, 0x10000, 0x2, 0x5, 0x41b1, 0x101, 0x0, 0x4, 0x7, 0x1, 0x0, 0x3, 0x2, 0x17fa, 0x7, 0x400, 0x8, 0x4, 0x36b7, 0x2, 0x2, 0xb915, 0x5, 0x7f, 0x7, 0x5, 0xf, 0x16, 0x80, 0x9, 0x6d32b5db, 0x0, 0xe7d, 0x0, 0x0, 0x9, 0x1, 0x0, 0xf0ad, 0xd43, 0x7, 0x9, 0x8, 0x6, 0x10001, 0x4, 0xa079, 0x6, 0x54, 0x3, 0x6, 0x496e, 0xff, 0x4, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x6, 0x3, 0x2, 0x5, 0x9, 0xffffff67, 0x9, 0x7, 0x81, 0x7fff, 0x5, 0xfffffffa, 0x1, 0x7, 0x4, 0x2, 0x3, 0x400, 0x4, 0x4, 0x5, 0x3, 0x5dc1, 0x8, 0xeb367c29, 0x2, 0x5, 0xb785, 0xfffffff9, 0x0, 0x100, 0x0, 0xfffffff8, 0xd448, 0x6, 0x8, 0x1ff, 0xca, 0x8, 0x0, 0x1c0000, 0x2, 0x9, 0x4, 0x8, 0x6, 0xaf5, 0x0, 0x7ff, 0x4, 0x6, 0x10f05847, 0x6, 0x6, 0x0, 0x1, 0x9, 0x7ff, 0xfa1, 0x3d, 0xc1ef, 0x3, 0x5, 0x9, 0x7, 0x3, 0xffffff01, 0x2, 0x1, 0x4, 0x8, 0x3ff, 0x9, 0x5, 0x5, 0x3, 0x3efcdea0, 0xa0fe, 0x9, 0x6, 0xffffffff, 0x5, 0x6, 0xfffffe00, 0x6b, 0x40, 0x3, 0x3, 0x1, 0x2, 0x5ab, 0xba, 0x100, 0x1, 0x2, 0x99b, 0x8, 0x4, 0xaff6, 0x7, 0xc, 0x6, 0x6, 0x74aa, 0xffffd044, 0x3, 0x7, 0xfffeffff, 0x2, 0x2, 0x0, 0x401, 0x3ff, 0x58, 0x7, 0x101, 0x86d1, 0x9, 0x1, 0xfffffff8, 0x7fffffff, 0x17, 0x5, 0x3, 0x73, 0xd, 0x5, 0x0, 0xf5d8, 0x8b5b, 0xf4de, 0x7, 0x101, 0xffffffff, 0x9, 0xfd3, 0x7ff, 0x10000, 0x6, 0x5, 0x2, 0x1, 0x5, 0x6, 0x6, 0x778, 0x5, 0x9, 0xfffffff7, 0x7, 0x3, 0x400, 0x9, 0x43f1, 0x100000, 0x0, 0x1000, 0x2e000000, 0x744, 0xa086, 0xa, 0x1, 0x5, 0x2, 0xaa, 0x144c, 0x3, 0x9, 0x1, 0x8, 0x9, 0x0, 0x9, 0x1, 0x2, 0x401, 0xfff, 0x1, 0x3, 0x8, 0xd1e, 0x8803, 0x6, 0x5, 0x6, 0x5, 0x1, 0x81, 0x3, 0x1b5d, 0x7f, 0x5, 0xf, 0xfff, 0xae2e, 0x8000, 0x2774, 0xdc, 0x7, 0x401, 0x10, 0x40, 0x12, 0x80000000, 0x3, 0x3, 0xfffffffc, 0x5, 0x9, 0xe3, 0x2, 0x2, 0xffff, 0x649f, 0x8, 0xd, 0x6, 0x2, 0x7, 0x40, 0x40, 0x8000, 0x9, 0x9, 0x1ff, 0x3, 0x6, 0x3, 0xb, 0xe8a, 0x1ff, 0xb, 0x6, 0x7, 0x2, 0x5, 0x9f, 0x2, 0x5, 0x3, 0x0, 0x9, 0xea4, 0x6, 0x3, 0x8001, 0x9, 0x5, 0x9, 0x1000, 0x6ec, 0x6, 0x80000001, 0x8, 0x88]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0xd, 0x4, 0xffffffff, {0x0, 0x1, 0xfffb, 0x8, 0x2, 0x5}, {0xb, 0x1, 0x6, 0x8001, 0x697e, 0x2}, 0x40, 0x80000000, 0x80000000}}]}, @TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}, @TCA_FW_POLICE={0x460, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xea, 0x3, 0x8, 0x0, 0x1, 0xe, 0x7f, 0x5, 0x0, 0x3, 0x6, 0x3cfb, 0x3, 0x6, 0x0, 0x0, 0x4d, 0x7, 0x5, 0x3, 0x80000000, 0x1000, 0xdb, 0x2, 0x6, 0xffffffac, 0x0, 0xffffffff, 0x0, 0x9, 0x6, 0x9, 0x5, 0x1, 0x3, 0xd, 0x2, 0xf, 0xffff, 0x9, 0x0, 0xfffff839, 0x6, 0x4, 0xabc, 0x2, 0x6, 0x7ff, 0x6, 0x10, 0x0, 0x1c3, 0x2, 0x4, 0x5, 0x7, 0x7f, 0x10001, 0x401, 0x9, 0x6, 0x80000001, 0x19bd, 0x101, 0x3, 0x9, 0x4, 0x7fffffff, 0x2, 0x5, 0xff, 0x400, 0x4, 0x1, 0x38, 0x7fffffff, 0x5, 0x400, 0xfffffffe, 0x7, 0x2d, 0x5, 0x1, 0x6, 0x4, 0x3, 0x3, 0x1, 0xae5, 0x3fad, 0x2, 0x4, 0x3ca, 0xb, 0x9, 0xcae, 0x9, 0xfffffff9, 0x6000000, 0x9, 0x4, 0x8, 0x2, 0x5, 0x9, 0x8, 0x2e9, 0x7, 0x4, 0x5, 0x4000, 0x1, 0x1, 0x5, 0x3, 0x1, 0x401, 0x1ff, 0x8a8, 0xf013, 0x5, 0x2, 0xffffffff, 0x8f1, 0xb71, 0x800, 0x1, 0xd364, 0x6122, 0x3, 0x80, 0x4, 0x6, 0x380, 0xf7a7, 0xb, 0x9, 0x7, 0x2b5, 0x1000, 0x2, 0xfffffff9, 0x10001, 0x9, 0x1ff, 0x80, 0x10, 0xe772, 0x8, 0x7ff, 0x7fffffff, 0x6d4, 0x7e, 0x0, 0x1000, 0x1, 0x0, 0x8, 0x7, 0x4, 0x1, 0x7, 0x8, 0x6, 0x8, 0x0, 0x9, 0x9, 0xc8, 0x10, 0x7, 0x8, 0x3, 0x9, 0x1, 0x1ff, 0x40, 0x2, 0x7f, 0x6, 0x5, 0x1be, 0x10001, 0x7, 0x81, 0x7ff, 0x7, 0x7, 0x7, 0x7, 0x0, 0xfffff801, 0x1, 0x10001, 0x1, 0x10000, 0x7fff, 0x4, 0x80, 0x0, 0x2, 0xe, 0x8, 0x8, 0xfffffff9, 0xfffffffe, 0x7, 0x6, 0x6, 0x5, 0x1, 0x7, 0x1, 0x4, 0x3, 0x2, 0x24df, 0x9, 0x8001, 0xffffffff, 0xffff45fe, 0x120a, 0x9, 0xfffffffe, 0x5e13, 0x4, 0x4, 0x8, 0x8, 0x5, 0x6, 0x80, 0x6, 0x6, 0x9, 0xff, 0xffffff7f, 0x8, 0x1, 0x8, 0x7ea, 0x3, 0x6, 0xffff9640, 0x8, 0x9, 0x8000, 0xbd8, 0x1, 0x9, 0x5, 0x1, 0x7, 0x80000001, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x8, 0xfffffffa, 0x1, 0x262617e5, {0x4, 0x1, 0x800, 0x1, 0x0, 0x6}, {0x3, 0x0, 0x6000, 0x1, 0x38, 0x3f52}, 0x8, 0x0, 0x8}}]}, @TCA_FW_ACT={0x274, 0x4, [@m_mirred={0xe0, 0x2, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x200, 0x1, 0x8, 0x5}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0x0, 0x5, 0x6}, 0x1, r5}}]}, {0x71, 0x6, "5fc2947bcbe5447ddc16973b6d54bbbff61fda6a74289b058879f7a50d4bca81a7ff4545bc17e976d66bd10d87dde3a57175a49388bb00960db188f5f7c1ceb21f1558029ed8ac8841ab58f0f17a18f43d3eb5c7f92d3b942314cbc560f4325b46603ab363c699ae018804605b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x190, 0x2, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xff4, 0xef8, 0x0, 0x1, 0x400}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x16f9, 0xff, 0x2, 0x3, 0xc}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x44eb, 0xc, 0x0, 0x3, 0x800}, 0x0, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x793, 0x7, 0x8001, 0x6}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x0, 0x0, 0x5}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfb, 0x8a, 0x10000000, 0x5, 0x10001}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1, 0x86bbdf7fcfda8713, 0x7f, 0x1000000}, 0x0, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x838, 0x1, 0xfffffbff}, 0x1, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1c00, 0xfff, 0x8, 0x81, 0x8}, 0x1, r13}}]}, {0x43, 0x6, "8b859ecb3b34bf3bca7c71c271684a2757c59d160748d4f27da8d192c4d8dc11a6a269db86cec00082cea9c8052ed389d791c588d9b72e75d4eef7ad8d8027"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x1ff}]}, 0x27e0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001) r14 = accept4$bt_l2cap(r0, &(0x7f00000031c0), &(0x7f0000003200)=0xe, 0x80000) recvmsg(r14, &(0x7f0000003540)={&(0x7f0000003240)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003500)=[{&(0x7f00000032c0)=""/183, 0xb7}, {&(0x7f0000003380)=""/53, 0x35}, {&(0x7f00000033c0)=""/142, 0x8e}, {&(0x7f0000003480)=""/75, 0x4b}], 0x4}, 0x2002) r15 = syz_genetlink_get_family_id$team(&(0x7f00000035c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000003600)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000036c0)={'syztnl1\x00', &(0x7f0000003640)={'ip6gre0\x00', r10, 0x2f, 0x8, 0x1, 0x4, 0x47, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8000, 0xb, 0x80}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003700)={'veth1_to_hsr\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000003740)={0x0, @multicast1, @remote}, &(0x7f0000003780)=0xc) getpeername$packet(r0, &(0x7f00000037c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003800)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000004340)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004300)={&(0x7f0000003840)={0xab4, r15, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3bf7}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r9}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r6}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1, 0x7, 0x8}, {0x4, 0xa, 0x6, 0x1}, {0xb, 0xab, 0xc0, 0x1}, {0x1, 0x2, 0x5}, {0x7f, 0x8, 0xab, 0x564}, {0x8, 0x0, 0x36, 0xb5f}, {0xa2ee, 0x9, 0x7, 0x5}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x108, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x0, 0x6b}, {0x4, 0x9, 0x7, 0xe00000}, {0x5, 0xff, 0x7f, 0x8000}, {0x9, 0xe, 0xff, 0x3}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xd4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x2, 0x6, 0x2}, {0xe2, 0x7f, 0xfe, 0x9}, {0x21ee, 0x9c, 0x1, 0x1}, {0x8, 0x1, 0x1f, 0x5}]}}}]}}, {{0x8, 0x1, r10}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x865d}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xe800, 0x0, 0x8, 0x8}, {0x6, 0x1, 0x9, 0x4}, {0x1000, 0xc, 0x8b, 0x40}, {0xffff, 0x9, 0x0, 0x4}, {0xfff7, 0x5, 0x0, 0x4}, {0x8001, 0x23, 0xf9, 0x3}, {0x6, 0x8, 0x81, 0x5}, {0x81, 0x21, 0x0, 0x4d1}, {0xff, 0x2, 0x9, 0x3}, {0x7, 0x2, 0x5, 0x6}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x799}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}]}, 0xab4}, 0x1, 0x0, 0x0, 0x20}, 0x4e0ae105c3e66ec) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004380)={r0}, 0x4) syz_open_dev$sndmidi(&(0x7f00000043c0), 0x8, 0x22000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000004400)={r2}) 3.272066547s ago: executing program 0 (id=2250): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="a8000000210001000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000b500000008001f000000000050001100fe80000000000000000000002000000000000000000000000000000000000000ff010000000600000000000000300d7a3f00000164010100000000000000000000000000000000000000000000000a00950b67a5af7b53d792ae971b17a2b425ff18f7a5a605fb679fa39d0eee6443df879c21341aaa068e3a675c43b652dbf0314f842286a514badbe1b443bc2ff8e3ce341516fea74b48ccb6d78937e997d30c405d9cffab2f8753caa65666855623bbbe136f0d08a51ecefa37efdfbb912db9fe415bb1"], 0xa8}}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, &(0x7f00000000c0)={r3, r4+60000000}, &(0x7f0000000100)={[0x8]}, 0x8) 3.146442092s ago: executing program 1 (id=2251): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/100, 0x64}, {&(0x7f0000001e40)=""/227, 0xe3}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f00000051c0)=""/164, 0xa4}], 0x3, &(0x7f0000000640)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000740)=""/36, 0x24}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/161, 0xa1}], 0x3, &(0x7f0000001880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000001940)=@abs, 0x6e, &(0x7f0000001dc0)=[{&(0x7f00000019c0)=""/118, 0x76}, {&(0x7f0000001a40)=""/25, 0x19}, {&(0x7f0000001a80)=""/57, 0x39}, {&(0x7f0000001ac0)=""/195, 0xc3}, {&(0x7f0000001bc0)=""/233, 0xe9}, {&(0x7f0000001cc0)=""/240, 0xf0}], 0x6, &(0x7f0000005280)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000001f40)=""/220, 0xdc}, {&(0x7f0000002040)=""/48, 0x30}, {&(0x7f0000002080)=""/243, 0xf3}, {&(0x7f0000002180)=""/222, 0xde}, {&(0x7f0000002280)=""/152, 0x98}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x6, &(0x7f00000033c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000034c0)=""/208, 0xd0}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/101, 0x65}], 0x3, &(0x7f0000004680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000046c0), 0x6e, &(0x7f0000004a00)=[{&(0x7f0000004740)=""/56, 0x38}, {&(0x7f0000004780)=""/145, 0x91}, {&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000004880)=""/140, 0x8c}, {&(0x7f0000004940)=""/170, 0xaa}], 0x5, &(0x7f0000004a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000004b40)=@abs, 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/206, 0xce}, {&(0x7f0000004cc0)=""/160, 0xa0}, {&(0x7f0000004d80)=""/147, 0x93}, {&(0x7f0000004e40)=""/64, 0x40}, {&(0x7f0000004e80)=""/20, 0x14}], 0x5, &(0x7f0000004f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}], 0x8, 0x20, &(0x7f0000005180)={0x77359400}) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r0) mremap(&(0x7f00007e8000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000699000/0x2000)=nil) (async) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) (async) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000000)={{0x7, 0x5}, {0x3, 0x1}, 0xb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.925343491s ago: executing program 0 (id=2252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = getpid() ioprio_get$pid(0x2, r3) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60050}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000004000000020000f3ffffff100400f7a004b1a819d2c2e4d378fd4e11721d000000000000000000000200000d0000000007000000000000000d000000000000000000000000006100"], 0x0, 0x64}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80801) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a0a0568beed51cb2d4975000a00000964fb854a116fbdf8d73910bef560c8d45eae6fa80316"], 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 2.808927091s ago: executing program 2 (id=2253): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0xc0, 0xa0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00') 2.625485512s ago: executing program 1 (id=2254): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x124, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0x3}, {}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xf8, 0x2, [@TCA_U32_SEL={0xf4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0xffff8001, 0xf073, 0x4010000, 0x8000}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x2, 0x9, 0x2}, {0x2008, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x5e3, 0x4, 0x8e, 0x3}, {0x2, 0xffffffff, 0x5, 0x1ad}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x1, 0x5, 0x5127, 0x800}, {0x6, 0x1, 0x2, 0x1}, {0x40, 0x40, 0x3, 0x5}, {0x2, 0x8, 0x6, 0x201}, {0x5, 0x406, 0x2, 0xfffffeff}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}]}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) syz_emit_ethernet(0x52, &(0x7f0000001b40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "adb18d"}]}}}}}}}}, 0x0) 1.911954251s ago: executing program 4 (id=2255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000200), &(0x7f0000000280)=""/113}, 0x20) truncate(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)={0x1, 0x0, @c}, 0x29, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1.907203777s ago: executing program 0 (id=2256): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/233, 0x46, 0xe9, 0x7}, 0x28) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f00000000c0)="260f799f050000000f35f3af66baf80cb87cdbde82ef66bafc0c66ed0f20d835080000000f22d8b805000000b9000000000f01d967660fdb19c7442400f0000000c744240252b30000c7442406000000000f011c24c744240000400000c744240200000000c7442406000000000f011c240f01c4", 0x74}], 0x1, 0x14, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000140)={0xd5, 0x0, 0x3c}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x2c, r4, 0x211, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x2c}, 0x1, 0x100000000000000, 0x0, 0x4000059}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x3, 0x7, 0x2, 0xc766, 0xb, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0xaa, 0xff, 0x4, 0x4, 0x2, 0x5, 0x2000000, 0x4}}, {0xc, 0x2, [0x6, 0x800, 0x4, 0x1000]}}, {{0x1c, 0x1, {0x8, 0xc, 0x2, 0x800, 0x1, 0xeed, 0x3, 0x2}}, {0x8, 0x2, [0xffc0, 0x1]}}, {{0x1c, 0x1, {0xc0, 0x6, 0x74, 0x4, 0x5, 0xfffffffd, 0x5, 0x6}}, {0x10, 0x2, [0x80, 0x6, 0x7fff, 0x9, 0xffff, 0x6]}}, {{0x1c, 0x1, {0xe7, 0x7, 0x40, 0x78, 0x2, 0x8, 0x4, 0x7}}, {0x12, 0x2, [0xff, 0x200, 0xc, 0x8001, 0x6, 0xc4, 0x0]}}, {{0x1c, 0x1, {0x4, 0x8, 0x0, 0x7, 0x2, 0xfffffffa, 0xd, 0xa}}, {0x18, 0x2, [0x7ff, 0x2, 0xad, 0x6, 0x7, 0x3a9d, 0x1, 0x100, 0x5, 0xfc89]}}]}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x4}}]}]}, 0x14c}}, 0x0) 1.75869631s ago: executing program 2 (id=2257): r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x3847, &(0x7f0000000200)={0x0, 0x49e74, 0x1000, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r7) sendmsg$TIPC_NL_NET_GET(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x104, r9, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ce4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4088}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}]}, 0x104}}, 0x4000001) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x84, 0x0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x68, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0xf, 0x1, 0x3, 0x0, 0x0, 0x1}}, 0x0, @default, 0x508, @void, @val, @void, @void, @val={0x6, 0x2, 0x2}, @void, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0x57, 0x2}}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x4, 0x0, {0x7fd, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x9, 0x7}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0xfa, 0xffffffffffffffff, 0x8d, 0x60}}, @val={0x76, 0x6, {0xe, 0x39, 0x3, 0x2}}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8090}, 0x20040000) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r14 = socket(0x28, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@ipv4_getnexthop={0x50, 0x6a, 0x1, 0x70bd2a, 0x25dfdffc, {}, [@NHA_MASTER={0x8}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 1.506464161s ago: executing program 1 (id=2258): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private2, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x29, 0x3, "01"}], 0x18}}], 0x1, 0x4000000) syz_usb_connect(0x1, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, 0x0}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2409}}, {0x2, &(0x7f0000000480)=@string={0x2}}, {0x0, 0x0}]}) 1.484196163s ago: executing program 4 (id=2259): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000040)) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, &(0x7f00000000c0)) r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) fsetxattr(r1, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)=')%\x17\x00', 0x4, 0x1) r2 = syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x48, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x7, 0x20, 0x7f, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x58, {{0x9, 0x24, 0x6, 0x0, 0x0, "747be405"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x9, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x240, 0x42, 0xe, 0x6c}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x2, 0x2}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x5, 0x5, 0x92, 0x10, 0x3}, 0x13, &(0x7f0000000280)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x3, 0xf, 0x8, 0x6}, @ptm_cap={0x3}]}, 0x7, [{0x2b, &(0x7f00000002c0)=@string={0x2b, 0x3, "ec96b026bf1774c9b0686b00086c800791639ffbbfe606c5c46bd30816c24d921f6d0ef78b864eedd6"}}, {0x3d, &(0x7f0000000300)=@string={0x3d, 0x3, "e338c51ae0fddcb33c2727c278ac00409730c459029eb8040f07a44e24a15aa6caf6aba41fa8d6deb88ed9a5688a7ed29764f501daa53a256860c9"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3}}, {0x2a, &(0x7f0000000380)=@string={0x2a, 0x3, "6666ca148ad614479eb4a6dea73ad5d91249e345e8a6741ed1cfc9939bb9b29a86559c9092db1349"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3401}}, {0x100, &(0x7f0000000440)=@string={0x100, 0x3, "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"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x40, 0x1, 0x7a, {0x7a, 0x1, "a48896825918ece3a12b73543e141dfba7231abd760c6a9d640a6b0e45187b1419649233c2c91e5e3bc19e4876b16b3502ca555e5ecbfdc5dea082e984a056aeaa61b2accf5d3dbb6dd4875507fcb2e4e4281e5f4c06ea66dbb4c4a93ab3a6eb80d977687e4378eb7813204033eb6bea8d551a4178186992"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f00000006c0)={0x20, 0x6, 0x100, "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"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x7f}}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000008c0)={0x2b, 0x8, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x77, 0x7, [0x9, 0x400, 0xa76a, 0x100, 0x93b, 0x80000000, 0x5b]}}]}, 0x50) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x5) r4 = openat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x2a0100, 0x24) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000980)={0xa, 0x0, 0x0, @private2}, &(0x7f00000009c0)=0x1c) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000a00)) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r6, 0x2000004, 0x10, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'ip6gre0\x00', 0x0, 0x4, 0x2d, 0x7f, 0x1917f288, 0x8, @loopback, @empty, 0x700, 0x7, 0x2, 0xdc94}}) sendmsg$nl_route(r4, &(0x7f0000000c00)={&(0x7f0000000a40), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=@dellink={0x54, 0x11, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x10000, 0x11440}, [@IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_NET_NS_FD={0x8, 0x1c, r4}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, @IFLA_TXQLEN={0x8, 0xd, 0xb3}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_EVENT={0x8, 0x2c, 0x400}]}, 0x54}, 0x1, 0x0, 0x0, 0x240000c5}, 0x0) accept4$inet6(r3, &(0x7f0000000c40)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000c80)=0x1c, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x1000) r8 = syz_usb_connect(0x3, 0xc89, &(0x7f0000000d80)={{0x12, 0x1, 0x110, 0xb0, 0x17, 0x8e, 0x8, 0xc88, 0x180a, 0xeb83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc77, 0x4, 0x6, 0x0, 0x20, 0x9, [{{0x9, 0x4, 0xc4, 0x0, 0x5, 0x73, 0x4d, 0xbb, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0x2, 0xa6}, {0x6}, [@mdlm={0x15, 0x24, 0x12, 0xc45a}, @country_functional={0x8, 0x24, 0x7, 0x10, 0x451, [0x7fff]}, @obex={0x5, 0x24, 0x15, 0xf}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0xde, 0xf, 0x9}]}, @generic={0x14, 0x31, "4be985c3f9aa980bb36f5f5b321a3d0ad02c"}], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x3, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0x4a, 0x4, "f1fa05e1dbe6c0c9c15d959f561e84e6cd6af22c99f2759dd166513af9ffd0bbf3d3d29dedfe94e504a6b1aa709e7729861952ea3ce59da1ade70ad6fe2bcbd89dc2bee705d1519d"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x5, 0x31, 0x14, [@generic={0x85, 0x23, "938a33696dce4b6d6fb9ecea99dd32ee9264cce8d00811018d606758fbaf1404f4dbaf72016864c35a3abaae9d0c65387874f9ce9ee1b167ad843581d0bb12d956bfa3909feb53ca24472990a6b27e8a817c7db6f251de0db9fb6bac2493f8589e1227560015de797011336f1fc41516975fbcf37664a59c32d16ea4bddcbeaf90fa67"}, @generic={0x41, 0xe, "8cf221f30bc2fc7245f8b62abd55231b8e4384d77b05fac3f49a89cdd71f6bbfa6ada7b21c0c96c0da850ffbf75ea4f6e17c0615b34d6b433100be5f82e351"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0xd, 0xff, 0x3, [@generic={0x1a, 0x30, "44b5788ff9bc0718a5fe0342d9e5ab35440f29d193d59330"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x4, 0xe, 0xf7, [@generic={0x97, 