last executing test programs:

2m46.934527379s ago: executing program 2 (id=3359):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefe, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$dlm_plock(0xffffff9c, 0x0, 0x2000, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008090}, 0x400408d)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000000000000000000000100a163db9370cae87f39057a27f808377df6ff79d0e5aab64aa635b73e580fb3d75b77ef6a0816d3cf28b34f9775e701978aa0fac5a64dacd2a356b289b3dd86c593d92f3820d3113bd5a654b8b7ad8a914267e91dc8c1b05d0343995014b2b111dd1130d6b40132a341983446728ccca493949ebdc19341302446ab811f0f46dc8e55acb5c0809fedbc3d2f412c6bf2218be2145573f0ba50cfe3680fe5b9e8c6a7eb9f0f0d3a59627fab0a513c329fbd599e1f5c7afc966197b63d0224b87ef1b9445ae42ecd629aad1c1489906ddc0", @ANYRES32], 0x20)

2m45.974648974s ago: executing program 2 (id=3364):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn'])
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000340)={0x7, 0x7, 0x4}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42)
r5 = io_uring_setup(0x4668, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="76e2288a4f15d489589713716ff0436745f957be9348fd436217fa5e917c58ee", 0x20}], 0x11)

2m44.524446053s ago: executing program 2 (id=3377):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_usb_connect(0x6, 0x9fa, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x62, 0xdc, 0xde, 0x20, 0x8086, 0x110, 0x982a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e8, 0x4, 0x3, 0x1, 0xa0, 0x3, [{{0x9, 0x4, 0x25, 0x4, 0x10, 0xe6, 0xe6, 0x2e, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "a2403b027e8a"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x7, 0x1, 0x64}, [@acm={0x4, 0x24, 0x2, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x5, 0x5, 0x6, 0x1}]}], [{{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x7, 0x9, 0xfa, [@generic={0x1b, 0x22, "cc8a6b83e2cc829920d52daaf292f44b52dce2c99b089f4c3d"}, @generic={0xe0, 0x21, "c22730a1305aaac5375125ab2e0b5fe5d9faba4d9490ce474683ffed1a0ac906adefbb01455f3dfcf15aa9c28619500493ae4ad3b0f5972284ac9dd625314344ff8c724edb53e5cc645b90c46ee1bf14bf6861fa300364fd8507ea34c0ef021b9e5fba037dae4f85b3561983b0ffd974dbcb906a7718bf59d5299449c17a8d05dd89a5f6edf59980146b727a13e5904efd343bcef69ddd0b420482d507ce3aa5235fd2254d395e283d5647553a534a919b095baa785315a8bab57136d1f5e352c17d3da8a8ab3b4988d16ec8e7471318290f880dea767de8e9beca4911c6"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xf8, 0x3, 0x6}}, {{0x9, 0x5, 0x6, 0x3, 0x460, 0x80, 0x9, 0x65, [@generic={0xad, 0x7, "cb58f476bd88da32b78bfaa4b321adab6365e881ebe31ce99aa1fe85b85c35391e2951669e3b6c11735eef784c823d369c1aa63b691048fcbd71cb4b16d227da5280715e3a14fed64041fa72da372132115baf41eb90d246decb86a9f1ef66f77dc55978e7e80d52108005b57190914ef5e50bfb948676920be46230129351cf8f1dc1af115b45d77aa3d9fb70d1de8ac3d4ed532676a4ede56f0009b6acd6a8c2ced5043c17d7fb556b8f"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x6}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0x2, 0x1, 0x80, [@generic={0x71, 0xb, "1d2fa5ad224d9b3a4b0e26e0af7e597f98f44b6bec4612933c06578a89e53dd21c36947a9643ef05585ec82c7b17a85f4b5bc54a026259bc544f7959fed00f93f4e1d0bc16a3e7368f53ffa3b8390b445c30a5e95ccd74a34fb5497398df5fa1bf8c6da4f7479021c0e33857d47828"}]}}, {{0x9, 0x5, 0xf, 0x11, 0x20, 0xe0, 0x4e, 0xd0, [@generic={0x9, 0x0, "960bd409624222"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0xe, 0xd3, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0x5, 0xfb, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0xfc, 0x1}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x40, 0x7, 0x9}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x2, 0x0, 0xb3}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x9, 0xf2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x6000}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x74, 0x10, 0x80}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x2, 0xbf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x101}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x6, 0x3, 0x9, [@generic={0xd6, 0x24, "94730c430ba6e826e6b3428ca8f3c50ffd0ee83c18d0beccd2c8fc0e3ee28165de5c41b47e8b9048aa83a4e6dad6c809983ed8bb5d7336de35da6af525b0a430b5ff0fa99dae2cb6c3e6328f9b68fbab247f78d9d52be8fa580275680f25cb8cb8fa29767e1424d397834ac904230f77a0388630348cd21335b1b489fc619fdc9049c86e43e16e6e4b4393a9da0d40a5cd416cc0144db0d5aea4aba5ebbfe4a177d89962c534092ec53b12a234e6cd6f3d81d3b2f1622aa0386b4602ba9c1d25ce8abf12b94061b48734229e9c20f820e636b3a3"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x1, 0xc9, 0x2f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfe, 0x3}, @generic={0x1b, 0x22, "b83f0c816f62e67130fb694aba2e9a4073f63ff94d58da6e60"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x5, 0x2, 0x7}}]}}, {{0x9, 0x4, 0xfe, 0x5, 0xd, 0x1b, 0x13, 0x27, 0x4, [@hid_hid={0x9, 0x21, 0x3, 0xe, 0x1, {0x22, 0xb15}}], [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0xd, 0x9, [@generic={0x3c, 0x9, "cefa308866694e494f551768b31589882c8154b9084d5482eb39b9c8182c8305a3544a2ddc773eff364065a218932424b29fbd9dcf0887541faf"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0xc, 0x5, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xb58}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x55}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x9, 0x2c, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x0, 0xfd, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x60, 0xb}, @generic={0xf, 0x4, "2c52975df58b7c9edbd7c776cb"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x7f, 0xfb, 0x2, [@generic={0x46, 0x7, "05577fa102a656f75448df94a5e57e2e19d35f51b00ec14aff4489b28f335dabe2d34a6fe23e3909a8abd0342f617f12c2b5b67af288329367515dbf44fcef8dc3670773"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x8, 0x8, 0x0, [@generic={0x25, 0x5, "6fda6b325a4f729aba6a9cdf8001b48eaf6a35c5622ea7f9f16043a56fbecdcc4756b0"}, @generic={0xce, 0xd, "f35d6a14bf95c871b1739ab790f18a7caedc6577ee371f5242b0bf437924560693bbe6df8a78562be6d487d5fa7ae4fdd911cf9296aa09dd1834e80517ac2a3be66b72a83cc1c6c157af4f4a1f4e211b4155d24ce88bd0536cf32df4672a9adc33d2d64999aee94c2d89fb8ef52e06288fa6d49fb3b8692b27d239e1d157aeabc10e3a8860ef7d584fded02f79434a1c1fc93cd787aacf047349cd2870e17c7054c791b086078bfe12b1b40ac9e12a15f493b092d03c6b5ca969e6ed4eb7dd16fea6e169b3b24f0da241ccb4"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x4, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x10, 0xff, 0x4}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0xf8, 0xc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xa, 0x97, 0x87}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x3, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xba, 0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x8, 0x1, 0xf, [@generic={0xe, 0x8, "98c243eee51c5e5c9c8fc31a"}]}}]}}, {{0x9, 0x4, 0x1c, 0x9, 0x8, 0xff, 0xff, 0xff, 0x1, [], [{{0x9, 0x5, 0x88, 0xc, 0x3ff, 0x80, 0x4, 0x4, [@generic={0xc4, 0xe, "1f8a1c50c22ddc81e90a72c7067a21fcb671bbacd70aec80df182c8664eac02d1d438f2b0297001897d037849a0c0941e4b8a91499571f51462fd43c30d60cd0e8939497fd14461f5c15d00564476875de5d1cd416c4bf8e6edca684cea8cec82c63530b98e74287cc962691a1baf9c7a494f04944b737ee1b13a99e8625112bc5cf229aa208b2fa41edef25be98e97ecec35c34c540da90b8d2620d343a21c076759ffb6896ea925499e53a0a37f343d2f551089e46298b1abb9a4ccd0dcf103152"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x3e}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x6, 0xfe, 0x9, [@generic={0x4c, 0xf, "90d56a6894c7a64211688bedc5d7495119927cac9b75c889c68f2f12352d2fdbd1acd3eb113eb66ed5d861b38c6a38ccd1c26694bae94d2a7041d705afef4e252bd8039cc0cca7e82a35"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0xa, 0x2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x1}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x0, 0x9, 0x10}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x4, 0x0, 0x6e, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0xf873}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb, 0x5}]}}, {{0x9, 0x5, 0x85, 0x0, 0x40, 0x5e, 0xa, 0x81}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x9, 0x6, 0x0, [@generic={0x1b, 0x46e326964ef02a37, "3da2963fae8d7f970fbfb64bb6f13d6b067fd0b3bad96cd17d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x7, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x40, 0xa1}]}}]}}, {{0x9, 0x4, 0x51, 0x0, 0x5, 0x91, 0xac, 0x7b, 0xf5, [], [{{0x9, 0x5, 0xb, 0x4, 0x20, 0x6, 0x8, 0x4}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x3, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfff}, @generic={0xdb, 0x26, "ad400ffa155d945c8743ec271419f6145fb501c7b341df024250d1e94537860746452391da541adf630f83efb8caf852820efca1d1d3cada7d763fb1b052a95a50f4368f316adb59b2f06b4161ca1b8d4a7e47111ddbc0478dcf8c20bc0d2fc171e839506001520d3bc9e24df5f531513adfb33016db1762b6c62dc698dcbf206b960f91ecb1c6b46d9aa5bf738c22b57638107f73f94a7f0291d98cacff0ccbfd1b4fc8b0d6a94547578a5a217041d9133269bb0fb9e033fa11516d8bca48507d62c9264748b09c24f81c611cc44efb389e0003e82bf05b74"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x18, 0xb, 0x2, [@generic={0xcd, 0xf, "dbf62c61a6bb2e41f7f7dddf1d66a8540fc620b101ebf7508e269e06e3bb45b61e5ec9269f3946873da6001b36367c5c505e88f2586d4c3597931952c39b27e79096fc32446dd673758b22fe48dad5248b98b48cec18fb492f1acee1612b4c01c9fe025a47c6c65e8246f928dfad5b3c335d580a3832b659d4d859353989de07d8244865ed55d696b418db3843662d8987a367957367f983236b3f410af9145c20258f0312fb40103034caf0f66c0e2153034588ba6eacaa08f3a4a08a0025197b12ad2b151d606c38e4c9"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0xb6, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xfa, 0x17, 0xaa}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x4, 0xf8, 0x7, 0xff, 0x4}, 0x2d, &(0x7f0000000cc0)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x33, "f5c0e04ec87d40e15c89179748c87e7f"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "413a498da35187bb98daa8a9f712406b"}]}, 0x1, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x1c09}}]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m43.994412229s ago: executing program 2 (id=3379):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1001000, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={"740e00", 0x0, 0x6, 0x2, 0x0, 0x0, "00001000429ebdf2e4139d31074000", '\x00', "0005004e", "10004800", ["efc1c7f7ffffffff06fcb800", "01000000000000000000bdff", "345e417e7fffff31ff8c6800"]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300))
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x24100, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x1, 0x0, 0xff, "0062ba7d82000000000000000000f7ffffff00"})
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_usbip_server_init(0x4)
lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, "1e36fc0e000000000000000000000400", 0x2, 0x80})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

2m43.424583123s ago: executing program 2 (id=3383):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (fail_nth: 1)

2m43.303627923s ago: executing program 2 (id=3384):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0xa, 0x0, 0x9, 0x9, 0xd, 0xe, 0x9, 0x8, 0xd, 0xc, 0xb, 0x5, 0x3, 0x3, 0x7], 0x1, [0xb5db, 0x7f, 0xfff7, 0x6, 0x9, 0x1, 0x7, 0x9, 0x6, 0x5, 0x4846, 0x6, 0x3, 0x6, 0x4, 0x9], [0x8825, 0xffff, 0x0, 0x3, 0x4, 0x7fff, 0x8, 0x3, 0x94ed, 0xc71, 0xf, 0x3, 0x4, 0x1000, 0x4, 0x7]}}}}]}, 0x88}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local}}}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)

2m28.233343381s ago: executing program 32 (id=3384):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0xa, 0x0, 0x9, 0x9, 0xd, 0xe, 0x9, 0x8, 0xd, 0xc, 0xb, 0x5, 0x3, 0x3, 0x7], 0x1, [0xb5db, 0x7f, 0xfff7, 0x6, 0x9, 0x1, 0x7, 0x9, 0x6, 0x5, 0x4846, 0x6, 0x3, 0x6, 0x4, 0x9], [0x8825, 0xffff, 0x0, 0x3, 0x4, 0x7fff, 0x8, 0x3, 0x94ed, 0xc71, 0xf, 0x3, 0x4, 0x1000, 0x4, 0x7]}}}}]}, 0x88}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local}}}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)

