last executing test programs: 17.25620588s ago: executing program 1 (id=6215): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) lseek(r0, 0x101, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001ff020000000000000000000000000001000107144e230005000000003a000000eb2128175268a9dc901d30d7cdf7fcf93be51887225ee81de7ea1ea879ddb03364dde7860858942304d868582de7f0ae310117ff3a89d93cd97752ac33", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 13.747250753s ago: executing program 4 (id=6220): ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@echo=0xb) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a010100000000000000000500e3000900010073797a30000000000900030073797a300000000030000000060a0104000000002a3fa1000000000500000008000b40000005000900010073797a300000000005000740ae000000140000001100010000000000000000000000000a"], 0xa4}}, 0x0) 13.456875983s ago: executing program 4 (id=6221): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$input_event(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) dup(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newqdisc={0x470, 0x24, 0xe0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd}, {0xfff1, 0xe}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x444, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x80, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81, 0xfffffffc}}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x9, 0x6, 0x3, 0x3, 0x3, 0x0, 0x4, 0xfffffffb, 0x9, 0x1, 0x3, 0x8e1, 0x5, 0xfe, 0x7, 0x7, 0x800, 0xe3ce, 0x0, 0x5, 0x180, 0x4, 0x9, 0x1, 0xfffffec9, 0x0, 0x4, 0x4, 0x1, 0x400, 0xf, 0x1, 0x5, 0x1ae0, 0x9, 0xd, 0x3, 0xf133cc9, 0x8, 0x2, 0x5, 0x6a, 0xf, 0x2, 0x3, 0x1ff, 0x7fff, 0x401, 0xb7, 0xa23, 0x1, 0x8001, 0x2, 0x8, 0x1, 0x557, 0x92b, 0x4, 0xff, 0xffffffff, 0x9, 0x3, 0x2, 0x677, 0x2, 0x7, 0xc41e, 0x0, 0x7fff, 0x1f9, 0x5, 0x8599, 0x400, 0x7, 0x5, 0xfffffff9, 0x34, 0x0, 0xe, 0xaf5, 0x6c3b, 0x2, 0xffffffff, 0xc8b, 0x2, 0x0, 0x5, 0x8, 0xfffffff2, 0xc, 0x10001, 0x80, 0x9, 0x6, 0x8, 0x80, 0x4, 0x6, 0x200000, 0x3a000, 0x8, 0x5, 0x4, 0x7, 0xfff, 0x7, 0x6, 0x1, 0x2, 0xae, 0xc056, 0x0, 0x9, 0x4, 0xe, 0x5, 0x4, 0x9, 0x9, 0x0, 0xdb9, 0x0, 0x0, 0x4, 0x7, 0x7f, 0x0, 0x2, 0x6, 0xffff, 0x7, 0xaf, 0x9, 0x5, 0xfb9e, 0xde1, 0x3, 0x40, 0xa, 0x1, 0x3, 0x7, 0x1, 0x3ff, 0x6, 0x7, 0xe2, 0x2, 0x80000001, 0x100, 0x3, 0xfffffffd, 0x5, 0xf, 0x9292, 0x2, 0x7, 0x4, 0x9, 0x61e8, 0x7, 0x9, 0x8, 0x0, 0x9, 0x11f8, 0x7, 0x401, 0x2, 0x8, 0x6, 0x9, 0xdd6, 0xffffc900, 0x95a, 0x800000, 0x7097, 0x8001, 0x28cd, 0xcd63, 0x5, 0xdf, 0x8000, 0xc, 0x105f, 0x0, 0x10000000, 0x80, 0xd, 0x1000, 0xa36f, 0x6, 0x0, 0x1000, 0x4, 0x748, 0x7, 0x0, 0xfc000000, 0x2, 0x89c, 0x8, 0x151, 0x9, 0xe, 0x9, 0x3, 0x9, 0xfffffffe, 0x23b2, 0x3, 0xff, 0x4, 0x10000, 0x1, 0xfffffffa, 0x7, 0x3, 0x852, 0x40, 0x0, 0x79, 0x9, 0x6, 0x2, 0x7, 0x6, 0x3, 0x0, 0x2, 0x3, 0xd0, 0x1ff, 0x200, 0x2, 0x0, 0x2, 0x6, 0x45, 0x0, 0x7, 0x0, 0x9, 0x2, 0xcc, 0xffff8000, 0x2, 0x8, 0x81, 0x5, 0x3, 0x1, 0xc46, 0x80000001, 0xc5]}]}}]}, 0x470}}, 0x4000080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="410309fc1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9}, {0x9, 0x3d9b}]}, 0x18, 0x1) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd07e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) 12.743465512s ago: executing program 1 (id=6223): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={r2, 0x1}, 0x8) 12.117628812s ago: executing program 1 (id=6229): pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3}}, 0xe8) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x30, 0x0, 0x101, 0x80000000, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]]}, 0x30}, 0x1, 0x0, 0x0, 0x20090}, 0x800) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x2404c090}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x184411, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) close(r3) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0xb, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@netfilter={0x0, 0x0, 0x5}}, 0x20) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000", @ANYRES16=r6, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) getsockname$l2tp6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000480)=0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) 10.010865326s ago: executing program 2 (id=6231): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$input_event(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) dup(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newqdisc={0x470, 0x24, 0xe0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd}, {0xfff1, 0xe}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x444, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x80, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81, 0xfffffffc}}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x9, 0x6, 0x3, 0x3, 0x3, 0x0, 0x4, 0xfffffffb, 0x9, 0x1, 0x3, 0x8e1, 0x5, 0xfe, 0x7, 0x7, 0x800, 0xe3ce, 0x0, 0x5, 0x180, 0x4, 0x9, 0x1, 0xfffffec9, 0x0, 0x4, 0x4, 0x1, 0x400, 0xf, 0x1, 0x5, 0x1ae0, 0x9, 0xd, 0x3, 0xf133cc9, 0x8, 0x2, 0x5, 0x6a, 0xf, 0x2, 0x3, 0x1ff, 0x7fff, 0x401, 0xb7, 0xa23, 0x1, 0x8001, 0x2, 0x8, 0x1, 0x557, 0x92b, 0x4, 0xff, 0xffffffff, 0x9, 0x3, 0x2, 0x677, 0x2, 0x7, 0xc41e, 0x0, 0x7fff, 0x1f9, 0x5, 0x8599, 0x400, 0x7, 0x5, 0xfffffff9, 0x34, 0x0, 0xe, 0xaf5, 0x6c3b, 0x2, 0xffffffff, 0xc8b, 0x2, 0x0, 0x5, 0x8, 0xfffffff2, 0xc, 0x10001, 0x80, 0x9, 0x6, 0x8, 0x80, 0x4, 0x6, 0x200000, 0x3a000, 0x8, 0x5, 0x4, 0x7, 0xfff, 0x7, 0x6, 0x1, 0x2, 0xae, 0xc056, 0x0, 0x9, 0x4, 0xe, 0x5, 0x4, 0x9, 0x9, 0x0, 0xdb9, 0x0, 0x0, 0x4, 0x7, 0x7f, 0x0, 0x2, 0x6, 0xffff, 0x7, 0xaf, 0x9, 0x5, 0xfb9e, 0xde1, 0x3, 0x40, 0xa, 0x1, 0x3, 0x7, 0x1, 0x3ff, 0x6, 0x7, 0xe2, 0x2, 0x80000001, 0x100, 0x3, 0xfffffffd, 0x5, 0xf, 0x9292, 0x2, 0x7, 0x4, 0x9, 0x61e8, 0x7, 0x9, 0x8, 0x0, 0x9, 0x11f8, 0x7, 0x401, 0x2, 0x8, 0x6, 0x9, 0xdd6, 0xffffc900, 0x95a, 0x800000, 0x7097, 0x8001, 0x28cd, 0xcd63, 0x5, 0xdf, 0x8000, 0xc, 0x105f, 0x0, 0x10000000, 0x80, 0xd, 0x1000, 0xa36f, 0x6, 0x0, 0x1000, 0x4, 0x748, 0x7, 0x0, 0xfc000000, 0x2, 0x89c, 0x8, 0x151, 0x9, 0xe, 0x9, 0x3, 0x9, 0xfffffffe, 0x23b2, 0x3, 0xff, 0x4, 0x10000, 0x1, 0xfffffffa, 0x7, 0x3, 0x852, 0x40, 0x0, 0x79, 0x9, 0x6, 0x2, 0x7, 0x6, 0x3, 0x0, 0x2, 0x3, 0xd0, 0x1ff, 0x200, 0x2, 0x0, 0x2, 0x6, 0x45, 0x0, 0x7, 0x0, 0x9, 0x2, 0xcc, 0xffff8000, 0x2, 0x8, 0x81, 0x5, 0x3, 0x1, 0xc46, 0x80000001, 0xc5]}]}}]}, 0x470}}, 0x4000080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9}, {0x9, 0x3d9b}]}, 0x18, 0x1) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd07e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) 10.006472365s ago: executing program 4 (id=6232): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001200ffff2dbd7000fbdbdf250000", @ANYRES32=0x0, @ANYBLOB="210000006318030024002e"], 0x54}, 0x1, 0x0, 0x0, 0x8c851}, 0x40040) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f0000000180)=0xf) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_cancel(0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa8e81) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000140)={0x3, 0x0, 0x401, 0x2, 0x3e100000}) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 9.47595489s ago: executing program 1 (id=6234): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) lseek(r0, 0x101, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001ff020000000000000000000000000001000107144e230005000000003a000000eb2128175268a9dc901d30d7cdf7fcf93be51887225ee81de7ea1ea879ddb03364dde7860858942304d868582de7f0ae310117ff3a89d93cd97752ac33", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 8.674661139s ago: executing program 0 (id=6236): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) read$FUSE(r1, 0x0, 0x0) (fail_nth: 19) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.637462017s ago: executing program 0 (id=6238): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r5, &(0x7f0000000140)="c4", 0x1) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b65", 0x60, r5) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000000)={0x63, 0x5, 0x0, 0x3, 0x2, 0x6, "0b0909d70c5a4ece74e76d48f944c89a", 0x7, 0x80, 0x0, 0x99, 0x6, 0x40, 0x4}) creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6a55c0c4ada8324e) 7.14155481s ago: executing program 3 (id=6240): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x82, 0x0, 0x4000, 0xff81, 0x0, 0x0, 0x0}) 6.772780177s ago: executing program 2 (id=6241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=0x0, @ANYBLOB="24005a802000018005000400010000001400030009027900ff0006000000040001000700"], 0x40}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x1a0, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0xa}}}}, [@NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd0, 0x6b4, 0x100, 0x7, 0x80, 0x4, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x4}, {0x6, 0x6}, {0x2, 0xa}, {0x1, 0x4}, {0x6, 0x4}, {0x3, 0x9}, {0x5, 0x1}, {0x7}, {0x0, 0x4}, {0x7, 0x5}, {0x6, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x7, 0x4}, {0x6, 0xa}, {0x4, 0x1}, {0x3, 0x6}, {0x4, 0x1}, {0x5, 0x2}, {0x7, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x7}, {0x4, 0x1}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0xa}, {0x1}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x8}, {0x2, 0x8}, {0x4, 0x3}, {0x7, 0x1}, {0x1}, {0x4, 0x9}, {0x1, 0x8}, {0x6, 0x1}, {0x4, 0x4}, {0x6, 0x9}, {0x4, 0xa}, {}, {0x2, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x8}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x7}, {0x2, 0x7}, {0x3, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x9}, {0x4, 0x1}, {0x4, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x9}, {0x3, 0x9}, {0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x1}, {0x7, 0xa}, {0x4, 0x7}, {0x1, 0x8}, {0x3}, {0x0, 0xa}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0xa}, {0x3, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x4, 0x9}, {0x5, 0x3}, {0x3, 0x3}, {0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x1}, {0x1, 0x7}, {0x3, 0x7}, {0x3, 0x6}, {}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1b, 0x24, [{0x18, 0x1}, {0x6}, {0x5}, {0x2, 0x1}, {0x36}, {0x30}, {0x11, 0x1}, {0x19, 0x1}, {0x18}, {0x3, 0x1}, {0x5, 0x1}, {0x1c, 0x1}, {0x3}, {0x4}, {0x60}, {0xc}, {0x16}, {0xb}, {0x36}, {0xc, 0x1}, {0x1}, {0x18}, {0x9, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xf7}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x2}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7ff}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xc}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xd}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x18, 0x1}, {0xc, 0x1}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x303}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8800}, 0xc000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r8, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 6.645305506s ago: executing program 3 (id=6242): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x84}}, 0x44804) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x14, 0x9, 0x5, 0x2e, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_sa={0x2, 0x1, 0x4d5, 0x9, 0xfb, 0x96, 0x2, 0xe0000001}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_ident={0x2, 0xb, 0x3ff, 0x0, 0x275}, @sadb_x_sa2={0x2, 0x13, 0x9a, 0x0, 0x0, 0x70bd2c}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b, 0x3506}, @sadb_x_sec_ctx={0x1d, 0x18, 0x4, 0x8, 0xda, "5a9c14808cbba22c9b550af034b02b858c9ea371f069243adaba34764a0427604dca910c862dc7cffa08a0176a2742b6026d5a9912bab4002e9c5968d4a5c44f125bd51c047fcb0212b0ee69851e829e684bee46098ad423d01501166a79a3597f8b82fcd22e88a63954b8a767d0f314d841ff9c2fc3757c716da1d61012e9f08c8d059e82b42d5c120b711d4c8f3f319bdc1a39314ab47d5293a6ce92d1e28c96d05335737b101ac1020ce004fbd595f0502364e3490a9bedbc59a44a4818fc00f9362a4b24f2f5859e0b0c2d50d439730619b43cf2f81d4c8f"}, @sadb_x_nat_t_port={0x1, 0x98091a18b6009c58, 0x4e23}, @sadb_ident={0x2, 0xb, 0x7, 0x0, 0x1}]}, 0x170}}, 0x4010) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x424, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x908}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "0fa0ad8d980a6e620793a3212e3a34f0064e5c6103576b8809"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6849ed8e}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "6d84b3ae00b8636335ce4ccb074680487ae8a4d6d0cafee4a42163b4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6016}]}, @TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9e, 0x3, "0328805fdde8e85c9422c9ad75dab626e078820966efe42e7a428bd31392b49b5a2a1f406db313e366e57023b348d35900c9ff9bfd5b83ea104695a962fa562c9b3ffbf14619def231adbf10ed99c4459061c4966fbc927f8c2ab430877c52371fdee85fe0586be2ea1ce261cd5ef7654a2c8c07936dcdc901e0ec289952b1f231329240b27c7b6228bf3ca413c0c2ea537dcbf03405277555f3"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20a7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x6e, 0x3, "b73d77c78642b8ff93f943c83c74e757588dd195635ed09c66594fbfc72f194a75c97612f27b164e15ed87f0b1bb6902585f33269af8d3955064f9775524d68e7ad58bbbd0c8a56d4a38efc968fee4785edacc985a23566bb8d706d8ec837b30e099a89374d0184f3a4e"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe40}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb93d}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x85}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1400000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x424, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x908}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "0fa0ad8d980a6e620793a3212e3a34f0064e5c6103576b8809"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6849ed8e}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "6d84b3ae00b8636335ce4ccb074680487ae8a4d6d0cafee4a42163b4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6016}]}, @TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9e, 0x3, "0328805fdde8e85c9422c9ad75dab626e078820966efe42e7a428bd31392b49b5a2a1f406db313e366e57023b348d35900c9ff9bfd5b83ea104695a962fa562c9b3ffbf14619def231adbf10ed99c4459061c4966fbc927f8c2ab430877c52371fdee85fe0586be2ea1ce261cd5ef7654a2c8c07936dcdc901e0ec289952b1f231329240b27c7b6228bf3ca413c0c2ea537dcbf03405277555f3"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20a7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x6e, 0x3, "b73d77c78642b8ff93f943c83c74e757588dd195635ed09c66594fbfc72f194a75c97612f27b164e15ed87f0b1bb6902585f33269af8d3955064f9775524d68e7ad58bbbd0c8a56d4a38efc968fee4785edacc985a23566bb8d706d8ec837b30e099a89374d0184f3a4e"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe40}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb93d}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40c1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x85}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1400000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x40}, 0x40800) syz_open_dev$video(&(0x7f0000000900), 0x9, 0x40) (async) r4 = syz_open_dev$video(&(0x7f0000000900), 0x9, 0x40) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000940)={0x4, 0x3, 0x7}) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000a40)={0x15, 0x42, &(0x7f00000009c0)="48dcdc69f4d38e158199bd747798b8c75c8b3c5e760761b87e54ea98eca6e291e6fbc8847125eb234e349e39ffa8ce28f968b3253a47abccd97802970a7b9ca3905a"}) (async) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000a40)={0x15, 0x42, &(0x7f00000009c0)="48dcdc69f4d38e158199bd747798b8c75c8b3c5e760761b87e54ea98eca6e291e6fbc8847125eb234e349e39ffa8ce28f968b3253a47abccd97802970a7b9ca3905a"}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x50, r5, 0x2, 0x70bd2a, 0x4, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44880}, 0x44095) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r6, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x14) r7 = syz_clone(0x0, &(0x7f0000000d40)="6f205173d41d7e289244835c8953a3849db0086b44ec5277d90dbac860d04c6686b72dfb2e70ccfa3eff4146817fcd5938f9bb7b2a1fef8d245fff5f9ebb", 0x3e, &(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)="2b56851f5e9dc330bb98bb0676e0d05e993dce0903de1e8a5228ee2ba89ebc25cffaa9b81ad29682dcb56a7d2e0fcd64b37de59ec0e5dc75ccb792a159ceb945cc5a2339dd4611a09f847045652fe633afca9c187b8f01fa32cb628db2707298156b99e4939de905f98505401e82cbd98bb96e08f9241fda490b7f80388d3ee394db1d20b0473252c4ede822be3b0f58db453ca54c515e1ffa6a0bafdbf2ffc8ac024edd739d3474d325265dba81752d6c709da882cbf0fab545d46692fb442d2a") fcntl$lock(r4, 0x7, &(0x7f0000000f00)={0x1, 0x1, 0x1, 0x1, r7}) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000f40)={0x0, r0}, 0x8) r9 = pidfd_getfd(0xffffffffffffffff, r8, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000001280)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000000fc0)={0x278, r6, 0x4, 0x70bd28, 0x101, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x7c}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xaff}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfff}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xad}}, {0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc3, 0x2, "18238f6e870559ad3790d017cf0693bf4c7dbbd996a05e992f005a92a5c38b4c245ec5259ee2fd77c747becc8d478d889f328cd3abc2c617d36e7b2b511a7e73c190a78fab5a4589031aea75b8f930e13ca4b71e213a7e4f805f18b73d57a553e4a7f3c2dbfc1d42e2f169a00e41d78eaa870f61bf1eb826d353bbf82775a93ad6b0dfb79a800287a49bf69d7b7629b67ed3209822ec0aa3dd389ba300452ec641977f09c39c30ebc2e5b7bbdba48e1c6ab3b7b484c6fda273b91553b1b329"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x144, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x42, 0x2, "6689689436bc3e15edae2d04f594161104d8a1a9787b5335f5f5b510ff82297506ad8a7e41281725d1aefe41f917073d86390dac36106b139ccd8d0d9c97"}}, {0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe7, 0x2, "088b030f5c336459a36589239370ecd52ceba8ce0a8acec9302692e4d6481c4888bb6b941a851c345e2d3e0860bfef04836d4796e8ad2e261f15bd88f26fdc190a2b48243856ae7862e35b7c39688589f717d2901681170c761d272e0eec5f9ff6881593bf3db21e80d2d5a2996cc5aa1e0efbd73c721bf630f414399f204766236cc4a8872a1e3037cd7c43bc2985aa4273208ac6698d5b658ce9855d1947aeb4268ddf36d9928bc61333b8535d30a0244d9d4c8cb47748f65d89148e69d68e3d13721af8147a8cfb534279bf4908e53fdad2068106a2e6da784cdf28b86c54c2694d"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000011}, 0x8000) bind$inet(r9, &(0x7f00000012c0)={0x2, 0x4e24, @loopback}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000001300), 0x400, 0x0) (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001300), 0x400, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) (async) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) ioctl$UI_SET_EVBIT(r11, 0x40045564, 0xb) (async) ioctl$UI_SET_EVBIT(r11, 0x40045564, 0xb) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) read$FUSE(r9, &(0x7f00000013c0)={0x2020}, 0x2020) (async) read$FUSE(r9, &(0x7f00000013c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000003400)={{0x1, 0x1, 0x18, r10, {0xffffffffffffffff}}, './file0\x00'}) getgroups(0x5, &(0x7f0000003440)=[0xee00, 0xee00, 0xee00, 0x0, 0x0]) write$FUSE_CREATE_OPEN(r12, &(0x7f0000003480)={0xa0, 0x0, r13, {{0x2, 0x2, 0x0, 0x73dc, 0x9c, 0x5, {0x5, 0x1000, 0xa, 0x80000000, 0x7fff, 0xa95, 0x5, 0x1ff, 0x100, 0x4000, 0x2, r14, r15, 0x7ff, 0x3}}, {0x0, 0x1}}}, 0xa0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000003680)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003640)={&(0x7f00000035c0)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.314480532s ago: executing program 3 (id=6243): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f0000000d00)=""/177, 0xb1}], 0x3, &(0x7f0000000780)=""/219, 0xdb}, 0x2}, {{0x0, 0x0, 0x0}, 0xf817}], 0x2, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x76, &(0x7f0000000500)={0x3, 0x400, 0x820e, 0x100009, 0xfffffffc, 0x8, 0x400, 0x8}, &(0x7f0000000280)=0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@empty, @in=@dev}}, {{@in=@private}}}, &(0x7f0000000280)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000900)="8d", 0x0, 0xf21bb4d410ace81, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0xffffffffffffff87) 5.933843958s ago: executing program 1 (id=6244): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYBLOB='\x00\x00\x00'], 