0x9, "146d5efd35be832f97f59475abcef1bd06a7baf6d011ae400fb20080c4b69125b49f3d7c385f99b4041dbd5d34c230423a431c3b3f55a45a60b845d90307415763431d338b2a745f25258cc8db8fa1f570d298db661fe7350ecdb60079fef8fdd0565c0c96510db362cd73c3b163f17751907883e5820e9ad70378ee14898a8e6678c947d1269d067764f9e500f25d7690d23e987a"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x40, 0x2, 0x7, [@generic={0xa5, 0x22, "4be9a33d10aea7a429ec31a5ea0c4f3d3bd8b5672918e2c7be926a7835e3515287e91f9418b5124c5a084c3dda76623ce171ee75131a2ce8e9df3e54e1af85461e918530852d7f84aa0894b26af350011c7c7451e788a4e426a03c134b0dd26bd19a968010c2930222d2692acceeaf1bdb17760bcda3218d2b68c94666646e9a531358222767dae7618e895022164950937d38d154da18b6d3f07f1eaefd347ace8b68"}, @generic={0x3, 0xd, '='}]}}]}}, {{0x9, 0x4, 0x22, 0x56, 0x3, 0xff, 0x3, 0x73, 0x0, [@hid_hid={0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x7f9}}], [{{0x9, 0x5, 0x0, 0x10, 0x20, 0x6, 0x1, 0x8, [@generic={0x46, 0x31, "dd8c7f3885c96697feb87f5c012377bd9f159da8205138151b6bd423caef0574f29bc04aa66f822a38e728038f0231ba42ee69b5945c13c77cf1ec5b87394aa232ddbc43"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x48, 0xe, 0x3d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3f7, 0x2, 0x9, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc9, 0xc5}]}}]}}, {{0x9, 0x4, 0x37, 0x5, 0xb, 0x3f, 0xf5, 0xf9, 0x5, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "ab"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x1a0, 0x2, 0x7, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x59, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x4, 0x7, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x30}, @network_terminal={0x7, 0x24, 0xa, 0xd6, 0x8, 0x0, 0x75}]}, @hid_hid={0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x42c}}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x6, 0x6, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x2}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x1, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfc, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x5, 0x4, 0x0, [@generic={0x8f, 0x23, "16e03c460df27b37e7c84718694afb84ba6bd2f356632741a401a2e478344b469b13d7ff84298ccde37c3543fb967db2c3c9c84729f2a8b4797f1d65ad3c9a67977296ee66d3020dacca4c9595ddfe1c438561a9cdca113a2e56df82567dec4dd6d3c007baf0ff280ea31c24840395713a9b81ccc2da9d7a382edd660b5be8bb7ad27095e1ecdccbd3ae7e4e7e"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x0, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8f}, @generic={0xcb, 0x31, "db948dc9543967695e90e857c79378d970f19aa958dc5f98fcb87e25016de9bea2fb99209baf77c3bd31afe3cd8a45deb1eacb1cbca915a4728e6e0bbfdb7aabb0c9185bad1b467f8c6c7c60d401fa991d9a05d7038c089b3ee987dfe28744b436b8ed79183aba65cccfd169dc25fda270892a7265c677622dd2b2e548108f628b7fcc32237f44579714b35ef6280e8453c3abfe854d8583ec05030e7bd1008cde34f1b56ebcf8d3d14b611e7ed800ce7660f42072f1d456426533e298280c7e36e39b4b5764fe313b"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0xf, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7}, @generic={0xad, 0x3, "c19a781e09fdbc6909d10957a26744ccd055365e3fe248a6ef5989d19a99e959f745460188c72da07ea1f424caef02f4cb2048819caee6a48aa117c80ba07c10f56591eabb69ff491ec7146194194e121c35313a138e42730072a2f868ab89e36f696f857cdca0a9cbbee5afe87c5ce9cd0524296e96c4a1b614fa8d426a18c0d7c347762bd398357c1f03ffc3690809c21e69b386f6a82332d1932196c3048737089fe4081478ec4ceb6f"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x8, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x47, 0x6, 0x7, [@generic={0x72, 0x10, "dd45f0afcde7f829a5021e641f1665c123ccb79df5f4081039534c3a77314256b964027d8b7ca241388bf0858a9ecec9249ce79543d9bb2e15f0dc04aedd17d61caa13d9ea29cb5958bec81218501e5fafed6c7f48325383863173f17c7116a6940fa22cae389b505f0a9fb1e6d08a50"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x7, 0x0, 0x80, [@generic={0xe2, 0x3, "3f442f4551c29e906b40cadc0abcb8874d8bceabb03b6dd20a1ea2e60f7bbcd59cf58e902706513c8b6f026fb00ec9fe0378052b67d36f863d7cbe9caa46fdc13815b49cb06cad185669fb3bf84b5ab5032eac56245b2e06c3862878faddd7446cd4de38a6552b05a7254d1d0a3241218c7c9f38a9441d507492862c92445c7bd44b183f5c28d73dba6792db8cd3509b051e4db2d5f8e9ae42a8637c807ff971a8e1e43f65636138c3f5e173ffbc7e3e464158b70dc4a124da8cfade90f31cfaad53a5278364a153dd96ef11b8d8cdf76a3cb23c248cded3da3649426bdcf34e"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xd, 0xfa, 0x10, [@generic={0x73, 0x1, "0d98c06b3c2d3c2a623f8d4d0d662332a9ba52e6123cf6cb1690ffce1e5333d57d9301124f7e0139b13c9f5a4f0cb53ab9e759d075d5383794c81abc3f6261b2f1553c965ff2bd2894d04b31bbb46c70825e72bd5962fee1acac51df28b77cc5c9c80e608099c1e059e4c12b241510c99e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0xb8, 0x4, 0xa, [@generic={0x31, 0x5, "dc9a73cb419799bf2667612613e6aae806bd0cf9c87d1cd300c76ff631bcd5e4ccc7954bcfcd86830673f3fbb13585"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x2f93}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x6, 0xb9, 0x4c, [@generic={0x6c, 0xf, "9abc73949210d43fd915af1ad0f97b22df237a4e2b4f2e28f3e4bc4e1e526b76908250ae78f79dd1b096d31911cde359ab4c7247496588f8cf7d62682dd9e8ceebfd6cc3169df35a44d7b04d3b7d7a11ea4c6c7a58021a958a86e36cae1ddb3d6f5dd6e774e83176529b"}]}}]}}, {{0x9, 0x4, 0xe8, 0x7, 0xc, 0xf8, 0xe0, 0x42, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x8e}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x5, 0x1, [0x9], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x4, 0x3, 0x80}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x5, 0x6, [0x3, 0x1, 0xa, 0x9, 0x3, 0x1], 0x44}]}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x3, 0x8, 0x3, [@generic={0xef, 0x2, "f825d0b79db212b34bf85c3bd66f716398cf7620285fcd2c7ffc15eeeac526693007285544051e427a60445c8a78da2f4651856cc71cbcdc1623d3690625f94d3cfa112403178cee9103334dba71dd01dc6c4976564e6a071ae57efe9cdd77219a7541c3f5e6b00b8392711e36a5452a792276bee731677a43a07fc5c840ed1e0705e4a5e11ab2781e6a94939318ec50c452d655d1fa52c04302523965df80840772a4d087a78c3da1fd13c3c8f4b780c8a0588ba4bc829611be8b635073bd4f069421698662329e3ba4d37f7699576a6b7f5d6f0a73cbf05a92ef50dfd6d0dcfb1e00d815bae820eed2243113"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x9, 0x10, 0x0, [@generic={0x76, 0x23, "cb5ebfc498580bb6e04b65af66d6a0f215fc03e806025a68b5181c99edb8236d721ab275c48c515ae645dd0c8a1c4df2c3993acd44ef94a1e16ce1ce0be563dc2d3b0962fdaf709994584f07bb779e4a3226553938ea752c5fc7cf126cdf95a57d8324955f5577e1f2b771c387ffb7b7afcae270"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xb7a7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x9, 0x80, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x5, 0x0, [@generic={0xef, 0x9, "abaccbbf0229151dde497557a4a456908c0d47beb74c4d3f330aa62c6198597fc10d4e51cd6d052ee663861098eb15706c1000011cf141d7a755b355285482fb0064a93d3dd8b6a6da92b285a89876907934669ed31ee1fd2c27c627e4d66c76b2236b2822b09b968fcff867b0e4b3e8f8e468f1e9ce52113909f7304f1b7393c5eeb6da808d8c007a54f342a6ef8c148367f9a7a37f827f40c51493ab3f55639c1babf0bb0beef6d7cbad4050bdf7e4c7585068942716891fe1b1060e59a8a8ed86fd3c5d5014f8b17de695a2e95ef5419509086805776a76aa38ee6ad54ec031c0354bc2ec708e02f4fb7817"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0xc, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x9, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x6, 0x3, 0x4a, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x2}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x7, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x0, 0x210, 0x29, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xff, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xff}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x8, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x86bbfab8c21b2145, 0x1, 0x432}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x4, 0xd2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x96, 0xc66c}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0xe0, 0xa, 0x2, [@generic={0x49, 0x21, "cd11c6ad21de5f29b54321972f66a9964a26ab692e29f3a098159c6fb08d0092a8be9f8eb5d448462075249218b524b14c3bca9f8c477472128b75f3ae9b6dd4eb80407359ac9d"}]}}]}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x310, 0x0, 0x1, 0x8, 0xff, 0x8}, 0x15, &(0x7f0000001a80)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0xe, 0xf00f, 0x456b, [0xf]}]}, 0x3, [{0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x445}}]}) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000001cc0)={0x14, &(0x7f0000001bc0)={0x0, 0x22, 0xa8, {0xa8, 0x31, "c40437aaebd460068c8426d4f163d3c9422ec3c6269e1d9031383c4f07e6bfc9928201aab63123426fdd06c95779a1086691e529c977996c0690f9ac3e276296e6a8a36255f35122a5b74acaeafc458d5e5b5fab0935f216d658a1dcaae2caf42d7b84da6653eaca359496c830dda5fdc7569bace7b0071afcf990a800d1d273785b85821d753df4a9150a4f1b6738b8c8c475dd1ef1588344e927aeb60f5ccec20bd61fc032"}}, &(0x7f0000001c80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001f80)={0x44, &(0x7f0000001d00)={0x0, 0x16, 0x93, "28949eeefae44e047f10fe40a3641c33e6d41b589fba924eb6c4e47fcdd0ab905f3648313d3b7c978be8b8429bc8a1e866e4a2414a69eca0da452296159126d13b269b82489d4965f3ecd4e86a750fd5762b9479ab3bfff710373a4d1cb5fa55ce26298fd5c4d3fad04d4d258cf95da82580665a92fe7daeabc16e0abaf7ce6b5c970c7e948c351511cd4e160085b61935296e"}, &(0x7f0000001dc0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000001e00)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000001e40)={0x20, 0x80, 0x1c, {0x7, 0x8, 0xc97d, 0x2d, 0xa5, 0x2, 0x80, 0x3, 0x9, 0x8001, 0x6, 0x105}}, &(0x7f0000001e80)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000001ec0)={0x20, 0x83, 0x2}, &(0x7f0000001f00)={0x20, 0x87, 0x2, 0x6e29}, &(0x7f0000001f40)={0x20, 0x89, 0x2}}) syz_usb_control_io(r2, &(0x7f0000002240)={0x2c, &(0x7f0000002000)={0x40, 0x31, 0xea, {0xea, 0xa, "b3274875043df443664438323a9253c5a0c18d7a547529dadfcbdeb279265d1c435ec5e4294a4f25ae3f410d3ba4fd748c8a9a93bcfd05b6ca90d3e100b2be5af5176fab65ebcb56063eb631168a1eafbb9e5d36e26fd3b22a6a607646917da030708d1bf6564024f8fc352aff74545e143a02c6ef07ac4cbbe4ea58940594d611f62e6ab96ba40363383e0eb9410ce714a450ebc4c134b0c3f889ed7a39089bfb9ab889fef3c113984a6b1e3335f72d8119b97075ee9d98b5848465529a992ba9aacc756911d9f9f9b398cd0d8adc03e806052221e4f5d27cd7390afd1079cb12d8d18ac1336c4c"}}, &(0x7f0000002100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, &(0x7f0000002140)={0x0, 0xf, 0x4e, {0x5, 0xf, 0x4e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x3, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x61, 0x2, 0x3, 0x3, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x1, 0x4, 0x1, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x7, 0x4}, @generic={0x25, 0x10, 0xa, "be8301c21a7de604d09b715e065f9ae3acfc3fe879e385d2b1d784e2f71b691a934b"}]}}, &(0x7f00000021c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x2, 0x9, 0x89, "3a9e865b", "db0d3d34"}}, &(0x7f0000002200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x81, 0x0, 0x3, 0x6, 0x5}}}, &(0x7f0000002680)={0x84, &(0x7f0000002280)={0x40, 0x9, 0x36, "183b030119b00d005d810579ee12fd2dffda63820864bf98a22bd3f608dbdb484bd0de8c0b3935b64869f2e00cc946d0b77a8e9f90ea"}, &(0x7f00000022c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000002340)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000002380)={0x20, 0x0, 0x8, {0x140, 0x1, [0xf0]}}, &(0x7f00000023c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000002400)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000002440)={0x40, 0xb, 0x2, "9179"}, &(0x7f0000002480)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000024c0)={0x40, 0x13, 0x6}, &(0x7f0000002500)={0x40, 0x17, 0x6, @random="3ba0c6521ef8"}, &(0x7f0000002540)={0x40, 0x19, 0x2, '>t'}, &(0x7f0000002580)={0x40, 0x1a, 0x2, 0xd}, &(0x7f00000025c0)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000002600)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000002640)={0x40, 0x21, 0x1, 0xc}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000002740)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002780)={'gretap0\x00', 0x1}) openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0), 0x802, 0x0) listen(r0, 0x9) syz_usb_control_io$uac1(r8, &(0x7f0000002940)={0x14, &(0x7f0000002800)={0x0, 0x3, 0xe7, {0xe7, 0x10, "8fa50dffa4d67500d4ced24d1fd18022679d27d8394b5f8a27ef7d3d299fc79843b3f37cfa43f127c88b7e2c8813015712b09ceeaf7aa3ef2a21fd3ca906c8c0761ca615d27942d842636c4bd3e12f52dbc8bd27e39654dee72ca121ff5cb596e4f80b97be905e9d1881b7449b457cf45242fcd5abd661fc1018e1c20846cb80676f25002d914427b0af87e194d6d1cc7708d253dd6e1a8a71cbbd7b9ad26529eff14a58e0a3fc93b3bc834aeeb5000082b6eaec302ee29282b8cdfef32a55b174d25fff5f49564a06e6769ce3e5ca1b5cc74c2147fde5508102cd99e20ab5fd57ec7be0f8"}}, &(0x7f0000002900)={0x0, 0x3, 0x37, @string={0x37, 0x3, "bfc2482f4f60a42ad3668be16d355c29aed35a57b2cc9a2eefdc60e364d6a59a38e1bcb739d537767def2ec039694a5b4a74baf5d7"}}}, &(0x7f0000002b80)={0x44, &(0x7f0000002980)={0x20, 0xc, 0x1b, "ec8ea3631e2ebca84b4f5c2d2bcaa42e398971825c8b9fafebdd7a"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002a40)={0x20, 0x81, 0x3, "1ac512"}, &(0x7f0000002a80)={0x20, 0x82, 0x3, "818a2a"}, &(0x7f0000002ac0)={0x20, 0x83, 0x2, "876e"}, &(0x7f0000002b00)={0x20, 0x84, 0x1, "87"}, &(0x7f0000002b40)={0x20, 0x85, 0x3, "3917f0"}}) connect$unix(r0, &(0x7f0000002c00)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000044}, 0x8011) 1.339207544s ago: executing program 0 (id=2260): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000580)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r5, 0x3ff}}, 0x10) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x2d, 0x0, 0x90) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x158, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x130, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.158206119s ago: executing program 2 (id=2261): r0 = socket$inet6(0xa, 0x3, 0x101) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001680)={{r1}, "8582da31a33e3e1f81df0606e19bdb91a097669b0cbd18290e720c6553462ddc640518b2904e9f0006312281927b24b16ca8eb44fe9097311b5e552b1e05996b20032a796ab994f63fa677b4ee6c5c5eeaf9203152bb2dd12282e9683a473b8452296da34be2cca6bf4666319dc3d24ac7c1bc28cc775a66ed4f3643aa7217e7132d88dd5b799d83fc92e291f6ec9bad41fd606784a34dcfd8d2ca75f6992804f32eb48a5516e9f56636f098c8f32c287c467a8e28cc86c8db26a2333f27ce36c21517f2799e37c24f98864fe33f5e4c78b4adf962ef710448ae183d8a8357d514ab95dcfe0c896bb03fd3975cf7b4dfcbef16b17561c0510e2ca55f6a84c69e4cfc1456d4c442693c0204d86d79e4e395119925e87838e02d6672e6458604423eb172891a53f3eba4bf5ce526084f65e57b57ed2a3e25d69f32fbd344fbc3992f665d988f10554f87a557792bb7970f6621f889d389877db35088c86a1178b06232b475b71e92dab22a5d3dfba4d55f168fbd1a2cdebd853c5ee3f524cb80d85a041a469fb8d6f2a3cc044a0d63d83eb02212161909012690c8ee5f946b14eb3a01104103bed1bf970ace06ee7020def5cb370c142990872edad5060b150666b7b6a0c74f50638842e8d8102c21d024609688931fec83533f0d950389cfa7ef98541bd04d3335e27a6688d85731a7aace798026c5bb9a6b1a03e4959a8d9c1cf55be057eeb28d852a5ad0483971bfc7bcb5c865549a00a6b9d4addfeeb2ba91f4910f6c8597ced0d8ff3334ff9a2edca8013c2e00c140073ca8b66a23f37ee795a1c331ad59bdbb20191bd76f0856f5c0245189da7523de8326afe2e123ea1d9241539cc811a9095cb9566a6345a31848c9cec133d048a14dbe8fb18429813a642e424d68ccdfc3b65fe07671497ced80454818d636eaf150f8f8224fa6cef941da9b7cd0adff40cc087cdcccf0caffe55a3263fc318ff3428173094e2af57208636e82eee0cf4fce940c73c9dd60ce2773de6c3faab751d7782c83824309e451e873e40dbc707fe6219f8bef247de8edf8bba0749b030db545db7e717f359bd98304d53cafb000a20b9cac88c7b5196370e90824757a69accc8e106f08a782ddd4a842038b5c4f3e3f24901e4cff3246a18a725cf69c167ef03dbdb8566f42883dde3a3b892cf0460f3f1261d7d24ad6ac5239926eabcbe7c678865c35a6a3f2d47b264d1dde60e188fe1d5cc506802e2b663b1500f1d76fcfa09cf06888e1c9ba53e81427bbed60aaa3b6b9d48f66b5bc1c6c8c8ea27ff6b132247134e2ab53deded7282c867196a87223dae7b5351a3a646f06582bb39155d0e7ee44a12d329ad0e9828f0b421e9fbf6fad23890b01c57e9b61ab660baeb189313e4ab5bad241ba7d25159c5b1edbc339e65b82b90763ff8ced0ee20147d48133f60410b8e9fd39bf5e455b9b18834bcaef925e2b66108f18fecd36dedb7711a7c18f2d6dcf0437395988fdbd5184dcba323f2d08186667c72e86df9b5dd343ad60c63b97866271d7a591d9177d07c994ee5f013ebc0864a4f6d5f547f32ba4d9a0fef4c8a5b60340eb1ff3d526b80eb2f71cfd6358bb3acfc04ec498358e67ecd01656fb113e98ecd3e3d0c9d7a2049f361e4430e306e853aa542ef7951614c7a937bb240778edcac54949c2981289a22cc82aa3d0a467b84c4c0b0997468b5347c40448766dd72c80b061886de8bf342c915ce9f6005b03baca305800ad5043982e5dee3a4313e667416f1d6b8e28fb7abb3736ff1a5a91b40f06ec5416fe13dfb554c394a2e0cf3aec4faf09c4b14d23c104f5131c6036f0ee399d1d8b8c99f4e404668fd4927df9cd1d0573e8ebdb84215d54e0ad7176e311dad5367d085ffe3b247ef18b4a75849f06c5bdfc5f32d2ddae28904202e673a99f8e5c58853a1324fadac1c0dea153a6d697538fd72da0561758388fbf28b566889fa2b4c87ebb9f9edb3701fe3d5b1d9e03d85a1f8639cf499d9c9bb0f4e270fa4fba1460bcf6a661cd6ec14024ddd6457507d429759f7c8291d059b17f38701531881198e6d8d36b1d784ccbb5d62badec929663e7184e443373dda9ec2d7287d1570d84af9cb57226a349e8702a75b79003a4640a17279512aa57b0a07509c065ce9eb39a2f5d668b14ddf182bd3a809d95c63ad8fa95ea6ffef812e727659fe004d9ab9f92c5ee368fe306e2c5fc31573ddcfb3abd7df0062c0d70f3295fd9ccb7fc192a263adc2f969b2b968b806cf9b1f9b6eebb80f52be2f118378367a04e993f305637e3969826ca02612bce45b812a72274cc715060ea51d8dc6e8a85b20f643799bdcdc3e65d70c819b0b323da247f6ffabee8a8b7429fc92dc43ab9fcd71b077f4c7467d0ff0e735686bb87775683a94f1bf7e41dd5d26537f9d31e39a0acaeca7494452848d49a9d9f2c463ce997c39002d637c4d9b21b8b039ac4e27bfa8333fe6f4955710bc97dd0fd3b5e745cadbbcee1e5552c8c9d93c5596d4ca7176b0d42d24c9c8b972175e9bfcc59775841e0625a00372f7c963ecfc84418e3201a829dffdd60ddd524929789ed0cc9c30ed831eeaee536ebe7c0adf55532058e1f93691b6b2a4a40f4d735987c455adff894e55e71db4af02cdfa6926cc110b00c96a3104489cec2c05224d316a9134b8d54173bd8a9b58700f350656b62449f411759d1d8df357cced2aa8b8ff89afb40bcbb1b22a494cee7ac2a8b8959582ddf6d36e2679a428c144dccca0076f9364eda5dfb9df81201f4e600264ae3d0dcbebc7416d1a6ddb473b8ddd06b71c978da4e208bec7eb707fc4f0328cce9f0b1157f30a0b26fc5d7f077a8a29d9c3c9a80bc03470ce5f12200abedcb4df673d418a36130af54176db07b690ace7421d08c0b8ac4641df63c175ae6fff0556a0f3e19b4ce777883fa316c697cb5d6ae470732d0e232503d86c152041e5a451a4d72ab8ea315522e1f5b1236658658d6699837bbfe2d1681fae06ae1f5fd4be30e7927f14ce986b93b72ea19273002874a89072c8d7f4282e0aae8b8c4b31a83bfea1f190671688cbc6ac6f081bca93f3fd9ff9449d704eca570f731845746f5b32566f6974bb840bf65732c97843a530e1b9aee2b0d498b5ac498b56d1899b5298d86bdf394c4c215631fb445de5c8bf3518b2ec477bbf8b691e24263827ad60011981ce4714aee8020ad032702f06960acd367d857f40f8e04b4b2619e74b8441acd316a170bf4657886677442a3791c24349a464d84277ca5aa4e88436e21cf9b009fd0ecacf290d9b6862d3bd9ec2ea041f0eb92512b9f8635062d5e30d1317b05a21937a45c0703914f407dcea1c709418d73f942dfccb2206ba3b12d6f4277da09079bb9ada370ca29ad4e75a424efdc82f2831902507941b25e3f1322a1cc260709ee5c18a7724171a6d17dde92971b0ec7eba854747c17bb45b3c2375fd2421a00732244e17da590aecab226ed470bc4687395a86c9f0c05995894ea60a5bfab33b5db0c4bade96bcb172ce4427da4c1969d494bc308b38520a822fbcd0aaa5c06a3ac38c6883b6ed25b1c7616bcccb43f890518d52c4b388c815b1d48cde2b5ce729a8023dcd17fb2d897ab071e77c8ce622a0de84b79adb258138037d9984b6bed2b399b34827bb9f90ce6fc1ebc8c8b4ea3b4efe0dddf52162c8b02add0e1a25b58281b162fd7a4ca9bcb52ee7f4daeff29c65cb2f05d9d36f0a3ba6a6a713cc810b090471c2a3a18d3fefc4d029e6d2591f5c4fd56c91a03b985e23ea3aafa6b071434bce3be6834ee5b2ad49d08395a2ce3d9f97760ccebeccb513d25bf231a1ac7af87b27c429e8a2bcf968e414817f51c254b5e9b8dfaadc19f153958adee2dd11b57b833359be0de7367d14d2a7638bbb63466ad1fe69bebcf6296aa33fe2905b589f83541c9e762d5cc9ff3340b9052a9bebac0c61851d09c7cb264fff7c9c57e4859e2bcc7d46939e3bc0ec218fdf545bc913e984c8ec1388ddc6b5d92253f700800bf8b0fe306d1c3075cc226e5e2ca7d77e6fd34cf0cf8943aa0fed53c23d49ce305e2437f8c37d514a939966ae72dd0c990761983dfe51f1fea64baf38e3fe31a65a041b00dc7ef05b1bfc0ef8c553b96a46ea93aa299fdecd28b1a1721cf7b838305f4f0e725232e8f3d4b96a69a69c3111c980620d73076b640deb733e66b49b7dd9a8db3d492ca99b865f9e67ad0f2562e6f0ecca3aa9f96dc01c4998cef740cea029ed2b07b972cdbc7f07d4b5d09177349be82ab9a6edb3c878edf2df7a60c7f9dc42d82eb705e96db539e82cd453ee80400473518e6a067564f71d04f4e698a793e3e18a8411bd795a036648b4ef33a51b1340ff98fefc49d2449a32e285d55c431d13edd4e7208a7dee848248d2167ae0ab0107b1f0eff6f5fac6b06eb49421aabe6c8c5487a2a03ee125020d570863d61c85a1a8ae31bd4178ec3fe4f7c680ec48afe5de8ed4d8ec7dbdab891cdbdb3c1e8e65f3a709eebf98ac1d8b64f9e7a8f36c0558978202fce0601ad5ad69a317ff294f605d0ea9674b2bdc94167dcb864580e567d25b66aa514e6d7c8e6eece3e481e3e040661c9158a2e96fb2d6e026e0a19a5490dbb6ef78996e3b98f10a388801054269197e2db243a2f1c724b61a5e85648a2a836686a68d9a55872f86b68156aa8aa9379b0a30225354a87dc722fd0ddc3592eb75d7375bd2feadc63383ade535100ef090567bc8d1dbe848e1a2f259ce047ba65fc58db7e09dc4844f0af0133d588827132ac94714059cfea4f10e07db06f541a90c1086b25c6b26293ea47627b294872f3c96d5aa90292375ba79aac16294dfc19ca5c4a553de7c9f7cffd17dbc8458072ce38e4da771ddca1b992abeebbfc9784cdc40838beb4846d8688cafbf6884e5d52a3a3e5b23c191abdb7c7a99f3f67547da282865ab8815f9849782d40e2dfaaf8e4f7013d68279edc053723efc3c751566ac5c43b69d6a8a407080677d427d28fc6051a67be83008aada43fe463dd2e89768efe41380b52827c18cdffe387ed9b51d3225c360d861f3ca8354263f972961dd3188b79f7ea3fd27b7d5936307cf60064323bd5df010aeb5aeb7ddcb6f983b21a973432cd4d9cdbbf0bbc8341f3dc86d324155be5091e32eca3341e5ec4d12f61b77f42d3eb9645f86350d7ab6a029257ba8e512ba1d103efa49601de132a2df8a99d3ce3e890b6943b06edea20636d8a73b393abfac80eda664ed1ec5e5a165d71fbdfcbe752ca0ecafdbb6bf63039caf48200ce2f534f4d1376218c3c6fa3c37955397a7ae318d1528dbb147ee341a1d103c3c645e997a6611b8d70a786d29d89cefa1ce986c36572948eafc1dc17437b14d9e366de655d927e9803f6d9917360f001f002f21fa3aa10cef951e0463fd0661df06fab90d296f3b64d2c0182299c094b054bce3d7aac3ca42d0ffdc4b4ce45fa7b65f55878c48b14a427068de31dc14c7867821b3f807d15bf921ebde1360980947235f32462b4f2ecac5bb52b2b960dc64d1f88da9637adce01c7f664ac3e5bb403bc7409529207341edfbfc14297f28a667f2554ef94a00645d0b74ab72d2b57130e2d97dbf56bea43fce17667bcf7845afbfbe462e9bf0499f2cc56b641e62fdcc7cf7a7e1f174c2dfe9b5e90a6e493b977b6cb775ce81555aac94dc50b8d942115902efa9f89d4deda2e97deb9ccba964201726fa79cff3fe06aad15a6aa9bd67c31b1216f2b127c85e450013098476aee"}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x801, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) (async) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xa0a42, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="35c8e05654c6179dea974f569cbdc1891bca30a9f69fc87d325fff9084484b73cbad34c95ff6f2e2092285aaf97f552d7189", @ANYBLOB="d723fff5a00fd88713aed26f2bf8896e60e1d147f4d5e33c588ba7d3fa4e9675eaf51b6cbcd765a5130e1939684e04fda17a1a979a7546471b75cb5486", @ANYRES64=r5, @ANYRES8=r3, @ANYRES16=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r8, 