7.012167273s ago: executing program 3 (id=4535):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40000, 0x800, {0x1, 0x1, 0x3, 0x69, 0x200, 0x2, 0xb, 0x5, 0x4caf, 0x7, 0x1000, 0x0, 0x4000010, 0x10001, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={<r3=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
socket$inet(0x2, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0}}, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x20, r10, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)={0x1348, r6, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4f4, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd8}]}, {0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3e1, 0x4, 0x2, 0xd4, 0xf70, 0x1, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x77, 0x2, 0x8000, 0xfff, 0x1, 0x5e, 0x800, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0xb, 0x9, 0x9, 0x1, 0x7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x772, 0x5b, 0x1, 0x742, 0x4, 0x10, 0x9cc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x16, 0x6c, 0x4, 0x6c, 0xb, 0xc, 0x5, 0x60, 0x3]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x5, 0x6, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3ff, 0xfd07]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x9}, {0x7, 0xa}, {0x0, 0x8}, {0x7, 0x2}, {0x2, 0x7}, {0x4, 0x1}, {0x2, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x3, 0x2, 0x3, 0x0, 0x0, 0x6, 0x800]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0x18, 0x18, 0x1, 0x3, 0x6c, 0x9, 0x30, 0xb, 0x18, 0x5, 0x36, 0x18, 0x6c, 0x60, 0x24, 0x16, 0xa, 0x4785480e6835e488, 0x18, 0x1b, 0x6c]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}]}, {0x314, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x228, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x1b, 0x24, 0x12, 0x2, 0x18, 0x3f, 0x1, 0x16, 0x4, 0xb, 0x9, 0x6, 0x1b, 0x1b, 0x24, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xf001, 0x4800, 0x3, 0xba, 0x8, 0x4, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x8}, {0x3, 0x5}, {0x7, 0x5}, {0x1, 0x8}, {0x4, 0x2}, {0x3}, {0x6, 0x5}, {0x1, 0x7}, {0x1, 0x1}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0xa}, {0x1, 0x3}, {0x3, 0x7}, {0x6, 0x1}, {0x2}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0x9}, {0x3, 0x3}, {0x1, 0x3}, {0x2, 0x3}, {0x4, 0x7}, {0x2, 0x9}, {0x5, 0x3}, {0x2}, {0x7, 0x7}, {0x0, 0x4}, {}, {0x6, 0x2}, {0x5, 0x4}, {0x1, 0x8}, {0x7, 0x6}, {0x3, 0x8}, {0x2, 0xa}, {0x7, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfff7, 0x2, 0x8, 0x61, 0x8, 0x9, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0xf93c, 0xff, 0x0, 0x7f, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x6305, 0xd, 0xa12, 0x9, 0xbe6e, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x6, 0x9}, {0x7, 0xa}, {0x3, 0x4}, {0x1, 0x3}, {0x6, 0x3}, {0x5, 0x4}, {0x6, 0x5}, {0x4, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x1, 0xa}, {0x2}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x4}, {0x3, 0x8}, {0x1, 0x5}, {0x5, 0x7}, {0x7, 0x8}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x4, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x6}, {0x4, 0x6}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x5}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff3, 0x2, 0x7, 0x100, 0x8b0c, 0x8, 0x8682, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x5}, {0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x7}, {0x2, 0x7}, {0x1, 0x4}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3, 0x2}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x8}, {0x4, 0x7}, {0x7, 0x8}, {0x5, 0x8}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x2}, {0x4, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x2, 0x2}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0xa}, {0x7, 0x6}, {0x7, 0x8}, {0x6, 0x6}, {0x1, 0x3}, {0x5, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x7}, {0x5}, {0x4, 0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x2, 0x9}, {0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x1}, {0x3, 0x8}, {0x2, 0x7}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x6}, {0x2, 0x5}, {0x0, 0xa}, {0x4, 0x8}, {0x3, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x8, 0xc48, 0x10, 0x0, 0x5, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xb, 0x0, 0x6, 0x8, 0x9, 0x46]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x0, 0x8000, 0xb, 0x8, 0xf65, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x7}, {0x5, 0x4}, {0x6, 0xa}, {0x6, 0x8}, {0x4, 0x3}, {}, {0x6, 0x8}, {0x3, 0x1}, {0x1, 0x7}, {0x4, 0x4}, {0x2, 0x7}, {0x0, 0x8}, {0x2}, {0x3, 0x2}, {0x6, 0x8}, {0x3, 0x4}, {0x6, 0x9}, {0x2, 0x6}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x4}, {0x7, 0x7}, {0x2, 0x1}, {0x0, 0x7}, {0x4, 0xa}, {0x3}, {0x1, 0x9}, {0x3, 0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x7, 0xa}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x9}, {0x4}, {0x0, 0x4}, {0x2, 0x5}, {0x2, 0xa}, {0x6, 0x6}, {0x3, 0x6}, {0x4, 0x5}, {0x0, 0x2}, {0x6, 0x2}, {0x5, 0x7}, {0x5, 0x4}, {0x1, 0x7}, {0x5, 0x3}, {0x3, 0x6}, {0x1, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x0, 0x7, 0xf9f0, 0xfffc, 0xa, 0x40, 0xd5a9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe8c5, 0x6, 0x401, 0x2, 0x3ff, 0x7, 0x8000, 0x8]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x9}, {0x3, 0x5}, {0x4, 0x6}, {0x0, 0xa}, {0x4}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x7, 0x7}, {0x0, 0x6}, {0x7, 0x5}, {0x2, 0x1}, {0x3, 0x5}, {0x6, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x2}, {0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x6, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x4}, {0x6, 0x9}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfe, 0x8, 0x80, 0xe, 0xffd, 0x4, 0xb0, 0x1]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x79, 0x2, 0x0, 0x7f, 0x2f2, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xf000, 0x1, 0xd, 0xfd, 0x6, 0x4, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x46c, 0x6, 0x7f, 0x3, 0xb, 0xcd, 0xb553, 0xfeff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2000000000000000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x98}]}]}, @NL80211_ATTR_TID_CONFIG={0xa40, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x68}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x6c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x1000, 0x1, 0x401, 0x0, 0xacf, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0xfc, 0x5, 0x3, 0xffff, 0x7, 0xdf1, 0xe]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x18, 0x0, 0x1, 0x2, 0xa1, 0x7, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40000000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x448, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x348, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x8}, {0x6, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x24, 0x16, 0x36, 0x48, 0x0, 0x30, 0xb, 0x60, 0x12, 0x36, 0x16, 0x9, 0x36, 0x24, 0x0, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x3, 0x6, 0x1b, 0x1, 0x4, 0x60, 0x24, 0x4, 0x6, 0x16, 0x5, 0x60, 0x16, 0x18, 0x30, 0x30]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0xa}, {0x6, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x7, 0xa}, {0x4}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x8}, {0x7, 0x5}, {0x2}, {0x6, 0x5}, {0x2, 0x9}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x5}, {0x7, 0x1}, {0x5, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0x1e}, {0x1}, {0x1, 0x5}, {0x1, 0x1}, {0x7, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x4}, {}, {0x2, 0x8}, {0x2, 0x6}, {0x7, 0x6}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x4}, {0x6, 0x7}, {0x1, 0x5}, {0x3, 0x2}, {0x7, 0x1}, {0x3, 0x2}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0x4}, {0x0, 0xa}, {0x7, 0x4}, {0x2, 0x6}, {0x1, 0x8}, {0x2, 0xa}, {0x6, 0x7}, {0x5, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x3}, {0x2, 0x2}, {0x1, 0xa}, {0x4, 0x4}, {0x7, 0x1}, {0x4}, {0x7, 0x3}, {0x1, 0x1}, {0x7, 0x4}, {0x7, 0x9}, {0x2, 0x6}, {0x1, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xa5, 0x8, 0x2, 0x80, 0x5, 0x0, 0x3]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x6, 0x1b, 0x4, 0xc, 0x6, 0x3, 0x4, 0x48, 0x3, 0x12, 0xc, 0x18, 0x6, 0x2, 0xb, 0x9, 0x9, 0x2, 0xb, 0x2, 0x13, 0x16, 0xf, 0x16, 0x4, 0x15e16e53f48d81bc, 0x24, 0x1b, 0x6, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1b0c, 0x0, 0x1, 0x81, 0x9, 0x5, 0x3]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x9}, {0x5, 0x4}, {0x3, 0x3}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x5}, {0x1, 0x3}, {0x7, 0x8}, {0x2, 0x2}, {0x3, 0x8}, {0x7}, {0x7, 0x1}, {0x4, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x3, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x4, 0x6}, {0x5, 0xa}, {0x1, 0x6}, {0x7, 0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x3}, {0x4, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x4, 0x7}, {0x5, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x40, 0x6, 0x4fb, 0x4, 0x9, 0xe5cd, 0x5]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x7a12, 0x2, 0x6, 0x3, 0x4, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x0, 0xfffc, 0xf6fc, 0x8, 0xfd52, 0x347]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x1, 0xd3, 0x3, 0x9, 0x81, 0x8000, 0x2]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf001, 0x7, 0x0, 0x58b9, 0x200, 0xe, 0x7, 0x2]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7}, {0x4, 0x2}, {0x3, 0x5}, {0x3, 0x5}, {0x1, 0x4}, {0x1}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x1}, {0x3, 0x3}, {0x5, 0x3}, {0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x3, 0xa}, {0x7, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x1, 0xc, 0x8001, 0x5, 0x8000, 0x1ae, 0x2]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x6}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x3}, {0x4, 0xa}, {0x7}, {0x2, 0x9}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xd3, 0x1, 0xf8, 0xff55, 0x7fff, 0xd, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x4, 0x9, 0x5, 0x5, 0x892, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x13, 0x9b9, 0x7ff, 0x0, 0xe00, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x9, 0x3, 0x8, 0x4, 0x6, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x5}, {0x0, 0x6}, {0x4, 0x8}, {0x2, 0x7}, {0x6, 0x5}, {0x4, 0x1}, {0x0, 0x8}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x8}, {0x2, 0x3}, {0x3, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x0, 0x7}, {0x7, 0x2}, {0x5, 0x9}, {0x7}, {0x5}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x7}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0xa}, {0x4, 0x5}, {0x4, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x7, 0x5}, {0x5, 0x8}, {}, {0x0, 0x1}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0xa}, {0x7, 0x3}, {0x0, 0x9}, {0x4}, {0x1, 0x2}, {0x7, 0x7}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x5, 0x2}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x6, 0x5}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x3}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0x9}, {0x4, 0x2}, {0x0, 0x4}]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x5}, {0x6, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x2, 0xa}, {0x1, 0x4}, {0x5, 0x1}, {0x7, 0x8}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x8}, {0x3, 0x9}, {0x1}, {}, {0x2, 0x1}, {0x3}, {0x7, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x2}, {0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x4, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x5}, {0x6, 0x3}, {0x7, 0xa}, {0x2, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x5, 0x4}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x2, 0x8}, {0x7, 0x3}, {0x5, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x8, 0x10, 0x2, 0x7, 0x3, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc00, 0x40, 0x0, 0x6, 0x7, 0x0, 0x0, 0xec9e]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0xc, 0x1b, 0x4, 0x4, 0x6, 0x16, 0x4, 0x4, 0x9, 0x9, 0x60, 0x5, 0x1, 0x9, 0x30, 0xd11f84aaf90e87e1, 0xb, 0x9, 0x6c, 0x24, 0x6c, 0xc, 0x58, 0x30, 0x48, 0x5, 0x16, 0x1, 0x1]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x8}, {0x5, 0x7}, {0x0, 0x4}, {0x6, 0x9}, {0x5, 0x1}, {}, {0x6, 0x8}, {0x0, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x2}, {0x4, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x0, 0x6}, {0x3, 0xa}, {0x5, 0xa}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x3}, {0x7, 0x5}, {0x2, 0x9}, {0x0, 0x2}, {0x2, 0x3}, {0x6, 0x7}, {0x0, 0x7}, {0x1}, {0x4, 0x5}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0x8}, {0x3, 0xa}, {0x4, 0x7}, {0x4, 0x8}, {0x6}, {0x0, 0x1}, {0x7, 0x2}, {0x3, 0x5}, {0x6, 0x8}, {0x3, 0xa}, {0x6, 0x4}, {0x2, 0x3}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x3}, {0x5, 0x3}, {0x7, 0x1}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x7}, {0x0, 0x5}, {0x2, 0x8}, {}, {0x4, 0x8}, {0x1, 0x6}, {0x3, 0x3}, {0x4, 0xa}, {0x5, 0x2}, {0x3, 0x1}, {0x7, 0x7}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x2, 0x5861, 0x2, 0x81, 0x7, 0xfff9, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000001}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x3}, {0x7, 0x5}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x2}, {0x0, 0x3}, {0x5}, {0x7, 0x4}, {0x3, 0x5}, {0x6, 0xa}, {0x2, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x4}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0xa}, {0x0, 0x3}, {0x7, 0x3}, {0x5, 0x6}, {0x4, 0x8}, {0x2, 0xa}, {0x4, 0x2}, {0x2, 0x6}, {0x3, 0x5}, {0x7}, {0x5, 0xa}, {0x4, 0x6}, {0x4, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x374, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x29}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x320, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x7, 0x8, 0x4, 0xb8, 0xb, 0x6, 0x8]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{}, {0x7, 0x1}, {0x2, 0x5}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x1}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x9}, {0x3, 0x2}, {0x3, 0x5}, {0x3, 0xa}, {0x2, 0x8}, {0x3}]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x0, 0x0, 0x5, 0x8, 0x9, 0xfffc]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4c, 0x60, 0x24, 0x2, 0x24, 0x4, 0x6, 0x2, 0x4, 0x1b, 0x2, 0x60, 0x36, 0xc62bf2fc432c1f0b, 0x36, 0x5, 0x6c, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x2, 0x400, 0x9, 0x6, 0x3f, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x0, 0x3, 0x5, 0x3, 0xa, 0x930b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x60, 0xd2, 0x400, 0x773, 0x2, 0x0, 0x28, 0x7ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x38, 0x9, 0x2, 0xfff, 0x2, 0x3, 0x7ff]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x5, 0x9, 0x5, 0x5, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x7, 0x4}, {0x1, 0x4}, {0x1, 0x1}, {0x4, 0x3}, {0x6, 0x7}, {0x3, 0x8}, {0x2, 0xa}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x7, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0x3}, {0x6, 0x3}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x3}, {0x5, 0x1}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0xa}, {0x1, 0xa}, {0x4, 0x3}, {0x5, 0x1}, {0x5, 0x2}, {0x4, 0x3}, {0x4, 0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {0x5, 0x4}, {0x3, 0x8}, {0x5, 0x9}, {0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x5, 0x6}, {0x6, 0x9}, {0x3, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7ff, 0x4, 0x755f, 0x80, 0x490, 0x49f0, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x101, 0x2, 0x9, 0x8, 0x2, 0x3]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x12, 0x16, 0x48, 0x48, 0x4, 0x6c, 0x0, 0x60, 0x6c, 0x24, 0x18, 0x16, 0x2, 0x60, 0x24, 0x0, 0x16, 0x30, 0x16, 0x1, 0xd, 0x2, 0x6, 0x3, 0xb, 0xb, 0x60, 0x60, 0x5, 0x18, 0x60]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x33, 0x1b, 0x2, 0x6, 0xc, 0xc, 0x4, 0x2, 0xb, 0x5, 0x48, 0x12, 0x6, 0x1, 0x1, 0x60, 0x0, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x53, 0x5, 0x6, 0x16, 0x24, 0x1, 0x1b, 0x30, 0x4, 0xc, 0x30, 0x24, 0x60, 0x6c, 0x24, 0x2, 0x6, 0x5, 0xb, 0x1b, 0x1b, 0x28, 0x6c, 0x60, 0x5, 0x16, 0x24, 0x60, 0x16, 0x18, 0xb]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffe, 0xffff, 0x8, 0x95, 0xff2a, 0x4, 0xff47]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4c3, 0x4, 0x8, 0x1, 0x741, 0xf13, 0x9, 0xd29b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xffc1, 0x8, 0x4, 0x10, 0x0, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x2, 0x101, 0x7, 0x9, 0xfba1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x7, 0x6, 0xff94, 0x101, 0x8, 0x9]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x4}, {0x4, 0x7}, {0x0, 0x8}, {}, {0x4, 0x1}, {0x3, 0x7}, {0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x5}, {0x3, 0x5}, {0x1}, {0x0, 0x8}, {0x2, 0x4}, {0x1, 0x6}, {0x4}, {0x0, 0x6}, {0x5, 0x4}, {0x6, 0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x80, 0xe9ed, 0x5, 0xd, 0x449, 0x586a, 0x7f]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x200, 0x1, 0x4, 0x8, 0x2, 0x2, 0x15b9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x7fff, 0xe, 0x5, 0x4, 0x80, 0xe, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x3, 0x80, 0x3, 0x5, 0x0, 0x302e]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0x9}, {0x0, 0x3}, {0x7}, {0x0, 0x2}, {0x4, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x2, 0x7}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x401, 0x4, 0xfffa, 0x9, 0x0, 0xb2, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x2, 0x40, 0x9a, 0x4, 0xd, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000000}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x8, 0xfffc, 0xffff, 0x5, 0x0, 0x6, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x85}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x6, 0x6}, {0x2}, {0x1, 0x7}, {0x2, 0x1}, {0x7, 0x6}, {0x6, 0x6}, {0x1, 0x7}, {0x2, 0x2}, {0x2, 0x3}, {0x6, 0x3}, {0x0, 0x6}, {0x1, 0x5}, {0x3, 0x2}, {0x5, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x4}, {0x3, 0x3}, {0x7, 0x5}, {0x6, 0x7}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0x3}, {0x5, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9130, 0x5, 0x9, 0x7, 0x9, 0xffff, 0x401, 0x5]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa4de, 0x8, 0x96b7, 0x5, 0x2, 0x8ad, 0xa, 0x9]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x5}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x9}, {0x3, 0xa}, {0x5, 0x2}, {0x0, 0x1}, {0x7, 0x17}, {0x7, 0x8}, {}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x3}, {0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0x8}, {0x2, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x2}, {0x6, 0x6}, {0x0, 0x3}, {0x7, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x6, 0x7}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x9}, {0x7, 0x8}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x6, 0x7}, {0x3, 0x5}, {0x2, 0x4}, {0x6}, {}, {0x7, 0x1}, {}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x39d1, 0x5, 0x9, 0x4, 0x6, 0x3, 0x3]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x132, 0x6ac, 0x0, 0x6, 0x2, 0x9, 0xdc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x3f8, 0x11d, 0x0, 0x1, [{0x3f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3dc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0x1}, {0x7, 0x9}, {0x1, 0x5}, {0x1, 0xa}, {0x4, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x6, 0x2}, {0x6, 0x9}, {0x2, 0x3}, {0x6, 0x8}, {0x5, 0x5}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x6}, {0x0, 0xa}, {0x1}, {0x3}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0xa}, {0x7, 0x4}, {0x7, 0x5}, {0x2, 0x1}, {0x3, 0x5}, {0x2, 0x3}, {0x1, 0x7}, {0x2, 0x7}, {0x7, 0x6}, {0x4}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x7}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x7, 0x6}, {0x5, 0xa}, {0x4}, {0x2, 0x3}, {0x7, 0xa}, {0x0, 0x3}, {0x6}, {0x6, 0x9}, {0x6, 0x5}, {0x7, 0x3}, {0x6, 0xa}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0x8}, {0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x100, 0x8, 0x6, 0x7c, 0x1000, 0x200, 0xf6]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x58, 0x36, 0x18, 0x36, 0x4, 0x16, 0x9, 0x1b, 0x6c, 0x4, 0x6c, 0x24, 0x3, 0xc, 0x24, 0x24, 0x1, 0x6, 0x6c, 0x4a, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x48, 0x5, 0x5, 0x12, 0x3, 0x1b, 0x6, 0x36, 0x6, 0xc, 0x12, 0x6, 0x18, 0xc, 0x24, 0x24]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x1}, {0x5}, {0x0, 0x3}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x3}, {0x7, 0x9}, {0x1}, {0x1, 0x4}, {0x3, 0x2}, {0x2, 0x9}, {0x4, 0x1}, {0x5, 0xa}, {0x3, 0x2}, {0x5, 0x6}, {0x0, 0x3}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x3, 0x6}, {0x3, 0x9}, {0x4}, {0x0, 0x9}, {0x2, 0x2}, {0x1, 0x5}, {0x6, 0x9}, {0x6, 0x7}, {0x3, 0x2}, {0x5, 0x8}, {0x1, 0x3}, {0x0, 0x7}, {0x3, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x3, 0x5}, {0x6, 0x5}, {0x5}, {0x1, 0xa}, {0x7, 0x5}, {0x7, 0x3}, {0x4, 0x1}, {0x2, 0x6}, {0x7, 0x5}, {0x3, 0x7}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0x1, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x5, 0x3, 0x5, 0x40, 0x4, 0x9, 0xfe00]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x1, 0x3, 0x18, 0x1b, 0x6, 0x2, 0x1b, 0x36, 0x18, 0x6, 0x6c, 0x19, 0x60, 0x60, 0x9, 0x12, 0x1, 0x36, 0x60, 0x1, 0x2, 0x74, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x17, 0xf11067b4cb35616a, 0x12, 0x6c, 0x2, 0x18, 0xc, 0x6c, 0x1, 0x1, 0x18, 0x2, 0x24, 0xa88fe7ebe58e8b57, 0xb, 0x35fd8025c93dbb9, 0x30, 0x48, 0x4, 0x3, 0x1b, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x3, 0x1, 0x4, 0x8, 0x8, 0x5]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x2, 0x0, 0x1b, 0x1b, 0xb, 0x6, 0x5, 0x3, 0xb, 0xc, 0x5, 0x18, 0xc, 0x48, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff07, 0x2, 0xb, 0x5, 0x18, 0x1, 0x6, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0xa}, {0x4, 0x8}, {0x4, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x6, 0xa}, {0x7, 0x9}, {0x4, 0xa}, {0x4, 0x5}, {0x2, 0x8}, {0x7, 0x5}]}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x5, 0x18, 0xb, 0x2, 0x1b, 0x2, 0x12, 0x12, 0x18, 0x24, 0x4]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x2, 0x30, 0x12, 0x1b, 0x3, 0x48, 0xb, 0x24, 0x18, 0x1c, 0x30, 0x6, 0x6a, 0x24, 0x1b, 0x4, 0x0, 0x9, 0xc, 0xc, 0x4b, 0x0]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x1}, {0x3, 0x2}, {0x5}, {0x1, 0xa}, {0x2, 0x9}, {0x1, 0xa}, {0x7, 0x7}, {0x2, 0x1}, {0x1, 0x7}, {0x6, 0x4}, {0x0, 0x9}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x4}, {0x2, 0x6}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x9}, {0x4, 0x8}, {0x3}, {0x2, 0x7}, {0x1, 0x3}, {0x5, 0x8}, {0x0, 0x1}, {0x3, 0x9}, {0x1, 0xa}, {}, {0x0, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0xd, 0x8, 0xd279, 0x54b, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2}, {0x5, 0xa}, {0x4, 0x3}, {0x7, 0x7}, {0x6, 0x1}, {0x3, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0x1}, {0x6, 0x6}, {0x2, 0x7}, {0x6, 0x4}, {0x0, 0x4}, {0x2, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x8}, {0x1, 0x2}, {0x6, 0x5}, {0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0xc, 0x36, 0x9, 0x4, 0x48, 0x0, 0x7, 0x3, 0x6c, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x1}, {0x1, 0x9}, {0x2, 0x8}, {0x7, 0x1}, {0x6, 0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x2}, {0x6, 0xa}, {0x6, 0x5}, {0x2, 0x7}, {0x1, 0xa}, {0x2, 0x4}, {0x3, 0x9}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0x3}, {0x3, 0x3}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0x3}, {0x2, 0x6}, {0x0, 0x1}, {0x7, 0xa}, {0x7, 0x8}, {0x3, 0x9}, {0x3}, {0x0, 0x7}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x7, 0x5}, {}, {0x3, 0x4}, {0x1, 0x7}, {0x3}, {0x5}, {0x1, 0x8}, {0x6, 0x5}, {0x4, 0x7}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x6, 0xbb, 0x9, 0x7, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0xb, 0x18, 0x60, 0x36, 0x36, 0x16, 0x60, 0x2, 0x12, 0xc, 0x16, 0x48, 0x5, 0xb, 0x18, 0x53, 0x5, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc, 0xef, 0x2f6, 0x7, 0x7, 0x3, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x49, 0x9, 0x6, 0x4, 0x0, 0x10, 0x7]}}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x15, 0x12, 0x18, 0x36, 0xc, 0x0, 0x1, 0x24, 0x1b, 0x7b, 0x4, 0xb, 0x2, 0x2, 0x5, 0x6c, 0x60, 0x18, 0x18, 0x1, 0xc, 0x16, 0x18, 0x24, 0x60, 0x3, 0x5, 0x48]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x2, 0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x5}, {0x3, 0x3}, {0x0, 0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x6}, {0x7, 0x2}, {0x0, 0x2}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0x3}, {0x6, 0x8}, {0x4, 0x4}, {0x1, 0x7}, {0x4, 0x5}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x1}, {0x2, 0x9}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x2}, {0x7}, {0x4, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {}, {0x1, 0x8}, {0x5, 0x8}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0x5}, {0x6, 0x3}, {0x0, 0x3}, {}, {0x2, 0x7}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x2}, {0x2}, {0x4, 0x1}, {0x3, 0x9}, {0x7, 0x9}, {0x1, 0x7}, {0x6, 0xd}, {0x7, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x3}, {}, {0x5, 0x2}, {0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb7, 0x14, 0x0, 0x7f7, 0x4, 0x7, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}]}]}, 0x1348}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r4})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000", @ANYRES16=r13, @ANYBLOB="0100000029c800000000050005000000000008000300fcf933135bd5cc5c25b200e9568e01000000480001800500020020000000060001000200"/69, @ANYRESOCT=r13, @ANYRESHEX=r4], 0x84}, 0x1, 0x0, 0x0, 0x804}, 0x0)

7.011012185s ago: executing program 3 (id=4536):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='wake_reaper\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd\x00')
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101102)
r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402)
r8 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0205710, &(0x7f0000000100)={0x0, 0x21, 0x40, 0x1, 0x3})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3011, 0x0, 0x0, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x5, &(0x7f0000000680)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
openat$mice(0xffffff9c, &(0x7f0000000040), 0x40000)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)

6.802070476s ago: executing program 4 (id=4539):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn'])
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000340)={0x7, 0x7, 0x4}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r5 = io_uring_setup(0x4668, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0)
writev(r1, 0x0, 0x0)

6.091483325s ago: executing program 3 (id=4545):
r0 = getpgid(0xffffffffffffffff)
syz_pidfd_open(r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req={0x9a, 0x6, 0x0, 0x55f1859f}, 0x10)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x800009, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r4 = syz_io_uring_setup(0x4b49, &(0x7f0000000200)={0x0, 0x1715, 0x0, 0x2, 0x2ab, 0x0, r2}, &(0x7f0000000280), &(0x7f0000000300))
r5 = io_uring_setup(0x6db7, &(0x7f0000000180)={0x0, 0x0, 0x400, 0x0, 0x31e, 0x0, r4})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r6 = io_uring_setup(0x6281, &(0x7f0000000080)={0x0, 0x10, 0x400, 0x4, 0x0, 0x0, r5})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
io_setup(0x2, &(0x7f0000000180)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r7, 0x0}])
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x0, 0x4, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x8}]}, 0x24}}, 0x800)
sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r10, @ANYBLOB, @ANYRES32=r12, @ANYRES16], 0x28}, 0x1, 0x6c00, 0x0, 0x20014040}, 0x20000004)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4095, 0xfff}], 0x1)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioperm(0x0, 0xfffc, 0x8005)
close_range(r5, 0xffffffffffffffff, 0x0)

5.882897598s ago: executing program 4 (id=4546):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000000))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000040)=""/191)
ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000100))
ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000140))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000240)={0x2, <r4=>0x0})
ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40086436, &(0x7f0000000280)={r4, 0x10001})
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000002c0)={0x3, 0x14, 0x8, 0x0, "af781cd812f078356b5cfe034e8b3384465222baeba6b4a0bcb895d9e9430a11"})
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000300)={0x0, 0x0, 0x11, 0x5, 0x118, 0xffffffffffffffff})
ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000340)=""/206)
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000440)=""/13)
r5 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x44f, 0xb65d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe1, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0xc7, {0x9, 0x21, 0x3, 0xd0, 0x1, {0x22, 0x4b2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9c, 0x6, 0x1}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x110, 0x5, 0x8, 0x65, 0x10, 0x4}, 0x3e, &(0x7f0000000500)={0x5, 0xf, 0x3e, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x26, 0x0, 0x1, 0x7fff}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x8, 0x6, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x5, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0xba, 0x2, 0x2c, 0xef, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x6, 0x1, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x1, 0x5, 0x6}]}, 0x2, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x103b}}]})
syz_usb_control_io$hid(r5, &(0x7f0000000780)={0x14, &(0x7f0000000600)={0x20, 0x21, 0x16, {0x16, 0x318f41a04b0fb75e, "0e20f2f4f32bc13d32707b9fd0a16f3a2c91cb0c"}}, &(0x7f0000000640)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "a2b1fb04bb315795a59b9621e0d67e1b01e0f3b53d0057a4390bf3ae37d4219dce67856128ef3074362703bb6958b9cefb72d75ed1d978ee3d48688414a96f2e1d5596562adc4884d4b8af57f093363f8108cd8c9c306671dc90da8f86c397758a88651100ee6b6f54e53f15d4da7835aa6e43b19dcc78970b6cabff0b34017b32a1849d8c35a9e0bf2d92b61401d48e85560aacce5998cd20815cc796b88d9586c9e6b126b86dc3dec290e1690ea62533ac69"}}, &(0x7f0000000700)={0x0, 0x22, 0x16, {[@main=@item_4={0x3, 0x0, 0xc, "349459a6"}, @global=@item_4={0x3, 0x1, 0x3f4b7ea514643cdf, "96982dca"}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x7, "90acd5b2"}, @local=@item_4={0x3, 0x2, 0xa, "66cc8920"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0xbc6}}}}, &(0x7f0000000a40)={0x18, &(0x7f00000007c0)={0x0, 0x15, 0xf0, "ee49aab4d7aa91ff96bc2df61141a6fac0a9f9de565983edf1ca75209772b5adede74af056c4cb1c301efebe734358aaf073b6384412334cf619933946989d53fe0c8a45b9a11f25709cf80c45d0d1274ced9f8aa38deaf3f74260d5be6675ebb935e58770d79d3e997f4c1706128773a8427dc11cebb58ac8125ade851a3df4633a469fe120a37c1a51cf3624a7bed6d442409cd0bb6b6b92e125f30d044182ba2859db867aa803f92e1c4c772509a51ba1a9a3b830069496ea5050961d6c2a1659e24ac5362904a2e0d015d255eb2e7fac4e949b3d6556123beaa3b41199f47c771cf94c01e94f9b47a69bffe8dece"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x60}, &(0x7f0000000940)={0x20, 0x1, 0xb5, "d15f28713cec0fbd8b4ed8a175b83d225ff7b437bc3bd4f565eeec91ce664c9c7e4a2124a5cb644d2eb764aaa019a98823c7406aecd18e39ea050f649f19c34e96e7c32f51b14aebceeb333375dfe30861bb8213daad9d4fb17fdcc4d683c2c02772f46f541f31914af48e79a7238e9f556b49759c6b58c405445aeff8bcebedf03a404ce1f3efa26259d2ec4c54cd7ddf63297008b78136a8003898655a05d7115a43d17c93d0906262ea81978e03d21130e9ecb5"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0xb}})
r6 = socket$caif_stream(0x25, 0x1, 0x3)
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000a80)=[r2, r6, r2, r2, r7, r1, r3, 0xffffffffffffffff], 0x8)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000b00)=<r8=>0x0)
sendmsg$AUDIT_SET(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x3e9, 0x1, 0x70bd25, 0x25dfdbfd, {0x4, 0x1, 0x0, r8, 0x4, 0x6, 0x2, 0x9, 0x0, 0x5fd}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4004011)
ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000c00))
ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000c40)={0x0, <r9=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000c80)={r9})
openat$khugepaged_scan(0xffffff9c, &(0x7f0000000cc0), 0x1, 0x0)
io_uring_setup(0x3809, &(0x7f0000000d40)={0x0, 0x307c, 0x1, 0x2, 0x192, 0x0, r1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000dc0)=@arm64={0xa, 0xf, 0x17, '\x00', 0x100000001})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000e00)={0x3, @pix={0xa, 0x2a, 0x55595659, 0x3, 0x3, 0xa, 0xa, 0xffff, 0x1, 0x8, 0x0, 0x2}})
r10 = openat$drirender128(0xffffff9c, &(0x7f0000000f00), 0x60200, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r10, 0xc03064ca, &(0x7f0000001040)={&(0x7f0000000fc0)=[0x0, 0x0], &(0x7f0000001000)=[0x6, 0x1], 0x25, 0x2, 0x2})

3.081012419s ago: executing program 3 (id=4559):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB])
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000002380)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000300)={0xf, 0x8, 0xfa00, {r5, 0xc}}, 0x10)

2.850807506s ago: executing program 4 (id=4560):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn'])
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000340)={0x7, 0x7, 0x4}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42)
r5 = io_uring_setup(0x4668, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0)
writev(r1, 0x0, 0x0)

2.482390008s ago: executing program 0 (id=4565):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn'])
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000340)={0x7, 0x7, 0x4}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r5 = io_uring_setup(0x4668, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0)
writev(r1, 0x0, 0x0)