0x10c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"/337], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x11, @empty, 0x4c23, 0x1000, 'wrr\x00', 0x7, 0x8, 0x4002b}, 0x2c) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0xfffffd6e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}, {&(0x7f0000000180)=' E', 0x2}], 0x2) getdents(0xffffffffffffffff, 0x0, 0x3b) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 5.591548631s ago: executing program 4 (id=6245): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000000000000000100000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005", @ANYRES32=r1], 0x44}}, 0x0) 5.061936622s ago: executing program 0 (id=6246): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x30}}, 0x0) r2 = syz_io_uring_setup(0x2221, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x0, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x20, 0x0, @fd_index=0xa, 0x0, 0x0, 0xffffffdc, 0x2, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x66ae, 0x4, 0x2, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) r8 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r7, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r8, 0x900000}) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x8, 0xfffffefc, 0x5}, 0x10) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES16=r10], 0x1c}}, 0x804) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00004c9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r11 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0x20c89f, 0x800, 0x4, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8}, 0x94) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.047601359s ago: executing program 4 (id=6247): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x4, 0x3ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, 0x0, 0x200c8080) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x45d4, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x4, 0x10}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x4598, 0x2, [@TCA_FW_ACT={0x403c, 0x4, [@m_police={0x308c, 0x8, 0x0, 0x0, {{0xb}, {0x2100, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffeffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x80000000, 0x3, 0x3ff, 0x7, 0x0, 0x3, 0x5, 0x5, 0x1000, 0x7, 0x8, 0xffff, 0x7, 0x5, 0x66a, 0x3, 0x7, 0x7, 0x9, 0x5f, 0x1, 0xb45, 0xfa, 0x8, 0x4, 0xfff, 0xf, 0x0, 0x3, 0xffffffff, 0x8, 0x1, 0x8, 0x2, 0x1, 0x200, 0x8, 0xedac, 0x7f, 0x7, 0x1000, 0x3, 0x1e0000, 0x800, 0x40, 0x5e4b, 0x2, 0x1, 0x1, 0x7, 0x5, 0x2, 0x8, 0x4, 0xffffffbc, 0x7, 0x8, 0x40, 0x10000, 0x7, 0x85e3, 0xfffff000, 0x1000, 0x5, 0x8, 0x9, 0x4, 0x7fff, 0x4, 0x7, 0x180, 0x81, 0x8, 0x8, 0x5, 0x8, 0x9, 0x9, 0x3, 0xffff8001, 0x85, 0x3, 0x3, 0x3ff, 0x1000001, 0x3, 0x5, 0x2, 0x12, 0x9, 0x1, 0x7d4f, 0x16, 0x4, 0x3, 0x47d, 0xb, 0x0, 0x7, 0x7f, 0x4, 0x8, 0x6, 0x9, 0x1, 0x6, 0xc0, 0x80, 0xd, 0x6, 0xfffffffd, 0x3, 0x4, 0x8, 0x8a, 0x5, 0x1000, 0x18000, 0x8, 0x3, 0x1, 0x7, 0x2, 0xfffffffc, 0x7, 0xffffffff, 0x3ead8f36, 0x8, 0x981e, 0xfffffeff, 0xfffffc00, 0x76a, 0xc, 0x8, 0x1000, 0x7, 0x0, 0x8, 0x0, 0x0, 0x76e, 0x8, 0x20000, 0x6, 0x6, 0x3ff, 0x100, 0x79da, 0x3, 0x400, 0x12000, 0x5, 0x4, 0x7f, 0x0, 0x7, 0x8, 0x8, 0x5, 0x1, 0x7, 0x9, 0x0, 0xffff2096, 0x80, 0x5d, 0x80, 0x3ff, 0x0, 0x0, 0x3, 0x7, 0x7, 0x523a, 0x3, 0xac, 0xccf, 0x101, 0x2, 0x3, 0x0, 0x0, 0x8, 0x7, 0xffffffff, 0x2, 0x2, 0x80, 0x4, 0xffffffff, 0x4, 0x10, 0xfcf, 0x5, 0x80000001, 0x4, 0x8a3, 0x0, 0x1200000, 0x4, 0x7, 0x2, 0x9, 0x8, 0x6, 0x4b, 0x1ff, 0x8, 0x5, 0x1, 0x1, 0x6, 0x0, 0x4, 0x4, 0x4, 0x8, 0xff, 0xbf, 0x22d59eee, 0x1, 0xd, 0x4, 0x9d0f, 0x7f, 0x2, 0x5, 0x7, 0x1, 0x983, 0x9, 0x10, 0xa, 0x5, 0x5ec, 0x7, 0x1, 0x3, 0x9, 0x5, 0x4, 0x6e08, 0x9984, 0x7, 0xc00, 0x2, 0x9, 0x5, 0xff, 0x1ff, 0x9, 0x6, 0x1, 0xf4, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x1, 0x8001, 0x5, 0xfffffffa, 0x5, 0x7, 0x0, 0x1, 0x3, 0x1, 0x7, 0x9, 0xaaf, 0x8, 0x6f, 0x8, 0x6, 0x3, 0x0, 0x9, 0x0, 0x0, 0xfff, 0x8, 0x5, 0x2d, 0x0, 0x400, 0xffffff47, 0x1a, 0x6, 0x9b1, 0x6, 0x566fc9b8, 0x9, 0x3, 0x5, 0x9, 0x6, 0x8, 0x0, 0x3, 0xae, 0xe, 0x4, 0x32, 0x0, 0x9, 0xfff, 0xd12, 0x2, 0xd, 0x4, 0x1, 0x4, 0x3, 0xffffffff, 0xf, 0x3, 0x2, 0x95d, 0x5, 0x3, 0xffffffa1, 0x58, 0x1ff, 0x2, 0x9, 0x8, 0x3, 0x2, 0xd, 0x6, 0x10001, 0x5, 0x4, 0xfffffffd, 0xffff, 0xfffffff0, 0x0, 0x1, 0x4bf, 0x1, 0x1000, 0x0, 0x6, 0x5, 0x3, 0x8, 0x0, 0x1, 0x45a, 0x1, 0x6, 0x4, 0x9, 0x0, 0x0, 0x9, 0x6, 0x9ef0, 0x7, 0xd, 0x6, 0x4e5d, 0x3, 0x3, 0x400000, 0x400, 0x34, 0xfffffffa, 0x6, 0xa98, 0x0, 0x3800, 0x3, 0x1, 0x9, 0x80000001, 0x6, 0x3095, 0x7ff, 0x78, 0x8, 0x0, 0x99, 0x35b2, 0xb, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x1, 0x81, 0x8000000, 0x4, 0xfffffff9, 0x2, 0x2990, 0x6, 0xa2e9, 0x5, 0x8, 0x2ec48b0b, 0x9, 0x6, 0x5f5, 0xffff7fff, 0x632, 0x5, 0x10000, 0x9af, 0x3, 0x5, 0x3ff, 0xa, 0x0, 0xdc4, 0x4, 0x5, 0xff, 0x8, 0x81, 0x6, 0x0, 0x2, 0x5, 0x1d, 0x401, 0x6, 0x1, 0x3, 0x80000001, 0xc, 0x1, 0xdd4, 0x8, 0x2, 0xfffffffc, 0x100, 0x2, 0xe, 0x10000, 0x5, 0x6, 0x3, 0x4, 0x9, 0x0, 0x6, 0x2, 0x7191, 0x2, 0x9, 0x34f1a7a5, 0x5, 0x72, 0x1, 0x400, 0x40, 0x8, 0xfff, 0x6, 0x1, 0x6, 0x8, 0x1, 0x8, 0x3, 0x1000, 0x6, 0x7fff, 0xc, 0x96d, 0x4cf, 0x401, 0x8, 0x800, 0x7, 0x100, 0x6, 0x6, 0x455, 0x0, 0x8, 0x2, 0x4, 0x9, 0x9, 0x1, 0xcfb8, 0x7, 0x6, 0xb, 0x7ff, 0xb, 0x1, 0x5b2, 0x2, 0x5, 0x3, 0x9, 0x4, 0x10, 0x6, 0x7fff, 0x2, 0x9, 0x2, 0x4, 0x5, 0x3, 0x8001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff0}, @TCA_POLICE_RATE={0x404, 0x2, [0xeb9, 0x80000000, 0x28, 0x5, 0x66d, 0x200, 0x6e6, 0x3ff, 0x3ff, 0x8, 0x2, 0x5, 0x9, 0x7, 0x0, 0x6, 0x7, 0x7f, 0xa1, 0x6, 0x80000000, 0x900, 0x3ff, 0x3, 0x3, 0x0, 0x7, 0xfffff4b5, 0x9, 0x7, 0x2, 0x6, 0x8001, 0x551, 0x9, 0x1ff, 0xd, 0xe69f, 0xb76, 0x8, 0x9, 0xa92d, 0x2, 0x4, 0xa7c, 0x8, 0x0, 0x200, 0x3, 0x400, 0x1, 0x7, 0x10000, 0x0, 0x5, 0x5, 0x8, 0x9, 0x4, 0x1000, 0x2, 0x101, 0x2, 0xfffffffd, 0x6, 0x3, 0x4, 0xfffffc01, 0x40, 0x6, 0x1, 0x1, 0x7, 0x6, 0x4, 0x5, 0x4, 0x0, 0x33, 0xfffffffc, 0x6, 0x5, 0x1, 0x8, 0xff, 0x10, 0x401, 0xfffe, 0x1, 0x19, 0x8, 0x1, 0x5, 0x3, 0x40, 0x10, 0xfffffffd, 0x2, 0x76, 0x1, 0x7, 0x3b81e2cf, 0x8001, 0x0, 0x5, 0x6, 0x5, 0x1000, 0xff, 0x2, 0x0, 0x50000000, 0x0, 0x7, 0x40, 0x801, 0x5, 0x8000, 0x3, 0x800, 0x1, 0x4, 0x7, 0x674, 0x5, 0x4, 0x3, 0x7, 0x9, 0x5, 0x4, 0xdb, 0xb, 0xffffffc0, 0x2, 0x7fff, 0x2, 0x81, 0x1, 0xcdbd, 0x800, 0x9e, 0xb435, 0x6, 0x3e, 0x8, 0x1, 0x80, 0x8000, 0x2, 0x10, 0x4, 0x401, 0x200, 0x200, 0x6, 0x1, 0x7, 0x9, 0x81, 0xf, 0x5, 0x5, 0x7, 0x5, 0x7ff, 0xfffffffb, 0x10001, 0x3, 0x3, 0x7, 0x0, 0x2, 0x6, 0x1a54, 0x1, 0xcb8, 0x7fff, 0x9, 0x6, 0x2, 0x2, 0xc216, 0x9, 0x2, 0x80000001, 0x9, 0x401, 0x0, 0x9, 0xf, 0x4, 0x400, 0x4, 0x80, 0xcf0, 0x6, 0x1, 0x3e13647d, 0x3, 0x3, 0x5, 0x101, 0x2, 0xfffffffe, 0x7, 0x1, 0x1, 0x9, 0x5, 0x401, 0x100, 0x2, 0x5, 0x1, 0x4, 0x9122, 0x15db078c, 0x400, 0x40, 0x5, 0x80, 0x82c, 0x3, 0x0, 0x4, 0x7c0, 0x6, 0x4, 0x8, 0x0, 0x8, 0x6, 0x9, 0x0, 0x5, 0x81, 0xfffffffa, 0x36, 0x9, 0xfe7, 0x7ff, 0x7fff, 0xfd0, 0x8, 0x2, 0xd, 0xffffffff, 0x3, 0x90, 0xd131, 0x3, 0xfffffffe, 0x5, 0x7, 0xa4b6]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x800}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff9, 0x7d3caadc, 0x5, 0xa, 0x40, 0x6, 0x0, 0x5b, 0x2, 0x731f, 0x3, 0x1, 0x7, 0x1ff, 0x1, 0x9c2, 0xc9c, 0x8, 0x3, 0x6, 0x3, 0x8, 0xffffff80, 0x6, 0x8, 0x53, 0x4, 0x0, 0x5, 0x3, 0x9, 0x200, 0x9, 0x8, 0xb08, 0x3, 0xf76, 0x161, 0x7, 0x8fc9, 0x6, 0x0, 0x0, 0x1, 0x5, 0x4, 0x8, 0x2, 0x2, 0x40, 0xdf, 0xfffffffd, 0x400, 0x1f, 0x4, 0xffffffff, 0xffffff8d, 0xb66, 0xc05, 0xffff, 0x400, 0xdd3c, 0x9, 0x4, 0x9, 0xd, 0x1, 0x7, 0xc, 0xd1bf, 0x5077, 0x6, 0x5, 0x5, 0x200, 0x6, 0x0, 0xfffffffa, 0x6, 0x5, 0x2, 0xfe000000, 0x40, 0x6, 0x0, 0xe, 0x321d400, 0x4188, 0x3, 0x1, 0x789, 0x91, 0x4, 0xa172, 0x7, 0xd8c, 0x0, 0x5, 0x4, 0x8, 0xfff, 0x9, 0x0, 0x3, 0x8, 0xe786, 0x2, 0x2, 0x4, 0x0, 0x439, 0x3, 0x209, 0x4, 0x0, 0x3, 0x2f0, 0x6e72, 0x5, 0x6, 0x6dd3, 0x4, 0x0, 0x7, 0x6, 0x26c4, 0x8, 0xf506, 0x2b9efd3d, 0x2, 0x1, 0x8000, 0x0, 0x800, 0x9, 0x3, 0x60f, 0x10, 0x9, 0x0, 0x6, 0x4, 0x6, 0x7f, 0x1, 0xa3ba, 0x7, 0x5, 0x3, 0x2, 0x8, 0x8, 0x522, 0x8, 0xfffffff9, 0xffff, 0x10000, 0x57, 0x2, 0xd280, 0xb, 0xc357, 0x4, 0x4, 0x3, 0x8, 0x4, 0x9dd, 0x8000, 0x3ff, 0x0, 0xcef1, 0x4, 0xffffffff, 0x8000, 0x1, 0x3, 0xb, 0x400, 0x3, 0x8, 0x80000001, 0x3, 0xfff, 0x4946, 0x7c, 0x9, 0x1169, 0xfffffff7, 0xc, 0x3, 0xd, 0x8, 0x1, 0x80000000, 0x800, 0x9c4, 0x2000, 0xf, 0x8, 0x2, 0xc34, 0x6, 0x4, 0x8001, 0x5, 0x6, 0x8, 0x12000000, 0xffff, 0x8, 0x4, 0x7fffffff, 0x1000, 0x7ff, 0x4, 0x8, 0x7, 0x1, 0x8, 0x2e, 0x3ff, 0x5, 0x7, 0x8, 0x401, 0x1, 0x7fffffff, 0x2, 0x7d, 0x4, 0x4, 0x4, 0x6, 0x5, 0x0, 0x7fff, 0x73, 0xa0, 0x0, 0x0, 0x8b5, 0xffffffff, 0x8, 0x6, 0xfbe4, 0xe, 0x88d9, 0xd48, 0xfffffffa, 0xc, 0x8, 0xffff, 0xdd, 0x7, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_RATE64={0xc, 0x8, 0xacf}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x763c, 0x7, 0x2, 0x7, 0x3ff, 0x0, 0x7, 0x7, 0x80000001, 0x0, 0x8, 0x88, 0x4, 0x10000, 0xb, 0xd, 0x9, 0x15f5, 0x6, 0x52b6, 0x6, 0x9, 0xffffffff, 0x6, 0x80000001, 0x9, 0x5, 0x81, 0x1, 0x1, 0x2, 0x2f19, 0x9, 0x9, 0x7, 0x1ff, 0x14ee, 0x4, 0x7, 0x6, 0x8d, 0x1, 0x1, 0x100, 0x8, 0x401, 0x15, 0x5, 0xd, 0x7f, 0x5, 0x2, 0x9, 0x3, 0x2, 0x6, 0xa111, 0x7fffffff, 0x6f3, 0x0, 0x931a, 0x6, 0x6, 0x8, 0x7, 0x8, 0x6, 0x1, 0xfffff6cc, 0xfffffffe, 0x0, 0xffffff00, 0x2, 0x55a6, 0x432, 0x3, 0xa0000000, 0x91, 0x1000, 0xa, 0xea, 0x3ff, 0x6, 0x2, 0x12, 0x7, 0xf, 0x4, 0x9, 0x9, 0x0, 0x6, 0x4040000, 0xb74, 0x8000, 0xe, 0x4, 0x2, 0x4, 0x10001, 0x6, 0x9, 0x1ff, 0x8, 0x40, 0xe8, 0x6, 0x6, 0x7, 0xb, 0xe, 0x3, 0x400, 0xc0fe, 0x1, 0x80000001, 0x40, 0x4, 0x0, 0x3, 0x3df84000, 0x8000, 0x33f6, 0x40, 0x7, 0x1ff, 0x7fff, 0xb4c, 0x2, 0x1, 0x6, 0xfffffffa, 0x7, 0xb6, 0xf2, 0xa4a, 0x8, 0x2, 0x1, 0x101, 0x5, 0x0, 0x4, 0x81, 0xff, 0x81, 0x4, 0x800, 0x5, 0x9, 0x101, 0x6, 0x3, 0x0, 0xd428, 0x2, 0x0, 0x6, 0x0, 0x3, 0x5, 0x6, 0x40, 0x3ff, 0x81, 0x80000000, 0x3, 0xffff, 0x7fff, 0x6000000, 0x4, 0x4, 0x5, 0x4, 0x3ef, 0x7, 0x2, 0xff, 0x8, 0x7, 0x2, 0x4, 0xa31, 0x8001, 0x6, 0xc, 0xfffffffe, 0x4, 0x3, 0x5, 0x1ff, 0x6f, 0x8, 0x2, 0x4fe, 0x9719, 0x7, 0x6, 0x4, 0x401, 0x80000001, 0x8, 0x8000, 0x60000, 0x9, 0x3, 0x80000000, 0x10001, 0x6, 0xfffffff7, 0x5, 0x800, 0x5, 0x9, 0x7, 0x3, 0x5c9, 0x5, 0x2c1a, 0x6, 0x4, 0x0, 0x1, 0x2e, 0x5, 0x0, 0xffffffff, 0x6, 0x750, 0x40000000, 0x104, 0xcfc9, 0x9, 0x7fff, 0x0, 0x2, 0x3, 0x65, 0x3, 0x2, 0x9, 0x8, 0xff, 0x2, 0x1, 0x1, 0x5, 0x8000, 0x6, 0x92, 0x6, 0x3, 0x80000001, 0x4, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xc61, 0x9, 0x8, 0x4, 0x7, 0x2ac, 0xe, 0x4, 0x4, 0x10001, 0x5b6a57ba, 0x0, 0x2, 0x9, 0x4, 0x1, 0x2, 0x7, 0x0, 0x3ff, 0xe7cf, 0x7, 0x10, 0x400, 0x10, 0xa, 0x8, 0x0, 0x80000000, 0x2eb, 0x55dd, 0x97, 0xfffffff7, 0x8, 0x4, 0x2, 0x7, 0x8001, 0x8, 0x6, 0x7, 0x3, 0xfffffffe, 0x8, 0xd, 0x5, 0x90e, 0x5, 0x800, 0x5, 0x0, 0x10, 0x2, 0x5, 0xf9f, 0x0, 0x97d, 0x1, 0x5, 0xd, 0x9, 0x7, 0x4a, 0x0, 0x9, 0x1000, 0x79010329, 0x10001, 0xe, 0x9, 0x1, 0xffff9726, 0x8, 0x8, 0x6, 0x9, 0x2, 0xe, 0x0, 0x4, 0x6, 0xa, 0xf, 0xfffffffa, 0x1, 0x9, 0xba6, 0x8, 0x5, 0x3, 0x8, 0x7, 0x58581fe1, 0x6, 0x1, 0x8e, 0xd5b, 0xfffffffe, 0xdfc, 0x10001, 0x2, 0x0, 0x46, 0x100, 0x779, 0x4, 0x5, 0x7, 0xb71, 0x7, 0xffffffff, 0x0, 0x6, 0x69065ebf, 0x40, 0x0, 0x6, 0x1000, 0x7, 0x80a3, 0x5, 0x27, 0x100, 0x8, 0x1, 0x4, 0x965, 0x2, 0x8000, 0x3, 0x2, 0x5, 0x8, 0x80000001, 0x7, 0x28b, 0x0, 0x8a88, 0x3, 0x80000001, 0x1000, 0x2, 0x1, 0xaaa0, 0x3, 0xfffffffe, 0x101, 0x7f, 0x6, 0x7fff, 0x7f, 0x7, 0x9, 0x4, 0xfffffffc, 0x8, 0x0, 0x5, 0xffff3903, 0x10, 0x2, 0x6, 0x7, 0x1e, 0x3, 0x1, 0x1, 0x4, 0x1, 0x401, 0x1, 0x6, 0x5, 0x5, 0xfffffffd, 0x0, 0x3ff, 0x68, 0x98da, 0xe, 0x5, 0x5, 0x2, 0x81, 0x10000, 0x3, 0x9, 0x3, 0xff7e, 0xfffffff7, 0x3, 0x80, 0x5, 0x2, 0x8, 0x9, 0x7, 0xb4ac, 0x1, 0x5, 0x2, 0x3, 0x4, 0x7f, 0x3, 0xf, 0x9, 0x9a, 0xc7, 0x4, 0x1000, 0x7fffffff, 0xfffffffe, 0x5, 0x8, 0x8, 0x2, 0x8, 0x7fffffff, 0x9, 0xff, 0x7fff, 0x9, 0x800, 0xfffffffc, 0x24b2, 0x9, 0x0, 0x9, 0x0, 0x4, 0x1, 0x0, 0x3, 0x4, 0x0, 0x3, 0xffff0ac7, 0xc, 0x1, 0x1, 0x2, 0x9, 0x123, 0x7, 0x2, 0x5, 0x2, 0x7ec, 0x4, 0x5, 0x1, 0x3, 0x1, 0xc28]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x9, 0xf, 0x4, {0x2, 0x2, 0xc, 0x4, 0x6, 0x5}, {0xca, 0x1, 0xffff, 0x1ff, 0x1000}, 0x0, 0x7ff, 0xfffeffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x2, 0x0, 0x0, 0x7, 0xfffff800, 0x1000, 0x8, 0x0, 0x7, 0x6, 0xfffffff9, 0x7ff, 0xcc0b, 0x1, 0xe662, 0x7ff, 0x17, 0x6, 0x40, 0x80000001, 0x7, 0xd, 0x2, 0x8, 0xfffffffe, 0x6, 0x0, 0x9, 0x40000000, 0x6, 0x8001, 0x1, 0x281, 0x3, 0x5, 0x3, 0x400, 0x8, 0x8, 0x7, 0x1, 0x4, 0x8, 0x3ff, 0x3, 0xff, 0x3, 0x5a, 0x942, 0xb, 0x1, 0x5, 0x0, 0x6, 0x5, 0xbe, 0x1, 0x3, 0x6, 0x5, 0x3, 0x7, 0x0, 0x3f, 0x5, 0xe, 0x0, 0x9, 0x458, 0x9, 0xffffffd9, 0x0, 0x6, 0x10000, 0x9, 0x6, 0x5, 0x80, 0x81, 0x2, 0x0, 0x0, 0x5, 0x1, 0x4, 0x9, 0x2, 0x76f6, 0x100000, 0x3, 0x6, 0x31ed, 0x9b, 0x8, 0x9, 0x3, 0x6, 0x3, 0x5, 0xd5, 0x1000, 0xff, 0x7, 0x4, 0x1, 0xfffffffc, 0x4, 0x0, 0x2, 0x6, 0x4, 0x7, 0x5, 0x3af62ede, 0x1ff, 0xf, 0x5, 0x7a5, 0x9, 0xb24b, 0x8, 0x87, 0x9, 0x7, 0x8, 0x3, 0x79c7, 0x10, 0x4, 0x3, 0x4, 0xfffffffa, 0x95080000, 0x0, 0x80000001, 0x7fff, 0x1, 0x535, 0x3, 0x4, 0x2, 0x2, 0x5, 0xfffffbb6, 0x6, 0xffff, 0x100, 0x2, 0x3, 0xcf, 0x2, 0x752, 0x92c7, 0x2, 0x1, 0x8, 0x2, 0x9, 0xc0c, 0x7fffffff, 0x7ff, 0x9, 0x8, 0x1ff, 0x0, 0x6, 0x6, 0x3, 0x10c, 0x9, 0x3, 0x1ff, 0xe0, 0x3aef, 0x6, 0x0, 0xa, 0xe, 0x163c0000, 0x4, 0x8001, 0xffc00000, 0xc3f, 0x5, 0x5, 0xa0, 0xe, 0x8, 0x8, 0x7, 0x81, 0x3, 0x5, 0x0, 0x9, 0x5, 0x5d70, 0x7ff, 0x8, 0x6, 0x0, 0xa, 0x8, 0x2, 0x7f, 0x5, 0xf, 0x7, 0x4, 0x400, 0x18000, 0x4e, 0x80000001, 0xfffffffe, 0x5, 0x0, 0x3, 0x7, 0x45c6, 0x7, 0x92, 0x5, 0x5, 0x8, 0x6, 0x7f, 0x40, 0xa, 0x2, 0x7f, 0x9, 0x9b1, 0x8, 0x1d, 0x7, 0x6, 0x3, 0x7ff, 0x0, 0x7, 0xa, 0x8, 0x6, 0x80000001, 0x812, 0x5, 0xea2, 0x5, 0x9f30, 0x6, 0x80000000, 0x6, 0x5, 0x5c, 0x10001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x47d, 0x8, 0x9, 0x2a81, 0x80, 0x5, 0xc8d, 0xffff, 0x0, 0x2, 0x3, 0xfff, 0x101, 0x9, 0x0, 0xffff, 0x6, 0x5, 0x8, 0xeff, 0x2, 0x7f, 0x7, 0x2, 0x7, 0x2, 0x4, 0x2e, 0x6, 0x1, 0x6, 0x8, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x4, 0x6, 0x100, 0x1ff, 0x80000000, 0x197, 0x1, 0x1920, 0x8, 0x0, 0x3, 0x9, 0x800, 0x8000, 0x2bc5, 0x7fffffff, 0x19c1, 0x8001, 0xe, 0xffffff01, 0x1, 0x4, 0x5, 0x3, 0xde10, 0x1000, 0x6, 0x3ff, 0x4, 0xb, 0xffffffff, 0x7, 0x8, 0x2, 0x1000, 0x7efa7c62, 0x3, 0x6, 0x6, 0x0, 0x9, 0x40, 0xffffffc7, 0xd49f, 0x1ff, 0x8, 0xfffffff4, 0x8a, 0x0, 0x200, 0x1, 0x2eb, 0x6, 0xff, 0x5, 0x3ff, 0x2, 0xfffffff8, 0x80, 0x4, 0x6, 0x6, 0x0, 0x48, 0xfde, 0x6, 0x3, 0x8, 0x80000000, 0x9, 0x7fffffff, 0x18000000, 0x8000, 0x1ff, 0x6, 0x5, 0x40, 0x6, 0x10001, 0x4, 0x2, 0xfffff99c, 0x6, 0xffff, 0xfffffffa, 0x9072, 0x7, 0x3, 0xff, 0x847, 0xff, 0x6, 0xfffffff8, 0x0, 0xd10a, 0xdc, 0x5, 0x5, 0x1d, 0xb70, 0x100000, 0xc4, 0x3, 0x4, 0x40, 0x3, 0x36, 0x0, 0x4, 0xffffffd7, 0x5, 0x98, 0x9, 0x1000, 0x2, 0x1, 0x3, 0x4, 0x5, 0x5, 0x8000, 0x5, 0x3, 0x8, 0x8, 0x0, 0x81, 0x2ef, 0xd3a, 0x8001, 0x8f, 0x8001, 0x5, 0x2, 0x6, 0x0, 0x4, 0x3ff, 0x4, 0x8, 0x7, 0x0, 0x0, 0x3, 0x1, 0x83, 0xba1c, 0xff, 0x4, 0xd8, 0x4, 0x3, 0x3, 0x200, 0x6, 0x5, 0x2, 0x7, 0x5, 0x3b, 0x4, 0x3, 0xffff8001, 0x7, 0x4, 0x20, 0x1, 0x1, 0x4, 0xfe16, 0x2, 0x5, 0xfffffffb, 0x4, 0x29, 0x5, 0x4, 0x9, 0x7, 0x100, 0x0, 0x7, 0x9, 0x7, 0xfffffffb, 0x6, 0x9, 0x81, 0x6, 0x0, 0xfffffff8, 0x80, 0xe, 0x3, 0x5, 0x80, 0x8, 0x3a, 0xfffffffe, 0xffffff32, 0x8, 0x3, 0x5, 0x1, 0x3, 0xffff, 0xa2c, 0x3, 0x1, 0x0, 0xc7cb, 0x7, 0x5, 0x3c, 0x0, 0x100, 0x6, 0x7fffffff, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x1, 0x2, 0x2, 0xe0, {0x8, 0x2, 0xf, 0x5, 0x4, 0x7}, {0xb, 0x0, 0x5, 0x9, 0x7, 0x10000}, 0xbc, 0x2, 0xfffffffe}}]]}, {0xf64, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x79, 0x5, 0x2, 0xffffffff}}}]}, {0x4e, 0x6, "093d4b88e14ab5e0cd01639d9c15e6efe79c045173d3f28a6ff0d135cc8ee23284c082c245ffab356d9bda443eefc913d1d841730c83491fc2aadc927637c0f768fb77b677cd14854e1f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xf00, 0xc, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0xea4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x8d37}, @TCA_FW_ACT={0x190, 0x4, [@m_connmark={0xa0, 0x1d, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xffff0000, 0xc24ba5996f978a81, 0x10000, 0x3}, 0x5}}]}, {0x53, 0x6, "49d5edf35b27f6e9762bcdeaad59a72d039e734512f07c7265037e9f39c0703443b8f9d99c3f061aa1db06aadd7c90152cc7b51384e11040ebf4c29cbcd6c18d1dcbb7ba0c9a1895b048c348384bce"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0xec, 0x8, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb7, 0x0, 0x6, 0x3, 0x8}, 0x2}}]}, {0xa0, 0x6, "82fdc54105578b90de160f075541cbf91b45474a4bf836c9297311734d725b2d77c7fc9731623b3798087b4247868a9c59f0fc59f4adce00bd4a7a1b27b2abf1b0db174a0bf8e493cf4c7e6ef25de104e7a9e779a9b26c30619e94692a7537fe3ac24d39ac73b421098d8cf1ad91495d77fb326a10b925132d55bbc4fa00250fc65c5aa07390a0fcbbeb5ca4e9179caeaf3c583ff6eb68bfb1b7a283"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xffe0}}, @TCA_FW_MASK={0x8, 0x5, 0x100}, @TCA_FW_ACT={0x1a0, 0x4, [@m_ctinfo={0x84, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x56, 0x6, "3baa8d4eb0bcbdda6d12b34885ec6dc97f62a53ea834ee95605363a02399ab6a22ef010697bfab09029aba565b05699266b1f25a5d9e1e25ffcc70c5f5e5834a3dfee61ba9eb957ec8e3b3060c197b2baf30"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x118, 0x5, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x36, 0x6, {0x1, 'nat\x00', 0x1, 0xc, "279741c2240a549e943339dc"}}]}, {0xb8, 0x6, "31da9cd1430229c455768f1426ffb8548779fc2ebdf7c382e5455b81f21c3abb535193aaf4a6f97cfb9deef7389bd927057247e4674e70f9a9588014bf87f1b51f967d3d6cc12d958bd1766ae633db735e038597480ab973cb92fd884f7e078feac0632a0242b8990e9f013573c5f002d7601c0ad3c49bbc2b83936502606a80ad8b7a253f6a72a778db76643d344951e3b8e2d32c0ecbc9a978c4c0de78eef28f00595d98d5ec073d6c0ee797efe2749d98647e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_FW_ACT={0x200, 0x4, [@m_mpls={0xa0, 0x19, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xc, 0x9, 0x2, 0xb, 0x4}, 0x4}}]}, {0x4e, 0x6, "fefaef4c3cf2679f6dee7b3fbe13e367d9c8f45df9245fdb74b43981163ae734ff33d0c360877318a2fd98b4069fad444cf794f6cc082272f29934aa2159b6c0735cfa7133a95d47e11f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xf0, 0x5, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc5a, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf3a, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2525}}]}, {0x9e, 0x6, "f72d55c8266bc775a5eb8aea056b1b912b67fe75fb0de6627876796a149b6b930bda4b7784de2c358c1b14d668937c49e20d30f35a9a5f8be8e6e3f8f61700cee471322d9dce983484cd2f96071c050346a07084c232e7dce5e6ccb99b2014f03b0cf22233c0a648fce0840d0a468a3596fef762fc2195b6088d1d4ca1c95ff63fb45030159d1404cfee9ed2c5b605e43135ffec70d69f8802ef"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x34, 0xc, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x38, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x9, 0x6, "a6549a30ea"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_MASK={0x8, 0x5, 0x3d7}]}}]}, 0x45d4}, 0x1, 0x4000000}, 0x0) r7 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@gettaction={0x20, 0x5a, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) io_uring_enter(r7, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) socket$can_raw(0x1d, 0x3, 0x1) 5.03944437s ago: executing program 3 (id=6248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prctl$PR_SET_NAME(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (fail_nth: 17) 4.797303132s ago: executing program 0 (id=6249): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x4407, 0x0, 0x1, 0x28b}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x5fc8, 0xfffff800, 0x4, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r4, {0x2000000007, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000, 0xa0000000, 0x0, r5, 0x0, 0x0, 0x1000000}}}, 0x78) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20000000}) 4.648316028s ago: executing program 0 (id=6250): r0 = socket$inet(0x10, 0xa, 