last executing test programs: 27m9.97535409s ago: executing program 3 (id=4441): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) (async) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) (async) accept4$unix(r2, &(0x7f00000003c0), &(0x7f00000001c0)=0x6e, 0x180000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x6d8, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x668, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x584, 0x9, 0x0, 0x1, [@m_xt={0x88, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x3, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x80, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x53, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf536d6faa7284fcdcbb6732089908467917f254c5f0de058b4c6d1dda345d1da5e7e1ac23a4576a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) (async) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12090000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa00090582025004000000"], 0x0) syz_usb_control_io$lan78xx(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) 27m9.441236525s ago: executing program 3 (id=4448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x22004004}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010100}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000040)=0xa, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x7fff, 0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r4, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 27m8.314263741s ago: executing program 3 (id=4454): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) (async) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f00000002c0)=[{0x7, 0x0, 0x3}, {0x2, 0x5, 0x5}], 0x2, 0x2b2, 0x0, 0x0, 0x0, 0x18}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r1, r0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x400c6314, {0x40000001, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x9e, 0x4a9, 0x52f}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x44) 27m8.116035812s ago: executing program 3 (id=4455): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x4}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) r7 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) r8 = request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/kvm\x00', r7) keyctl$assume_authority(0x10, r8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00010028bd030000000000000080000004000504000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x884) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000005640)={0x0, 0x0, &(0x7f0000005600)={&(0x7f0000005300)={0x14, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x44000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) 27m7.137512963s ago: executing program 3 (id=4461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 27m3.126573877s ago: executing program 3 (id=4481): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x40045612, &(0x7f00000016c0)={0xc, @sliced={0x6, [0x9, 0x0, 0x9, 0x1, 0x8000, 0x9, 0xdb, 0xffff, 0xa8de, 0xb, 0x1f, 0x5, 0x3aa, 0x6, 0x3, 0x7d, 0xaf, 0xfffb, 0x3, 0x109, 0x4, 0x4, 0x1, 0x7, 0xfffe, 0x9, 0x8000, 0x35, 0x4, 0x9, 0x5, 0xb8ec, 0x5, 0xfffb, 0x8, 0x1, 0x100, 0x6, 0x88, 0x6, 0x611, 0x10, 0x80, 0x3, 0x8, 0x26, 0x6, 0x3], 0x9}}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) ioctl$VIDIOC_S_FBUF(r3, 0x402c560b, &(0x7f0000000100)={0x22, 0x54, &(0x7f0000000000)="872435d5e5615dad1c7b4079d0919bae304d32c5d733aa3d42a67d2311b3ebdeb2849c8a701dd54bff588306535ca7510ef1412ff7a0de0bddbdd0e6a70ac46f9043875a4b5e8dc33e7b8bf3d4fb09843d94bc4cbd4615edf675a4da2f3ab5fdf59163d30cbd3f2967aab66e44fac6ab1d95adfd0c2b2c8106ca8bafa2e3e13168398018d4bec9eb7decee06eb0ce55799425035f23a6c92afd56ff0c79a74ab5ff698a0847b63d260352edb3c72b79077e06b098034cf3cfd14da987de7985d0900a0c785c533fe1e791fd6e8bc0df18783977948ae28436226f0de32b19772a9153d", {0x2d, 0x8, 0x41415270, 0x4, 0x8, 0x6, 0x1, 0x7}}) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x4, 0xc0, 0x0, 0x0, 0x80000000, 0xa5, 0x0, 0x57, 0xffff5651, 0x0}) (async) syz_usb_control_io(r1, &(0x7f0000000540)={0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 27m2.847539856s ago: executing program 32 (id=4481): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x40045612, &(0x7f00000016c0)={0xc, @sliced={0x6, [0x9, 0x0, 0x9, 0x1, 0x8000, 0x9, 0xdb, 0xffff, 0xa8de, 0xb, 0x1f, 0x5, 0x3aa, 0x6, 0x3, 0x7d, 0xaf, 0xfffb, 0x3, 0x109, 0x4, 0x4, 0x1, 0x7, 0xfffe, 0x9, 0x8000, 0x35, 0x4, 0x9, 0x5, 0xb8ec, 0x5, 0xfffb, 0x8, 0x1, 0x100, 0x6, 0x88, 0x6, 0x611, 0x10, 0x80, 0x3, 0x8, 0x26, 0x6, 0x3], 0x9}}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) ioctl$VIDIOC_S_FBUF(r3, 0x402c560b, &(0x7f0000000100)={0x22, 0x54, &(0x7f0000000000)="872435d5e5615dad1c7b4079d0919bae304d32c5d733aa3d42a67d2311b3ebdeb2849c8a701dd54bff588306535ca7510ef1412ff7a0de0bddbdd0e6a70ac46f9043875a4b5e8dc33e7b8bf3d4fb09843d94bc4cbd4615edf675a4da2f3ab5fdf59163d30cbd3f2967aab66e44fac6ab1d95adfd0c2b2c8106ca8bafa2e3e13168398018d4bec9eb7decee06eb0ce55799425035f23a6c92afd56ff0c79a74ab5ff698a0847b63d260352edb3c72b79077e06b098034cf3cfd14da987de7985d0900a0c785c533fe1e791fd6e8bc0df18783977948ae28436226f0de32b19772a9153d", {0x2d, 0x8, 0x41415270, 0x4, 0x8, 0x6, 0x1, 0x7}}) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x4, 0xc0, 0x0, 0x0, 0x80000000, 0xa5, 0x0, 0x57, 0xffff5651, 0x0}) (async) syz_usb_control_io(r1, &(0x7f0000000540)={0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 25m39.673539745s ago: executing program 5 (id=4903): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000b00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000640)=""/106, 0x6a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x4, 0x3ff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000880)={0x4, 0x3, 0x0, "780582e2f55a3bb9df13be5ff5877ff3a6a1afb0fe848abe689b2c971069b199", 0x20363059}) fcntl$setlease(r2, 0x400, 0x1) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) rt_sigpending(0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x0) pipe(0x0) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000300)=0x18) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {0x3, 0xc}, {0x1, 0xa}}}, 0x24}}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100001000000000000000000fe8000000000000000000000000000bbff01000000000000000000000000000100000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130e00000000000000000000020000002f000000480001007368613235362d6176783200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000"], 0x184}}, 0x0) 25m37.444264147s ago: executing program 5 (id=4915): r0 = socket$inet6(0x2d, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r3, &(0x7f0000007280)=[{{&(0x7f0000000200)=@sco, 0x80, &(0x7f0000004580)=[{&(0x7f0000000280)=""/252, 0xfc}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/159, 0x9f}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/191, 0xbf}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/91, 0x5b}], 0x8}, 0x8}, {{&(0x7f00000045c0)=@isdn, 0x80, &(0x7f0000004940)=[{&(0x7f0000004640)=""/56, 0x38}, {&(0x7f0000004680)=""/3, 0x3}, {&(0x7f00000046c0)=""/120, 0x78}, {&(0x7f0000004740)=""/95, 0x5f}, {&(0x7f00000047c0)=""/22, 0x16}, {&(0x7f0000004800)=""/31, 0x1f}, {&(0x7f0000004840)=""/171, 0xab}, {&(0x7f0000004900)=""/56, 0x38}], 0x8, &(0x7f0000004980)=""/21, 0x15}, 0x7}, {{&(0x7f00000049c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004a40)=""/24, 0x18}, {&(0x7f0000004a80)=""/3, 0x3}, {&(0x7f0000004ac0)=""/175, 0xaf}], 0x3, &(0x7f0000004bc0)=""/27, 0x1b}, 0x9}, {{&(0x7f0000004c00)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000004c80)=""/58, 0x3a}, {&(0x7f0000004cc0)=""/44, 0x2c}, {&(0x7f0000004d00)=""/67, 0x43}, {&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/99, 0x63}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/187, 0xbb}, {&(0x7f0000006ec0)=""/9, 0x9}], 0x8, &(0x7f0000006f40)=""/214, 0xd6}, 0x5cac}, {{&(0x7f0000007040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007180)=[{&(0x7f00000070c0)=""/33, 0x21}, {&(0x7f0000007100)=""/127, 0x7f}], 0x2, &(0x7f00000071c0)=""/191, 0xbf}, 0x56}], 0x5, 0x2160, &(0x7f0000007340)={0x0, 0x3938700}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x232) bind$inet6(r0, &(0x7f0000000000)={0x2d, 0x4e20, 0xfd9, @local, 0xb4d0}, 0x1c) 25m37.141832816s ago: executing program 5 (id=4918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x24}}, 0x0) 25m36.993338231s ago: executing program 5 (id=4919): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x200, 0x74fe, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x840) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x103) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) r5 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r5, 0xe7d4c009da6c1985}], 0x1, 0x4) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r8) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x33) 25m34.831226181s ago: executing program 5 (id=4923): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) (async) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) syz_clone(0x80300, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x80300, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300)=r3, 0x12) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) eventfd2(0x1000, 0x80800) pselect6(0x40, &(0x7f0000000100)={0x2, 0x8, 0x1, 0x0, 0x0, 0x2, 0x100000000000, 0x4}, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x2, 0x8, 0x1, 0x0, 0x0, 0x2, 0x100000000000, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @dev={0xac, 0x14, 0x14, 0x35}}, 0xc) close_range(r5, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 25m19.720496644s ago: executing program 33 (id=4923): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) (async) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) syz_clone(0x80300, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x80300, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300)=r3, 0x12) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) eventfd2(0x1000, 0x80800) pselect6(0x40, &(0x7f0000000100)={0x2, 0x8, 0x1, 0x0, 0x0, 0x2, 0x100000000000, 0x4}, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x2, 0x8, 0x1, 0x0, 0x0, 0x2, 0x100000000000, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @dev={0xac, 0x14, 0x14, 0x35}}, 0xc) close_range(r5, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 12.555661787s ago: executing program 6 (id=11389): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x2019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x1}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x3, 0x4, 0x1, 0x0, 0x81}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900013000000000400004803c0001800b00010065787468647200002c00028008000740000000000500020000000000080003400000004a0800064000000001080004400000000014"], 0x94}}, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000003c0)={0x6, 0x6, 0x3, {0x1, @win={{0x1, 0x0, 0x2, 0x8}, 0x7, 0xe, 0x0, 0xc, 0x0, 0x1}}, 0x4}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000000)={0x3ff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x3}}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="94000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000a000000800004"], 0x94}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, &(0x7f00000016c0)={0x0, 0x5, 0x5, {0x5, 0x22, "c58e6d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.877594966s ago: executing program 4 (id=11407): msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/99) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000006, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) munlockall() ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000480)={0x0, 0x1000, 0x4, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000880)={r1, 0x550d, 0x1, 0x25f8d831467cfe52}) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000000007608000000ff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) mmap$IORING_OFF_CQ_RING(&(0x7f0000368000/0x1000)=nil, 0x1000, 0x2000002, 0x110, 0xffffffffffffffff, 0x8000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2c, 0x25dedc02, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x6, 0xffff}, {0xfff2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x44080) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x8}}}, 0x118) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 9.460215907s ago: executing program 6 (id=11411): ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x1, 0x6}, {0xe, 0xdd}, 0x80000000, 0x4, 0xa8}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000540)=0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, 0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x110c230000, 0x23, 0x2, @thr={0x0, &(0x7f00000001c0)="f071f4d9"}}) socket(0xa, 0x80000, 0x4) 7.40197961s ago: executing program 4 (id=11415): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) (async) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/cpu_byteorder', 0x4000, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') lseek(r7, 0x36, 0x1) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r10], 0xe8}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x110}}, 0x0) 7.296324095s ago: executing program 4 (id=11417): socket$kcm(0x11, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) accept4(r0, 0x0, 0x0, 0x80000) unshare(0x28000600) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) 7.241546561s ago: executing program 0 (id=11418): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x2000004) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r4 = syz_usb_connect(0x6, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x5b23, 0x0) poll(&(0x7f0000000200)=[{r5, 0x8110}], 0x1, 0x7f) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r3, &(0x7f000000bb40)="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", 0x2000, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912f3fcd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x69df570becbf5449, 0x40) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x4) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_fuse_handle_req(r3, &(0x7f0000007b40)="7f6918c94c44884d7b8a28634924247bb7227f95c895bbd9b1d304e96d5cec730781de7dae19f800f70a3f79a7dd3d71df24387c5c75ab544cb9f6046356198c15e42d1243561d3564eb81f867c971bfde8b68e2bb06c19acd4db9ff3338918a966ab2ae23d8a2d5d8329ebad40e96db51b70fb245b7876f6df6c6d07327f3c03928531903e5e783e0115db15b2833fc33d3b57f30f25e7b32d7d41f724e8b61cf82045c6cef472b58b94ad9f0b4746e47a86aa7fe472a33dd5d87578cbc83356e87ed9786be4fe4bbd49c4bea54f1209106ecc101b945d8bd1fc5f8f9fc04cb63087d76679c6985f9cd03ab2b47208be4f291c12a1aa95ec5d84137ef7f84f6bc37d829622c63a758886d23c509bb6009ee56c05ae6a79c890728b9028231456d8ba449755ac2a3b33f17ec27c69a93319f84ee840f08f379b53fd36a770b4353e273efce7392e2ad35975a1a6c9ec0d09a3e5052aa9c0cd67f68c0c878129ab13a46c2c650311739fe5658f035b08cd96b41b5b8b154eaa9aad034fa376ae9b906a93c91343755a26056335c7a3cd68132a957badaa133517f219b48dac6f8b9e073d484170e7c8d0279aa09986a4e18ababe7a67ca4706916dc14442ace6876fc039fc4895c086e6464b41c31fbfee4385bc6c8adfce87642ef7e360c84f6d731635579c2b78f3efb77a8cd7d985f7f4a3260cc8802173f6db768645cb59d3dcaf4c024312fb6bc6a77d177d838f976f2e37026927b02cbdcb2cf6f6c1ca9dcc90ad40d849c50085f4d1f15378f388b51a5c3a0eab990b8724fc2e39b4c5308e5bb2faa1e534a46c298309d6d8d01982ce3a4f5e7ffb6a32e1062735c361e29e8648a94daf71896fee3b2e5ecf3c9bc30d00f588129e3eb3ee8c3b5dda9b70db7e8f0ceb1b14bf4e823781237a8490ef28205b23d88840f9865ba8a760752bbae44ecaed810051ed2778864ba9aa48422c22fdb46b1dcca4601ade39a2200b9ca59cec048527da207d1b122da061f2085af49574bf9c9ff3534d8dc10f1352638515facb031dcf9d4f44aa76908b7ca8cb19347d83dea67121ae9f759df68e183a79e4f14b35bd18a47a81cd8cbfc45a772f2084f640d1343c1048dfb0da78063896a2f757637d767289c24608cadb0c98b0b8e525c5a6fcd57471b1a03f34008c70d60096fb25dbc1d7b090427304699a6e64a547c192388fa88b021644a38705645d0588e573f1052d56b2fbd3f0c7fa8bf713b77801fbeb7e53517326055617a45691a24dd22022b0f8a4f70da5792a66dffd7a52b0133bc8df01e7bfb2b81e15179452035b9a6f27f262936d7ecfafe97964ae4e6848793400177554bdfcae4897f0c5eebda209ff2e39326fc6bfb8012801432fb27723ccce88dc4bf26c9c2407e8fa19c2a5669905319e67268d0900c3a4de3825c1a6f3d256d62c1983d6136aa5554cbece1bd238161a7f7138d6b4d1bf4841c72ae9f8cd2eb4141f84947367c6457d37178f8dd3589faf2dfdc2a52172b5eed7ac6e65ea8a85764df131e05ce45e29a55e77625c4b47a823d726994956321af20152482d8bfa165fb3a59cb177a0a39839b597260e81bda3c1ce17cd84b5b5934f1e0c14287d99a091754b6430d8c7fe06ddecd1dc54fbdb2fb241a3022abdd5072c40fabd6a278bf12c2508b5222ecee996359fb7e2013280f25d63879fbc464c90966dc5d475fc0518593728e627be5683a782df540117cb0da3d0aa9ef492ac2e454cf8c4a34b454eb4ec4316026e34aeb4f0490d7d2b1a8cf757e0613b0348f10f3075a6ba221adbd3ee54a520254d4a3d4f7c012e6e35a6c3c7d5c321f12ed8ea1bea46161c26d5b2b956d712624435fc267d90b61c7a7929f82762e5708a650d5ed27be212a313bd603480857c26e118dc7b16021f090a765dd0b304aad70d16e7fa31c5c06e511b8a848bef23a68bd415ba3bce70d6e2d621a7c871e7c45a0e66e6e8f9b3ec58610f24e8332c15d8e0422ce3589639523e2089f68fb4d38b4fae820b88fc67a0884249fd509996dedce14d307e91166f90da5086b4574e922137b60c859847e54f62fc6d13ad5b79f7595999d54df6810f6cfe90e81399d4d6f905f569672f6f543572f87124b56d26ea43f66a1c75ac1ea26695d61599fd8db6e7f8c025393f948ba9e3ccc57270f371d3d31589c1f445388c931d78ae714a54b4c0bf1b0c8e4ec49db480c40b1df7135e5a1cd5d427fdb3fc8689999600f474f2b98312b89e8102e231258ad7137a3eed49a26f1ba3d7624e7ca647232ab36fb2a73f85f52c752bb32d61c2b6b9452cf279a30e971322cad2d6430a0d9f4902c9ce4b43054a4aac67250f9967523d57068616e7769189d3c513cfdf8a8bb37ad7932159c819af127eb3abee2c45e78ae62a3f6022f0e9de7454ff51ebeefc58db63803236b311087af41efe1cd5b82fc973a047565fb2c428a20052cb578e1fc6e33a66b331f53045b69efef186a6b34e01d089197112566020cd78410657e4547b726b48aab4d3d49554bfbbdf9d3598e93b412796931c2b662a096618deb94649cf2a922b2b6e2ea44163fc460419a8c5e88a18a05ee96392573cf2406affe801955214891430da0ee4ce385b013d827fd4adafaff661741d447e7be653efd5977bbd4aef922c076e91f391607a3f60d105753cb8e44aeee51e90aba0c52f731885c9d459cc89a1f548874009c5b6938feab5cc3f42721f4c9599fe74a11fd2f898c9fb3401be644a9ff6c093683e90e9a23a544e778fd5735e72eb432dd1ccbbfa9db14e8b7e5a638895edcff4a684a9d467151cd4b8d0fcebe3481b4c9f18b3279cafb76ed7bc5bde263baba9ab032f8973c8e1527f26c56b627a312538bec70e3829a1b35c53b0ca64571de79514c30c98cad975056a98fca351dd1753422e81733667098f893f1375736d6228531b97c5ab918819ff16c7eb38d33f0a1f023d07f97ce5d1d1e4b71c9a292aaee6522e1b0e332b7ad6a0248ecbc611e93652951ded443ba05530e2b6ef6f5837b2fb214db180281ecf14e73064dbb53f002ffc12038b8d720f7fb919ae92c423798fee59e1d20dc9002b8eee98347ec86026a293545d4224a334d77cbd68a39e698567b47dd296402b1a91b31184032ad5c07f9766d96a3aad4746153c3060204b6fca81b0e4195e54ad6d963526c2ce74cfece9b16fb93bddd0965335756243153faaae2e299b33eb8c2b58b1ff26714e3479418d77f3d122c2a397b851cc1b62ee272129137037b14312a6535376c2f8a505434bdbe1f009898709790a0cd0c6f265d7d2e93b22319991dedd018d391b9d824af7a0d1cdd08e05b961ef867d0bef9b56791bd34602af6cf812e20d7f1a68bd66b5b30700003b6fd06e690baad26193ccb4806057068f4a48cfbe289e718215b368ecee46b30088d38668f55e04f8ba14c26264f10456acab6a0982ac251ee1f2e2f612e7d7f4f9c7399972013844d442334aceb641e7b3535311488925d542a2a4000eadaecd0e23238bc3740beb45ac504b14591fbbd7e1b6015fe338c1399edb7d6dbb539d34ad9ffadd665e5f85b918f3d1d888636a84c7e685453bbdf9a5e22fe80f8e8b72ebfc1a2db75ae07edd9004f7d95481459edae62388c75d8be87fa491daab39e8f0764809fb6cdd0c1a501094b2ece56cdf14b5a92593fe8f158f41c0f77e0fbfcd8a76bc805895014b3c4a1ff8933bf07ffa971845441a27c4f83c682706cd03b405fa87224216f178403ac871990cdeb1bd75cc4dc963e4ca23be0fe9961a04cdb631e67baa1947c154f106ed5d8afbb1a6b57314603200a381a83446e5cb6346c484a878fe4339f0260e70f987fc73c58d4b82b853dd52b1967eeb13f724ae92b2ab490b8457230422cc1ecdc2860d730ed8cac393f7fd4927edcd13c8c8d576848a24d973172b2b70e9467dd6e28bcce21eb34d8cf0e2da165b18851d5fd017fd7b74eeca936267787870131a203e946fff450387ca87d5a6fa3f95109a9671cf4b066ef881df3ccc8902f67808c01e1739167ecb59b6cd8a195c62837348a2548708ce553e9cbd3f2a75bc83996871bcb0e7fac4d1e68eb3302b42cb46d3b8d1c6a27b237b3b50d87874197a197357178ccd8fd7575a4d54222ac1fb200657cbca5683303f3bc7a36ed0418327f8d1df336af2092c544f6226ced77b63445d913d328f03fb8889cf54ee36e642b37638d203c2e1bbb9ffa33d1e8124f7dcd22e98f66519f79a0731f6c5f1a3417d7e50eb39ba9d9a0a8be11112d1de4b6983ec0436cfcc5e0cbfab9ceed17a75743f70173649e8650a0e1183c11e62d0a9b566641feb8261432624d5116a6cc0a3332945f4aac41d46067777261ed028436220237340eecd76e820cb434f50e88c4c731f3e3f302220baba2a346683acb65008f4af74de5112cfb15be1d4d5fe080098e9cc447c5ed48eed2729f437f685548bea6842eb33bf7683bb097fc400d5be9ef54f79d8bf53ab057a431f535309e9af11783a5ce371ba5de8e517b767ff1b1d64efea71bf44cb0974665e4142f583489bb3b3870a779089822f52136bd34ee4b97276992bb080c6278be503fa06c970bff455d9d323fa2a7baea78e03b99a57ead6cfc90ec1cdc541e06c0ba80f23a03756e3d3d56b6f7cf7fe706cc9fd10395f18a6f1cd019e57efe3c49cddcc48c42890349d1255201c928d590ad6963700f91c73b8e522e9950ff9088f1b5365de624178f1e71168d29644e8a4dd9b524aeaf70738dc16aed5edef1c18365f00d6a7f8b1466b4da1a3f0981b491f79a87ebc323c75b12b292ad9e0ff34b615f57c1dd896e7eec65d075d3a4414769af553c0fde01d73196660c3401a0a5a82a5099564480bb7fc10240860bb2813612122c580438403a0fbc3aa5b789af01a4392163345291e7c83e57f20e9f7a9b4b234308688956d993ac0b4d4eaa8f714a5059734a5e1d47c98f93a40f60e77511e463e4fcbad3410882c553da9c7845b8554ae7e070f04c6752ca58363840479ee570b2960102814dd963bcf69d3a1279e5d6bee1ca28a46c0f34626da074053f52ac7eb71e05702086d3b23a250e7b8c4c0075e366b42fc64d06af19c49fc89a441182cef130c72f279f56813241e51775681aac365459bc24bb4bf59819c65df280cf1d11650796f35650efaebf2d4d00c9ea7c49dc8e7400e3c344dbfe7e93f4b70b89ca42df53dc42d7c0a6c67d8cb28c711ecbd945b3a21a412a10296a705c447c4a46a2c62a63a686ef467ee736a25c23a6e9496d35257b58f21669300b33d6e5abf93fdad59ab1f7358e07d0e409c9c8371bc44d42ce5da24a8fb8eb5a3aa55010d55358f72033c59a4491851002fce689caf1efe7e61016ce511c6af68fa4498ffc643cfcfe992f3d4a68987c27a1aceb06a87c8ae6fb59de2d5b6f01c57cfe27738531b0cf87f3b2ac41e19c4b51f2dc54514513c740bd2a1a60a7210afa6c727352d00b1a6b0c70d44592029eba80bf0b47e7bfffa6865d4ed213e9ad66f28ac8066d3e3a22f795c374de53a07b8318ef37b809601b2ce19d18229d5c9190250a9b0a27c500744b359134dc7a19ce9ba83b586c7c4190610e807ba13a62fde4ab8c443311800b03ad761a77dadbcf91b1fb7de0696d273b803d186f22657feb01fcfc00e2c38b4b3e77c987cc10605429e6a5aa4a6e55397cf8b7252119a8c90e4c5ab44e035e43f038e23cf491e9d0cb54155b38a73f781b7ba3973d5b011fca0501ab228bc7a07d52c1a417f2d89b21e32d7b54f0a7ceb7e5b3bbbf30093542df3c2896334a046d9ea5bf5b39c65d44bb4fc0447496549a2252c5002f4eacb09659c7d81a1b5aa36019fc6cf2dadc62bfb923d573a245b01be37872505081c28d95c023bb9d2398614cf8c06b48bcb26c727d739d8f970ac8b430001f32a11d60573edc125551ef19a46f9ed274f7da3962572d741a38ebfe2c79eefde7c0cc6f6b800bd3c2c3a3f397f109550e3339044968ee5d76a41c74d40cf7a9f9e1f6b8917037ba5dd5faad8a18380ce2c9c78f70fce4a6086649bc0bbd3fd79a2b96083a82ec212ffc00f98469b1923773a25400fdce8f2d6f6c5aa83e8071dc3073927f7901bf9685f603b246f46101ea69383a26277a7dde0aad5df47bfd9dd2dbfbb9c82d4c2536d687cabd85876725fa90220b85387ddabc59f9e065ab499cb19db370f4090edbe5203255c2e7b9199e9f7e3fd8efe96c760e56a8a0b581d7419fbcb7bc05b0ecad49980a191f3c572a3f187bbc7c9aca7e07631174be92bc42e31d420466503cd8eb65ff81f2fc87f262731f7f9a3d70b2973baf6a0a45e84aab447cc33ae5ee7e7e00ca346ebdf307b32f6a2792311195b6dd4458fbdfd63aa743848be5f33919fac774887bc2e819afc2f18b639bfbed1d4be7aac932ec64d1b735fd58f23ef87e9986d70d734267ef75b6c37d833d7c7c9abfccaf77e300e687127eda92dbe586d2821a50028d2bf073e8e628fa17c30f72d4ab734c03e665381de9b2c6bc56d3352a05db51c6b880a503368286a12e8eadebd62d5176725444700ee47c6d129f95ee724f7c15f1c6f8eb173482295789b870b1c307841e9f4ba0cba08f67bf38b26e9a7951a2bb6e1b11a864d468d26104573a23557e376667aeae0680086924c6be4a3b1cd77791a461b69bbbea5e2bb1662fd09fac1e4c2a4c3a9af4e1d1cb93a7a144e7a8a704ce1af0657f950a61f6731b84ef80809c745226c4b5c973e2ae9db0a0b89243ac24b6211a7dfd01ce2ac794bb1ddf4971ed9e03e1b48b15928de9ba1ec10d25c729e5aa1791de3c24f88783bece40b2d26f818a85412631136da414dae2b0e84a4f756ff47faf50b993ca2b1332f946bd60aaa244fef4c44e27abe18e3c139357621cc3f2181078619175019f07e8cff2029225657e869ab2f85f7d0da1f4ca725213ff3c54e9c8bbde165f4e7fefa7703ff9aaaeba782d09cfacd1b3ae70bc59c6721a487e9a151c2c2d6c374b2c9d7437485dcd9aabf09c1e8adfa2484f0e5972ede72ce13d6162052c6a94d8cd742a02996bc477a00a9180744ee9ea3d4c9c8b033c23076bef2773345d221c294864bc8b20a0522ddea26c0f9257db1abf991830cfc08e34d0d6f3225c425dfa7661ef281d715756e967ceacba90430f42bc906c39415266225041f7f400060bb86a43ec1f8f050f5c3cee2cf541b1d5f3e13d9613bb97d7dc0e58c5a0f4b11c572bceda5b632e98a9172e1b45eefc4ba808aeec0d3e40eb121035d174147aa1e54b8d5f75b630118e12e7688375e26ed745a9c50fa8a2fb023571c40ef4f0a2da5284d0ee921839709a3df86662dcabe01a592621a5c57d88a0dd7b1f1db695d6f577b024e004d46d4a463109befe04ad42776dcbe46ec9399d88f4b83018baa453c981d2639af3dcf650777be6a9ca936c1619cdedeece29c2013237556d09dd983d56a3cc8bc6a3a2960daeaec4d798637564eff409248ee3f9a733e7d612812748c63650c9f75997953e5e781ad48c1bc3a5c4d85cb5819acdfd7d593d615b6d09cb072d222332b6f8e23bdca8ae10868534519e250f7052b009b0e5c132726734645bc9850ab98bab08665887f4c97ce2eff5d8603066d4dfc2d762cd45bc96a7b2cdc2ca557e9ffaf0f03521a0680e30387706946c3587996b2751b5944147c7344b51cfd30e70da869ef1a5d8ec2ac8f4c56d4168f20365690c995c226840c5fc6b1f998acbaf4bbf095c314aec39123ba23df17d36ffbf48d110a6cef7b0d49cd34a6a097b31fc05025924e32df666c9bd264d62aeba0db0c6fad6513bd366c1c788661bd7f86fd3e5e5c52963a30a589f2266a0e3d0d00245f9db624bcfacd3328a9ff9c1ac6ed9497b37e56bf3152ff3188d2a5a5ec3ffd237468fff8fb42e693b796647020e1be6689789fee77045ef0e99114ba5eb55055805f012cd11a6d4a3cb04b1dd6243618cff80cc8a980325e9fe55e1acae084bc353fd56b8a500614c2f4997358099521a7210024d03e0f31f29eda6bf96eff0f741d90bacfb4fc87c15f0a924b38facd926a9767edddaf0e328ace267367a7a4f0efd04ba042457f306eb7f201faa5709e4052a162cd33bab0bac9a0181c0d383fd17957a9987f1d24e80901e6843beb37e7e13a076e44576456d3fedf50afaf2fbff36b1c7555bd560bdfdecb37412a2a6b66c94f988668d05eebbb5738ef09c7b9c1fda542f39a4f7d3eb2902d9c144fe89a4c33d77b7a053d89749a1260a6236db383474e8938d0c6a21abd63fe67c01d9fc16a8821c5709a22949344670547174223c3e13117ad43cb4e1b39903c92f9e548832019adec859e8ab84952b379f80a81451cf53eee157ed76eb0c816598e018195d69d9bd01b0e46432fef38f7cce7e0b180b0e16425ba49fa2d2cb99a5525f90e04ceeed8c8643592e64756e0b9911aae238a475ede1378e709cd20144d779e6aaf9fdb8236dbf5fe3f60d254fa19bd2c9fa950501894b95f272f6f4236625c5b2108d853f8407298a90947447c0c5dad5c235144954dd197493fc9fcbe82afea68cc29d3e53c16256c00d6ec40ef6319164a70017d19e07747cea22e668d53115f66c2a222dd3ab72d3ea6712f539796010c122aace09934fa37f2f4564d19ffe320ee0f0bb252e5b9d3abccd3cac62d7700a8372e19b981c192c367ed4182c94dd36771ab70d84e4f993de2c7a6d005c648b3ad78a065685cd11621c0a74bd4444e7e1183bb6b175bd43c7f5986fcd48c7a5522449b3f38019668a197bb6ee510719a7288d018ff4a72ad18ab81f7136b5f0b9f23e63a69d8ff174efd824a9ae0722a3cbce8ee596bb6025ff9a901ee70c462c01baa240f93511803652ee9fb2bd19bef2a849e184e36938cd2e1220157a8ca376e8a8bbb93669ba1dbe3ea2b5c5a55ec02cbb1393eee30a9ccfa22f22fe7fc888be74e00dadc9f273ef252304cc10b3acb2d320c74800e8397ce26eb806c9bbaab24c3bee318669e62696b05ea586068feabcff9e49967b2f7b1698f45a086f9deda7d8a26d3fe0723ad1a6ea3dfd10722e960f270db5a7d39daf6c5bcd822d4b05e10f5ea53d9267d13eab771405de136ed3a77c8f2f483d543fe8a5d7d1f34b39e78df05c3945a0f1ae184f641eaff54d92e739f16dd7ff3bb7f4026281eee4dc6fb429f7715a6fde415172d193b913dae9e73cc8c690f597ec757801f503fab84579f21721f90518b4ee88c0c947dce61fd53eecc58d4eb45d06aac0d35c1a9647ebb3507c0f8a2dbff36d03681929b942d7202ea575542f6921db5a3a933ff8ba2cb066f028e216b64d281fb6a236481d57d71bd318930fc1ee1d9ad2113df747c592be3d244e5f42957e468c0840b1dcd6cb82a5ce29ab016c7294bad05a6c0430929ae96164597abc25b6f746c25f50fe98afdc04ee696c620b923d15e211360b8c122f9c0fa8cec463c8f7a45a1eb054e2480d4f87a14a9ebb3836afad1d02234bfcbe75ac0ff43d1ab4b8c1ae7067422a2a1807814d53868959e8919090e6af016628ebac18684bd238d99ba6f16053aebcd69dd4ddde9db5fe0b6b431a316eb54d2ae29b695430ba60e30e3fb169bb3636de169175e5fcb52d13ed918fdaa0eea476df0804a3af0dc468fbea1b263b92de2206c7aa9ff6a85ebd5a578c60df6611a3944d79d81729fefd0562cdde51e8108bf0c273359d596e4bb85dd888168de99b0a6a81ae74ac3759c4b986d9cca8fcf60a536180570f0be902f1e96d960d353dc38c684eb63118f27bfc167f971f76a5863106889cbaa47f800436405eac62a14ff4138c712f1b45eac7b531fe548cfa6918f11787cb2c84a157a65a9e8668b2f3751e51a943423fc59a691ca16de178edf0c2a8e897222356af56490aaf6a0a8a4153f43ec3876a5bbf27a00dbcb70dfb885c85c419556624a18800bef8eb4f3e6e138856b1bbdc1eda17c1adfee5966837da52fa088c532e47263f5917707b7f08408d3461d4dc083b247714915c7c751ac0f9a6118fb24cd759d04f33043892e509fc12c73b17d03541749ca82ca2992b3aef51191e02f8bea747d0690a0991087761bd5e23b6289e7dadc6025276e9bec88858357f93735b01718d1d250b80381354ed5a782413bc34c08dc4b2aa91f2f6892a116cab3173b74230fe109e879ce854b1bc7047b6c8228e18797f7a355eb502aa0b012c82e10f7bc4bc91b149c85b8696cd5735c553347c26212b36dc9e778ac43dfe139a319e9aaf3c5643dc476a7ecd9f8f69e6b5ff54e2b98b6ff9f3aeb6ffd0019c4c6cf5332c1fec541ca45720e88d10f9c04352dce307053ad6e0b9b1448fe86b893cdd3a0caabc5a42772b186caec04e029faf696a842f78fdcd5bc6168e49656d9922d3797ab948298d830bcbdfeb2a593e38ac7f0c0aa10d70c4a6b110d3a75aea66af29ead30f3d03806ba9b1fc2c42aa27627e0647209b07ed7317eb711148b8781d9c6a79317fee6277951d9d7b7d8f823c046b3f2cd22bd809fc4c17d27c9f1c14269f6846f70bca0eb2280e720dff51082b40890061fad286ad200828a58e50391b011489e5b70d2aafe165c6e609badb24c0b29c05ab48b296a2b75a27aec0ca8a5b5eeec344ec2ebcdc2f7910b0b136b925e1dd75e3cf0739721f0f6d1df55e00445bdb630d801fe51a16eb63019df487b91a556d0ebcdeec1511b251679df0624bbaf8b0f53262f587cfad05f3587ea7ee22aa4b052013b08fd217fd58e8b918d58fb9ba50c1998a9ef9a42494392f8f3087b5d18512472420450fcce13ff6a56a5b491020f91a586decf28171ac13ad0e803b4617557a7335052b7468e98179ee82c729dc9422d4ecc87a4c6c308caff8e6ef4c3fe8088924cfea53d760d17008a4d111db27ead13863e808bd13b8bc5341017231fa1c27d12a0630b5472271354a1b09d85c90e4d0d731c7233c163c6d78fe48ae3f665f2e75d922e77a48f949cb33d41800360d0fc7cb165b6f4e8f3c05f0e1b9ce163f288861ecc7f3e134cac468795d3781c4aabad5d88fab0dd780bf913a19102a2be74798cd737d62b0186b641dc89552ac444ad60685e4c3118e8296972880f69ff39a69dfa38e07bbfe32fef1b683edb340f8b8ccfdadca73a44488ad6807c16a8c3a45111ac8664f7b85a45a28a6fbd4351a06521ebe22feaba53229c9d13daa40d8762e5eacb9bd6a69c3b37230c229348307ca24d15305a8667f9584a3abb11e5135146e3fa90769410f7dd04bb4e7744f28288b84dfde7aaab141d582d9faa5dfbdd36e6d3da28f627e05f39ca3cd24fe6cb05817c528b956e623f74b747b56e11fe93f40d881b59ff7edaa26d583fcaaf368a4247fb338759e5ead21fd8225e2436a336f95edf783fdfbabc7813f4d9a96613ed01e22becb25634ce3e5a1ccd25f6328c8c60eeb09a5484743bf0c90ad2ea1884ea12263b4700f667a2cf4649e7185c74f6e1f707d45db83563cd3cf6caa1a90da482d9ddba7e2c0bdbd60d24f", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0xfffffffffffffffe, 