0x851, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) (async) keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/4096, 0x1000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0008000007899de3535a1a4e55000100627269800500190002000020050017000008000100810000000a00140800"/56], 0x58}}, 0x0) 867.351614ms ago: executing program 2 (id=2262): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x62302) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x100000) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x26c8, 0x0, 0x1, 0x0, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) 109.858936ms ago: executing program 4 (id=2263): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000000039a0040008000c0001800600060086dd0000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) r2 = io_uring_setup(0x10a8, &(0x7f0000000080)={0x0, 0xc334, 0x8000, 0x0, 0x195}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000040)={0x0, "f713ce12c1fe3c9a2cd6b337dad1ce400cd698adfc4a6bee479ccd9b275e51e4121209972d25880c4f43648580c5c3893b826beb9a17136643db3077a0b7cf3f"}, 0x48, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x141000, 0x0) write$dsp(r4, &(0x7f0000000240)="309ebbdfa44cac82373c4a0bd98a28745960d1739d153bacfd95f71d62066f3622b4029256d6fdd2367de0cc0282a4d4b6fc81904a635313d7b0742e0c3f09ffb4e6190b1ef2b9a9b2211d81ba00b7a194c3dc926556def0111694531e9e4494b1f4de16b8", 0x65) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r3}, 0x38) r5 = syz_io_uring_setup(0x7c9, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a, 0x0, r2}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) syz_open_pts(r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 15.06402ms ago: executing program 0 (id=2264): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\t\x00\x00\x00\x00\x00\x00\x00\xc2;\x8f\xf3\x13\xebM\x93\x94\x01\x8b\x88\xeb\x98O\x81\xa8\xfcg\x8bbK&\x13a~\x04/\xae\xa9y$6\x8b\x96,\xbd^\xa1\x02\x03\xd9g\x18\x14Z%\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba \x1a<-9\x9el\xdac\xa2\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf9\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00'/199, 0x0) (async) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8100) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x12}, &(0x7f00000002c0)=0x8) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0xfffffff9, 0x5}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x4000000}) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, &(0x7f0000000180)) 0s ago: executing program 5 (id=2265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x40000007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x261) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0x1000, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = accept4(r0, 0x0, 0x0, 0x80000) r6 = dup(r5) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) kernel console output (not intermixed with test programs): : i2c rd failed=-110 reg=33 [ 667.225824][ T5932] usb 2-1: USB disconnect, device number 72 [ 667.381453][ T5848] usb 4-1: config 0 has an invalid interface number: 206 but max is 1 [ 667.389792][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.400212][ T5848] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 667.409212][ T5848] usb 4-1: config 0 has no interface number 0 [ 667.415424][ T5848] usb 4-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 667.426476][ T5848] usb 4-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 667.437558][ T5848] usb 4-1: config 0 interface 206 altsetting 2 endpoint 0x8C has invalid maxpacket 30768, setting to 64 [ 667.449931][ T5848] usb 4-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 667.463769][ T5848] usb 4-1: config 0 interface 206 has no altsetting 0 [ 667.473315][ T5848] usb 4-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 667.482478][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.490502][ T5848] usb 4-1: Product: syz [ 667.494769][ T5848] usb 4-1: Manufacturer: syz [ 667.499399][ T5848] usb 4-1: SerialNumber: syz [ 667.509020][ T5848] usb 4-1: config 0 descriptor?? [ 667.515942][T12721] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 667.674139][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1646'. [ 667.699113][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 667.951573][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 667.957889][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 668.026495][T12731] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 668.745016][T12733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1648'. [ 668.779316][T12733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1648'. [ 669.001595][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 669.031802][ T31] kauditd_printk_skb: 14741 callbacks suppressed [ 669.031822][ T31] audit: type=1400 audit(1755943353.400:540076): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5208 comm="udevd" path="/sys/devices/virtual/block/loop0/uevent" dev="sysfs" ino=14894 [ 669.067050][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.073871][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.080538][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.080563][ C0] audit: audit_lost=189208 audit_rate_limit=0 audit_backlog_limit=64 [ 669.080582][ C0] audit: backlog limit exceeded [ 669.115277][T12736] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.122862][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.123674][T12741] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.130008][T12736] audit: audit_lost=189209 audit_rate_limit=0 audit_backlog_limit=64 [ 669.146974][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1652'. [ 669.698689][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1652'. [ 669.767790][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 669.806653][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.847527][ T5848] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 669.873786][ T9] usb 2-1: Product: syz [ 669.878029][ T9] usb 2-1: Manufacturer: syz [ 669.942033][ T9] usb 2-1: SerialNumber: syz [ 669.975889][ T5848] usb 4-1: USB disconnect, device number 63 [ 670.656493][ T980] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 670.899203][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 671.000763][ T5848] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 671.093490][ T980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.214054][ T5848] usb 4-1: device descriptor read/64, error -71 [ 671.249541][ T980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.329315][T12736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.396597][ T980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 671.512309][T12736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.517437][ T980] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 671.565768][ T5848] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 671.591861][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.648148][ T980] usb 5-1: config 0 descriptor?? [ 671.659652][ T8428] udevd[8428]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.732555][ T5848] usb 4-1: device descriptor read/64, error -71 [ 671.844167][ T5848] usb usb4-port1: attempt power cycle [ 672.212400][ T5848] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 672.328054][ T9] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 672.335240][ T9] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 672.342027][ T980] hid (null): unknown global tag 0xc [ 672.360187][ T5848] usb 4-1: device descriptor read/8, error -71 [ 672.378976][ T980] hid (null): report_id 0 is invalid [ 672.389692][ T980] hid (null): unknown global tag 0xe [ 672.421498][T12747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1653'. [ 672.433306][T12747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.462765][T12747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.543870][ T9] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 672.593662][ T9] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 672.625425][ T9] usb 2-1: USB disconnect, device number 73 [ 672.756129][ T5848] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 672.783492][ T5848] usb 4-1: device descriptor read/8, error -71 [ 672.820117][ T9] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 672.949442][ T5848] usb usb4-port1: unable to enumerate USB device [ 673.379057][ T5932] usb 5-1: USB disconnect, device number 56 [ 673.604332][T12774] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1660'. [ 673.666535][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1661'. [ 673.675722][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'. [ 674.161381][ T31] kauditd_printk_skb: 17108 callbacks suppressed [ 674.161404][ T31] audit: type=1400 audit(1755943358.429:547520): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=12786 comm="modprobe" path="/proc/filesystems" dev="proc" ino=4026532112 [ 674.255027][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 674.261773][ T5208] audit: audit_lost=192441 audit_rate_limit=0 audit_backlog_limit=64 [ 674.270153][ T5208] audit: backlog limit exceeded [ 674.275156][ T31] audit: type=1400 audit(1755943358.429:547521): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12786 comm="modprobe" name="/" dev="sda1" ino=2 [ 674.294050][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 674.300597][ T5208] audit: audit_lost=192442 audit_rate_limit=0 audit_backlog_limit=64 [ 674.348292][ T5844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 674.360592][T12792] audit: audit_backlog=65 > audit_backlog_limit=64 [ 674.367329][ T5844] audit: audit_lost=192443 audit_rate_limit=0 audit_backlog_limit=64 [ 674.583007][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1666'. [ 674.658939][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1666'. [ 678.519333][T12817] 9pnet_fd: Insufficient options for proto=fd [ 678.520033][T12818] 9pnet_fd: Insufficient options for proto=fd [ 678.644106][T12806] syz.1.1668 (12806): drop_caches: 2 [ 679.163130][ T31] kauditd_printk_skb: 9518 callbacks suppressed [ 679.163152][ T31] audit: type=1400 audit(1755943363.559:552994): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5846 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 679.179169][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.197040][T12822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.203862][ T5838] audit: audit_backlog=66 > audit_backlog_limit=64 [ 679.210627][T12824] audit: audit_backlog=66 > audit_backlog_limit=64 [ 679.221286][ T5838] audit: audit_lost=193793 audit_rate_limit=0 audit_backlog_limit=64 [ 679.229624][T12824] audit: audit_lost=193794 audit_rate_limit=0 audit_backlog_limit=64 [ 679.247079][T12825] audit: audit_backlog=66 > audit_backlog_limit=64 [ 679.258115][ T5838] audit: backlog limit exceeded [ 679.263496][ T31] audit: type=1400 audit(1755943363.559:552995): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5846 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 679.314336][ T43] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 679.482817][ T43] usb 3-1: device descriptor read/64, error -71 [ 679.613634][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 679.753177][ T43] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 679.802859][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 679.811091][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 679.819688][ T9] usb 5-1: config 179 has no interface number 0 [ 679.841755][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 679.875982][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 679.903417][ T43] usb 3-1: device descriptor read/64, error -71 [ 679.942342][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 680.008024][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 680.034443][ T43] usb usb3-port1: attempt power cycle [ 680.090585][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 680.433279][T12837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1676'. [ 680.602051][ T43] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 680.914486][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 680.923700][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.983711][T12830] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 681.179302][ T43] usb 3-1: device descriptor read/8, error -71 [ 681.423272][ T43] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 681.453983][ T43] usb 3-1: device descriptor read/8, error -71 [ 681.488967][ T5932] usb 5-1: USB disconnect, device number 57 [ 681.495070][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 681.495108][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 681.557167][T12841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1678'. [ 681.583702][ T43] usb usb3-port1: unable to enumerate USB device [ 681.603033][ T980] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 681.625710][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1678'. [ 681.743188][ T980] usb 2-1: device descriptor read/64, error -71 [ 681.996126][T12845] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1679'. [ 682.006639][T12845] fuse: Bad value for 'fd' [ 682.344742][ T980] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 682.523083][ T980] usb 2-1: device descriptor read/64, error -71 [ 682.603106][ T5848] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 682.638322][ T980] usb usb2-port1: attempt power cycle [ 682.907794][T12857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1684'. [ 682.917758][T12857] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1684'. [ 682.927622][ T5848] usb 3-1: device descriptor read/64, error -71 [ 682.940293][T12855] program syz.0.1682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 683.133416][ T980] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 683.173452][ T5848] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 683.186827][ T980] usb 2-1: device descriptor read/8, error -71 [ 683.343410][ T5848] usb 3-1: device descriptor read/64, error -71 [ 683.443687][ T980] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 683.464107][ T5848] usb usb3-port1: attempt power cycle [ 683.513872][ T43] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 683.564759][ T980] usb 2-1: device descriptor read/8, error -71 [ 683.695067][ T980] usb usb2-port1: unable to enumerate USB device [ 683.723920][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 683.753767][ T43] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 683.803032][ T43] usb 5-1: config 0 has no interface number 0 [ 683.809752][ T43] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 683.859647][ T43] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 683.890336][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.899274][ T5848] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 683.931264][ T43] usb 5-1: Product: syz [ 683.951376][ T43] usb 5-1: Manufacturer: syz [ 683.962212][ T5848] usb 3-1: device descriptor read/8, error -71 [ 683.993708][ T43] usb 5-1: SerialNumber: syz [ 684.049320][ T43] usb 5-1: config 0 descriptor?? [ 684.187222][ T31] kauditd_printk_skb: 12073 callbacks suppressed [ 684.187243][ T31] audit: type=1400 audit(1755943368.588:560182): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5208 comm="udevd" name="udc" dev="sysfs" ino=31095 [ 684.232750][ T6013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 684.243310][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 684.250648][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 684.278087][ T5838] audit: audit_lost=195424 audit_rate_limit=0 audit_backlog_limit=64 [ 684.287418][ T5848] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 684.296673][ T5208] audit: audit_lost=195425 audit_rate_limit=0 audit_backlog_limit=64 [ 684.305676][ T31] audit: type=1400 audit(1755943368.588:560183): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5208 comm="udevd" name="dummy_udc.0" dev="sysfs" ino=31096 [ 684.310882][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 684.333355][ T6013] audit: audit_lost=195426 audit_rate_limit=0 audit_backlog_limit=64 [ 684.341452][ T5838] audit: backlog limit exceeded [ 684.366121][ T5848] usb 3-1: device descriptor read/8, error -71 [ 684.504374][ T5848] usb usb3-port1: unable to enumerate USB device [ 684.559933][T12860] netlink: 'syz.4.1685': attribute type 1 has an invalid length. [ 684.597391][T12860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 684.730722][T12871] bond1: (slave veth3): Enslaving as an active interface with a down link [ 684.800788][T12860] bond1: (slave veth0_to_bond): making interface the new active one [ 684.811007][T12860] veth0_to_bond: entered promiscuous mode [ 684.822793][T12860] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 684.872058][T12871] vlan2: entered allmulticast mode [ 684.877793][T12871] veth0_to_bond: entered allmulticast mode [ 684.886194][T12871] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 685.051324][T12860] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1685'. [ 685.063322][T12860] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1685'. [ 685.096227][ T43] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.214/input/input18 [ 685.572908][T12876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1689'. [ 686.143103][T12888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 687.272543][ T5932] usb 5-1: USB disconnect, device number 58 [ 689.470689][ T31] kauditd_printk_skb: 17767 callbacks suppressed [ 689.470711][ T31] audit: type=1400 audit(1755943373.058:568440): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5208 comm="udevd" path="/run/udev/queue" dev="tmpfs" ino=7001 [ 689.477269][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 689.477288][ T5834] audit: audit_lost=198597 audit_rate_limit=0 audit_backlog_limit=64 [ 689.477303][ T5834] audit: backlog limit exceeded [ 689.477319][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 689.477331][ T5834] audit: audit_lost=198598 audit_rate_limit=0 audit_backlog_limit=64 [ 689.477345][ T5834] audit: backlog limit exceeded [ 689.477393][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 689.477407][ T5834] audit: audit_lost=198599 audit_rate_limit=0 audit_backlog_limit=64 [ 689.477421][ T5834] audit: backlog limit exceeded [ 689.794103][ T43] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 690.039375][T12923] xt_TCPMSS: Only works on TCP SYN packets [ 690.248789][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 690.268190][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.307020][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.401413][T12773] Set syz1 is full, maxelem 65536 reached [ 691.437556][T12065] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 691.456451][T12065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 691.466026][T12065] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 691.484928][T12065] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 691.497968][T12065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 691.663805][ T5848] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 691.791885][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.847838][ T5848] usb 3-1: too many configurations: 30, using maximum allowed: 8 [ 691.897338][ T5848] usb 3-1: config index 0 descriptor too short (expected 64804, got 10) [ 691.913007][ T5848] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 691.922307][ T5848] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 691.943342][ T5848] usb 3-1: config index 1 descriptor too short (expected 64804, got 10) [ 691.959258][ T5848] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 691.969150][ T5848] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 692.023447][ T5848] usb 3-1: config index 2 descriptor too short (expected 64804, got 10) [ 692.084038][ T5848] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 692.155300][ T5848] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 692.179287][ T5848] usb 3-1: config index 3 descriptor too short (expected 64804, got 10) [ 692.208299][ T5848] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 692.234068][ T5848] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 692.247308][ T5848] usb 3-1: config index 4 descriptor too short (expected 64804, got 10) [ 692.408752][ T5848] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 692.417098][ T5848] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 692.428602][ T5848] usb 3-1: config index 5 descriptor too short (expected 64804, got 10) [ 692.437574][ T5848] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 692.449767][ T5848] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 692.461476][ T5848] usb 3-1: config index 6 descriptor too short (expected 64804, got 10) [ 692.563425][ T5848] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 692.570930][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 692.579052][ T5848] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 692.589538][ T43] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 692.597423][ T43] usb 5-1: can't read configurations, error -71 [ 692.647224][ T5848] usb 3-1: config index 7 descriptor too short (expected 64804, got 10) [ 692.672292][ T5848] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 692.719232][ T5848] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 692.762182][ T5848] usb 3-1: string descriptor 0 read error: -71 [ 692.785377][ T5848] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 692.808183][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.857123][ T5848] usb 3-1: can't set config #1, error -71 [ 692.895421][ T5848] usb 3-1: USB disconnect, device number 62 [ 692.946491][T12956] overlay: Unknown parameter 'uid>00000000000000000000' [ 692.956220][ T5932] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 692.968371][T12932] chnl_net:caif_netlink_parms(): no params data found [ 693.171342][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 693.208053][ T5932] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 693.224665][ T5932] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 693.233776][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.293727][ T5932] usb 2-1: config 0 descriptor?? [ 693.554439][ T5839] Bluetooth: hci5: command tx timeout [ 693.658862][T12932] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.858367][T12932] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.874020][T12932] bridge_slave_0: entered allmulticast mode [ 693.903316][T12932] bridge_slave_0: entered promiscuous mode [ 693.917919][T12932] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.926334][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.933653][T12932] bridge_slave_1: entered allmulticast mode [ 693.941893][T12932] bridge_slave_1: entered promiscuous mode [ 694.659934][ T31] kauditd_printk_skb: 21646 callbacks suppressed [ 694.659949][ T31] audit: type=1400 audit(1755943379.017:576707): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8306 comm="udevd" name="/" dev="sda1" ino=2 [ 694.685909][T12980] audit: audit_backlog=65 > audit_backlog_limit=64 [ 694.715393][T12981] audit: audit_backlog=65 > audit_backlog_limit=64 [ 694.728938][T12980] audit: audit_lost=203060 audit_rate_limit=0 audit_backlog_limit=64 [ 694.766187][T12981] audit: audit_lost=203061 audit_rate_limit=0 audit_backlog_limit=64 [ 694.774332][T12981] audit: backlog limit exceeded [ 694.789826][T12980] audit: backlog limit exceeded [ 694.802482][T12932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.804989][ T31] audit: type=1400 audit(1755943379.017:576708): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8306 comm="udevd" name="/" dev="tmpfs" ino=1 [ 694.817679][ T5841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 694.831104][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 694.848551][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.857945][T12932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.934138][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.025150][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.073450][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.156460][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.180004][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.842952][ T5839] Bluetooth: hci5: command tx timeout [ 696.291186][T12932] team0: Port device team_slave_0 added [ 696.300077][T12609] batadv0: left promiscuous mode [ 696.451701][T12996] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 696.621248][T12609] bridge0: port 3(batadv0) entered disabled state [ 696.815116][T12609] bridge_slave_1: left allmulticast mode [ 696.926576][T12609] bridge_slave_1: left promiscuous mode [ 696.963051][T12609] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.980102][ T5953] usb 2-1: USB disconnect, device number 78 [ 697.003496][T12609] bridge_slave_0: left allmulticast mode [ 697.020913][T12609] bridge_slave_0: left promiscuous mode [ 697.044900][ T5932] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 697.063357][T12609] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.255089][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 697.520839][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.621956][ T5932] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 697.702941][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.794275][ T5932] usb 5-1: config 0 descriptor?? [ 697.808611][ T5932] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 698.065621][ T5839] Bluetooth: hci5: command tx timeout [ 698.437832][ T5932] gspca_vc032x: reg_w err -71 [ 698.442619][ T5932] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 698.501428][ T5932] usb 5-1: USB disconnect, device number 61 [ 698.863347][T12609] dvmrp1 (unregistering): left allmulticast mode [ 699.056952][T12609] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 700.091974][ T5838] audit_log_start: 12371 callbacks suppressed [ 700.091993][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 700.094000][ T31] audit: type=1400 audit(1755943383.786:581069): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=13008 comm="syz.2.1725" opid=13008 ocomm="syz.2.1725" [ 700.106421][ T5839] Bluetooth: hci5: command tx timeout [ 700.130333][ T5841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 700.137761][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 700.144566][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 700.151499][ T5834] audit: audit_lost=205733 audit_rate_limit=0 audit_backlog_limit=64 [ 700.160100][ T5834] audit: backlog limit exceeded [ 700.167171][ T5841] audit: audit_lost=205734 audit_rate_limit=0 audit_backlog_limit=64 [ 700.175464][ T5838] audit: audit_lost=205735 audit_rate_limit=0 audit_backlog_limit=64 [ 700.175487][ T5838] audit: backlog limit exceeded [ 701.106276][T13024] netlink: 'syz.2.1728': attribute type 4 has an invalid length. [ 701.117862][T13024] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1728'. [ 702.435735][T12609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.453392][T12609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.467391][T12609] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 702.482958][T12609] bond0 (unregistering): Released all slaves [ 702.524866][T12932] team0: Port device team_slave_1 added [ 702.542881][T13004] pim6reg: entered allmulticast mode [ 702.630360][T13024] : renamed from bond0 (while UP) [ 702.769465][ T6301] veth0_to_bond: left promiscuous mode [ 703.790710][T12932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.833031][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.935376][T12932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.981228][T12932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.004701][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.103684][T12932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.810221][T12932] hsr_slave_0: entered promiscuous mode [ 704.857593][T12932] hsr_slave_1: entered promiscuous mode [ 704.885493][T12932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.916854][T12932] Cannot create hsr debugfs directory [ 705.097126][ T31] kauditd_printk_skb: 9945 callbacks suppressed [ 705.097146][ T31] audit: type=1400 audit(1755943389.496:586635): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13055 comm="modprobe" name="/" dev="sda1" ino=2 [ 705.157543][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 705.159412][T13055] audit: audit_backlog=65 > audit_backlog_limit=64 [ 705.164102][ T5208] audit: audit_lost=207196 audit_rate_limit=0 audit_backlog_limit=64 [ 705.164120][ T5208] audit: backlog limit exceeded [ 705.164149][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 705.164164][ T5208] audit: audit_lost=207197 audit_rate_limit=0 audit_backlog_limit=64 [ 705.202658][T13050] audit: audit_backlog=65 > audit_backlog_limit=64 [ 705.209864][T13050] audit: audit_lost=207198 audit_rate_limit=0 audit_backlog_limit=64 [ 705.219265][T13055] audit: audit_lost=207199 audit_rate_limit=0 audit_backlog_limit=64 [ 705.935111][T13064] netlink: 'syz.2.1738': attribute type 10 has an invalid length. [ 706.042774][T13064] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 706.705964][ T5932] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 706.850634][T12609] hsr_slave_0: left promiscuous mode [ 706.866756][T12609] hsr_slave_1: left promiscuous mode [ 706.878852][ T5932] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 706.883401][T12609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.899056][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.913479][ T5932] usb 2-1: config 0 has no interface number 0 [ 706.922063][T12609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.939737][ T5932] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 706.959400][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.984611][ T5932] usb 2-1: Product: syz [ 706.994406][ T5932] usb 2-1: Manufacturer: syz [ 707.002075][ T5932] usb 2-1: SerialNumber: syz [ 707.019004][ T5932] usb 2-1: config 0 descriptor?? [ 707.171319][ T5932] ims_pcu 2-1:0.41: Missing CDC union descriptor [ 707.184751][ T5932] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 707.917343][T13090] netlink: 'syz.0.1743': attribute type 10 has an invalid length. [ 707.974756][ T5932] usb 2-1: USB disconnect, device number 79 [ 708.003285][ T6324] Bluetooth: hci1: Frame reassembly failed (-84) [ 708.135087][T13092] Invalid ELF header magic: != ELF [ 709.353129][T12609] team0 (unregistering): Port device team_slave_1 removed [ 710.006128][T13078] sp0: Synchronizing with TNC [ 710.034546][T12065] Bluetooth: hci1: command 0x1003 tx timeout [ 710.042309][ T5839] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 710.108830][ T5835] audit_log_start: 15774 callbacks suppressed [ 710.108844][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 710.121985][ T31] audit: type=1400 audit(1755943394.485:593476): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5835 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 710.149220][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 710.176796][ T5838] audit: audit_lost=210177 audit_rate_limit=0 audit_backlog_limit=64 [ 710.185183][ T5835] audit: audit_lost=210178 audit_rate_limit=0 audit_backlog_limit=64 [ 710.195028][ T5838] audit: backlog limit exceeded [ 710.197900][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 710.204256][ T5835] audit: backlog limit exceeded [ 710.211653][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 710.218434][ T5846] audit: audit_lost=210179 audit_rate_limit=0 audit_backlog_limit=64 [ 710.338556][T13106] veth3: entered promiscuous mode [ 710.752063][T13111] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 711.220267][T12932] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 711.295610][T12932] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 711.337763][T12932] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 711.566785][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'. [ 711.708711][T12932] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 711.762446][T13128] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 712.049695][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1754'. [ 712.081511][T13129] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 712.096850][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1754'. [ 712.121189][T12609] IPVS: stop unused estimator thread 0... [ 712.654623][T12932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.757620][T13142] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 712.809256][T12932] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.388302][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.396760][ T6311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.497712][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.504989][ T6311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.139720][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 714.345572][T12932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.125242][ T5208] audit_log_start: 9023 callbacks suppressed [ 715.125261][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 715.138170][ T31] audit: type=1400 audit(1755943399.515:598867): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5208 comm="udevd" name="/" dev="sda1" ino=2 [ 715.155480][T13160] audit: audit_backlog=65 > audit_backlog_limit=64 [ 715.156359][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 715.169279][ C0] audit: audit_lost=211391 audit_rate_limit=0 audit_backlog_limit=64 [ 715.171377][T13160] audit: audit_lost=211392 audit_rate_limit=0 audit_backlog_limit=64 [ 715.177383][ C0] audit: backlog limit exceeded [ 715.192033][T13160] audit: backlog limit exceeded [ 715.197128][T13160] audit: audit_backlog=65 > audit_backlog_limit=64 [ 715.203657][T13160] audit: audit_lost=211393 audit_rate_limit=0 audit_backlog_limit=64 [ 715.648963][T13177] overlayfs: failed to clone upperpath [ 715.723923][T13180] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1766'. [ 715.806221][T13180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1766'. [ 715.864529][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'. [ 715.910542][T12932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.520178][T13195] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1769'. [ 716.627331][ T5910] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 716.838490][ T5910] usb 3-1: config 0 has an invalid interface number: 73 but max is 0 [ 716.846668][ T5910] usb 3-1: config 0 has no interface number 0 [ 716.896293][ T5910] usb 3-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 716.923293][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.962309][ T5910] usb 3-1: Product: syz [ 716.966702][ T5910] usb 3-1: Manufacturer: syz [ 717.038609][ T5910] usb 3-1: SerialNumber: syz [ 717.097821][ T5932] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 717.769976][ T5910] usb 3-1: config 0 descriptor?? [ 717.833371][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 717.860939][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.897353][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.908111][T12932] veth0_vlan: entered promiscuous mode [ 717.936333][ T5932] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 717.976172][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.986590][T12932] veth1_vlan: entered promiscuous mode [ 717.989589][ T5910] usb 3-1: USB disconnect, device number 63 [ 718.013373][ T5932] usb 2-1: config 0 descriptor?? [ 718.140160][T12932] veth0_macvtap: entered promiscuous mode [ 718.179903][T12932] veth1_macvtap: entered promiscuous mode [ 718.248654][T12932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.492591][T12932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.517130][T12932] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.526513][T12932] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.536389][T12932] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.548723][T12932] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.707724][T13218] 9pnet_fd: Insufficient options for proto=fd [ 718.719090][ T5932] hid-multitouch 0003:1FD2:6007.0011: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 718.720403][T13218] netlink: 'syz.2.1774': attribute type 10 has an invalid length. [ 718.883545][T13200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.909989][T13200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.985005][ T6301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.208059][ T6301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.024780][T12610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.090249][T12610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.135597][ T31] kauditd_printk_skb: 12344 callbacks suppressed [ 720.135617][ T31] audit: type=1400 audit(1755943404.524:606322): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13219 comm="fido_id" name="/" dev="sda1" ino=2 [ 720.177303][T13219] audit: audit_backlog=65 > audit_backlog_limit=64 [ 720.184147][T12932] audit: audit_backlog=65 > audit_backlog_limit=64 [ 720.194459][T12932] audit: audit_lost=213024 audit_rate_limit=0 audit_backlog_limit=64 [ 720.197269][T13227] audit: audit_backlog=65 > audit_backlog_limit=64 [ 720.206101][T12932] audit: backlog limit exceeded [ 720.214330][T13219] audit: audit_lost=213025 audit_rate_limit=0 audit_backlog_limit=64 [ 720.223659][ T31] audit: type=1400 audit(1755943404.554:606323): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12932 comm="syz-executor" name="/" dev="sda1" ino=2 [ 720.244909][T12932] audit: audit_backlog=65 > audit_backlog_limit=64 [ 720.251922][T12932] audit: audit_lost=213026 audit_rate_limit=0 audit_backlog_limit=64 [ 720.369652][T13228] overlayfs: failed to clone upperpath [ 720.560577][T13230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1700'. [ 721.025628][ T5910] usb 2-1: USB disconnect, device number 80 [ 721.465965][T13249] bridge0: port 3(dummy0) entered blocking state [ 721.472541][T13249] bridge0: port 3(dummy0) entered forwarding state [ 721.479301][T13249] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.486427][T13249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.493840][T13249] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.500983][T13249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.511600][T13249] bridge0: left allmulticast mode [ 721.628005][T13249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 722.440298][T13246] [U]  [ 722.468023][T13257] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1784'. [ 722.521892][T13258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1784'. [ 723.494676][T13267] overlayfs: failed to clone upperpath [ 723.530290][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1785'. [ 723.553653][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1788'. [ 723.730731][T13275] qnx6: unable to read the first superblock [ 723.780771][T13275] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 724.222337][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 724.231403][T13283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.239552][T13283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.269792][T13283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.277283][T13283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.352566][T13293] 9pnet_fd: Insufficient options for proto=fd [ 724.406237][T13296] syz.5.1795: attempt to access beyond end of device [ 724.406237][T13296] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 724.464185][T13296] efs: cannot read volume header [ 724.718030][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 725.266932][ T31] kauditd_printk_skb: 13048 callbacks suppressed [ 725.266952][ T31] audit: type=1400 audit(1755943409.654:614127): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5208 comm="udevd" name="/" dev="sda1" ino=2 [ 725.295169][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 725.295548][T13303] audit: audit_backlog=66 > audit_backlog_limit=64 [ 725.305521][T13298] audit: audit_backlog=66 > audit_backlog_limit=64 [ 725.315223][T13298] audit: audit_lost=214775 audit_rate_limit=0 audit_backlog_limit=64 [ 725.324004][T13298] audit: backlog limit exceeded [ 725.329255][T13298] audit: audit_backlog=66 > audit_backlog_limit=64 [ 725.335850][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 725.335863][ C0] audit: audit_lost=214776 audit_rate_limit=0 audit_backlog_limit=64 [ 725.335876][ C0] audit: backlog limit exceeded [ 725.357725][ T9] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.399789][ T9] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.438372][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 725.472135][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 725.507360][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.562216][T13306] xt_CONNSECMARK: invalid mode: 0 [ 725.569804][ T9] usb 3-1: config 0 descriptor?? [ 725.759032][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 725.865667][T13314] No control pipe specified [ 726.007507][T13317] xt_connbytes: Forcing CT accounting to be enabled [ 726.030684][T13317] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 726.196753][ T9] usb 3-1: string descriptor 0 read error: -22 [ 729.432538][ T9] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #100: -71 [ 729.448725][ T9] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 729.483189][ T9] uclogic 0003:256C:006D.0012: failed probing pen v1 parameters: -71 [ 729.491637][ T9] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 729.506425][ T9] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 729.735213][ T9] usb 3-1: USB disconnect, device number 64 [ 730.054091][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'. [ 