0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="dfb9757eb1b52a1cd80abbfd46339e9272aea6dc553bbecf4ea9f00f254d60fd9fd058b9495f2483ee222b6a2125d02efca89dd1f33cb7417e0bcfe78455680ebc54fcf9ca2df8f00d0073c3d9620fefb8da4089809ffbe8987b60bd36104cc740e2b69b128bb38de04ec5b19ece448a8ae8c677ac5f257a84fd8fd969a7a9826470131b3c5cb1d8ac6dfa66f61c54d2130a9ad969dfe86a", @ANYRES32=r0, @ANYBLOB="2d22ed133fac710755da513d481cc6b9167d1b4d4e4b59b4c9ae3c43c5d399c1a76135c8b1b5b4a01472d06f611c889c3a6eb3a4148f278e6fabbf8d62aeeeca7c02f1f148790c05", @ANYRESDEC=r2, @ANYRESHEX, @ANYBLOB="bbce5c902e0985e0f64044d1bd8f67fea861c88147f9f3af8a4a1e8361fdce6767195bd7342f23b8b0d4d9560e9de1ff9e8240ad3635ee2c28eea7a0192f7aa4c6482827ac528c9bb51e450431764b58b6c990872b4424b4b43ccbf568f38dfc44db937dadcbb250dc1e91ed83fa4e1b769a659a2dfb04258a91bb59dc123b78eb6a66721a32043f105e829997325a00ec64bc970382b64818eb950e7f6781f07c9b668207bacd0b2334c6c12d26e12524d82b752ac594f9c4ceb6", @ANYRESHEX=r3, @ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000070800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x27, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000008000000010000008000000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@struct={0xd, 0x3, 0x0, 0x4, 0x0, 0x3ff, [{0x9, 0x5, 0x7}, {0x1, 0x3, 0x8000}, {0xc, 0x1, 0xac}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0xe]}}, &(0x7f0000000240)=""/29, 0x4e, 0x1d, 0x1, 0x3b, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r4, @ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e010100000000010094cd49fe704c23ffbf000006000000e0000001e00000010a010100640101"], 0x28) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r9 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) 4.439997328s ago: executing program 2 (id=6251): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x4e1f, 0x0, 0x4e24, 0x3, 0xa, 0xa0}, {0x0, 0x200000004, 0x5, 0xe811220d, 0x100000000, 0x4, 0x8001, 0x9}, {0x5, 0x7, 0x7}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x4d5, 0x2b}, 0x2, @in6=@remote, 0x3502, 0x3, 0x8, 0x0, 0x9, 0x0, 0x7f}}, 0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x2c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) socket(0x8, 0x80009, 0x52) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x6, @remote, 0x1}], 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @private0, 0x5}, 0x1c) getsockopt(r2, 0x8, 0x8, &(0x7f0000000040)=""/18, &(0x7f0000000080)=0x12) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 3.329061154s ago: executing program 2 (id=6252): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r2, r2, 0x0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x10000, 0x0, 0x7d, 0xfa11}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) 3.013059772s ago: executing program 3 (id=6253): syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') preadv(r0, &(0x7f0000004300)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1, 0x78, 0xc) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.864212701s ago: executing program 1 (id=6254): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) lseek(r0, 0x101, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001ff020000000000000000000000000001000107144e230005000000003a000000eb2128175268a9dc901d30d7cdf7fcf93be51887225ee81de7ea1ea879ddb03364dde7860858942304d868582de7f0ae310117ff3a89d93cd97752ac33", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x2, 0x0, 0x0) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 2.150267786s ago: executing program 2 (id=6255): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x2000000, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 1.558932976s ago: executing program 4 (id=6256): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000140)="c4", 0x1) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b65", 0x60, r6) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000000)={0x63, 0x5, 0x0, 0x3, 0x2, 0x6, "0b0909d70c5a4ece74e76d48f944c89a", 0x7, 0x80, 0x0, 0x99, 0x6, 0x40, 0x4}) creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6a55c0c4ada8324e) 1.46136536s ago: executing program 0 (id=6257): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000140)="c4", 0x1) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b65", 0x60, r7) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000000)={0x63, 0x5, 0x0, 0x3, 0x2, 0x6, "0b0909d70c5a4ece74e76d48f944c89a", 0x7, 0x80, 0x0, 0x99, 0x6, 0x40, 0x4}) creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6a55c0c4ada8324e) 829.63689ms ago: executing program 3 (id=6258): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) io_uring_setup(0x2ffa, &(0x7f0000000040)={0x0, 0x20c8a3, 0x4, 0xfffffffd, 0xe3}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) unshare(0x68040200) syz_usb_connect(0x3, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x1, 0xb2, 0x50, 0xcf, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x8, 0x6, 0x6, 0x5}}]}}]}}]}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x1900, 0x800, 0x0, &(0x7f0000000380)="ea810f84d845da35eb008761a7c95c71347e2bc538d8c18785997e26d0dee16e8aaf23dc8d582de8e29f7d26b352e1db62c2ca63221b6f1ee395c093d7a97c6a4e4f2c8d700aa8ba97cb1f3f80c9fee2f9b4f0e6e5d23ffbe433c6ae4093d6590a187d220e1c9a6e374d8c5c95c680654cf2ee7d5c462be1e406d97af692c684d64018023e88c9e1b56a7757fccec57c764dde12d9323bbd3e7b063f2512b66f253cfcae1378d25b68c4d8b705fff31dcae0b684b456633bbfb84450930d2ff61b7dccf77a9ab55335f2e2f6001d7d1b15"}, {0x8, 0xc800, 0x0, &(0x7f0000000480)="a13f0519d1451e90fa653345ca7bc91541cee79251e6ebfcf6aeb57eebbe014482db18f51f8c0898b943c9bf46baaa7752d5b5739c49b4291d53d39e6f86187d9c55ced25628c2a3a58b516b7ffcd136e5972a1c8884d282b67b283764f62e8d1924a8149d94ee28a9c6f4293bba66202df1fd2a07936d314c7f470b0a9c2261ec79ecfea7abce0085e87e7dff4c0d1c84a0080909f8077c14df4bfb6cb12ad4c38f29c97dfc260e026f9971ede9a0295b110eabfd5cdfececa2a10e63c23be487dfb867b407b602883af5ac63b481b6e5113dc66f35e8f5adeb1d07527d06"}, {0x200, 0x900, 0x0, &(0x7f0000000580)="922eb96eaef643acf24983a57ef0b16f19eeb732ab48ee0b7e84f07735146ecde5f33e482fa6e789e832c971cde5e1e6c28fe4f4305a0a6755a4d5a057013edf2d73c55ce3ba6cfeba4d8fb79d887765328406f0ad769e25efeacc533921fb780be35b545bd89a2f64564e40c213bbcac8dffc9e4fa32a9cdc7386064e34"}, {0x7, 0x200, 0x0, &(0x7f0000000600)="26e82b8ff415fa"}, {0x8, 0xc001, 0x0, &(0x7f0000000640)="2c22299b75b188ea"}, {0x8, 0x4400, 0x0, &(0x7f0000000680)="d9e7c01976103304cba5771c9b60b5eb859ac354a921b7c6db9c9a7bb6f7965f94ffc4e0d68fd380807414fc917dbc2e5169f940fb630c518143d127b470c6f4a0f8d9633de27b50acc7409e857b60f435e4fcd55586258541e4faf7f1952ca42658e7449d1ef7564bdffaec25d3e5e75b12105d6b3e3e96043185293279"}, {0xfffe, 0x7e01, 0x0, &(0x7f0000000700)="12efb62c428b7dc62eefe5247e408b727016a01ed6a1af70323ee091a9ffb8c076947a8a0ea56e1eb78c7c25db3dc7e218ddb9de9954c291141b7bc331dfb91269ce476002a1b4fdb00880579b5ac9762a30d2d604fd590e32a0ce116f7a09d537f62d1fa4ecc42e7098464ba14d6739c5aba715a1273aa402312fd338e54de8dffdf69037e5b6959aa4c58248687b3be014dc934cd2fd5b2fdb89896d1b78a55d072abd1b2414bef2351bff3ff835b6e05f668de17a8c99f489fcaa23208b721e020298a738b9dc66ddecf5ebb1f979cf2251890c69fb8330341dba15e2e2d3bf03eead90162291de9d60536b"}], 0x2}) 0s ago: executing program 2 (id=6259): pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3}}, 0xe8) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x30, 0x0, 0x101, 0x80000000, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]]}, 0x30}, 0x1, 0x0, 0x0, 0x20090}, 0x800) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x2404c090}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x184411, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) close(r3) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0xb, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@netfilter={0x0, 0x0, 0x5}}, 0x20) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) getsockname$l2tp6(r5, 0x0, &(0x7f0000000480)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) kernel console output (not intermixed with test programs): syz.4.5898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2130.018114][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2130.230641][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2130.400252][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2130.494429][ T30] audit: type=1326 audit(1769291893.588:9896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30348 comm="syz.4.5898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2130.531566][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2130.612177][ T30] audit: type=1326 audit(1769291893.588:9897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30348 comm="syz.4.5898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2130.644282][ T30] audit: type=1326 audit(1769291893.588:9898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30348 comm="syz.4.5898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2130.668778][ T30] audit: type=1326 audit(1769291893.588:9899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30348 comm="syz.4.5898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2130.766661][ T30] audit: type=1326 audit(1769291893.588:9900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30348 comm="syz.4.5898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2130.842581][ T30] audit: type=1326 audit(1769291893.608:9901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30348 comm="syz.4.5898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2130.930438][ T30] audit: type=1326 audit(1769291893.608:9902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30348 comm="syz.4.5898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2130.999345][ T30] audit: type=1326 audit(1769291893.608:9903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30348 comm="syz.4.5898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2131.064168][ T30] audit: type=1326 audit(1769291893.608:9904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30348 comm="syz.4.5898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2131.438142][T30370] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5903'. [ 2131.449394][T30370] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5903'. [ 2131.682586][T30372] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5906'. [ 2131.695319][T30372] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5906'. [ 2131.707165][T30372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5906'. [ 2131.832311][T18740] Bluetooth: hci1: unexpected event for opcode 0x0009 [ 2131.833822][T30375] ALSA: mixer_oss: invalid OSS volume '' [ 2131.953394][T30387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5905'. [ 2132.244194][T30372] bridge0: port 1(netdevsim0) entered disabled state [ 2132.314333][T30372] bond0: (slave bridge_slave_0): Releasing backup interface [ 2132.351690][T30387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2132.789251][T30411] blktrace: Concurrent blktraces are not allowed on sg0 [ 2132.986594][T30411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5910'. [ 2133.160078][T30384] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2133.260058][ T5917] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2133.394444][T30384] usb 5-1: config 0 has no interfaces? [ 2133.400565][T30384] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2133.430119][T30384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.480011][T30384] usb 5-1: config 0 descriptor?? [ 2133.550388][T23077] net_ratelimit: 20 callbacks suppressed [ 2133.550405][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2133.584431][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2133.598751][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2133.618620][ T5917] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2133.690086][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2133.726936][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.752257][ T5917] usb 4-1: config 0 descriptor?? [ 2133.778268][ T5917] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2133.840065][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2133.997181][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2134.042274][ T5917] usb 4-1: USB disconnect, device number 63 [ 2134.166119][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2134.280938][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2134.390634][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2134.520171][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2134.640171][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2134.750053][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2134.970063][ T5917] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2135.120191][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 2135.130429][ T5917] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 2135.139069][ T5917] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2135.148253][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2135.161488][ T5917] usb 3-1: config 1 has no interface number 0 [ 2135.175583][ T5917] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2135.195466][ T5917] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2135.220150][ T5917] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2135.237749][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.276567][ T5917] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 2135.465597][ T5917] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 2135.865557][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 2135.865576][ T30] audit: type=1326 audit(1769291899.918:9945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30430 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2135.915642][ T5917] usb 3-1: USB disconnect, device number 90 [ 2135.926470][ T5917] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 2135.964908][ T30] audit: type=1326 audit(1769291899.918:9946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30430 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2135.994943][T30384] usb 5-1: USB disconnect, device number 74 [ 2136.020899][ T30] audit: type=1326 audit(1769291899.948:9947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30430 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2136.046100][ T30] audit: type=1326 audit(1769291899.948:9948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30430 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2136.087963][ T30] audit: type=1326 audit(1769291899.948:9949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30430 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2136.136190][T30433] netlink: 'syz.0.5918': attribute type 15 has an invalid length. [ 2136.200051][ T30] audit: type=1326 audit(1769291899.948:9950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30430 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2136.224302][ T30] audit: type=1326 audit(1769291899.948:9951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30430 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2136.259713][ T30] audit: type=1326 audit(1769291899.948:9952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30430 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2136.380012][T30437] CUSE: info not properly terminated [ 2136.541905][T30441] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5920'. [ 2136.563556][ T30] audit: type=1326 audit(1769291899.958:9953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30430 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2136.613656][T30441] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5920'. [ 2136.617063][T30446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5920'. [ 2136.640083][ T30] audit: type=1326 audit(1769291899.958:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30430 comm="syz.0.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94a875b58e code=0x7ffc0000 [ 2138.566163][T28512] net_ratelimit: 30 callbacks suppressed [ 2138.566185][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2138.704894][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2138.820245][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2138.950196][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2139.068908][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2139.084421][T30481] fuse: Bad value for 'user_id' [ 2139.090269][T30481] fuse: Bad value for 'user_id' [ 2139.225531][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2139.371406][T20122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2139.516308][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2139.647906][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2139.690113][T18740] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 2139.718986][T30486] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 2139.821135][T20122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2141.073500][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2141.096144][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2141.127545][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2141.222537][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2141.280157][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2142.217641][T30501] chnl_net:caif_netlink_parms(): no params data found [ 2143.144191][T30501] bridge0: port 1(bridge_slave_0) entered blocking state [ 2143.351225][T18740] Bluetooth: hci5: command tx timeout [ 2143.369812][T30501] bridge0: port 1(bridge_slave_0) entered disabled state [ 2143.451528][T30537] fuse: Bad value for 'user_id' [ 2143.456532][T30537] fuse: Bad value for 'user_id' [ 2143.480945][T30501] bridge_slave_0: entered allmulticast mode [ 2143.493787][T30501] bridge_slave_0: entered promiscuous mode [ 2143.532386][T30501] bridge0: port 2(bridge_slave_1) entered blocking state [ 2143.621868][T30501] bridge0: port 2(bridge_slave_1) entered disabled state [ 2143.700245][T30501] bridge_slave_1: entered allmulticast mode [ 2143.758198][T30501] bridge_slave_1: entered promiscuous mode [ 2144.094178][T30501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2144.109182][T30501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2144.227341][T30543] syzkaller0: entered promiscuous mode [ 2144.233455][T30543] syzkaller0: entered allmulticast mode [ 2144.297087][T30541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5946'. [ 2144.338780][T30501] team0: Port device team_slave_0 added [ 2144.358269][T30541] tipc: Enabled bearer , priority 0 [ 2144.386709][T30540] tipc: Resetting bearer [ 2144.441859][T30540] tipc: Disabling bearer [ 2144.471215][T30501] team0: Port device team_slave_1 added [ 2144.477257][ T5978] net_ratelimit: 19 callbacks suppressed [ 2144.477275][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2144.719442][T28512] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 2144.729186][T28512] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2145.430368][T18740] Bluetooth: hci5: command tx timeout [ 2145.660266][T30567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5956'. [ 2145.713033][T28512] bond0 (unregistering): Released all slaves [ 2145.724003][T28512] bond1 (unregistering): Released all slaves [ 2145.761238][T30569] FAULT_INJECTION: forcing a failure. [ 2145.761238][T30569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2145.778434][T30569] CPU: 0 UID: 0 PID: 30569 Comm: syz.0.5957 Tainted: G L syzkaller #0 PREEMPT(full) [ 2145.778475][T30569] Tainted: [L]=SOFTLOCKUP [ 2145.778484][T30569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2145.778497][T30569] Call Trace: [ 2145.778506][T30569] [ 2145.778515][T30569] dump_stack_lvl+0xe8/0x150 [ 2145.778548][T30569] should_fail_ex+0x412/0x560 [ 2145.778581][T30569] strncpy_from_user+0x36/0x2b0 [ 2145.778613][T30569] getname_flags+0xf2/0x540 [ 2145.778642][T30569] do_sys_openat2+0xca/0x220 [ 2145.778673][T30569] ? __pfx_do_sys_openat2+0x10/0x10 [ 2145.778701][T30569] ? ksys_write+0x242/0x270 [ 2145.778723][T30569] ? __pfx_ksys_write+0x10/0x10 [ 2145.778746][T30569] __x64_sys_openat+0x138/0x170 [ 2145.778778][T30569] do_syscall_64+0xe2/0xf80 [ 2145.778808][T30569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2145.778826][T30569] ? trace_irq_disable+0x37/0x100 [ 2145.778851][T30569] ? clear_bhb_loop+0x60/0xb0 [ 2145.778875][T30569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2145.778894][T30569] RIP: 