0x10001, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$vim2m(&(0x7f0000000480), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000080)={0x15, 0x2, 0x1, "b427ec0600000000fd000900005200ffff09400000000000000000b0d8156b00", 0x47504a4d}) umount2(&(0x7f0000002b40)='./file0\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) socket(0x2, 0x80805, 0x0) 7.218682237s ago: executing program 4 (id=11419): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x15, 0x2, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x6000, 0x0) pipe(&(0x7f0000000600)) fadvise64(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x2}, 0x33, r5}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000480)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) ioctl$EVIOCGKEYCODE(r7, 0x40044582, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) syz_usb_connect(0x0, 0x34, 0x0, 0x0) 7.206383286s ago: executing program 6 (id=11420): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$pptp(0x18, 0x1, 0x2) syncfs(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1000, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newlink={0x40, 0x10, 0x4, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xa}]}, 0x40}}, 0x24008850) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) 7.112400672s ago: executing program 6 (id=11421): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x30, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@dellinkprop={0x154, 0x6d, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, 0x2022, 0x31002}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8, 0x1b, 0xd}, @IFLA_PHYS_SWITCH_ID={0xc, 0x24, "27bda4b72840b9a6"}, @IFLA_VF_PORTS={0xe4, 0x18, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "94e73248722796855bfc01e2d48d4d7e"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1c46c0ea4236d296a37d7999bcd9ac98"}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7f}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "69dc323bbbd877e80ce4c64edb216191"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "eb155dbd51c2a7636801f933871a85cd"}, @IFLA_PORT_PROFILE={0xb, 0x2, '\x88&@)#[\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '\\{]),-\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "44051166b1688a020000005fd59004cd"}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '&.+\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b84e58f43f785e4baca34065980e182b"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0xffff7fff}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7107}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x31851}, @IFLA_WEIGHT={0x8, 0xf, 0x8001}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "8490cb0fa566d99bfddf6df1"}, @IFLA_EVENT={0x8, 0x2c, 0x80}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x8}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f000000080034000400164b08000300", @ANYRESHEX=r6, @ANYBLOB="050033"], 0x2c}}, 0x80) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) 6.536977183s ago: executing program 0 (id=11422): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7) r1 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7, 0x8040, 0x40, 0x6, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x67, 0x0, 0xc, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@end, @lsrr={0x83, 0x7, 0x6e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0x7b, [@multicast1]}, @ssrr={0x89, 0x7, 0x67, [@broadcast]}, @end]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x3, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xfffffffb}}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x30]}}, &(0x7f0000000280)=""/23, 0x43, 0x17, 0x1000, 0x3, 0x10000}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xd, '\x00', r3, r4, 0x4, 0x3, 0x2}, 0x50) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000380)={'veth1_to_batadv\x00', {0x2, 0x4e23, @loopback}}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) accept4(r6, &(0x7f00000003c0)=@caif, &(0x7f0000000440)=0x80, 0x80800) r7 = geteuid() stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000480)='./file0\x00', r7, r8) umount2(&(0x7f0000000580)='./file0\x00', 0x2) lsetxattr$security_evm(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640)=@v2={0x3, 0x2, 0x3, 0x40, 0x6a, "3256d98bd18ae83a1a26859bf1f898a727a0ff6a3118743d3b9952bd97fc1b52b3492d457d617db3389cb7a1c9569795908dda116c5b68d2dacd7c7ee04255e26c47736bbd35e006306c38cfadb201d65daf7f24269ece60f0d500019d713500aa83ae2fa94206a608ad"}, 0x73, 0x1) r9 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r10 = open$dir(&(0x7f0000000700)='./file0\x00', 0x400, 0x1) renameat(r9, &(0x7f00000006c0)='./file0/file0\x00', r10, &(0x7f0000000740)='./file0\x00') r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r11, 0x40189429, &(0x7f0000000780)={0x0, 0x2, 0x4}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r5, &(0x7f00000007c0)="ca6026e86722d97032122df515ba31b852de703bbdfa8b4dd61c374f810d465ce5eeb46c5fc6eb8d3e2725df9d2291c17963eee3efc949942c2f2c03256edb90f922eb91736275be2899aa7f573ed84354e879f4ce2ad5448f5381da4d71499ec39bf966850edc4a82414e54d42f547043af4720a62a9495b728c0bc0a5ca69f541cc120774ff1e771967a9f98d286b8581ffe96", &(0x7f0000000880)=@tcp6=r9, 0x1}, 0x1c) openat$btrfs_control(0xffffff9c, &(0x7f0000000900), 0x212000, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r9) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000002340)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002300)={&(0x7f00000009c0)={0x191c, r12, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x69c, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x14}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x23}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x3, 0x24, 0x2, 0xc, 0x48, 0x18]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x48, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x5, 0x0, 0x0, 0x3, 0xad, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0xd5b6, 0x2, 0xd, 0x10, 0x1ff, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4ec, 0x5, 0x8, 0x1, 0x0, 0x8, 0x6, 0x3]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x5d2c, 0x7, 0x800, 0x5, 0xd, 0x9, 0x400]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x8}, {}, {0x3, 0x3}, {0x6, 0x5}, {0x5, 0x5}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x2, 0x8}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x16}, {0x7, 0x3}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x2, 0x6}, {0x7, 0x5}, {0x0, 0x4}, {0x2}, {0x0, 0x6}, {0x1, 0x3}, {0x3, 0x7}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0x4}, {0x5, 0x2}, {0x2, 0x3}, {0x6, 0x7}, {0x5, 0x5}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x7}, {0x1, 0x5}, {0x2, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x4, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x4, 0x6}, {0x7, 0x6}, {0x4, 0x8}, {0x4, 0x1}, {0x4, 0x6}, {0x7, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x8}, {0x1, 0x7}, {0x2, 0xa}, {0x2, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x3, 0x1}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x5}, {}, {0x2, 0x6}, {0x6}, {0x3, 0x7}, {0x1, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x3, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x7}, {0x7, 0x9}, {0x7, 0x6}, {0x0, 0x6}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x3}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x1}, {0x4, 0x3}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x5, 0x1}, {0x7}, {0x5, 0x5}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x7}, {0x3, 0x5}, {0x6, 0x4}, {0x4, 0x9}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1, 0x5, 0x0, 0xd, 0x0, 0xa, 0x8000]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x2}, {0x3, 0x2}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0x5}, {0x6, 0x4}, {0x4, 0x2}, {0x7, 0x6}, {0x4, 0x8}, {0x3, 0x9}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x5}, {0x7, 0x2}, {0x0, 0xa}, {0x7, 0x7}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0x9}, {0x3, 0x7}, {0x4}, {0x7, 0x8}, {0x7, 0x8}, {0x6, 0x2}, {0x2, 0x2}, {0x6, 0x4}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x7}, {0x5, 0x6}, {0x6, 0x7}, {0x3, 0x5}, {}, {0x1, 0x7}, {0x2, 0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x5}, {0x2}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x0, 0x8001, 0x1, 0x8e, 0x0, 0xc]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x7}, {0x0, 0x1}, {0x2, 0x7}, {0x2, 0x5}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x5, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xfffc, 0x5, 0x2, 0x6615, 0x200, 0x0, 0xbef1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xd, 0x4, 0x7, 0x6, 0x72, 0xfff7, 0x825]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x6c, 0xb9e7a9496c3a83ca, 0xc9533bde02778f41, 0x4, 0x2, 0x48, 0x18, 0x30, 0x1b, 0x5, 0x16, 0x60, 0x36, 0x60, 0x48, 0x36, 0x16, 0x1, 0x3, 0x4, 0x5, 0x6c, 0xb, 0x5, 0x1]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x31, 0x60, 0x6c, 0x2, 0x8, 0x12, 0x2, 0x6, 0x12, 0x48, 0x48, 0x1, 0x30, 0x3, 0x1b, 0x36, 0x1b, 0x30, 0xb, 0x2f, 0x16, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x1, 0x8, 0x4f, 0x1, 0x7e8, 0xfffa]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x1392, 0x9, 0x1, 0x8, 0xe6b6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1b, 0x60, 0x12, 0x5, 0x36, 0x30, 0x16, 0x2, 0x4, 0x24, 0x2d, 0xb, 0x18, 0x30, 0x36, 0x18, 0xb, 0x30, 0x9, 0x2, 0x24, 0x1, 0x16, 0x12, 0xb, 0xb, 0x4, 0x9, 0x60, 0x3, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff1f, 0x8, 0x5, 0x4, 0x6, 0x8000, 0x7, 0x7]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0x6}, {0x6, 0x1}, {0x5, 0x7}, {0x7, 0x3}, {0x7, 0x6}, {0x6, 0x2}, {0x7, 0x9}, {0x2, 0x2}, {0x7, 0x9}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x1, 0x2}, {0x2, 0x5}, {0x2, 0xa}, {0x1, 0xa}, {0x1, 0xa}, {0x3, 0x4}, {0x5, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x2, 0xa}, {0x3, 0x2}, {0x4, 0x7}, {0x3, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x8}, {0x0, 0x4}, {0x1}, {0x3, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x15, 0xfffe, 0x6, 0x200, 0xf, 0x8, 0x2, 0x9]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xffff, 0x6, 0x3, 0x2, 0x198, 0xa, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x8, 0x5, 0x0, 0x9, 0x5, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff, 0x0, 0x81, 0xff8d, 0x4, 0x2, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x7ff, 0x7, 0x2d5, 0x1, 0x4, 0x400]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff2, 0x3ff, 0x6, 0x8, 0x800, 0x8, 0x4, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2cc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x12, 0x16, 0x1b, 0x12, 0x6, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x6000, 0x4, 0x2, 0x6, 0x9, 0x381b]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x1}, {0x3}, {0x6, 0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x4}, {}, {0x5, 0x8}, {0x3}, {0x0, 0x6}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x2, 0x9}, {0x5, 0x5}, {0x2, 0xa}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x3}, {0x2, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x7}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8001, 0xfb, 0x4, 0x0, 0x3ff, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x3, 0x80, 0x8e39, 0x8, 0x4, 0x6, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x16]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x148, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x464, 0xab71, 0x7, 0x8, 0xb65, 0x3, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6}, {0x4, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x7, 0x9}, {0x6, 0xa}, {0x1, 0x8}, {0x3, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x4, 0x9}, {0x3, 0x6}, {0x1}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x9}, {0x7, 0x9}, {0x4, 0x9}, {0x5, 0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x5, 0x3}, {0x3, 0x4}, {0x7, 0x2}, {0x3}, {0x2}, {0x4, 0x8}, {0x5, 0x1}, {0x5}, {0x4}, {0x7, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x3, 0x6}, {0x1, 0x6}, {0x4, 0xa}, {0x1, 0x4}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x5}, {0x4, 0x4}, {0x7, 0x1}, {0x4, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {0x5, 0x7}, {0x5, 0x4}, {0x0, 0x5}, {0x4}, {0x1, 0x4}, {0x2, 0x3}, {0x6, 0x6}, {0x6, 0x3}, {0x5, 0x5}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x2}, {0x2, 0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0xa}, {0x1, 0x4}, {0x1, 0x8}, {0x3, 0x5}, {0x4, 0x7}, {0x7, 0x1}, {0x4, 0x8}, {0x4}, {0x7, 0x4}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x3, 0x6}, {0x5, 0x4}, {0x5, 0x5}, {0x1}, {0x2, 0x6}, {0x4, 0x9}, {0x2, 0x9}, {0x5}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x4}, {0x2, 0x6}, {0x5, 0x4}, {0x2, 0x4}, {0x6, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x0, 0x4}, {}, {0x5, 0x3}, {0x3, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {}, {0x6}, {0x4, 0x7}, {0x1, 0x6}, {0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x2, 0x9}, {0x5, 0x4}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x8}, {0x4}, {0x3, 0x1}, {0x2}, {0x2, 0xa}, {0x4, 0x5}, {0x7, 0x7}, {0x6, 0x7}, {0x0, 0xa}, {}, {0x0, 0x5}, {0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x4}, {0x6, 0x2}, {0x4, 0x5}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x1}, {0x2, 0x3}, {0x1, 0x4}, {0x1, 0x9}, {0x7, 0x8}, {0x1}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x1}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x2, 0x9}, {0x3}, {0x3, 0x3}, {0x6, 0x4}, {0x1, 0xa}, {0x1}, {0x3, 0x9}, {0x6, 0x5}, {0x0, 0x2}, {0x6, 0x2}, {0x7, 0x5}, {0x2, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x8}, {0x3, 0x7}, {0x7, 0xa}, {0x6, 0x1}, {0x4, 0x8}, {0x4, 0x8}, {0x7}, {0x4, 0x9}, {0x1, 0x2}, {0x3, 0x2}, {0x3, 0xa}, {0x6, 0x5}, {0x7, 0x8}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x9}, {0x1}, {0x2, 0x3}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x6, 0x8}, {0x6}, {0x5, 0x2}, {0x6, 0x4}, {0x3, 0x8}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x2}, {0x3, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x7}, {0x5, 0x4}, {0x6}, {0x0, 0x2}, {0x2, 0x8}, {0x6, 0x8}, {0x5, 0x5}, {0x2, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x4}, {0x3, 0x2}, {0x6, 0x5}, {0x2, 0x9}, {0x2, 0x5}, {0x6, 0x4}, {0x0, 0x7}, {0x7, 0x3}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0xa}, {0x4, 0xa}, {0x0, 0x9}, {0x5, 0xa}, {0x4, 0x2}, {0x7}, {0x7, 0x1}, {0x1, 0x2}, {0x1}, {0x4, 0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x6, 0x9}, {0x4, 0x9}, {}, {0x0, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x9}, {0x0, 0x9}, {0x4}, {0x6, 0x5}, {0x2, 0x1}, {0x0, 0x2}, {0x3, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x5, 0x1}, {0x5, 0x8}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x3}, {0x7, 0x6}, {0x7, 0x3}, {0x5, 0x3}, {0x2, 0x3}, {0x7, 0x1}, {0x5, 0x6}, {0x4, 0x6}, {0x5, 0x3}, {0x7, 0x8}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x2}, {0x7, 0x8}, {0x5, 0x5}, {0x1}, {0x2, 0x6}, {0x5, 0x1}, {0x5, 0xa}, {0x3, 0x3}, {0x1, 0x4}, {0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x6, 0x5}, {0x0, 0xa}, {0x1, 0xa}, {0x3, 0x9}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x2, 0x7}, {0x4, 0x9}, {0x0, 0x6}, {0x4, 0x4}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x2}, {0x2, 0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x48, 0x6c, 0x36, 0x2, 0xb, 0x36, 0x3, 0xb, 0x53, 0x6c, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x12]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x3}, {0x2, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x3, 0x8}, {0x2, 0x2}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x3}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x5}, {0x5, 0x5}, {0x7, 0x6}, {0x5, 0x8}, {0x1, 0x4}, {0x4, 0x6}, {0x3, 0x5}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x58c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x77}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x13c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x730e, 0x1, 0x8e3, 0xfd00, 0x0, 0x4, 0xb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x9, 0x0, 0x6, 0x2, 0x4c, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3d, 0x9, 0x6, 0x9, 0x3, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xff, 0x9, 0x1, 0xfffb, 0x4, 0x100, 0x2]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x8, 0x0, 0x9, 0x8001, 0xf271, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x4}, {0x0, 0x1}, {0x7}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x6, 0x1}, {0x2, 0x7}, {0x3, 0x5}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x1}, {0x2, 0xa}, {0x6, 0x9}, {0x6, 0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x2}, {0x1, 0x5}, {0x5, 0x2}, {0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0x4}, {0x1}, {0x2}, {0x2, 0x9}, {0x5, 0x3}, {0x3, 0x2}, {0x5}, {0x6, 0x3}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x0, 0x6, 0x1, 0x81, 0x8001, 0xff, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x4, 0x1b, 0x1, 0xb, 0x1b, 0xb, 0x18, 0x60, 0x6c, 0x36, 0x18, 0x1, 0x4, 0xc, 0x6c, 0x17, 0x30, 0x24, 0xc, 0xc, 0x18, 0xc, 0x4, 0x9, 0x16, 0x30, 0x24, 0x48]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x16, 0x1b, 0x36, 0x0, 0x48, 0x2, 0xb, 0x1b, 0x36, 0x6, 0x957296c01b69f9c3, 0x5, 0x36, 0x12, 0x1, 0x6c, 0x5, 0x36]}]}]}]}, {0x3e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3d0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0x8}, {0x0, 0xa}, {0x4, 0x6}, {0x2, 0x3}, {0x0, 0x3}, {0x6, 0x1}, {0x6, 0x2}, {0x7, 0x3}, {0x4, 0x4}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x9, 0x933, 0x5, 0x8000, 0x7, 0xff79]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0x2, 0x401, 0xe, 0x8000, 0x81, 0x9]}}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x7}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x9}, {0x6}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0x5}, {0x3, 0x2}, {0x7, 0x5}, {0x4, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x0, 0x7}, {0x5, 0x6}, {0x4, 0x7}, {0x4}, {0x6, 0x4}, {0x4}, {0x3, 0x5}, {0x7, 0x4}, {0x0, 0x3}, {0x4, 0x4}, {0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x2}, {0x6, 0x2}, {0x7, 0x2}, {0x1, 0x1}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x3}, {0x5, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x5}, {0x3, 0xa}, {0x3, 0x7}, {0x7, 0x2}, {0x3, 0x5}, {0x6}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x8}, {0x7, 0x8}, {0x6, 0xa}, {0x3}, {0x5, 0xa}, {0x3, 0x7}, {0x3, 0x1}, {0x5, 0xa}, {0x5}, {0x3, 0xa}, {0x6}, {0x3, 0xa}, {0x2, 0x9}, {0x3, 0xa}, {0x1, 0x6}, {0x7, 0x9}, {0x5, 0x5}, {0x4, 0x9}, {0x7}, {0x5, 0x3}, {0x3, 0x5}, {0x2, 0x2}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x3}, {0x2, 0x2}, {0x3, 0x9}, {0x6, 0x2}, {0x2}, {0x6, 0x7}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x7}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5, 0x6}, {0x0, 0x5}, {0x3, 0xa}, {0x6, 0x3}, {0x0, 0xa}, {0x3, 0x3}, {0x3, 0x4}, {0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x5, 0x9}, {0x1, 0xa}, {0x7, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x3}, {0x2, 0x9}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x5}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x8}, {0x0, 0x8}, {0x7}, {0x1, 0x8}, {0x2}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x4}, {0x2, 0x7}, {0x7, 0x1}, {0x4, 0x1}, {0x2, 0x6}, {0x5, 0x8}, {0x3, 0x8}, {0x7, 0xa}, {0x2, 0x5}, {0x5, 0x7}, {0x5, 0x1}, {0x3, 0xa}, {0x5, 0x6}, {0x5, 0x2}, {0x0, 0x2}, {0x2}, {0x7}, {0x2, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa, 0xf9f, 0x544b, 0x9, 0x6, 0x8001, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x8}, {0x5, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x5}, {0x3, 0x3}, {0x4, 0x8}, {0x1}, {0x6, 0x4}, {0x7, 0x7}, {0x3, 0x8}, {0x0, 0x9}, {0x6, 0x5}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x7, 0x4}, {0x1, 0x4}, {0x1, 0x6}, {0x0, 0x7}, {0x7, 0x6}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x5}, {0x7, 0x2}, {0x6, 0x9}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x5}, {0x5, 0x3}, {0x2, 0x6}, {0x6, 0x5}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x0, 0x3}, {0x4}, {0x4, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0xc, 0x1b, 0x30, 0x12, 0x30, 0x5, 0x24, 0x24, 0x6c, 0x12, 0x36, 0x60, 0x36, 0x6c, 0x36, 0x16, 0x12, 0x9, 0x6, 0x36, 0x16, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x6, 0x5, 0x800, 0x800, 0xc2b, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x6, 0x8, 0x8000, 0xfff7, 0x200, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0xa}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x2}, {0x6, 0x1}, {0x1, 0xa}, {0x3, 0x4}, {0x6, 0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x3}, {0x3, 0xa}, {0x2, 0x7}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x5}, {0x4, 0x4}, {0x6, 0x8}, {0x4, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x2}, {0x7, 0x9}, {0x3}, {0x6, 0xa}, {0x7, 0x7}, {0x1, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0xd404, 0x4, 0x2, 0x200, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x3}, {0x3, 0x9}, {0x1, 0xa}, {0x5, 0x9}, {0x7}, {0x3, 0x6}, {0x1, 0x5}, {0x6}, {0x5, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x4, 0x2}, {0x1, 0xa}, {0x3, 0x1}, {0x6, 0x4}, {0x2, 0x7}, {0x4}, {0x6, 0x8}, {0x3, 0x3}, {0x4, 0x3}, {0x1, 0x17}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x10}, {0x4, 0x6}, {0x6, 0x10}, {0x7, 0x2}, {0x0, 0x1}, {0x1, 0x7}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x2, 0x8}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0x8}, {0x4, 0x2}, {0x3, 0x3}, {0x2, 0x6}, {0x3, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x3ff, 0x2, 0x7, 0x3, 0x1, 0xfff7, 0x7]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xff, 0x877, 0x8, 0x8000, 0x0, 0x6, 0xea]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x4, 0x42f, 0x0, 0xffff, 0x7, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8, 0x3, 0x1, 0x4, 0x9, 0x8, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf, 0x0, 0x9, 0xf75, 0x0, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x4, 0x3, 0x8, 0x7, 0x5, 0x1]}}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x6, 0x16, 0x16, 0x6, 0x9, 0x24, 0xb, 0x24, 0x60, 0x4, 0x18, 0x9, 0x5, 0x24, 0x5, 0xb, 0x6c, 0x54, 0x72, 0x4, 0x22, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x6}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x1}, {0x0, 0x6}, {0x4, 0x1}, {0x6, 0x5}, {0x3, 0x1}, {0x6, 0x2}, {0x7, 0x5}, {0x4, 0x6}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x1, 0x7}, {0x3, 0x5}, {}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0x2}, {0x3, 0x5}, {0x7, 0x9}, {0x3, 0x5}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x9}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x2}, {0x1, 0x3}, {0x1, 0x6}, {0x4, 0xa}, {0x3, 0x7}, {0x2, 0x6}, {0x3, 0x1f}, {0x7, 0x1}, {0x3, 0x8}, {0x7, 