2.482025797s ago: executing program 1 (id=4566):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_usb_connect(0x6, 0x74e, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x62, 0xdc, 0xde, 0x20, 0x8086, 0x110, 0x982a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73c, 0x4, 0x3, 0x1, 0xa0, 0x3, [{{0x9, 0x4, 0x25, 0x4, 0x10, 0xe6, 0xe6, 0x2e, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "a2403b027e8a"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x7, 0x1, 0x64}, [@acm={0x4, 0x24, 0x2, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x5, 0x5, 0x6, 0x1}]}], [{{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x7, 0x9, 0xfa, [@generic={0x1b, 0x22, "cc8a6b83e2cc829920d52daaf292f44b52dce2c99b089f4c3d"}, @generic={0xe0, 0x21, "c22730a1305aaac5375125ab2e0b5fe5d9faba4d9490ce474683ffed1a0ac906adefbb01455f3dfcf15aa9c28619500493ae4ad3b0f5972284ac9dd625314344ff8c724edb53e5cc645b90c46ee1bf14bf6861fa300364fd8507ea34c0ef021b9e5fba037dae4f85b3561983b0ffd974dbcb906a7718bf59d5299449c17a8d05dd89a5f6edf59980146b727a13e5904efd343bcef69ddd0b420482d507ce3aa5235fd2254d395e283d5647553a534a919b095baa785315a8bab57136d1f5e352c17d3da8a8ab3b4988d16ec8e7471318290f880dea767de8e9beca4911c6"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xf8, 0x3, 0x6}}, {{0x9, 0x5, 0x6, 0x3, 0x460, 0x80, 0x9, 0x65, [@generic={0xad, 0x7, "cb58f476bd88da32b78bfaa4b321adab6365e881ebe31ce99aa1fe85b85c35391e2951669e3b6c11735eef784c823d369c1aa63b691048fcbd71cb4b16d227da5280715e3a14fed64041fa72da372132115baf41eb90d246decb86a9f1ef66f77dc55978e7e80d52108005b57190914ef5e50bfb948676920be46230129351cf8f1dc1af115b45d77aa3d9fb70d1de8ac3d4ed532676a4ede56f0009b6acd6a8c2ced5043c17d7fb556b8f"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x6}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0x2, 0x1, 0x80, [@generic={0x71, 0xb, "1d2fa5ad224d9b3a4b0e26e0af7e597f98f44b6bec4612933c06578a89e53dd21c36947a9643ef05585ec82c7b17a85f4b5bc54a026259bc544f7959fed00f93f4e1d0bc16a3e7368f53ffa3b8390b445c30a5e95ccd74a34fb5497398df5fa1bf8c6da4f7479021c0e33857d47828"}]}}, {{0x9, 0x5, 0xf, 0x11, 0x20, 0xe0, 0x4e, 0xd0, [@generic={0x9, 0x0, "960bd409624222"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0xe, 0xd3, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0x5, 0xfb, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0xfc, 0x1}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x40, 0x7, 0x9}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x2, 0x0, 0xb3}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x9, 0xf2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x6000}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x74, 0x10, 0x80}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x2, 0xbf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x101}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x6, 0x3, 0x9, [@generic={0x2, 0x24}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x1, 0xc9, 0x2f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfe, 0x3}, @generic={0x2, 0x22}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x5, 0x2, 0x7}}]}}, {{0x9, 0x4, 0xfe, 0x5, 0xe, 0x1b, 0x13, 0x27, 0x4, [@hid_hid={0x9, 0x21, 0x3, 0xe, 0x1, {0x22, 0xb15}}], [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0xd, 0x9, [@generic={0x3c, 0x9, "cefa308866694e494f551768b31589882c8154b9084d5482eb39b9c8182c8305a3544a2ddc773eff364065a218932424b29fbd9dcf0887541faf"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0xc, 0x5, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xb58}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x9, 0x2c, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x0, 0xfd, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x60, 0xb}, @generic={0xf, 0x4, "2c52975df58b7c9edbd7c776cb"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x7f, 0xfb, 0x2, [@generic={0x46, 0x7, "05577fa102a656f75448df94a5e57e2e19d35f51b00ec14aff4489b28f335dabe2d34a6fe23e3909a8abd0342f617f12c2b5b67af288329367515dbf44fcef8dc3670773"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x8, 0x8, 0x0, [@generic={0x2, 0x5}, @generic={0xcb, 0xd, "f35d6a14bf95c871b1739ab790f18a7caedc6577ee371f5242b0bf437924560693bbe6df8a78562be6d487d5fa7ae4fdd911cf9296aa09dd1834e80517ac2a3be66b72a83cc1c6c157af4f4a1f4e211b4155d24ce88bd0536cf32df4672a9adc33d2d64999aee94c2d89fb8ef52e06288fa6d49fb3b8692b27d239e1d157aeabc10e3a8860ef7d584fded02f79434a1c1fc93cd787aacf047349cd2870e17c7054c791b086078bfe12b1b40ac9e12a15f493b092d03c6b5ca969e6ed4eb7dd16fea6e169b3b24f0da2"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x4, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x10, 0xff, 0x4}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0xf8, 0xc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xa, 0x97, 0x87}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x9, 0x5, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0xeaba0a628a4b49ea, 0x21, 0xd}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x3, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xba, 0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x8, 0x1, 0xf, [@generic={0xe, 0x8, "98c243eee51c5e5c9c8fc31a"}]}}]}}, {{0x9, 0x4, 0x1c, 0x9, 0x8, 0xff, 0xff, 0xff, 0x1, [], [{{0x9, 0x5, 0x88, 0xc, 0x3ff, 0x80, 0x4, 0x4, [@generic={0xc4, 0xe, "1f8a1c50c22ddc81e90a72c7067a21fcb671bbacd70aec80df182c8664eac02d1d438f2b0297001897d037849a0c0941e4b8a91499571f51462fd43c30d60cd0e8939497fd14461f5c15d00564476875de5d1cd416c4bf8e6edca684cea8cec82c63530b98e74287cc962691a1baf9c7a494f04944b737ee1b13a99e8625112bc5cf229aa208b2fa41edef25be98e97ecec35c34c540da90b8d2620d343a21c076759ffb6896ea925499e53a0a37f343d2f551089e46298b1abb9a4ccd0dcf103152"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x3e}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x6, 0xfe, 0x9, [@generic={0x4c, 0xf, "90d56a6894c7a64211688bedc5d7495119927cac9b75c889c68f2f12352d2fdbd1acd3eb113eb66ed5d861b38c6a38ccd1c26694bae94d2a7041d705afef4e252bd8039cc0cca7e82a35"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0xa, 0x2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x1}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x0, 0x9, 0x10}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x4, 0x0, 0x6e, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0xf873}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb, 0x5}]}}, {{0x9, 0x5, 0x85, 0x0, 0x40, 0x5e, 0xa, 0x81}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x9, 0x6, 0x0, [@generic={0x1b, 0x46e326964ef02a37, "3da2963fae8d7f970fbfb64bb6f13d6b067fd0b3bad96cd17d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x7, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x40, 0xa1}]}}]}}, {{0x9, 0x4, 0x51, 0x0, 0x0, 0x91, 0xac, 0x7b, 0xf5, [@generic={0x3a, 0x23, "a6dcabeb49e7f303ffa4e9528f3426c9913223545c39ef411d6fdfae92f74dfaafe90a69781834e0a9e200858881cb81ad0dba66dfaf7e04"}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x4, 0xf8, 0x7, 0xff, 0x4}, 0x2d, &(0x7f0000000cc0)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x33, "f5c0e04ec87d40e15c89179748c87e7f"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "413a498da35187bb98daa8a9f712406b"}]}, 0x1, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x1c09}}]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.951822005s ago: executing program 4 (id=4567):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='wake_reaper\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd\x00')
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101102)
r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402)
r8 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0205710, &(0x7f0000000100)={0x0, 0x21, 0x40, 0x1, 0x3})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3011, 0x0, 0x0, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x5, &(0x7f0000000680)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
openat$mice(0xffffff9c, 0x0, 0x40000)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)

1.951453021s ago: executing program 3 (id=4568):
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0x2}, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
preadv(r3, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/187, 0xbb}], 0x4, 0x4, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ac1000/0x1000)=nil, 0x1000}, 0x1})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000580)=""/95)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x15, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000000000148fc9f1c1c24221499fcdbdf250900020073797a32000000000800410073697700140033006c6f00cea21096ebc92651000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810)

1.950858191s ago: executing program 1 (id=4569):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_usb_connect(0x6, 0x661, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x62, 0xdc, 0xde, 0x20, 0x8086, 0x110, 0x982a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64f, 0x3, 0x3, 0x1, 0xa0, 0x3, [{{0x9, 0x4, 0x25, 0x4, 0x10, 0xe6, 0xe6, 0x2e, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "a2403b027e8a"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x7, 0x1, 0x64}, [@acm={0x4, 0x24, 0x2, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x5, 0x5, 0x6, 0x1}]}], [{{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x7, 0x9, 0xfa, [@generic={0x1b, 0x22, "cc8a6b83e2cc829920d52daaf292f44b52dce2c99b089f4c3d"}, @generic={0xe0, 0x21, "c22730a1305aaac5375125ab2e0b5fe5d9faba4d9490ce474683ffed1a0ac906adefbb01455f3dfcf15aa9c28619500493ae4ad3b0f5972284ac9dd625314344ff8c724edb53e5cc645b90c46ee1bf14bf6861fa300364fd8507ea34c0ef021b9e5fba037dae4f85b3561983b0ffd974dbcb906a7718bf59d5299449c17a8d05dd89a5f6edf59980146b727a13e5904efd343bcef69ddd0b420482d507ce3aa5235fd2254d395e283d5647553a534a919b095baa785315a8bab57136d1f5e352c17d3da8a8ab3b4988d16ec8e7471318290f880dea767de8e9beca4911c6"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xf8, 0x3, 0x6}}, {{0x9, 0x5, 0x6, 0x3, 0x460, 0x80, 0x9, 0x65, [@generic={0xad, 0x7, "cb58f476bd88da32b78bfaa4b321adab6365e881ebe31ce99aa1fe85b85c35391e2951669e3b6c11735eef784c823d369c1aa63b691048fcbd71cb4b16d227da5280715e3a14fed64041fa72da372132115baf41eb90d246decb86a9f1ef66f77dc55978e7e80d52108005b57190914ef5e50bfb948676920be46230129351cf8f1dc1af115b45d77aa3d9fb70d1de8ac3d4ed532676a4ede56f0009b6acd6a8c2ced5043c17d7fb556b8f"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x6}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0x2, 0x1, 0x80, [@generic={0x71, 0xb, "1d2fa5ad224d9b3a4b0e26e0af7e597f98f44b6bec4612933c06578a89e53dd21c36947a9643ef05585ec82c7b17a85f4b5bc54a026259bc544f7959fed00f93f4e1d0bc16a3e7368f53ffa3b8390b445c30a5e95ccd74a34fb5497398df5fa1bf8c6da4f7479021c0e33857d47828"}]}}, {{0x9, 0x5, 0xf, 0x11, 0x20, 0xe0, 0x4e, 0xd0, [@generic={0x9, 0x0, "960bd409624222"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0xe, 0xd3, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0x5, 0xfb, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0xfc, 0x1}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x40, 0x7, 0x9}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x2, 0x0, 0xb3}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x9, 0xf2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x6000}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x74, 0x10, 0x80}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x2, 0xbf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x101}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x6, 0x3, 0x9, [@generic={0xd6, 0x24, "94730c430ba6e826e6b3428ca8f3c50ffd0ee83c18d0beccd2c8fc0e3ee28165de5c41b47e8b9048aa83a4e6dad6c809983ed8bb5d7336de35da6af525b0a430b5ff0fa99dae2cb6c3e6328f9b68fbab247f78d9d52be8fa580275680f25cb8cb8fa29767e1424d397834ac904230f77a0388630348cd21335b1b489fc619fdc9049c86e43e16e6e4b4393a9da0d40a5cd416cc0144db0d5aea4aba5ebbfe4a177d89962c534092ec53b12a234e6cd6f3d81d3b2f1622aa0386b4602ba9c1d25ce8abf12b94061b48734229e9c20f820e636b3a3"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x1, 0xc9, 0x2f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfe, 0x3}, @generic={0x1a, 0x22, "b83f0c816f62e67130fb694aba2e9a4073f63ff94d58da6e"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x5, 0x2, 0x7}}]}}, {{0x9, 0x4, 0xfe, 0x5, 0xb, 0x1b, 0x13, 0x27, 0x4, [@hid_hid={0x9, 0x21, 0x3, 0xe, 0x1, {0x22, 0xb15}}], [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0xd, 0x9, [@generic={0x3c, 0x9, "cefa308866694e494f551768b31589882c8154b9084d5482eb39b9c8182c8305a3544a2ddc773eff364065a218932424b29fbd9dcf0887541faf"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0xc, 0x5, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xb58}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x55}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x9, 0x2c, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x0, 0xfd, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x60, 0xb}, @generic={0x2, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x7f, 0xfb, 0x2, [@generic={0x46, 0x7, "05577fa102a656f75448df94a5e57e2e19d35f51b00ec14aff4489b28f335dabe2d34a6fe23e3909a8abd0342f617f12c2b5b67af288329367515dbf44fcef8dc3670773"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x8, 0x8, 0x0, [@generic={0x25, 0x5, "6fda6b325a4f729aba6a9cdf8001b48eaf6a35c5622ea7f9f16043a56fbecdcc4756b0"}, @generic={0xcb, 0xd, "f35d6a14bf95c871b1739ab790f18a7caedc6577ee371f5242b0bf437924560693bbe6df8a78562be6d487d5fa7ae4fdd911cf9296aa09dd1834e80517ac2a3be66b72a83cc1c6c157af4f4a1f4e211b4155d24ce88bd0536cf32df4672a9adc33d2d64999aee94c2d89fb8ef52e06288fa6d49fb3b8692b27d239e1d157aeabc10e3a8860ef7d584fded02f79434a1c1fc93cd787aacf047349cd2870e17c7054c791b086078bfe12b1b40ac9e12a15f493b092d03c6b5ca969e6ed4eb7dd16fea6e169b3b24f0da2"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x4, 0x7, 0x5}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x10, 0xff, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xa, 0x97, 0x87}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x8, 0x1, 0xf, [@generic={0xb, 0x8, "98c243eee51c5e5c9c"}]}}]}}, {{0x9, 0x4, 0x51, 0x0, 0x3, 0x91, 0xac, 0x7b, 0xf5, [], [{{0x9, 0x5, 0xb, 0x10, 0x400, 0x3, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfff}, @generic={0x2, 0x26}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0xb6, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xfa, 0x17, 0xaa}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x4, 0xf8, 0x7, 0xff, 0x4}, 0x2d, &(0x7f0000000cc0)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x33, "f5c0e04ec87d40e15c89179748c87e7f"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "413a498da35187bb98daa8a9f712406b"}]}, 0x1, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x1c09}}]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.581596939s ago: executing program 0 (id=4570):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r3=>r2, 0x0, 0x0, 0x9, 0x0, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7800, 0x78a0}})
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x0, 0x80, 0x0, 0xcb, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, @rand_addr=' \x01\x00'}})
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
setresuid(0x0, 0xee01, 0xee00)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r5, @ANYRESHEX=r4], 0xfc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$NBD_DISCONNECT(r4, 0xab08)
io_submit(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)

1.581106545s ago: executing program 0 (id=4571):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x4, 0x0, 0x2}, 0x18, 0x0) (async)
r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xfffffffffffffe64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x1202}, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="eeffffffffffaaaaaaaaaa000800450318664a776c10ae3f907800000000e000000124808100000000000000100008000000000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) (async, rerun: 64)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=<r4=>0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x101) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x800)
sendmsg$sock(r6, &(0x7f00000016c0)={&(0x7f00000003c0)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000440)}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="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", 0xfe}, {&(0x7f0000001580)="6457038960d371caccfffd94521e8635107ce77ee79e934421c041bef4fe6d7830b47472b9be8218d1eb8587c7e3d2ce71ad463374d440ae712c939b41fd16686ffe6aa8a59c442e0d1ca5a07068188a4be61183bca493be31aafdb43a75b34f845e53ea0e85b1e924fe45bd7b429b962f6f3af76b5123b22ee80294fd91df5e0fc76f9109ec995c95746ab472b077f9fa676f7d56ee491258d7b7d68fa74d13a3ce0bffe5206431eb19dd9c0bf8a91cc9786de57eab11bce16caafd3c8a208976b264914a51c60703f5d23ece9f088a0ce9", 0xd2}], 0x4}, 0x8010) (async)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000034cb5e6d106604f26f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000010001a800c000a800500080002000000140003006970365f767469300000000000000000"], 0x44}}, 0x0)

1.512980177s ago: executing program 0 (id=4572):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000000c0)={0x24, r1, 0xc01, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x402}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x0)

1.511754633s ago: executing program 0 (id=4573):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = epoll_create1(0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioperm(0xd005, 0x101, 0x6)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000380))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000380)={<r9=>0x0})
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xb}, &(0x7f0000000280)=0x8)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000240)={r9, 0x0, r8})
fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff})
close_range(r1, 0xffffffffffffffff, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)

1.382838915s ago: executing program 1 (id=4574):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
mkdir(&(0x7f0000000300)='./file0\x00', 0xa1ff)

1.382410094s ago: executing program 1 (id=4575):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn'])
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000340)={0x7, 0x7, 0x4}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42)
r5 = io_uring_setup(0x4668, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0)
writev(r1, 0x0, 0x0)

1.019842221s ago: executing program 4 (id=4576):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETNOCSUM(r0, 0xc0189436, 0x1ffffffe)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefe, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x40}], 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
read$FUSE(0xffffffffffffffff, &(0x7f0000000f00)={0x2020}, 0xffffffffffffff4f)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000640)={'vxcan1\x00', <r5=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000680)={0x1d, r5, 0x2, {0x2, 0x1, 0x3}}, 0x18)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRES32=r5, @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB="434aaf43e672822c522e8f1cb01098a68c5272ccc61c5d1887b89643de3a6492fdbcc49dddf017d0f70a1e27749ca9bcd200e8adb18f785107afd8f64c30db1dff371e6b70f6e2625e0e3034f3a480e0a0a03f7d86f3d8953b853d838bcc597cc9907e936a5f160d7901506c6163573efe7505f81482b5748e9e9af9652c4c5d38856def8ed6d1f9a0ab53a9f3a842a2debcdd7e7be82bb4b1d0db6b072550417568dc8459a437d0be257ba49aabbe8cd37f10165b504b16ec5ac147283eac2490ccdb60a86969aa55db7e0038d6dda62215d02b157b79ccc416"])
r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000280), 0x2000, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000600)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4008095)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2e, 0xff, &(0x7f00000003c0)=""/255, 0x41100, 0x2, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[r0, r6, r6, 0x1, r6], &(0x7f0000000540)=[{0x2, 0x1, 0x1, 0x4}, {0x5, 0x5, 0xd, 0xa}, {0x3, 0x2, 0x0, 0x5}, {0x1, 0x4, 0xb, 0xb}, {0x2, 0x2, 0x9, 0xb}, {0x0, 0x4, 0x3, 0x6}, {0x3, 0x3, 0x1, 0x7}], 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mount$afs(&(0x7f00000002c0)=ANY=[@ANYBLOB="237379123e372002869f4f2d7a313a7379"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[], 0x20)

882.893135ms ago: executing program 3 (id=4577):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB])
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000002380)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000300)={0xf, 0x8, 0xfa00, {r4, 0xc}}, 0x10)

413.023141ms ago: executing program 0 (id=4578):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn'])
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000340)={0x7, 0x7, 0x4}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r5 = io_uring_setup(0x4668, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0)
writev(r1, &(0x7f0000000300), 0x0)

230.715011ms ago: executing program 1 (id=4579):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
pipe(&(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='<', 0x1}], 0x1, 0xa)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272694467655f736c617665000000000c00058008002200", @ANYRES16=r1, @ANYBLOB], 0x44}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
close(r6)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x400, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x496}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[], 0xa0}}, 0x890)
socket$inet_sctp(0x2, 0x1, 0x84)
request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000001ffb)={'syz', 0x2, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@host})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
personality(0x10)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00')
fchdir(r9)
r10 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r10}, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)

142.882306ms ago: executing program 1 (id=4580):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x10008ff, &(0x7f0000000340))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4, 0x0, 0x2}, 0x18)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000040018110000", @ANYRES32, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff04"], 0x528}}, 0xc000)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x80000034)
fcntl$setsig(r8, 0xa, 0x21)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c5100, 0x0)
creat(&(0x7f0000000180)='./file1\x00', 0x80)
syz_io_uring_setup(0xec4, &(0x7f0000000500)={0x0, 0xfffffffb, 0x2, 0x3, 0x78}, &(0x7f0000000400), &(0x7f0000000300))
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4207, r9)
ptrace$getregset(0x4205, r9, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})