0033:0x7f94a879acb9 [ 2145.778913][T30569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2145.778930][T30569] RSP: 002b:00007f94a96ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2145.778951][T30569] RAX: ffffffffffffffda RBX: 00007f94a8a15fa0 RCX: 00007f94a879acb9 [ 2145.778967][T30569] RDX: 000000000000275a RSI: 0000200000000900 RDI: ffffffffffffff9c [ 2145.778980][T30569] RBP: 00007f94a96ea090 R08: 0000000000000000 R09: 0000000000000000 [ 2145.778993][T30569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2145.779005][T30569] R13: 00007f94a8a16038 R14: 00007f94a8a15fa0 R15: 00007f94a8b3fa48 [ 2145.779036][T30569] [ 2146.243466][T28512] bond2 (unregistering): Released all slaves [ 2146.259265][T28512] bond3 (unregistering): Released all slaves [ 2146.275984][T28512] bond4 (unregistering): Released all slaves [ 2146.296438][T28512] bond5 (unregistering): Released all slaves [ 2146.314176][T28512] bond6 (unregistering): Released all slaves [ 2146.420730][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2146.522199][T30501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2146.540903][T30501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2146.592995][T30501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2146.636164][T10980] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2146.860389][T30501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2146.867408][T30501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2146.975723][T30501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2147.510071][T18740] Bluetooth: hci5: command tx timeout [ 2147.616259][T28512] hsr_slave_0: left promiscuous mode [ 2147.644490][T28512] hsr_slave_1: left promiscuous mode [ 2148.518846][T30622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5971'. [ 2148.838726][T30624] fuse: Bad value for 'user_id' [ 2148.843816][T30624] fuse: Bad value for 'user_id' [ 2149.608528][T18740] Bluetooth: hci5: command tx timeout [ 2150.140230][T30635] input: syz1 as /devices/virtual/input/input255 [ 2150.372463][T30635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5973'. [ 2150.381800][T30635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5973'. [ 2152.419803][T30501] hsr_slave_0: entered promiscuous mode [ 2152.426593][T30501] hsr_slave_1: entered promiscuous mode [ 2152.434575][T30501] debugfs: 'hsr0' already exists in 'hsr' [ 2152.440506][T30501] Cannot create hsr debugfs directory [ 2152.540128][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2152.760847][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2153.560206][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2153.631724][ T5917] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2153.902150][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2153.942329][ T5917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2153.989109][ T5917] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 2154.008156][T28512] IPVS: stop unused estimator thread 0... [ 2154.009421][ T5917] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 2154.029198][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2154.060150][ T5917] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 2154.096298][ T5917] usb 4-1: config 129 has no interface number 0 [ 2154.113177][ T5917] usb 4-1: config 129 has no interface number 1 [ 2154.119558][ T5917] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2154.180098][ T5917] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 2154.217210][ T5917] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 2154.241634][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2154.270054][ T5917] usb 4-1: config 129 interface 135 has no altsetting 0 [ 2154.287783][ T5917] usb 4-1: config 129 interface 5 has no altsetting 0 [ 2154.311608][ T5917] usb 4-1: string descriptor 0 read error: -22 [ 2154.330130][ T5917] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 2154.370567][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2154.379682][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.445309][ T5917] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2154.453670][T30689] FAULT_INJECTION: forcing a failure. [ 2154.453670][T30689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2154.477144][ T5917] usb 4-1: MIDIStreaming interface descriptor not found [ 2154.490082][T30689] CPU: 1 UID: 0 PID: 30689 Comm: syz.0.5984 Tainted: G L syzkaller #0 PREEMPT(full) [ 2154.490110][T30689] Tainted: [L]=SOFTLOCKUP [ 2154.490117][T30689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2154.490127][T30689] Call Trace: [ 2154.490136][T30689] [ 2154.490143][T30689] dump_stack_lvl+0xe8/0x150 [ 2154.490172][T30689] should_fail_ex+0x412/0x560 [ 2154.490202][T30689] _copy_to_user+0x31/0xb0 [ 2154.490222][T30689] sk_getsockopt+0x1bee/0x27d0 [ 2154.490253][T30689] ? __pfx_sk_getsockopt+0x10/0x10 [ 2154.490301][T30689] ? aa_sk_perm+0x15a/0x960 [ 2154.490326][T30689] ? __might_fault+0xaf/0x130 [ 2154.490371][T30689] ? __might_fault+0xaf/0x130 [ 2154.490415][T30689] do_sock_getsockopt+0x223/0x3f0 [ 2154.490446][T30689] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2154.490474][T30689] ? __fget_files+0x3a0/0x420 [ 2154.490495][T30689] ? __fget_files+0x2a/0x420 [ 2154.490521][T30689] __x64_sys_getsockopt+0x1a4/0x240 [ 2154.490558][T30689] do_syscall_64+0xe2/0xf80 [ 2154.490586][T30689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.490603][T30689] ? trace_irq_disable+0x37/0x100 [ 2154.490628][T30689] ? clear_bhb_loop+0x60/0xb0 [ 2154.490651][T30689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.490670][T30689] RIP: 0033:0x7f94a879acb9 [ 2154.490688][T30689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2154.490706][T30689] RSP: 002b:00007f94a96ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2154.490728][T30689] RAX: ffffffffffffffda RBX: 00007f94a8a15fa0 RCX: 00007f94a879acb9 [ 2154.490742][T30689] RDX: 0000000000000043 RSI: 0000000000000001 RDI: 0000000000000003 [ 2154.490754][T30689] RBP: 00007f94a96ea090 R08: 0000200000000200 R09: 0000000000000000 [ 2154.490767][T30689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2154.490779][T30689] R13: 00007f94a8a16038 R14: 00007f94a8a15fa0 R15: 00007f94a8b3fa48 [ 2154.490810][T30689] [ 2154.601258][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2154.767933][T30693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5983'. [ 2154.839601][T30696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5985'. [ 2155.113080][T30384] usb 4-1: USB disconnect, device number 64 [ 2155.170203][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2155.320034][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2155.411037][T30501] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2155.497702][T30501] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2155.569791][T30501] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2155.584693][T30501] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2156.429248][T30384] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2156.629552][T30384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2156.641984][T30501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2156.650707][T30384] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 2156.684319][T30384] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 2156.708263][T30501] 8021q: adding VLAN 0 to HW filter on device team0 [ 2156.740205][T28512] bridge0: port 1(bridge_slave_0) entered blocking state [ 2156.747527][T28512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2156.756069][T30384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.812864][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 2156.820110][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2156.832466][T30384] usb 4-1: config 0 descriptor?? [ 2156.889567][T30501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2156.930991][T30501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2157.255265][T30501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2157.311261][T30384] hid_parser_main: 18 callbacks suppressed [ 2157.311278][T30384] cypress 0003:04B4:DE64.002C: unknown main item tag 0x0 [ 2157.332373][T30384] cypress 0003:04B4:DE64.002C: unknown main item tag 0x0 [ 2157.359469][T30384] cypress 0003:04B4:DE64.002C: unknown main item tag 0x0 [ 2157.377164][T30384] cypress 0003:04B4:DE64.002C: unknown main item tag 0x0 [ 2157.397663][T30384] cypress 0003:04B4:DE64.002C: unknown main item tag 0x0 [ 2157.415417][T30384] cypress 0003:04B4:DE64.002C: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.3-1/input0 [ 2157.538914][T30501] veth0_vlan: entered promiscuous mode [ 2157.685248][T30501] veth1_vlan: entered promiscuous mode [ 2157.750991][T10980] net_ratelimit: 9 callbacks suppressed [ 2157.751011][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2157.870950][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2158.137289][T30501] veth0_macvtap: entered promiscuous mode [ 2158.244818][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2158.343658][T30501] veth1_macvtap: entered promiscuous mode [ 2158.458682][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2158.823824][T30501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2159.070072][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2159.114518][T30501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2159.230141][T23077] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2159.275552][T23077] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2159.299585][T23077] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2159.332089][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2159.368934][T23077] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2159.471738][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2159.823948][ T5917] usb 4-1: USB disconnect, device number 65 [ 2159.890503][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2160.006202][T20122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2160.028353][T20122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2160.042630][T30782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5997'. [ 2160.082269][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2160.264020][T23077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2160.280017][T23077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2160.280741][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2160.658672][T30797] veth1_macvtap: left promiscuous mode [ 2160.888061][T30795] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6000'. [ 2160.910013][ T5917] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2161.082180][ T5917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2161.102834][ T5917] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 2161.147704][ T5917] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 2161.186683][ T5917] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 2161.231656][ T5917] usb 4-1: config 129 has no interface number 0 [ 2161.240573][ T5917] usb 4-1: config 129 has no interface number 1 [ 2161.246908][ T5917] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2161.317039][ T5917] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 2161.333405][ T5917] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 2161.350964][ T5917] usb 4-1: config 129 interface 135 has no altsetting 0 [ 2161.361056][ T5917] usb 4-1: config 129 interface 5 has no altsetting 0 [ 2161.409048][T30815] input: syz0 as /devices/virtual/input/input256 [ 2161.587822][ T5917] usb 4-1: string descriptor 0 read error: -22 [ 2161.595138][ T5917] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 2161.629679][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.686777][ T5917] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2161.707858][ T5917] usb 4-1: MIDIStreaming interface descriptor not found [ 2162.000694][ T5917] usb 4-1: USB disconnect, device number 66 [ 2162.851987][T10980] net_ratelimit: 18 callbacks suppressed [ 2162.852009][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2163.050083][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2163.214534][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2163.390579][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2163.550751][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2163.690242][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2163.850479][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2164.020008][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2164.051897][T30848] tipc: Can't bind to reserved service type 2 [ 2164.062703][T30848] netlink: 'syz.0.6010': attribute type 10 has an invalid length. [ 2164.075115][T30848] team0: Port device dummy0 added [ 2164.130029][T20122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2164.217129][T30854] FAULT_INJECTION: forcing a failure. [ 2164.217129][T30854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2164.260117][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2164.271512][T30854] CPU: 0 UID: 0 PID: 30854 Comm: syz.2.6013 Tainted: G L syzkaller #0 PREEMPT(full) [ 2164.271546][T30854] Tainted: [L]=SOFTLOCKUP [ 2164.271554][T30854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2164.271566][T30854] Call Trace: [ 2164.271575][T30854] [ 2164.271584][T30854] dump_stack_lvl+0xe8/0x150 [ 2164.271615][T30854] should_fail_ex+0x412/0x560 [ 2164.271649][T30854] _copy_from_user+0x2d/0xb0 [ 2164.271673][T30854] restore_altstack+0xab/0x4c0 [ 2164.271696][T30854] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2164.271718][T30854] ? __pfx_restore_altstack+0x10/0x10 [ 2164.271743][T30854] ? _raw_spin_unlock_irq+0x23/0x50 [ 2164.271765][T30854] __ia32_sys_rt_sigreturn+0x2bd/0x8e0 [ 2164.271796][T30854] ? __lock_acquire+0x6b5/0x2cf0 [ 2164.271815][T30854] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 2164.271837][T30854] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2164.271855][T30854] ? signal_setup_done+0x2ce/0x3b0 [ 2164.271874][T30854] ? arch_do_signal_or_restart+0x4be/0x830 [ 2164.271900][T30854] ? __task_pid_nr_ns+0x28/0x490 [ 2164.271927][T30854] ? __task_pid_nr_ns+0x28/0x490 [ 2164.271954][T30854] do_syscall_64+0xe2/0xf80 [ 2164.271975][T30854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.271989][T30854] ? trace_irq_disable+0x37/0x100 [ 2164.272009][T30854] ? clear_bhb_loop+0x60/0xb0 [ 2164.272027][T30854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.272041][T30854] RIP: 0033:0x7f93e133c0d9 [ 2164.272054][T30854] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 2164.272067][T30854] RSP: 002b:00007f93e2285a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 2164.272083][T30854] RAX: ffffffffffffffda RBX: 00007f93e1615fa0 RCX: 00007f93e133c0d9 [ 2164.272094][T30854] RDX: 00007f93e2285a80 RSI: 00007f93e2285bb0 RDI: 0000000000000021 [ 2164.272104][T30854] RBP: 00007f93e2286090 R08: 0000000000000000 R09: 0000000000000000 [ 2164.272113][T30854] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2164.272122][T30854] R13: 00007f93e1616038 R14: 00007f93e1615fa0 R15: 00007f93e173fa48 [ 2164.272145][T30854] [ 2165.014102][T30399] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2165.220402][T30399] usb 2-1: Using ep0 maxpacket: 32 [ 2165.252494][T30399] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2165.262543][T30399] usb 2-1: config 0 has no interface number 0 [ 2165.310617][T30399] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2165.326919][T30399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.391238][T30399] usb 2-1: Product: syz [ 2165.434770][T30399] usb 2-1: Manufacturer: syz [ 2165.461913][T30399] usb 2-1: SerialNumber: syz [ 2165.487191][T30399] usb 2-1: config 0 descriptor?? [ 2165.523942][T30399] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2165.853408][T30399] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2165.870446][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.881784][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.920201][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 13 [ 2165.978419][T30399] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2166.052243][T30871] netlink: 'syz.4.6017': attribute type 4 has an invalid length. [ 2166.072442][T30871] netlink: 'syz.4.6017': attribute type 4 has an invalid length. [ 2167.753480][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2167.761863][T30391] usb 2-1: USB disconnect, device number 74 [ 2167.772774][T30391] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2167.827268][T30391] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2167.868069][ T5984] net_ratelimit: 25 callbacks suppressed [ 2167.868096][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2167.901571][T30391] quatech2 2-1:0.51: device disconnected [ 2168.030186][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2168.141125][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2168.250429][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2168.361735][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2168.481946][T30894] netlink: 'syz.1.6023': attribute type 15 has an invalid length. [ 2168.506114][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2168.506153][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 2168.506205][ T30] audit: type=1326 audit(1769291932.508:9983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30887 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b139acb9 code=0x7ffc0000 [ 2168.560093][ T30] audit: type=1326 audit(1769291932.508:9984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30887 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b139acb9 code=0x7ffc0000 [ 2168.583105][ T30] audit: type=1326 audit(1769291932.508:9985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30887 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f69b139acb9 code=0x7ffc0000 [ 2168.664600][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2169.050947][T30900] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6025'. [ 2169.060082][T30900] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6025'. [ 2169.095905][T30902] netlink: 'syz.4.6024': attribute type 15 has an invalid length. [ 2169.113499][ T30] audit: type=1326 audit(1769291932.508:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30887 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b139acb9 code=0x7ffc0000 [ 2169.156809][T30900] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2169.191934][T30382] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2169.202108][ T30] audit: type=1326 audit(1769291932.508:9987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30887 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b139acb9 code=0x7ffc0000 [ 2169.227305][ T30] audit: type=1326 audit(1769291932.508:9988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30887 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69b139acb9 code=0x7ffc0000 [ 2169.340068][ T30] audit: type=1326 audit(1769291932.518:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30887 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b139acb9 code=0x7ffc0000 [ 2169.360677][T30382] usb 4-1: Using ep0 maxpacket: 32 [ 2169.495204][T30382] usb 4-1: config 0 has an invalid interface number: 76 but max is 0 [ 2169.514206][ T30] audit: type=1326 audit(1769291932.518:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30887 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f69b139acb9 code=0x7ffc0000 [ 2169.536486][T30382] usb 4-1: config 0 has no interface number 0 [ 2169.568230][ T30] audit: type=1326 audit(1769291932.518:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30887 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b139acb9 code=0x7ffc0000 [ 2169.658140][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2169.762371][T30382] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 2169.781473][T30382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.800303][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2169.837126][T30382] usb 4-1: Product: syz [ 2169.847951][T30382] usb 4-1: Manufacturer: syz [ 2169.851749][ T30] audit: type=1326 