0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0x6}, {0x2}, {0x3, 0xa}, {0x6, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x9, 0x367, 0xf7c4, 0x101, 0x6, 0x8bf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x81, 0x3, 0xe, 0x9b8, 0x8, 0x9cf]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x9}, {0x1, 0x3}, {0x3, 0x1f}, {0x0, 0x7}, {0x1, 0x1}, {0x4, 0x2}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x8}, {0x1, 0x5}, {0x1, 0x3}, {0x6, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x71}]}]}, @NL80211_ATTR_TID_CONFIG={0x3b4, 0x11d, 0x0, 0x1, [{0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x4, 0x6}, {0x0, 0x6}, {0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x5, 0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x3}, {0x3}, {0x2, 0x9}, {0x7, 0x1}, {0x2, 0x9}, {0x5}, {0x5, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0x4}, {0x5, 0x7}, {0x6, 0x2}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x8}, {0x2, 0x6}, {0x6, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x9}, {0x4, 0x8}, {}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0x6}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x8}, {0x5, 0x8}, {0x1, 0x1}, {0x5, 0x8}, {0x1, 0x3}, {0x1}, {0x1, 0x8}, {0x3, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x2, 0x5}, {0x2}, {}, {0x2, 0x5}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x4, 0x8925, 0x28, 0x3, 0x0, 0xf0, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x484, 0xa, 0x7, 0x3, 0x608, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x40, 0x9, 0xfff, 0x1, 0x800, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x200, 0x2, 0xa, 0xdd, 0x1, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xa2, 0x5b, 0x4, 0x7, 0x2, 0x6, 0x100]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x8, 0x5, 0x7, 0x5, 0x1, 0x0, 0xac3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x4, 0xfffe, 0x5, 0x7f, 0x4, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x49d2a28cc0073ace}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x200, 0x2, 0xd, 0x1, 0x0, 0x4, 0xd]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x18, 0x4, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x17}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0xe00, 0x3ff, 0x4, 0x5, 0x4, 0x5, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x48, 0x12, 0x36, 0x24, 0x48, 0x30, 0x48, 0xa757b67fb8671644, 0x6c, 0x4, 0x30, 0x5, 0x30, 0x16, 0x16, 0xc, 0x30]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x1b, 0x16, 0x4, 0x18, 0x48, 0x9, 0x2c, 0x9, 0x18, 0x9, 0x3, 0x5, 0x48, 0x6c, 0x4, 0x6c, 0x6, 0x1e, 0x4, 0x1, 0x9, 0x1, 0x6, 0x1, 0x3, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x400, 0x8c, 0x2, 0x7f, 0x6, 0x80, 0x5]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x1, 0x7340, 0x8, 0x100, 0x9, 0x9, 0x1]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x5, 0x1b, 0x9, 0x9, 0x3, 0x3, 0x9, 0x48, 0x6c]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x2}, {0x4, 0x6}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0xa}, {0x5, 0x9}, {0x7, 0x1}, {0x6, 0x9}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x1}, {0x7, 0x3}, {0x1}, {0x3, 0x6}, {0x4, 0x7}, {0x2, 0x7}, {0x5, 0xa}, {0x7}, {0x3, 0x6}, {0x1, 0x6}, {0x3, 0x8}, {0x5, 0x8}, {0x6, 0x3}, {0x6, 0x8}, {0x7, 0xa}, {0x6}, {0x6, 0x7}, {0x7, 0x4}, {0x4, 0x2}, {0x1}, {0x7, 0x9}, {0x2, 0x7}, {0x6, 0x3}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x8}, {0x3, 0x2}, {0x4, 0x4}, {0x5, 0x5}, {0x2, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x46f, 0x7, 0x101, 0x9, 0x5, 0xfff1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0xd79f, 0x9, 0x0, 0x4, 0x800, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0xfa05, 0xc8d, 0x401, 0x0, 0x3, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffc0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}]}]}, @NL80211_ATTR_TID_CONFIG={0x248, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x18, 0x60, 0x1, 0x48, 0x36, 0x3, 0x24, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x4, 0xd6, 0x40, 0xa, 0x81, 0xb, 0x101]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x198, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x6c, 0x60, 0x1, 0xb, 0x36, 0x36, 0x16, 0xc, 0x1, 0x36, 0x16, 0x6, 0x48, 0x0, 0x60, 0x60, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6d94, 0x9, 0x5, 0x80, 0x45, 0x5, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x16, 0x0, 0x12, 0xc, 0x30, 0x6, 0x79, 0x9, 0x48, 0x9, 0x4, 0x60, 0x24, 0x5, 0x4, 0x48, 0x30, 0x3, 0x1, 0xc, 0x48, 0x1b, 0x4, 0x24, 0x18, 0x1, 0x48, 0x36, 0x5, 0x24, 0x16]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x6, 0x7, 0x0, 0x16, 0x3, 0x1, 0x60, 0x4b, 0x6, 0x1b, 0x32, 0x12, 0x18, 0x0, 0x5, 0x5, 0x1, 0x5, 0xc, 0x2, 0x18, 0x6c, 0x2, 0x24, 0x32]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x5, 0xa}, {0x7, 0x7}, {0x5, 0x9}, {0x6}, {0x3, 0x1}, {0x7, 0xa}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x4}, {0x2, 0x5}, {0x4, 0x2}, {0x6, 0xa}, {0x2}, {0x5, 0x2}, {0x2, 0x7}, {0x3, 0x8}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x4}, {0x7, 0x1}, {0x2, 0x5}, {0x0, 0x7}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x1}, {0x6, 0x4}, {0x5, 0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x8}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x1}, {0x3, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x0, 0x4}, {0x6, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {}, {0x4, 0xa}, {0x1, 0xa}, {0x7, 0x4}, {0x7}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x6, 0x5}, {0x5}, {0x6, 0x2}, {0x7, 0x4}, {0x6, 0x1}, {0x3, 0x7}, {0x1, 0x7}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x6}, {0x5, 0x5}, {0x2, 0xa}, {0x2}, {0x4, 0x7}, {0x4, 0x7}, {0x7, 0x6}, {0x6, 0x5}, {0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x4}, {0x5, 0x2}, {0x6, 0x6}, {0x3}, {0x6, 0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x1}, {0x2}, {0x5, 0xa}, {0x2, 0xa}, {0x2, 0x4}, {0x3, 0x7}, {0x6, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x7, 0x8}, {0x1, 0x4}, {0x1, 0x5}, {0x6, 0x9}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x7, 0x1}, {0x4, 0x4}, {0x4, 0x5}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x2, 0x8}, {0x6, 0x3}, {0x3, 0xa}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe62b, 0x1, 0x9, 0x0, 0x7ff, 0x93a4, 0x4, 0x6]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xc, 0x9, 0x2, 0x6, 0x18, 0x3, 0x2, 0x3, 0x9, 0x6c, 0x18, 0x2, 0x6c, 0x4, 0x24, 0x9, 0x30, 0xb, 0x4, 0x36, 0x0, 0x6c, 0x3, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x49, 0x9, 0xffff, 0x1, 0x8, 0x3, 0xd7f8]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1e}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c4, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xeb}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x85}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}]}, {0x4}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x3, 0xb, 0x16, 0x12, 0xc, 0x2, 0x689f77cb299d430f]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0xffff, 0x200, 0x61a, 0x9, 0x3ffc, 0x7]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x2fa, 0x4, 0x4, 0x0, 0x2, 0x3, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x28}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}]}, {0x4b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x310, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x36, 0x18, 0x5, 0x6, 0x12, 0x9, 0x48, 0x2, 0x30, 0x6c, 0x6c, 0x12, 0x5, 0x6, 0x1b, 0x30, 0xe73d14af773d55f4, 0x78, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfd61, 0xf057, 0x81, 0x2, 0x2, 0x5d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x2, 0x1, 0x2, 0xac, 0x100, 0xc00, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x10, 0x0, 0x9, 0xaed3, 0x9, 0xd2, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1000, 0x7e8c, 0xfbfd, 0x2, 0x80, 0x1ff, 0x2]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x7, 0xfffd, 0x5, 0xef, 0x6, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x2, 0xa}, {0x2, 0x5}, {0x5, 0x5}, {0x1, 0x5}, {0x3, 0x9}, {0x7, 0x5}, {0x6, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x2, 0x5}, {0x6, 0xa}, {0x2, 0x9}, {0x5, 0x8}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe1a0, 0xfff, 0x7f, 0x2, 0x1, 0x8, 0x0, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff, 0x5, 0x8001, 0x8001, 0xfff, 0xff1f, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0xf800, 0x8, 0x0, 0x6, 0x1, 0x3, 0x9]}}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x5, 0x1}, {0x3, 0xa}, {0x2, 0x8}, {0x3, 0x8}, {0x4, 0x4}, {0x0, 0x1}, {0x4, 0x5}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x7, 0x6}, {}, {0x7, 0x7}, {0x6, 0x6}, {0x1, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x4, 0x1}, {0x0, 0x5}, {0x5, 0x9}, {0x1, 0x5}, {0x2, 0xa}, {0x5, 0xa}, {0x4, 0x2}, {0x7, 0x1}, {0x6, 0x6}, {0x1, 0x7}, {0x7}, {0x2, 0x5}, {0x2, 0x3}, {0x3, 0x7}, {0x6, 0x8}, {0x6, 0x9}, {0x6}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x8}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0x5, 0x1}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x800, 0x0, 0x9, 0x1000, 0x1, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbb0, 0xea22, 0xd, 0x4, 0x100, 0x6, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x8}, {0x4}, {0x2}, {0x4}, {0x1, 0xa}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x7}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x7}, {0x0, 0xa}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x6, 0xa}, {0x3, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x5, 0x8}, {0x0, 0x7}, {0x2, 0x9}, {0x7, 0x2}, {0x7, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {}, {0x4, 0x8}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x3}, {0x3}, {0x7, 0x6}, {0x7, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x8}, {0x7, 0x8}, {0x1, 0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0xc, 0x24, 0xb, 0x2, 0x60, 0x3, 0x18, 0x24, 0xc, 0x6c, 0x3, 0x2, 0x18]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x409, 0x80, 0x9, 0x2, 0x8000, 0x3ff, 0x33, 0x3]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x3}, {0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x2, 0x1}, {0x3, 0x5}, {0x6, 0x4}, {0x0, 0x6}, {0x2, 0xa}, {0x7}, {0x0, 0x4}, {0x6, 0x2}, {0x2, 0x7}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x6}, {0x5, 0x4}, {0x1, 0x9}, {}, {0x5, 0x7}, {0x7, 0xa}, {0x3, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x9}, {0x4, 0x3}, {0x1, 0x7}, {0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x6, 0x9}, {0x6}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x1}, {0x6, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {0x3, 0x4}, {0x3, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x4, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x1, 0x7}, {}, {0x5, 0x1}, {0x6, 0x9}, {0x3, 0x8}, {0x7, 0xa}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x5}, {0x6, 0x3}, {0x3, 0x1}]}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0xa}, {0x6}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x7, 0x8}, {0x0, 0x9}, {0x6, 0x1}, {0x3, 0x4}, {0x3, 0x9}, {}, {0x0, 0x4}, {0x2}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x6, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0xa}, {0x3, 0x6}, {0x4, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x4}, {0x3, 0x9}, {0x3, 0x7}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x4}, {0x7, 0x1}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0x7}, {0x6, 0x2}, {}, {0x1, 0x9}, {0x7, 0x3}, {0x4, 0x2}, {0x6, 0x4}, {0x0, 0x6}, {0x4, 0x1}, {0x5, 0x6}, {0x2}, {0x6, 0x3}, {0x6, 0x7}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x7, 0x9}, {0x1, 0x5}, {0x6, 0x9}, {0x6, 0x9}, {0x7, 0x2}, {0x6, 0x3}, {0x1, 0x8}, {0x0, 0x4}, {0x2, 0x8}, {0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x7, 0x6}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x3}, {0x6, 0xa}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x3}, {0x3, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0xc, 0x1, 0x16, 0xc, 0x6, 0x24, 0x1, 0x9, 0x1b, 0x48, 0x6c, 0x48, 0x6c, 0x12, 0xb, 0x16, 0x12, 0x8, 0x18, 0x1b, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x1}, {0x7, 0xa}, {0x5, 0x4}, {}, {0x0, 0x9}, {0x0, 0x6}, {0x1}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x3}, {0x7, 0x3}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x5}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x3}, {0x3, 0x9}, {0x7}, {0x1}, {0x5, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x9}, {0x3, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x36, 0x2, 0x24, 0x18, 0x36, 0x4, 0x6, 0x34, 0x1b, 0x3, 0x4, 0x60, 0x6c, 0x24, 0x6c, 0xb, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x24, 0x12, 0x2, 0x1, 0x5e, 0x15, 0x48, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff98, 0x1000, 0x1be, 0x7e8, 0x1, 0x8, 0x36, 0x4d]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0xb]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3}, {0x2, 0x7}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x7}, {}, {0x0, 0x2}, {0x5, 0x5}, {0x2, 0x7}, {0x4}, {0x4, 0x7}, {0x1, 0x5}, {0x2, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x6, 0x5}, {0x1, 0x3}, {0x6, 0x8}, {0x3, 0x7}, {0x4, 0x4}, {0x6, 0x1}, {0x6, 0xa}, {0x7, 0x7}, {0x5, 0x2}, {0x5, 0x5}, {0x2, 0x7}, {0x0, 0x1}, {0x7, 0x7}, {0x3, 0x9}, {0x1, 0x5}, {0x5, 0x7}, {0x7, 0x3}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x8}, {0x7, 0x4}, {0x5}, {0x0, 0x7}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0x4}, {0x2, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x5}, {0x4, 0x4}, {0x7, 0x7}, {0x4, 0x4}, {0x6, 0x1}, {0x7, 0x4}, {0x2, 0x7}, {0x2, 0xa}, {0x0, 0x6}, {0x5, 0x4}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x4, 0x0, 0x7, 0x5, 0x419, 0x667b, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x1, 0x9, 0x8, 0x9, 0x62d5, 0x12fc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x0, 0x7, 0x8, 0x8001, 0x401, 0xb16]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x4, 0x1, 0x9, 0x18, 0xc, 0x3, 0x1b, 0x16, 0x2, 0x24, 0x4, 0x6c, 0xb, 0x3, 0x6, 0xb, 0x2, 0x24, 0x48, 0x36, 0x6, 0x1, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0xfc00, 0x1, 0x400, 0x49a5, 0x6, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x5, 0x14, 0x0, 0x6, 0x7, 0xf6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x597, 0x6, 0x2, 0x1, 0x8, 0x60e2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x9, 0x8, 0x5, 0x2, 0x5c, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbd, 0x5, 0x8000, 0x7, 0xb8, 0x4, 0x8, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x2}, {0x4, 0x9}, {0x3, 0x4}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x29}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x118, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xec, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x18, 0x2, 0xb, 0x1b, 0x6c, 0x4, 0x27, 0xc, 0x9, 0x1, 0x4, 0x6, 0x24, 0x30, 0x1, 0x6c, 0x24, 0x30, 0x5, 0x7, 0x24, 0x36, 0x18, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xa5dd, 0xd00, 0x8000, 0x0, 0x1000, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7ff, 0x1, 0x40, 0x3, 0x2, 0x5, 0x8]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x4b, 0x60, 0x48, 0x30, 0x60, 0x15, 0x6, 0xb, 0x5, 0x0, 0x6c, 0x6, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{}, {0x4, 0xa}, {0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0xa}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x1, 0xa}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0xa}, {0x3, 0xa}, {0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x3, 0x9}, {0x7, 0x3}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x8}, {0x7}, {0x6, 0x3}, {0x0, 0x3}, {0x5, 0x3}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x8}, {0x3, 0xa}, {0x2, 0x7}, {0x1, 0x8}, {0x7, 0xa}, {0x6, 0x4}, {0x6, 0xa}, {0x5}, {0x3, 0x3}, {0x2, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x2, 0x523d, 0xb, 0x1, 0xe, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x0, 0x30, 0x5, 0x6, 0x4, 0x16, 0x5, 0x5, 0x12, 0x4, 0x30, 0xb, 0x24, 0x4, 0x36, 0x6c, 0x60, 0x9, 0x0, 0x1b, 0x9, 0x18, 0x36, 0x6c, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf6a6, 0x96, 0x5, 0x9, 0x8, 0x9, 0x800, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x191c}, 0x1, 0x0, 0x0, 0x20004056}, 0x40805) r13 = epoll_create(0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000023c0)=@o_path={&(0x7f0000002380)='./file0\x00', 0x0, 0x4018, r13}, 0x14) r14 = socket$inet(0x2, 0x3, 0x1) getsockopt$IP_SET_OP_GET_FNAME(r14, 0x1, 0x53, &(0x7f0000002400)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000002440)=0x2c) 6.322424679s ago: executing program 0 (id=11423): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001a40)={0x20, 0x18, 0x1, 0x70bd2c, 0x4, {0x2}, [@nested={0xc, 0x5e, 0x0, 0x1, [@nested={0x4, 0x133}, @typed={0x4, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 6.1917212s ago: executing program 0 (id=11424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x15, 0x2, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x6000, 0x0) pipe(&(0x7f0000000600)) fadvise64(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x2}, 0x33, r5}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000480)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) ioctl$EVIOCGKEYCODE(r7, 0x40044582, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT], 0x0) 4.007854405s ago: executing program 6 (id=11430): r0 = open(&(0x7f0000000180)='./file0\x00', 0x6440, 0x81) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc000) rseq(0x0, 0x0, 0x0, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f3, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x20, 0x0, @val=@tcx}, 0x1c) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0xd000) r7 = socket(0x3, 0x80000, 0x3c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x4}, 0x3, {[0x8000, 0xfffffffc, 0x24, 0x10001, 0x0, 0x6, 0xffffffff]}}, 0x5c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r8, 0x0, 0x0) capset(0x0, 0x0) 3.956808768s ago: executing program 4 (id=11431): ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x1, 0x6}, {0xe, 0xdd}, 0x80000000, 0x4, 0xa8}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000540)=0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x4000, 0x11, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, 0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x110c230000, 0x23, 0x2, @thr={0x0, &(0x7f00000001c0)="f071f4d9"}}) socket(0xa, 0x80000, 0x4) 3.863574997s ago: executing program 1 (id=11432): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x38, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x40) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r7, &(0x7f00000192c0)=[{&(0x7f0000019380)="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", 0x3df}, {&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb42f5316b21c39b07f6f4002375b40b6871f65f7d8dc988437ffab21315c6f4ce5673a7ae29fc2886d176d71b6f861210af114a3d8c8579363cf7a7e0a10759d14f7dd30a7cf6d116ff1ae9d014da95838138469eb6c724abf520758dc0bf0e0d061631b399be0ec39bcb592701428df40874a1811bf684c7f075a6e9dc484aa153c5b92c552a75cfd69e2d7a3bfcc117a5", 0xb3}, {&(0x7f000001a500)="5359b30adba55aba146e23d2d24b922d83acd5b893234064d638038f27ec41c3f6190b219ded5a2b500e79693dcde53c159faeed9dfe060c830a673d50991502867f04987972375a102e8d4b062ee0beb0fa90b1abb5f67fa6ca26a9880b7192f96825a883caed920c0c6498944adac8dc337446a3e530a522f8dee3777fc613cac6fd65732f4a3a8f4aa0226a6722f4aa53de83c7ebe61d3b108533abe6168f407180d4a48d42e3de6f7eab792caf42d4c0365b1f45c543537db13cb47aae51d27e486db1a19d7e8a62ad7e721bf375ac2b5bed94923793db0c9daa6c98f016546226876b94788b9f578a8ab0d0ccb8b92d971a0ba7136fcd25631f1633dc1d63de6f2f5e79240e90521c6d18ae5879f432e5e6d0156e863e62b2c5123395ca1f74d299", 0x124}, {&(0x7f000001a440)="373f0c6e77dc2a0f40cabfb07fa976c4f3af8c5d4aafdc85b7ec98c79b29b092417f368fd2b04f282d176554b5fabd5996ba17dcf3d1e878b50dddaaf6dad740d3b88bbe3d1c5b939e609ca0e6c984a1c226780f8dd92309d34842e027b5503701b3104f4633e138c3af0f8aab5de142acc623ee6a60eb00c6b37eba777419bb227ba5507191c7b5d18b9992e1068156dac8258affc0c16197fccc58", 0x9c}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000190c0)={0x0}}, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r6, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) 2.711713497s ago: executing program 6 (id=11434): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000002800)={0x58, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 2.698318372s ago: executing program 1 (id=11435): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004600005c00001000cc0f1fcc0d80add97f573d759175524b00596756b83e12867a552f9078000000e010000800000086dd080088be000000001000000088f7ffff00000020080022eb00000000200000000200000000000000000000000800655800"/131], 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) (async, rerun: 32) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) writev(r1, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) 2.520603865s ago: executing program 4 (id=11436): ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x60080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000010010000010000"], 0x10}, 0x40) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000300)={0x5, 0x0, [{0x80000008, 0x101, 0x0, 0x6, 0x3, 0x10001, 0x1}, {0x40000000, 0x1, 0x2, 0x9, 0x4, 0x1, 0x1000}, {0x7, 0x7, 0x1, 0x81, 0x5, 0x7, 0x7fffffff}, {0x40000001, 0x0, 0x4, 0x4, 0x1, 0x8, 0x8001}, {0x0, 0x35, 0x7, 0x9, 0x9, 0xb0, 0x9}]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg(r1, &(0x7f0000000940)={&(0x7f0000000400)=@isdn={0x22, 0x6, 0x81, 0xb, 0x6}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000040)="30f5bc0fb5453413257e7fcd54e08ea6dc1d506667d45e686e5c115187043814bbc3600180e5fb808b06a663169253e94c44f353bc3c", 0xfffffe7e}, {&(0x7f00000000c0)="798f55f7907c4d25825e74285941e7e86af11eab84067f5d0068993410", 0x1d}, {&(0x7f0000000480)="a62055976f9c91f24e3785c0967c8d782ae25718bd75310195611cbd8cfb05cd6cb3d28887822982fa8a973b2014669362a9858b0b993bf72f30aa4c475f1f18402b42eb4639227855384f33d46c09c9a254f61469adde5fd9a18fb94b25006ab2b1fc825fb8aa11869ac4aa842b903076de8e134c755d451ee60e105dd275dc6fae6547d9380ef0c76cdd45872bdba61f79229737dfeb8133731b971d", 0x9d}, {&(0x7f00000001c0)="79bd6c774e47913a43a7152b768c3b1502905fc993d833cb2be0986c052cee492d32c9949ef1b9337c7b852d62ba38407172abe98b599e88997ce8f30e", 0x3d}, {&(0x7f0000000580)="c48c5457c9d5ecc217fd945585b1c41fa011adbe1266f987b3442575033e3e77367abf8f786c86fb34949ed99ef554f0737e0b45cae313585f500e4ce3c4df717a8daa26fe219706d08ea0c9a16d053e", 0x50}, {&(0x7f0000000780)="a7a77cc65004d2b2154fce5d40d6e72388fc7a377c7fe7ee1e063c1e3f7ac64039ed999979c9b420a1f0ab5c58", 0x2d}, {&(0x7f0000000640)="5bf06ce23a99aa4bc9077b85f4ba45020e70c2259ca697a5c774e8948cb68901fabb361a6b2df34775916f29b22cffe6edf2dd8e8962a6eb17f85d32eeb9", 0x3e}, {&(0x7f0000000680)="5f06f5158128441253d93478dc34c4ab5b82705cbff519a04513efb2bb32bc3519c419b4b1519e161aa031e4a32cbe6ad21bb607c6c8f5280f3fd0cceeeac683f565464952333f34710f4f639c741d0e3b3b388cbbf858ed9b6e2b5e0cfe1696db4896ee43c2fa6aaa1663bdf603cf9f1d1e48a34c9bfb72380663b101c5060f7ede9fd6b960d1f347644fe617dda43c79e86ddbfa234bdd32cc8b7ecdb35dbd23f4a248af79fb0c5636b6c731f492a88f7cd838e4191cfeaa21d9c45fcf5eb0d67e8ce7b04f75b71e7e24863b6bc0", 0xcf}, {&(0x7f0000000600)="6d779cb568d7c40d49f2a88ccd8a909a4520263dd2000c0000000000000a94f62e", 0x21}, {&(0x7f0000000980)="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", 0x13d}], 0xa}, 0x2000c801) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x405c5504, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b567189d306e2f215fc78c87c49eb9d0a4975"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x22, 0x2, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) socket$kcm(0x29, 0x2, 0x0) 2.375468137s ago: executing program 1 (id=11437): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x83, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x200000}}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000bbac1414bb00000000000000000000000000000400100000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100020000000000000000000000004000"], 0xb8}}, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f00000005c0)={{0x1, @addr=0x1}, "522ec2c4dfdea0e049be106158e4f5aa2e9a2a24b978bb029b829364f1d8fecd", 0x1}) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0xc0000000, 0x0, 0x31364d4e, 0x34565348, 0x7, [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x1}, {}, {0x0, 0x6}], 0x0, 0xfc, 0x7, 0x0, 0x6}}) r6 = dup(r4) (async) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 32) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000200)={'vcan0\x00', &(0x7f0000000280)=@ethtool_dump={0x3e, 0x80000001, 0x8000}}) (async, rerun: 64) syz_usb_control_io$hid(r8, 0x0, 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xa8, &(0x7f0000000140)=ANY=[@ANYRES16=r5]) (async, rerun: 64) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x47, 0xa, 0x0, "1b0700000000000000fff4dd40073407b95d1faec8f20000000014efff000002", 0x3234564e}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2.0706506s ago: executing program 1 (id=11439): capset(0x0, 0x0) unshare(0x2040400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) (fail_nth: 2) 1.98407914s ago: executing program 2 (id=11440): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f00000003c0)={0x80000003, 0xffffffffffffffff, 0xfffffffe}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) 1.599755302s ago: executing program 1 (id=11441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x24000840) (fail_nth: 10) 998.928809ms ago: executing program 0 (id=11442): socket$kcm(0x11, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) 959.084474ms ago: executing program 2 (id=11443): prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000001c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000200)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000240)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000280)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000002c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000300)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000340)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000380)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000003c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400)) prctl$PR_GET_ENDIAN(0x13, 0xfffffffffffffffe) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000440)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000480)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000004c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000500)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000540)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000580)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000005c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000600)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000640)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000680)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000006c0)=0x0) sched_getattr(r0, &(0x7f0000000700)={0x38}, 