0s ago: executing program 4 (id=4581):
inotify_init()
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_PIE_ON(r0, 0x7005)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x6, 0xa00000000000000, 0x0, 0x2}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.745809][T17025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.749247][T17025] batman_adv: batadv0: Interface activated: batadv_slave_1
[  613.759137][T17025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  613.761628][T17025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  613.764464][T17025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  613.766925][T17025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.817062][  T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.819353][  T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.829250][  T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.831467][  T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.010910][T17085] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3467'.
[  614.073124][T13692] hsr_slave_0: left promiscuous mode
[  614.075026][T13692] hsr_slave_1: left promiscuous mode
[  614.076811][T13692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  614.078934][T13692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  614.081360][T13692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  614.084209][T13692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  614.106411][T13692] veth1_macvtap: left promiscuous mode
[  614.108146][T13692] veth0_macvtap: left promiscuous mode
[  614.109855][T13692] veth1_vlan: left promiscuous mode
[  614.111398][T13692] veth0_vlan: left promiscuous mode
[  614.167195][T13692] pim6reg (unregistering): left allmulticast mode
[  614.252919][  T834] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  614.424136][  T834] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  614.426719][  T834] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  614.429591][  T834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  614.432239][  T834] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  614.436475][  T834] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  614.440831][  T834] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  614.445645][  T834] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  614.447931][  T834] usb 5-1: Product: syz
[  614.449230][  T834] usb 5-1: Manufacturer: syz
[  614.453032][  T834] cdc_wdm 5-1:1.0: skipping garbage
[  614.455408][  T834] cdc_wdm 5-1:1.0: skipping garbage
[  614.460501][  T834] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  614.463007][  T834] cdc_wdm 5-1:1.0: Unknown control protocol
[  614.655828][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'.
[  614.686082][T14069] Bluetooth: hci3: command tx timeout
[  614.708399][ T6873] usb 5-1: USB disconnect, device number 50
[  614.860823][T13692] team0 (unregistering): Port device team_slave_1 removed
[  614.889085][T17119] FAULT_INJECTION: forcing a failure.
[  614.889085][T17119] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  614.893351][T17119] CPU: 3 UID: 0 PID: 17119 Comm: syz.4.3473 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  614.893366][T17119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  614.893372][T17119] Call Trace:
[  614.893380][T17119]  <TASK>
[  614.893385][T17119]  dump_stack_lvl+0x16c/0x1f0
[  614.893420][T17119]  should_fail_ex+0x50a/0x650
[  614.893441][T17119]  ? __pfx___might_resched+0x10/0x10
[  614.893456][T17119]  should_fail_alloc_page+0xe7/0x130
[  614.893469][T17119]  prepare_alloc_pages.constprop.0+0x16f/0x560
[  614.893488][T17119]  __alloc_frozen_pages_noprof+0x18e/0x2470
[  614.893501][T17119]  ? hlock_class+0x4e/0x130
[  614.893515][T17119]  ? mark_lock+0xb5/0xc60
[  614.893528][T17119]  ? __pfx_mark_lock+0x10/0x10
[  614.893540][T17119]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  614.893551][T17119]  ? hlock_class+0x4e/0x130
[  614.893565][T17119]  ? hlock_class+0x4e/0x130
[  614.893579][T17119]  ? mark_lock+0xb5/0xc60
[  614.893590][T17119]  ? hlock_class+0x4e/0x130
[  614.893607][T17119]  ? hlock_class+0x4e/0x130
[  614.893621][T17119]  ? __lock_acquire+0xcc5/0x3c40
[  614.893632][T17119]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  614.893646][T17119]  ? policy_nodemask+0xea/0x4e0
[  614.893660][T17119]  alloc_pages_mpol+0x1fc/0x540
[  614.893672][T17119]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  614.893689][T17119]  ? __lock_acquire+0x15a9/0x3c40
[  614.893703][T17119]  folio_alloc_mpol_noprof+0x36/0x2f0
[  614.893718][T17119]  vma_alloc_folio_noprof+0xee/0x1b0
[  614.893732][T17119]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  614.893745][T17119]  ? find_held_lock+0x2d/0x110
[  614.893762][T17119]  do_pte_missing+0x202f/0x3e10
[  614.893778][T17119]  __handle_mm_fault+0x1166/0x2c60
[  614.893793][T17119]  ? __pfx___handle_mm_fault+0x10/0x10
[  614.893803][T17119]  ? follow_page_pte+0x3ac/0x1490
[  614.893814][T17119]  ? __pfx_lock_release+0x10/0x10
[  614.893835][T17119]  handle_mm_fault+0x3fa/0xaa0
[  614.893849][T17119]  __get_user_pages+0x773/0x36f0
[  614.893864][T17119]  ? __pfx___get_user_pages+0x10/0x10
[  614.893873][T17119]  ? down_read_killable+0xcc/0x380
[  614.893884][T17119]  ? __pfx_down_read_killable+0x10/0x10
[  614.893895][T17119]  ? hlock_class+0x4e/0x130
[  614.893908][T17119]  ? mark_lock+0xb5/0xc60
[  614.893920][T17119]  get_user_pages_unlocked+0x1c2/0x780
[  614.893933][T17119]  ? __pfx_get_user_pages_unlocked+0x10/0x10
[  614.893943][T17119]  ? get_user_pages_fast_only+0xaf/0x100
[  614.893954][T17119]  ? __pfx_get_user_pages_fast_only+0x10/0x10
[  614.893965][T17119]  ? __pfx___might_resched+0x10/0x10
[  614.893980][T17119]  hva_to_pfn+0x8be/0xc20
[  614.893996][T17119]  ? __pfx_hva_to_pfn+0x10/0x10
[  614.894009][T17119]  ? hlock_class+0x4e/0x130
[  614.894026][T17119]  ? find_held_lock+0x2d/0x110
[  614.894042][T17119]  ? xa_load+0x14a/0x2c0
[  614.894051][T17119]  ? __pfx_lock_release+0x10/0x10
[  614.894064][T17119]  kvm_follow_pfn+0x29f/0x3f0
[  614.894079][T17119]  __kvm_faultin_pfn+0x11c/0x1a0
[  614.894092][T17119]  ? __pfx___kvm_faultin_pfn+0x10/0x10
[  614.894106][T17119]  ? __pfx_xa_load+0x10/0x10
[  614.894117][T17119]  ? hlock_class+0x4e/0x130
[  614.894131][T17119]  ? mark_lock+0xb5/0xc60
[  614.894143][T17119]  kvm_mmu_faultin_pfn+0x583/0x2190
[  614.894159][T17119]  ? __pfx_fast_page_fault+0x10/0x10
[  614.894171][T17119]  ? vmx_vcpu_load_vmcs+0x26b/0x850
[  614.894182][T17119]  ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10
[  614.894195][T17119]  ? __kvm_mmu_topup_memory_cache+0x330/0x600
[  614.894208][T17119]  ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10
[  614.894217][T17119]  ? __pfx_mark_lock+0x10/0x10
[  614.894232][T17119]  kvm_tdp_page_fault+0x182/0x3d0
[  614.894243][T17119]  kvm_mmu_do_page_fault+0x587/0x6c0
[  614.894255][T17119]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  614.894264][T17119]  ? intel_is_valid_msr+0xe8/0x700
[  614.894279][T17119]  ? hlock_class+0x4e/0x130
[  614.894294][T17119]  kvm_mmu_page_fault+0x20f/0x1bd0
[  614.894308][T17119]  ? __pfx___lock_acquire+0x10/0x10
[  614.894319][T17119]  ? __pfx_kvm_mmu_page_fault+0x10/0x10
[  614.894329][T17119]  ? __pfx_mark_lock+0x10/0x10
[  614.894339][T17119]  ? clear_bhb_loop+0x35/0x90
[  614.894357][T17119]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  614.894370][T17119]  handle_ept_violation+0x25a/0x640
[  614.894380][T17119]  ? __pfx_handle_ept_violation+0x10/0x10
[  614.894389][T17119]  vmx_handle_exit+0x6a4/0x1a30
[  614.894405][T17119]  vcpu_run+0x2aaf/0x4c00
[  614.894421][T17119]  ? __pfx_vcpu_run+0x10/0x10
[  614.894430][T17119]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  614.894441][T17119]  ? rcu_is_watching+0x12/0xc0
[  614.894456][T17119]  ? trace_lock_acquire+0x14e/0x1f0
[  614.894464][T17119]  ? __local_bh_enable_ip+0xa4/0x120
[  614.894477][T17119]  ? lockdep_hardirqs_on+0x7c/0x110
[  614.894489][T17119]  ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0
[  614.894501][T17119]  ? lock_acquire+0x2f/0xb0
[  614.894513][T17119]  ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0
[  614.894523][T17119]  kvm_arch_vcpu_ioctl_run+0x865/0x17f0
[  614.894537][T17119]  kvm_vcpu_ioctl+0x5ea/0x16b0
[  614.894550][T17119]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  614.894561][T17119]  ? tomoyo_path_number_perm+0x190/0x5b0
[  614.894573][T17119]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  614.894582][T17119]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  614.894595][T17119]  ? do_vfs_ioctl+0x513/0x1950
[  614.894610][T17119]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  614.894631][T17119]  ? __pfx_lock_release+0x10/0x10
[  614.894642][T17119]  ? trace_lock_acquire+0x14e/0x1f0
[  614.894652][T17119]  kvm_vcpu_compat_ioctl+0x210/0x3d0
[  614.894664][T17119]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  614.894676][T17119]  ? __fget_files+0x206/0x3a0
[  614.894691][T17119]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  614.894703][T17119]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  614.894718][T17119]  __do_fast_syscall_32+0x73/0x120
[  614.894728][T17119]  do_fast_syscall_32+0x32/0x80
[  614.894737][T17119]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  614.894751][T17119] RIP: 0023:0xf7f94579
[  614.894759][T17119] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  614.894768][T17119] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  614.894777][T17119] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80
[  614.894783][T17119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  614.894788][T17119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  614.894793][T17119] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  614.894798][T17119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  614.894809][T17119]  </TASK>
[  615.124303][T13692] team0 (unregistering): Port device team_slave_0 removed
[  615.716425][T17108] netlink: 'syz.3.3471': attribute type 6 has an invalid length.
[  615.789385][T17131] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3476'.
[  616.423778][T17170] /dev/sr0: Can't open blockdev
[  616.762008][T14069] Bluetooth: hci3: command tx timeout
[  616.784554][T17192] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3485'.
[  617.079829][T17203] program syz.4.3490 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  617.092456][ T6312] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  617.243460][ T6312] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  617.245935][ T6312] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  617.248737][ T6312] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  617.251359][ T6312] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  617.254502][ T6312] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  617.258744][ T6312] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  617.261409][ T6312] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  617.263808][ T6312] usb 5-1: Product: syz
[  617.265016][ T6312] usb 5-1: Manufacturer: syz
[  617.268508][ T6312] cdc_wdm 5-1:1.0: skipping garbage
[  617.270067][ T6312] cdc_wdm 5-1:1.0: skipping garbage
[  617.273107][ T6312] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  617.274974][ T6312] cdc_wdm 5-1:1.0: Unknown control protocol
[  617.405548][T17218] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3495'.
[  617.478428][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3488'.
[  617.488247][ T5296] usb 5-1: USB disconnect, device number 51
[  617.679273][T17226] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  617.681206][T17226] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  617.683570][T17226] vhci_hcd vhci_hcd.0: Device attached
[  617.686326][T17227] vhci_hcd: connection closed
[  617.686484][   T12] vhci_hcd: stop threads
[  617.689186][   T12] vhci_hcd: release socket
[  617.690523][   T12] vhci_hcd: disconnect device
[  618.261663][T17240] netlink: 'syz.0.3499': attribute type 10 has an invalid length.
[  618.274458][T17240] bond0: (slave batadv0): Releasing backup interface
[  618.284752][T17240] 8021q: adding VLAN 0 to HW filter on device batadv0
[  618.293829][T17240] team0: Port device batadv0 added
[  618.755948][T17246] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3505'.
[  618.842047][T14069] Bluetooth: hci3: command tx timeout
[  619.197255][T17262] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  619.199812][T17262] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  619.203920][T17262] vhci_hcd vhci_hcd.0: Device attached
[  619.210368][T17263] vhci_hcd: connection closed
[  619.211034][ T1141] vhci_hcd: stop threads
[  619.216405][ T1141] vhci_hcd: release socket
[  619.218147][ T1141] vhci_hcd: disconnect device
[  619.898346][T17278] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3514'.
[  620.267565][T17285] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3518'.
[  620.314556][T17287] xt_CT: No such helper "snmp"
[  620.413339][T17303] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  620.415296][T17303] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  620.417576][T17303] vhci_hcd vhci_hcd.0: Device attached
[  620.420174][T17305] vhci_hcd: connection closed
[  620.420380][   T11] vhci_hcd: stop threads
[  620.424079][   T11] vhci_hcd: release socket
[  620.424089][   T11] vhci_hcd: disconnect device
[  620.922019][T14069] Bluetooth: hci3: command tx timeout
[  621.234737][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3527'.
[  621.237304][T17328] bridge_slave_1: left allmulticast mode
[  621.238951][T17328] bridge_slave_1: left promiscuous mode
[  621.240626][T17328] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.248146][T17328] bridge_slave_0: left allmulticast mode
[  621.249911][T17328] bridge_slave_0: left promiscuous mode
[  621.251599][T17328] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.396800][T17334] openvswitch: netlink: IP tunnel dst address not specified
[  621.400406][   T40] kauditd_printk_skb: 15 callbacks suppressed
[  621.400416][   T40] audit: type=1326 audit(1738723823.794:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17332 comm="syz.0.3530" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf739e579 code=0x0
[  621.453403][   T40] audit: type=1326 audit(1738723823.854:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17332 comm="syz.0.3530" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x0
[  621.555817][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3533'.
[  621.648431][T17352] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  621.650421][T17352] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  621.654800][T17352] vhci_hcd vhci_hcd.0: Device attached
[  621.657892][T17353] vhci_hcd: connection closed
[  621.658116][T15308] vhci_hcd: stop threads
[  621.660827][T15308] vhci_hcd: release socket
[  621.662365][T15308] vhci_hcd: disconnect device
[  622.156010][T17364] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[  622.157973][T17363] IPVS: stopping backup sync thread 17364 ...
[  622.194291][T17333] Bluetooth: hci0: Opcode 0x080f failed: -4
[  622.195226][T17344] syz.0.3530 (17344) used greatest stack depth: 19760 bytes left
[  622.830673][T17384] netlink: 'syz.0.3543': attribute type 10 has an invalid length.
[  622.833579][T17384] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.835770][T17384] bridge0: port 1(bridge_slave_0) entered disabled state
[  622.841323][T17384] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.843436][T17384] bridge0: port 2(bridge_slave_1) entered forwarding state
[  622.845693][T17384] bridge0: port 1(bridge_slave_0) entered blocking state
[  622.847781][T17384] bridge0: port 1(bridge_slave_0) entered forwarding state
[  622.866687][T17384] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  622.868196][T17386] Mount JFS Failure: -22
[  622.870485][T17386] jfs_mount failed w/return code = -22
[  622.930282][T17391] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  622.932966][T17391] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  622.937451][T17391] vhci_hcd vhci_hcd.0: Device attached
[  622.941282][T17392] vhci_hcd: connection closed
[  622.941529][T15308] vhci_hcd: stop threads
[  622.946939][T15308] vhci_hcd: release socket
[  622.948256][T15308] vhci_hcd: disconnect device
[  623.260556][T17405] netlink: 'syz.4.3548': attribute type 10 has an invalid length.
[  623.272258][T17405] 8021q: adding VLAN 0 to HW filter on device batadv0
[  623.276751][T17405] team0: Port device batadv0 added
[  623.402026][T14756] Bluetooth: hci0: command 0x0c1a tx timeout
[  623.403972][T14069] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  623.723266][ T1414] ieee802154 phy0 wpan0: encryption failed: -22
[  623.808748][T17417] Mount JFS Failure: -22
[  623.810176][T17417] jfs_mount failed w/return code = -22
[  623.846902][T17426] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  623.848979][T17426] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  623.851487][T17426] vhci_hcd vhci_hcd.0: Device attached
[  623.856626][T17427] vhci_hcd: connection closed
[  623.856973][ T1141] vhci_hcd: stop threads
[  623.859670][ T1141] vhci_hcd: release socket
[  623.861014][ T1141] vhci_hcd: disconnect device
[  624.157747][T17438] .th0: renamed from bond0 (while UP)
[  624.424165][T17450] Mount JFS Failure: -22
[  624.425511][T17450] jfs_mount failed w/return code = -22
[  625.178203][T17482] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  625.180147][T17482] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  625.183406][T17482] vhci_hcd vhci_hcd.0: Device attached
[  625.191502][T17483] vhci_hcd: connection closed
[  625.191689][T17117] vhci_hcd: stop threads
[  625.194581][T17117] vhci_hcd: release socket
[  625.195930][T17117] vhci_hcd: disconnect device
[  625.297395][T17486] Mount JFS Failure: -22
[  625.298720][T17486] jfs_mount failed w/return code = -22
[  625.483201][T14069] Bluetooth: hci0: command 0x0c1a tx timeout
[  625.546444][T17490] Mount JFS Failure: -22
[  625.548213][T17490] jfs_mount failed w/return code = -22
[  625.940363][   T40] audit: type=1800 audit(1738723828.334:5790): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3581" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  626.297007][T17520] Mount JFS Failure: -22
[  626.298335][T17520] jfs_mount failed w/return code = -22
[  626.717580][T17542] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  626.719550][T17542] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  626.722066][T17542] vhci_hcd vhci_hcd.0: Device attached
[  626.725230][T17543] vhci_hcd: connection closed
[  626.725447][T15308] vhci_hcd: stop threads
[  626.728175][T15308] vhci_hcd: release socket
[  626.729505][T15308] vhci_hcd: disconnect device
[  627.319387][T17569] Mount JFS Failure: -22
[  627.320702][T17569] jfs_mount failed w/return code = -22
[  627.608703][T17587] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  627.613851][T17587] batman_adv: batadv0: Adding interface: gretap1
[  627.615808][T17587] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  627.623036][T17587] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  628.110869][T17571] Bluetooth: hci0: Opcode 0x080f failed: -4
[  628.489232][T17599] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3601'.
[  628.521262][T17603] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  628.523242][T17603] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  628.525632][T17603] vhci_hcd vhci_hcd.0: Device attached
[  628.528464][T17604] vhci_hcd: connection closed
[  628.528608][   T12] vhci_hcd: stop threads
[  628.531308][   T12] vhci_hcd: release socket
[  628.532766][   T12] vhci_hcd: disconnect device
[  629.226853][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3610'.
[  629.322020][T14069] Bluetooth: hci0: command 0x0c1a tx timeout
[  629.367454][T17637] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3612'.
[  630.982054][   T63] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  631.153228][   T63] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  631.155804][   T63] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  631.158720][   T63] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  631.161312][   T63] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  631.165709][   T63] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  631.171120][   T63] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  631.174568][   T63] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  631.176939][   T63] usb 6-1: Product: syz
[  631.178172][   T63] usb 6-1: Manufacturer: syz
[  631.185440][   T63] cdc_wdm 6-1:1.0: skipping garbage
[  631.187017][   T63] cdc_wdm 6-1:1.0: skipping garbage
[  631.189062][   T63] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  631.190796][   T63] cdc_wdm 6-1:1.0: Unknown control protocol
[  631.393687][T17659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3618'.
[  631.399012][ T6010] usb 6-1: USB disconnect, device number 51
[  631.558686][T17700] FAULT_INJECTION: forcing a failure.
[  631.558686][T17700] name failslab, interval 1, probability 0, space 0, times 0
[  631.562654][T17700] CPU: 2 UID: 0 PID: 17700 Comm: syz.0.3629 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  631.562668][T17700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  631.562674][T17700] Call Trace:
[  631.562677][T17700]  <TASK>
[  631.562681][T17700]  dump_stack_lvl+0x16c/0x1f0
[  631.562700][T17700]  should_fail_ex+0x50a/0x650
[  631.562711][T17700]  ? fs_reclaim_acquire+0xae/0x150
[  631.562728][T17700]  should_failslab+0xc2/0x120
[  631.562741][T17700]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  631.562752][T17700]  ? vma_merge_new_range+0x40a/0xbb0
[  631.562763][T17700]  ? vm_area_alloc+0x1f/0x1c0
[  631.562778][T17700]  vm_area_alloc+0x1f/0x1c0
[  631.562790][T17700]  __mmap_region+0x108d/0x2760
[  631.562809][T17700]  ? __pfx___mmap_region+0x10/0x10
[  631.562824][T17700]  ? hlock_class+0x4e/0x130
[  631.562838][T17700]  ? mark_lock+0xb5/0xc60
[  631.562872][T17700]  mmap_region+0x1ab/0x3f0
[  631.562885][T17700]  do_mmap+0xd8d/0x11b0
[  631.562897][T17700]  ? __pfx_do_mmap+0x10/0x10
[  631.562907][T17700]  ? __pfx_down_write_killable+0x10/0x10
[  631.562920][T17700]  vm_mmap_pgoff+0x203/0x3a0
[  631.562932][T17700]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  631.562944][T17700]  ? __fget_files+0x206/0x3a0
[  631.562958][T17700]  ksys_mmap_pgoff+0x32c/0x5c0
[  631.562967][T17700]  ? __ia32_sys_mmap_pgoff+0x11/0x1b0
[  631.562977][T17700]  __do_fast_syscall_32+0x73/0x120
[  631.562988][T17700]  do_fast_syscall_32+0x32/0x80
[  631.562996][T17700]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  631.563012][T17700] RIP: 0023:0xf739e579
[  631.563019][T17700] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  631.563029][T17700] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0
[  631.563038][T17700] RAX: ffffffffffffffda RBX: 0000000020001000 RCX: 000000000000a000
[  631.563044][T17700] RDX: 0000000007800007 RSI: 0000000000000012 RDI: 0000000000000003
[  631.563049][T17700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  631.563055][T17700] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  631.563060][T17700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  631.563071][T17700]  </TASK>
[  632.323554][ T6873] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  632.476897][ T6873] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  632.485837][ T6873] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  632.488782][ T6873] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  632.491331][ T6873] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  632.494485][ T6873] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  632.505380][ T6873] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  632.510314][ T6873] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  632.514135][ T6873] usb 6-1: Product: syz
[  632.515784][ T6873] usb 6-1: Manufacturer: syz
[  632.519110][ T6873] cdc_wdm 6-1:1.0: skipping garbage
[  632.520639][ T6873] cdc_wdm 6-1:1.0: skipping garbage
[  632.523016][ T6873] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  632.524765][ T6873] cdc_wdm 6-1:1.0: Unknown control protocol
[  632.531634][T17713] netlink: 'syz.0.3633': attribute type 10 has an invalid length.
[  632.537855][T17713] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  632.540426][T17713] team0: Failed to send options change via netlink (err -105)
[  632.543586][T17713] team0: Port device dummy0 added
[  632.722686][T17707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3631'.
[  632.726986][ T6873] usb 6-1: USB disconnect, device number 52
[  633.274233][T17730] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  633.276181][T17730] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  633.278932][T17730] vhci_hcd vhci_hcd.0: Device attached
[  633.311698][T17733] vhci_hcd: connection closed
[  633.313559][T17117] vhci_hcd: stop threads
[  633.317083][T17117] vhci_hcd: release socket
[  633.318398][T17117] vhci_hcd: disconnect device
[  634.092014][   T57] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  634.252034][   T57] usb 9-1: Using ep0 maxpacket: 8
[  634.254734][   T57] usb 9-1: config 0 has an invalid interface number: 52 but max is 0
[  634.257111][   T57] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  634.260068][   T57] usb 9-1: config 0 has no interface number 0
[  634.261859][   T57] usb 9-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  634.265222][   T57] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  634.268409][   T57] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  634.271585][   T57] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  634.275701][   T57] usb 9-1: config 0 interface 52 has no altsetting 0
[  634.277710][   T57] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  634.280347][   T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.287566][   T57] usb 9-1: config 0 descriptor??
[  634.492893][   T57] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.52/input/input33
[  634.732052][ T6873] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  634.883127][ T6873] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  634.885688][ T6873] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  634.888600][ T6873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  634.891167][ T6873] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  634.894351][ T6873] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  634.898776][ T6873] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  634.901384][ T6873] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  634.903772][ T6873] usb 5-1: Product: syz
