last executing test programs: 4m2.459951033s ago: executing program 0 (id=596): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0x1001f5, 0x40000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x121000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6) write$UHID_INPUT(r7, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(0x0, r10) sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4fffeff62bc639fbb1671d9bc2084147f1012400675cb17ad6b50ffbde069c766aeeb94ed902893950090477ddda2fa723c0e78e104a8425581c7f05b4a7b3b43bf4ca3fc00fb448bdd78926c97b5c6efb4972da6ebf9d550b5441aa30abae00eb29cc413ea97efbaa1e74afb49f15000"/124, @ANYRES16=r11, @ANYBLOB="59cf0000000001000000080000001400018006000100020000000800050003000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 4m1.392234499s ago: executing program 0 (id=602): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/60, 0x20000, 0x800, 0x5, 0x1}, 0x20) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@setneightbl={0x1c, 0x43, 0x400, 0x70bd25, 0x25dfdbff, {0x7}, [@NDTA_NAME={0x7, 0x1, '(,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$kcm(0x1e, 0x1, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x8000033fe3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @multicast2}]}}}]}, 0x38}}, 0x0) 4m0.268889009s ago: executing program 0 (id=608): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x11223}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x401}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x84}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3m59.576072311s ago: executing program 0 (id=609): r0 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0) fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) fchdir(r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) 3m59.358559014s ago: executing program 0 (id=611): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x7ff, 0x1c7100) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) mq_open(&(0x7f0000000040)=']\x00', 0xdd326361bc84707c, 0x4, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) 3m57.439113861s ago: executing program 0 (id=620): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/248, 0xf8}, {&(0x7f0000000100)=""/1, 0x1}], 0x2, 0xfdc, 0x9, 0x15) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x140) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x45}, 0x4085) write$UHID_INPUT2(r0, &(0x7f0000000380)={0xc, {0xd6, "7a40b0d87e95eb27e255f047b6bd8ae505b9c950783a372f3180a19c7e0025c021c9567f838026a6adee5fcf2e609287ae401ba796be6e80039137e8e8c0bc9ffc412dc14aaf1574ff9f4e042756c0a14335c27a490758371af29cb260af08a2d9ab0fd16c7fff6afb23d5e9e91a1651a0daaf66884b5bdfd59d0427952b116664120fc2586030e1825866c4f657727b877e2054de161ff007eeeee868331edc129c4ce20ee88fec47849d083cb4a160ead8d59447791c97a2e112e63331636570e78178f589dd998cefb35f12e6b990fbe4dcdc2892"}}, 0xdc) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000480)=0xa49d) (async) accept4$llc(r0, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000500)=0x10, 0x800) (async) r2 = socket$netlink(0x10, 0x3, 0xb) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x4040, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000580)={r3, 0x48d4, 0xa, 0x8}) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0xac, &(0x7f00000005c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x1, @local, 0x4}, @in6={0xa, 0x4e21, 0x14, @local, 0x81}, @in6={0xa, 0x4e23, 0x2, @remote, 0x4}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e20, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e20, 0xffffff20, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}]}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000700)={r5, 0x5}, &(0x7f0000000740)=0x8) (async) sendmmsg$unix(r4, &(0x7f0000000940)=[{{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000800)="a1bf140f536c1576f3b6474a00c5de512dccd37c2157bdbcb85b51c4026e3f9444eb1f21cc38844f89fde9bf62b9ea4120505c7b3f2f8c182f660b656b1caa1155ee5a611f7faf625fab9bec53be37a1f56ad5cf0f14ba3aca2cb8ba9325b98fc5e37614edc8ed0394ae60da4241b6fb91f68adb0b94d31110250080a1cfa20a8770bca76b982c2d0fb7964fbc694d6c0790782085761770dcc638fd7068743f8e0fe531c6c75b45eea5908d546ad660076d8b334e22b4281851bc9a8f21027fbba29b6855123beacc2750fdbb4d104ff03222026b6a65cdd0eb039d0c95a3c02d1c50a0", 0xe4}], 0x1, 0x0, 0x0, 