730.277609][ T31] kauditd_printk_skb: 17720 callbacks suppressed [ 730.277627][ T31] audit: type=1400 audit(1755943414.653:620785): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8306 comm="udevd" name="/" dev="sda1" ino=2 [ 730.277687][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 730.310264][ T6013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 730.311069][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 730.317522][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 730.323803][ T8306] audit: audit_backlog=66 > audit_backlog_limit=64 [ 730.330008][ C0] audit: audit_lost=218466 audit_rate_limit=0 audit_backlog_limit=64 [ 730.330029][ C0] audit: backlog limit exceeded [ 730.330876][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 730.336973][ T5838] audit: audit_backlog=67 > audit_backlog_limit=64 [ 730.431693][ T5932] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 730.611648][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 730.632327][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 730.655195][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1809'. [ 730.689819][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 730.755227][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 730.813256][T13349] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 730.841263][ T5932] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 730.879414][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.889862][ T5932] usb 3-1: Product: syz [ 730.899648][ T5932] usb 3-1: Manufacturer: syz [ 730.904315][ T5932] usb 3-1: SerialNumber: syz [ 730.911430][T13349] bond3: (slave vcan1): Error -95 calling set_mac_address [ 730.930911][ T5932] usb 3-1: config 0 descriptor?? [ 730.945005][ T5932] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 731.761752][ T5932] scsi host1: usb-storage 3-1:0.0 [ 731.799718][ T5932] usb 3-1: USB disconnect, device number 65 [ 733.063311][T13377] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1815'. [ 733.261832][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 735.281956][ T31] kauditd_printk_skb: 20653 callbacks suppressed [ 735.281977][ T31] audit: type=1400 audit(1755943419.672:630126): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5208 comm="udevd" name="devices" dev="sysfs" ino=7 [ 735.291433][T13420] audit: audit_backlog=65 > audit_backlog_limit=64 [ 735.314952][ T5838] audit: audit_backlog=66 > audit_backlog_limit=64 [ 735.319531][ T5208] audit: audit_backlog=66 > audit_backlog_limit=64 [ 735.332539][ T5841] audit: audit_backlog=66 > audit_backlog_limit=64 [ 735.339577][ T5929] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 735.347483][ T5838] audit: audit_lost=222240 audit_rate_limit=0 audit_backlog_limit=64 [ 735.354298][ T5208] audit: audit_lost=222241 audit_rate_limit=0 audit_backlog_limit=64 [ 735.356666][ T5841] audit: audit_lost=222242 audit_rate_limit=0 audit_backlog_limit=64 [ 735.363842][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 735.363868][ C0] audit: audit_lost=222243 audit_rate_limit=0 audit_backlog_limit=64 [ 735.519336][ T5929] usb 2-1: device descriptor read/64, error -71 [ 736.529353][ T5929] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 736.849721][ T5929] usb 2-1: device descriptor read/64, error -71 [ 736.968666][ T5929] usb usb2-port1: attempt power cycle [ 736.986707][T13428] netlink: 'syz.2.1830': attribute type 8 has an invalid length. [ 737.340658][ T5929] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 737.528262][ T5929] usb 2-1: device descriptor read/8, error -71 [ 738.157443][T13443] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1836'. [ 738.709945][T13452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.290663][ T31] kauditd_printk_skb: 19357 callbacks suppressed [ 740.290684][ T31] audit: type=1400 audit(1755943424.672:636661): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5208 comm="udevd" name="integrity" dev="sysfs" ino=15161 [ 740.318644][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 740.328336][ T5208] audit: audit_lost=226517 audit_rate_limit=0 audit_backlog_limit=64 [ 740.336997][ T5208] audit: backlog limit exceeded [ 740.343288][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 740.356941][T13469] audit: audit_backlog=65 > audit_backlog_limit=64 [ 740.382282][T13470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 740.388868][T13469] audit: audit_lost=226518 audit_rate_limit=0 audit_backlog_limit=64 [ 740.388895][T13469] audit: backlog limit exceeded [ 740.409850][ T5208] audit: audit_lost=226519 audit_rate_limit=0 audit_backlog_limit=64 [ 740.669900][ T43] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 740.757784][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 740.828816][T13484] IPVS: length: 144 != 24 [ 740.860599][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 740.885732][ T43] usb 3-1: config 0 has no interfaces? [ 740.917442][ T43] usb 3-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e [ 740.958198][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.992725][ T43] usb 3-1: Product: syz [ 741.006035][ T43] usb 3-1: Manufacturer: syz [ 741.027494][ T43] usb 3-1: SerialNumber: syz [ 741.063037][ T43] usb 3-1: config 0 descriptor?? [ 743.050519][ T43] usb 3-1: USB disconnect, device number 66 [ 743.790872][ T5932] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 743.980260][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 744.010233][ T5932] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 744.018491][ T5932] usb 3-1: config 1 has no interface number 0 [ 744.070205][ T5932] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 744.110407][ T5932] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 744.140199][ T5932] usb 3-1: config 1 interface 105 has no altsetting 0 [ 744.168869][ T5932] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 744.196096][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.222068][ T5932] usb 3-1: Product: syz [ 744.226374][ T5932] usb 3-1: Manufacturer: syz [ 744.248837][ T5932] usb 3-1: SerialNumber: syz [ 744.450544][T13513] netlink: 'syz.1.1858': attribute type 10 has an invalid length. [ 744.599746][T13509] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 744.630889][T13513] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 744.667489][T13509] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 745.223406][T13509] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 745.240562][T13509] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 745.302596][ T31] kauditd_printk_skb: 12193 callbacks suppressed [ 745.302617][ T31] audit: type=1400 audit(1755943429.701:644865): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5208 comm="udevd" path="/sys/devices/virtual/block/loop0" dev="sysfs" ino=14893 [ 745.339754][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 745.347280][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 745.354960][T13519] audit: audit_backlog=65 > audit_backlog_limit=64 [ 745.374647][ T5208] audit: audit_lost=227850 audit_rate_limit=0 audit_backlog_limit=64 [ 745.382800][ T5834] audit: audit_lost=227851 audit_rate_limit=0 audit_backlog_limit=64 [ 745.382830][ T5834] audit: backlog limit exceeded [ 745.382853][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 745.382874][ T5834] audit: audit_lost=227852 audit_rate_limit=0 audit_backlog_limit=64 [ 745.382891][ T5834] audit: backlog limit exceeded [ 745.932205][ T5932] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 746.434411][T13527] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 746.475634][ T5932] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 746.536833][ T5932] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 7e:42:ca:13:18:77 [ 746.618251][ T5932] usb 3-1: USB disconnect, device number 67 [ 746.656201][ T5932] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 747.039231][ T5932] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 747.872811][T13543] netlink: 'syz.0.1867': attribute type 3 has an invalid length. [ 748.038673][ T5932] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 748.060776][T13539] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1864'. [ 748.072730][ T5932] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 748.213064][T13539] fuse: Bad value for 'fd' [ 749.079775][T13563] 9pnet_fd: Insufficient options for proto=fd [ 749.175448][T13552] tipc: Enabled bearer , priority 10 [ 749.230835][ T980] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 749.611948][ T980] usb 6-1: Using ep0 maxpacket: 16 [ 750.093478][ T980] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 750.093512][ T980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.093534][ T980] usb 6-1: config 0 has no interface number 0 [ 750.103141][ T980] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 750.103177][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.103202][ T980] usb 6-1: Product: syz [ 750.103219][ T980] usb 6-1: Manufacturer: syz [ 750.103237][ T980] usb 6-1: SerialNumber: syz [ 750.107364][ T980] usb 6-1: config 0 descriptor?? [ 750.658763][T12065] Bluetooth: hci5: command 0x0405 tx timeout [ 750.678373][ T5837] tipc: Node number set to 4172883315 [ 750.680227][ T6013] audit_log_start: 9718 callbacks suppressed [ 750.680242][ T6013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 750.680256][ T6013] audit: audit_lost=228985 audit_rate_limit=0 audit_backlog_limit=64 [ 750.680270][ T6013] audit: backlog limit exceeded [ 750.680371][ T6013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 750.680384][ T6013] audit: audit_lost=228986 audit_rate_limit=0 audit_backlog_limit=64 [ 750.680396][ T6013] audit: backlog limit exceeded [ 750.680413][ T6013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 750.680424][ T6013] audit: audit_lost=228987 audit_rate_limit=0 audit_backlog_limit=64 [ 750.680437][ T6013] audit: backlog limit exceeded [ 750.680471][ T6013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 750.893565][T13559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.894081][T13559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.896996][T13559] xt_socket: unknown flags 0x8 [ 750.935944][T13559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.936503][T13559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.950069][ T980] usb 6-1: Found UVC 0.00 device syz (046d:08d3) [ 750.950108][ T980] usb 6-1: No valid video chain found. [ 750.984930][ T980] usb 6-1: USB disconnect, device number 2 [ 751.110979][ T5837] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 751.341034][ T5837] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 751.341073][ T5837] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.341121][ T5837] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 751.341149][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.573854][ T5837] usb 2-1: usb_control_msg returned -32 [ 751.573913][ T5837] usbtmc 2-1:16.0: can't read capabilities [ 752.748407][ T43] usb 2-1: USB disconnect, device number 85 [ 752.843339][T13583] tty tty1: ldisc open failed (-12), clearing slot 0 [ 753.331748][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.037809][T13626] fuse: Bad value for 'fd' [ 754.139802][T13626] fuse: Unknown parameter ';uv D[S͠Gաpor\uViošV83{E͘nsNKNGy`_5' [ 754.141197][T13627] random: crng reseeded on system resumption [ 754.257633][T13628] IPv6: NLM_F_CREATE should be specified when creating new route [ 755.744383][ T6010] audit_log_start: 10661 callbacks suppressed [ 755.744403][ T6010] audit: audit_backlog=65 > audit_backlog_limit=64 [ 755.761738][ T5208] audit: audit_backlog=66 > audit_backlog_limit=64 [ 755.768698][ T5208] audit: audit_lost=230630 audit_rate_limit=0 audit_backlog_limit=64 [ 755.768716][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 755.777514][ T31] audit: type=1400 audit(1755943439.460:656924): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="udevd" name="/" dev="sda1" ino=2 [ 755.783457][ C0] audit: audit_lost=230631 audit_rate_limit=0 audit_backlog_limit=64 [ 755.783479][ C0] audit: backlog limit exceeded [ 755.784297][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 755.811747][T13625] audit: audit_backlog=66 > audit_backlog_limit=64 [ 755.815352][ C0] audit: audit_lost=230632 audit_rate_limit=0 audit_backlog_limit=64 [ 755.851840][T13614] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 755.897830][T13607] syz.2.1878 (13607): drop_caches: 2 [ 758.969259][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1897'. [ 759.053722][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1897'. [ 759.086162][T13689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 759.108371][T13689] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 759.120668][T13689] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 759.128569][T13689] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 759.151183][T13689] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 759.165802][T13689] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 759.190215][T13689] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 759.248650][T13689] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 759.746128][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'. [ 759.813357][T13711] vlan2: entered allmulticast mode [ 759.818654][T13711] hsr0: entered allmulticast mode [ 759.861211][T13711] hsr_slave_0: entered allmulticast mode [ 759.913374][T13711] hsr_slave_1: entered allmulticast mode [ 760.012308][ T5848] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 760.032812][ T5929] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 760.212434][ T5848] usb 6-1: Using ep0 maxpacket: 32 [ 760.258280][ T5848] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 760.278155][ T5929] usb 2-1: device descriptor read/64, error -71 [ 760.318218][ T5848] usb 6-1: config 0 has no interface number 0 [ 760.353734][ T5848] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.408310][ T5848] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.430984][ T5848] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 760.455765][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.632693][ T5929] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 760.712892][ T5848] usb 6-1: config 0 descriptor?? [ 760.754049][ T31] kauditd_printk_skb: 27891 callbacks suppressed [ 760.754097][ T31] audit: type=1400 audit(1755943445.149:667584): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="udevd" name="/" dev="sda1" ino=2 [ 760.899966][ T5929] usb 2-1: device descriptor read/64, error -71 [ 761.146282][ T5929] usb usb2-port1: attempt power cycle [ 761.183125][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.190009][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.190039][ C0] audit: audit_lost=236377 audit_rate_limit=0 audit_backlog_limit=64 [ 761.190060][ C0] audit: backlog limit exceeded [ 761.263566][T13715] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.308355][T13725] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.315787][ T31] audit: type=1400 audit(1755943445.149:667585): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="udevd" name="/" dev="sysfs" ino=1 [ 761.335741][T13706] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.363893][T13715] audit: audit_lost=236378 audit_rate_limit=0 audit_backlog_limit=64 [ 761.436981][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1908'. [ 761.485713][T13715] CUSE: unknown device info "" [ 761.490653][T13715] CUSE: zero length info key specified [ 761.673248][ T5929] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 761.728551][ T5929] usb 2-1: device descriptor read/8, error -71 [ 762.592123][ T5929] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 762.646748][ T5929] usb 2-1: device descriptor read/8, error -71 [ 762.652542][ T5848] usbhid 6-1:0.1: can't add hid device: -71 [ 762.705766][ T5848] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 762.746378][ T5848] usb 6-1: USB disconnect, device number 3 [ 762.769327][ T5929] usb usb2-port1: unable to enumerate USB device [ 764.153917][ T5929] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 764.220758][T13776] netlink: 'syz.4.1920': attribute type 3 has an invalid length. [ 764.358326][ T5929] usb 2-1: Invalid ep0 maxpacket: 64 [ 765.461509][ T5929] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 765.786659][ T6013] audit_log_start: 10764 callbacks suppressed [ 765.786678][ T6013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.800281][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.807565][ T6013] audit: audit_lost=238486 audit_rate_limit=0 audit_backlog_limit=64 [ 765.815789][ T5208] audit: audit_lost=238487 audit_rate_limit=0 audit_backlog_limit=64 [ 765.825064][ T6013] audit: backlog limit exceeded [ 765.829993][ T6013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.837296][T12932] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.843963][ T5208] audit: backlog limit exceeded [ 765.848870][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.856841][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.962718][ T5929] usb 2-1: Invalid ep0 maxpacket: 64 [ 766.020349][ T5929] usb usb2-port1: attempt power cycle [ 766.355672][T13793] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 767.273120][ T5837] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 767.349035][T13805] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 767.358614][T13805] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 767.374472][T13805] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 767.388610][T13805] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 767.430194][T13805] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 767.453013][ T5837] usb 6-1: Invalid ep0 maxpacket: 16 [ 767.481701][T13805] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 767.538281][T13805] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 767.538448][T13805] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 767.538516][T13805] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 767.538582][T13805] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 767.598252][ T5837] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 767.703978][T13811] tty tty20: ldisc open failed (-12), clearing slot 19 [ 767.762132][ T5837] usb 6-1: Invalid ep0 maxpacket: 16 [ 767.784219][ T5837] usb usb6-port1: attempt power cycle [ 768.206522][ T5837] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 768.533882][ T5837] usb 6-1: Invalid ep0 maxpacket: 16 [ 768.764046][ T5837] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 768.797770][ T5837] usb 6-1: Invalid ep0 maxpacket: 16 [ 768.813006][ T5837] usb usb6-port1: unable to enumerate USB device [ 769.279658][T13836] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 769.322067][T13836] overlayfs: missing 'lowerdir' [ 771.116726][T13836] syzkaller1: entered promiscuous mode [ 771.122841][T13836] syzkaller1: entered allmulticast mode [ 771.184730][ T31] kauditd_printk_skb: 13050 callbacks suppressed [ 771.184748][ T31] audit: type=1400 audit(1755943454.788:676916): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13835 comm="syz.1.1933" path="/dev/v4l-subdev0" dev="devtmpfs" ino=942 [ 771.221228][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.233148][ T8306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.241186][ T8306] audit: audit_lost=241211 audit_rate_limit=0 audit_backlog_limit=64 [ 771.251877][ T5841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.258595][ T5841] audit: audit_lost=241212 audit_rate_limit=0 audit_backlog_limit=64 [ 771.267511][ T5841] audit: backlog limit exceeded [ 771.284585][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.291440][ T5208] audit: audit_lost=241213 audit_rate_limit=0 audit_backlog_limit=64 [ 771.337670][ T8306] audit: backlog limit exceeded [ 772.254557][T13845] @: renamed from vlan0 (while UP) [ 773.503579][ T980] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 773.675073][ T980] usb 2-1: device descriptor read/64, error -71 [ 774.003833][ T980] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 774.183762][ T980] usb 2-1: device descriptor read/64, error -71 [ 774.271133][T13877] 9pnet_virtio: no channels available for device syz [ 774.340720][ T980] usb usb2-port1: attempt power cycle [ 774.720791][ T980] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 774.766909][ T980] usb 2-1: device descriptor read/8, error -71 [ 775.313858][ T980] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 775.334770][ T980] usb 2-1: device descriptor read/8, error -71 [ 775.475317][ T980] usb usb2-port1: unable to enumerate USB device [ 776.196076][ T31] kauditd_printk_skb: 19210 callbacks suppressed [ 776.196095][ T31] audit: type=1400 audit(1755943460.578:684550): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5208 comm="udevd" name="/" dev="sda1" ino=2 [ 776.244847][ T5838] audit: audit_backlog=18 > audit_backlog_limit=64 [ 776.255767][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 776.255842][ T5208] audit: audit_backlog=66 > audit_backlog_limit=64 [ 776.262441][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 776.262461][ C0] audit: audit_lost=245073 audit_rate_limit=0 audit_backlog_limit=64 [ 776.262480][ C0] audit: backlog limit exceeded [ 776.263235][ T5834] audit: audit_lost=245074 audit_rate_limit=0 audit_backlog_limit=64 [ 776.289654][ T5208] audit: audit_lost=245075 audit_rate_limit=0 audit_backlog_limit=64 [ 776.303305][ T5838] audit: audit_lost=245076 audit_rate_limit=0 audit_backlog_limit=64 [ 777.234495][ T980] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 777.319350][T13922] devpts: Bad value for 'max' [ 777.381095][T13924] gfs2: not a GFS2 filesystem [ 777.413993][ T980] usb 6-1: Using ep0 maxpacket: 32 [ 777.432882][ T980] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 777.454505][ T980] usb 6-1: config 0 has no interface number 0 [ 777.480477][ T980] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 777.491213][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.499544][ T980] usb 6-1: Product: syz [ 777.504240][ T980] usb 6-1: Manufacturer: syz [ 777.509020][ T980] usb 6-1: SerialNumber: syz [ 777.519067][ T980] usb 6-1: config 0 descriptor?? [ 777.542454][ T980] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 777.940859][ T980] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 777.978108][ T980] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 778.186831][T13932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.220727][T13932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.447855][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1963'. [ 778.476433][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1963'. [ 779.124608][T13940] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 779.137583][T13940] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 779.576106][T13950] netlink: 'syz.4.1965': attribute type 23 has an invalid length. [ 780.287214][T13956] kvm: emulating exchange as write [ 780.706686][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 780.707209][ T5837] usb 6-1: USB disconnect, device number 8 [ 781.195950][ T5837] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 781.210869][ T31] kauditd_printk_skb: 13465 callbacks suppressed [ 781.210889][ T31] audit: type=1400 audit(1755943465.587:692973): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5208 comm="udevd" name="/" dev="sysfs" ino=1 [ 781.242308][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.262264][ T8306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.264498][T13963] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.270286][ T6013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.275611][ T5208] audit: audit_lost=246757 audit_rate_limit=0 audit_backlog_limit=64 [ 781.302667][T13964] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.309440][T13963] audit: audit_lost=246758 audit_rate_limit=0 audit_backlog_limit=64 [ 781.318171][ T6013] audit: audit_lost=246759 audit_rate_limit=0 audit_backlog_limit=64 [ 781.329079][ T8306] audit: audit_lost=246760 audit_rate_limit=0 audit_backlog_limit=64 [ 781.360383][ T5837] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 781.389039][ T5837] quatech2 6-1:0.51: device disconnected [ 781.541076][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1968'. [ 781.867196][T13973] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1970'. [ 782.265381][T13971] genirq: Flags mismatch irq 5. 