[  634.905152][ T6873] usb 5-1: Manufacturer: syz
[  634.908608][ T6873] cdc_wdm 5-1:1.0: skipping garbage
[  634.910156][ T6873] cdc_wdm 5-1:1.0: skipping garbage
[  634.912137][ T6873] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  634.913879][ T6873] cdc_wdm 5-1:1.0: Unknown control protocol
[  635.113260][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3648'.
[  635.118125][T13631] usb 5-1: USB disconnect, device number 52
[  635.231823][T17772] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  635.233777][T17772] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  635.236117][T17772] vhci_hcd vhci_hcd.0: Device attached
[  635.238893][T17773] vhci_hcd: connection closed
[  635.239103][T15308] vhci_hcd: stop threads
[  635.241871][T15308] vhci_hcd: release socket
[  635.245068][T15308] vhci_hcd: disconnect device
[  635.947495][   T40] audit: type=1800 audit(1738723838.344:5791): pid=17779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3656" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  636.874238][ T6873] usb 9-1: USB disconnect, device number 2
[  637.215116][T17800] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  637.218392][T17800] batman_adv: batadv0: Adding interface: gretap1
[  637.220231][T17800] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  637.229316][T17800] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  637.237077][T17813] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  637.239150][T17813] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  637.241650][T17813] vhci_hcd vhci_hcd.0: Device attached
[  637.245041][T17814] vhci_hcd: connection closed
[  637.245197][   T12] vhci_hcd: stop threads
[  637.247827][   T12] vhci_hcd: release socket
[  637.249146][   T12] vhci_hcd: disconnect device
[  637.989939][T17832] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3673'.
[  637.993102][T17832] dummy0: entered promiscuous mode
[  637.994586][T17832] dummy0: entered allmulticast mode
[  638.024269][T17834] sctp: [Deprecated]: syz.3.3674 (pid 17834) Use of struct sctp_assoc_value in delayed_ack socket option.
[  638.024269][T17834] Use struct sctp_sack_info instead
[  638.186472][T17840] Mount JFS Failure: -22
[  638.188035][T17840] jfs_mount failed w/return code = -22
[  639.378805][   T40] audit: type=1800 audit(1738723841.774:5792): pid=17861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3681" name="bus" dev="overlay" ino=2 res=0 errno=0
[  639.379388][T17861] netlink: 'syz.4.3681': attribute type 10 has an invalid length.
[  639.386861][T17861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3681'.
[  639.389840][T17861] dummy0: entered promiscuous mode
[  639.391577][T17861] dummy0: entered allmulticast mode
[  639.394314][T17861] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  639.804283][T17874] FAULT_INJECTION: forcing a failure.
[  639.804283][T17874] name failslab, interval 1, probability 0, space 0, times 0
[  639.807772][T17874] CPU: 1 UID: 0 PID: 17874 Comm: syz.0.3685 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  639.807786][T17874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  639.807792][T17874] Call Trace:
[  639.807796][T17874]  <TASK>
[  639.807800][T17874]  dump_stack_lvl+0x16c/0x1f0
[  639.807817][T17874]  should_fail_ex+0x50a/0x650
[  639.807829][T17874]  ? fs_reclaim_acquire+0xae/0x150
[  639.807846][T17874]  should_failslab+0xc2/0x120
[  639.807858][T17874]  __kmalloc_noprof+0xce/0x4f0
[  639.807868][T17874]  ? lockdep_init_map_type+0x16d/0x7d0
[  639.807881][T17874]  ? __raw_spin_lock_init+0x3a/0x110
[  639.807893][T17874]  ? ceph_monc_init+0x186/0xc30
[  639.807909][T17874]  ceph_monc_init+0x186/0xc30
[  639.807925][T17874]  ? ceph_messenger_init+0x347/0x630
[  639.807938][T17874]  ceph_create_client+0x25b/0x370
[  639.807949][T17874]  ceph_get_tree+0x1ac/0x1e10
[  639.807959][T17874]  ? security_capable+0x7e/0x260
[  639.807974][T17874]  vfs_get_tree+0x8b/0x340
[  639.807988][T17874]  vfs_cmd_create+0xd7/0x2a0
[  639.808001][T17874]  __do_sys_fsconfig+0x7ba/0xbe0
[  639.808014][T17874]  ? __pfx___do_sys_fsconfig+0x10/0x10
[  639.808032][T17874]  __do_fast_syscall_32+0x73/0x120
[  639.808042][T17874]  do_fast_syscall_32+0x32/0x80
[  639.808052][T17874]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  639.808067][T17874] RIP: 0023:0xf739e579
[  639.808075][T17874] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  639.808084][T17874] RSP: 002b:00000000f4fe455c EFLAGS: 00000296 ORIG_RAX: 00000000000001af
[  639.808093][T17874] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000006
[  639.808099][T17874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  639.808104][T17874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  639.808109][T17874] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  639.808114][T17874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  639.808125][T17874]  </TASK>
[  639.868783][    C1] vkms_vblank_simulate: vblank timer overrun
[  639.961417][T17882] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  639.963573][T17882] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  639.968415][T17882] vhci_hcd vhci_hcd.0: Device attached
[  639.971311][T17883] vhci_hcd: connection closed
[  639.971549][T17117] vhci_hcd: stop threads
[  639.974309][T17117] vhci_hcd: release socket
[  639.975642][T17117] vhci_hcd: disconnect device
[  640.504673][T17891] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3689'.
[  641.295714][T17912] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  641.297564][T17912] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  641.299990][T17912] vhci_hcd vhci_hcd.0: Device attached
[  641.303073][T17913] vhci_hcd: connection closed
[  641.303250][T15308] vhci_hcd: stop threads
[  641.306381][T15308] vhci_hcd: release socket
[  641.307825][T15308] vhci_hcd: disconnect device
[  641.435274][T17916] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3699'.
[  642.092030][   T63] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  642.243199][   T63] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  642.245724][   T63] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  642.248517][   T63] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  642.250982][   T63] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  642.256017][   T63] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  642.260269][   T63] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  642.262853][   T63] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  642.265079][   T63] usb 6-1: Product: syz
[  642.266325][   T63] usb 6-1: Manufacturer: syz
[  642.269698][   T63] cdc_wdm 6-1:1.0: skipping garbage
[  642.271172][   T63] cdc_wdm 6-1:1.0: skipping garbage
[  642.275124][   T63] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  642.276879][   T63] cdc_wdm 6-1:1.0: Unknown control protocol
[  642.473539][T17926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3703'.
[  642.478204][    T9] usb 6-1: USB disconnect, device number 53
[  642.725258][T17942] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3708'.
[  643.812115][   T63] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  643.973342][   T63] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  643.979456][   T63] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  643.983407][   T63] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  643.986750][   T63] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  643.990858][   T63] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  643.996227][   T63] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  643.999206][   T63] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  644.001516][   T63] usb 6-1: Product: syz
[  644.002806][   T63] usb 6-1: Manufacturer: syz
[  644.008982][   T63] cdc_wdm 6-1:1.0: skipping garbage
[  644.010808][   T63] cdc_wdm 6-1:1.0: skipping garbage
[  644.013626][   T63] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  644.014237][T17975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3720'.
[  644.015878][   T63] cdc_wdm 6-1:1.0: Unknown control protocol
[  644.216396][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'.
[  644.221377][ T6074] usb 6-1: USB disconnect, device number 54
[  644.320167][T17984] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3724'.
[  644.354419][T17986] FAULT_INJECTION: forcing a failure.
[  644.354419][T17986] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  644.358338][T17986] CPU: 2 UID: 0 PID: 17986 Comm: syz.3.3725 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  644.358352][T17986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  644.358358][T17986] Call Trace:
[  644.358361][T17986]  <TASK>
[  644.358365][T17986]  dump_stack_lvl+0x16c/0x1f0
[  644.358383][T17986]  should_fail_ex+0x50a/0x650
[  644.358397][T17986]  _copy_from_user+0x2e/0xd0
[  644.358411][T17986]  bpf_prog_create_from_user+0x109/0x2d0
[  644.358422][T17986]  ? __pfx_seccomp_check_filter+0x10/0x10
[  644.358443][T17986]  do_seccomp+0x7b6/0x2640
[  644.358452][T17986]  ? __fget_files+0x206/0x3a0
[  644.358464][T17986]  ? __pfx_do_seccomp+0x10/0x10
[  644.358473][T17986]  ? fput+0x67/0x440
[  644.358485][T17986]  ? arch_syscall_is_vdso_sigreturn+0x1bd/0x230
[  644.358499][T17986]  ? syscall_user_dispatch+0x77/0x140
[  644.358515][T17986]  __do_fast_syscall_32+0x73/0x120
[  644.358525][T17986]  do_fast_syscall_32+0x32/0x80
[  644.358534][T17986]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  644.358549][T17986] RIP: 0023:0xf73de579
[  644.358557][T17986] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  644.358566][T17986] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000162
[  644.358575][T17986] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000007
[  644.358581][T17986] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  644.358586][T17986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  644.358591][T17986] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  644.358596][T17986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  644.358607][T17986]  </TASK>
[  644.600818][T17992] overlay: filesystem on ./bus not supported as upperdir
[  644.866929][T18006] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3733'.
[  644.911960][T18009] netlink: 'syz.4.3734': attribute type 1 has an invalid length.
[  644.914323][T18009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3734'.
[  645.142109][T18022] ISOFS: Unable to identify CD-ROM format.
[  645.681432][T18037] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3739'.
[  645.848562][T18047] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3742'.
[  645.889360][T18052] netlink: 'syz.4.3743': attribute type 21 has an invalid length.
[  645.892837][T18052] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3743'.
[  645.895623][T18052] netlink: 'syz.4.3743': attribute type 5 has an invalid length.
[  645.897868][T18052] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3743'.
[  646.201004][T18069] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  646.202907][T18069] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  646.205545][T18069] vhci_hcd vhci_hcd.0: Device attached
[  646.208523][T18070] vhci_hcd: connection closed
[  646.209246][T13692] vhci_hcd: stop threads
[  646.212554][T13692] vhci_hcd: release socket
[  646.214130][T13692] vhci_hcd: disconnect device
[  646.499009][T18077] netlink: 'syz.3.3749': attribute type 9 has an invalid length.
[  646.502567][T18077] netlink: 'syz.3.3749': attribute type 7 has an invalid length.
[  646.505767][T18077] netlink: 'syz.3.3749': attribute type 8 has an invalid length.
[  647.274445][T18099] CIFS: VFS: Malformed UNC in devname
[  647.276656][T18099] IPv6: NLM_F_CREATE should be specified when creating new route
[  647.685142][T18108] netlink: 'syz.0.3759': attribute type 1 has an invalid length.
[  647.687473][T18108] netlink: 'syz.0.3759': attribute type 1 has an invalid length.
[  647.753561][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3759'.
[  648.220189][T18120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3764'.
[  649.026328][T18139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3772'.
[  649.292059][ T6010] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  649.338763][T18146] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3775'.
[  649.443207][ T6010] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  649.446061][ T6010] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  649.449110][ T6010] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  649.451658][ T6010] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  649.455024][ T6010] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  649.459225][ T6010] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  649.461818][ T6010] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  649.464413][ T6010] usb 9-1: Product: syz
[  649.465636][ T6010] usb 9-1: Manufacturer: syz
[  649.469328][ T6010] cdc_wdm 9-1:1.0: skipping garbage
[  649.470883][ T6010] cdc_wdm 9-1:1.0: skipping garbage
[  649.474316][ T6010] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  649.476276][ T6010] cdc_wdm 9-1:1.0: Unknown control protocol
[  649.673503][T18144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3774'.
[  649.681431][ T6074] usb 9-1: USB disconnect, device number 3
[  650.192786][T18156] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[  651.206458][T18184] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  651.476371][T18193] FAULT_INJECTION: forcing a failure.
[  651.476371][T18193] name failslab, interval 1, probability 0, space 0, times 0
[  651.480173][T18193] CPU: 1 UID: 0 PID: 18193 Comm: syz.3.3792 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  651.480186][T18193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  651.480192][T18193] Call Trace:
[  651.480196][T18193]  <TASK>
[  651.480200][T18193]  dump_stack_lvl+0x16c/0x1f0
[  651.480219][T18193]  should_fail_ex+0x50a/0x650
[  651.480231][T18193]  ? fs_reclaim_acquire+0xae/0x150
[  651.480247][T18193]  ? garp_init_applicant+0x38d/0x500
[  651.480257][T18193]  should_failslab+0xc2/0x120
[  651.480269][T18193]  __kmalloc_cache_noprof+0x68/0x420
[  651.480282][T18193]  garp_init_applicant+0x38d/0x500
[  651.480292][T18193]  register_vlan_dev+0x197/0x940
[  651.480306][T18193]  ? vlan_changelink+0x2c3/0x5e0
[  651.480317][T18193]  vlan_newlink+0x40e/0x6a0
[  651.480326][T18193]  ? __pfx_vlan_newlink+0x10/0x10
[  651.480336][T18193]  rtnl_newlink+0xbae/0x1d70
[  651.480354][T18193]  ? __pfx_rtnl_newlink+0x10/0x10
[  651.480371][T18193]  ? __pfx___lock_acquire+0x10/0x10
[  651.480385][T18193]  ? kmem_cache_free+0x2e2/0x4d0
[  651.480395][T18193]  ? aa_get_newest_label+0x376/0x680
[  651.480409][T18193]  ? find_held_lock+0x2d/0x110
[  651.480426][T18193]  ? find_held_lock+0x2d/0x110
[  651.480441][T18193]  ? rtnetlink_rcv_msg+0x93a/0xea0
[  651.480450][T18193]  ? __pfx_lock_release+0x10/0x10
[  651.480460][T18193]  ? trace_lock_acquire+0x14e/0x1f0
[  651.480472][T18193]  ? __pfx_rtnl_newlink+0x10/0x10
[  651.480487][T18193]  rtnetlink_rcv_msg+0x95b/0xea0
[  651.480497][T18193]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  651.480506][T18193]  ? __pfx___dev_queue_xmit+0x10/0x10
[  651.480524][T18193]  netlink_rcv_skb+0x165/0x410
[  651.480539][T18193]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  651.480549][T18193]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  651.480569][T18193]  ? netlink_deliver_tap+0x1ae/0xca0
[  651.480584][T18193]  netlink_unicast+0x53c/0x7f0
[  651.480599][T18193]  ? __pfx_netlink_unicast+0x10/0x10
[  651.480612][T18193]  ? __phys_addr_symbol+0x30/0x80
[  651.480631][T18193]  ? __check_object_size+0x488/0x710
[  651.480645][T18193]  netlink_sendmsg+0x8b8/0xd70
[  651.480680][T18193]  ? __pfx_netlink_sendmsg+0x10/0x10
[  651.480704][T18193]  ____sys_sendmsg+0x9ae/0xb40
[  651.480717][T18193]  ? __pfx_____sys_sendmsg+0x10/0x10
[  651.480730][T18193]  ? get_compat_msghdr+0x11b/0x170
[  651.480747][T18193]  ___sys_sendmsg+0x135/0x1e0
[  651.480758][T18193]  ? __pfx____sys_sendmsg+0x10/0x10
[  651.480772][T18193]  ? __pfx_lock_release+0x10/0x10
[  651.480783][T18193]  ? trace_lock_acquire+0x14e/0x1f0
[  651.480796][T18193]  ? __fget_files+0x206/0x3a0
[  651.480810][T18193]  __sys_sendmsg+0x16e/0x220
[  651.480820][T18193]  ? __pfx___sys_sendmsg+0x10/0x10
[  651.480837][T18193]  __do_fast_syscall_32+0x73/0x120
[  651.480847][T18193]  do_fast_syscall_32+0x32/0x80
[  651.480856][T18193]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  651.480872][T18193] RIP: 0023:0xf73de579
[  651.480880][T18193] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  651.480888][T18193] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  651.480898][T18193] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000280
[  651.480904][T18193] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  651.480909][T18193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  651.480914][T18193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  651.480919][T18193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  651.480931][T18193]  </TASK>
[  651.583779][    C1] vkms_vblank_simulate: vblank timer overrun
[  651.585759][   T63] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  651.669204][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3794'.
[  651.675247][T18197] devpts: called with bogus options
[  651.733259][   T63] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  651.735918][   T63] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  651.738958][   T63] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  651.741681][   T63] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  651.745151][   T63] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  651.749696][   T63] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  651.752498][   T63] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  651.754923][   T63] usb 9-1: Product: syz
[  651.756250][   T63] usb 9-1: Manufacturer: syz
[  651.760059][   T63] cdc_wdm 9-1:1.0: skipping garbage
[  651.761706][   T63] cdc_wdm 9-1:1.0: skipping garbage
[  651.764982][   T63] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  651.766855][   T63] cdc_wdm 9-1:1.0: Unknown control protocol
[  651.964241][T18189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3790'.
[  651.969430][ T6010] usb 9-1: USB disconnect, device number 4
[  652.214492][T18211] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3798'.
[  652.531487][T18220] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  652.743646][T18231] sock: sock_timestamping_bind_phc: sock not bind to device
[  654.395460][T18260] 9p: Unknown Cache mode or invalid value fscach
[  654.457169][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3815'.
[  655.085965][T18274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3819'.
[  656.011445][T18289] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3824'.
[  657.372091][ T6074] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  657.523570][ T6074] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  657.526109][ T6074] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  657.529019][ T6074] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  657.531709][ T6074] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  657.534883][ T6074] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  657.539043][ T6074] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  657.541644][ T6074] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  657.544022][ T6074] usb 9-1: Product: syz
[  657.545341][ T6074] usb 9-1: Manufacturer: syz
[  657.549070][ T6074] cdc_wdm 9-1:1.0: skipping garbage
[  657.550641][ T6074] cdc_wdm 9-1:1.0: skipping garbage
[  657.556595][ T6074] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  657.558383][ T6074] cdc_wdm 9-1:1.0: Unknown control protocol
[  657.752593][T18320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3834'.
[  657.756802][ T6074] usb 9-1: USB disconnect, device number 5
[  658.551989][ T6312] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  658.702722][ T6312] usb 9-1: Using ep0 maxpacket: 16
[  658.706815][ T6312] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  658.710028][ T6312] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  658.712885][ T6312] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  658.716628][ T6312] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  658.719266][ T6312] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.722962][ T6312] usb 9-1: config 0 descriptor??
[  659.130836][ T6312] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  659.133096][ T6312] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  659.135118][ T6312] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  659.137161][ T6312] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  659.139177][ T6312] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  659.142261][ T6312] input: HID 0955:7214 Haptics as /devices/virtual/input/input34
[  659.158560][ T6312] shield 0003:0955:7214.0004: Registered Thunderstrike controller
[  659.160915][ T6312] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  659.331185][T18343] random: crng reseeded on system resumption
[  659.342551][T13632] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  659.343162][    T9] usb 9-1: USB disconnect, device number 6
[  659.345932][T13632] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  659.350856][T13632] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  659.354070][T13632] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  659.806653][ T6010] libceph: connect (1)[c::]:6789 error -101
[  659.808950][ T6010] libceph: mon0 (1)[c::]:6789 connect error
[  659.874288][T18366] FAULT_INJECTION: forcing a failure.
[  659.874288][T18366] name failslab, interval 1, probability 0, space 0, times 0
[  659.879437][T18366] CPU: 3 UID: 0 PID: 18366 Comm: syz.4.3852 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  659.879451][T18366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  659.879457][T18366] Call Trace:
[  659.879461][T18366]  <TASK>
[  659.879465][T18366]  dump_stack_lvl+0x16c/0x1f0
[  659.879483][T18366]  should_fail_ex+0x50a/0x650
[  659.879495][T18366]  ? fs_reclaim_acquire+0xae/0x150
[  659.879512][T18366]  should_failslab+0xc2/0x120
[  659.879524][T18366]  kmem_cache_alloc_node_noprof+0x72/0x3b0
[  659.879536][T18366]  ? __alloc_skb+0x2b3/0x380
[  659.879548][T18366]  __alloc_skb+0x2b3/0x380
[  659.879557][T18366]  ? __pfx___alloc_skb+0x10/0x10
[  659.879566][T18366]  ? __mutex_trylock_common+0x50/0x250
[  659.879579][T18366]  ? __pfx___mutex_trylock_common+0x10/0x10
[  659.879591][T18366]  ? __netlink_dump_start+0x154/0x980
[  659.879607][T18366]  netlink_dump+0x699/0xd00
[  659.879620][T18366]  ? __mutex_lock+0x1cc/0xb10
[  659.879635][T18366]  ? __pfx_netlink_dump+0x10/0x10
[  659.879647][T18366]  ? __netlink_dump_start+0x154/0x980
[  659.879666][T18366]  ? lock_acquire+0x2f/0xb0
[  659.879676][T18366]  ? netlink_lookup+0x3d/0x270
[  659.879691][T18366]  __netlink_dump_start+0x6d9/0x980
[  659.879706][T18366]  rdma_nl_rcv_msg+0x55a/0x6e0
[  659.879719][T18366]  ? __pfx_rdma_nl_rcv_msg+0x10/0x10
[  659.879729][T18366]  ? __pfx_nldev_get_dumpit+0x10/0x10
[  659.879741][T18366]  ? __pfx___lock_acquire+0x10/0x10
[  659.879755][T18366]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450
[  659.879769][T18366]  ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10
[  659.879787][T18366]  ? netlink_deliver_tap+0x1ae/0xca0
[  659.879803][T18366]  netlink_unicast+0x53c/0x7f0
[  659.879818][T18366]  ? __pfx_netlink_unicast+0x10/0x10
[  659.879832][T18366]  ? __phys_addr_symbol+0x30/0x80
[  659.879847][T18366]  ? __check_object_size+0x488/0x710
[  659.879861][T18366]  netlink_sendmsg+0x8b8/0xd70
[  659.879876][T18366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.879895][T18366]  ____sys_sendmsg+0x9ae/0xb40
[  659.879908][T18366]  ? __pfx_____sys_sendmsg+0x10/0x10
[  659.879921][T18366]  ? get_compat_msghdr+0x11b/0x170
[  659.879939][T18366]  ___sys_sendmsg+0x135/0x1e0
[  659.879950][T18366]  ? __pfx____sys_sendmsg+0x10/0x10
[  659.879966][T18366]  ? __pfx_lock_release+0x10/0x10
[  659.879976][T18366]  ? trace_lock_acquire+0x14e/0x1f0
[  659.879990][T18366]  ? __fget_files+0x206/0x3a0
[  659.880004][T18366]  __sys_sendmsg+0x16e/0x220
[  659.880014][T18366]  ? __pfx___sys_sendmsg+0x10/0x10
[  659.880032][T18366]  __do_fast_syscall_32+0x73/0x120
[  659.880043][T18366]  do_fast_syscall_32+0x32/0x80
[  659.880052][T18366]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  659.880068][T18366] RIP: 0023:0xf7f94579
[  659.880076][T18366] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  659.880084][T18366] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  659.880094][T18366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000780
[  659.880100][T18366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  659.880105][T18366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  659.880110][T18366] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  659.880115][T18366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  659.880127][T18366]  </TASK>
[  660.072341][ T6010] libceph: connect (1)[c::]:6789 error -101
[  660.074709][ T6010] libceph: mon0 (1)[c::]:6789 connect error
[  660.105200][T18374] Mount JFS Failure: -22
[  660.106601][T18374] jfs_mount failed w/return code = -22
[  660.261991][    T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  660.415924][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  660.418626][    T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  660.421552][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  660.424554][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  660.427758][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  660.432520][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  660.435206][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  660.437530][    T9] usb 5-1: Product: syz
[  660.438779][    T9] usb 5-1: Manufacturer: syz
[  660.443604][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  660.445778][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  660.448135][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  660.449991][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  660.582262][  T834] libceph: connect (1)[c::]:6789 error -101
[  660.584263][  T834] libceph: mon0 (1)[c::]:6789 connect error
[  660.611583][T18361] ceph: No mds server is up or the cluster is laggy
[  660.667667][    T9] usb 5-1: USB disconnect, device number 53