0x38, 0x0) 869.503301ms ago: executing program 0 (id=11444): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x15, 0x2, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x6000, 0x0) pipe(&(0x7f0000000600)) fadvise64(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x2}, 0x33, r5}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000480)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) ioctl$EVIOCGKEYCODE(r7, 0x40044582, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT], 0x0) 869.141827ms ago: executing program 1 (id=11445): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0x5000) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000a40)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x38}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r6, 0xffffffffffffffff, 0x6, 0x0, @val=@tcx}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 811.040375ms ago: executing program 2 (id=11446): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'sed\x00', 0x1, 0x400000, 0x4}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x6, 0x12d61, 0x12d58}}, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000140)=0x4) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0xc, 0x0, @opaque="03000000"}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'wrr\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x10000, 0x44, 0x12d5c, 0x12d5c}}, 0x44) r4 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x204000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x61}, {&(0x7f00000001c0)="5c8000000000000000ea45a1", 0x20000081}], 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) 500.308793ms ago: executing program 2 (id=11447): capset(0x0, 0x0) unshare(0x2040400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) 251.133038ms ago: executing program 2 (id=11448): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104feffff7f0300000000000006", @ANYBLOB="b667d350f091277aa659808f37ca6f746383677c059acf50db2ed6e9923a527dd2a1f1667045e72bccbae83eab5f2019b3336e3838c9341893620d9dac5436a5ca7fc539237b4a8ecb4ada5acdf853db235127842af7b868ca41f6bdc5c26a67a4a45aa7d82d63e03c2b88d790554be87ef0a7b884b5c9e1d06e85f9c998233511bd2966856533", @ANYBLOB="6039597106", @ANYRES32=r1, @ANYBLOB], 0x28}, 0x1, 0xd, 0x0, 0x2004c845}, 0x4000000) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104feffff7f0300000000000006", @ANYBLOB="b667d350f091277aa659808f37ca6f746383677c059acf50db2ed6e9923a527dd2a1f1667045e72bccbae83eab5f2019b3336e3838c9341893620d9dac5436a5ca7fc539237b4a8ecb4ada5acdf853db235127842af7b868ca41f6bdc5c26a67a4a45aa7d82d63e03c2b88d790554be87ef0a7b884b5c9e1d06e85f9c998233511bd2966856533", @ANYBLOB="6039597106", @ANYRES32=r1, @ANYBLOB], 0x28}, 0x1, 0xd, 0x0, 0x2004c845}, 0x4000000) (async) 0s ago: executing program 2 (id=11449): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) unshare(0x2a020480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) kernel console output (not intermixed with test programs): read configurations, error -61 [ 2551.737415][T26787] usb usb5-port1: unable to enumerate USB device [ 2552.552978][T30863] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2552.721048][T30863] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2552.768956][T30863] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2552.799681][T30863] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2552.818977][T16575] program syz.0.10968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2552.831158][T30863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2552.855273][T16569] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2552.879286][T16575] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2552.889938][T30863] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2552.905971][T16575] syzkaller1: linktype set to 823 [ 2552.916199][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10968'. [ 2554.303072][ T9104] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 2554.649929][ T9104] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2554.689023][ T9104] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2554.758190][ T9104] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 2554.790127][ T9104] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2554.822665][ T9104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2555.289769][T16591] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2555.298216][T16591] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2555.329417][ T9104] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2555.383979][ T1551] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2555.426493][T11291] usb 2-1: USB disconnect, device number 51 [ 2555.435436][T16565] delete_channel: no stack [ 2555.613974][ T1551] usb 3-1: device descriptor read/64, error -71 [ 2555.720227][T16612] sctp: [Deprecated]: syz.1.10977 (pid 16612) Use of int in max_burst socket option deprecated. [ 2555.720227][T16612] Use struct sctp_assoc_value instead [ 2555.872963][ T1551] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2556.042981][ T1551] usb 3-1: device descriptor read/64, error -71 [ 2556.128080][T16620] binder: 16617:16620 ioctl c0306201 800003c0 returned -14 [ 2556.173781][ T1551] usb usb3-port1: attempt power cycle [ 2556.562983][ T1551] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2556.601376][ T1551] usb 3-1: device descriptor read/8, error -71 [ 2556.877022][ T1551] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2556.924953][ T1551] usb 3-1: device descriptor read/8, error -71 [ 2557.063691][ T1551] usb usb3-port1: unable to enumerate USB device [ 2557.522440][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 2557.522458][ T30] audit: type=1326 audit(1767828918.042:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.10983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2557.607197][ T30] audit: type=1326 audit(1767828918.082:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.10983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2557.662005][ T30] audit: type=1326 audit(1767828918.112:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.10983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2557.690233][ T30] audit: type=1326 audit(1767828918.112:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.10983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2557.714234][ T30] audit: type=1326 audit(1767828918.112:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.10983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2557.773294][ T30] audit: type=1326 audit(1767828918.112:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.10983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2557.806486][ T30] audit: type=1326 audit(1767828918.162:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.10983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2557.829439][ T30] audit: type=1326 audit(1767828918.162:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.10983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2557.855640][ T30] audit: type=1326 audit(1767828918.162:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.10983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2557.888628][ T30] audit: type=1326 audit(1767828918.162:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.10983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2558.403784][T16650] netlink: 'syz.2.10986': attribute type 13 has an invalid length. [ 2558.520159][T16655] sctp: [Deprecated]: syz.6.10990 (pid 16655) Use of int in max_burst socket option deprecated. [ 2558.520159][T16655] Use struct sctp_assoc_value instead [ 2558.597462][T22145] usb 5-1: USB disconnect, device number 13 [ 2558.952947][T30863] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 2559.265508][T30863] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2559.304326][T30863] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2559.340628][T30863] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 2559.399848][T30863] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2559.448772][T30863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2559.484328][T16665] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2559.535229][T16665] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2559.559233][T30863] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2561.392980][T22145] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 2561.590039][T22145] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2561.642143][T16657] delete_channel: no stack [ 2561.654901][T22145] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2561.724269][T22145] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 2561.763770][T22145] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2561.807859][T22145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.859718][T16711] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2561.889670][T16711] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2561.960439][T22145] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2562.785713][T22145] usb 2-1: USB disconnect, device number 52 [ 2563.328121][T16726] netlink: 88 bytes leftover after parsing attributes in process `syz.6.11006'. [ 2563.341992][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11006'. [ 2563.364502][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 2563.364518][ T30] audit: type=1326 audit(1767828923.892:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.11012" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2563.424891][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11006'. [ 2563.437752][ T30] audit: type=1326 audit(1767828923.892:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.11012" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2563.464838][ T30] audit: type=1326 audit(1767828923.952:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.11012" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2563.496936][ T30] audit: type=1326 audit(1767828923.952:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.11012" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2563.528673][ T30] audit: type=1326 audit(1767828923.962:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.11012" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2563.552431][ T30] audit: type=1326 audit(1767828923.962:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.11012" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2563.578090][ T30] audit: type=1326 audit(1767828923.962:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.11012" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2563.618933][ T30] audit: type=1326 audit(1767828923.962:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.11012" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2563.647636][ T30] audit: type=1326 audit(1767828923.962:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.11012" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2563.671994][ T30] audit: type=1326 audit(1767828923.962:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.11012" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2563.731242][T16745] netlink: 'syz.2.11013': attribute type 13 has an invalid length. [ 2563.993880][T16754] program syz.0.11016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2564.038946][T16754] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2564.054257][T16754] syzkaller1: linktype set to 823 [ 2564.076837][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11016'. [ 2564.134401][ T1551] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2564.205579][T16759] netlink: 'syz.1.11017': attribute type 13 has an invalid length. [ 2564.303669][ T1551] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2564.325099][ T1551] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2564.344504][ T1551] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2564.374932][ T1551] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2564.385995][ T1551] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2564.401920][ T1551] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2564.428168][ T1551] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2564.445174][ T1551] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2564.465978][ T1551] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2564.498004][ T1551] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2564.521101][ T1551] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2564.542661][ T1551] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2564.568699][ T1551] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2564.587690][ T1551] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2564.606976][ T1551] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2564.630720][ T1551] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2564.651906][ T1551] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2564.670381][ T1551] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2564.700159][ T1551] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2564.724422][ T1551] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2564.750709][ T1551] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2564.809816][ T1551] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2564.817882][T22145] usb 5-1: USB disconnect, device number 14 [ 2564.864553][ T1551] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2564.913627][ T1551] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2564.938308][ T1551] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2564.947579][ T1551] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2564.957988][ T1551] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2564.966639][ T1551] usb 3-1: Product: syz [ 2564.970935][ T1551] usb 3-1: Manufacturer: syz [ 2564.977866][ T1551] usb 3-1: SerialNumber: syz [ 2565.020184][ T1551] usb 3-1: config 0 descriptor?? [ 2565.058612][ T1551] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 2565.267788][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11021'. [ 2565.302957][T22145] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2565.330282][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 2565.330681][T30059] usb 3-1: USB disconnect, device number 112 [ 2565.370261][T30059] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 2565.478435][T22145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2565.514825][T22145] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 2565.550730][T22145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.572594][T22145] usb 5-1: config 0 descriptor?? [ 2566.113747][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11025'. [ 2566.156747][T16791] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11025'. [ 2566.247453][T16795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11026'. [ 2566.349557][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11020'. [ 2566.391866][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11020'. [ 2566.443969][T22145] playstation 0003:054C:0BA0.00BF: unknown main item tag 0x0 [ 2566.472657][T22145] playstation 0003:054C:0BA0.00BF: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 2567.113009][T30059] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2567.342955][T30059] usb 3-1: device descriptor read/64, error -71 [ 2567.603256][T30059] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2567.762968][T30059] usb 3-1: device descriptor read/64, error -71 [ 2567.886400][T30059] usb usb3-port1: attempt power cycle [ 2567.954742][T16821] program syz.0.11033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2567.989279][T16821] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2568.015511][T16821] syzkaller1: linktype set to 823 [ 2568.262938][T11291] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 2568.282548][T30059] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2568.341701][T30059] usb 3-1: device descriptor read/8, error -71 [ 2568.341749][T22145] playstation 0003:054C:0BA0.00BF: Failed to retrieve feature with reportID 18: -71 [ 2568.398546][T22145] playstation 0003:054C:0BA0.00BF: Failed to retrieve DualShock4 pairing info: -71 [ 2568.422974][T22145] playstation 0003:054C:0BA0.00BF: Failed to get MAC address from DualShock4 [ 2568.449092][T22145] playstation 0003:054C:0BA0.00BF: Failed to create dualshock4. [ 2568.482290][T22145] playstation 0003:054C:0BA0.00BF: probe with driver playstation failed with error -71 [ 2568.523317][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 2568.523333][ T30] audit: type=1326 audit(1767828929.052:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.2.11028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2568.524387][T22145] usb 5-1: USB disconnect, device number 15 [ 2568.609160][ T30] audit: type=1326 audit(1767828929.082:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.2.11028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2568.665446][ T30] audit: type=1326 audit(1767828929.172:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.2.11028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2568.703165][T30059] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2568.746219][T16829] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2568.755891][ T30] audit: type=1326 audit(1767828929.282:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.2.11028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2568.778868][T30059] usb 3-1: device descriptor read/8, error -71 [ 2568.866835][ T30] audit: type=1326 audit(1767828929.302:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.2.11028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2568.914002][T30059] usb usb3-port1: unable to enumerate USB device [ 2568.941816][ T30] audit: type=1326 audit(1767828929.442:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.2.11028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2568.978819][T11291] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2568.990612][T11291] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2569.007848][T11291] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 2569.021148][T11291] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2569.032007][T11291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.110857][T16818] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2569.133521][T16818] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2569.195215][T11291] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2569.780937][ T30] audit: type=1326 audit(1767828930.302:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16845 comm="syz.0.11051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2569.818384][ T30] audit: type=1326 audit(1767828930.302:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16845 comm="syz.0.11051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2569.847705][ T30] audit: type=1326 audit(1767828930.302:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16845 comm="syz.0.11051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2569.871453][ T30] audit: type=1326 audit(1767828930.302:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16845 comm="syz.0.11051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2569.898945][T16853] __nla_validate_parse: 1 callbacks suppressed [ 2569.898956][T16853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11041'. [ 2569.918206][T16853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11041'. [ 2569.958014][T16853] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11041'. [ 2570.135486][T16858] FAULT_INJECTION: forcing a failure. [ 2570.135486][T16858] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.181429][T16858] CPU: 0 UID: 0 PID: 16858 Comm: syz.6.11044 Tainted: G L syzkaller #0 PREEMPT(full) [ 2570.181448][T16858] Tainted: [L]=SOFTLOCKUP [ 2570.181453][T16858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2570.181460][T16858] Call Trace: [ 2570.181465][T16858] [ 2570.181471][T16858] dump_stack_lvl+0xe8/0x150 [ 2570.181490][T16858] should_fail_ex+0x414/0x560 [ 2570.181510][T16858] should_failslab+0xa8/0x100 [ 2570.181526][T16858] __kmalloc_noprof+0xdf/0x800 [ 2570.181536][T16858] ? kfree+0x4d/0x660 [ 2570.181550][T16858] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2570.181568][T16858] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2570.181583][T16858] ? tomoyo_domain+0xd8/0x130 [ 2570.181599][T16858] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2570.181611][T16858] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2570.181624][T16858] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2570.181635][T16858] ? __lock_acquire+0x6b6/0x2cf0 [ 2570.181647][T16858] ? get_pid_task+0x20/0x1f0 [ 2570.181665][T16858] ? get_pid_task+0x20/0x1f0 [ 2570.181687][T16858] ? __fget_files+0x2a/0x420 [ 2570.181702][T16858] ? __fget_files+0x3a0/0x420 [ 2570.181714][T16858] ? __fget_files+0x2a/0x420 [ 2570.181728][T16858] security_file_ioctl_compat+0xcb/0x2d0 [ 2570.181741][T16858] __ia32_compat_sys_ioctl+0x128/0x840 [ 2570.181754][T16858] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2570.181764][T16858] ? __fget_files+0x3a0/0x420 [ 2570.181780][T16858] ? fput+0xa0/0xd0 [ 2570.181793][T16858] ? ksys_write+0x22a/0x250 [ 2570.181804][T16858] ? __pfx_ksys_write+0x10/0x10 [ 2570.181819][T16858] __do_fast_syscall_32+0x1dc/0x570 [ 2570.181831][T16858] ? lockdep_hardirqs_on+0x7b/0x110 [ 2570.181841][T16858] ? do_fast_syscall_32+0x34/0x80 [ 2570.181852][T16858] ? irqentry_exit+0x10f/0x670 [ 2570.181864][T16858] do_fast_syscall_32+0x34/0x80 [ 2570.181876][T16858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2570.181888][T16858] RIP: 0023:0xf70bd539 [ 2570.181899][T16858] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2570.181908][T16858] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2570.181920][T16858] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080086303 [ 2570.181928][T16858] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2570.181935][T16858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2570.181941][T16858] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2570.181947][T16858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2570.181962][T16858] [ 2570.181967][T16858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2570.957450][T16874] netlink: 'syz.4.11050': attribute type 13 has an invalid length. [ 2571.063157][T11291] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2571.214903][T11291] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 2571.234763][T11291] usb 3-1: config 0 has no interface number 0 [ 2571.253734][T11291] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 2571.283053][T11291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2571.304988][T11291] usb 3-1: Product: syz [ 2571.309187][T11291] usb 3-1: Manufacturer: syz [ 2571.331622][T11291] usb 3-1: SerialNumber: syz [ 2571.350692][T11291] usb 3-1: config 0 descriptor?? [ 2571.367122][T11291] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 2571.395404][T11291] ems_usb 3-1:0.204: probe with driver ems_usb failed with error -22 [ 2571.614955][T16880] syz_tun: entered promiscuous mode [ 2571.628985][T16880] syz_tun: refused to change device tx_queue_len [ 2571.637578][T16880] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2571.659519][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11048'. [ 2571.699310][T22145] usb 3-1: USB disconnect, device number 117 [ 2571.825140][ T849] usb 2-1: USB disconnect, device number 53 [ 2571.985828][T16901] FAULT_INJECTION: forcing a failure. [ 2571.985828][T16901] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.018497][T16901] CPU: 1 UID: 0 PID: 16901 Comm: syz.6.11059 Tainted: G L syzkaller #0 PREEMPT(full) [ 2572.018528][T16901] Tainted: [L]=SOFTLOCKUP [ 2572.018536][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2572.018548][T16901] Call Trace: [ 2572.018555][T16901] [ 2572.018563][T16901] dump_stack_lvl+0xe8/0x150 [ 2572.018592][T16901] should_fail_ex+0x414/0x560 [ 2572.018628][T16901] should_failslab+0xa8/0x100 [ 2572.018653][T16901] __kmalloc_noprof+0xdf/0x800 [ 2572.018671][T16901] ? tomoyo_encode+0x28b/0x550 [ 2572.018700][T16901] tomoyo_encode+0x28b/0x550 [ 2572.018729][T16901] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2572.018763][T16901] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2572.018785][T16901] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2572.018810][T16901] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2572.018832][T16901] ? __lock_acquire+0x6b6/0x2cf0 [ 2572.018854][T16901] ? get_pid_task+0x20/0x1f0 [ 2572.018889][T16901] ? get_pid_task+0x20/0x1f0 [ 2572.018930][T16901] ? __fget_files+0x2a/0x420 [ 2572.018959][T16901] ? __fget_files+0x3a0/0x420 [ 2572.018981][T16901] ? __fget_files+0x2a/0x420 [ 2572.019008][T16901] security_file_ioctl_compat+0xcb/0x2d0 [ 2572.019033][T16901] __ia32_compat_sys_ioctl+0x128/0x840 [ 2572.019055][T16901] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2572.019075][T16901] ? __fget_files+0x3a0/0x420 [ 2572.019105][T16901] ? fput+0xa0/0xd0 [ 2572.019131][T16901] ? ksys_write+0x22a/0x250 [ 2572.019152][T16901] ? __pfx_ksys_write+0x10/0x10 [ 2572.019171][T16901] ? rcu_is_watching+0x15/0xb0 [ 2572.019203][T16901] __do_fast_syscall_32+0x1dc/0x570 [ 2572.019226][T16901] ? lockdep_hardirqs_on+0x7b/0x110 [ 2572.019244][T16901] ? do_fast_syscall_32+0x34/0x80 [ 2572.019264][T16901] ? irqentry_exit+0x10f/0x670 [ 2572.019286][T16901] do_fast_syscall_32+0x34/0x80 [ 2572.019307][T16901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2572.019329][T16901] RIP: 0023:0xf70bd539 [ 2572.019353][T16901] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2572.019370][T16901] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2572.019391][T16901] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080086303 [ 2572.019405][T16901] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2572.019416][T16901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2572.019428][T16901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2572.019439][T16901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2572.019466][T16901] [ 2572.019486][T16901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2572.522674][T16918] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11062'. [ 