audit(1769291932.518:9992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30887 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f69b139acb9 code=0x7ffc0000 [ 2169.910531][T30382] usb 4-1: SerialNumber: syz [ 2169.944727][T30382] usb 4-1: config 0 descriptor?? [ 2169.981665][T30382] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 2170.019248][T30382] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2170.065515][T30382] dvb-usb: bulk message failed: -8 (2/0) [ 2170.126328][T30912] netlink: 'syz.2.6027': attribute type 2 has an invalid length. [ 2170.149176][T30382] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2170.231538][T30893] dvb-usb: bulk message failed: -8 (3/0) [ 2170.242048][T30382] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 2170.263773][T30893] dw2102: i2c transfer failed. [ 2170.268842][T30893] dvb-usb: bulk message failed: -8 (3/0) [ 2170.290119][T30382] usb 4-1: media controller created [ 2170.319123][T30893] dw2102: i2c transfer failed. [ 2170.382736][T30382] dvb-usb: bulk message failed: -8 (6/0) [ 2170.478197][T30382] dw2102: i2c transfer failed. [ 2170.515588][T30382] dvb-usb: bulk message failed: -8 (6/0) [ 2170.531240][T30382] dw2102: i2c transfer failed. [ 2170.544077][T30382] dvb-usb: bulk message failed: -8 (6/0) [ 2170.570432][T30382] dw2102: i2c transfer failed. [ 2170.598144][T30382] dvb-usb: bulk message failed: -8 (6/0) [ 2170.639000][T30382] dw2102: i2c transfer failed. [ 2170.657215][T30382] dvb-usb: bulk message failed: -8 (6/0) [ 2170.688715][T30382] dw2102: i2c transfer failed. [ 2170.701058][T30382] dvb-usb: bulk message failed: -8 (6/0) [ 2170.706783][T30382] dw2102: i2c transfer failed. [ 2170.731962][T30382] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2170.778143][T30921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6028'. [ 2170.837971][T30382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2170.932986][T30382] dvb-usb: bulk message failed: -8 (3/0) [ 2170.978416][T30382] dw2102: command 0x0e transfer failed. [ 2170.994556][T30382] dvb-usb: bulk message failed: -8 (3/0) [ 2171.011956][T30382] dw2102: command 0x0e transfer failed. [ 2171.383234][T30382] dvb-usb: bulk message failed: -8 (3/0) [ 2171.391203][T30382] dw2102: command 0x0e transfer failed. [ 2171.918861][T30382] dvb-usb: bulk message failed: -8 (3/0) [ 2171.958120][T30382] dw2102: command 0x0e transfer failed. [ 2171.982275][T30382] dvb-usb: bulk message failed: -8 (1/0) [ 2172.060065][T30382] dw2102: command 0x51 transfer failed. [ 2172.387291][T30938] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6033'. [ 2172.607678][T30382] DVB: Unable to find symbol ds3000_attach() [ 2172.637978][T30382] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 2172.901132][T30382] rc_core: IR keymap rc-su3000 not found [ 2173.001445][T23077] net_ratelimit: 19 callbacks suppressed [ 2173.001467][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2173.023061][T30382] Registered IR keymap rc-empty [ 2173.076444][T30382] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 2173.209835][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2173.248418][T30382] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input257 [ 2173.385774][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2173.400678][T30382] dvb-usb: schedule remote query interval to 150 msecs. [ 2173.417239][T30382] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2173.481576][T30382] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 2173.562362][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2173.570119][T17616] dvb-usb: bulk message failed: -8 (1/0) [ 2173.575782][T17616] dw2102: i2c transfer failed. [ 2173.670129][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2173.729838][T30382] usb 4-1: USB disconnect, device number 67 [ 2173.894261][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2174.041427][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2174.160956][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2174.201171][T30382] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 2174.256702][T30963] program syz.0.6038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2174.320050][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2174.368774][T30959] netdevsim netdevsim4: Direct firmware load for / [ 2174.368774][T30959] failed with error -2 [ 2174.386504][T30959] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 2174.386504][T30959] [ 2174.488442][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2175.080279][T30976] netlink: 'syz.3.6039': attribute type 15 has an invalid length. [ 2175.219206][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 2175.219227][ T30] audit: type=1326 audit(1769291939.108:10041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30965 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e839acb9 code=0x7ffc0000 [ 2175.467703][ T30] audit: type=1326 audit(1769291939.108:10042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30965 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e839acb9 code=0x7ffc0000 [ 2175.555447][ T30] audit: type=1326 audit(1769291939.108:10043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30965 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f20e839acb9 code=0x7ffc0000 [ 2175.717100][ T30] audit: type=1326 audit(1769291939.108:10044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30965 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e839acb9 code=0x7ffc0000 [ 2176.300546][ T30] audit: type=1326 audit(1769291939.108:10045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30965 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e839acb9 code=0x7ffc0000 [ 2176.386014][ T30] audit: type=1326 audit(1769291939.108:10046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30965 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e839acb9 code=0x7ffc0000 [ 2176.624630][ T30] audit: type=1326 audit(1769291939.108:10047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30965 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f20e839acb9 code=0x7ffc0000 [ 2176.768486][ T30] audit: type=1326 audit(1769291939.108:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30965 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e839acb9 code=0x7ffc0000 [ 2176.856319][ T30] audit: type=1326 audit(1769291939.108:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30965 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f20e839acb9 code=0x7ffc0000 [ 2176.926223][ T30] audit: type=1326 audit(1769291939.108:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30965 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e839acb9 code=0x7ffc0000 [ 2178.192101][T31004] blktrace: Concurrent blktraces are not allowed on sg0 [ 2178.201875][T23077] net_ratelimit: 26 callbacks suppressed [ 2178.201895][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2178.249811][T31004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6047'. [ 2178.341077][T31009] xt_TCPMSS: Only works on TCP SYN packets [ 2178.473305][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2178.738015][T30382] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2178.920504][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2178.922956][ T5978] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2179.037527][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2179.100027][T30382] usb 2-1: Using ep0 maxpacket: 32 [ 2179.200248][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2179.243703][T30382] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2179.269678][T30382] usb 2-1: config 0 has no interface number 0 [ 2179.326654][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2179.365609][T30382] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2179.387355][T30382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.411059][T30382] usb 2-1: Product: syz [ 2179.422587][T30382] usb 2-1: Manufacturer: syz [ 2179.437988][T30382] usb 2-1: SerialNumber: syz [ 2179.450062][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2179.477651][T30382] usb 2-1: config 0 descriptor?? [ 2179.502137][T30382] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2179.623752][T31013] netlink: 'syz.3.6050': attribute type 2 has an invalid length. [ 2179.650595][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2179.735772][T30382] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2179.801287][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2179.829759][T30382] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2179.930010][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2179.989284][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 12 [ 2181.845252][T31035] netlink: 'syz.4.6054': attribute type 15 has an invalid length. [ 2181.866125][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 2181.866146][ T30] audit: type=1326 audit(1769291945.868:10080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31032 comm="syz.4.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2182.156118][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2182.157644][T30391] usb 2-1: USB disconnect, device number 75 [ 2182.290566][ T30] audit: type=1326 audit(1769291945.868:10081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31032 comm="syz.4.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2182.313927][T30391] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2182.357366][T30391] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2182.383269][ T30] audit: type=1326 audit(1769291945.868:10082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31032 comm="syz.4.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2182.412639][T30391] quatech2 2-1:0.51: device disconnected [ 2182.459401][ T30] audit: type=1326 audit(1769291945.878:10083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31032 comm="syz.4.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2182.589980][ T30] audit: type=1326 audit(1769291945.878:10084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31032 comm="syz.4.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2182.691815][ T30] audit: type=1326 audit(1769291945.878:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31032 comm="syz.4.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2182.773660][ T30] audit: type=1326 audit(1769291945.878:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31032 comm="syz.4.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2182.870211][ T30] audit: type=1326 audit(1769291945.878:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31032 comm="syz.4.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2183.031231][T31047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6056'. [ 2183.130019][ T30] audit: type=1326 audit(1769291945.878:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31032 comm="syz.4.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2183.230369][ T30] audit: type=1326 audit(1769291945.888:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31032 comm="syz.4.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318ad9acb9 code=0x7ffc0000 [ 2183.273345][ T5974] net_ratelimit: 20 callbacks suppressed [ 2183.273362][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2183.500378][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2183.611496][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2183.720097][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2183.843285][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2183.991710][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2184.120230][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2184.233605][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2184.350257][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2184.461228][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2185.038528][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2185.066757][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2185.080294][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2185.108047][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2185.124394][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2185.483426][T31068] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6063'. [ 2185.584702][T31067] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6063'. [ 2186.335396][T31073] CUSE: info not properly terminated [ 2186.371214][T31065] chnl_net:caif_netlink_parms(): no params data found [ 2186.770773][T30391] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2186.824220][T31065] bridge0: port 1(bridge_slave_0) entered blocking state [ 2186.834902][T31065] bridge0: port 1(bridge_slave_0) entered disabled state [ 2186.845397][T31065] bridge_slave_0: entered allmulticast mode [ 2186.853433][T31065] bridge_slave_0: entered promiscuous mode [ 2186.862512][T31065] bridge0: port 2(bridge_slave_1) entered blocking state [ 2186.881377][T31065] bridge0: port 2(bridge_slave_1) entered disabled state [ 2186.897114][T31065] bridge_slave_1: entered allmulticast mode [ 2186.904642][T31065] bridge_slave_1: entered promiscuous mode [ 2186.952195][T30391] usb 3-1: Using ep0 maxpacket: 16 [ 2186.962123][T30391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2186.987212][T30391] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2187.030016][T30391] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 2187.067572][T30391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.075807][T30399] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2187.142741][T30391] usb 3-1: config 0 descriptor?? [ 2187.240290][T30399] usb 4-1: Using ep0 maxpacket: 32 [ 2187.250131][T30399] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2187.259595][T30399] usb 4-1: config 0 has no interface number 0 [ 2187.271177][T18740] Bluetooth: hci2: command tx timeout [ 2187.287376][T31086] netdevsim netdevsim0: Direct firmware load for / [ 2187.287376][T31086] failed with error -2 [ 2187.312649][T30399] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2187.322168][T30399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.330421][T30399] usb 4-1: Product: syz [ 2187.334738][T30399] usb 4-1: Manufacturer: syz [ 2187.339392][T30399] usb 4-1: SerialNumber: syz [ 2187.346697][T30399] usb 4-1: config 0 descriptor?? [ 2187.356795][T30399] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2187.369724][T31086] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 2187.369724][T31086] [ 2187.431144][T31077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2187.461747][T31077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.591608][T30399] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2187.737520][ T5978] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2187.749718][T30399] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2187.791642][ T5978] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2187.882128][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 12 [ 2187.950132][T31065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2188.203717][ T5978] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.339780][ T5978] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2188.457575][T31065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2188.613161][ T5978] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.655148][ T5978] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2188.710342][T20122] net_ratelimit: 14 callbacks suppressed [ 2188.710366][T20122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2188.876580][ T5978] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.905813][ T5978] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2188.980311][T20122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2189.003384][T31065] team0: Port device team_slave_0 added [ 2189.032548][T31091] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 2189.058577][T31065] team0: Port device team_slave_1 added [ 2189.190120][T28512] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2189.214050][T31065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2189.237311][T31065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2189.298828][T31065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2189.330266][T20122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2189.348021][T31065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2189.362143][T18740] Bluetooth: hci2: command tx timeout [ 2189.373422][T31065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2189.509741][T31065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2189.643240][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2189.866076][T31065] hsr_slave_0: entered promiscuous mode [ 2189.895478][T31065] hsr_slave_1: entered promiscuous mode [ 2189.909347][T31065] debugfs: 'hsr0' already exists in 'hsr' [ 2189.925704][T31065] Cannot create hsr debugfs directory [ 2189.942053][T31099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6069'. [ 2190.057234][T31101] xt_TCPMSS: Only works on TCP SYN packets [ 2190.719207][T30391] usbhid 3-1:0.0: can't add hid device: -71 [ 2190.725502][T30391] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2190.787382][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2190.788699][T17616] usb 4-1: USB disconnect, device number 68 [ 2190.895187][T17616] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2190.915219][T17616] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2190.926583][T31105] input: syz1 as /devices/virtual/input/input258 [ 2190.935601][T30391] usb 3-1: USB disconnect, device number 91 [ 2190.957044][T31105] FAULT_INJECTION: forcing a failure. [ 2190.957044][T31105] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.084924][T17616] quatech2 4-1:0.51: device disconnected [ 2191.113371][T31105] CPU: 0 UID: 0 PID: 31105 Comm: syz.3.6071 Tainted: G L syzkaller #0 PREEMPT(full) [ 2191.113395][T31105] Tainted: [L]=SOFTLOCKUP [ 2191.113401][T31105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2191.113410][T31105] Call Trace: [ 2191.113416][T31105] [ 2191.113423][T31105] dump_stack_lvl+0xe8/0x150 [ 2191.113448][T31105] should_fail_ex+0x412/0x560 [ 2191.113473][T31105] should_failslab+0xa8/0x100 [ 2191.113494][T31105] __kmalloc_noprof+0xde/0x7e0 [ 2191.113508][T31105] ? kfree+0x4d/0x650 [ 2191.113527][T31105] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2191.113555][T31105] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2191.113579][T31105] ? tomoyo_domain+0xd7/0x130 [ 2191.113604][T31105] ? tomoyo_path_number_perm+0x219/0x630 [ 2191.113622][T31105] tomoyo_path_number_perm+0x246/0x630 [ 2191.113642][T31105] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2191.113659][T31105] ? __lock_acquire+0x6b5/0x2cf0 [ 2191.113685][T31105] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2191.113723][T31105] ? __fget_files+0x2a/0x420 [ 2191.113743][T31105] ? __fget_files+0x2a/0x420 [ 2191.113760][T31105] ? __fget_files+0x3a0/0x420 [ 2191.113778][T31105] ? __fget_files+0x2a/0x420 [ 2191.113799][T31105] security_file_ioctl+0xc3/0x2a0 [ 2191.113817][T31105] __se_sys_ioctl+0x47/0x170 [ 2191.113842][T31105] do_syscall_64+0xe2/0xf80 [ 2191.113864][T31105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.113878][T31105] ? trace_irq_disable+0x37/0x100 [ 2191.113897][T31105] ? clear_bhb_loop+0x60/0xb0 [ 2191.113915][T31105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.113933][T31105] RIP: 0033:0x7f20e839acb9 [ 2191.113947][T31105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2191.113959][T31105] RSP: 002b:00007f20e92a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2191.113975][T31105] RAX: ffffffffffffffda RBX: 00007f20e8615fa0 RCX: 00007f20e839acb9 [ 2191.113986][T31105] RDX: 0000200000000500 RSI: 0000000040304580 RDI: 0000000000000004 [ 2191.113996][T31105] RBP: 00007f20e92a0090 R08: 0000000000000000 R09: 0000000000000000 [ 2191.114005][T31105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2191.114014][T31105] R13: 00007f20e8616038 R14: 00007f20e8615fa0 R15: 00007f20e873fa48 [ 2191.114038][T31105] [ 2191.114061][T31105] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2191.440050][T18740] Bluetooth: hci2: command tx timeout [ 2193.060857][T31120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6075'. [ 2193.510148][ T5833] Bluetooth: hci2: command tx timeout [ 2193.834454][ T5978] bond0 (unregistering): Released all slaves [ 2193.846595][ T5978] bond1 (unregistering): Released all slaves [ 2193.860710][ T5978] bond2 (unregistering): Released all slaves [ 2193.874957][ T5978] bond3 (unregistering): Released all slaves [ 2193.889419][ T5978] bond4 (unregistering): Released all slaves [ 2193.915089][ T5978] bond5 (unregistering): Released all slaves [ 2193.929062][ T5978] bond6 (unregistering): Released all slaves [ 2193.943545][ T5978] bond7 (unregistering): Released all slaves [ 2193.967169][ T5978] bond8 (unregistering): Released all slaves [ 2193.983991][ T5978] bond9 (unregistering): Released all slaves [ 2194.002639][ T5978] bond10 (unregistering): Released all slaves [ 2194.018267][ T5978] bond11 (unregistering): Released all slaves [ 2194.072861][T20122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2194.107968][T31120] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2194.680120][T20149] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2194.910052][T23077] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2194.920031][T20149] usb 3-1: Using ep0 maxpacket: 32 [ 2194.928870][T20149] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2194.938365][T20149] usb 3-1: config 40 has an invalid interface number: 160 but max is 0 [ 2194.947300][T20149] usb 3-1: config 40 has an invalid interface descriptor of length 6, skipping [ 2194.956683][T20149] usb 3-1: config 40 has an invalid descriptor of length 0, skipping remainder of the config [ 2194.968064][T20149] usb 3-1: config 40 has no interface number 0 [ 2194.993300][T20149] usb 3-1: config 40 interface 160 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2195.024718][T20149] usb 3-1: config 40 interface 160 has no altsetting 0 [ 2195.127144][T20149] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=74.b7 [ 2195.173199][T20149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.185254][T20149] usb 3-1: Product: syz [ 2195.203602][T20149] usb 3-1: Manufacturer: syz [ 2195.225082][T20149] usb 3-1: SerialNumber: syz [ 2195.401051][T31155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6082'. [ 2195.575275][T31129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2195.587852][T31129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2195.682898][ T5978] hsr_slave_0: left promiscuous mode [ 2195.707359][ T5978] hsr_slave_1: left promiscuous mode [ 2195.812714][ T5978] veth0_macvtap: left promiscuous mode [ 2195.826127][ T5978] veth1_vlan: left promiscuous mode [ 2195.837428][ T5978] veth0_vlan: left promiscuous mode [ 2197.452700][T20149] usb 3-1: USB disconnect, device number 92 [ 2198.856552][T31199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6089'. [ 2199.126483][T31179] netdevsim netdevsim3: Direct firmware load for / [ 2199.126483][T31179] failed with error -2 [ 2199.150427][T30391] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2199.160130][T31179] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 2199.160130][T31179] [ 2199.222975][T31163] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2199.340777][T30391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2199.465045][T30391] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2199.504688][T30391] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2199.549989][T31163] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2199.604861][T30391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.623311][T30391] usb 3-1: config 0 descriptor?? [ 2199.653973][T30391] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2199.892181][T17616] usb 3-1: USB disconnect, device number 93 [ 2200.106506][T31218] syzkaller0: entered promiscuous mode [ 2200.144758][T31218] syzkaller0: entered allmulticast mode [ 2200.160023][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2200.430832][T31162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2200.873408][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2201.221328][T31243] FAULT_INJECTION: forcing a failure. [ 2201.221328][T31243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2201.286339][T31243] CPU: 0 UID: 0 PID: 31243 Comm: syz.3.6097 Tainted: G L syzkaller #0 PREEMPT(full) [ 2201.286375][T31243] Tainted: [L]=SOFTLOCKUP [ 2201.286382][T31243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2201.286396][T31243] Call Trace: [ 2201.286405][T31243] [ 2201.286415][T31243] dump_stack_lvl+0xe8/0x150 [ 2201.286448][T31243] should_fail_ex+0x412/0x560 [ 2201.286486][T31243] _copy_from_user+0x2d/0xb0 [ 2201.286511][T31243] ___sys_recvmsg+0x175/0x590 [ 2201.286540][T31243] ? __pfx____sys_recvmsg+0x10/0x10 [ 2201.286567][T31243] ? __fget_files+0x2a/0x420 [ 2201.286634][T31243] do_recvmmsg+0x334/0x800 [ 2201.286665][T31243] ? __pfx_do_recvmmsg+0x10/0x10 [ 2201.286701][T31243] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2201.286751][T31243] __x64_sys_recvmmsg+0x198/0x250 [ 2201.286777][T31243] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2201.286812][T31243] do_syscall_64+0xe2/0xf80 [ 2201.286842][T31243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2201.286863][T31243] ? trace_irq_disable+0x37/0x100 [ 2201.286890][T31243] ? clear_bhb_loop+0x60/0xb0 [ 2201.286916][T31243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2201.286938][T31243] RIP: 0033:0x7f20e839acb9 [ 2201.286957][T31243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2201.286975][T31243] RSP: 002b:00007f20e925e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2201.286999][T31243] RAX: ffffffffffffffda RBX: 00007f20e8616180 RCX: 00007f20e839acb9 [ 2201.287014][T31243] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000005 [ 2201.287028][T31243] RBP: 00007f20e925e090 R08: 0000000000000000 R09: 0000000000000000 [ 2201.287040][T31243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2201.287053][T31243] R13: 00007f20e8616218 R14: 00007f20e8616180 R15: 00007f20e873fa48 [ 2201.287087][T31243] [ 2201.635017][T31065] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2201.679982][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2201.707493][T31065] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2201.815079][T31240] netlink: 'syz.0.6096': attribute type 2 has an invalid length. [ 2201.860251][T31065] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2201.901987][T31065] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2201.970480][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2202.100323][T17616] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 2202.130119][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2202.321999][T17616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2202.343159][T31065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2202.355218][T17616] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2202.392136][T17616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2202.424363][T17616] usb 2-1: config 0 descriptor?? [ 2202.430341][T31249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2202.493420][T31065] 8021q: adding VLAN 0 to HW filter on device team0 [ 2202.684068][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 2202.691341][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2202.762085][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2202.769335][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2202.899995][T30382] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2202.913966][T31161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2202.919421][T17616] elan 0003:04F3:0755.002D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 2203.093679][T31249] input: syz0 as /devices/virtual/input/input259 [ 2203.113404][T30382] usb 3-1: config 0 has no interfaces? [ 2203.122985][T30382] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2203.132425][T31161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2203.166974][T30382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.206465][T31065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2203.257164][T17616] usb 2-1: USB disconnect, device number 76 [ 2203.279588][T30382] usb 3-1: config 0 descriptor?? [ 2203.786627][T31275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6101'. [ 2204.147472][T31065] veth0_vlan: entered promiscuous mode [ 2204.320644][T31162] net_ratelimit: 2 callbacks suppressed [ 2204.320664][T31162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2204.875961][T31065] veth1_vlan: entered promiscuous mode [ 2204.991339][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2205.096668][T31065] veth0_macvtap: entered promiscuous mode [ 2205.149083][T31065] veth1_macvtap: entered promiscuous mode [ 2205.180137][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2205.273459][T31065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2205.288766][T31288] random: crng reseeded on system resumption [ 2205.334980][T31065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2205.398555][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.430013][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2205.457363][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.488557][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.552497][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.685740][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2205.871472][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2205.883236][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2205.927717][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2206.028190][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2206.040061][T31162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2206.070417][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2206.157208][T30399] usb 3-1: USB disconnect, device number 94 [ 2206.190103][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2206.350244][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2206.418558][T31305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6105'. [ 2206.480048][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2206.534372][T31305] bond1: option mode: unable to set because the bond device is up [ 2206.824394][T31308] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6106'. [ 2206.837134][T31305] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2207.757202][T18740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2207.790262][T31334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2207.819997][T31334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2207.828206][T31334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2207.837580][T31334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2208.050081][T17616] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2208.260034][T17616] usb 2-1: Using ep0 maxpacket: 32 [ 2208.306443][T17616] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2208.362991][T17616] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2208.440088][T17616] usb 2-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2208.506387][T17616] usb 2-1: config 0 interface 0 has no altsetting 1 [ 2208.538948][T17616] usb 2-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 2208.576287][T17616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.610214][T17616] usb 2-1: Product: syz [ 2208.614460][T17616] usb 2-1: Manufacturer: syz [ 2208.661920][T17616] usb 2-1: SerialNumber: syz [ 2208.687365][T17616] usb 2-1: config 0 descriptor?? [ 2208.708016][T17616] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2208.857856][T17616] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2208.931281][T31337] chnl_net:caif_netlink_parms(): no params data found [ 2209.002016][T17829] udevd[17829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2209.052805][T31356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2209.084574][T31356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2209.106335][T31358] FAULT_INJECTION: forcing a failure. [ 2209.106335][T31358] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 2209.133390][T31358] CPU: 1 UID: 0 PID: 31358 Comm: syz.0.6112 Tainted: G L syzkaller #0 PREEMPT(full) [ 2209.133423][T31358] Tainted: [L]=SOFTLOCKUP [ 2209.133431][T31358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2209.133443][T31358] Call Trace: [ 2209.133452][T31358] [ 2209.133460][T31358] dump_stack_lvl+0xe8/0x150 [ 2209.133514][T31358] should_fail_ex+0x412/0x560 [ 2209.133550][T31358] iopt_pages_fill_xarray+0xc63/0xf20 [ 2209.133586][T31358] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 2209.133640][T31358] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 2209.133663][T31358] ? iopt_area_add_access+0x1f2/0x4c0 [ 2209.133689][T31358] iopt_area_add_access+0x210/0x4c0 [ 2209.133718][T31358] iommufd_access_pin_pages+0x6e0/0xc30 [ 2209.133766][T31358] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 2209.133798][T31358] ? __kvmalloc_node_noprof+0x5ba/0x8d0 [ 2209.133829][T31358] iommufd_test+0x411c/0x5540 [ 2209.133865][T31358] ? __lock_acquire+0x6b5/0x2cf0 [ 2209.133894][T31358] ? __pfx_iommufd_test+0x10/0x10 [ 2209.133928][T31358] ? tomoyo_path_number_perm+0x219/0x630 [ 2209.133953][T31358] ? tomoyo_path_number_perm+0x219/0x630 [ 2209.133984][T31358] ? __might_fault+0xaf/0x130 [ 2209.134014][T31358] ? __might_fault+0xaf/0x130 [ 2209.134070][T31358] iommufd_fops_ioctl+0x4b5/0x5d0 [ 2209.134102][T31358] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 2209.134137][T31358] ? __fget_files+0x2a/0x420 [ 2209.134170][T31358] ? __fget_files+0x2a/0x420 [ 2209.134201][T31358] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2209.134224][T31358] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 2209.134253][T31358] __se_sys_ioctl+0xfc/0x170 [ 2209.134287][T31358] do_syscall_64+0xe2/0xf80 [ 2209.134318][T31358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2209.134337][T31358] ? trace_irq_disable+0x37/0x100 [ 2209.134364][T31358] ? clear_bhb_loop+0x60/0xb0 [ 2209.134390][T31358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2209.134410][T31358] RIP: 0033:0x7f94a879acb9 [ 2209.134429][T31358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2209.134446][T31358] RSP: 002b:00007f94a96ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2209.134468][T31358] RAX: ffffffffffffffda RBX: 00007f94a8a15fa0 RCX: 00007f94a879acb9 [ 2209.134483][T31358] RDX: 0000200000000a40 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 2209.134497][T31358] RBP: 00007f94a96ea090 R08: 0000000000000000 R09: 0000000000000000 [ 2209.134511][T31358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2209.134523][T31358] R13: 00007f94a8a16038 R14: 00007f94a8a15fa0 R15: 00007f94a8b3fa48 [ 2209.134559][T31358] [ 2209.473197][T30379] usb 2-1: USB disconnect, device number 77 [ 2209.732850][T31162] net_ratelimit: 9 callbacks suppressed [ 2209.732865][T31162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2209.780003][T31373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6116'. [ 2209.910030][T31334] Bluetooth: hci0: command tx timeout [ 2209.920937][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2210.130382][T31161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.167634][T31161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2210.261551][T31384] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6118'. [ 2210.336671][T31337] bridge0: port 1(bridge_slave_0) entered blocking state [ 2210.380251][T31337] bridge0: port 1(bridge_slave_0) entered disabled state [ 2210.387610][T31337] bridge_slave_0: entered allmulticast mode [ 2210.412797][T31337] bridge_slave_0: entered promiscuous mode [ 2210.476966][T17616] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2210.495213][T31161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.516167][T31161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2210.543663][T31337] bridge0: port 2(bridge_slave_1) entered blocking state [ 2210.554014][T31337] bridge0: port 2(bridge_slave_1) entered disabled state [ 2210.564126][T31337] bridge_slave_1: entered allmulticast mode [ 2210.588680][T31337] bridge_slave_1: entered promiscuous mode [ 2210.630608][T31163] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2210.671207][T17616] usb 3-1: config 0 has no interfaces? [ 2210.676817][T17616] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2210.693188][T31161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.705986][T17616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.719991][T31161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2210.746360][T17616] usb 3-1: config 0 descriptor?? [ 2210.971782][T31161] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 2210.984496][T31161] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 2211.004003][T31161] bridge0: port 1(netdevsim0) entered disabled state [ 2211.027651][T31161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2211.047206][T31161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2211.992329][T31334] Bluetooth: hci0: command tx timeout [ 2212.082979][T31337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2212.134994][T31162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2212.166010][T31337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2212.250255][T17616] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2212.398743][T31337] team0: Port device team_slave_0 added [ 2212.406931][T17616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2212.430390][T17616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2212.464886][T17616] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2212.489683][T31337] team0: Port device team_slave_1 added [ 2212.498591][T17616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.513147][T17616] usb 2-1: config 0 descriptor?? [ 2212.631526][T31161] veth5: left allmulticast mode [ 2212.638538][T31161] bridge3: port 2(veth5) entered disabled state [ 2212.659259][T31161] veth3: left allmulticast mode [ 2212.665180][T31161] bridge3: port 1(veth3) entered disabled state [ 2212.837157][T31161] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 2212.846787][T31161] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2212.994310][T17616] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 2213.045654][T17616] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2213.196463][T31161] bond2 (unregistering): (slave gretap1): Releasing active interface [ 2213.207399][T17616] cp2112 0003:10C4:EA90.002E: Part Number: 0x82 Device Version: 0xFE [ 2213.314487][T31161] bond3 (unregistering): (slave gretap2): Releasing active interface [ 2213.362444][T31424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6129'. [ 2213.661464][T30391] usb 3-1: USB disconnect, device number 95 [ 2213.843463][T31407] cp2112 0003:10C4:EA90.002E: Error starting transaction: -38 [ 2214.082917][T31334] Bluetooth: hci0: command tx timeout [ 2215.784868][T30391] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2216.150283][T31334] Bluetooth: hci0: command tx timeout [ 2216.417767][T31161] bond0 (unregistering): Released all slaves [ 2216.690342][T31450] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6133'. [ 2216.813151][T30391] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2216.826142][T30391] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2216.842040][T30391] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2216.861090][T30391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.932300][T31161] bond1 (unregistering): Released all slaves [ 2216.977649][T31161] bond2 (unregistering): Released all slaves [ 2217.146978][T30391] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2217.163257][T30391] usb 5-1: invalid MIDI out EP 0 [ 2217.406637][T31445] fuse: Unknown parameter 'rootmod' [ 2217.638035][T31445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2217.712373][T31161] bond3 (unregistering): Released all slaves [ 2217.758042][T31161] bond4 (unregistering): Released all slaves [ 2217.772133][T30391] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2217.809622][T31337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2217.827381][T30391] usb 