00200000 (pcl818) vs. 00200000 (pcl812) [ 782.509543][T13978] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 785.233898][T14016] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 785.941485][T14032] netlink: 'syz.1.1984': attribute type 29 has an invalid length. [ 785.987608][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 785.998534][T14032] netlink: 'syz.1.1984': attribute type 9 has an invalid length. [ 786.025611][ T980] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 786.577626][T14035] dummy0: left allmulticast mode [ 786.584638][ T31] kauditd_printk_skb: 14622 callbacks suppressed [ 786.584658][ T31] audit: type=1400 audit(1755943470.437:698278): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=14027 comm="syz.5.1982" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 786.601848][T14032] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1984'. [ 786.625227][T14035] dummy0: left promiscuous mode [ 786.638792][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 786.645302][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 786.645767][ T5208] audit: audit_lost=249866 audit_rate_limit=0 audit_backlog_limit=64 [ 786.661672][ T31] audit: type=1400 audit(1755943470.467:698279): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14030 comm="syz.4.1985" name="newroot" dev="tmpfs" ino=2 [ 786.675035][ T5838] audit: audit_lost=249867 audit_rate_limit=0 audit_backlog_limit=64 [ 786.683015][ T5208] audit: backlog limit exceeded [ 786.695812][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 786.702531][ T31] audit: type=1400 audit(1755943470.467:698280): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14030 comm="syz.4.1985" name="dev" dev="tmpfs" ino=3 [ 786.713697][ T5838] audit: backlog limit exceeded [ 786.721478][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.734282][T14035] bridge0: port 3(dummy0) entered disabled state [ 786.765201][ T980] usb 6-1: Using ep0 maxpacket: 8 [ 786.785544][ T980] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.804642][T14035] bridge_slave_1: left allmulticast mode [ 786.815754][T14035] bridge_slave_1: left promiscuous mode [ 786.854806][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 786.875025][T14035] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.918000][ T980] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 786.970931][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.032518][ T980] usb 6-1: config 0 descriptor?? [ 787.074330][T14035] bridge_slave_0: left allmulticast mode [ 787.083116][T14035] bridge_slave_0: left promiscuous mode [ 787.153649][T14035] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.521713][T14029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 788.721253][ T9] libceph: connect (1)[c::]:6789 error -101 [ 788.730852][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 789.030270][ T9] libceph: connect (1)[c::]:6789 error -101 [ 789.077258][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 789.242064][T14060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1991'. [ 789.263818][T14060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1991'. [ 789.295944][T14060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1991'. [ 789.331862][T14060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1991'. [ 789.384148][T14060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1991'. [ 789.427935][T14060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1991'. [ 789.453387][T14060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1991'. [ 789.484630][T14060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1991'. [ 789.574614][T14065] bridge0: entered promiscuous mode [ 789.585888][T14065] macvlan3: entered promiscuous mode [ 789.608249][ T9] libceph: connect (1)[c::]:6789 error -101 [ 789.620867][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 789.709382][T14046] ceph: No mds server is up or the cluster is laggy [ 789.952127][ T980] usbhid 6-1:0.0: can't add hid device: -71 [ 789.958503][ T980] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 789.976926][ T980] usb 6-1: USB disconnect, device number 9 [ 789.988332][T14070] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 790.320716][T14073] fuse: Bad value for 'user_id' [ 790.350477][T14073] fuse: Bad value for 'user_id' [ 791.587844][ T31] kauditd_printk_skb: 18323 callbacks suppressed [ 791.587867][ T31] audit: type=1400 audit(1755943475.916:707056): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5208 comm="udevd" name="virtual" dev="sysfs" ino=1370 [ 791.617097][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 791.623726][ T5208] audit: audit_lost=253051 audit_rate_limit=0 audit_backlog_limit=64 [ 791.668153][ T5208] audit: backlog limit exceeded [ 791.673125][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 791.696789][T14088] audit: audit_backlog=65 > audit_backlog_limit=64 [ 791.703382][T14088] audit: audit_lost=253052 audit_rate_limit=0 audit_backlog_limit=64 [ 791.728239][ T5841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 791.734909][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 791.734929][ C0] audit: audit_lost=253053 audit_rate_limit=0 audit_backlog_limit=64 [ 791.936498][T14089] __nla_validate_parse: 25 callbacks suppressed [ 791.936514][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 792.024209][T14089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2000'. [ 792.176321][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 792.216727][T14089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2000'. [ 796.010487][T14156] netlink: 336 bytes leftover after parsing attributes in process `syz.2.2013'. [ 796.330275][T14170] loop9: detected capacity change from 0 to 7 [ 796.361568][T14170] Buffer I/O error on dev loop9, logical block 0, async page read [ 796.381648][T14170] Buffer I/O error on dev loop9, logical block 0, async page read [ 796.456291][T14170] Buffer I/O error on dev loop9, logical block 0, async page read [ 796.596086][ T31] kauditd_printk_skb: 19479 callbacks suppressed [ 796.596105][ T31] audit: type=1400 audit(1755943480.975:714791): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14176 comm="syz.0.2021" name="newroot" dev="tmpfs" ino=2 [ 796.636353][T14170] Buffer I/O error on dev loop9, logical block 0, async page read [ 796.644492][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 796.644802][T14170] Buffer I/O error on dev loop9, logical block 0, async page read [ 796.659131][ T5841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 796.666684][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 796.673273][ C0] audit: audit_lost=256969 audit_rate_limit=0 audit_backlog_limit=64 [ 796.676684][ T5841] audit: audit_lost=256970 audit_rate_limit=0 audit_backlog_limit=64 [ 796.681498][ C0] audit: backlog limit exceeded [ 796.695646][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 796.700188][ T5838] audit: audit_lost=256971 audit_rate_limit=0 audit_backlog_limit=64 [ 796.702256][ C0] audit: audit_lost=256972 audit_rate_limit=0 audit_backlog_limit=64 [ 796.711416][T14170] Buffer I/O error on dev loop9, logical block 0, async page read [ 796.791900][T14170] Buffer I/O error on dev loop9, logical block 0, async page read [ 796.828000][T14170] ldm_validate_partition_table(): Disk read failed. [ 796.856723][T14170] Buffer I/O error on dev loop9, logical block 0, async page read [ 796.880574][T14170] Buffer I/O error on dev loop9, logical block 0, async page read [ 796.890973][T14170] Buffer I/O error on dev loop9, logical block 0, async page read [ 796.892910][T14188] openvswitch: netlink: Tunnel attr 16134 out of range max 16 [ 796.922289][T14170] Dev loop9: unable to read RDB block 0 [ 796.997893][T14170] loop9: unable to read partition table [ 797.043441][T14170] loop9: partition table beyond EOD, truncated [ 797.081790][T14170] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 797.081790][T14170] ) failed (rc=-5) [ 802.189176][ T31] kauditd_printk_skb: 5906 callbacks suppressed [ 802.189570][ T31] audit: type=1400 audit(1755943486.575:718272): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5841 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 802.219202][ T5841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 802.226309][ T5841] audit: audit_lost=257781 audit_rate_limit=0 audit_backlog_limit=64 [ 802.228721][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 802.241098][ C0] audit: audit_lost=257782 audit_rate_limit=0 audit_backlog_limit=64 [ 802.247009][T14224] audit: audit_backlog=65 > audit_backlog_limit=64 [ 802.249279][ C0] audit: backlog limit exceeded [ 802.255857][T14224] audit: audit_lost=257783 audit_rate_limit=0 audit_backlog_limit=64 [ 802.269340][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 802.276247][ T5846] audit: audit_lost=257784 audit_rate_limit=0 audit_backlog_limit=64 [ 802.289830][T14224] CIFS mount error: No usable UNC path provided in device string! [ 802.289830][T14224] [ 802.301544][T14224] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 806.520422][T14252] syz.0.2037 uses old SIOCAX25GETINFO [ 807.684625][ T31] kauditd_printk_skb: 10419 callbacks suppressed [ 807.684649][ T31] audit: type=1400 audit(1755943491.544:724272): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14270 comm="modprobe" name="/" dev="sda1" ino=2 [ 807.747547][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 807.749473][T14274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 807.754114][ T5208] audit: audit_lost=259257 audit_rate_limit=0 audit_backlog_limit=64 [ 807.754136][ T5208] audit: backlog limit exceeded [ 807.754173][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 807.760878][T14274] audit: audit_lost=259258 audit_rate_limit=0 audit_backlog_limit=64 [ 807.760899][T14274] audit: backlog limit exceeded [ 807.773905][T14270] audit: audit_backlog=65 > audit_backlog_limit=64 [ 807.804671][ T5208] audit: audit_lost=259259 audit_rate_limit=0 audit_backlog_limit=64 [ 808.365497][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 808.416683][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 810.206511][T14316] bad cache= option: no%e [ 810.206511][T14316] [ 810.214584][T14316] CIFS: VFS: bad cache= option: no%e [ 812.693764][ T31] kauditd_printk_skb: 13317 callbacks suppressed [ 812.693824][ T31] audit: type=1400 audit(1755943497.074:730282): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14341 comm="syz.1.2059" name="newroot" dev="tmpfs" ino=2 [ 812.711002][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 812.727326][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 812.736623][T14344] audit: audit_backlog=65 > audit_backlog_limit=64 [ 812.744566][T14344] audit: audit_lost=261696 audit_rate_limit=0 audit_backlog_limit=64 [ 812.753470][T14344] audit: backlog limit exceeded [ 812.761179][T14344] audit: audit_backlog=65 > audit_backlog_limit=64 [ 812.768046][T14344] audit: audit_lost=261697 audit_rate_limit=0 audit_backlog_limit=64 [ 812.778763][T14344] audit: backlog limit exceeded [ 812.784328][T14344] audit: audit_backlog=65 > audit_backlog_limit=64 [ 813.086135][ T5837] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 814.049709][ T5837] usb 3-1: device descriptor read/64, error -71 [ 814.337595][ T5837] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 814.516558][T14355] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 814.533780][T14355] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 815.173190][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.238255][ T5837] usb 3-1: device descriptor read/64, error -71 [ 815.379463][ T5837] usb usb3-port1: attempt power cycle [ 815.869810][T14368] netlink: 'syz.5.2066': attribute type 13 has an invalid length. [ 816.576301][T14377] 9pnet_fd: Insufficient options for proto=fd [ 816.618454][ T5929] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 816.819818][ T5929] usb 6-1: device descriptor read/64, error -71 [ 817.388624][ T5929] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 817.552846][ T5929] usb 6-1: device descriptor read/64, error -71 [ 817.770584][ T31] kauditd_printk_skb: 10108 callbacks suppressed [ 817.770605][ T31] audit: type=1400 audit(1755943502.103:734845): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14392 comm="syz.1.2063" name="403" dev="tmpfs" ino=2305 [ 817.899248][ T5835] audit: audit_backlog=66 > audit_backlog_limit=64 [ 817.899734][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 817.908147][T14395] audit: audit_backlog=66 > audit_backlog_limit=64 [ 817.912540][ C0] audit: audit_lost=263548 audit_rate_limit=0 audit_backlog_limit=64 [ 817.919537][T14395] audit: audit_lost=263549 audit_rate_limit=0 audit_backlog_limit=64 [ 817.927668][ C0] audit: backlog limit exceeded [ 817.935715][T14395] audit: backlog limit exceeded [ 817.935760][T14395] audit: audit_backlog=66 > audit_backlog_limit=64 [ 817.935778][T14395] audit: audit_lost=263550 audit_rate_limit=0 audit_backlog_limit=64 [ 818.168095][ T5929] usb usb6-port1: attempt power cycle [ 820.108850][ T5929] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 820.152712][ T5929] usb 6-1: device descriptor read/8, error -71 [ 820.220066][ T5932] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 820.916256][T14421] FAULT_INJECTION: forcing a failure. [ 820.916256][T14421] name failslab, interval 1, probability 0, space 0, times 0 [ 821.024514][T14421] CPU: 0 UID: 0 PID: 14421 Comm: syz.0.2080 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 821.024544][T14421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 821.024558][T14421] Call Trace: [ 821.024567][T14421] [ 821.024577][T14421] dump_stack_lvl+0x189/0x250 [ 821.024608][T14421] ? __pfx____ratelimit+0x10/0x10 [ 821.024633][T14421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.024657][T14421] ? __pfx__printk+0x10/0x10 [ 821.024693][T14421] ? ref_tracker_alloc+0x318/0x460 [ 821.024721][T14421] should_fail_ex+0x414/0x560 [ 821.024748][T14421] should_failslab+0xa8/0x100 [ 821.024774][T14421] kmem_cache_alloc_noprof+0x73/0x3c0 [ 821.024796][T14421] ? skb_clone+0x212/0x3a0 [ 821.024821][T14421] skb_clone+0x212/0x3a0 [ 821.024844][T14421] __netlink_deliver_tap+0x404/0x850 [ 821.024889][T14421] ? netlink_deliver_tap+0x2e/0x1b0 [ 821.024922][T14421] netlink_deliver_tap+0x19c/0x1b0 [ 821.024955][T14421] netlink_unicast+0x730/0x8e0 [ 821.024997][T14421] netlink_sendmsg+0x805/0xb30 [ 821.025041][T14421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.025082][T14421] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 821.025105][T14421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.025138][T14421] __sock_sendmsg+0x21c/0x270 [ 821.025168][T14421] ____sys_sendmsg+0x505/0x830 [ 821.025209][T14421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.025262][T14421] ? import_iovec+0x74/0xa0 [ 821.025297][T14421] ___sys_sendmsg+0x21f/0x2a0 [ 821.025333][T14421] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.025409][T14421] ? __fget_files+0x2a/0x420 [ 821.025433][T14421] ? __fget_files+0x3a0/0x420 [ 821.025470][T14421] __x64_sys_sendmsg+0x19b/0x260 [ 821.025508][T14421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 821.025555][T14421] ? __pfx_ksys_write+0x10/0x10 [ 821.025573][T14421] ? rcu_is_watching+0x15/0xb0 [ 821.025604][T14421] ? do_syscall_64+0xbe/0x3b0 [ 821.025634][T14421] do_syscall_64+0xfa/0x3b0 [ 821.025657][T14421] ? lockdep_hardirqs_on+0x9c/0x150 [ 821.025679][T14421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.025701][T14421] ? clear_bhb_loop+0x60/0xb0 [ 821.025728][T14421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.025748][T14421] RIP: 0033:0x7f2edbf8ebe9 [ 821.025769][T14421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.025788][T14421] RSP: 002b:00007f2edcdf3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.025812][T14421] RAX: ffffffffffffffda RBX: 00007f2edc1b5fa0 RCX: 00007f2edbf8ebe9 [ 821.025828][T14421] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 821.025842][T14421] RBP: 00007f2edcdf3090 R08: 0000000000000000 R09: 0000000000000000 [ 821.025856][T14421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.025869][T14421] R13: 00007f2edc1b6038 R14: 00007f2edc1b5fa0 R15: 00007ffc74fa6e28 [ 821.025905][T14421] [ 821.028102][ T5932] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 821.341717][ T5932] usb 2-1: config 0 has no interface number 0 [ 821.360981][ T5932] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 821.379516][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.387605][ T5932] usb 2-1: Product: syz [ 821.408914][ T5932] usb 2-1: Manufacturer: syz [ 821.435314][ T5932] usb 2-1: SerialNumber: syz [ 821.478609][ T5932] usb 2-1: config 0 descriptor?? [ 821.720208][T14426] overlayfs: failed to clone upperpath [ 821.765264][ T5932] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 822.472064][ T5932] usb 2-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 822.487759][ T5932] usb 2-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 822.809464][ T5208] audit_log_start: 9731 callbacks suppressed [ 822.809488][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.833226][ T31] audit: type=1400 audit(1755943507.032:739065): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14428 comm="syz.0.2082" name="newroot" dev="tmpfs" ino=2 [ 822.853722][ T31] audit: type=1400 audit(1755943507.032:739066): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14428 comm="syz.0.2082" name="/" dev="proc" ino=1 [ 822.874724][ T5208] audit: audit_lost=265388 audit_rate_limit=0 audit_backlog_limit=64 [ 822.883729][ T31] audit: type=1400 audit(1755943507.032:739067): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14428 comm="syz.0.2082" name="/" dev="proc" ino=1 [ 822.885584][T14436] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.909704][T14436] audit: audit_lost=265389 audit_rate_limit=0 audit_backlog_limit=64 [ 822.917982][T14436] audit: backlog limit exceeded [ 822.923322][ T31] audit: type=1400 audit(1755943507.032:739068): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14428 comm="syz.0.2082" name="1590" dev="proc" ino=40877 [ 822.925584][ T5208] audit: backlog limit exceeded [ 823.386383][T14438] bridge0: port 2(dummy0) entered disabled state [ 823.393121][T14438] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.402721][T14438] bridge0: entered allmulticast mode [ 