2572.683201][T26787] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2572.766431][T16919] libceph: resolve '0..' (ret=-3): failed [ 2572.947929][T26787] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2572.987180][T26787] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2573.234346][T26787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2573.341013][T26787] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2573.536811][T16914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2573.561733][T16914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2573.660244][T16937] fuse: Bad value for 'rootmode' [ 2573.906324][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11069'. [ 2573.980507][T16946] FAULT_INJECTION: forcing a failure. [ 2573.980507][T16946] name failslab, interval 1, probability 0, space 0, times 0 [ 2574.000194][T16946] CPU: 0 UID: 0 PID: 16946 Comm: syz.6.11073 Tainted: G L syzkaller #0 PREEMPT(full) [ 2574.000212][T16946] Tainted: [L]=SOFTLOCKUP [ 2574.000217][T16946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2574.000224][T16946] Call Trace: [ 2574.000229][T16946] [ 2574.000235][T16946] dump_stack_lvl+0xe8/0x150 [ 2574.000253][T16946] should_fail_ex+0x414/0x560 [ 2574.000274][T16946] should_failslab+0xa8/0x100 [ 2574.000287][T16946] __kmalloc_cache_noprof+0x84/0x700 [ 2574.000299][T16946] ? snd_mixer_oss_get_volume1_sw+0xbc/0x4a0 [ 2574.000317][T16946] snd_mixer_oss_get_volume1_sw+0xbc/0x4a0 [ 2574.000335][T16946] snd_mixer_oss_get_volume1+0x230/0x300 [ 2574.000350][T16946] ? __pfx_snd_mixer_oss_get_volume1+0x10/0x10 [ 2574.000364][T16946] snd_mixer_oss_ioctl1+0x5e3/0x19f0 [ 2574.000380][T16946] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 2574.000402][T16946] ? __fget_files+0x2a/0x420 [ 2574.000418][T16946] ? __fget_files+0x3a0/0x420 [ 2574.000434][T16946] snd_mixer_oss_ioctl_compat+0x46/0x60 [ 2574.000448][T16946] __ia32_compat_sys_ioctl+0x543/0x840 [ 2574.000459][T16946] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2574.000470][T16946] ? __fget_files+0x3a0/0x420 [ 2574.000486][T16946] ? fput+0xa0/0xd0 [ 2574.000499][T16946] ? ksys_write+0x22a/0x250 [ 2574.000510][T16946] ? __pfx_ksys_write+0x10/0x10 [ 2574.000526][T16946] __do_fast_syscall_32+0x1dc/0x570 [ 2574.000537][T16946] ? lockdep_hardirqs_on+0x7b/0x110 [ 2574.000547][T16946] ? do_fast_syscall_32+0x34/0x80 [ 2574.000558][T16946] ? irqentry_exit+0x10f/0x670 [ 2574.000570][T16946] do_fast_syscall_32+0x34/0x80 [ 2574.000582][T16946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2574.000599][T16946] RIP: 0023:0xf70bd539 [ 2574.000615][T16946] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2574.000633][T16946] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2574.000653][T16946] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080086303 [ 2574.000667][T16946] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2574.000679][T16946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2574.000690][T16946] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2574.000697][T16946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2574.000713][T16946] [ 2574.469581][T26787] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 2574.514560][T26787] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 2574.540218][T26787] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 2574.559560][T26787] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 2574.574225][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11077'. [ 2574.596176][T26787] usb 2-1: USB disconnect, device number 54 [ 2574.632952][ T849] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 2574.806474][ T849] usb 3-1: Invalid ep0 maxpacket: 64 [ 2574.943087][ T849] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 2575.122949][ T849] usb 3-1: Invalid ep0 maxpacket: 64 [ 2575.128724][ T849] usb usb3-port1: attempt power cycle [ 2575.473128][ T849] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 2575.493443][ T849] usb 3-1: Invalid ep0 maxpacket: 64 [ 2575.603085][ T9104] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 2575.633188][ T849] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 2575.664678][ T849] usb 3-1: Invalid ep0 maxpacket: 64 [ 2575.670229][ T849] usb usb3-port1: unable to enumerate USB device [ 2575.754348][ T9104] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2575.765628][ T9104] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2575.779656][ T9104] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2575.789379][ T9104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2575.797479][ T9104] usb 2-1: Product: syz [ 2575.801716][ T9104] usb 2-1: Manufacturer: syz [ 2575.806423][ T9104] usb 2-1: SerialNumber: syz [ 2575.814676][T16979] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2576.030171][T16979] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2576.283973][T16986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11084'. [ 2576.327543][T16988] FAULT_INJECTION: forcing a failure. [ 2576.327543][T16988] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.341194][T16988] CPU: 0 UID: 0 PID: 16988 Comm: syz.4.11085 Tainted: G L syzkaller #0 PREEMPT(full) [ 2576.341225][T16988] Tainted: [L]=SOFTLOCKUP [ 2576.341233][T16988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2576.341246][T16988] Call Trace: [ 2576.341255][T16988] [ 2576.341265][T16988] dump_stack_lvl+0xe8/0x150 [ 2576.341287][T16988] should_fail_ex+0x414/0x560 [ 2576.341307][T16988] should_failslab+0xa8/0x100 [ 2576.341327][T16988] __kmalloc_cache_noprof+0x84/0x700 [ 2576.341347][T16988] ? snd_mixer_oss_get_volume1_sw+0xf6/0x4a0 [ 2576.341381][T16988] snd_mixer_oss_get_volume1_sw+0xf6/0x4a0 [ 2576.341415][T16988] snd_mixer_oss_get_volume1+0x230/0x300 [ 2576.341432][T16988] ? __pfx_snd_mixer_oss_get_volume1+0x10/0x10 [ 2576.341446][T16988] snd_mixer_oss_ioctl1+0x5e3/0x19f0 [ 2576.341462][T16988] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 2576.341491][T16988] ? __fget_files+0x2a/0x420 [ 2576.341521][T16988] ? __fget_files+0x3a0/0x420 [ 2576.341552][T16988] snd_mixer_oss_ioctl_compat+0x46/0x60 [ 2576.341574][T16988] __ia32_compat_sys_ioctl+0x543/0x840 [ 2576.341586][T16988] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2576.341596][T16988] ? __fget_files+0x3a0/0x420 [ 2576.341612][T16988] ? fput+0xa0/0xd0 [ 2576.341626][T16988] ? ksys_write+0x22a/0x250 [ 2576.341645][T16988] ? __pfx_ksys_write+0x10/0x10 [ 2576.341676][T16988] __do_fast_syscall_32+0x1dc/0x570 [ 2576.341699][T16988] ? lockdep_hardirqs_on+0x7b/0x110 [ 2576.341716][T16988] ? do_fast_syscall_32+0x34/0x80 [ 2576.341728][T16988] ? irqentry_exit+0x10f/0x670 [ 2576.341740][T16988] do_fast_syscall_32+0x34/0x80 [ 2576.341752][T16988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2576.341764][T16988] RIP: 0023:0xf7fe7539 [ 2576.341776][T16988] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2576.341793][T16988] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2576.341813][T16988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080086303 [ 2576.341828][T16988] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2576.341841][T16988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2576.341852][T16988] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2576.341864][T16988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2576.341879][T16988] [ 2576.611454][T16993] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11084'. [ 2576.642375][T16990] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11084'. [ 2576.794601][T16997] program syz.0.11088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2576.880712][T16997] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2576.893041][T16997] syzkaller1: linktype set to 823 [ 2576.899326][T16997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11088'. [ 2577.235549][T17004] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2577.568166][ T9104] cdc_ncm 2-1:1.0: failed to get mac address [ 2577.577393][ T9104] cdc_ncm 2-1:1.0: bind() failure [ 2577.612689][ T9104] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2577.640717][ T9104] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2577.666348][ T9104] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 2577.724270][ T9104] usb 2-1: USB disconnect, device number 55 [ 2578.114621][ T9104] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 2578.267981][ T9104] usb 3-1: device descriptor read/64, error -71 [ 2578.523013][ T9104] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 2578.683896][ T9104] usb 3-1: device descriptor read/64, error -71 [ 2578.828403][ T9104] usb usb3-port1: attempt power cycle [ 2579.025093][T11291] hid-generic 0000:0000:0000.00C0: unknown main item tag 0x0 [ 2579.078489][T11291] hid-generic 0000:0000:0000.00C0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2579.193092][ T9104] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 2579.244167][ T9104] usb 3-1: device descriptor read/8, error -71 [ 2579.512963][ T9104] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 2579.535245][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 2579.535257][ T30] audit: type=1326 audit(1767828940.062:7188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.1.11102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2579.585050][ T30] audit: type=1326 audit(1767828940.092:7189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.1.11102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2579.618931][ T9104] usb 3-1: device descriptor read/8, error -71 [ 2579.681356][ T30] audit: type=1326 audit(1767828940.182:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.1.11102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2579.718151][ T30] audit: type=1326 audit(1767828940.182:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.1.11102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2579.783756][ T30] audit: type=1326 audit(1767828940.192:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.1.11102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2579.783779][ T9104] usb usb3-port1: unable to enumerate USB device [ 2579.912971][T30863] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2580.054025][T30863] usb 2-1: device descriptor read/64, error -71 [ 2580.088970][T17064] program syz.6.11104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2580.219519][T17064] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2580.226808][T17064] syzkaller1: linktype set to 823 [ 2580.235121][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11104'. [ 2580.348894][T30863] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2580.512939][T30863] usb 2-1: device descriptor read/64, error -71 [ 2580.633714][T30863] usb usb2-port1: attempt power cycle [ 2580.955010][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11108'. [ 2581.014958][T30863] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2581.023589][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11108'. [ 2581.042148][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11108'. [ 2581.054273][T30863] usb 2-1: device descriptor read/8, error -71 [ 2581.081798][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11108'. [ 2581.220313][T17084] netlink: 'syz.6.11111': attribute type 5 has an invalid length. [ 2581.324159][T30863] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2581.367411][T30863] usb 2-1: device descriptor read/8, error -71 [ 2581.490585][T30863] usb usb2-port1: unable to enumerate USB device [ 2581.658157][T17098] netlink: 128 bytes leftover after parsing attributes in process `syz.6.11114'. [ 2583.002948][T30863] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 2583.026415][T17122] program syz.2.11122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2583.164719][T17122] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2583.177560][T17122] syzkaller1: linktype set to 823 [ 2583.216992][T17124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11122'. [ 2583.252639][T30863] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2583.305048][T30863] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2583.327186][T30863] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 2583.343114][ T5980] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2583.362417][T30863] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2583.382076][T30863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2583.438971][T17115] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2583.456975][T17115] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2583.491337][T30863] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2585.765273][ T9104] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2585.964506][ T9104] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 2586.006015][ T9104] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2586.032157][ T9104] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 2586.059443][ T9104] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2586.085272][ T9104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.100421][ T9104] usb 5-1: Product: syz [ 2586.107008][ T9104] usb 5-1: Manufacturer: syz [ 2586.111724][ T9104] usb 5-1: SerialNumber: syz [ 2586.123984][ T9104] usb 5-1: config 0 descriptor?? [ 2586.701810][T30059] usb 2-1: USB disconnect, device number 60 [ 2586.832435][T17175] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11133'. [ 2586.845170][T17182] program syz.1.11135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2586.846071][T17175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11133'. [ 2586.865907][T17182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11135'. [ 2587.028335][T17187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11136'. [ 2587.038717][T17187] netlink: 'syz.4.11136': attribute type 18 has an invalid length. [ 2587.077017][T17187] vxlan2: entered promiscuous mode [ 2587.550763][ T30] audit: type=1326 audit(1767828948.072:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17198 comm="syz.2.11139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2587.668944][ T30] audit: type=1326 audit(1767828948.072:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17198 comm="syz.2.11139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2587.760945][ T30] audit: type=1326 audit(1767828948.072:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17198 comm="syz.2.11139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2587.784912][T17202] netlink: 'syz.4.11140': attribute type 5 has an invalid length. [ 2587.820969][ T30] audit: type=1326 audit(1767828948.072:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17198 comm="syz.2.11139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2587.833014][T11291] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2587.849159][ T30] audit: type=1326 audit(1767828948.072:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17198 comm="syz.2.11139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2587.895937][ T30] audit: type=1326 audit(1767828948.102:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17198 comm="syz.2.11139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2587.954739][ T30] audit: type=1326 audit(1767828948.102:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17198 comm="syz.2.11139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2587.979069][ T30] audit: type=1326 audit(1767828948.102:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17198 comm="syz.2.11139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2588.014759][T11291] usb 3-1: device descriptor read/64, error -71 [ 2588.019547][ T30] audit: type=1326 audit(1767828948.122:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17198 comm="syz.2.11139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2588.047051][ T30] audit: type=1326 audit(1767828948.122:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17198 comm="syz.2.11139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2588.264776][T11291] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2588.403045][T11291] usb 3-1: device descriptor read/64, error -71 [ 2588.514868][T11291] usb usb3-port1: attempt power cycle [ 2588.544830][T17208] syzkaller1: entered promiscuous mode [ 2588.550472][T17208] syzkaller1: entered allmulticast mode [ 2588.863498][T11291] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2588.894846][T11291] usb 3-1: device descriptor read/8, error -71 [ 2589.055251][T17223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11147'. [ 2589.143254][T11291] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2589.189595][T11291] usb 3-1: device descriptor read/8, error -71 [ 2589.330528][T11291] usb usb3-port1: unable to enumerate USB device [ 2590.377501][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.384775][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.658222][T17247] vlan3: left allmulticast mode [ 2590.665046][T17247] mac80211_hwsim hwsim83 wlan0: left allmulticast mode [ 2590.749284][T17247] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2590.777042][T17247] bond0: (slave team0): Releasing backup interface [ 2590.797475][T17247] team0: left promiscuous mode [ 2590.849209][T17247] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2591.617540][T17264] netlink: 192 bytes leftover after parsing attributes in process `syz.2.11157'. [ 2592.807587][ T849] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2592.973986][ T849] usb 3-1: Using ep0 maxpacket: 16 [ 2593.004348][ T849] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 2593.027947][ T849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2593.044457][ T849] usb 3-1: Product: syz [ 2593.049157][ T849] usb 3-1: Manufacturer: syz [ 2593.054230][ T849] usb 3-1: SerialNumber: syz [ 2593.067412][ T849] usb 3-1: config 0 descriptor?? [ 2593.298008][ T849] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 2593.305665][ T849] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2593.357611][T17298] netlink: 'syz.0.11166': attribute type 13 has an invalid length. [ 2593.404777][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2593.623520][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2594.741374][T17310] program syz.1.11169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2594.755128][T17310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11169'. [ 2595.447229][T30863] usb 3-1: USB disconnect, device number 4 [ 2595.514139][T17320] program syz.1.11182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2595.543630][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11182'. [ 2595.892759][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 2595.892776][ T30] audit: type=1326 audit(1767828956.412:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.11173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2595.945985][ T30] audit: type=1326 audit(1767828956.472:7243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.11173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2595.975750][ T30] audit: type=1326 audit(1767828956.492:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.11173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2595.999662][ T30] audit: type=1326 audit(1767828956.492:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.11173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2596.022683][ T30] audit: type=1326 audit(1767828956.492:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.11173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2596.145361][ T30] audit: type=1326 audit(1767828956.492:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.11173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2596.246970][ T30] audit: type=1326 audit(1767828956.492:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.11173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2596.362343][ T30] audit: type=1326 audit(1767828956.522:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.11173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2596.415728][ T30] audit: type=1326 audit(1767828956.522:7250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.11173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2596.434179][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11175'. [ 2596.456024][ T30] audit: type=1326 audit(1767828956.522:7251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.11173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2596.477926][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11175'. [ 2596.518476][T17336] netlink: 'syz.4.11175': attribute type 14 has an invalid length. [ 2596.548016][T17336] netlink: 'syz.4.11175': attribute type 13 has an invalid length. [ 2596.673677][T17348] sctp: [Deprecated]: syz.2.11179 (pid 17348) Use of int in max_burst socket option deprecated. [ 2596.673677][T17348] Use struct sctp_assoc_value instead [ 2597.043788][T27761] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 2597.208208][T27761] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 2597.228673][T27761] usb 3-1: config 5 has no interface number 0 [ 2597.244970][T27761] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 2597.290134][T27761] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 2597.306814][T27761] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2597.318857][T27761] usb 3-1: config 5 interface 123 has no altsetting 0 [ 2597.343416][T27761] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 2597.361180][T27761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2597.385134][T27761] usb 3-1: Product: syz [ 2597.395058][T27761] usb 3-1: Manufacturer: syz [ 2597.401929][T27761] usb 3-1: SerialNumber: syz [ 2597.578651][T17357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11181'. [ 2597.610674][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11181'. [ 2597.640044][T17357] vlan1: left promiscuous mode [ 2597.647807][T17357] bridge0: port 3(vlan1) entered disabled state [ 2597.682287][T27761] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 2597.705428][T17357] bridge_slave_1: left allmulticast mode [ 2597.711197][T17357] bridge_slave_1: left promiscuous mode [ 2597.744077][T27761] usb 3-1: USB disconnect, device number 5 [ 2597.754141][T17357] bridge0: port 2(bridge_slave_1) entered disabled state [ 2597.811084][T17357] bridge_slave_0: left promiscuous mode [ 2597.825194][T17357] bridge0: port 1(bridge_slave_0) entered disabled state [ 2598.355081][T17365] syzkaller0: entered promiscuous mode [ 2598.362106][T17365] syzkaller0: entered allmulticast mode [ 2598.918176][T17375] program syz.0.11188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2598.937488][T17375] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2598.943889][T17375] syzkaller1: linktype set to 823 [ 2598.950003][T17375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11188'. [ 2599.945320][T17396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11195'. [ 2599.987164][T17396] syzkaller0: entered promiscuous mode [ 2599.992890][T17396] syzkaller0: entered allmulticast mode [ 2600.798414][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11203'. [ 2600.855738][T22145] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2600.894715][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 2600.894730][ T30] audit: type=1326 audit(1767828961.422:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.11199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2600.957446][ T30] audit: type=1326 audit(1767828961.452:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.11199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2600.999042][T17429] syz_tun: entered allmulticast mode [ 2601.072979][T22145] usb 2-1: Using ep0 maxpacket: 16 [ 2601.121500][T22145] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2601.149740][ T30] audit: type=1326 audit(1767828961.512:7328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.11199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2601.176002][T22145] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2601.264023][T22145] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2601.276344][ T30] audit: type=1326 audit(1767828961.612:7329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.11199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2601.302335][T17434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2601.321693][T22145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2601.340346][T22145] usb 2-1: Product: syz [ 2601.354808][T22145] usb 2-1: Manufacturer: syz [ 2601.472159][T22145] usb 2-1: SerialNumber: syz [ 2601.483438][ T30] audit: type=1326 audit(1767828961.612:7330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.11199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2601.600124][ T30] audit: type=1326 audit(1767828961.642:7331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.11199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2601.699793][ T30] audit: type=1326 audit(1767828961.642:7332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.11199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2601.758985][T22145] usb 2-1: 0:2 : does not exist [ 2601.810629][T22145] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2601.832995][ T30] audit: type=1326 audit(1767828961.642:7333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.11199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2601.875984][T17439] netlink: 'syz.4.11207': attribute type 1 has an invalid length. [ 2601.929139][T22145] usb 2-1: USB disconnect, device number 61 [ 2601.983670][ T30] audit: type=1326 audit(1767828961.642:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.11199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2602.109746][T16250] udevd[16250]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2602.178122][ T30] audit: type=1326 audit(1767828961.722:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.1.11199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2602.347532][T17445] program syz.0.11209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2602.370467][T17441] bond12: (slave bridge0): making interface the new active one [ 2602.397075][T17441] bond12: (slave bridge0): Enslaving as an active interface with an up link [ 2602.456769][T17445] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2602.504814][T17445] syzkaller1: linktype set to 823 [ 2602.508015][T17447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11209'. [ 