5-1: USB disconnect, device number 75 [ 2217.853434][T31337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2217.943376][T31337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2218.090218][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2218.125210][T31161] tipc: Left network mode [ 2218.131869][T31337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2218.171344][T31337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2218.232446][T31337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2218.243408][T17616] cp2112 0003:10C4:EA90.002E: error reading lock byte: -71 [ 2218.253343][T17616] usb 2-1: USB disconnect, device number 78 [ 2218.286378][T20122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2218.488503][T31337] hsr_slave_0: entered promiscuous mode [ 2218.502517][T31337] hsr_slave_1: entered promiscuous mode [ 2218.952771][T31161] hsr_slave_0: left promiscuous mode [ 2218.970630][T31161] hsr_slave_1: left promiscuous mode [ 2219.156727][T31161] veth1_macvtap: left promiscuous mode [ 2219.282821][T31467] fuse: Bad value for 'user_id' [ 2219.287966][T31467] fuse: Bad value for 'user_id' [ 2219.310842][T31161] veth0_macvtap: left promiscuous mode [ 2219.328599][T31161] veth1_vlan: left promiscuous mode [ 2219.449394][T31161] veth0_vlan: left promiscuous mode [ 2219.767337][T31161] pim6reg (unregistering): left allmulticast mode [ 2219.846783][T31470] fuse: Bad value for 'user_id' [ 2219.890328][T31470] fuse: Bad value for 'user_id' [ 2221.066107][T30399] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2221.261304][T30399] usb 3-1: config 0 has no interfaces? [ 2221.267120][T30399] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2221.279832][T30399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.351633][T30399] usb 3-1: config 0 descriptor?? [ 2223.877627][T30379] usb 3-1: USB disconnect, device number 96 [ 2223.969402][T31495] netdevsim netdevsim1: Direct firmware load for / [ 2223.969402][T31495] failed with error -2 [ 2223.978380][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2223.987502][T31495] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 2223.987502][T31495] [ 2224.234168][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 2224.241000][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2224.402955][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2224.600047][T20122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2224.873755][T31162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2225.026256][T31161] IPVS: stop unused estimator thread 0... [ 2225.032818][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2225.260112][T31162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2225.411479][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2225.411497][ T30] audit: type=1326 audit(1769291989.468:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31531 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2225.485214][ T30] audit: type=1326 audit(1769291989.498:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31531 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2225.540442][ T30] audit: type=1326 audit(1769291989.498:10124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31531 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2225.610330][ T30] audit: type=1326 audit(1769291989.498:10125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31531 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2225.719495][ T30] audit: type=1326 audit(1769291989.498:10126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31531 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2225.899901][ T30] audit: type=1326 audit(1769291989.498:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31531 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2225.969685][ T30] audit: type=1326 audit(1769291989.498:10128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31531 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2226.031284][ T30] audit: type=1326 audit(1769291989.498:10129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31531 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2226.116835][ T30] audit: type=1326 audit(1769291989.498:10130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31531 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2226.140035][T10980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2226.194671][ T30] audit: type=1326 audit(1769291989.498:10131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31531 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a879acb9 code=0x7ffc0000 [ 2226.260052][T31162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2226.380004][T31161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2226.580218][T30379] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 2226.719743][T31337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2226.742395][T30379] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 2226.769811][T30379] usb 2-1: config 4 has no interface number 0 [ 2226.795195][T31337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2226.810097][T30379] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=d7.0c [ 2226.842190][T30379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.853368][T31337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2226.875761][T30379] usb 2-1: Product: syz [ 2226.918792][T30379] usb 2-1: Manufacturer: syz [ 2226.934223][T31337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2226.947758][T30379] usb 2-1: SerialNumber: syz [ 2227.047768][T30379] gspca_main: spca505-2.14.0 probing 0733:0430 [ 2227.275135][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.285251][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.485737][T31337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2227.572724][T31337] 8021q: adding VLAN 0 to HW filter on device team0 [ 2227.598761][T31161] bridge0: port 1(bridge_slave_0) entered blocking state [ 2227.606011][T31161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2227.693014][T30379] gspca_spca505: reg write: error -71 [ 2227.710198][T30379] spca505 2-1:4.9: probe with driver spca505 failed with error -5 [ 2227.754154][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2227.761402][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2227.820348][T30379] usb 2-1: USB disconnect, device number 79 [ 2228.048975][T31337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2228.207170][T30384] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2228.312488][T31337] veth0_vlan: entered promiscuous mode [ 2228.502378][T31337] veth1_vlan: entered promiscuous mode [ 2228.528769][T30384] usb 3-1: config 0 has no interfaces? [ 2228.535365][T30384] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2228.573056][T30384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.652194][T30384] usb 3-1: config 0 descriptor?? [ 2228.852082][T31337] veth0_macvtap: entered promiscuous mode [ 2229.093219][T31337] veth1_macvtap: entered promiscuous mode [ 2229.210102][ T5984] net_ratelimit: 11 callbacks suppressed [ 2229.210123][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2229.233169][T31337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2229.284160][T31337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2229.326667][T31162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.427061][T31162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.453023][T31162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.576865][T31162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.670106][T31162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2229.767925][T31162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2229.798605][T31162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2229.911762][T31161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2229.967923][T31162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2229.989439][T31162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2230.050061][T31162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2230.087513][T31615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6154'. [ 2230.224763][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2230.347744][T30399] IPVS: starting estimator thread 0... [ 2230.370190][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2230.482311][T31623] IPVS: using max 31 ests per chain, 74400 per kthread [ 2230.743548][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2230.900020][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2231.010543][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2231.161549][T31162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2231.951637][T31639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6156'. [ 2232.357788][ T5917] usb 3-1: USB disconnect, device number 97 [ 2233.182731][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2233.203871][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2233.218913][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2233.238513][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2233.299530][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2234.240493][ T5978] net_ratelimit: 18 callbacks suppressed [ 2234.240516][ T5978] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2234.372929][T31163] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2234.822025][ T5978] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2235.168866][T31161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2235.425524][ T5978] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2235.436160][ T5833] Bluetooth: hci3: command tx timeout [ 2235.593962][T31161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2235.742866][ T5978] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2235.870030][T31161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2235.992492][T31161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2236.328217][ T5978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2236.620106][T31161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2236.762635][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2236.952212][T31702] fuse: Bad value for 'user_id' [ 2236.957166][T31702] fuse: Bad value for 'user_id' [ 2236.971996][T31161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2237.049639][T31666] chnl_net:caif_netlink_parms(): no params data found [ 2237.250014][T30382] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2237.513264][T30382] usb 4-1: config 0 has no interfaces? [ 2237.518826][T30382] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2237.519992][ T5833] Bluetooth: hci3: command tx timeout [ 2237.592831][T30382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.674682][T30382] usb 4-1: config 0 descriptor?? [ 2237.986737][T31666] bridge0: port 1(bridge_slave_0) entered blocking state [ 2238.193733][T31666] bridge0: port 1(bridge_slave_0) entered disabled state [ 2238.223750][T31666] bridge_slave_0: entered allmulticast mode [ 2238.256938][T31666] bridge_slave_0: entered promiscuous mode [ 2238.279362][T31666] bridge0: port 2(bridge_slave_1) entered blocking state [ 2238.304620][T31666] bridge0: port 2(bridge_slave_1) entered disabled state [ 2238.324415][T31666] bridge_slave_1: entered allmulticast mode [ 2238.346521][T31666] bridge_slave_1: entered promiscuous mode [ 2238.741984][ T5917] IPVS: starting estimator thread 0... [ 2238.836056][T31666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2238.861957][T20122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2238.881016][T31721] IPVS: using max 38 ests per chain, 91200 per kthread [ 2238.928111][T31666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2239.438705][T31731] netlink: 'syz.4.6172': attribute type 15 has an invalid length. [ 2239.585291][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2239.585307][ T30] audit: type=1326 audit(1769292003.468:10141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31727 comm="syz.4.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2239.600809][ T5833] Bluetooth: hci3: command tx timeout [ 2239.768861][ T30] audit: type=1326 audit(1769292003.468:10142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31727 comm="syz.4.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2239.872174][ T30] audit: type=1326 audit(1769292003.468:10143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31727 comm="syz.4.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2239.946349][ T30] audit: type=1326 audit(1769292003.468:10144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31727 comm="syz.4.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2240.159001][ T30] audit: type=1326 audit(1769292003.468:10145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31727 comm="syz.4.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2240.302552][ T30] audit: type=1326 audit(1769292003.468:10146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31727 comm="syz.4.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2240.417766][ T30] audit: type=1326 audit(1769292003.468:10147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31727 comm="syz.4.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2240.510035][ T30] audit: type=1326 audit(1769292003.468:10148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31727 comm="syz.4.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1e5d5b58e code=0x7ffc0000 [ 2240.571129][ T5978] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 2240.600660][ T5978] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2240.658539][ T30] audit: type=1326 audit(1769292003.478:10149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31727 comm="syz.4.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2240.770127][ T30] audit: type=1326 audit(1769292003.478:10150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31727 comm="syz.4.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2240.877749][ T5917] usb 4-1: USB disconnect, device number 69 [ 2241.160923][T31718] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6170'. [ 2241.691203][ T5833] Bluetooth: hci3: command tx timeout [ 2242.631783][T20122] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2243.152693][ T5978] bond0 (unregistering): Released all slaves [ 2243.310178][T30399] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2243.640268][T30399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2243.737671][T30399] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2243.756629][T30399] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 2243.773020][T30399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.790715][T30399] usb 4-1: config 0 descriptor?? [ 2243.971970][ T5978] bond1 (unregistering): Released all slaves [ 2244.045029][ T5978] bond2 (unregistering): Released all slaves [ 2244.122988][ T5978] bond3 (unregistering): Released all slaves [ 2244.256323][ T5978] bond4 (unregistering): Released all slaves [ 2244.302076][ T5978] bond5 (unregistering): Released all slaves [ 2244.443549][ T5978] bond6 (unregistering): Released all slaves [ 2244.474647][ T5978] bond7 (unregistering): Released all slaves [ 2244.750625][T31666] team0: Port device team_slave_0 added [ 2244.838451][T31666] team0: Port device team_slave_1 added [ 2244.865364][T31781] sit1: entered promiscuous mode [ 2245.148861][ T5978] tipc: Disabling bearer [ 2245.176125][ T5978] tipc: Disabling bearer [ 2245.214353][ T5978] tipc: Left network mode [ 2245.408357][T31666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2245.447346][T31666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2245.558418][T31786] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6180'. [ 2245.689716][T31666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2245.771790][T31790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6181'. [ 2245.796135][T31666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2245.837379][T31666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2245.918451][T31666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2246.113569][T30382] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2246.422795][T30382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2246.480646][T30382] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2246.620951][T30382] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2246.685262][T30382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2246.765191][T30382] usb 5-1: config 0 descriptor?? [ 2246.807778][T30382] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2246.884228][T31666] hsr_slave_0: entered promiscuous mode [ 2246.949208][T31666] hsr_slave_1: entered promiscuous mode [ 2246.980569][T31666] debugfs: 'hsr0' already exists in 'hsr' [ 2247.016311][T31666] Cannot create hsr debugfs directory [ 2247.090063][T30399] usbhid 4-1:0.0: can't add hid device: -71 [ 2247.090575][T30379] usb 5-1: USB disconnect, device number 76 [ 2247.096629][T30399] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2247.126205][T30399] usb 4-1: USB disconnect, device number 70 [ 2247.743522][T31811] fuse: Bad value for 'user_id' [ 2247.748561][T31811] fuse: Bad value for 'user_id' [ 2247.921541][ T5978] hsr_slave_0: left promiscuous mode [ 2248.006756][ T5978] hsr_slave_1: left promiscuous mode [ 2248.082230][ T5978] veth1_macvtap: left promiscuous mode [ 2248.106852][ T5978] veth0_macvtap: left promiscuous mode [ 2248.166671][ T5978] veth1_vlan: left promiscuous mode [ 2248.211355][ T5978] veth0_vlan: left promiscuous mode [ 2252.623062][ T5978] team0 (unregistering): Port device dummy0 removed [ 2255.009122][ T5978] IPVS: stop unused estimator thread 0... [ 2255.580116][T30384] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2255.764217][T30384] usb 4-1: Using ep0 maxpacket: 32 [ 2255.786530][T30384] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2255.813008][T30384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.866535][T30384] usb 4-1: config 0 descriptor?? [ 2255.876237][T31666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2255.904567][T30384] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2255.948552][T31666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2255.983648][T31666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2256.002517][T31895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2256.246654][T31890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2256.298296][T31666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2256.322324][T31890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2256.373201][T31898] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6198'. [ 2256.440203][T30384] gspca_sunplus: reg_w_riv err -110 [ 2256.451455][T30384] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 2256.550862][T30384] usb 4-1: USB disconnect, device number 71 [ 2256.895214][T31666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2257.133064][T31666] 8021q: adding VLAN 0 to HW filter on device team0 [ 2257.236816][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 2257.244122][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2257.270047][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2257.324828][T20122] bridge0: port 2(bridge_slave_1) entered blocking state [ 2257.332077][T20122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2257.755743][T31666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2257.942157][T31666] veth0_vlan: entered promiscuous mode [ 2258.036282][T31666] veth1_vlan: entered promiscuous mode [ 2258.270208][T31666] veth0_macvtap: entered promiscuous mode [ 2258.373798][T31666] veth1_macvtap: entered promiscuous mode [ 2258.394590][T31666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2258.496465][T31666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2258.537658][T31163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.828247][T31163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.927162][T31163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.980671][T31162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.412024][T31163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2259.539959][T31163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2259.691275][T31163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2259.724309][T31163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2260.410089][T30399] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2260.570010][T30399] usb 