[  660.862584][T18388] IPVS: Unknown mcast interface: bridge0
[  661.493032][T18400] Mount JFS Failure: -22
[  661.494339][T18400] jfs_mount failed w/return code = -22
[  662.101135][T18409] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3867'.
[  662.117361][T18411] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  662.119827][T18411] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  662.122695][T18411] vhci_hcd vhci_hcd.0: Device attached
[  662.125889][T18412] vhci_hcd: connection closed
[  662.126637][T17117] vhci_hcd: stop threads
[  662.129447][T17117] vhci_hcd: release socket
[  662.130922][T17117] vhci_hcd: disconnect device
[  662.402013][    T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  662.553182][    T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  662.555814][    T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  662.558777][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  662.561625][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  662.566726][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  662.570876][    T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  662.573482][    T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  662.575739][    T9] usb 6-1: Product: syz
[  662.576932][    T9] usb 6-1: Manufacturer: syz
[  662.580687][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  662.582339][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  662.585009][    T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  662.586723][    T9] cdc_wdm 6-1:1.0: Unknown control protocol
[  662.655534][T18421] lo speed is unknown, defaulting to 1000
[  662.791280][ T6873] usb 6-1: USB disconnect, device number 55
[  663.138147][T18427] Mount JFS Failure: -22
[  663.139456][T18427] jfs_mount failed w/return code = -22
[  664.432897][T18456] Mount JFS Failure: -22
[  664.434416][T18456] jfs_mount failed w/return code = -22
[  664.467349][T18458] FAULT_INJECTION: forcing a failure.
[  664.467349][T18458] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  664.471486][T18458] CPU: 1 UID: 0 PID: 18458 Comm: syz.4.3883 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  664.471501][T18458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  664.471507][T18458] Call Trace:
[  664.471510][T18458]  <TASK>
[  664.471514][T18458]  dump_stack_lvl+0x16c/0x1f0
[  664.471533][T18458]  should_fail_ex+0x50a/0x650
[  664.471548][T18458]  _copy_to_user+0x32/0xd0
[  664.471563][T18458]  simple_read_from_buffer+0xd0/0x160
[  664.471579][T18458]  proc_fail_nth_read+0x198/0x270
[  664.471594][T18458]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  664.471609][T18458]  ? rw_verify_area+0xcf/0x680
[  664.471623][T18458]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  664.471637][T18458]  vfs_read+0x1df/0xbf0
[  664.471646][T18458]  ? __fget_files+0x1fc/0x3a0
[  664.471657][T18458]  ? __pfx___mutex_lock+0x10/0x10
[  664.471672][T18458]  ? __pfx_vfs_read+0x10/0x10
[  664.471684][T18458]  ? __fget_files+0x206/0x3a0
[  664.471698][T18458]  ksys_read+0x12b/0x250
[  664.471707][T18458]  ? __pfx_ksys_read+0x10/0x10
[  664.471719][T18458]  __do_fast_syscall_32+0x73/0x120
[  664.471729][T18458]  do_fast_syscall_32+0x32/0x80
[  664.471738][T18458]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  664.471754][T18458] RIP: 0023:0xf7f94579
[  664.471762][T18458] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  664.471771][T18458] RSP: 002b:00000000f50b6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  664.471780][T18458] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50b6620
[  664.471786][T18458] RDX: 000000000000000f RSI: 00000000f741cff4 RDI: 0000000000000000
[  664.471792][T18458] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  664.471796][T18458] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  664.471802][T18458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  664.471813][T18458]  </TASK>
[  664.526643][    C1] vkms_vblank_simulate: vblank timer overrun
[  664.793334][    T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  664.953111][    T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  664.955690][    T9] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  664.958663][    T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  664.961381][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  664.964642][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  664.968859][    T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  664.971596][    T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  664.974287][    T9] usb 9-1: Product: syz
[  664.975545][    T9] usb 9-1: Manufacturer: syz
[  664.978869][    T9] cdc_wdm 9-1:1.0: skipping garbage
[  664.980445][    T9] cdc_wdm 9-1:1.0: skipping garbage
[  664.984097][    T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  664.985876][    T9] cdc_wdm 9-1:1.0: Unknown control protocol
[  665.184950][  T834] usb 9-1: USB disconnect, device number 7
[  665.749687][T18479] Mount JFS Failure: -22
[  665.751319][T18479] jfs_mount failed w/return code = -22
[  665.793479][T18483] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  665.795440][T18483] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  665.798147][T18483] vhci_hcd vhci_hcd.0: Device attached
[  665.805022][T18484] vhci_hcd: connection closed
[  665.805240][   T69] vhci_hcd: stop threads
[  665.808639][   T69] vhci_hcd: release socket
[  665.810342][   T69] vhci_hcd: disconnect device
[  667.531996][ T6074] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  667.625601][T18508] Mount JFS Failure: -22
[  667.626913][T18508] jfs_mount failed w/return code = -22
[  667.664243][T18512] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  667.666195][T18512] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  667.668418][T18512] vhci_hcd vhci_hcd.0: Device attached
[  667.670912][T18513] vhci_hcd: connection closed
[  667.671115][ T1141] vhci_hcd: stop threads
[  667.673865][ T1141] vhci_hcd: release socket
[  667.675510][ T1141] vhci_hcd: disconnect device
[  667.685513][ T6074] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  667.688049][ T6074] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  667.690913][ T6074] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  667.693578][ T6074] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  667.696805][ T6074] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  667.701082][ T6074] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  667.703886][ T6074] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  667.706228][ T6074] usb 9-1: Product: syz
[  667.707542][ T6074] usb 9-1: Manufacturer: syz
[  667.714091][ T6074] cdc_wdm 9-1:1.0: skipping garbage
[  667.715673][ T6074] cdc_wdm 9-1:1.0: skipping garbage
[  667.718731][ T6074] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  667.720532][ T6074] cdc_wdm 9-1:1.0: Unknown control protocol
[  667.919071][T13632] usb 9-1: USB disconnect, device number 8
[  669.693397][T18544] Mount JFS Failure: -22
[  669.694676][T18544] jfs_mount failed w/return code = -22
[  670.542732][T18562] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  670.545279][T18562] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  670.548226][T18562] vhci_hcd vhci_hcd.0: Device attached
[  670.550960][T18563] vhci_hcd: connection closed
[  670.551190][T17117] vhci_hcd: stop threads
[  670.554007][T17117] vhci_hcd: release socket
[  670.555383][T17117] vhci_hcd: disconnect device
[  671.441111][T18573] Mount JFS Failure: -22
[  671.442767][T18573] jfs_mount failed w/return code = -22
[  673.212094][T18599] Mount JFS Failure: -22
[  673.213373][T18599] jfs_mount failed w/return code = -22
[  674.960372][T18629] Mount JFS Failure: -22
[  674.961648][T18629] jfs_mount failed w/return code = -22
[  677.096231][T18653] Mount JFS Failure: -22
[  677.097930][T18653] jfs_mount failed w/return code = -22
[  678.074366][T18676] Mount JFS Failure: -22
[  678.075652][T18676] jfs_mount failed w/return code = -22
[  679.457858][T18702] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  679.459861][T18702] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  679.462495][T18702] vhci_hcd vhci_hcd.0: Device attached
[  679.465847][T18703] vhci_hcd: connection closed
[  679.466009][   T12] vhci_hcd: stop threads
[  679.468687][   T12] vhci_hcd: release socket
[  679.469982][   T12] vhci_hcd: disconnect device
[  680.030807][T18709] Mount JFS Failure: -22
[  680.032146][T18709] jfs_mount failed w/return code = -22
[  680.546242][T18725] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3971'.
[  681.102125][T18731] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  681.104012][T18731] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  681.106260][T18731] vhci_hcd vhci_hcd.0: Device attached
[  681.108858][T18732] vhci_hcd: connection closed
[  681.109044][ T1141] vhci_hcd: stop threads
[  681.111710][ T1141] vhci_hcd: release socket
[  681.113143][ T1141] vhci_hcd: disconnect device
[  681.710933][T18745] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3980'.
[  682.489938][T18766] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  682.491842][T18766] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  682.494257][T18766] vhci_hcd vhci_hcd.0: Device attached
[  682.497356][T18767] vhci_hcd: connection closed
[  682.497569][ T1141] vhci_hcd: stop threads
[  682.500266][ T1141] vhci_hcd: release socket
[  682.501558][ T1141] vhci_hcd: disconnect device
[  682.912853][T13632] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  683.145964][T13632] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  683.148521][T13632] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  683.151434][T13632] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  683.154059][T13632] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  683.157124][T13632] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  683.161730][T13632] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  683.164639][T13632] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  683.166920][T13632] usb 6-1: Product: syz
[  683.168164][T13632] usb 6-1: Manufacturer: syz
[  683.179319][T13632] cdc_wdm 6-1:1.0: skipping garbage
[  683.180913][T13632] cdc_wdm 6-1:1.0: skipping garbage
[  683.186048][T13632] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  683.187762][T13632] cdc_wdm 6-1:1.0: Unknown control protocol
[  683.382138][   T57] usb 6-1: USB disconnect, device number 56
[  683.766229][T18793] 9pnet_fd: Insufficient options for proto=fd
[  683.993227][T18802] FAULT_INJECTION: forcing a failure.
[  683.993227][T18802] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  683.997295][T18802] CPU: 1 UID: 0 PID: 18802 Comm: syz.4.3995 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  683.997320][T18802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  683.997327][T18802] Call Trace:
[  683.997331][T18802]  <TASK>
[  683.997336][T18802]  dump_stack_lvl+0x16c/0x1f0
[  683.997355][T18802]  should_fail_ex+0x50a/0x650
[  683.997370][T18802]  _copy_from_iter+0x4a5/0x1400
[  683.997387][T18802]  ? __pfx__copy_from_iter+0x10/0x10
[  683.997400][T18802]  ? __virt_addr_valid+0x1a4/0x590
[  683.997411][T18802]  ? __virt_addr_valid+0x5e/0x590
[  683.997419][T18802]  ? __phys_addr+0xc6/0x150
[  683.997427][T18802]  ? __phys_addr_symbol+0x30/0x80
[  683.997442][T18802]  ? __check_object_size+0x488/0x710
[  683.997456][T18802]  kcm_sendmsg+0xede/0x2be0
[  683.997475][T18802]  ? __pfx_kcm_sendmsg+0x10/0x10
[  683.997486][T18802]  ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10
[  683.997504][T18802]  ____sys_sendmsg+0x9ae/0xb40
[  683.997518][T18802]  ? __pfx_____sys_sendmsg+0x10/0x10
[  683.997530][T18802]  ? get_compat_msghdr+0x11b/0x170
[  683.997548][T18802]  ___sys_sendmsg+0x135/0x1e0
[  683.997558][T18802]  ? __pfx____sys_sendmsg+0x10/0x10
[  683.997574][T18802]  ? __pfx_lock_release+0x10/0x10
[  683.997585][T18802]  ? trace_lock_acquire+0x14e/0x1f0
[  683.997599][T18802]  ? __fget_files+0x206/0x3a0
[  683.997613][T18802]  __sys_sendmsg+0x16e/0x220
[  683.997624][T18802]  ? __pfx___sys_sendmsg+0x10/0x10
[  683.997642][T18802]  __do_fast_syscall_32+0x73/0x120
[  683.997652][T18802]  do_fast_syscall_32+0x32/0x80
[  683.997661][T18802]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  683.997677][T18802] RIP: 0023:0xf7f94579
[  683.997685][T18802] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  683.997694][T18802] RSP: 002b:00000000f507455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  683.997703][T18802] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000040
[  683.997709][T18802] RDX: 0000000004000090 RSI: 0000000000000000 RDI: 0000000000000000
[  683.997715][T18802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  683.997720][T18802] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  683.997725][T18802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  683.997737][T18802]  </TASK>
[  684.062604][    C1] vkms_vblank_simulate: vblank timer overrun
[  684.459647][T18807] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  684.461587][T18807] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  684.463783][T18807] vhci_hcd vhci_hcd.0: Device attached
[  684.466526][T18808] vhci_hcd: connection closed
[  684.466809][   T12] vhci_hcd: stop threads
[  684.469415][   T12] vhci_hcd: release socket
[  684.470735][   T12] vhci_hcd: disconnect device
[  684.500905][T18811] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4000'.
[  685.152091][ T6873] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  685.164436][ T1414] ieee802154 phy0 wpan0: encryption failed: -22
[  685.304162][ T6873] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  685.307687][ T6873] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  685.311337][ T6873] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  685.315005][ T6873] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  685.318080][ T6873] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  685.323041][ T6873] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  685.326516][ T6873] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  685.329560][ T6873] usb 9-1: Product: syz
[  685.331032][ T6873] usb 9-1: Manufacturer: syz
[  685.335971][ T6873] cdc_wdm 9-1:1.0: skipping garbage
[  685.337571][ T6873] cdc_wdm 9-1:1.0: skipping garbage
[  685.339848][ T6873] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  685.342433][ T6873] cdc_wdm 9-1:1.0: Unknown control protocol
[  685.540841][    T9] usb 9-1: USB disconnect, device number 9
[  685.746541][T18833] 9pnet_fd: Insufficient options for proto=fd
[  685.780894][T18835] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4009'.
[  685.874872][T18837] Mount JFS Failure: -22
[  685.876359][T18837] jfs_mount failed w/return code = -22
[  685.946918][T18842] ucma_write: process 1214 (syz.1.4011) changed security contexts after opening file descriptor, this is not allowed.
[  686.038609][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4013'.
[  686.072935][T18848] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  686.075417][T18848] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  686.078351][T18848] vhci_hcd vhci_hcd.0: Device attached
[  686.084386][T18849] vhci_hcd: connection closed
[  686.084800][T17117] vhci_hcd: stop threads
[  686.087479][T17117] vhci_hcd: release socket
[  686.088799][T17117] vhci_hcd: disconnect device
[  686.616444][T18858] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4018'.
[  686.946580][T18872] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  687.379330][T18886] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  687.381306][T18886] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  687.383817][T18886] vhci_hcd vhci_hcd.0: Device attached
[  687.386812][T18888] vhci_hcd: connection closed
[  687.387008][   T69] vhci_hcd: stop threads
[  687.389746][   T69] vhci_hcd: release socket
[  687.391054][   T69] vhci_hcd: disconnect device
[  687.484817][T18890] 9pnet_fd: Insufficient options for proto=fd
[  687.512821][T18892] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4027'.
[  687.558798][T18894] xt_NFQUEUE: number of total queues is 0
[  688.077458][T18907] Mount JFS Failure: -22
[  688.078792][T18907] jfs_mount failed w/return code = -22
[  688.184124][T18915] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4036'.
[  688.465742][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4037'.
[  689.047021][T18929] FAULT_INJECTION: forcing a failure.
[  689.047021][T18929] name failslab, interval 1, probability 0, space 0, times 0
[  689.050662][T18929] CPU: 2 UID: 0 PID: 18929 Comm: syz.3.4041 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  689.050675][T18929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  689.050680][T18929] Call Trace:
[  689.050684][T18929]  <TASK>
[  689.050688][T18929]  dump_stack_lvl+0x16c/0x1f0
[  689.050708][T18929]  should_fail_ex+0x50a/0x650
[  689.050720][T18929]  ? fs_reclaim_acquire+0xae/0x150
[  689.050736][T18929]  should_failslab+0xc2/0x120
[  689.050750][T18929]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  689.050762][T18929]  ? getname_flags.part.0+0x4c/0x550
[  689.050775][T18929]  ? vfs_write+0x306/0x1150
[  689.050786][T18929]  getname_flags.part.0+0x4c/0x550
[  689.050798][T18929]  ? reacquire_held_locks+0x20b/0x4c0
[  689.050812][T18929]  getname+0x8d/0xe0
[  689.050821][T18929]  do_sys_openat2+0x104/0x1e0
[  689.050834][T18929]  ? __pfx_do_sys_openat2+0x10/0x10
[  689.050846][T18929]  ? find_held_lock+0x2d/0x110
[  689.050862][T18929]  ? do_user_addr_fault+0xe50/0x13f0
[  689.050877][T18929]  __ia32_compat_sys_openat+0x16e/0x210
[  689.050890][T18929]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  689.050903][T18929]  ? ksys_write+0x1ba/0x250
[  689.050917][T18929]  __do_fast_syscall_32+0x73/0x120
[  689.050927][T18929]  do_fast_syscall_32+0x32/0x80
[  689.050936][T18929]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  689.050951][T18929] RIP: 0023:0xf73de579
[  689.050959][T18929] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  689.050968][T18929] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  689.050977][T18929] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000840
[  689.050983][T18929] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  689.050988][T18929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  689.050993][T18929] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  689.050998][T18929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  689.051009][T18929]  </TASK>
[  689.170851][T18932] qnx6: unable to read the first superblock
[  689.392356][T18938] wireguard0: entered promiscuous mode
[  690.484232][T18949] Mount JFS Failure: -22
[  690.485616][T18949] jfs_mount failed w/return code = -22
[  691.247231][T18965] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  691.249177][T18965] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  691.251465][T18965] vhci_hcd vhci_hcd.0: Device attached
[  691.255286][T18966] vhci_hcd: connection closed
[  691.255489][ T1163] vhci_hcd: stop threads
[  691.258214][ T1163] vhci_hcd: release socket
[  691.259537][ T1163] vhci_hcd: disconnect device
[  693.005753][T19003] 9pnet_fd: Insufficient options for proto=fd
[  693.932702][T19022] nbd1: detected capacity change from 0 to 12
[  693.938910][T16136] block nbd1: Send control failed (result -89)
[  693.940884][T16136] block nbd1: Request send failed, requeueing
[  693.948455][T14069] block nbd1: Receive control failed (result -32)
[  693.950268][   T70] block nbd1: Dead connection, failed to find a fallback
[  693.955506][   T70] block nbd1: shutting down sockets
[  693.957208][   T70] blk_print_req_error: 130 callbacks suppressed
[  693.957218][   T70] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  693.961653][   T70] buffer_io_error: 90 callbacks suppressed
[  693.961660][   T70] Buffer I/O error on dev nbd1, logical block 0, async page read
[  693.966422][T16136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  693.967737][T13631] libceph: connect (1)[c::]:6789 error -101
[  693.970482][T16136] Buffer I/O error on dev nbd1, logical block 0, async page read
[  693.970939][T13631] libceph: mon0 (1)[c::]:6789 connect error
[  693.974220][T16136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  693.977819][T16136] Buffer I/O error on dev nbd1, logical block 0, async page read
[  693.980169][T16136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  693.983644][T16136] Buffer I/O error on dev nbd1, logical block 0, async page read
[  693.986031][T16136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  693.988630][T16136] Buffer I/O error on dev nbd1, logical block 0, async page read
[  693.991523][T16136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  693.996452][T16136] Buffer I/O error on dev nbd1, logical block 0, async page read
[  693.998742][T16136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  694.001355][T16136] Buffer I/O error on dev nbd1, logical block 0, async page read
[  694.003679][T16136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  694.006329][T16136] Buffer I/O error on dev nbd1, logical block 0, async page read
[  694.008631][T16136] ldm_validate_partition_table(): Disk read failed.
[  694.010681][T16136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  694.015790][T16136] Buffer I/O error on dev nbd1, logical block 0, async page read
[  694.018126][T16136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  694.021159][T16136] Buffer I/O error on dev nbd1, logical block 0, async page read
[  694.023520][T16136] Dev nbd1: unable to read RDB block 0
[  694.025210][T16136]  nbd1: unable to read partition table
[  694.026932][T16136] nbd1: partition table beyond EOD, truncated
[  694.052539][T19024] ldm_validate_partition_table(): Disk read failed.
[  694.055841][T19024] Dev nbd1: unable to read RDB block 0
[  694.064218][T19024]  nbd1: unable to read partition table
[  694.070440][T19024] nbd1: partition table beyond EOD, truncated
[  694.099826][T16136] ldm_validate_partition_table(): Disk read failed.
[  694.103091][T16136] Dev nbd1: unable to read RDB block 0
[  694.104848][T16136]  nbd1: unable to read partition table
[  694.106525][T16136] nbd1: partition table beyond EOD, truncated
[  694.237027][T13631] libceph: connect (1)[c::]:6789 error -101
[  694.239088][T13631] libceph: mon0 (1)[c::]:6789 connect error
[  694.547558][T19025] ceph: No mds server is up or the cluster is laggy
[  694.555067][T19031] Mount JFS Failure: -22
[  694.556590][T19031] jfs_mount failed w/return code = -22
[  696.102815][T19057] Mount JFS Failure: -22
[  696.104195][T19057] jfs_mount failed w/return code = -22
[  696.302327][T19065] 9pnet_fd: Insufficient options for proto=fd
[  696.890484][T19071] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4088'.
[  697.041640][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4090'.
[  697.049455][T19075] netlink: 'syz.0.4090': attribute type 2 has an invalid length.
[  697.051747][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4090'.
[  697.161632][T19082] Mount JFS Failure: -22
[  697.163073][T19082] jfs_mount failed w/return code = -22
[  697.241732][T19085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4094'.
[  697.482036][T14756] Bluetooth: hci2: command 0x0405 tx timeout
[  698.396113][T19103] 9pnet_fd: Insufficient options for proto=fd
[  698.957923][T19113] Mount JFS Failure: -22
[  698.959225][T19113] jfs_mount failed w/return code = -22
[  700.170632][T19140] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4115'.
[  701.001102][T19164] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4124'.
[  701.322342][ T6873] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  701.713155][ T6873] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  701.715696][ T6873] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  701.718610][ T6873] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  701.721175][ T6873] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  701.724397][ T6873] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  701.728601][ T6873] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  701.731201][ T6873] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  701.733583][ T6873] usb 9-1: Product: syz
[  701.734834][ T6873] usb 9-1: Manufacturer: syz
[  701.738321][ T6873] cdc_wdm 9-1:1.0: skipping garbage
[  701.739870][ T6873] cdc_wdm 9-1:1.0: skipping garbage
[  701.741853][ T6873] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  701.743873][ T6873] cdc_wdm 9-1:1.0: Unknown control protocol
[  701.944351][T19169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4126'.
[  701.950981][T13632] usb 9-1: USB disconnect, device number 10
[  702.494414][T19196] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4134'.
[  703.410812][T19219] Mount JFS Failure: -22
[  703.412090][T19219] jfs_mount failed w/return code = -22
[  703.505111][   T40] audit: type=1326 audit(1738723905.904:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.4146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000
[  703.513402][   T40] audit: type=1326 audit(1738723905.904:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.4146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000
[  703.521872][   T40] audit: type=1326 audit(1738723905.904:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.4146" exe="/syz-executor" sig=0 arch=40000003 syscall=375 compat=1 ip=0xf7f94579 code=0x7ffc0000
[  703.529013][   T40] audit: type=1326 audit(1738723905.914:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.4146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000
[  703.535884][   T40] audit: type=1326 audit(1738723905.914:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.4146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000
[  703.543276][   T40] audit: type=1326 audit(1738723905.914:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.4146" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f94579 code=0x7ffc0000
[  703.549882][   T40] audit: type=1326 audit(1738723905.914:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.4146" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f94579 code=0x7ffc0000
[  703.558595][   T40] audit: type=1326 audit(1738723905.914:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.4146" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f94579 code=0x7ffc0000
[  703.567280][   T40] audit: type=1326 audit(1738723905.914:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.4146" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f94579 code=0x7ffc0000