2602.970107][T22145] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2603.136556][T22145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2603.176733][T22145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2603.204523][T22145] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2603.229486][T22145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.294111][T22145] usb 2-1: config 0 descriptor?? [ 2603.526687][T17455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2603.580066][T17455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2604.073125][T22145] usbhid 2-1:0.0: can't add hid device: -71 [ 2604.109346][T22145] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2604.158893][T22145] usb 2-1: USB disconnect, device number 62 [ 2604.958298][T17493] sctp: [Deprecated]: syz.1.11221 (pid 17493) Use of int in max_burst socket option deprecated. [ 2604.958298][T17493] Use struct sctp_assoc_value instead [ 2605.050157][T17496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11222'. [ 2605.090184][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11222'. [ 2605.864115][T17508] FAULT_INJECTION: forcing a failure. [ 2605.864115][T17508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2605.878831][T17508] CPU: 1 UID: 0 PID: 17508 Comm: syz.0.11228 Tainted: G L syzkaller #0 PREEMPT(full) [ 2605.878861][T17508] Tainted: [L]=SOFTLOCKUP [ 2605.878868][T17508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2605.878878][T17508] Call Trace: [ 2605.878886][T17508] [ 2605.878895][T17508] dump_stack_lvl+0xe8/0x150 [ 2605.878927][T17508] should_fail_ex+0x414/0x560 [ 2605.878959][T17508] _copy_from_user+0x2d/0xb0 [ 2605.878982][T17508] packet_setsockopt+0x999/0x12c0 [ 2605.879012][T17508] ? __pfx_packet_setsockopt+0x10/0x10 [ 2605.879043][T17508] ? aa_sk_perm+0x15f/0x920 [ 2605.879067][T17508] ? aa_sk_perm+0x7ee/0x920 [ 2605.879090][T17508] ? do_sys_openat2+0x15a/0x200 [ 2605.879138][T17508] ? aa_sock_opt_perm+0xff/0x1a0 [ 2605.879166][T17508] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2605.879184][T17508] ? __pfx_packet_setsockopt+0x10/0x10 [ 2605.879210][T17508] do_sock_setsockopt+0x17c/0x1b0 [ 2605.879237][T17508] __ia32_sys_setsockopt+0x13f/0x1b0 [ 2605.879264][T17508] __do_fast_syscall_32+0x1dc/0x570 [ 2605.879284][T17508] ? lockdep_hardirqs_on+0x7b/0x110 [ 2605.879301][T17508] ? do_fast_syscall_32+0x34/0x80 [ 2605.879320][T17508] ? irqentry_exit+0x10f/0x670 [ 2605.879342][T17508] do_fast_syscall_32+0x34/0x80 [ 2605.879362][T17508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2605.879385][T17508] RIP: 0023:0xf7f51539 [ 2605.879402][T17508] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2605.879419][T17508] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 2605.879440][T17508] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 2605.879455][T17508] RDX: 000000000000000f RSI: 0000000080000600 RDI: 0000000000000056 [ 2605.879467][T17508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2605.879478][T17508] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2605.879490][T17508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2605.879518][T17508] [ 2607.013080][ T9104] iguanair 5-1:0.0: failed to get version [ 2607.019278][ T9104] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 2607.036442][ T9104] usb 5-1: USB disconnect, device number 16 [ 2608.482960][ T849] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2608.604541][T17563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2608.614591][T17563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2608.663296][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 2608.681238][ T849] usb 5-1: config 1 interface 0 altsetting 95 bulk endpoint 0x82 has invalid maxpacket 64 [ 2608.706340][ T849] usb 5-1: config 1 interface 0 altsetting 95 bulk endpoint 0x3 has invalid maxpacket 16 [ 2608.717895][ T849] usb 5-1: config 1 interface 0 altsetting 95 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2608.732535][ T849] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2608.743501][ T849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2608.753784][ T849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2608.761997][ T849] usb 5-1: Product: syz [ 2608.767063][ T849] usb 5-1: Manufacturer: syz [ 2608.771894][ T849] usb 5-1: SerialNumber: syz [ 2608.784286][T17569] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2608.791810][T17569] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2609.007619][ T849] usb 5-1: bad CDC descriptors [ 2609.017560][ T849] usb 5-1: USB disconnect, device number 17 [ 2609.097900][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2609.097924][ T30] audit: type=1326 audit(1767828969.622:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17594 comm="syz.2.11255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2609.131234][ T30] audit: type=1326 audit(1767828969.652:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17594 comm="syz.2.11255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2609.157536][ T30] audit: type=1326 audit(1767828969.682:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17594 comm="syz.2.11255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2609.181719][ T30] audit: type=1326 audit(1767828969.682:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17594 comm="syz.2.11255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2609.206969][ T30] audit: type=1326 audit(1767828969.682:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17594 comm="syz.2.11255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2609.231137][ T30] audit: type=1326 audit(1767828969.712:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17594 comm="syz.2.11255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2609.273241][ T30] audit: type=1326 audit(1767828969.712:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17594 comm="syz.2.11255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2609.331169][ T30] audit: type=1326 audit(1767828969.762:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17594 comm="syz.2.11255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2609.400714][ T30] audit: type=1326 audit(1767828969.782:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17594 comm="syz.2.11255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2609.429485][ T30] audit: type=1326 audit(1767828969.802:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17594 comm="syz.2.11255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2609.710509][T17602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2609.753787][T17602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2609.953716][T30863] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2610.020116][T17609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11259'. [ 2610.143175][T30863] usb 5-1: Using ep0 maxpacket: 8 [ 2610.151487][T30863] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2610.160951][T30863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2610.169235][T30863] usb 5-1: Product: syz [ 2610.174032][T30863] usb 5-1: Manufacturer: syz [ 2610.178629][T30863] usb 5-1: SerialNumber: syz [ 2610.186933][T30863] usb 5-1: config 0 descriptor?? [ 2610.196063][T30863] gspca_main: se401-2.14.0 probing 047d:5003 [ 2610.253006][T11291] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2610.363083][ T849] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2610.403231][T11291] usb 2-1: Using ep0 maxpacket: 32 [ 2610.412762][T11291] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2610.422194][T11291] usb 2-1: config index 0 descriptor too short (expected 1033, got 36) [ 2610.431003][T11291] usb 2-1: config 152 has too many interfaces: 82, using maximum allowed: 32 [ 2610.440248][T11291] usb 2-1: config 152 has an invalid descriptor of length 174, skipping remainder of the config [ 2610.454298][T11291] usb 2-1: config 152 has 0 interfaces, different from the descriptor's value: 82 [ 2610.466605][T11291] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d [ 2610.477077][T11291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2610.485393][T11291] usb 2-1: Product: syz [ 2610.489808][T11291] usb 2-1: Manufacturer: syz [ 2610.495685][T11291] usb 2-1: SerialNumber: syz [ 2610.533093][ T849] usb 3-1: Using ep0 maxpacket: 8 [ 2610.540177][ T849] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2610.565025][ T849] usb 3-1: config 6 has an invalid interface number: 70 but max is 0 [ 2610.573231][ T849] usb 3-1: config 6 has no interface number 0 [ 2610.580003][ T849] usb 3-1: config 6 interface 70 has no altsetting 0 [ 2610.590255][ T849] usb 3-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=63.7b [ 2610.600308][ T849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2610.608753][ T849] usb 3-1: Product: syz [ 2610.613584][T30863] gspca_se401: Bayer format not supported! [ 2610.619974][ T849] usb 3-1: Manufacturer: syz [ 2610.627706][ T849] usb 3-1: SerialNumber: syz [ 2610.727600][T30863] usb 2-1: USB disconnect, device number 63 [ 2610.826088][T17602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2610.837873][T17602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2610.860754][ T849] HFC-S_USB 3-1:6.70: probe with driver HFC-S_USB failed with error -5 [ 2610.885966][ T849] usb 3-1: USB disconnect, device number 6 [ 2611.166531][T11291] usb 5-1: USB disconnect, device number 18 [ 2612.693303][T11291] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2612.853935][T30863] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 2612.864567][T11291] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2612.886889][T11291] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2612.912444][T11291] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2612.924667][T11291] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2612.945272][T11291] usb 5-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 2612.960384][T11291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.977443][T11291] usb 5-1: Product: syz [ 2612.983570][T11291] usb 5-1: Manufacturer: syz [ 2612.988261][T11291] usb 5-1: SerialNumber: syz [ 2613.073519][T30863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2613.111218][T30863] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 2613.144176][T30863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2613.152993][ T849] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2613.194553][T30863] usb 3-1: config 0 descriptor?? [ 2613.217210][T17645] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2613.323946][ T849] usb 2-1: Using ep0 maxpacket: 32 [ 2613.337547][ T849] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2613.356119][ T849] usb 2-1: config 0 has no interface number 0 [ 2613.370199][ T849] usb 2-1: config 0 interface 12 has no altsetting 0 [ 2613.389066][ T849] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2613.414247][ T849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2613.432783][ T849] usb 2-1: Product: syz [ 2613.445641][ T849] usb 2-1: Manufacturer: syz [ 2613.456258][ T849] usb 2-1: SerialNumber: syz [ 2613.473593][ T849] usb 2-1: config 0 descriptor?? [ 2614.041616][T11291] cdc_ncm 5-1:1.0: bind() failure [ 2614.051407][T11291] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2614.059350][T11291] cdc_ncm 5-1:1.1: bind() failure [ 2614.456823][T17650] program syz.0.11273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2614.477920][T17650] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2614.484704][T17650] syzkaller1: linktype set to 823 [ 2614.493269][T17650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11273'. [ 2614.907286][T17648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2614.926159][T17648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2614.951518][T30863] usbhid 3-1:0.0: can't add hid device: -71 [ 2614.987166][T30863] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2615.043454][T30863] usb 3-1: USB disconnect, device number 7 [ 2615.334851][ T4535] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2615.465457][T30863] usb 5-1: USB disconnect, device number 19 [ 2615.749260][T17670] netlink: 'syz.6.11279': attribute type 5 has an invalid length. [ 2615.975885][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2616.053052][T11460] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2616.202984][T11460] usb 5-1: device descriptor read/64, error -71 [ 2616.402314][ T849] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2616.425656][ T849] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 2616.459612][ T849] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2616.473606][T17679] bridge_slave_1: invalid flags given to default FDB implementation [ 2616.473748][T11460] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2616.495971][ T849] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 2616.553169][ T849] usb 2-1: USB disconnect, device number 64 [ 2616.664474][T11460] usb 5-1: device descriptor read/64, error -71 [ 2616.774300][T11460] usb usb5-port1: attempt power cycle [ 2617.163057][T11460] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2617.196259][T11460] usb 5-1: device descriptor read/8, error -71 [ 2617.230719][T17699] binder: 17697:17699 ioctl c0306201 0 returned -14 [ 2617.434712][T11460] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2617.470642][T11460] usb 5-1: device descriptor read/8, error -71 [ 2617.587854][T11460] usb usb5-port1: unable to enumerate USB device [ 2618.009875][T17725] veth5: entered allmulticast mode [ 2618.165640][T17730] program syz.0.11295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2618.218732][T17730] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2618.239927][T17730] syzkaller1: linktype set to 823 [ 2618.250104][T17730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11295'. [ 2618.603220][T17224] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2618.813050][T17224] usb 3-1: device descriptor read/64, error -71 [ 2619.114864][T17224] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2619.293187][T17224] usb 3-1: device descriptor read/64, error -71 [ 2619.430883][T17224] usb usb3-port1: attempt power cycle [ 2619.526553][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11302'. [ 2619.793849][T17224] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2619.902311][T17224] usb 3-1: device descriptor read/8, error -71 [ 2620.204590][T17224] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2620.299076][T22145] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2620.340327][T17224] usb 3-1: device descriptor read/8, error -71 [ 2620.453723][T17224] usb usb3-port1: unable to enumerate USB device [ 2620.483246][T22145] usb 2-1: Using ep0 maxpacket: 8 [ 2620.575835][T22145] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 2620.589142][T22145] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2620.602968][T22145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2620.611271][T22145] usb 2-1: Product: syz [ 2620.622939][T22145] usb 2-1: Manufacturer: syz [ 2620.627595][T22145] usb 2-1: SerialNumber: syz [ 2620.652246][T22145] usb 2-1: config 0 descriptor?? [ 2620.665502][T22145] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2620.673669][T22145] usb 2-1: setting power ON [ 2620.678210][T22145] dvb-usb: bulk message failed: -22 (2/0) [ 2620.694314][T22145] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2620.714983][T22145] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2620.733040][T22145] usb 2-1: media controller created [ 2620.766149][T22145] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2620.812564][T22145] usb 2-1: selecting invalid altsetting 6 [ 2620.834603][T22145] usb 2-1: digital interface selection failed (-22) [ 2620.852461][T22145] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2620.892091][T22145] usb 2-1: setting power OFF [ 2620.907160][T22145] dvb-usb: bulk message failed: -22 (2/0) [ 2620.928871][T22145] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2620.957885][T22145] (NULL device *): no alternate interface [ 2621.055200][T22145] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2621.149837][T22145] usb 2-1: USB disconnect, device number 65 [ 2621.378325][T17793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11312'. [ 2621.611110][T17798] program syz.4.11311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2621.649470][T17798] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2621.655965][T17798] syzkaller1: linktype set to 823 [ 2621.661111][T17800] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2621.662695][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11311'. [ 2621.667626][T17800] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2621.702729][T17800] vhci_hcd vhci_hcd.0: Device attached [ 2621.735492][T17803] IPv4: Oversized IP packet from 172.20.20.24 [ 2621.744273][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 2621.750994][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 2621.804760][T17801] vhci_hcd: connection closed [ 2621.805926][T14148] vhci_hcd vhci_hcd.1: stop threads [ 2621.826724][T14148] vhci_hcd vhci_hcd.1: release socket [ 2621.838742][T14148] vhci_hcd vhci_hcd.1: disconnect device [ 2621.893368][ T849] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2622.538285][T17818] bond0: Unable to set up delay as MII monitoring is disabled [ 2622.864505][T17224] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2623.044535][T17224] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 2623.071618][T17224] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2623.125784][T17224] usb 3-1: config 0 has no interfaces? [ 2623.156735][ T849] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2623.226637][T17224] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2623.289209][T17224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.337058][T17224] usb 3-1: config 0 descriptor?? [ 2623.673096][T17224] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2623.864315][T17224] usb 5-1: Using ep0 maxpacket: 32 [ 2623.899490][T17224] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2623.970141][T17224] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2624.040596][T17224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.093576][ T849] usb 2-1: device descriptor read/64, error -71 [ 2624.153156][T17224] usb 5-1: Product: syz [ 2624.191292][T17224] usb 5-1: Manufacturer: syz [ 2624.234093][T17224] usb 5-1: SerialNumber: syz [ 2624.273639][T17224] usb 5-1: config 0 descriptor?? [ 2624.315270][T17224] cdc_ether 5-1:0.0: probe with driver cdc_ether failed with error -22 [ 2624.343083][ T849] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2624.343784][T17224] usb 5-1: unsupported MDLM descriptors [ 2624.512985][ T849] usb 2-1: device descriptor read/64, error -71 [ 2624.633866][ T849] usb usb2-port1: attempt power cycle [ 2624.982969][ T849] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2625.043974][ T849] usb 2-1: device descriptor read/8, error -71 [ 2625.149570][ T9104] usb 5-1: USB disconnect, device number 24 [ 2625.312963][ T849] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2625.405883][ T849] usb 2-1: device descriptor read/8, error -71 [ 2625.467994][T17860] program syz.4.11332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2625.508119][ T9104] usb 3-1: USB disconnect, device number 12 [ 2625.514204][ T849] usb usb2-port1: unable to enumerate USB device [ 2625.534052][T17860] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2625.540339][T17860] syzkaller1: linktype set to 823 [ 2625.559708][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11332'. [ 2625.736706][T17869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2625.769799][T17869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2626.053085][ T9104] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2626.257050][T17890] team0: Port device dummy0 removed [ 2626.543183][T11460] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2626.706087][T11460] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2626.717689][T11460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2626.727112][T11460] usb 2-1: Product: syz [ 2626.731289][T11460] usb 2-1: Manufacturer: syz [ 2626.736316][T11460] usb 2-1: SerialNumber: syz [ 2626.854995][T17904] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2626.934351][ T9104] usb 3-1: device descriptor read/64, error -71 [ 2627.193472][ T9104] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2627.355039][ T9104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2627.393108][ T9104] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 2627.415239][ T9104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2627.435273][ T9104] usb 3-1: Product: syz [ 2627.445824][ T9104] usb 3-1: Manufacturer: syz [ 2627.458261][ T9104] usb 3-1: SerialNumber: syz [ 2627.477437][ T9104] usb 3-1: config 0 descriptor?? [ 2627.716127][T11460] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2627.770356][T11460] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 2627.805087][T11460] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2627.838452][T17912] could not allocate digest TFM handle sha3-512-generic [ 2627.868780][T11460] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2627.884799][T17897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11342'. [ 2627.925257][T11460] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2627.980341][T11460] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 2628.012427][T17897] netlink: 'syz.2.11342': attribute type 3 has an invalid length. [ 2628.034185][T11460] usb 2-1: USB disconnect, device number 70 [ 2628.158567][ T9104] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 2628.189494][ T9104] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 2628.235432][ T9104] usb 3-1: USB disconnect, device number 14 [ 2628.592958][T11460] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2628.793040][T11460] usb 2-1: device descriptor read/64, error -71 [ 2629.083150][T11460] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2629.285875][T11460] usb 2-1: device descriptor read/64, error -71 [ 2629.424406][T11460] usb usb2-port1: attempt power cycle [ 2629.471280][T17942] x_tables: duplicate underflow at hook 1 [ 2629.498141][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11353'. [ 2629.804089][T11460] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2629.824725][T11460] usb 2-1: device descriptor read/8, error -71 [ 2629.891487][T17953] netlink: 'syz.2.11356': attribute type 39 has an invalid length. [ 2629.977195][T17955] netlink: 'syz.2.11356': attribute type 3 has an invalid length. [ 2629.993734][T17953] syz_tun (unregistering): left allmulticast mode [ 2630.077434][T11460] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2630.139771][T11460] usb 2-1: device descriptor read/8, error -71 [ 2630.274187][T11460] usb usb2-port1: unable to enumerate USB device [ 2630.693938][ T849] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2630.863067][ T849] usb 3-1: device descriptor read/64, error -71 [ 2631.123492][ T849] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2631.272936][ T849] usb 3-1: device descriptor read/64, error -71 [ 2631.383317][ T849] usb usb3-port1: attempt power cycle [ 2631.780106][ T849] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2631.800194][ T849] usb 3-1: device descriptor read/8, error -71 [ 2631.827235][T17982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11363'. [ 2632.019245][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11363'. [ 2632.054640][ T849] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2632.104944][ T849] usb 3-1: device descriptor read/8, error -71 [ 2632.213460][ T849] usb usb3-port1: unable to enumerate USB device [ 2632.503822][T17978] delete_channel: no stack [ 2632.723254][ T849] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2632.885058][ T849] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2632.901420][ T849] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2632.919037][ T849] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2632.946034][ T849] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2632.963836][ T849] usb 5-1: Product: syz [ 2632.967363][T18001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11367'. [ 2632.979198][ T849] usb 5-1: Manufacturer: syz [ 2632.988347][ T849] usb 5-1: SerialNumber: syz [ 2633.000960][ T849] usb 5-1: config 0 descriptor?? [ 2633.022171][ T849] usb 5-1: selecting invalid altsetting 0 [ 2633.229933][ T849] usb 5-1: USB disconnect, device number 25 [ 2633.743201][ T849] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2633.898632][ T849] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2633.909820][ T849] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2633.920989][ T849] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2633.943890][ T849] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2633.962393][ T849] usb 5-1: Product: syz [ 2633.976393][ T849] usb 5-1: Manufacturer: syz [ 2633.981712][ T849] usb 5-1: SerialNumber: syz [ 2633.990141][ T849] usb 5-1: config 0 descriptor?? [ 2634.008965][ T849] usb 5-1: selecting invalid altsetting 0 [ 2634.223363][ T849] usb 5-1: USB disconnect, device number 26 [ 2634.695649][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 2634.695998][ T30] audit: type=1326 audit(1767828995.222:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18021 comm="syz.2.11374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2634.741173][ T30] audit: type=1326 audit(1767828995.222:7378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18021 comm="syz.2.11374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2634.825705][ T30] audit: type=1326 audit(1767828995.342:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18021 comm="syz.2.11374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2634.853667][ T30] audit: type=1326 audit(1767828995.342:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18021 comm="syz.2.11374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2634.882316][ T30] audit: type=1326 audit(1767828995.342:7381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18021 comm="syz.2.11374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 2635.020020][T18034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11375'. [ 2635.073562][T22145] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2635.213169][T30863] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2635.233065][T22145] usb 3-1: Using ep0 maxpacket: 16 [ 2635.249916][T22145] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 2635.292733][T22145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2635.333950][T22145] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2635.344710][T22145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2635.353908][T22145] usb 