823.423875][T14438] dummy0: left allmulticast mode [ 823.431791][T14438] bridge0: port 2(dummy0) entered disabled state [ 823.532427][T14438] bridge_slave_0: left allmulticast mode [ 823.538581][T14438] bridge_slave_0: left promiscuous mode [ 823.550742][T14438] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.819180][T14467] FAULT_INJECTION: forcing a failure. [ 824.819180][T14467] name failslab, interval 1, probability 0, space 0, times 0 [ 824.857174][T14467] CPU: 0 UID: 0 PID: 14467 Comm: syz.0.2092 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 824.857203][T14467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 824.857217][T14467] Call Trace: [ 824.857225][T14467] [ 824.857235][T14467] dump_stack_lvl+0x189/0x250 [ 824.857266][T14467] ? __pfx____ratelimit+0x10/0x10 [ 824.857290][T14467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.857313][T14467] ? __pfx__printk+0x10/0x10 [ 824.857343][T14467] ? __pfx___might_resched+0x10/0x10 [ 824.857363][T14467] ? fs_reclaim_acquire+0x7d/0x100 [ 824.857391][T14467] should_fail_ex+0x414/0x560 [ 824.857420][T14467] should_failslab+0xa8/0x100 [ 824.857447][T14467] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 824.857470][T14467] ? __alloc_skb+0x112/0x2d0 [ 824.857507][T14467] __alloc_skb+0x112/0x2d0 [ 824.857542][T14467] netlink_ack+0x146/0xa50 [ 824.857593][T14467] netlink_rcv_skb+0x28c/0x470 [ 824.857625][T14467] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 824.857653][T14467] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 824.857698][T14467] ? bpf_lsm_capable+0x9/0x20 [ 824.857727][T14467] ? security_capable+0x7e/0x2e0 [ 824.857764][T14467] nfnetlink_rcv+0x26a/0x2520 [ 824.857793][T14467] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 824.857831][T14467] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 824.857856][T14467] ? __dev_queue_xmit+0x27e/0x3a70 [ 824.857880][T14467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.857915][T14467] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 824.857939][T14467] ? __pfx___dev_queue_xmit+0x10/0x10 [ 824.857979][T14467] ? ref_tracker_free+0x63a/0x7d0 [ 824.858001][T14467] ? __copy_skb_header+0xa7/0x550 [ 824.858025][T14467] ? __pfx_ref_tracker_free+0x10/0x10 [ 824.858071][T14467] ? skb_clone+0x246/0x3a0 [ 824.858097][T14467] ? __netlink_deliver_tap+0x807/0x850 [ 824.858127][T14467] ? netlink_deliver_tap+0x2e/0x1b0 [ 824.858161][T14467] ? netlink_deliver_tap+0x2e/0x1b0 [ 824.858190][T14467] ? netlink_deliver_tap+0x2e/0x1b0 [ 824.858227][T14467] netlink_unicast+0x75c/0x8e0 [ 824.858267][T14467] netlink_sendmsg+0x805/0xb30 [ 824.858305][T14467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.858347][T14467] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 824.858368][T14467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.858400][T14467] __sock_sendmsg+0x21c/0x270 [ 824.858427][T14467] ____sys_sendmsg+0x505/0x830 [ 824.858464][T14467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 824.858505][T14467] ? import_iovec+0x74/0xa0 [ 824.858538][T14467] ___sys_sendmsg+0x21f/0x2a0 [ 824.858574][T14467] ? __pfx____sys_sendmsg+0x10/0x10 [ 824.858652][T14467] ? __fget_files+0x2a/0x420 [ 824.858676][T14467] ? __fget_files+0x3a0/0x420 [ 824.858712][T14467] __x64_sys_sendmsg+0x19b/0x260 [ 824.858747][T14467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 824.858790][T14467] ? __pfx_ksys_write+0x10/0x10 [ 824.858806][T14467] ? rcu_is_watching+0x15/0xb0 [ 824.858842][T14467] ? do_syscall_64+0xbe/0x3b0 [ 824.858869][T14467] do_syscall_64+0xfa/0x3b0 [ 824.858892][T14467] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.858916][T14467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.858938][T14467] ? clear_bhb_loop+0x60/0xb0 [ 824.858963][T14467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.858982][T14467] RIP: 0033:0x7f2edbf8ebe9 [ 824.859000][T14467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.859016][T14467] RSP: 002b:00007f2edcdf3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.859036][T14467] RAX: ffffffffffffffda RBX: 00007f2edc1b5fa0 RCX: 00007f2edbf8ebe9 [ 824.859050][T14467] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 824.859062][T14467] RBP: 00007f2edcdf3090 R08: 0000000000000000 R09: 0000000000000000 [ 824.859073][T14467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.859085][T14467] R13: 00007f2edc1b6038 R14: 00007f2edc1b5fa0 R15: 00007ffc74fa6e28 [ 824.859115][T14467] [ 828.567965][ T31] kauditd_printk_skb: 13273 callbacks suppressed [ 828.567985][ T31] audit: type=1400 audit(1755943512.952:744419): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5835 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 828.607900][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 828.621804][ T5835] audit: audit_lost=268031 audit_rate_limit=0 audit_backlog_limit=64 [ 828.630450][T14504] syz_tun: entered allmulticast mode [ 828.638219][ T5835] audit: backlog limit exceeded [ 828.666775][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 828.676683][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 828.684325][ C0] audit: audit_lost=268032 audit_rate_limit=0 audit_backlog_limit=64 [ 828.695890][ C0] audit: backlog limit exceeded [ 828.704424][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 828.714251][ C0] audit: audit_lost=268033 audit_rate_limit=0 audit_backlog_limit=64 [ 828.810729][T14504] dvmrp8: entered allmulticast mode [ 828.871562][T14504] netlink: 'syz.2.2100': attribute type 23 has an invalid length. [ 829.284185][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2104'. [ 829.327356][T14524] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 831.930393][T14545] ip6gre1: entered allmulticast mode [ 833.639859][ T5841] audit_log_start: 9307 callbacks suppressed [ 833.639880][ T5841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.657069][T14559] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.657986][ T31] audit: type=1400 audit(1755943518.021:749119): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5841 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 833.667280][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.695510][ C0] audit: audit_lost=269570 audit_rate_limit=0 audit_backlog_limit=64 [ 833.706903][ C0] audit: backlog limit exceeded [ 833.713679][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.723865][ C0] audit: audit_lost=269571 audit_rate_limit=0 audit_backlog_limit=64 [ 833.733547][ C0] audit: backlog limit exceeded [ 833.739959][T14559] audit: audit_lost=269572 audit_rate_limit=0 audit_backlog_limit=64 [ 834.775936][T14568] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2116'. [ 834.804871][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2116'. [ 834.816857][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'. [ 835.290825][T14573] lo speed is unknown, defaulting to 1000 [ 835.299386][T14573] lo speed is unknown, defaulting to 1000 [ 835.317977][T14573] lo speed is unknown, defaulting to 1000 [ 835.509143][T14573] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 835.781729][T14573] lo speed is unknown, defaulting to 1000 [ 835.808126][T14573] lo speed is unknown, defaulting to 1000 [ 835.861928][T14573] lo speed is unknown, defaulting to 1000 [ 835.890871][T14573] lo speed is unknown, defaulting to 1000 [ 835.908120][T14573] lo speed is unknown, defaulting to 1000 [ 835.918200][T14573] lo speed is unknown, defaulting to 1000 [ 837.126224][T14585] trusted_key: encrypted_key: insufficient parameters specified [ 837.139157][T14586] xt_TPROXY: Can be used only with -p tcp or -p udp [ 837.150985][T14585] trusted_key: encrypted_key: insufficient parameters specified [ 837.160307][T14586] vlan4: entered promiscuous mode [ 837.165942][T14586] vlan4: entered allmulticast mode [ 837.171970][T14586] hsr_slave_1: entered allmulticast mode [ 837.891151][ T5929] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 837.991694][T14604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 838.071319][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 838.089481][ T5929] usb 6-1: unable to get BOS descriptor or descriptor too short [ 838.107396][ T5929] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 838.123541][ T5929] usb 6-1: config 7 has no interface number 0 [ 838.131276][ T5929] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 838.142354][ T5929] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 838.153838][ T5929] usb 6-1: config 7 interface 187 has no altsetting 0 [ 838.169235][ T5929] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 838.194150][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.204889][ T5929] usb 6-1: Product: syz [ 838.210274][ T5929] usb 6-1: Manufacturer: syz [ 838.216728][ T5929] usb 6-1: SerialNumber: syz [ 838.233031][T14589] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 838.256078][T14589] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 838.469836][ T5929] usb 6-1: Limiting number of CPorts to U8_MAX [ 838.485498][ T5929] usb 6-1: Unknown endpoint type found, address 0x07 [ 838.492656][ T5929] usb 6-1: Unused bulk OUT endpoint found: 0x03 [ 838.499185][ T5929] usb 6-1: Not enough endpoints found in device, aborting! [ 838.641517][ T31] kauditd_printk_skb: 7069 callbacks suppressed [ 838.641537][ T31] audit: type=1400 audit(1755943523.021:753705): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8306 comm="udevd" name="/" dev="tmpfs" ino=1 [ 838.665081][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.674529][ T8306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.674553][ T8306] audit: audit_lost=270401 audit_rate_limit=0 audit_backlog_limit=64 [ 838.674571][ T8306] audit: backlog limit exceeded [ 838.674596][ T8306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.674611][ T8306] audit: audit_lost=270402 audit_rate_limit=0 audit_backlog_limit=64 [ 838.674629][ T8306] audit: backlog limit exceeded [ 838.674795][ T8306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.707674][T14589] macsec1: entered promiscuous mode [ 838.724520][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.826300][T14589] macsec1: entered allmulticast mode [ 838.944808][T14613] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2121'. [ 838.986643][T14613] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2121'. [ 838.990687][T14617] xt_TCPMSS: Only works on TCP SYN packets [ 839.061626][T14621] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2130'. [ 839.072491][T14620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.105396][T14623] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2128'. [ 839.115264][T14620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.124219][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 839.172730][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'. [ 841.154185][ T5929] usb 6-1: USB disconnect, device number 14 [ 842.895476][T14658] netlink: 'syz.5.2135': attribute type 1 has an invalid length. [ 842.903403][T14658] netlink: 'syz.5.2135': attribute type 1 has an invalid length. [ 843.651352][ T31] kauditd_printk_skb: 8809 callbacks suppressed [ 843.651372][ T31] audit: type=1400 audit(1755943528.030:759056): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5208 comm="udevd" path="/sys/devices/virtual/block/loop1/uevent" dev="sysfs" ino=15014 [ 843.693507][ T8306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 843.699669][T14648] audit: audit_backlog=65 > audit_backlog_limit=64 [ 843.700095][ T8306] audit: audit_lost=271557 audit_rate_limit=0 audit_backlog_limit=64 [ 843.708432][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 843.717212][T14655] audit: audit_backlog=65 > audit_backlog_limit=64 [ 843.729041][T14661] audit: audit_backlog=66 > audit_backlog_limit=64 [ 843.742763][T14648] audit: audit_lost=271558 audit_rate_limit=0 audit_backlog_limit=64 [ 843.746504][T14658] tipc: Started in network mode [ 843.756828][T14658] tipc: Node identity , cluster identity 4711 [ 843.763423][T14658] tipc: Failed to obtain node identity [ 843.768988][T14658] tipc: Enabling of bearer rejected, failed to enable media [ 843.778011][T14656] audit: audit_backlog=66 > audit_backlog_limit=64 [ 843.787529][T14652] audit: audit_backlog=66 > audit_backlog_limit=64 [ 844.488922][T14671] 9pnet_fd: Insufficient options for proto=fd [ 844.516321][T14667] __nla_validate_parse: 1 callbacks suppressed [ 844.516340][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 844.631374][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 844.643780][T14670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.669850][T14670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.822178][ T5929] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 844.947181][T14675] xt_socket: unknown flags 0xc [ 845.886354][T14689] CIFS: Unable to determine destination address [ 846.615617][T14696] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2143'. [ 846.933182][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2143'. [ 846.942763][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2143'. [ 847.959393][T14710] netlink: 'syz.1.2145': attribute type 1 has an invalid length. [ 848.298395][T14717] netlink: 'syz.2.2146': attribute type 1 has an invalid length. [ 848.988098][ T31] kauditd_printk_skb: 6571 callbacks suppressed [ 848.988123][ T31] audit: type=1400 audit(1755943533.289:763255): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14711 comm="syz.4.2147" name="newroot" dev="tmpfs" ino=2 [ 849.017942][ T31] audit: type=1400 audit(1755943533.289:763256): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14711 comm="syz.4.2147" name="dev" dev="tmpfs" ino=3 [ 849.049489][ T31] audit: type=1400 audit(1755943533.319:763257): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14713 comm="modprobe" name="/" dev="sysfs" ino=1 [ 849.066153][T14717] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2146'. [ 849.074734][ T31] audit: type=1400 audit(1755943533.319:763258): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14713 comm="modprobe" name="fs" dev="sysfs" ino=2 [ 849.099095][ T31] audit: type=1400 audit(1755943533.319:763259): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14713 comm="modprobe" name="/" dev="sda1" ino=2 [ 849.099149][ T31] audit: type=1400 audit(1755943533.319:763260): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14713 comm="modprobe" name="/" dev="sda1" ino=2 [ 849.099193][ T31] audit: type=1400 audit(1755943533.319:763261): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14713 comm="modprobe" name="/" dev="proc" ino=1 [ 849.099238][ T31] audit: type=1400 audit(1755943533.319:763262): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=14713 comm="modprobe" name="filesystems" dev="proc" ino=4026532112 [ 849.099286][ T31] audit: type=1400 audit(1755943533.319:763263): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=14713 comm="modprobe" path="/proc/filesystems" dev="proc" ino=4026532112 [ 849.099332][ T31] audit: type=1400 audit(1755943533.319:763264): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=14713 comm="modprobe" path="/proc/filesystems" dev="proc" ino=4026532112 [ 849.960674][T14745] netlink: 'syz.4.2150': attribute type 4 has an invalid length. [ 850.826793][T14757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2154'. [ 850.937217][T14757] loop6: detected capacity change from 0 to 7 [ 850.951678][T14757] Dev loop6: unable to read RDB block 7 [ 850.967967][T14757] loop6: unable to read partition table [ 850.993902][T14757] loop6: partition table beyond EOD, truncated [ 851.015924][T14757] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 851.905643][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 852.035265][T14771] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2158'. [ 853.166585][T14778] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2157'. [ 853.469096][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2158'. [ 853.493014][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2158'. [ 854.000183][ T31] kauditd_printk_skb: 9347 callbacks suppressed [ 854.000205][ T31] audit: type=1400 audit(1755943538.369:769903): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5834 comm="syz-executor" path="/420/binderfs" dev="tmpfs" ino=2398 [ 854.029647][ T31] audit: type=1400 audit(1755943538.369:769904): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 854.030281][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 854.050621][ T31] audit: type=1400 audit(1755943538.369:769905): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 854.050675][ T31] audit: type=1400 audit(1755943538.369:769906): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5834 comm="syz-executor" name="420" dev="tmpfs" ino=2394 [ 854.107141][ T5834] audit: audit_lost=273254 audit_rate_limit=0 audit_backlog_limit=64 [ 854.115871][ T5834] audit: backlog limit exceeded [ 854.115905][T14798] audit: audit_backlog=65 > audit_backlog_limit=64 [ 854.120934][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 854.138501][T14798] audit: audit_lost=273255 audit_rate_limit=0 audit_backlog_limit=64 [ 854.546402][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2165'. [ 854.598532][T14812] netlink: 'syz.5.2165': attribute type 1 has an invalid length. [ 854.956692][T14810] bond1: (slave bridge3): making interface the new active one [ 855.025098][T14810] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 856.312748][ T5837] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 856.534363][ T5837] usb 6-1: Using ep0 maxpacket: 16 [ 856.573067][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.587648][T14866] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2175'. [ 856.624010][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.697209][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'. [ 856.713740][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 856.752766][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'. [ 856.767132][ T5837] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 856.790125][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.819721][ T5837] usb 6-1: config 0 descriptor?? [ 858.090643][ T5837] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max [ 858.108268][ T5837] microsoft 0003:045E:07DA.0013: item fetching failed at offset 30/34 [ 858.120799][ T5837] microsoft 0003:045E:07DA.0013: parse failed [ 858.129423][ T5837] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22 [ 858.144934][ T5837] usb 6-1: USB disconnect, device number 16 [ 858.473622][T14890] IPVS: set_ctl: invalid protocol: 50 172.20.20.12:21 [ 859.050384][ T5208] audit_log_start: 16599 callbacks suppressed [ 859.050409][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 859.128156][ T6013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 859.147547][ T31] audit: type=1400 audit(1755943799.011:775954): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8306 comm="udevd" name="/" dev="sda1" ino=2 [ 859.459472][ T43] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 859.479413][T14887] audit: audit_backlog=65 > audit_backlog_limit=64 [ 859.531203][ T5208] audit: audit_lost=276770 audit_rate_limit=0 audit_backlog_limit=64 [ 859.662505][ T31] audit: type=1400 audit(1755943799.041:775965): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8306 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 859.719878][ T6013] audit: audit_lost=276771 audit_rate_limit=0 audit_backlog_limit=64 [ 859.879411][ T5208] audit: backlog limit exceeded [ 859.921760][T14887] audit: audit_lost=276772 audit_rate_limit=0 audit_backlog_limit=64 [ 860.040661][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 864.181887][ T31] kauditd_printk_skb: 217 callbacks suppressed [ 864.181911][ T31] audit: type=1400 audit(1755943804.031:776140): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12932 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 864.860477][ T31] audit: type=1400 audit(1755943804.031:776141): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12932 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 865.319655][ T31] audit: type=1400 audit(1755943804.031:776142): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12932 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 865.770330][ T31] audit: type=1400 audit(1755943804.031:776143): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=12932 comm="syz-executor" name="71" dev="tmpfs" ino=391 [ 866.139175][ T31] audit: type=1400 audit(1755943804.031:776144): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=12932 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 866.292354][ T31] audit: type=1400 audit(1755943804.031:776145): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12932 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 866.306369][ T43] usb 3-1: device descriptor read/all, error -71 [ 866.337043][ T5841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 866.359778][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 866.366304][T14897] audit: audit_backlog=65 > audit_backlog_limit=64 [ 866.375405][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 866.483810][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2184'. [ 866.632341][T14903] overlayfs: missing 'lowerdir' [ 866.641684][T14906] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2187'. [ 866.701140][T14906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2187'. [ 866.750105][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2187'. [ 