3-1: Using ep0 maxpacket: 8 [ 2260.577675][T30399] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 2260.625464][T30399] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 2260.681925][T30399] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2260.703298][T31964] blktrace: Concurrent blktraces are not allowed on sg0 [ 2260.729580][T30399] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 2260.820001][T30399] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2260.866125][T30399] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 2260.898642][T30399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2260.979032][T30399] usb 3-1: config 0 descriptor?? [ 2261.449546][T30399] microsoft 0003:045E:00F9.002F: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.2-1/input0 [ 2261.471883][T31969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6209'. [ 2261.498919][T30399] microsoft 0003:045E:00F9.002F: no inputs found [ 2261.533512][T30399] microsoft 0003:045E:00F9.002F: could not initialize ff, continuing anyway [ 2261.655549][T30399] usb 3-1: USB disconnect, device number 98 [ 2262.061595][T31974] fido_id[31974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2262.718131][T31988] CUSE: info not properly terminated [ 2263.673450][T32002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2263.946586][T32006] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6215'. [ 2264.137575][T32009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6216'. [ 2264.789991][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2264.843718][T32022] blktrace: Concurrent blktraces are not allowed on sg0 [ 2265.160076][T30391] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2265.191376][T31334] Bluetooth: hci5: command 0x0406 tx timeout [ 2265.270042][T30384] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2265.482061][T30391] usb 3-1: Using ep0 maxpacket: 16 [ 2265.495441][T30391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.525875][T30391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2265.576470][T30391] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2265.630030][T30391] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2265.651164][T30391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.687291][T30391] usb 3-1: config 0 descriptor?? [ 2265.703825][T30384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2265.744266][T30384] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2265.855069][T30384] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2265.922388][T30384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2266.080429][T30384] usb 4-1: config 0 descriptor?? [ 2266.197575][T30391] microsoft 0003:045E:07DA.0030: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 2266.259783][T30384] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2266.267479][T30391] microsoft 0003:045E:07DA.0030: no inputs found [ 2266.267503][T30391] microsoft 0003:045E:07DA.0030: could not initialize ff, continuing anyway [ 2266.569056][T30384] usb 4-1: USB disconnect, device number 72 [ 2266.576840][T30391] usb 3-1: USB disconnect, device number 99 [ 2267.045787][T32039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6220'. [ 2267.760699][T32049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6221'. [ 2268.280760][T32055] CUSE: info not properly terminated [ 2268.772759][T32077] blktrace: Concurrent blktraces are not allowed on sg0 [ 2270.983555][T32092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6231'. [ 2271.130363][T30379] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2271.267110][T32094] netlink: 'syz.0.6233': attribute type 2 has an invalid length. [ 2271.313124][T30379] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2271.323887][T32094] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.6233'. [ 2271.338253][T30379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.366595][T30379] usb 5-1: config 0 descriptor?? [ 2271.395136][T32098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2271.398981][T30379] cp210x 5-1:0.0: cp210x converter detected [ 2271.630970][T32100] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6234'. [ 2271.899949][T30379] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2271.929969][T30379] cp210x 5-1:0.0: querying part number failed [ 2272.043046][T30379] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2272.099944][T32089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6232'. [ 2272.450138][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 2272.450744][ T30] audit: type=1326 audit(1769292036.438:10179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32088 comm="syz.4.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2272.460562][T32105] FAULT_INJECTION: forcing a failure. [ 2272.460562][T32105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2272.479554][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2272.581734][T32105] CPU: 0 UID: 0 PID: 32105 Comm: syz.0.6236 Tainted: G L syzkaller #0 PREEMPT(full) [ 2272.581774][T32105] Tainted: [L]=SOFTLOCKUP [ 2272.581783][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2272.581798][T32105] Call Trace: [ 2272.581807][T32105] [ 2272.581818][T32105] dump_stack_lvl+0xe8/0x150 [ 2272.581853][T32105] should_fail_ex+0x412/0x560 [ 2272.581889][T32105] _copy_from_user+0x2d/0xb0 [ 2272.581913][T32105] __ia32_sys_rt_sigreturn+0x379/0x8e0 [ 2272.581949][T32105] ? __lock_acquire+0x6b5/0x2cf0 [ 2272.581977][T32105] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 2272.582009][T32105] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2272.582071][T32105] ? __task_pid_nr_ns+0x28/0x490 [ 2272.582114][T32105] do_syscall_64+0xe2/0xf80 [ 2272.582154][T32105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2272.582176][T32105] ? clear_bhb_loop+0x60/0xb0 [ 2272.582200][T32105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2272.582222][T32105] RIP: 0033:0x7f86ef33c0d9 [ 2272.582241][T32105] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 2272.582259][T32105] RSP: 002b:00007f86f02a4a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 2272.582281][T32105] RAX: ffffffffffffffda RBX: 00007f86ef615fa0 RCX: 00007f86ef33c0d9 [ 2272.582297][T32105] RDX: 00007f86f02a4a80 RSI: 00007f86f02a4bb0 RDI: 0000000000000021 [ 2272.582311][T32105] RBP: 00007f86f02a5090 R08: 0000000000000000 R09: 0000000000000000 [ 2272.582324][T32105] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2272.582337][T32105] R13: 00007f86ef616038 R14: 00007f86ef615fa0 R15: 00007f86ef73fa48 [ 2272.582370][T32105] [ 2272.733154][ T30] audit: type=1326 audit(1769292036.438:10180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32088 comm="syz.4.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2272.940145][ T30] audit: type=1326 audit(1769292036.438:10181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32088 comm="syz.4.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2273.098499][ T30] audit: type=1326 audit(1769292036.438:10182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32088 comm="syz.4.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2273.211272][ T30] audit: type=1326 audit(1769292036.438:10183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32088 comm="syz.4.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2273.246795][T32114] xt_TCPMSS: Only works on TCP SYN packets [ 2273.535309][ T30] audit: type=1326 audit(1769292036.438:10184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32088 comm="syz.4.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2273.781312][ T30] audit: type=1326 audit(1769292036.438:10185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32088 comm="syz.4.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2273.817293][T32118] usb usb1: usbfs: process 32118 (syz.3.6240) did not claim interface 0 before use [ 2273.977283][ T30] audit: type=1326 audit(1769292036.438:10186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32088 comm="syz.4.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1e5d5b58e code=0x7ffc0000 [ 2274.123944][ T30] audit: type=1326 audit(1769292036.448:10187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32088 comm="syz.4.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2274.370000][ T30] audit: type=1326 audit(1769292036.448:10188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32088 comm="syz.4.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5d9acb9 code=0x7ffc0000 [ 2275.078697][T30391] usb 5-1: USB disconnect, device number 77 [ 2275.087610][T30391] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2275.175907][T30391] cp210x 5-1:0.0: device disconnected [ 2275.493246][T32135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6245'. [ 2275.511062][T32135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6245'. [ 2275.899989][T32141] FAULT_INJECTION: forcing a failure. [ 2275.899989][T32141] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.914441][T32141] CPU: 0 UID: 0 PID: 32141 Comm: syz.3.6248 Tainted: G L syzkaller #0 PREEMPT(full) [ 2275.914475][T32141] Tainted: [L]=SOFTLOCKUP [ 2275.914484][T32141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2275.914498][T32141] Call Trace: [ 2275.914506][T32141] [ 2275.914515][T32141] dump_stack_lvl+0xe8/0x150 [ 2275.914547][T32141] should_fail_ex+0x412/0x560 [ 2275.914582][T32141] should_failslab+0xa8/0x100 [ 2275.914610][T32141] kmem_cache_alloc_noprof+0x87/0x6e0 [ 2275.914640][T32141] ? __anon_vma_prepare+0x117/0x4a0 [ 2275.914664][T32141] __anon_vma_prepare+0x117/0x4a0 [ 2275.914682][T32141] ? __pte_alloc+0x15e/0x1a0 [ 2275.914708][T32141] do_pte_missing+0x2ca9/0x3310 [ 2275.914740][T32141] ? _raw_spin_unlock+0x28/0x50 [ 2275.914774][T32141] handle_mm_fault+0x1b8c/0x32a0 [ 2275.914805][T32141] ? mt_find+0x186/0x630 [ 2275.914856][T32141] ? handle_mm_fault+0xee/0x32a0 [ 2275.914892][T32141] ? __pfx_handle_mm_fault+0x10/0x10 [ 2275.914918][T32141] ? mas_next_slot+0xc27/0xcf0 [ 2275.914971][T32141] __get_user_pages+0x165b/0x29d0 [ 2275.915031][T32141] get_user_pages_remote+0x2f6/0xab0 [ 2275.915069][T32141] ? __pfx_get_user_pages_remote+0x10/0x10 [ 2275.915095][T32141] ? mmap_read_lock_maybe_expand+0xb0/0x3a0 [ 2275.915118][T32141] ? mmap_read_lock_maybe_expand+0xc6/0x3a0 [ 2275.915143][T32141] get_arg_page+0x10b/0x330 [ 2275.915175][T32141] ? __pfx_get_arg_page+0x10/0x10 [ 2275.915207][T32141] ? create_init_stack_vma+0x52f/0x670 [ 2275.915243][T32141] copy_string_kernel+0x191/0x2a0 [ 2275.915280][T32141] do_execveat_common+0x3c4/0x690 [ 2275.915312][T32141] __x64_sys_execveat+0xc4/0xe0 [ 2275.915336][T32141] do_syscall_64+0xe2/0xf80 [ 2275.915364][T32141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2275.915383][T32141] ? trace_irq_disable+0x37/0x100 [ 2275.915410][T32141] ? clear_bhb_loop+0x60/0xb0 [ 2275.915434][T32141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2275.915455][T32141] RIP: 0033:0x7f289cf9acb9 [ 2275.915474][T32141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2275.915492][T32141] RSP: 002b:00007f289de39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2275.915515][T32141] RAX: ffffffffffffffda RBX: 00007f289d215fa0 RCX: 00007f289cf9acb9 [ 2275.915531][T32141] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2275.915544][T32141] RBP: 00007f289de39090 R08: 0000000000001000 R09: 0000000000000000 [ 2275.915558][T32141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.915570][T32141] R13: 00007f289d216038 R14: 00007f289d215fa0 R15: 00007f289d33fa48 [ 2275.915604][T32141] [ 2275.988702][T32146] CUSE: info not properly terminated [ 2276.601426][T32147] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6244'. [ 2278.203580][T30391] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 2278.507447][T30391] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2278.524434][T30391] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2278.543708][T30391] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 2278.565086][T30391] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2278.605838][T30391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.651323][T32169] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2278.702417][T32172] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6254'. [ 2278.714025][T32172] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6254'. [ 2278.758374][T30391] hub 4-1:1.0: bad descriptor, ignoring hub [ 2278.767724][T30391] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2278.787593][T30391] cdc_wdm 4-1:1.0: skipping garbage [ 2278.809787][T30391] cdc_wdm 4-1:1.0: skipping garbage [ 2278.844533][T30391] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2278.878222][T30391] cdc_wdm 4-1:1.0: Unknown control protocol [ 2278.894738][ C1] wdm_int_callback: 5 callbacks suppressed [ 2278.894763][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2278.907255][ C1] wdm_int_callback: 5 callbacks suppressed [ 2278.907281][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2278.919829][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2278.926558][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2278.933058][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2278.939670][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2278.945966][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2278.952750][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2278.959104][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2278.965718][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2278.972032][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2278.978646][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2278.984957][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2278.991562][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2278.997973][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2279.004615][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2279.011088][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2279.017729][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2279.024014][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2279.030622][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2279.218715][T30391] usb 4-1: USB disconnect, device number 73 [ 2279.379376][T32184] xt_TCPMSS: Only works on TCP SYN packets [ 2279.563829][T32186] xt_TCPMSS: Only works on TCP SYN packets [ 2280.390033][T17616] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2280.566050][T17616] usb 4-1: Using ep0 maxpacket: 32 [ 2280.582185][T17616] usb 4-1: config 0 has an invalid interface number: 76 but max is 0 [ 2280.606887][T17616] usb 4-1: config 0 has no interface number 0 [ 2280.647672][T17616] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 2280.718660][T17616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.759352][T17616] usb 4-1: Product: syz [ 2280.775737][T17616] usb 4-1: Manufacturer: syz [ 2280.784086][T17616] usb 4-1: SerialNumber: syz [ 2280.800496][T17616] usb 4-1: config 0 descriptor?? [ 2280.817778][T17616] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 2280.839994][T17616] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2280.853570][T17616] dvb-usb: bulk message failed: -8 (2/0) [ 2280.900227][T17616] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2280.957330][T17616] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 2281.033164][T32188] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 2281.045198][T32188] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 2281.053652][T32188] CPU: 0 UID: 0 PID: 32188 Comm: syz.3.6258 Tainted: G L syzkaller #0 PREEMPT(full) [ 2281.064638][T32188] Tainted: [L]=SOFTLOCKUP [ 2281.069000][T32188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2281.079179][T32188] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 2281.085106][T32188] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 0d bc 58 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f5 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 2281.104730][T32188] RSP: 0018:ffffc900049d7bb0 EFLAGS: 00010202 [ 2281.110822][T32188] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 2281.118796][T32188] RDX: ffffffff87d0e3c5 RSI: ffffffff8f348810 RDI: 0000000000001900 [ 2281.126775][T32188] RBP: 0000000000000000 R08: ffff88801b7fdb80 R09: 0000000000000002 [ 2281.134753][T32188] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 2281.142756][T32188] R13: 1ffff11004a89ef8 R14: 0000000000000002 R15: ffff88802544f7c8 [ 2281.150800][T32188] FS: 00007f289de396c0(0000) GS:ffff888125928000(0000) knlGS:0000000000000000 [ 2281.159739][T32188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2281.166325][T32188] CR2: 0000200000207000 CR3: 00000000628d2000 CR4: 00000000003526f0 [ 2281.174483][T32188] Call Trace: [ 2281.177786][T32188] [ 2281.180813][T32188] __i2c_transfer+0x79a/0x1ee0 [ 2281.186136][T32188] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2281.192042][T32188] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2281.197850][T32188] ? i2c_transfer+0xc8/0x2d0 [ 2281.202446][T32188] i2c_transfer+0x1cc/0x2d0 [ 2281.207079][T32188] i2cdev_ioctl_rdwr+0x460/0x740 [ 2281.212067][T32188] i2cdev_ioctl+0x6a5/0x880 [ 2281.216746][T32188] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2281.221792][T32188] ? __fget_files+0x3a0/0x420 [ 2281.226480][T32188] ? __fget_files+0x2a/0x420 [ 2281.231083][T32188] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2281.236041][T32188] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2281.241154][T32188] __se_sys_ioctl+0xfc/0x170 [ 2281.245755][T32188] do_syscall_64+0xe2/0xf80 [ 2281.250286][T32188] ? rcu_is_watching+0x15/0xb0 [ 2281.255149][T32188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.261228][T32188] ? clear_bhb_loop+0x60/0xb0 [ 2281.265914][T32188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.271813][T32188] RIP: 0033:0x7f289cf9acb9 [ 2281.276229][T32188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2281.295843][T32188] RSP: 002b:00007f289de39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2281.304268][T32188] RAX: ffffffffffffffda RBX: 00007f289d215fa0 RCX: 00007f289cf9acb9 [ 2281.312243][T32188] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000007 [ 2281.320219][T32188] RBP: 00007f289d008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2281.328201][T32188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2281.336182][T32188] R13: 00007f289d216038 R14: 00007f289d215fa0 R15: 00007f289d33fa48 [ 2281.344168][T32188] [ 2281.347197][T32188] Modules linked in: [ 2281.352366][T32188] ---[ end trace 0000000000000000 ]--- [ 2281.360877][T17616] usb 4-1: media controller created [ 2281.414928][T32188] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 2281.425752][T32188] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 0d bc 58 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f5 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 2281.503902][T32188] RSP: 0018:ffffc900049d7bb0 EFLAGS: 00010202 [ 2281.529937][T32188] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 2281.555795][T32188] RDX: ffffffff87d0e3c5 RSI: ffffffff8f348810 RDI: 0000000000001900 [ 2281.572248][T32188] RBP: 0000000000000000 R08: ffff88801b7fdb80 R09: 0000000000000002 [ 2281.582649][T32188] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 2281.603001][T32188] R13: 1ffff11004a89ef8 R14: 0000000000000002 R15: ffff88802544f7c8 [ 2281.613800][T32188] FS: 00007f289de396c0(0000) GS:ffff888125928000(0000) knlGS:0000000000000000 [ 2281.625265][T32188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2281.640716][T32188] CR2: 0000200000086030 CR3: 00000000628d2000 CR4: 00000000003526f0 [ 2281.704088][T32188] Kernel panic - not syncing: Fatal exception [ 2281.710911][T32188] Kernel Offset: disabled [ 2281.715280][T32188] Rebooting in 86400 seconds..