3-1: Product: syz [ 2635.359332][T22145] usb 3-1: Manufacturer: syz [ 2635.365320][T22145] usb 3-1: SerialNumber: syz [ 2635.383008][T30863] usb 5-1: Using ep0 maxpacket: 32 [ 2635.391727][T30863] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 2635.402448][T30863] usb 5-1: config 0 has no interface number 0 [ 2635.424177][T30863] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2635.436400][T30863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2635.447230][T30863] usb 5-1: Product: syz [ 2635.453265][T30863] usb 5-1: Manufacturer: syz [ 2635.459838][T30863] usb 5-1: SerialNumber: syz [ 2635.477103][T30863] usb 5-1: config 0 descriptor?? [ 2635.520674][T30863] smsc95xx v2.0.0 [ 2635.587666][T22145] usb 3-1: 0:2 : does not exist [ 2635.653910][T22145] usb 3-1: USB disconnect, device number 19 [ 2635.724984][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2635.953615][T30863] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2635.985161][T30863] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2637.063694][T18063] tipc: MTU too low for tipc bearer [ 2637.103040][T22145] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 2637.275136][T22145] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 2637.297484][T22145] usb 3-1: config 0 has no interface number 0 [ 2637.313421][T22145] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 2637.328731][T22145] usb 3-1: config 0 interface 128 has no altsetting 0 [ 2637.342205][T22145] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 2637.358129][T22145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2637.366459][T22145] usb 3-1: Product: syz [ 2637.370716][T22145] usb 3-1: Manufacturer: syz [ 2637.377137][T22145] usb 3-1: SerialNumber: syz [ 2637.392657][T22145] usb 3-1: config 0 descriptor?? [ 2637.427285][T22145] radio-si470x 3-1:0.128: could not find interrupt in endpoint [ 2637.453527][T22145] radio-si470x 3-1:0.128: probe with driver radio-si470x failed with error -5 [ 2637.477101][T22145] usbhid 3-1:0.128: couldn't find an input interrupt endpoint [ 2637.647541][T30863] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 2637.668322][ T9104] usb 3-1: USB disconnect, device number 20 [ 2637.686556][T30863] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 2638.768555][T18093] program syz.2.11397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2638.808204][T18093] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2638.820451][T18093] syzkaller1: linktype set to 823 [ 2638.835346][T18093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11397'. [ 2639.480491][T18099] FAULT_INJECTION: forcing a failure. [ 2639.480491][T18099] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.495406][T18099] CPU: 1 UID: 0 PID: 18099 Comm: syz.0.11398 Tainted: G L syzkaller #0 PREEMPT(full) [ 2639.495426][T18099] Tainted: [L]=SOFTLOCKUP [ 2639.495430][T18099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2639.495438][T18099] Call Trace: [ 2639.495442][T18099] [ 2639.495447][T18099] dump_stack_lvl+0xe8/0x150 [ 2639.495466][T18099] should_fail_ex+0x414/0x560 [ 2639.495485][T18099] should_failslab+0xa8/0x100 [ 2639.495500][T18099] __kvmalloc_node_noprof+0x175/0x920 [ 2639.495512][T18099] ? alloc_netdev_mqs+0xa6/0x11b0 [ 2639.495531][T18099] alloc_netdev_mqs+0xa6/0x11b0 [ 2639.495545][T18099] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 2639.495559][T18099] rtnl_create_link+0x31f/0xcf0 [ 2639.495578][T18099] rtnl_newlink_create+0x25c/0xb00 [ 2639.495597][T18099] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2639.495611][T18099] ? __pfx___mutex_lock+0x10/0x10 [ 2639.495628][T18099] ? full_name_hash+0x89/0xe0 [ 2639.495640][T18099] ? netdev_name_node_lookup+0x32/0x120 [ 2639.495658][T18099] rtnl_newlink+0x16e7/0x1c90 [ 2639.495676][T18099] ? __pfx_rtnl_newlink+0x10/0x10 [ 2639.495686][T18099] ? __do_fast_syscall_32+0x1dc/0x570 [ 2639.495718][T18099] ? kasan_quarantine_put+0xbb/0x1f0 [ 2639.495729][T18099] ? lockdep_hardirqs_on+0x7b/0x110 [ 2639.495741][T18099] ? kmem_cache_free+0x197/0x620 [ 2639.495751][T18099] ? nlmon_xmit+0xb0/0x100 [ 2639.495770][T18099] ? __lock_acquire+0x6b6/0x2cf0 [ 2639.495785][T18099] ? __local_bh_enable_ip+0xd0/0x130 [ 2639.495797][T18099] ? lockdep_hardirqs_on+0x7b/0x110 [ 2639.495806][T18099] ? __dev_queue_xmit+0x289/0x31c0 [ 2639.495819][T18099] ? __local_bh_enable_ip+0xd0/0x130 [ 2639.495828][T18099] ? __dev_queue_xmit+0x289/0x31c0 [ 2639.495845][T18099] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2639.495868][T18099] ? __pfx_rtnl_newlink+0x10/0x10 [ 2639.495887][T18099] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2639.495909][T18099] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2639.495928][T18099] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2639.495945][T18099] ? ref_tracker_free+0x63a/0x7d0 [ 2639.495970][T18099] ? __asan_memcpy+0x40/0x70 [ 2639.495985][T18099] ? __pfx_ref_tracker_free+0x10/0x10 [ 2639.496001][T18099] netlink_rcv_skb+0x208/0x470 [ 2639.496015][T18099] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2639.496027][T18099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2639.496046][T18099] ? netlink_deliver_tap+0x2e/0x1b0 [ 2639.496063][T18099] netlink_unicast+0x82f/0x9e0 [ 2639.496078][T18099] ? __pfx_netlink_unicast+0x10/0x10 [ 2639.496089][T18099] ? __alloc_skb+0x198/0x3a0 [ 2639.496100][T18099] ? netlink_sendmsg+0x642/0xb30 [ 2639.496113][T18099] ? skb_put+0x11b/0x210 [ 2639.496125][T18099] netlink_sendmsg+0x805/0xb30 [ 2639.496144][T18099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2639.496158][T18099] ? __import_iovec+0x5d4/0x7f0 [ 2639.496169][T18099] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2639.496184][T18099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2639.496194][T18099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2639.496208][T18099] __sock_sendmsg+0x21c/0x270 [ 2639.496224][T18099] ____sys_sendmsg+0x505/0x820 [ 2639.496240][T18099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2639.496255][T18099] ? kstrtouint+0x6e/0xe0 [ 2639.496274][T18099] ___sys_sendmsg+0x21f/0x2a0 [ 2639.496288][T18099] ? __pfx____sys_sendmsg+0x10/0x10 [ 2639.496299][T18099] ? get_pid_task+0x20/0x1f0 [ 2639.496312][T18099] ? get_pid_task+0x20/0x1f0 [ 2639.496324][T18099] ? get_pid_task+0x20/0x1f0 [ 2639.496352][T18099] ? __fget_files+0x2a/0x420 [ 2639.496364][T18099] ? __fget_files+0x3a0/0x420 [ 2639.496382][T18099] __sys_sendmsg+0x164/0x220 [ 2639.496395][T18099] ? __pfx___sys_sendmsg+0x10/0x10 [ 2639.496412][T18099] ? __pfx_ksys_write+0x10/0x10 [ 2639.496427][T18099] __do_fast_syscall_32+0x1dc/0x570 [ 2639.496442][T18099] ? lockdep_hardirqs_on+0x7b/0x110 [ 2639.496452][T18099] ? do_fast_syscall_32+0x34/0x80 [ 2639.496462][T18099] ? irqentry_exit+0x10f/0x670 [ 2639.496475][T18099] do_fast_syscall_32+0x34/0x80 [ 2639.496486][T18099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2639.496500][T18099] RIP: 0023:0xf7f51539 [ 2639.496510][T18099] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2639.496519][T18099] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2639.496532][T18099] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 2639.496540][T18099] RDX: 0000000024000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 2639.496547][T18099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2639.496553][T18099] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2639.496559][T18099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2639.496574][T18099] [ 2640.035149][ T9104] usb 5-1: USB disconnect, device number 27 [ 2641.443034][T22145] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2641.524009][T30863] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 2641.607839][T22145] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 2641.636434][T22145] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2641.657609][T22145] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2641.687200][T30863] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2641.708746][T22145] usb 5-1: config 220 has no interface number 2 [ 2641.726381][T22145] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2641.749237][T30863] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2641.783868][T30863] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 2641.798086][T22145] usb 5-1: config 220 interface 0 has no altsetting 0 [ 2641.812127][T22145] usb 5-1: config 220 interface 76 has no altsetting 0 [ 2641.820885][T30863] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2641.836823][T22145] usb 5-1: config 220 interface 1 has no altsetting 0 [ 2641.846909][T30863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2641.898809][T22145] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2641.925175][T22145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2641.940280][T18136] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2641.948614][T18136] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2641.964357][T22145] usb 5-1: Product: syz [ 2641.968565][T22145] usb 5-1: Manufacturer: syz [ 2641.987132][T30863] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2642.000811][T22145] usb 5-1: SerialNumber: syz [ 2642.224151][T22145] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2642.231630][T22145] uvcvideo 5-1:220.0: No valid video chain found. [ 2642.259007][T22145] usb 5-1: selecting invalid altsetting 0 [ 2642.308802][T22145] usb 5-1: selecting invalid altsetting 0 [ 2642.365079][T22145] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 2642.383193][T22145] usb 5-1: USB disconnect, device number 28 [ 2642.504964][T18153] FAULT_INJECTION: forcing a failure. [ 2642.504964][T18153] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.553700][T18153] CPU: 0 UID: 0 PID: 18153 Comm: syz.0.11413 Tainted: G L syzkaller #0 PREEMPT(full) [ 2642.553731][T18153] Tainted: [L]=SOFTLOCKUP [ 2642.553739][T18153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2642.553751][T18153] Call Trace: [ 2642.553759][T18153] [ 2642.553768][T18153] dump_stack_lvl+0xe8/0x150 [ 2642.553799][T18153] should_fail_ex+0x414/0x560 [ 2642.553835][T18153] should_failslab+0xa8/0x100 [ 2642.553859][T18153] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 2642.553891][T18153] ? __d_alloc+0x37/0x6f0 [ 2642.553923][T18153] __d_alloc+0x37/0x6f0 [ 2642.553955][T18153] d_alloc+0x4b/0x190 [ 2642.553976][T18153] ? lookup_one_qstr_excl+0xc8/0x360 [ 2642.554003][T18153] lookup_one_qstr_excl+0xdc/0x360 [ 2642.554028][T18153] ? lookup_noperm_common+0x245/0x430 [ 2642.554061][T18153] start_dirop+0x5c/0x90 [ 2642.554086][T18153] simple_start_creating+0xc4/0x100 [ 2642.554112][T18153] ? __pfx_simple_start_creating+0x10/0x10 [ 2642.554138][T18153] ? do_raw_spin_unlock+0x122/0x240 [ 2642.554165][T18153] ? mntput+0x65/0xc0 [ 2642.554188][T18153] debugfs_start_creating+0xdb/0x1a0 [ 2642.554211][T18153] __debugfs_create_file+0x6f/0x400 [ 2642.554235][T18153] debugfs_create_file_full+0x3f/0x60 [ 2642.554260][T18153] ref_tracker_dir_debugfs+0x14e/0x2d0 [ 2642.554282][T18153] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2642.554329][T18153] ? trace_kmalloc+0x1f/0xb0 [ 2642.554344][T18153] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 2642.554368][T18153] ? __raw_spin_lock_init+0x45/0x100 [ 2642.554394][T18153] alloc_netdev_mqs+0x272/0x11b0 [ 2642.554420][T18153] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 2642.554451][T18153] rtnl_create_link+0x31f/0xcf0 [ 2642.554484][T18153] rtnl_newlink_create+0x25c/0xb00 [ 2642.554522][T18153] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2642.554550][T18153] ? __pfx___mutex_lock+0x10/0x10 [ 2642.554579][T18153] ? full_name_hash+0x89/0xe0 [ 2642.554601][T18153] ? netdev_name_node_lookup+0x32/0x120 [ 2642.554634][T18153] rtnl_newlink+0x16e7/0x1c90 [ 2642.554672][T18153] ? __pfx_rtnl_newlink+0x10/0x10 [ 2642.554691][T18153] ? __do_fast_syscall_32+0x1dc/0x570 [ 2642.554750][T18153] ? kasan_quarantine_put+0xbb/0x1f0 [ 2642.554769][T18153] ? lockdep_hardirqs_on+0x7b/0x110 [ 2642.554794][T18153] ? kmem_cache_free+0x197/0x620 [ 2642.554813][T18153] ? nlmon_xmit+0xb0/0x100 [ 2642.554848][T18153] ? __lock_acquire+0x6b6/0x2cf0 [ 2642.554876][T18153] ? __local_bh_enable_ip+0xd0/0x130 [ 2642.554896][T18153] ? lockdep_hardirqs_on+0x7b/0x110 [ 2642.554914][T18153] ? __dev_queue_xmit+0x289/0x31c0 [ 2642.554937][T18153] ? __local_bh_enable_ip+0xd0/0x130 [ 2642.554955][T18153] ? __dev_queue_xmit+0x289/0x31c0 [ 2642.554989][T18153] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2642.555025][T18153] ? __pfx_rtnl_newlink+0x10/0x10 [ 2642.555046][T18153] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2642.555071][T18153] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2642.555092][T18153] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2642.555112][T18153] ? ref_tracker_free+0x63a/0x7d0 [ 2642.555133][T18153] ? __asan_memcpy+0x40/0x70 [ 2642.555161][T18153] ? __pfx_ref_tracker_free+0x10/0x10 [ 2642.555192][T18153] netlink_rcv_skb+0x208/0x470 [ 2642.555219][T18153] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2642.555243][T18153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2642.555279][T18153] ? netlink_deliver_tap+0x2e/0x1b0 [ 2642.555312][T18153] netlink_unicast+0x82f/0x9e0 [ 2642.555344][T18153] ? __pfx_netlink_unicast+0x10/0x10 [ 2642.555365][T18153] ? __alloc_skb+0x198/0x3a0 [ 2642.555386][T18153] ? netlink_sendmsg+0x642/0xb30 [ 2642.555409][T18153] ? skb_put+0x11b/0x210 [ 2642.555433][T18153] netlink_sendmsg+0x805/0xb30 [ 2642.555473][T18153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2642.555501][T18153] ? __import_iovec+0x5d4/0x7f0 [ 2642.555523][T18153] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2642.555550][T18153] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2642.555569][T18153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2642.555596][T18153] __sock_sendmsg+0x21c/0x270 [ 2642.555627][T18153] ____sys_sendmsg+0x505/0x820 [ 2642.555656][T18153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2642.555686][T18153] ? kstrtouint+0x6e/0xe0 [ 2642.555722][T18153] ___sys_sendmsg+0x21f/0x2a0 [ 2642.555748][T18153] ? __pfx____sys_sendmsg+0x10/0x10 [ 2642.555771][T18153] ? get_pid_task+0x20/0x1f0 [ 2642.555796][T18153] ? get_pid_task+0x20/0x1f0 [ 2642.555818][T18153] ? get_pid_task+0x20/0x1f0 [ 2642.555873][T18153] ? __fget_files+0x2a/0x420 [ 2642.555896][T18153] ? __fget_files+0x3a0/0x420 [ 2642.555930][T18153] __sys_sendmsg+0x164/0x220 [ 2642.555955][T18153] ? __pfx___sys_sendmsg+0x10/0x10 [ 2642.555986][T18153] ? __pfx_ksys_write+0x10/0x10 [ 2642.556018][T18153] __do_fast_syscall_32+0x1dc/0x570 [ 2642.556040][T18153] ? lockdep_hardirqs_on+0x7b/0x110 [ 2642.556058][T18153] ? do_fast_syscall_32+0x34/0x80 [ 2642.556080][T18153] ? irqentry_exit+0x10f/0x670 [ 2642.556104][T18153] do_fast_syscall_32+0x34/0x80 [ 2642.556127][T18153] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2642.556151][T18153] RIP: 0023:0xf7f51539 [ 2642.556168][T18153] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2642.556186][T18153] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2642.556207][T18153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 2642.556221][T18153] RDX: 0000000024000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 2642.556234][T18153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2642.556246][T18153] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2642.556259][T18153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2642.556289][T18153] [ 2643.301728][T18162] fuse: Bad value for 'user_id' [ 2643.307626][T18162] fuse: Bad value for 'user_id' [ 2643.551127][T18173] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11421'. [ 2643.668567][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11421'. [ 2644.385424][T18182] netlink: 'syz.0.11423': attribute type 7 has an invalid length. [ 2645.619360][ T849] usb 2-1: USB disconnect, device number 75 [ 2645.709056][T18188] program syz.1.11425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2645.758466][T18191] FAULT_INJECTION: forcing a failure. [ 2645.758466][T18191] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.771817][T18191] CPU: 0 UID: 0 PID: 18191 Comm: syz.1.11426 Tainted: G L syzkaller #0 PREEMPT(full) [ 2645.771836][T18191] Tainted: [L]=SOFTLOCKUP [ 2645.771840][T18191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2645.771847][T18191] Call Trace: [ 2645.771852][T18191] [ 2645.771857][T18191] dump_stack_lvl+0xe8/0x150 [ 2645.771876][T18191] should_fail_ex+0x414/0x560 [ 2645.771896][T18191] should_failslab+0xa8/0x100 [ 2645.771910][T18191] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 2645.771928][T18191] ? __d_alloc+0x37/0x6f0 [ 2645.771946][T18191] __d_alloc+0x37/0x6f0 [ 2645.771963][T18191] d_alloc+0x4b/0x190 [ 2645.771975][T18191] ? lookup_one_qstr_excl+0xc8/0x360 [ 2645.771991][T18191] lookup_one_qstr_excl+0xdc/0x360 [ 2645.772004][T18191] ? lookup_noperm_common+0x245/0x430 [ 2645.772019][T18191] start_dirop+0x5c/0x90 [ 2645.772033][T18191] simple_start_creating+0xc4/0x100 [ 2645.772048][T18191] ? __pfx_simple_start_creating+0x10/0x10 [ 2645.772062][T18191] ? do_raw_spin_unlock+0x122/0x240 [ 2645.772076][T18191] ? mntput+0x65/0xc0 [ 2645.772089][T18191] debugfs_start_creating+0xdb/0x1a0 [ 2645.772102][T18191] __debugfs_create_file+0x6f/0x400 [ 2645.772115][T18191] debugfs_create_file_full+0x3f/0x60 [ 2645.772130][T18191] ref_tracker_dir_debugfs+0x14e/0x2d0 [ 2645.772142][T18191] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2645.772166][T18191] ? trace_kmalloc+0x1f/0xb0 [ 2645.772174][T18191] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 2645.772187][T18191] ? __raw_spin_lock_init+0x45/0x100 [ 2645.772203][T18191] alloc_netdev_mqs+0x272/0x11b0 [ 2645.772218][T18191] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 2645.772233][T18191] rtnl_create_link+0x31f/0xcf0 [ 2645.772252][T18191] rtnl_newlink_create+0x25c/0xb00 [ 2645.772272][T18191] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2645.772287][T18191] ? __pfx___mutex_lock+0x10/0x10 [ 2645.772302][T18191] ? full_name_hash+0x89/0xe0 [ 2645.772314][T18191] ? netdev_name_node_lookup+0x32/0x120 [ 2645.772331][T18191] rtnl_newlink+0x16e7/0x1c90 [ 2645.772351][T18191] ? __pfx_rtnl_newlink+0x10/0x10 [ 2645.772360][T18191] ? __do_fast_syscall_32+0x1dc/0x570 [ 2645.772396][T18191] ? kasan_quarantine_put+0xbb/0x1f0 [ 2645.772406][T18191] ? lockdep_hardirqs_on+0x7b/0x110 [ 2645.772419][T18191] ? kmem_cache_free+0x197/0x620 [ 2645.772429][T18191] ? nlmon_xmit+0xb0/0x100 [ 2645.772451][T18191] ? __lock_acquire+0x6b6/0x2cf0 [ 2645.772478][T18191] ? __local_bh_enable_ip+0xd0/0x130 [ 2645.772497][T18191] ? lockdep_hardirqs_on+0x7b/0x110 [ 2645.772514][T18191] ? __dev_queue_xmit+0x289/0x31c0 [ 2645.772537][T18191] ? __local_bh_enable_ip+0xd0/0x130 [ 2645.772554][T18191] ? __dev_queue_xmit+0x289/0x31c0 [ 2645.772587][T18191] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2645.772624][T18191] ? __pfx_rtnl_newlink+0x10/0x10 [ 2645.772644][T18191] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2645.772670][T18191] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2645.772690][T18191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2645.772710][T18191] ? ref_tracker_free+0x63a/0x7d0 [ 2645.772731][T18191] ? __asan_memcpy+0x40/0x70 [ 2645.772759][T18191] ? __pfx_ref_tracker_free+0x10/0x10 [ 2645.772789][T18191] netlink_rcv_skb+0x208/0x470 [ 2645.772814][T18191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2645.772837][T18191] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2645.772873][T18191] ? netlink_deliver_tap+0x2e/0x1b0 [ 2645.772903][T18191] netlink_unicast+0x82f/0x9e0 [ 2645.772932][T18191] ? __pfx_netlink_unicast+0x10/0x10 [ 2645.772951][T18191] ? __alloc_skb+0x198/0x3a0 [ 2645.772971][T18191] ? netlink_sendmsg+0x642/0xb30 [ 2645.772993][T18191] ? skb_put+0x11b/0x210 [ 2645.773017][T18191] netlink_sendmsg+0x805/0xb30 [ 2645.773051][T18191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2645.773078][T18191] ? __import_iovec+0x5d4/0x7f0 [ 2645.773099][T18191] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2645.773126][T18191] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2645.773145][T18191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2645.773171][T18191] __sock_sendmsg+0x21c/0x270 [ 2645.773203][T18191] ____sys_sendmsg+0x505/0x820 [ 2645.773232][T18191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2645.773259][T18191] ? kstrtouint+0x6e/0xe0 [ 2645.773295][T18191] ___sys_sendmsg+0x21f/0x2a0 [ 2645.773321][T18191] ? __pfx____sys_sendmsg+0x10/0x10 [ 2645.773344][T18191] ? get_pid_task+0x20/0x1f0 [ 2645.773373][T18191] ? get_pid_task+0x20/0x1f0 [ 2645.773395][T18191] ? get_pid_task+0x20/0x1f0 [ 2645.773449][T18191] ? __fget_files+0x2a/0x420 [ 2645.773472][T18191] ? __fget_files+0x3a0/0x420 [ 2645.773506][T18191] __sys_sendmsg+0x164/0x220 [ 2645.773532][T18191] ? __pfx___sys_sendmsg+0x10/0x10 [ 2645.773564][T18191] ? __pfx_ksys_write+0x10/0x10 [ 2645.773596][T18191] __do_fast_syscall_32+0x1dc/0x570 [ 2645.773617][T18191] ? lockdep_hardirqs_on+0x7b/0x110 [ 2645.773635][T18191] ? do_fast_syscall_32+0x34/0x80 [ 2645.773656][T18191] ? irqentry_exit+0x10f/0x670 [ 2645.773680][T18191] do_fast_syscall_32+0x34/0x80 [ 2645.773703][T18191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2645.773727][T18191] RIP: 0023:0xf6ffd539 [ 2645.773743][T18191] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2645.773761][T18191] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2645.773782][T18191] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 2645.773797][T18191] RDX: 0000000024000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 2645.773807][T18191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2645.773819][T18191] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2645.773831][T18191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2645.773860][T18191] [ 2646.322029][T18193] FAULT_INJECTION: forcing a failure. [ 2646.322029][T18193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2646.335355][T18193] CPU: 1 UID: 0 PID: 18193 Comm: syz.2.11427 Tainted: G L syzkaller #0 PREEMPT(full) [ 2646.335375][T18193] Tainted: [L]=SOFTLOCKUP [ 2646.335380][T18193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2646.335386][T18193] Call Trace: [ 2646.335391][T18193] [ 2646.335396][T18193] dump_stack_lvl+0xe8/0x150 [ 2646.335414][T18193] should_fail_ex+0x414/0x560 [ 2646.335434][T18193] _copy_from_user+0x2d/0xb0 [ 2646.335447][T18193] sctp_getsockopt_asconf_supported+0xb5/0x520 [ 2646.335467][T18193] ? __pfx_sctp_getsockopt_asconf_supported+0x10/0x10 [ 2646.335485][T18193] ? __local_bh_enable_ip+0xd0/0x130 [ 2646.335499][T18193] sctp_getsockopt+0x9db/0xb90 [ 2646.335509][T18193] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2646.335526][T18193] do_sock_getsockopt+0x2b4/0x3d0 [ 2646.335540][T18193] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2646.335554][T18193] ? ksys_write+0x1e1/0x250 [ 2646.335567][T18193] __ia32_sys_getsockopt+0x1a5/0x250 [ 2646.335584][T18193] __do_fast_syscall_32+0x1dc/0x570 [ 2646.335596][T18193] ? lockdep_hardirqs_on+0x7b/0x110 [ 2646.335605][T18193] ? do_fast_syscall_32+0x34/0x80 [ 2646.335616][T18193] ? irqentry_exit+0x10f/0x670 [ 2646.335628][T18193] do_fast_syscall_32+0x34/0x80 [ 2646.335640][T18193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2646.335653][T18193] RIP: 0023:0xf7f42539 [ 2646.335663][T18193] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2646.335673][T18193] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 2646.335685][T18193] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084 [ 2646.335692][T18193] RDX: 0000000000000080 RSI: 0000000080000000 RDI: 0000000080001040 [ 2646.335699][T18193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2646.335705][T18193] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2646.335712][T18193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2646.335726][T18193] [ 2646.891899][ T30] audit: type=1800 audit(1767829007.412:7382): pid=18209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11430" name="file0" dev="tmpfs" ino=2344 res=0 errno=0 [ 2647.053222][ T849] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2647.235336][ T849] usb 3-1: Using ep0 maxpacket: 8 [ 2647.242705][ T849] usb 3-1: config 5 has an invalid interface number: 72 but max is 0 [ 2647.256719][ T849] usb 3-1: config 5 has no interface number 0 [ 2647.268035][ T849] usb 3-1: config 5 interface 72 has no altsetting 0 [ 2647.278246][ T849] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 2647.289507][ T849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2647.316811][ T849] usb 3-1: Product: syz [ 2647.331347][ T849] usb 3-1: Manufacturer: syz [ 2647.333332][T13034] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2647.349586][ T849] usb 3-1: SerialNumber: syz [ 2647.636735][T18206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2647.678619][T18206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2647.743688][ T849] ftdi_sio 3-1:5.72: FTDI USB Serial Device converter detected [ 2647.770091][ T849] usb 3-1: Detected FT4232H [ 2647.790014][ T849] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2647.813523][ T849] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2647.831265][ T849] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2647.861587][ T849] usb 3-1: USB disconnect, device number 21 [ 2647.907801][ T849] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2647.936790][ T849] ftdi_sio 3-1:5.72: device disconnected [ 2648.037774][T11458] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2648.053086][T11458] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2648.061067][T11458] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2648.068805][T11458] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2648.083198][T11458] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2648.090712][T11458] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2648.098697][T11458] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2648.142458][T11458] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2648.158810][T11458] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2648.167623][T11458] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2648.186358][T11458] hid-generic 0000:0000:0000.00C1: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2648.240698][T18224] fido_id[18224]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2648.671402][T18239] FAULT_INJECTION: forcing a failure. [ 