866.826808][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 868.842987][T12065] Bluetooth: hci1: command 0x1003 tx timeout [ 868.951268][ T5839] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 869.397134][ T31] kauditd_printk_skb: 3575 callbacks suppressed [ 869.397207][ T31] audit: type=1400 audit(1755943809.731:778738): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5208 comm="udevd" name="/" dev="sda1" ino=2 [ 869.877063][ T31] audit: type=1400 audit(1755943809.731:778739): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5208 comm="udevd" name="etc" dev="sda1" ino=116 [ 870.094093][ T8306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 870.119487][ T5208] audit: audit_backlog=66 > audit_backlog_limit=64 [ 870.199117][ T8306] audit: audit_lost=277116 audit_rate_limit=0 audit_backlog_limit=64 [ 870.228132][ T5208] audit: audit_lost=277117 audit_rate_limit=0 audit_backlog_limit=64 [ 870.260798][ T31] audit: type=1400 audit(1755943809.731:778740): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5208 comm="udevd" name="udev" dev="sda1" ino=259 [ 870.345510][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 870.352155][ T5846] audit: audit_lost=277118 audit_rate_limit=0 audit_backlog_limit=64 [ 870.360480][ T5846] audit: backlog limit exceeded [ 872.323543][T14943] netlink: 580 bytes leftover after parsing attributes in process `syz.1.2196'. [ 872.476292][T14951] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 872.512775][T14951] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 873.341669][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2202'. [ 874.188963][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2201'. [ 874.777957][ T31] kauditd_printk_skb: 7467 callbacks suppressed [ 874.777978][ T31] audit: type=1400 audit(1755943815.161:781892): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14969 comm="syz.5.2203" name="newroot" dev="tmpfs" ino=2 [ 874.814940][ T31] audit: type=1400 audit(1755943815.161:781893): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14969 comm="syz.5.2203" name="/" dev="devtmpfs" ino=1 [ 874.840561][ T31] audit: type=1400 audit(1755943815.161:781894): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=14969 comm="syz.5.2203" name="nvram" dev="devtmpfs" ino=623 [ 874.868808][ T8306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 874.878219][ T5844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 874.892506][ T6013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 874.906891][ T8306] audit: audit_lost=278557 audit_rate_limit=0 audit_backlog_limit=64 [ 874.927690][T14971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 874.935896][T14971] audit: audit_lost=278558 audit_rate_limit=0 audit_backlog_limit=64 [ 874.945583][T14971] audit: backlog limit exceeded [ 875.063606][ T5929] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 875.203847][ T5929] usb 6-1: device descriptor read/64, error -71 [ 875.453491][ T5929] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 875.654041][ T5929] usb 6-1: device descriptor read/64, error -71 [ 875.814769][ T5929] usb usb6-port1: attempt power cycle [ 876.177207][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.443046][ T5929] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 876.509073][ T5929] usb 6-1: device descriptor read/8, error -71 [ 876.908076][T14997] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 876.955298][T14997] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 877.232654][ T5929] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 878.551873][T15003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.684239][T15003] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 878.709132][ T5929] usb 6-1: device descriptor read/8, error -71 [ 878.823232][ T5929] usb usb6-port1: unable to enumerate USB device [ 880.043807][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2220'. [ 880.056007][T15033] vlan0: entered promiscuous mode [ 880.246922][T15037] audit_log_start: 9766 callbacks suppressed [ 880.246942][T15037] audit: audit_backlog=66 > audit_backlog_limit=64 [ 880.247030][ T8306] audit: audit_backlog=66 > audit_backlog_limit=64 [ 880.275053][T15034] audit: audit_backlog=66 > audit_backlog_limit=64 [ 880.281671][T15034] audit: audit_lost=279705 audit_rate_limit=0 audit_backlog_limit=64 [ 880.290667][ T5208] audit: audit_backlog=66 > audit_backlog_limit=64 [ 880.307937][ T5208] audit: audit_lost=279706 audit_rate_limit=0 audit_backlog_limit=64 [ 880.317036][ T5208] audit: backlog limit exceeded [ 880.317476][T15039] audit: audit_backlog=66 > audit_backlog_limit=64 [ 880.322006][ T5208] audit: audit_backlog=66 > audit_backlog_limit=64 [ 880.328650][T15034] audit: backlog limit exceeded [ 880.361623][T15041] IPv6: NLM_F_REPLACE set, but no existing node found! [ 880.467254][T15035] Falling back ldisc for ttyS3. [ 880.792768][ T980] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 880.899523][T15052] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 880.921234][T15052] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 880.946599][T15051] trusted_key: encrypted_key: insufficient parameters specified [ 880.992784][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 881.007254][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 881.018959][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 881.071154][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 881.655940][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 881.707929][ T980] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 881.746078][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.760453][ T980] usb 3-1: Product: syz [ 881.771061][ T980] usb 3-1: Manufacturer: syz [ 881.779190][ T980] usb 3-1: SerialNumber: syz [ 881.800295][ T980] usb 3-1: config 0 descriptor?? [ 881.824007][ T980] cypress_m8 3-1:0.0: HID->COM RS232 Adapter converter detected [ 881.859284][ T980] cyphidcom ttyUSB0: required endpoint is missing [ 882.045236][ T980] usb 3-1: USB disconnect, device number 73 [ 882.616105][ T980] cypress_m8 3-1:0.0: device disconnected [ 882.875464][T15070] netlink: 'syz.4.2232': attribute type 12 has an invalid length. [ 882.937474][T15070] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2232'. [ 883.456781][T15088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2234'. [ 884.286127][T15099] overlayfs: missing 'lowerdir' [ 884.390138][T15088] team0: Port device team_slave_0 removed [ 884.472096][T15101] 8021q: VLANs not supported on caif0 [ 885.786668][ T5835] audit_log_start: 10073 callbacks suppressed [ 885.786687][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 885.801612][ T31] audit: type=1400 audit(1755943825.311:795283): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15106 comm="syz.2.2243" saddr=10.128.0.169 src=30008 daddr=10.128.1.78 dest=59450 netif=eth0 [ 885.833892][ T5835] audit: audit_lost=280713 audit_rate_limit=0 audit_backlog_limit=64 [ 885.839792][ T31] audit: type=1400 audit(1755943825.651:795284): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15106 comm="syz.2.2243" name="newroot" dev="tmpfs" ino=2 [ 885.853647][ T5841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 885.874307][ T31] audit: type=1400 audit(1755943825.701:795285): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15106 comm="syz.2.2243" name="/" dev="devtmpfs" ino=1 [ 885.876430][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 885.900177][ C0] audit: audit_lost=280714 audit_rate_limit=0 audit_backlog_limit=64 [ 885.901489][ T31] audit: type=1400 audit(1755943826.141:795286): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5835 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 885.908329][ C0] audit: backlog limit exceeded [ 886.826842][ T5932] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 886.873885][ T5932] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 886.910677][ T5932] usb 2-1: USB disconnect, device number 97 [ 888.518684][T15145] overlayfs: missing 'lowerdir' [ 889.292852][ T5932] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 889.560302][ T5932] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 889.602804][ T5932] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 889.611370][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 889.623845][ T5932] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 889.642705][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 890.112547][T15168] kthread_run failed with err -4 [ 890.173698][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 890.189487][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 890.348548][ T5932] usb 2-1: language id specifier not provided by device, defaulting to English [ 890.439006][ T5932] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 890.468823][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.503579][ T5932] usb 2-1: Manufacturer: ␉ [ 890.515976][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 890.555608][ T5932] usb 2-1: config 0 descriptor?? [ 890.577717][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 890.675431][ T5932] hub 2-1:0.0: bad descriptor, ignoring hub [ 890.713667][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 890.719968][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 890.734537][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 890.745057][ T5932] hub 2-1:0.0: probe with driver hub failed with error -5 [ 890.761883][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 890.792750][ T8306] audit_log_start: 13718 callbacks suppressed [ 890.792773][ T8306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 890.819947][ T5208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 890.828303][ T31] audit: type=1400 audit(1755943831.081:801310): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5838 comm="udevd" path="/sys/devices/platform/dummy_hcd.1/usb2/2-1/idVendor" dev="sysfs" ino=182266 [ 890.865886][T15184] audit: audit_backlog=65 > audit_backlog_limit=64 [ 890.873845][ T5932] input: ␉ as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 890.899327][ T5208] audit: audit_lost=283280 audit_rate_limit=0 audit_backlog_limit=64 [ 890.925074][T15184] audit: audit_lost=283281 audit_rate_limit=0 audit_backlog_limit=64 [ 890.951207][ T8306] audit: audit_lost=283282 audit_rate_limit=0 audit_backlog_limit=64 [ 890.979388][ T5208] audit: backlog limit exceeded [ 891.010593][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 891.025344][T15183] audit: audit_backlog=65 > audit_backlog_limit=64 [ 891.084420][ T9] libceph: connect (1)[c::]:6789 error -101 [ 891.103467][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 891.127240][ T5932] usb 2-1: USB disconnect, device number 98 [ 996.152573][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 996.159608][ C0] rcu: 1-...!: (1 GPs behind) idle=3144/1/0x4000000000000000 softirq=78125/78136 fqs=0 [ 996.171310][ C0] rcu: (detected by 0, t=10506 jiffies, g=68889, q=141 ncpus=2) [ 996.179106][ C0] Sending NMI from CPU 0 to CPUs 1: [ 996.179148][ C1] NMI backtrace for cpu 1 [ 996.179169][ C1] CPU: 1 UID: 0 PID: 15186 Comm: syz.4.2263 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 996.179192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 996.179205][ C1] RIP: 0010:debug_deactivate+0x2e/0x200 [ 996.179235][ C1] Code: 56 53 48 89 fb e8 12 7b 11 00 48 89 df 48 c7 c6 00 fb 8c 8b e8 c3 da 10 03 0f 1f 44 00 00 e8 f9 7a 11 00 65 8b 1d 66 e5 ed 10 07 00 00 00 89 de e8 26 7f 11 00 83 fb 07 77 6d e8 dc 7a 11 00 [ 996.179253][ C1] RSP: 0018:ffffc90000a08d18 EFLAGS: 00000006 [ 996.179272][ C1] RAX: ffffffff81aeaac7 RBX: 0000000000000001 RCX: ffff88807a1eda00 [ 996.179286][ C1] RDX: 0000000000010000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 996.179299][ C1] RBP: ffffc90000a08e90 R08: ffffffff99d1e79b R09: 1ffffffff33a3cf3 [ 996.179314][ C1] R10: dffffc0000000000 R11: fffffbfff33a3cf4 R12: ffff888076f1e340 [ 996.179329][ C1] R13: dffffc0000000000 R14: 18678ea4f0000000 R15: ffff8880b8727bc0 [ 996.179344][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 996.179364][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 996.179377][ C1] CR2: fffffffffffffffd CR3: 0000000068994000 CR4: 00000000003526f0 [ 996.179394][ C1] Call Trace: [ 996.179405][ C1] [ 996.179418][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 996.179458][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 996.179477][ C1] ? read_tsc+0x9/0x20 [ 996.179510][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 996.179548][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 996.179571][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 996.179592][ C1] [ 996.179600][ C1] [ 996.179607][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 996.179628][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x37/0x90 [ 996.179657][ C1] Code: 08 90 9c 92 65 8b 15 78 65 dc 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 74 4e 8b 91 18 16 00 00 <83> fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c 16 00 00 49 c1 e1 [ 996.179673][ C1] RSP: 0018:ffffc9000ecbf348 EFLAGS: 00000246 [ 996.179689][ C1] RAX: ffffffff822b275b RBX: 1ffffd40002de6a9 RCX: ffff88807a1eda00 [ 996.179704][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 996.179716][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff822b406a [ 996.179728][ C1] R10: dffffc0000000000 R11: fffff940002de6a9 R12: 0000000000000000 [ 996.179742][ C1] R13: ffffea00016f3540 R14: 0000000000000001 R15: ffffea00016f3558 [ 996.179760][ C1] ? pfn_valid+0xba/0x490 [ 996.179779][ C1] ? page_table_check_clear+0x17b/0x700 [ 996.179804][ C1] page_table_check_clear+0x17b/0x700 [ 996.179830][ C1] ? vm_normal_page+0xb7/0x230 [ 996.179855][ C1] unmap_page_range+0x3249/0x41c0 [ 996.179908][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 996.179937][ C1] ? unmap_vmas+0x144/0x580 [ 996.179962][ C1] unmap_vmas+0x399/0x580 [ 996.179990][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 996.180029][ C1] exit_mmap+0x248/0xb50 [ 996.180048][ C1] ? uprobe_clear_state+0x20f/0x290 [ 996.180070][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 996.180087][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 996.180118][ C1] ? __pfx_exit_aio+0x10/0x10 [ 996.180142][ C1] ? uprobe_clear_state+0x274/0x290 [ 996.180160][ C1] ? mm_update_next_owner+0xa7/0x870 [ 996.180189][ C1] __mmput+0x118/0x410 [ 996.180211][ C1] exit_mm+0x1da/0x2c0 [ 996.180236][ C1] ? __pfx_exit_mm+0x10/0x10 [ 996.180262][ C1] ? rcu_is_watching+0x15/0xb0 [ 996.180285][ C1] do_exit+0x648/0x22e0 [ 996.180313][ C1] ? do_raw_spin_lock+0x121/0x290 [ 996.180340][ C1] ? __pfx_do_exit+0x10/0x10 [ 996.180373][ C1] do_group_exit+0x21c/0x2d0 [ 996.180399][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 996.180420][ C1] get_signal+0x125e/0x1310 [ 996.180479][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 996.180512][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 996.180550][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 996.180570][ C1] exit_to_user_mode_loop+0x75/0x110 [ 996.180588][ C1] do_syscall_64+0x2bd/0x3b0 [ 996.180608][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 996.180627][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.180645][ C1] ? clear_bhb_loop+0x60/0xb0 [ 996.180667][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.180685][ C1] RIP: 0033:0x7fa7ec98ebe9 [ 996.180700][ C1] Code: Unable to access opcode bytes at 0x7fa7ec98ebbf. [ 996.180712][ C1] RSP: 002b:00007fa7ed7d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 996.180730][ C1] RAX: 0000000000000001 RBX: 00007fa7ecbb6098 RCX: 00007fa7ec98ebe9 [ 996.180743][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa7ecbb609c [ 996.180756][ C1] RBP: 00007fa7ecbb6090 R08: 7fffffffffffffff R09: 0000000000000000 [ 996.180770][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.180781][ C1] R13: 00007fa7ecbb6128 R14: 00007ffcdb742a60 R15: 00007ffcdb742b48 [ 996.180806][ C1] [ 996.181136][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g68889 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 996.678350][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 996.688504][ C0] rcu: RCU grace-period kthread stack dump: [ 996.694417][ C0] task:rcu_preempt state:R running task stack:27232 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 996.707973][ C0] Call Trace: [ 996.711286][ C0] [ 996.714345][ C0] __schedule+0x16aa/0x4c90 [ 996.719076][ C0] ? schedule+0x165/0x360 [ 996.723493][ C0] ? __pfx___schedule+0x10/0x10 [ 996.728691][ C0] ? schedule+0x91/0x360 [ 996.732984][ C0] schedule+0x165/0x360 [ 996.737179][ C0] schedule_timeout+0x12b/0x270 [ 996.742088][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 996.747507][ C0] ? __pfx_process_timeout+0x10/0x10 [ 996.752877][ C0] ? prepare_to_swait_event+0x341/0x380 [ 996.758525][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 996.763537][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 996.768564][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 996.773822][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 996.779872][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 996.785133][ C0] ? finish_swait+0xcd/0x1f0 [ 996.789790][ C0] rcu_gp_kthread+0x99/0x390 [ 996.794432][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 996.799702][ C0] ? __kthread_parkme+0x7b/0x200 [ 996.804777][ C0] ? __kthread_parkme+0x1a1/0x200 [ 996.809887][ C0] kthread+0x70e/0x8a0 [ 996.814019][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 996.819275][ C0] ? __pfx_kthread+0x10/0x10 [ 996.823964][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 996.829216][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 996.834477][ C0] ? __pfx_kthread+0x10/0x10 [ 996.839216][ C0] ret_from_fork+0x3fc/0x770 [ 996.844062][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 996.849249][ C0] ? __switch_to_asm+0x39/0x70 [ 996.854156][ C0] ? __switch_to_asm+0x33/0x70 [ 996.859070][ C0] ? __pfx_kthread+0x10/0x10 [ 996.863753][ C0] ret_from_fork_asm+0x1a/0x30 [ 996.868607][ C0] [ 996.871688][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 996.878677][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 996.888831][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 996.899725][ C0] Workqueue: events_unbound toggle_allocation_gate [ 996.906298][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 996.913063][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 80 6e 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 2b 6a 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 10 6a 0b [ 996.932922][ C0] RSP: 0018:ffffc900001176a0 EFLAGS: 00000293 [ 996.939739][ C0] RAX: ffffffff81b4bbb0 RBX: ffff8880b863b040 RCX: ffff88801b6fda00 [ 996.948373][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 996.956509][ C0] RBP: ffffc90000117800 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 996.964538][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 1ffff110170e7f2d [ 996.972589][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968 [ 996.980613][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 996.989597][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 996.996256][ C0] CR2: fffffffffffffffd CR3: 000000000df38000 CR4: 00000000003526f0 [ 997.004758][ C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 997.012784][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 997.020937][ C0] Call Trace: [ 997.025220][ C0] [ 997.028259][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 997.034920][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 997.040630][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 997.046771][ C0] ? __pfx___text_poke+0x10/0x10 [ 997.051779][ C0] ? rcu_is_watching+0x15/0xb0 [ 997.056609][ C0] ? trace_contention_end+0x39/0x120 [ 997.062120][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 997.067240][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 997.072677][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 997.078744][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 997.083872][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 997.090185][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 997.096502][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 997.102558][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 997.108638][ C0] static_key_enable+0x1a/0x20 [ 997.113481][ C0] toggle_allocation_gate+0xad/0x240 [ 997.118822][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 997.124775][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 997.130591][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 997.136794][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 997.142555][ C0] process_scheduled_works+0xade/0x17b0 [ 997.148377][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 997.154606][ C0] worker_thread+0x8a0/0xda0 [ 997.159280][ C0] kthread+0x70e/0x8a0 [ 997.163405][ C0] ? __pfx_worker_thread+0x10/0x10 [ 997.168593][ C0] ? __pfx_kthread+0x10/0x10 [ 997.173466][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 997.178905][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 997.184185][ C0] ? __pfx_kthread+0x10/0x10 [ 997.188848][ C0] ret_from_fork+0x3fc/0x770 [ 997.193489][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 997.198648][ C0] ? __switch_to_asm+0x39/0x70 [ 997.203550][ C0] ? __switch_to_asm+0x33/0x70 [ 997.209695][ C0] ? __pfx_kthread+0x10/0x10 [ 997.214458][ C0] ret_from_fork_asm+0x1a/0x30 [ 997.219318][ C0]