[  703.574027][   T40] audit: type=1326 audit(1738723905.914:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.4.4146" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f94579 code=0x7ffc0000
[  704.112725][T19236] FAULT_INJECTION: forcing a failure.
[  704.112725][T19236] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  704.116772][T19236] CPU: 3 UID: 0 PID: 19236 Comm: syz.4.4151 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  704.116785][T19236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  704.116792][T19236] Call Trace:
[  704.116795][T19236]  <TASK>
[  704.116799][T19236]  dump_stack_lvl+0x16c/0x1f0
[  704.116818][T19236]  should_fail_ex+0x50a/0x650
[  704.116833][T19236]  _copy_to_user+0x32/0xd0
[  704.116848][T19236]  simple_read_from_buffer+0xd0/0x160
[  704.116864][T19236]  proc_fail_nth_read+0x198/0x270
[  704.116879][T19236]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  704.116893][T19236]  ? rw_verify_area+0xcf/0x680
[  704.116909][T19236]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  704.116922][T19236]  vfs_read+0x1df/0xbf0
[  704.116931][T19236]  ? __fget_files+0x1fc/0x3a0
[  704.116942][T19236]  ? __pfx___mutex_lock+0x10/0x10
[  704.116957][T19236]  ? __pfx_vfs_read+0x10/0x10
[  704.116969][T19236]  ? __fget_files+0x206/0x3a0
[  704.116982][T19236]  ksys_read+0x12b/0x250
[  704.116992][T19236]  ? __pfx_ksys_read+0x10/0x10
[  704.117004][T19236]  __do_fast_syscall_32+0x73/0x120
[  704.117014][T19236]  do_fast_syscall_32+0x32/0x80
[  704.117023][T19236]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  704.117038][T19236] RIP: 0023:0xf7f94579
[  704.117046][T19236] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  704.117055][T19236] RSP: 002b:00000000f50b6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  704.117065][T19236] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50b6620
[  704.117071][T19236] RDX: 000000000000000f RSI: 00000000f741cff4 RDI: 0000000000000000
[  704.117076][T19236] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  704.117081][T19236] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  704.117086][T19236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  704.117097][T19236]  </TASK>
[  704.229423][T19238] Mount JFS Failure: -22
[  704.230762][T19238] jfs_mount failed w/return code = -22
[  704.274775][T19240] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  704.276773][T19240] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  704.279209][T19240] vhci_hcd vhci_hcd.0: Device attached
[  704.282222][T19241] vhci_hcd: connection closed
[  704.282501][ T1163] vhci_hcd: stop threads
[  704.285268][ T1163] vhci_hcd: release socket
[  704.286696][ T1163] vhci_hcd: disconnect device
[  704.329515][T19246] FAULT_INJECTION: forcing a failure.
[  704.329515][T19246] name failslab, interval 1, probability 0, space 0, times 0
[  704.333519][T19246] CPU: 0 UID: 0 PID: 19246 Comm: syz.1.4155 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  704.333532][T19246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  704.333538][T19246] Call Trace:
[  704.333542][T19246]  <TASK>
[  704.333546][T19246]  dump_stack_lvl+0x16c/0x1f0
[  704.333565][T19246]  should_fail_ex+0x50a/0x650
[  704.333577][T19246]  ? fs_reclaim_acquire+0xae/0x150
[  704.333593][T19246]  ? nf_ct_tmpl_alloc+0x90/0x270
[  704.333605][T19246]  should_failslab+0xc2/0x120
[  704.333617][T19246]  __kmalloc_cache_noprof+0x68/0x420
[  704.333631][T19246]  nf_ct_tmpl_alloc+0x90/0x270
[  704.333644][T19246]  xt_ct_tg_check+0x26d/0xd80
[  704.333656][T19246]  ? lock_acquire.part.0+0x11b/0x380
[  704.333668][T19246]  ? __pfx_xt_ct_tg_check+0x10/0x10
[  704.333684][T19246]  xt_ct_tg_check_v0+0x1ff/0x2f0
[  704.333696][T19246]  ? __pfx_xt_ct_tg_check_v0+0x10/0x10
[  704.333707][T19246]  ? __pfx_lock_release+0x10/0x10
[  704.333718][T19246]  ? rcu_is_watching+0x12/0xc0
[  704.333736][T19246]  ? __pfx_xt_ct_tg_check_v0+0x10/0x10
[  704.333749][T19246]  xt_check_target+0x272/0xa30
[  704.333764][T19246]  ? __pfx_xt_check_target+0x10/0x10
[  704.333779][T19246]  ? xt_find_match.part.0+0x1b6/0x250
[  704.333796][T19246]  ? xt_find_target.part.0+0x1b6/0x250
[  704.333814][T19246]  find_check_entry.constprop.0+0x828/0xa20
[  704.333829][T19246]  ? __pfx_find_check_entry.constprop.0+0x10/0x10
[  704.333846][T19246]  ? mark_held_locks+0x9f/0xe0
[  704.333862][T19246]  ? kvfree+0x47/0x50
[  704.333873][T19246]  translate_table+0xce7/0x17c0
[  704.333888][T19246]  ? __pfx_translate_table+0x10/0x10
[  704.333901][T19246]  translate_compat_table+0x140b/0x18e0
[  704.333917][T19246]  ? __pfx_translate_compat_table+0x10/0x10
[  704.333927][T19246]  ? __might_fault+0x13b/0x190
[  704.333940][T19246]  ? trace_lock_acquire+0x14e/0x1f0
[  704.333956][T19246]  compat_do_replace+0x35d/0x500
[  704.333967][T19246]  ? __pfx_compat_do_replace+0x10/0x10
[  704.333977][T19246]  ? aa_get_newest_label+0x376/0x680
[  704.333992][T19246]  ? __pfx_aa_get_newest_label+0x10/0x10
[  704.334011][T19246]  ? bpf_lsm_capable+0x9/0x10
[  704.334024][T19246]  ? security_capable+0x7e/0x260
[  704.334040][T19246]  do_ip6t_set_ctl+0x686/0xc20
[  704.334051][T19246]  ? __mutex_lock+0x1cc/0xb10
[  704.334066][T19246]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  704.334077][T19246]  ? __mutex_unlock_slowpath+0x164/0x6a0
[  704.334093][T19246]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  704.334109][T19246]  ? rcu_is_watching+0x12/0xc0
[  704.334123][T19246]  ? trace_contention_end+0xee/0x140
[  704.334138][T19246]  ? nf_sockopt_find.constprop.0+0x221/0x290
[  704.334153][T19246]  nf_setsockopt+0x8a/0xf0
[  704.334167][T19246]  ipv6_setsockopt+0x135/0x170
[  704.334179][T19246]  tcp_setsockopt+0xa4/0x100
[  704.334190][T19246]  smc_setsockopt+0x1b4/0xc00
[  704.334201][T19246]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  704.334215][T19246]  ? __pfx_smc_setsockopt+0x10/0x10
[  704.334229][T19246]  ? __pfx_smc_setsockopt+0x10/0x10
[  704.334240][T19246]  do_sock_setsockopt+0x222/0x480
[  704.334252][T19246]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  704.334264][T19246]  ? lock_acquire+0x2f/0xb0
[  704.334280][T19246]  __sys_setsockopt+0x1a0/0x230
[  704.334292][T19246]  __ia32_sys_setsockopt+0xbc/0x160
[  704.334300][T19246]  ? lockdep_hardirqs_on+0x7c/0x110
[  704.334314][T19246]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  704.334328][T19246]  __do_fast_syscall_32+0x73/0x120
[  704.334338][T19246]  do_fast_syscall_32+0x32/0x80
[  704.334347][T19246]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  704.334362][T19246] RIP: 0023:0xf7f80579
[  704.334370][T19246] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  704.334379][T19246] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  704.334388][T19246] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029
[  704.334393][T19246] RDX: 0000000000000040 RSI: 0000000020000fc0 RDI: 0000000000000364
[  704.334399][T19246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  704.334404][T19246] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  704.334409][T19246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  704.334420][T19246]  </TASK>
[  705.359030][T19260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4160'.
[  705.361852][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4160'.
[  705.364993][T19260] netlink: 'syz.4.4160': attribute type 1 has an invalid length.
[  705.367290][T19260] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4160'.
[  705.422642][T19260] nbd: socks must be embedded in a SOCK_ITEM attr
[  705.425075][T19260] block nbd0: shutting down sockets
[  705.461490][T19262] Mount JFS Failure: -22
[  705.464567][T19262] jfs_mount failed w/return code = -22
[  705.924705][T19273] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  705.926650][T19273] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  705.929391][T19273] vhci_hcd vhci_hcd.0: Device attached
[  705.931839][T19274] vhci_hcd: connection closed
[  705.932518][T17117] vhci_hcd: stop threads
[  705.935237][T17117] vhci_hcd: release socket
[  705.936594][T17117] vhci_hcd: disconnect device
[  706.632088][T19286] Mount JFS Failure: -22
[  706.633392][T19286] jfs_mount failed w/return code = -22
[  708.749029][T19337] lo speed is unknown, defaulting to 1000
[  710.666686][T19370] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4200'.
[  710.878924][T19374] Mount JFS Failure: -22
[  710.880698][T19374] jfs_mount failed w/return code = -22
[  711.427943][T19393] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4210'.
[  713.117788][T19422] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 3, id = 0
[  714.019140][T19441] 9pnet_fd: Insufficient options for proto=fd
[  714.262025][ T6010] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  714.421986][ T6010] usb 6-1: Using ep0 maxpacket: 16
[  714.425267][ T6010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  714.429254][ T6010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  714.433073][ T6010] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  714.437839][ T6010] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  714.441144][ T6010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.445348][ T6010] usb 6-1: config 0 descriptor??
[  714.855274][ T6010] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  714.857363][ T6010] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  714.859361][ T6010] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  714.861337][ T6010] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  714.866958][ T6010] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  714.874433][ T6010] input: HID 0955:7214 Haptics as /devices/virtual/input/input36
[  714.894490][ T6010] shield 0003:0955:7214.0005: Registered Thunderstrike controller
[  714.897508][ T6010] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[  715.062408][T19459] nbd0: detected capacity change from 0 to 12
[  715.068355][T19459] block nbd0: Send control failed (result -89)
[  715.070767][T19459] block nbd0: Request send failed, requeueing
[  715.073130][T14069] block nbd0: Receive control failed (result -32)
[  715.074460][ T1161] block nbd0: Dead connection, failed to find a fallback
[  715.075559][T19447] random: crng reseeded on system resumption
[  715.078324][ T1161] block nbd0: shutting down sockets
[  715.082125][ T1161] blk_print_req_error: 40 callbacks suppressed
[  715.082134][ T1161] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  715.082155][ T1161] buffer_io_error: 40 callbacks suppressed
[  715.082160][ T1161] Buffer I/O error on dev nbd0, logical block 0, async page read
[  715.082394][T19459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  715.086601][T19459] Buffer I/O error on dev nbd0, logical block 0, async page read
[  715.096317][T19459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  715.099021][T19459] Buffer I/O error on dev nbd0, logical block 0, async page read
[  715.101737][T19459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  715.104552][T19459] Buffer I/O error on dev nbd0, logical block 0, async page read
[  715.106886][T19459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  715.109540][   T57] usb 6-1: USB disconnect, device number 57
[  715.109867][ T6010] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  715.111336][T19459] Buffer I/O error on dev nbd0, logical block 0, async page read
[  715.117473][T19459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  715.120153][T19459] Buffer I/O error on dev nbd0, logical block 0, async page read
[  715.122688][T19459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  715.125347][T19459] Buffer I/O error on dev nbd0, logical block 0, async page read
[  715.127703][T19459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  715.130269][T19459] Buffer I/O error on dev nbd0, logical block 0, async page read
[  715.132715][T19459] ldm_validate_partition_table(): Disk read failed.
[  715.134742][T19459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  715.137310][T19459] Buffer I/O error on dev nbd0, logical block 0, async page read
[  715.139653][T19459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  715.142436][T19459] Buffer I/O error on dev nbd0, logical block 0, async page read
[  715.145051][T19459] Dev nbd0: unable to read RDB block 0
[  715.147002][T19459]  nbd0: unable to read partition table
[  715.148874][ T6010] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  715.149469][T19459] nbd0: partition table beyond EOD, truncated
[  715.156254][ T6010] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  715.162718][ T6010] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  715.178057][T19445] ldm_validate_partition_table(): Disk read failed.
[  715.180900][T19445] Dev nbd0: unable to read RDB block 0
[  715.183360][T19445]  nbd0: unable to read partition table
[  715.185535][T19445] nbd0: partition table beyond EOD, truncated
[  715.201245][T19445] ldm_validate_partition_table(): Disk read failed.
[  715.204748][T19445] Dev nbd0: unable to read RDB block 0
[  715.207063][T19445]  nbd0: unable to read partition table
[  715.209380][T19445] nbd0: partition table beyond EOD, truncated
[  716.281243][T19483] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4241'.
[  716.403776][T19489] Mount JFS Failure: -22
[  716.405078][T19489] jfs_mount failed w/return code = -22
[  718.109595][T19511] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4252'.
[  719.366804][T19538] new mount options do not match the existing superblock, will be ignored
[  719.373332][T19538] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  719.377265][T19538] 9pnet_fd: Insufficient options for proto=fd
[  719.463504][T19541] Mount JFS Failure: -22
[  719.464810][T19541] jfs_mount failed w/return code = -22
[  719.895208][T19547] x86/PAT: syz.1.4264:19547 freeing invalid memtype [mem 0xfed00000-0xfed00fff]
[  719.899061][T19547] netlink: 'syz.1.4264': attribute type 1 has an invalid length.
[  719.904676][T19547] netlink: 'syz.1.4264': attribute type 1 has an invalid length.
[  719.906792][T19547] netlink: 'syz.1.4264': attribute type 3 has an invalid length.
[  719.912284][T19547] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4264'.
[  719.915809][T19547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4264'.
[  719.921390][T19547] x86/PAT: syz.1.4264:19547 freeing invalid memtype [mem 0xfed00000-0xfed00fff]
[  721.086404][T19576] Mount JFS Failure: -22
[  721.087709][T19576] jfs_mount failed w/return code = -22
[  721.880098][T19584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4275'.
[  721.883689][T19584] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4275'.
[  721.887159][T19584] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4275'.
[  722.135652][T19592] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4280'.
[  723.899789][T19629] lo speed is unknown, defaulting to 1000
[  723.947298][T19630] netlink: 'syz.1.4295': attribute type 1 has an invalid length.
[  723.949645][T19630] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4295'.
[  725.198628][T19655] Mount JFS Failure: -22
[  725.199913][T19655] jfs_mount failed w/return code = -22
[  725.849386][T19671] Mount JFS Failure: -22
[  725.850686][T19671] jfs_mount failed w/return code = -22
[  725.962061][ T6873] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  726.008435][T19675] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4313'.
[  726.135206][ T6873] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  726.137772][ T6873] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  726.140503][ T6873] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  726.142164][  T834] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  726.143702][ T6873] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  726.148543][ T6873] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  726.152920][ T6873] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  726.155541][ T6873] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  726.157842][ T6873] usb 9-1: Product: syz
[  726.159189][ T6873] usb 9-1: Manufacturer: syz
[  726.162645][ T6873] cdc_wdm 9-1:1.0: skipping garbage
[  726.164239][ T6873] cdc_wdm 9-1:1.0: skipping garbage
[  726.166433][ T6873] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  726.168180][ T6873] cdc_wdm 9-1:1.0: Unknown control protocol
[  726.293228][  T834] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  726.295757][  T834] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  726.298639][  T834] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  726.301202][  T834] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  726.304356][  T834] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  726.308610][  T834] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  726.311212][  T834] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  726.313546][  T834] usb 6-1: Product: syz
[  726.314778][  T834] usb 6-1: Manufacturer: syz
[  726.318295][  T834] cdc_wdm 6-1:1.0: skipping garbage
[  726.319838][  T834] cdc_wdm 6-1:1.0: skipping garbage
[  726.321832][  T834] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device
[  726.323602][  T834] cdc_wdm 6-1:1.0: Unknown control protocol
[  726.368444][ T6074] usb 9-1: USB disconnect, device number 11
[  726.529743][    T9] usb 6-1: USB disconnect, device number 58
[  727.000720][   T40] kauditd_printk_skb: 11 callbacks suppressed
[  727.000731][   T40] audit: type=1326 audit(1738723929.394:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19685 comm="syz.0.4318" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf739e579 code=0x0
[  728.072081][   T57] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  728.227809][   T57] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  728.231362][   T57] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  728.234548][   T57] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  728.237670][   T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  728.241840][   T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  728.247359][   T57] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  728.250188][   T57] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  728.252841][   T57] usb 5-1: Product: syz
[  728.254600][   T57] usb 5-1: Manufacturer: syz
[  728.261799][   T57] cdc_wdm 5-1:1.0: skipping garbage
[  728.264696][   T57] cdc_wdm 5-1:1.0: skipping garbage
[  728.267865][   T57] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  728.269745][   T57] cdc_wdm 5-1:1.0: Unknown control protocol
[  728.469767][ T6873] usb 5-1: USB disconnect, device number 54
[  728.579667][T19732] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4333'.
[  728.618137][T19734] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4334'.
[  729.068174][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4342'.
[  729.071589][T19751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4342'.
[  729.097357][T19751] bridge0: port 1(batadv1) entered blocking state
[  729.099912][T19751] bridge0: port 1(batadv1) entered disabled state
[  729.103204][T19751] batadv1: entered allmulticast mode
[  729.106031][T19751] batadv1: entered promiscuous mode
[  729.549923][T14069] Bluetooth: hci2: unexpected event for opcode 0x203d
[  729.612240][T17117] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  729.616330][T17117] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  729.970701][T19774] Mount JFS Failure: -22
[  729.972919][T19774] jfs_mount failed w/return code = -22
[  730.026574][T19778] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4353'.
[  730.066411][T19776] Mount JFS Failure: -22
[  730.067717][T19776] jfs_mount failed w/return code = -22
[  730.302213][T19792] 9pnet_fd: Insufficient options for proto=fd
[  730.476570][T19794] [U] 
[  730.477698][T19794] [U] 
[  730.478516][T19794] [U] 
[  730.479331][T19794] [U] 
[  730.480740][T19794] [U] 
[  730.481761][T19794] [U] 
[  730.482659][T19794] [U] 
[  730.483518][T19794] [U] 
[  730.484602][T19794] [U] 
[  730.485423][T19794] [U] 
[  730.486247][T19794] [U] 
[  730.487063][T19794] [U] 
[  730.488011][T19794] [U] 
[  730.488834][T19794] [U] 
[  730.489660][T19794] [U] 
[  730.490475][T19794] [U] 
[  730.491400][T19794] [U] 
[  730.492269][T19794] [U] 
[  730.493102][T19794] [U] 
[  730.493919][T19794] [U] 
[  730.494973][T19794] [U] 
[  730.495846][T19794] [U] 
[  730.496710][T19794] [U] 
[  730.497532][T19794] [U] 
[  730.498423][T19794] [U] 
[  730.499255][T19794] [U] 
[  730.500086][T19794] [U] 
[  730.500912][T19794] [U] 
[  730.501776][T19794] [U] 
[  730.502608][T19794] [U] 
[  730.503431][T19794] [U] 
[  730.504278][T19794] [U] 
[  730.505278][T19794] [U] 
[  730.506128][T19794] [U] 
[  730.506962][T19794] [U] 
[  730.507844][T19794] [U] 
[  730.508734][T19794] [U] 
[  730.509556][T19794] [U] 
[  730.510386][T19794] [U] 
[  730.511206][T19794] [U] 
[  730.512164][T19794] [U] 
[  730.512990][T19794] [U] 
[  730.513831][T19794] [U] 
[  730.514661][T19794] [U] 
[  730.515599][T19794] [U] 
[  730.516458][T19794] [U] 
[  730.517278][T19794] [U] 
[  730.518098][T19794] [U] 
[  730.518987][T19794] [U] 
[  730.519814][T19794] [U] 
[  730.520636][T19794] [U] 
[  730.521455][T19794] [U] 
[  730.522391][T19794] [U] 
[  730.523215][T19794] [U] 
[  730.524081][T19794] [U] 
[  730.524905][T19794] [U] 
[  730.527928][T19794] [U] 
[  730.528918][T19794] [U] 
[  730.530113][T19794] [U] 
[  730.531285][T19794] [U] 
[  730.532699][T19794] [U] 
[  730.533534][T19794] [U] 
[  730.534362][T19794] [U] 
[  730.535188][T19794] [U] 
[  730.536148][T19794] [U] 
[  730.536978][T19794] [U] 
[  730.537797][T19794] [U] 
[  730.538630][T19794] [U] 
[  730.539525][T19794] [U] 
[  730.540361][T19794] [U] 
[  730.541188][T19794] [U] 
[  730.542030][T19794] [U] 
[  730.543855][T19794] [U] 
[  730.544704][T19794] [U] 
[  730.545524][T19794] [U] 
[  730.546586][T19794] [U] 
[  730.549159][T19794] [U] 
[  730.550009][T19794] [U] 
[  730.550840][T19794] [U] 
[  730.551665][T19794] [U] 
[  730.552984][T19794] [U] 
[  730.553856][T19794] [U] 
[  730.554687][T19794] [U] 
[  730.555507][T19794] [U] 
[  730.556493][T19794] [U] 
[  730.557324][T19794] [U] 
[  730.558162][T19794] [U] 
[  730.558982][T19794] [U] 
[  730.559871][T19794] [U] 
[  730.560694][T19794] [U] 
[  730.561484][T19794] [U] 
[  730.562310][T19794] [U] 
[  730.563234][T19794] [U] 
[  730.564070][T19794] [U] 
[  730.564890][T19794] [U] 
[  730.565705][T19794] [U] 
[  730.566718][T19794] [U] 
[  730.567538][T19794] [U] 
[  730.568367][T19794] [U] 
[  730.569193][T19794] [U] 
[  730.570058][T19794] [U] 
[  730.570872][T19794] [U] 
[  730.571688][T19794] [U] 
[  730.572527][T19794] [U] 
[  730.573493][T19794] [U] 
[  730.574337][T19794] [U] 
[  730.575169][T19794] [U] 
[  730.576060][T19794] [U] 
[  730.577146][T19794] [U] 
[  730.577972][T19794] [U] 
[  730.578787][T19794] [U] 
[  730.579603][T19794] [U] 
[  730.580500][T19794] [U] 
[  730.581333][T19794] [U] 
[  730.582167][T19794] [U] 
[  730.582991][T19794] [U] 
[  730.583977][T19794] [U] 
[  730.584803][T19794] [U] 
[  730.585629][T19794] [U] 
[  730.586628][T19794] [U] 
[  730.587879][T19794] [U] 
[  730.589046][T19794] [U] 
[  730.590188][T19794] [U] 
[  730.591352][T19794] [U] 
[  730.592658][T19794] [U] 
[  730.593829][T19794] [U] 
[  730.595012][T19794] [U] 
[  731.050150][T19806] Mount JFS Failure: -22
[  731.051547][T19806] jfs_mount failed w/return code = -22
[  731.307437][T19793] [U] 
[  731.344027][T19808] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4362'.
[  731.906352][T19824] 9pnet_fd: Insufficient options for proto=fd
[  731.909292][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4367'.
[  731.911880][T19825] netlink: 'syz.3.4367': attribute type 1 has an invalid length.
[  731.914228][T19824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4367'.
[  731.916984][T19824] netlink: 'syz.3.4367': attribute type 1 has an invalid length.
[  732.328275][T19832] 9pnet_fd: Insufficient options for proto=fd
[  732.500741][T19836] input: syz1 as /devices/virtual/input/input37
[  732.542227][T19843] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4373'.
[  732.611868][T19845] Mount JFS Failure: -22
[  732.613594][T19845] jfs_mount failed w/return code = -22
[  732.821360][T19849] netlink: 'syz.0.4376': attribute type 5 has an invalid length.
[  732.863486][T19851] (syz.0.4377,19851,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  732.866623][T19851] (syz.0.4377,19851,0):ocfs2_fill_super:1177 ERROR: status = -22
[  732.899913][T19855] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  733.045261][T19865] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4382'.
[  733.565115][T14069] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  733.568181][T14069] Bluetooth: hci2: Injecting HCI hardware error event
[  733.573910][T14756] Bluetooth: hci2: hardware error 0x00
[  733.815142][T19881] Mount JFS Failure: -22
[  733.816489][T19881] jfs_mount failed w/return code = -22
[  734.088482][T19887] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4388'.
[  734.149955][T19894] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4391'.
[  734.343233][T19901] 9pnet_fd: Insufficient options for proto=fd
[  735.641994][T14756] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  736.215803][T19950] cgroup: noprefix used incorrectly
[  737.034833][T19967] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4417'.
[  737.121608][T19972] Mount JFS Failure: -22
[  737.124298][T19972] jfs_mount failed w/return code = -22
[  737.497320][T19978] Mount JFS Failure: -22
[  737.498717][T19978] jfs_mount failed w/return code = -22
[  739.653443][T20022] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4436'.
[  739.656137][T20022] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4436'.
[  739.671593][T20022] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4436'.
[  739.674218][T20022] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4436'.
[  739.700981][T20022] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4436'.
[  739.703940][T20022] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4436'.
[  740.039325][T20030] Mount JFS Failure: -22
[  740.040676][T20030] jfs_mount failed w/return code = -22
[  741.175871][T20050] Mount JFS Failure: -22
[  741.177160][T20050] jfs_mount failed w/return code = -22
[  741.265122][T20052] Mount JFS Failure: -22
[  741.266418][T20052] jfs_mount failed w/return code = -22
[  741.640018][T20064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4451'.
[  741.645799][T20064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4451'.
[  741.650195][T20064] erspan0: entered promiscuous mode
[  741.653100][T20064] batadv_slave_1: entered promiscuous mode
[  741.658466][T20064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4451'.
[  741.661596][T20064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4451'.