2648.671402][T18239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2648.719954][T18239] CPU: 1 UID: 0 PID: 18239 Comm: syz.1.11439 Tainted: G L syzkaller #0 PREEMPT(full) [ 2648.719973][T18239] Tainted: [L]=SOFTLOCKUP [ 2648.719977][T18239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2648.719984][T18239] Call Trace: [ 2648.719989][T18239] [ 2648.719994][T18239] dump_stack_lvl+0xe8/0x150 [ 2648.720012][T18239] should_fail_ex+0x414/0x560 [ 2648.720038][T18239] _copy_to_user+0x31/0xb0 [ 2648.720053][T18239] simple_read_from_buffer+0xe1/0x170 [ 2648.720068][T18239] proc_fail_nth_read+0x1b3/0x220 [ 2648.720081][T18239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2648.720093][T18239] ? rw_verify_area+0x2a6/0x4d0 [ 2648.720108][T18239] ? reacquire_held_locks+0x104/0x190 [ 2648.720120][T18239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2648.720131][T18239] vfs_read+0x200/0xa30 [ 2648.720145][T18239] ? __pfx_vfs_read+0x10/0x10 [ 2648.720153][T18239] ? lockdep_hardirqs_on+0x7b/0x110 [ 2648.720164][T18239] ? sctp_getsockopt+0xb16/0xb90 [ 2648.720173][T18239] ? __local_bh_enable_ip+0xd0/0x130 [ 2648.720184][T18239] ? sctp_getsockopt+0xb16/0xb90 [ 2648.720193][T18239] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2648.720210][T18239] ? do_sock_getsockopt+0x2b4/0x3d0 [ 2648.720226][T18239] ksys_read+0x145/0x250 [ 2648.720236][T18239] ? __pfx_ksys_read+0x10/0x10 [ 2648.720246][T18239] ? __ia32_sys_getsockopt+0x1a5/0x250 [ 2648.720262][T18239] __do_fast_syscall_32+0x1dc/0x570 [ 2648.720273][T18239] ? lockdep_hardirqs_on+0x7b/0x110 [ 2648.720282][T18239] ? do_fast_syscall_32+0x34/0x80 [ 2648.720293][T18239] ? irqentry_exit+0x10f/0x670 [ 2648.720305][T18239] do_fast_syscall_32+0x34/0x80 [ 2648.720316][T18239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2648.720329][T18239] RIP: 0023:0xf6ffd539 [ 2648.720339][T18239] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2648.720348][T18239] RSP: 002b:00000000f53ed590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2648.720360][T18239] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53ed620 [ 2648.720368][T18239] RDX: 000000000000000f RSI: 00000000f7396ff4 RDI: 0000000000000000 [ 2648.720374][T18239] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2648.720380][T18239] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2648.720387][T18239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2648.720401][T18239] [ 2649.041837][T18244] FAULT_INJECTION: forcing a failure. [ 2649.041837][T18244] name failslab, interval 1, probability 0, space 0, times 0 [ 2649.069365][T18244] CPU: 0 UID: 0 PID: 18244 Comm: syz.1.11441 Tainted: G L syzkaller #0 PREEMPT(full) [ 2649.069390][T18244] Tainted: [L]=SOFTLOCKUP [ 2649.069395][T18244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2649.069402][T18244] Call Trace: [ 2649.069407][T18244] [ 2649.069412][T18244] dump_stack_lvl+0xe8/0x150 [ 2649.069431][T18244] should_fail_ex+0x414/0x560 [ 2649.069451][T18244] should_failslab+0xa8/0x100 [ 2649.069466][T18244] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 2649.069482][T18244] ? simple_start_creating+0xc4/0x100 [ 2649.069496][T18244] ? alloc_inode+0x6a/0x1b0 [ 2649.069510][T18244] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2649.069521][T18244] alloc_inode+0x6a/0x1b0 [ 2649.069534][T18244] new_inode+0x22/0x170 [ 2649.069549][T18244] __debugfs_create_file+0xb8/0x400 [ 2649.069565][T18244] debugfs_create_file_full+0x3f/0x60 [ 2649.069578][T18244] ref_tracker_dir_debugfs+0x14e/0x2d0 [ 2649.069589][T18244] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2649.069614][T18244] ? trace_kmalloc+0x1f/0xb0 [ 2649.069622][T18244] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 2649.069635][T18244] ? __raw_spin_lock_init+0x45/0x100 [ 2649.069651][T18244] alloc_netdev_mqs+0x272/0x11b0 [ 2649.069666][T18244] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 2649.069681][T18244] rtnl_create_link+0x31f/0xcf0 [ 2649.069700][T18244] rtnl_newlink_create+0x25c/0xb00 [ 2649.069715][T18244] ? __mutex_lock+0x5bb/0x1350 [ 2649.069730][T18244] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2649.069744][T18244] ? __pfx___mutex_lock+0x10/0x10 [ 2649.069759][T18244] ? full_name_hash+0x89/0xe0 [ 2649.069771][T18244] ? netdev_name_node_lookup+0x32/0x120 [ 2649.069789][T18244] rtnl_newlink+0x16e7/0x1c90 [ 2649.069808][T18244] ? __pfx_rtnl_newlink+0x10/0x10 [ 2649.069820][T18244] ? __do_fast_syscall_32+0x1dc/0x570 [ 2649.069860][T18244] ? kasan_quarantine_put+0xbb/0x1f0 [ 2649.069870][T18244] ? lockdep_hardirqs_on+0x7b/0x110 [ 2649.069883][T18244] ? kmem_cache_free+0x197/0x620 [ 2649.069893][T18244] ? nlmon_xmit+0xb0/0x100 [ 2649.069912][T18244] ? __lock_acquire+0x6b6/0x2cf0 [ 2649.069927][T18244] ? __local_bh_enable_ip+0xd0/0x130 [ 2649.069938][T18244] ? lockdep_hardirqs_on+0x7b/0x110 [ 2649.069948][T18244] ? __dev_queue_xmit+0x289/0x31c0 [ 2649.069961][T18244] ? __local_bh_enable_ip+0xd0/0x130 [ 2649.069970][T18244] ? __dev_queue_xmit+0x289/0x31c0 [ 2649.069987][T18244] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2649.070009][T18244] ? __pfx_rtnl_newlink+0x10/0x10 [ 2649.070020][T18244] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2649.070033][T18244] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2649.070043][T18244] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2649.070053][T18244] ? ref_tracker_free+0x63a/0x7d0 [ 2649.070069][T18244] ? __asan_memcpy+0x40/0x70 [ 2649.070086][T18244] ? __pfx_ref_tracker_free+0x10/0x10 [ 2649.070101][T18244] netlink_rcv_skb+0x208/0x470 [ 2649.070116][T18244] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2649.070127][T18244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2649.070146][T18244] ? netlink_deliver_tap+0x2e/0x1b0 [ 2649.070163][T18244] netlink_unicast+0x82f/0x9e0 [ 2649.070179][T18244] ? __pfx_netlink_unicast+0x10/0x10 [ 2649.070190][T18244] ? __alloc_skb+0x198/0x3a0 [ 2649.070201][T18244] ? netlink_sendmsg+0x642/0xb30 [ 2649.070213][T18244] ? skb_put+0x11b/0x210 [ 2649.070226][T18244] netlink_sendmsg+0x805/0xb30 [ 2649.070244][T18244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2649.070259][T18244] ? __import_iovec+0x5d4/0x7f0 [ 2649.070270][T18244] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2649.070285][T18244] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2649.070295][T18244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2649.070309][T18244] __sock_sendmsg+0x21c/0x270 [ 2649.070326][T18244] ____sys_sendmsg+0x505/0x820 [ 2649.070341][T18244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2649.070356][T18244] ? kstrtouint+0x6e/0xe0 [ 2649.070375][T18244] ___sys_sendmsg+0x21f/0x2a0 [ 2649.070389][T18244] ? __pfx____sys_sendmsg+0x10/0x10 [ 2649.070401][T18244] ? get_pid_task+0x20/0x1f0 [ 2649.070414][T18244] ? get_pid_task+0x20/0x1f0 [ 2649.070425][T18244] ? get_pid_task+0x20/0x1f0 [ 2649.070453][T18244] ? __fget_files+0x2a/0x420 [ 2649.070466][T18244] ? __fget_files+0x3a0/0x420 [ 2649.070483][T18244] __sys_sendmsg+0x164/0x220 [ 2649.070497][T18244] ? __pfx___sys_sendmsg+0x10/0x10 [ 2649.070514][T18244] ? __pfx_ksys_write+0x10/0x10 [ 2649.070530][T18244] __do_fast_syscall_32+0x1dc/0x570 [ 2649.070542][T18244] ? lockdep_hardirqs_on+0x7b/0x110 [ 2649.070551][T18244] ? do_fast_syscall_32+0x34/0x80 [ 2649.070562][T18244] ? irqentry_exit+0x10f/0x670 [ 2649.070575][T18244] do_fast_syscall_32+0x34/0x80 [ 2649.070586][T18244] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2649.070599][T18244] RIP: 0023:0xf6ffd539 [ 2649.070610][T18244] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2649.070619][T18244] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2649.070632][T18244] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 2649.070640][T18244] RDX: 0000000024000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 2649.070646][T18244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2649.070652][T18244] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2649.070658][T18244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2649.070674][T18244] [ 2649.070697][T18244] debugfs: out of free dentries, can not create file 'netdev@ffff888032664618' [ 2649.132986][T17224] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 2649.911683][ T849] IPVS: starting estimator thread 0... [ 2649.986528][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11446'. [ 2650.025319][T18258] IPVS: using max 30 ests per chain, 72000 per kthread [ 2650.333494][T17224] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2650.354928][T17224] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2650.405319][T17224] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 2650.448964][T17224] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2650.481037][T17224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2650.492058][T18268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11448'. [ 2650.663544][T18273] [ 2650.665905][T18273] ===================================================== [ 2650.672835][T18273] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2650.680302][T18273] syzkaller #0 Tainted: G L [ 2650.686276][T18273] ----------------------------------------------------- [ 2650.693205][T18273] syz.2.11449/18273 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2650.701002][T18273] ffff88807d1cfbe8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2650.709721][T18273] [ 2650.709721][T18273] and this task is already holding: [ 2650.717076][T18273] ffff888059a64028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2650.726830][T18273] which would create a new lock dependency: [ 2650.732710][T18273] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 2650.740786][T18273] [ 2650.740786][T18273] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2650.750230][T18273] (&client->buffer_lock){..-.}-{3:3} [ 2650.750262][T18273] [ 2650.750262][T18273] ... which became SOFTIRQ-irq-safe at: [ 2650.763316][T18273] lock_acquire+0x107/0x340 [ 2650.767901][T18273] _raw_spin_lock+0x2e/0x40 [ 2650.772476][T18273] evdev_pass_values+0xb9/0xbd0 [ 2650.777407][T18273] evdev_events+0x1e6/0x340 [ 2650.781979][T18273] input_pass_values+0x288/0x890 [ 2650.786998][T18273] input_event_dispose+0x330/0x6b0 [ 2650.792185][T18273] input_event+0x89/0xe0 [ 2650.796521][T18273] hidinput_report_event+0xa1/0x100 [ 2650.801798][T18273] hid_report_raw_event+0x148b/0x1720 [ 2650.807258][T18273] hid_input_report+0x44b/0x580 [ 2650.812184][T18273] hid_irq_in+0x47e/0x6d0 [ 2650.816592][T18273] __usb_hcd_giveback_urb+0x376/0x540 [ 2650.822051][T18273] dummy_timer+0x85f/0x45b0 [ 2650.826654][T18273] __hrtimer_run_queues+0x51c/0xc30 [ 2650.831946][T18273] hrtimer_run_softirq+0x187/0x2b0 [ 2650.837130][T18273] handle_softirqs+0x22b/0x7c0 [ 2650.841968][T18273] __irq_exit_rcu+0x60/0x150 [ 2650.846636][T18273] irq_exit_rcu+0x9/0x30 [ 2650.850965][T18273] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2650.856687][T18273] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2650.862751][T18273] pv_native_safe_halt+0x13/0x20 [ 2650.867848][T18273] default_idle+0x13/0x20 [ 2650.872258][T18273] default_idle_call+0x73/0xb0 [ 2650.877105][T18273] do_idle+0x1be/0x4d0 [ 2650.881250][T18273] cpu_startup_entry+0x44/0x60 [ 2650.886106][T18273] rest_init+0x2de/0x300 [ 2650.890436][T18273] start_kernel+0x381/0x3d0 [ 2650.895020][T18273] x86_64_start_reservations+0x24/0x30 [ 2650.900546][T18273] x86_64_start_kernel+0x143/0x1c0 [ 2650.905737][T18273] common_startup_64+0x13e/0x147 [ 2650.910747][T18273] [ 2650.910747][T18273] to a SOFTIRQ-irq-unsafe lock: [ 2650.917754][T18273] (tasklist_lock){.+.+}-{3:3} [ 2650.917787][T18273] [ 2650.917787][T18273] ... which became SOFTIRQ-irq-unsafe at: [ 2650.930399][T18273] ... [ 2650.930409][T18273] lock_acquire+0x107/0x340 [ 2650.937564][T18273] _raw_read_lock+0x36/0x50 [ 2650.942140][T18273] __do_wait+0xde/0x740 [ 2650.946384][T18273] do_wait+0x1e8/0x4f0 [ 2650.950541][T18273] kernel_wait+0xab/0x170 [ 2650.954945][T18273] call_usermodehelper_exec_work+0xbe/0x230 [ 2650.960904][T18273] process_scheduled_works+0xad1/0x1770 [ 2650.966518][T18273] worker_thread+0x8a0/0xda0 [ 2650.971179][T18273] kthread+0x711/0x8a0 [ 2650.975312][T18273] ret_from_fork+0x510/0xa50 [ 2650.979965][T18273] ret_from_fork_asm+0x1a/0x30 [ 2650.984795][T18273] [ 2650.984795][T18273] other info that might help us debug this: [ 2650.984795][T18273] [ 2650.995006][T18273] Chain exists of: [ 2650.995006][T18273] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 2650.995006][T18273] [ 2651.008102][T18273] Possible interrupt unsafe locking scenario: [ 2651.008102][T18273] [ 2651.016401][T18273] CPU0 CPU1 [ 2651.021755][T18273] ---- ---- [ 2651.027107][T18273] lock(tasklist_lock); [ 2651.031348][T18273] local_irq_disable(); [ 2651.038078][T18273] lock(&client->buffer_lock); [ 2651.045431][T18273] lock(&new->fa_lock); [ 2651.052176][T18273] [ 2651.055622][T18273] lock(&client->buffer_lock); [ 2651.060647][T18273] [ 2651.060647][T18273] *** DEADLOCK *** [ 2651.060647][T18273] [ 2651.068786][T18273] 7 locks held by syz.2.11449/18273: [ 2651.074049][T18273] #0: ffff888029dfa118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 2651.083193][T18273] #1: ffff8881472d8230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 2651.093291][T18273] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 2651.102956][T18273] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2651.112528][T18273] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 2651.121649][T18273] #5: ffff888059a64028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2651.131807][T18273] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2651.140866][T18273] [ 2651.140866][T18273] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2651.151245][T18273] -> (&client->buffer_lock){..-.}-{3:3} { [ 2651.156984][T18273] IN-SOFTIRQ-W at: [ 2651.160950][T18273] lock_acquire+0x107/0x340 [ 2651.167081][T18273] _raw_spin_lock+0x2e/0x40 [ 2651.173232][T18273] evdev_pass_values+0xb9/0xbd0 [ 2651.179728][T18273] evdev_events+0x1e6/0x340 [ 2651.185962][T18273] input_pass_values+0x288/0x890 [ 2651.192530][T18273] input_event_dispose+0x330/0x6b0 [ 2651.199292][T18273] input_event+0x89/0xe0 [ 2651.205167][T18273] hidinput_report_event+0xa1/0x100 [ 2651.212014][T18273] hid_report_raw_event+0x148b/0x1720 [ 2651.219010][T18273] hid_input_report+0x44b/0x580 [ 2651.225493][T18273] hid_irq_in+0x47e/0x6d0 [ 2651.231454][T18273] __usb_hcd_giveback_urb+0x376/0x540 [ 2651.238495][T18273] dummy_timer+0x85f/0x45b0 [ 2651.244660][T18273] __hrtimer_run_queues+0x51c/0xc30 [ 2651.251514][T18273] hrtimer_run_softirq+0x187/0x2b0 [ 2651.258281][T18273] handle_softirqs+0x22b/0x7c0 [ 2651.264678][T18273] __irq_exit_rcu+0x60/0x150 [ 2651.270906][T18273] irq_exit_rcu+0x9/0x30 [ 2651.276786][T18273] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2651.284049][T18273] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2651.291668][T18273] pv_native_safe_halt+0x13/0x20 [ 2651.298243][T18273] default_idle+0x13/0x20 [ 2651.304201][T18273] default_idle_call+0x73/0xb0 [ 2651.310612][T18273] do_idle+0x1be/0x4d0 [ 2651.316590][T18273] cpu_startup_entry+0x44/0x60 [ 2651.323015][T18273] rest_init+0x2de/0x300 [ 2651.328906][T18273] start_kernel+0x381/0x3d0 [ 2651.335051][T18273] x86_64_start_reservations+0x24/0x30 [ 2651.342159][T18273] x86_64_start_kernel+0x143/0x1c0 [ 2651.348923][T18273] common_startup_64+0x13e/0x147 [ 2651.355513][T18273] INITIAL USE at: [ 2651.359388][T18273] lock_acquire+0x107/0x340 [ 2651.365444][T18273] _raw_spin_lock_irq+0x3d/0x50 [ 2651.371865][T18273] evdev_read+0x370/0xca0 [ 2651.377764][T18273] vfs_readv+0x5aa/0x850 [ 2651.383590][T18273] do_readv+0x14d/0x2d0 [ 2651.389297][T18273] __do_fast_syscall_32+0x1dc/0x570 [ 2651.396044][T18273] do_fast_syscall_32+0x34/0x80 [ 2651.402443][T18273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2651.410329][T18273] } [ 2651.412821][T18273] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 2651.420976][T18273] [ 2651.420976][T18273] the dependencies between the lock to be acquired [ 2651.420988][T18273] and SOFTIRQ-irq-unsafe lock: [ 2651.434477][T18273] -> (tasklist_lock){.+.+}-{3:3} { [ 2651.439760][T18273] HARDIRQ-ON-R at: [ 2651.443896][T18273] lock_acquire+0x107/0x340 [ 2651.450391][T18273] _raw_read_lock+0x36/0x50 [ 2651.456877][T18273] __do_wait+0xde/0x740 [ 2651.463030][T18273] do_wait+0x1e8/0x4f0 [ 2651.469108][T18273] kernel_wait+0xab/0x170 [ 2651.475439][T18273] call_usermodehelper_exec_work+0xbe/0x230 [ 2651.483307][T18273] process_scheduled_works+0xad1/0x1770 [ 2651.490831][T18273] worker_thread+0x8a0/0xda0 [ 2651.497393][T18273] kthread+0x711/0x8a0 [ 2651.503466][T18273] ret_from_fork+0x510/0xa50 [ 2651.510039][T18273] ret_from_fork_asm+0x1a/0x30 [ 2651.516782][T18273] SOFTIRQ-ON-R at: [ 2651.520931][T18273] lock_acquire+0x107/0x340 [ 2651.527416][T18273] _raw_read_lock+0x36/0x50 [ 2651.533922][T18273] __do_wait+0xde/0x740 [ 2651.540080][T18273] do_wait+0x1e8/0x4f0 [ 2651.546137][T18273] kernel_wait+0xab/0x170 [ 2651.552453][T18273] call_usermodehelper_exec_work+0xbe/0x230 [ 2651.560342][T18273] process_scheduled_works+0xad1/0x1770 [ 2651.567874][T18273] worker_thread+0x8a0/0xda0 [ 2651.574441][T18273] kthread+0x711/0x8a0 [ 2651.580493][T18273] ret_from_fork+0x510/0xa50 [ 2651.587058][T18273] ret_from_fork_asm+0x1a/0x30 [ 2651.593821][T18273] INITIAL USE at: [ 2651.597868][T18273] lock_acquire+0x107/0x340 [ 2651.604258][T18273] _raw_write_lock_irq+0x3d/0x50 [ 2651.611080][T18273] copy_process+0x2185/0x3950 [ 2651.617644][T18273] kernel_clone+0x21e/0x820 [ 2651.624043][T18273] user_mode_thread+0xdd/0x140 [ 2651.630703][T18273] rest_init+0x23/0x300 [ 2651.636755][T18273] start_kernel+0x381/0x3d0 [ 2651.643163][T18273] x86_64_start_reservations+0x24/0x30 [ 2651.650517][T18273] x86_64_start_kernel+0x143/0x1c0 [ 2651.657552][T18273] common_startup_64+0x13e/0x147 [ 2651.664406][T18273] INITIAL READ USE at: [ 2651.668904][T18273] lock_acquire+0x107/0x340 [ 2651.675750][T18273] _raw_read_lock+0x36/0x50 [ 2651.682596][T18273] __do_wait+0xde/0x740 [ 2651.689097][T18273] do_wait+0x1e8/0x4f0 [ 2651.695495][T18273] kernel_wait+0xab/0x170 [ 2651.702164][T18273] call_usermodehelper_exec_work+0xbe/0x230 [ 2651.710397][T18273] process_scheduled_works+0xad1/0x1770 [ 2651.718287][T18273] worker_thread+0x8a0/0xda0 [ 2651.725211][T18273] kthread+0x711/0x8a0 [ 2651.731631][T18273] ret_from_fork+0x510/0xa50 [ 2651.738567][T18273] ret_from_fork_asm+0x1a/0x30 [ 2651.745662][T18273] } [ 2651.748314][T18273] ... key at: [] tasklist_lock+0x18/0x40 [ 2651.756203][T18273] ... acquired at: [ 2651.760169][T18273] _raw_read_lock+0x36/0x50 [ 2651.764860][T18273] send_sigio+0x101/0x370 [ 2651.769355][T18273] dnotify_handle_event+0x169/0x440 [ 2651.774723][T18273] fsnotify+0x180b/0x1ab0 [ 2651.779227][T18273] fsnotify_move+0x1d7/0x5b0 [ 2651.783992][T18273] vfs_rename+0x870/0xee0 [ 2651.788482][T18273] do_renameat2+0x538/0x8e0 [ 2651.793139][T18273] __ia32_sys_renameat2+0xce/0xe0 [ 2651.798324][T18273] __do_fast_syscall_32+0x1dc/0x570 [ 2651.803677][T18273] do_fast_syscall_32+0x34/0x80 [ 2651.808693][T18273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2651.815188][T18273] [ 2651.817492][T18273] -> (&f_owner->lock){....}-{3:3} { [ 2651.822768][T18273] INITIAL USE at: [ 2651.826749][T18273] lock_acquire+0x107/0x340 [ 2651.832976][T18273] _raw_write_lock_irq+0x3d/0x50 [ 2651.839630][T18273] __f_setown+0x67/0x370 [ 2651.845597][T18273] fcntl_dirnotify+0x3fa/0x6a0 [ 2651.852083][T18273] do_fcntl+0x745/0x1a50 [ 2651.858067][T18273] do_compat_fcntl64+0x477/0x720 [ 2651.864730][T18273] __do_fast_syscall_32+0x1dc/0x570 [ 2651.871663][T18273] do_fast_syscall_32+0x34/0x80 [ 2651.878251][T18273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2651.886299][T18273] INITIAL READ USE at: [ 2651.890710][T18273] lock_acquire+0x107/0x340 [ 2651.897366][T18273] _raw_read_lock_irqsave+0x48/0x60 [ 2651.904725][T18273] send_sigio+0x38/0x370 [ 2651.911135][T18273] dnotify_handle_event+0x169/0x440 [ 2651.918652][T18273] fsnotify+0x180b/0x1ab0 [ 2651.925141][T18273] path_openat+0x1aa1/0x3dd0 [ 2651.931879][T18273] do_filp_open+0x1fa/0x410 [ 2651.938534][T18273] do_sys_openat2+0x121/0x200 [ 2651.945363][T18273] __ia32_compat_sys_open+0x117/0x140 [ 2651.952901][T18273] __do_fast_syscall_32+0x1dc/0x570 [ 2651.960268][T18273] do_fast_syscall_32+0x34/0x80 [ 2651.967275][T18273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2651.975768][T18273] } [ 2651.978336][T18273] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2651.987260][T18273] ... acquired at: [ 2651.991129][T18273] _raw_read_lock_irqsave+0x48/0x60 [ 2651.996491][T18273] send_sigio+0x38/0x370 [ 2652.000893][T18273] kill_fasync+0x24d/0x4d0 [ 2652.005483][T18273] lease_break_callback+0x26/0x30 [ 2652.010662][T18273] __break_lease+0x730/0x1620 [ 2652.015497][T18273] vfs_truncate+0x428/0x520 [ 2652.020161][T18273] do_sys_truncate+0xdb/0x190 [ 2652.025009][T18273] __ia32_compat_sys_truncate+0x5b/0x70 [ 2652.030724][T18273] __do_fast_syscall_32+0x1dc/0x570 [ 2652.036081][T18273] do_fast_syscall_32+0x34/0x80 [ 2652.041096][T18273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2652.047598][T18273] [ 2652.049910][T18273] -> (&new->fa_lock){....}-{3:3} { [ 2652.055045][T18273] INITIAL USE at: [ 2652.058933][T18273] lock_acquire+0x107/0x340 [ 2652.064996][T18273] _raw_write_lock_irq+0x3d/0x50 [ 2652.071492][T18273] fasync_remove_entry+0xf1/0x1c0 [ 2652.078066][T18273] tty_fasync+0x13c/0x350 [ 2652.083958][T18273] __fput+0x8a2/0xa70 [ 2652.089486][T18273] task_work_run+0x1d4/0x260 [ 2652.095619][T18273] exit_to_user_mode_loop+0xef/0x4e0 [ 2652.102461][T18273] __do_fast_syscall_32+0x398/0x570 [ 2652.109228][T18273] do_fast_syscall_32+0x34/0x80 [ 2652.115650][T18273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2652.123558][T18273] INITIAL READ USE at: [ 2652.127883][T18273] lock_acquire+0x107/0x340 [ 2652.134380][T18273] _raw_read_lock_irqsave+0x48/0x60 [ 2652.141571][T18273] kill_fasync+0x199/0x4d0 [ 2652.147991][T18273] lease_break_callback+0x26/0x30 [ 2652.155020][T18273] __break_lease+0x730/0x1620 [ 2652.161682][T18273] vfs_truncate+0x428/0x520 [ 2652.168179][T18273] do_sys_truncate+0xdb/0x190 [ 2652.174844][T18273] __ia32_compat_sys_truncate+0x5b/0x70 [ 2652.182380][T18273] __do_fast_syscall_32+0x1dc/0x570 [ 2652.189588][T18273] do_fast_syscall_32+0x34/0x80 [ 2652.196432][T18273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2652.204749][T18273] } [ 2652.207229][T18273] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2652.215907][T18273] ... acquired at: [ 2652.219686][T18273] _raw_read_lock_irqsave+0x48/0x60 [ 2652.225055][T18273] kill_fasync+0x199/0x4d0 [ 2652.229652][T18273] evdev_pass_values+0x627/0xbd0 [ 2652.234766][T18273] evdev_events+0x1e6/0x340 [ 2652.239446][T18273] input_pass_values+0x288/0x890 [ 2652.244573][T18273] input_event_dispose+0x330/0x6b0 [ 2652.249863][T18273] input_inject_event+0x1dd/0x340 [ 2652.255048][T18273] evdev_write+0x2fc/0x480 [ 2652.259627][T18273] vfs_write+0x27e/0xb30 [ 2652.264023][T18273] ksys_write+0x145/0x250 [ 2652.268595][T18273] __do_fast_syscall_32+0x1dc/0x570 [ 2652.273967][T18273] do_fast_syscall_32+0x34/0x80 [ 2652.278987][T18273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2652.285472][T18273] [ 2652.287789][T18273] [ 2652.287789][T18273] stack backtrace: [ 2652.293674][T18273] CPU: 0 UID: 0 PID: 18273 Comm: syz.2.11449 Tainted: G L syzkaller #0 PREEMPT(full) [ 2652.293692][T18273] Tainted: [L]=SOFTLOCKUP [ 2652.293696][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2652.293703][T18273] Call Trace: [ 2652.293710][T18273] [ 2652.293715][T18273] dump_stack_lvl+0xe8/0x150 [ 2652.293740][T18273] __lock_acquire+0x2a95/0x2cf0 [ 2652.293770][T18273] ? kill_fasync+0x199/0x4d0 [ 2652.293799][T18273] lock_acquire+0x107/0x340 [ 2652.293811][T18273] ? kill_fasync+0x199/0x4d0 [ 2652.293826][T18273] ? do_raw_spin_lock+0x121/0x290 [ 2652.293839][T18273] ? evdev_pass_values+0xb9/0xbd0 [ 2652.293851][T18273] _raw_read_lock_irqsave+0x48/0x60 [ 2652.293871][T18273] ? kill_fasync+0x199/0x4d0 [ 2652.293898][T18273] kill_fasync+0x199/0x4d0 [ 2652.293926][T18273] ? kill_fasync+0x53/0x4d0 [ 2652.293952][T18273] evdev_pass_values+0x627/0xbd0 [ 2652.293963][T18273] ? evdev_pass_values+0x5e1/0xbd0 [ 2652.293974][T18273] evdev_events+0x1e6/0x340 [ 2652.293983][T18273] ? evdev_events+0x79/0x340 [ 2652.293992][T18273] ? input_pass_values+0x8d/0x890 [ 2652.294001][T18273] input_pass_values+0x288/0x890 [ 2652.294013][T18273] ? input_handle_event+0x70c/0xf30 [ 2652.294039][T18273] input_event_dispose+0x330/0x6b0 [ 2652.294066][T18273] input_inject_event+0x1dd/0x340 [ 2652.294092][T18273] ? input_inject_event+0xb6/0x340 [ 2652.294106][T18273] evdev_write+0x2fc/0x480 [ 2652.294117][T18273] ? __pfx_evdev_write+0x10/0x10 [ 2652.294128][T18273] ? bpf_lsm_file_permission+0x9/0x20 [ 2652.294139][T18273] ? security_file_permission+0x75/0x290 [ 2652.294149][T18273] ? rw_verify_area+0x255/0x4d0 [ 2652.294174][T18273] ? __pfx_evdev_write+0x10/0x10 [ 2652.294194][T18273] vfs_write+0x27e/0xb30 [ 2652.294215][T18273] ? __pfx_vfs_write+0x10/0x10 [ 2652.294234][T18273] ? __fget_files+0x2a/0x420 [ 2652.294250][T18273] ? __fget_files+0x2a/0x420 [ 2652.294262][T18273] ? __fget_files+0x3a0/0x420 [ 2652.294273][T18273] ? __fget_files+0x2a/0x420 [ 2652.294287][T18273] ksys_write+0x145/0x250 [ 2652.294297][T18273] ? __pfx_ksys_write+0x10/0x10 [ 2652.294316][T18273] __do_fast_syscall_32+0x1dc/0x570 [ 2652.294339][T18273] ? lockdep_hardirqs_on+0x7b/0x110 [ 2652.294358][T18273] ? do_fast_syscall_32+0x34/0x80 [ 2652.294380][T18273] ? irqentry_exit+0x10f/0x670 [ 2652.294393][T18273] do_fast_syscall_32+0x34/0x80 [ 2652.294404][T18273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2652.294418][T18273] RIP: 0023:0xf7f42539 [ 2652.294428][T18273] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2652.294438][T18273] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2652.294452][T18273] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 2652.294466][T18273] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 2652.294479][T18273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2652.294492][T18273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2652.294505][T18273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2652.294529][T18273] [ 2652.628139][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.634496][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.984057][T17224] usb 5-1: can't set config #27, error -71 [ 2652.991929][T17224] usb 5-1: USB disconnect, device number 29