[  741.796496][   T40] audit: type=1326 audit(1738723944.194:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.1.4453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  741.805726][   T40] audit: type=1326 audit(1738723944.204:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.1.4453" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  741.813111][   T40] audit: type=1326 audit(1738723944.204:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.1.4453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  741.819302][   T40] audit: type=1326 audit(1738723944.204:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.1.4453" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  741.834213][   T40] audit: type=1326 audit(1738723944.204:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.1.4453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  741.842008][   T40] audit: type=1326 audit(1738723944.204:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.1.4453" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  741.848169][   T40] audit: type=1326 audit(1738723944.204:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.1.4453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  741.856744][   T40] audit: type=1326 audit(1738723944.204:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.1.4453" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  741.862954][   T40] audit: type=1326 audit(1738723944.204:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.1.4453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  741.869010][   T40] audit: type=1326 audit(1738723944.204:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.1.4453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000
[  742.144807][T20077] Mount JFS Failure: -22
[  742.146494][T20077] jfs_mount failed w/return code = -22
[  742.617712][T20083] vxcan3: entered promiscuous mode
[  742.619760][T20083] vxcan3: entered allmulticast mode
[  743.652081][T14756] Bluetooth: hci3: command 0x0406 tx timeout
[  744.207947][T20115] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[  744.293063][T20128] Mount JFS Failure: -22
[  744.294462][T20128] jfs_mount failed w/return code = -22
[  744.981467][T20145] __nla_validate_parse: 7 callbacks suppressed
[  744.981478][T20145] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4477'.
[  745.822583][T20164] pimreg: entered allmulticast mode
[  745.857961][T20168] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4486'.
[  746.604866][ T1414] ieee802154 phy0 wpan0: encryption failed: -22
[  746.852041][    T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  747.013492][    T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  747.016718][    T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  747.019574][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  747.022234][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.025948][T20188] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  747.029476][    T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  747.236295][   T63] usb 5-1: USB disconnect, device number 55
[  747.991130][T20215] Process accounting resumed
[  748.052023][T20216] 9pnet_fd: Insufficient options for proto=fd
[  749.102013][ T6074] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  749.253387][ T6074] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  749.256780][ T6074] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  749.260643][ T6074] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  749.264268][ T6074] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  749.268523][ T6074] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  749.274204][ T6074] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  749.277787][ T6074] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  749.280894][ T6074] usb 5-1: Product: syz
[  749.282514][ T6074] usb 5-1: Manufacturer: syz
[  749.287565][ T6074] cdc_wdm 5-1:1.0: skipping garbage
[  749.289744][ T6074] cdc_wdm 5-1:1.0: skipping garbage
[  749.292541][ T6074] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  749.294998][ T6074] cdc_wdm 5-1:1.0: Unknown control protocol
[  749.498046][   T63] usb 5-1: USB disconnect, device number 56
[  750.618836][T20243] netlink: 'syz.0.4514': attribute type 11 has an invalid length.
[  750.659384][T20248] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4516'.
[  752.218208][T20274] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4525'.
[  752.283990][T20276] netlink: 'syz.4.4526': attribute type 11 has an invalid length.
[  752.306071][T20280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4527'.
[  752.309730][T20279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4527'.
[  752.832006][ T6074] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  752.983175][ T6074] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  752.985726][ T6074] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  752.988696][ T6074] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  752.991272][ T6074] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  752.995112][ T6074] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  752.999354][ T6074] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  753.002165][ T6074] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  753.004490][ T6074] usb 5-1: Product: syz
[  753.005735][ T6074] usb 5-1: Manufacturer: syz
[  753.009188][ T6074] cdc_wdm 5-1:1.0: skipping garbage
[  753.010755][ T6074] cdc_wdm 5-1:1.0: skipping garbage
[  753.015241][ T6074] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  753.017001][ T6074] cdc_wdm 5-1:1.0: Unknown control protocol
[  753.214964][    T9] usb 5-1: USB disconnect, device number 57
[  753.708556][T20305] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4535'.
[  754.152011][ T6010] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  754.315885][ T6010] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  754.318381][ T6010] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  754.322011][ T6010] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  754.324703][ T6010] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  754.327918][ T6010] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  754.333378][ T6010] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  754.336034][ T6010] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  754.338360][ T6010] usb 6-1: Product: syz
[  754.339581][ T6010] usb 6-1: Manufacturer: syz
[  754.352547][ T6010] cdc_wdm 6-1:1.0: skipping garbage
[  754.354347][ T6010] cdc_wdm 6-1:1.0: skipping garbage
[  754.356387][ T6010] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  754.358418][ T6010] cdc_wdm 6-1:1.0: Unknown control protocol
[  754.564700][ T6010] usb 6-1: USB disconnect, device number 59
[  754.822522][T20331] kAFS: unable to lookup cell 'sy>7 †ŸO-z1'
[  755.072030][ T6074] usb 9-1: new low-speed USB device number 12 using dummy_hcd
[  755.201978][ T6074] usb 9-1: device descriptor read/64, error -71
[  755.454085][ T6074] usb 9-1: new low-speed USB device number 13 using dummy_hcd
[  755.601987][ T6074] usb 9-1: device descriptor read/64, error -71
[  755.712166][ T6074] usb usb9-port1: attempt power cycle
[  756.052087][ T6074] usb 9-1: new low-speed USB device number 14 using dummy_hcd
[  756.073002][ T6074] usb 9-1: device descriptor read/8, error -71
[  756.311982][ T6074] usb 9-1: new low-speed USB device number 15 using dummy_hcd
[  756.335159][ T6074] usb 9-1: device descriptor read/8, error -71
[  756.442440][ T6074] usb usb9-port1: unable to enumerate USB device
[  756.589510][T20350] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4552'.
[  758.097808][T20377] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4561'.
[  758.983258][T20401] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4568'.
[  758.988115][T20401] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4568'.
[  760.686778][T20443] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  760.759208][T20443] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  760.761052][T20443] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  760.775764][T20443] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  760.777534][T20443] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  760.779600][T20443] ==================================================================
[  760.781999][T20443] BUG: KASAN: slab-out-of-bounds in __list_del_entry_valid_or_report+0x1d4/0x200
[  760.785096][T20443] Read of size 8 at addr ffff888025e6f550 by task syz.1.4580/20443
[  760.788459][T20443] 
[  760.789413][T20443] CPU: 2 UID: 0 PID: 20443 Comm: syz.1.4580 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  760.789426][T20443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  760.789432][T20443] Call Trace:
[  760.789437][T20443]  <TASK>
[  760.789442][T20443]  dump_stack_lvl+0x116/0x1f0
[  760.789460][T20443]  print_report+0xc3/0x620
[  760.789474][T20443]  ? __virt_addr_valid+0x5e/0x590
[  760.789484][T20443]  ? __phys_addr+0xc6/0x150
[  760.789493][T20443]  kasan_report+0xd9/0x110
[  760.789504][T20443]  ? __list_del_entry_valid_or_report+0x1d4/0x200
[  760.789519][T20443]  ? __list_del_entry_valid_or_report+0x1d4/0x200
[  760.789536][T20443]  __list_del_entry_valid_or_report+0x1d4/0x200
[  760.789553][T20443]  bt_accept_unlink+0x34/0x2e0
[  760.789563][T20443]  l2cap_sock_teardown_cb+0x1a3/0x3c0
[  760.789577][T20443]  l2cap_chan_del+0xba/0x8f0
[  760.789590][T20443]  l2cap_conn_del+0x37c/0x730
[  760.789604][T20443]  l2cap_connect_cfm+0x7aa/0xf10
[  760.789619][T20443]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  760.789634][T20443]  ? hci_cb_lookup+0x319/0x4e0
[  760.789644][T20443]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  760.789658][T20443]  hci_conn_failed+0x225/0x3e0
[  760.789670][T20443]  ? __pfx_hci_conn_failed+0x10/0x10
[  760.789682][T20443]  ? lock_acquire+0x2f/0xb0
[  760.789693][T20443]  ? hci_abort_conn_sync+0x172/0x1030
[  760.789705][T20443]  hci_abort_conn_sync+0x968/0x1030
[  760.789716][T20443]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  760.789727][T20443]  ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0
[  760.789738][T20443]  ? __pfx_lock_release+0x10/0x10
[  760.789749][T20443]  ? trace_lock_acquire+0x14e/0x1f0
[  760.789759][T20443]  ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0
[  760.789770][T20443]  hci_disconnect_all_sync.constprop.0+0x104/0x3c0
[  760.789782][T20443]  hci_suspend_sync+0x772/0xab0
[  760.789794][T20443]  ? __pfx_hci_suspend_sync+0x10/0x10
[  760.789806][T20443]  ? __pfx_mgmt_suspending+0x10/0x10
[  760.789821][T20443]  hci_suspend_dev+0x27d/0x5e0
[  760.789831][T20443]  hci_suspend_notifier+0x28d/0x2f0
[  760.789842][T20443]  notifier_call_chain+0xb7/0x410
[  760.789856][T20443]  ? __pfx_hci_suspend_notifier+0x10/0x10
[  760.789867][T20443]  blocking_notifier_call_chain_robust+0xc9/0x170
[  760.789883][T20443]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[  760.789900][T20443]  pm_notifier_call_chain_robust+0x27/0x60
[  760.789912][T20443]  snapshot_open+0x189/0x2b0
[  760.789921][T20443]  ? __pfx_snapshot_open+0x10/0x10
[  760.789931][T20443]  misc_open+0x35a/0x420
[  760.789943][T20443]  ? __pfx_misc_open+0x10/0x10
[  760.789954][T20443]  chrdev_open+0x237/0x6a0
[  760.789965][T20443]  ? __pfx_apparmor_file_open+0x10/0x10
[  760.789975][T20443]  ? __pfx_chrdev_open+0x10/0x10
[  760.789986][T20443]  ? file_set_fsnotify_mode+0x163/0x5d0
[  760.790001][T20443]  do_dentry_open+0x735/0x1c40
[  760.790012][T20443]  ? __pfx_chrdev_open+0x10/0x10
[  760.790023][T20443]  vfs_open+0x82/0x3f0
[  760.790034][T20443]  ? may_open+0x1f2/0x400
[  760.790048][T20443]  path_openat+0x1e88/0x2d80
[  760.790060][T20443]  ? __pfx_path_openat+0x10/0x10
[  760.790071][T20443]  ? __pfx___lock_acquire+0x10/0x10
[  760.790082][T20443]  ? lock_acquire.part.0+0x11b/0x380
[  760.790092][T20443]  ? find_held_lock+0x2d/0x110
[  760.790107][T20443]  do_filp_open+0x20c/0x470
[  760.790117][T20443]  ? __pfx_do_filp_open+0x10/0x10
[  760.790126][T20443]  ? find_held_lock+0x2d/0x110
[  760.790143][T20443]  ? alloc_fd+0x41f/0x760
[  760.790155][T20443]  do_sys_openat2+0x17a/0x1e0
[  760.790167][T20443]  ? __pfx_do_sys_openat2+0x10/0x10
[  760.790179][T20443]  ? fput+0x67/0x440
[  760.790190][T20443]  ? do_compat_fcntl64+0x236/0x6c0
[  760.790203][T20443]  __ia32_compat_sys_openat+0x16e/0x210
[  760.790217][T20443]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  760.790230][T20443]  ? __pfx___ia32_compat_sys_open+0x10/0x10
[  760.790245][T20443]  __do_fast_syscall_32+0x73/0x120
[  760.790266][T20443]  do_fast_syscall_32+0x32/0x80
[  760.790275][T20443]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  760.790292][T20443] RIP: 0023:0xf7f80579
[  760.790301][T20443] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  760.790312][T20443] RSP: 002b:00000000f506455c EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  760.790322][T20443] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200002c0
[  760.790328][T20443] RDX: 00000000001c5100 RSI: 0000000000000000 RDI: 0000000000000000
[  760.790334][T20443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  760.790339][T20443] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  760.790344][T20443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  760.790353][T20443]  </TASK>
[  760.790356][T20443] 
[  760.927520][T20443] Allocated by task 20058:
[  760.928833][T20443]  kasan_save_stack+0x33/0x60
[  760.930197][T20443]  kasan_save_track+0x14/0x30
[  760.931561][T20443]  __kasan_kmalloc+0xaa/0xb0
[  760.932903][T20443]  br_vlan_add+0x113/0xb40
[  760.934244][T20443]  br_vlan_info+0x35c/0x3d0
[  760.935572][T20443]  br_process_vlan_info+0x3d8/0x990
[  760.937099][T20443]  br_afspec+0x575/0x650
[  760.938344][T20443]  br_setlink+0x373/0x630
[  760.939613][T20443]  rtnl_bridge_setlink+0x31e/0x6f0
[  760.941111][T20443]  rtnetlink_rcv_msg+0x3c7/0xea0
[  760.942545][T20443]  netlink_rcv_skb+0x165/0x410
[  760.943945][T20443]  netlink_unicast+0x53c/0x7f0
[  760.945347][T20443]  netlink_sendmsg+0x8b8/0xd70
[  760.946745][T20443]  ____sys_sendmsg+0x9ae/0xb40
[  760.948144][T20443]  ___sys_sendmsg+0x135/0x1e0
[  760.949510][T20443]  __sys_sendmsg+0x16e/0x220
[  760.950854][T20443]  __do_fast_syscall_32+0x73/0x120
[  760.952348][T20443]  do_fast_syscall_32+0x32/0x80
[  760.953780][T20443]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  760.955637][T20443] 
[  760.956354][T20443] The buggy address belongs to the object at ffff888025e6f000
[  760.956354][T20443]  which belongs to the cache kmalloc-2k of size 2048
[  760.960295][T20443] The buggy address is located 312 bytes to the right of
[  760.960295][T20443]  allocated 1048-byte region [ffff888025e6f000, ffff888025e6f418)
[  760.964433][T20443] 
[  760.965143][T20443] The buggy address belongs to the physical page:
[  760.966952][T20443] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25e68
[  760.969454][T20443] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  760.971876][T20443] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  760.974041][T20443] page_type: f5(slab)
[  760.975213][T20443] raw: 00fff00000000040 ffff88801b042f00 dead000000000100 dead000000000122
[  760.977670][T20443] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  760.980156][T20443] head: 00fff00000000040 ffff88801b042f00 dead000000000100 dead000000000122
[  760.982612][T20443] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  760.985094][T20443] head: 00fff00000000003 ffffea0000979a01 ffffffffffffffff 0000000000000000
[  760.987566][T20443] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  760.990034][T20443] page dumped because: kasan: bad access detected
[  760.991876][T20443] page_owner tracks the page as allocated
[  760.993536][T20443] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5957, tgid 5957 (syz-executor), ts 44855902519, free_ts 44836953323
[  760.999479][T20443]  post_alloc_hook+0x181/0x1b0
[  761.000884][T20443]  get_page_from_freelist+0xfce/0x2f80
[  761.002469][T20443]  __alloc_frozen_pages_noprof+0x221/0x2470
[  761.004210][T20443]  alloc_pages_mpol+0x1fc/0x540
[  761.005631][T20443]  new_slab+0x23d/0x330
[  761.006838][T20443]  ___slab_alloc+0xbfa/0x1600
[  761.008203][T20443]  __slab_alloc.constprop.0+0x56/0xb0
[  761.009738][T20443]  __kmalloc_node_track_caller_noprof+0x2ee/0x520
[  761.011579][T20443]  kmalloc_reserve+0xef/0x2c0
[  761.012965][T20443]  pskb_expand_head+0x236/0x1170
[  761.014406][T20443]  netlink_trim+0x22d/0x310
[  761.015733][T20443]  netlink_broadcast_filtered+0xc7/0xef0
[  761.017459][T20443]  nlmsg_notify+0x9e/0x220
[  761.018745][T20443]  rtnetlink_event+0x177/0x1f0
[  761.020162][T20443]  notifier_call_chain+0xb7/0x410
[  761.021647][T20443]  call_netdevice_notifiers_info+0xbe/0x140
[  761.023365][T20443] page last free pid 5953 tgid 5953 stack trace:
[  761.025208][T20443]  free_frozen_pages+0x6db/0xfb0
[  761.026671][T20443]  qlist_free_all+0x4e/0x120
[  761.028040][T20443]  kasan_quarantine_reduce+0x195/0x1e0
[  761.029631][T20443]  __kasan_slab_alloc+0x69/0x90
[  761.031057][T20443]  __kmalloc_cache_noprof+0x202/0x420
[  761.032637][T20443]  kobject_uevent_env+0x265/0x1670
[  761.034812][T20443]  __kobject_del+0x168/0x1f0
[  761.036180][T20443]  kobject_put+0x327/0x5a0
[  761.037486][T20443]  netdev_queue_update_kobjects+0x432/0x5b0
[  761.039191][T20443]  netif_set_real_num_tx_queues+0x168/0x8d0
[  761.040903][T20443]  veth_init_queues+0xe1/0x190
[  761.042291][T20443]  veth_newlink+0x462/0x8f0
[  761.043638][T20443]  rtnl_newlink+0xbae/0x1d70
[  761.044986][T20443]  rtnetlink_rcv_msg+0x95b/0xea0
[  761.046431][T20443]  netlink_rcv_skb+0x165/0x410
[  761.047833][T20443]  netlink_unicast+0x53c/0x7f0
[  761.049229][T20443] 
[  761.049942][T20443] Memory state around the buggy address:
[  761.051561][T20443]  ffff888025e6f400: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[  761.053856][T20443]  ffff888025e6f480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  761.056163][T20443] >ffff888025e6f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  761.058476][T20443]                                                  ^
[  761.060391][T20443]  ffff888025e6f580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  761.062758][T20443]  ffff888025e6f600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  761.065072][T20443] ==================================================================
[  761.074301][T20443] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  761.076464][T20443] CPU: 2 UID: 0 PID: 20443 Comm: syz.1.4580 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  761.079486][T20443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  761.082543][T20443] Call Trace:
[  761.083520][T20443]  <TASK>
[  761.084392][T20443]  dump_stack_lvl+0x3d/0x1f0
[  761.085729][T20443]  panic+0x71d/0x800
[  761.086871][T20443]  ? __pfx_panic+0x10/0x10
[  761.088171][T20443]  ? irqentry_exit+0x3b/0x90
[  761.089533][T20443]  ? lockdep_hardirqs_on+0x7c/0x110
[  761.091035][T20443]  ? preempt_schedule_thunk+0x1a/0x30
[  761.092588][T20443]  ? preempt_schedule_common+0x44/0xc0
[  761.094192][T20443]  check_panic_on_warn+0xab/0xb0
[  761.095640][T20443]  end_report+0x117/0x180
[  761.096903][T20443]  kasan_report+0xe9/0x110
[  761.098199][T20443]  ? __list_del_entry_valid_or_report+0x1d4/0x200
[  761.100045][T20443]  ? __list_del_entry_valid_or_report+0x1d4/0x200
[  761.101877][T20443]  __list_del_entry_valid_or_report+0x1d4/0x200
[  761.103686][T20443]  bt_accept_unlink+0x34/0x2e0
[  761.105066][T20443]  l2cap_sock_teardown_cb+0x1a3/0x3c0
[  761.106655][T20443]  l2cap_chan_del+0xba/0x8f0
[  761.108005][T20443]  l2cap_conn_del+0x37c/0x730
[  761.109376][T20443]  l2cap_connect_cfm+0x7aa/0xf10
[  761.110812][T20443]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  761.112396][T20443]  ? hci_cb_lookup+0x319/0x4e0
[  761.113797][T20443]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  761.115412][T20443]  hci_conn_failed+0x225/0x3e0
[  761.116877][T20443]  ? __pfx_hci_conn_failed+0x10/0x10
[  761.118454][T20443]  ? lock_acquire+0x2f/0xb0
[  761.119811][T20443]  ? hci_abort_conn_sync+0x172/0x1030
[  761.121489][T20443]  hci_abort_conn_sync+0x968/0x1030
[  761.122980][T20443]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  761.124633][T20443]  ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0
[  761.126546][T20443]  ? __pfx_lock_release+0x10/0x10
[  761.128021][T20443]  ? trace_lock_acquire+0x14e/0x1f0
[  761.129517][T20443]  ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0
[  761.131387][T20443]  hci_disconnect_all_sync.constprop.0+0x104/0x3c0
[  761.133297][T20443]  hci_suspend_sync+0x772/0xab0
[  761.135474][T20443]  ? __pfx_hci_suspend_sync+0x10/0x10
[  761.137042][T20443]  ? __pfx_mgmt_suspending+0x10/0x10
[  761.138574][T20443]  hci_suspend_dev+0x27d/0x5e0
[  761.140054][T20443]  hci_suspend_notifier+0x28d/0x2f0
[  761.141580][T20443]  notifier_call_chain+0xb7/0x410
[  761.143078][T20443]  ? __pfx_hci_suspend_notifier+0x10/0x10
[  761.144719][T20443]  blocking_notifier_call_chain_robust+0xc9/0x170
[  761.146547][T20443]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[  761.148541][T20443]  pm_notifier_call_chain_robust+0x27/0x60
[  761.150228][T20443]  snapshot_open+0x189/0x2b0
[  761.151547][T20443]  ? __pfx_snapshot_open+0x10/0x10
[  761.153065][T20443]  misc_open+0x35a/0x420
[  761.154328][T20443]  ? __pfx_misc_open+0x10/0x10
[  761.155719][T20443]  chrdev_open+0x237/0x6a0
[  761.157015][T20443]  ? __pfx_apparmor_file_open+0x10/0x10
[  761.158604][T20443]  ? __pfx_chrdev_open+0x10/0x10
[  761.160057][T20443]  ? file_set_fsnotify_mode+0x163/0x5d0
[  761.161647][T20443]  do_dentry_open+0x735/0x1c40
[  761.163050][T20443]  ? __pfx_chrdev_open+0x10/0x10
[  761.164585][T20443]  vfs_open+0x82/0x3f0
[  761.165829][T20443]  ? may_open+0x1f2/0x400
[  761.167099][T20443]  path_openat+0x1e88/0x2d80
[  761.168449][T20443]  ? __pfx_path_openat+0x10/0x10
[  761.169874][T20443]  ? __pfx___lock_acquire+0x10/0x10
[  761.171375][T20443]  ? lock_acquire.part.0+0x11b/0x380
[  761.172894][T20443]  ? find_held_lock+0x2d/0x110
[  761.174314][T20443]  do_filp_open+0x20c/0x470
[  761.175637][T20443]  ? __pfx_do_filp_open+0x10/0x10
[  761.177088][T20443]  ? find_held_lock+0x2d/0x110
[  761.178478][T20443]  ? alloc_fd+0x41f/0x760
[  761.179724][T20443]  do_sys_openat2+0x17a/0x1e0
[  761.181083][T20443]  ? __pfx_do_sys_openat2+0x10/0x10
[  761.182589][T20443]  ? fput+0x67/0x440
[  761.183751][T20443]  ? do_compat_fcntl64+0x236/0x6c0
[  761.185227][T20443]  __ia32_compat_sys_openat+0x16e/0x210
[  761.186825][T20443]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  761.188572][T20443]  ? __pfx___ia32_compat_sys_open+0x10/0x10
[  761.190270][T20443]  __do_fast_syscall_32+0x73/0x120
[  761.191745][T20443]  do_fast_syscall_32+0x32/0x80
[  761.193146][T20443]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  761.194975][T20443] RIP: 0023:0xf7f80579
[  761.196164][T20443] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  761.201666][T20443] RSP: 002b:00000000f506455c EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  761.204038][T20443] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200002c0
[  761.206286][T20443] RDX: 00000000001c5100 RSI: 0000000000000000 RDI: 0000000000000000
[  761.208520][T20443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  761.210764][T20443] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  761.213013][T20443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  761.215303][T20443]  </TASK>
[  761.216818][T20443] Kernel Offset: disabled
[  761.218067][T20443] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:52:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88802b644bc0 RCX=ffffffff81acfa4a RDX=ffff88805151c880
RSI=ffffffff81acfa24 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003687908
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003
R12=ffffed10056c8979 R13=0000000000000001 R14=ffff88802b43ffc0 R15=ffff88802b644bc8
RIP=ffffffff81acfa38 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7439118 CR3=0000000061012000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=1ffff92000edde65 RCX=00000000d439196c RDX=0000000000000001
RSI=ffffffff8b6ce8c0 RDI=ffffffff8bd2d220 RBP=0000000000000200 RSP=ffffc900076ef318
R8 =0000000000000000 R9 =fffffbfff2dc4598 R10=ffffffff96e22cc7 R11=0000000000000000
R12=0000000000000000 R13=ffffffff8e1bc140 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81963002 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020019680 CR3=0000000062d00000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85386df5 RDI=ffffffff9aad2e20 RBP=ffffffff9aad2de0 RSP=ffffc90002dc6cb0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666
R12=0000000000000000 R13=0000000000000030 R14=ffffffff9aad2de0 R15=0000000000000000
RIP=ffffffff85386e1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c3792c1 CR3=0000000061012000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000080000 RBX=ffff88802b646780 RCX=ffffc90030a5f000 RDX=0000000000080000
RSI=ffffffff81acfa24 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900067d72b8
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003
R12=ffffed10056c8cf1 R13=0000000000000001 R14=ffff88802b73ffc0 R15=ffff88802b646788
RIP=ffffffff81acfa26 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000200c3018 CR3=0000000061012000 CR4=00352ef0
DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0800000000000010 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fefeffd0 Opmask01=0000000000000003 Opmask02=000000000000ffdf Opmask03=0008004000040442
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005611d43c8430 00005611d43d4740
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff00ff 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737162 73732562a74d6c63
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373421600734073 431e161e035c1810
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 44455a494c414954 494e495f43455355
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000000 000000003130323a 306963682f306963
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9ad8d86754cd19ac 00005614b5268877 0000000000000051 0000000000000034
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000141 7600306e00305f65 6b69727473726564 6e7568742f796c70
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000007fff0 00005611d43b877f 672a262e7e37ff7f 16085611d43f975b
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 676461672d770000 00004d144526411f
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 000056112d3b0000 00004d144526411f
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000