0x8080}}], 0x1, 0x4000880) (async) execve(&(0x7f0000000980)='./file1\x00', &(0x7f0000000a80)={[&(0x7f00000009c0)='syz0\x00', &(0x7f0000000a00)='\xff\xff', &(0x7f0000000a40)='*-\x00']}, &(0x7f0000000c00)={[&(0x7f0000000ac0)='+*#\\:{,]\x00', &(0x7f0000000b00)='list:set\x00', &(0x7f0000000b40)='syz0\x00', &(0x7f0000000b80)='\x00', &(0x7f0000000bc0)='&@\x94{-\\]/\x00']}) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000c40)=""/75) (async) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000cc0)=@sack_info={r6, 0x10001, 0xff}, &(0x7f0000000d00)=0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r0) (async) bind$inet(r0, &(0x7f0000000d80)={0x2, 0x4e23, @local}, 0x10) (async) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x18, 0x3f9, 0x20, 0x70bd27, 0x25dfdbfd, {0x1, 0x1}, [""]}, 0x18}}, 0x80c0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20004010) syz_open_dev$radio(&(0x7f0000001000), 0x3, 0x2) (async) r7 = getpgrp(0xffffffffffffffff) prlimit64(r7, 0x2, &(0x7f0000001040)={0xfffffffffffffffc, 0x5}, &(0x7f0000001080)) (async) prlimit64(r7, 0x4, &(0x7f00000010c0)={0x7ff}, &(0x7f0000001100)) capset(&(0x7f0000001140)={0x20080522, r7}, &(0x7f0000001180)={0x0, 0x4, 0x1ff, 0x0, 0xcfd, 0x8}) (async) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000011c0), &(0x7f0000001200)=0x4) (async) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000001240)) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) 3m56.65105189s ago: executing program 32 (id=620): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/248, 0xf8}, {&(0x7f0000000100)=""/1, 0x1}], 0x2, 0xfdc, 0x9, 0x15) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x140) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x45}, 0x4085) write$UHID_INPUT2(r0, &(0x7f0000000380)={0xc, {0xd6, "7a40b0d87e95eb27e255f047b6bd8ae505b9c950783a372f3180a19c7e0025c021c9567f838026a6adee5fcf2e609287ae401ba796be6e80039137e8e8c0bc9ffc412dc14aaf1574ff9f4e042756c0a14335c27a490758371af29cb260af08a2d9ab0fd16c7fff6afb23d5e9e91a1651a0daaf66884b5bdfd59d0427952b116664120fc2586030e1825866c4f657727b877e2054de161ff007eeeee868331edc129c4ce20ee88fec47849d083cb4a160ead8d59447791c97a2e112e63331636570e78178f589dd998cefb35f12e6b990fbe4dcdc2892"}}, 0xdc) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000480)=0xa49d) (async) accept4$llc(r0, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000500)=0x10, 0x800) (async) r2 = socket$netlink(0x10, 0x3, 0xb) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x4040, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000580)={r3, 0x48d4, 0xa, 0x8}) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0xac, &(0x7f00000005c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x1, @local, 0x4}, @in6={0xa, 0x4e21, 0x14, @local, 0x81}, @in6={0xa, 0x4e23, 0x2, @remote, 0x4}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e20, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e20, 0xffffff20, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}]}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000700)={r5, 0x5}, &(0x7f0000000740)=0x8) (async) sendmmsg$unix(r4, &(0x7f0000000940)=[{{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000800)="a1bf140f536c1576f3b6474a00c5de512dccd37c2157bdbcb85b51c4026e3f9444eb1f21cc38844f89fde9bf62b9ea4120505c7b3f2f8c182f660b656b1caa1155ee5a611f7faf625fab9bec53be37a1f56ad5cf0f14ba3aca2cb8ba9325b98fc5e37614edc8ed0394ae60da4241b6fb91f68adb0b94d31110250080a1cfa20a8770bca76b982c2d0fb7964fbc694d6c0790782085761770dcc638fd7068743f8e0fe531c6c75b45eea5908d546ad660076d8b334e22b4281851bc9a8f21027fbba29b6855123beacc2750fdbb4d104ff03222026b6a65cdd0eb039d0c95a3c02d1c50a0", 0xe4}], 0x1, 0x0, 0x0, 0x8080}}], 0x1, 0x4000880) (async) execve(&(0x7f0000000980)='./file1\x00', &(0x7f0000000a80)={[&(0x7f00000009c0)='syz0\x00', &(0x7f0000000a00)='\xff\xff', &(0x7f0000000a40)='*-\x00']}, &(0x7f0000000c00)={[&(0x7f0000000ac0)='+*#\\:{,]\x00', &(0x7f0000000b00)='list:set\x00', &(0x7f0000000b40)='syz0\x00', &(0x7f0000000b80)='\x00', &(0x7f0000000bc0)='&@\x94{-\\]/\x00']}) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000c40)=""/75) (async) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000cc0)=@sack_info={r6, 0x10001, 0xff}, &(0x7f0000000d00)=0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r0) (async) bind$inet(r0, &(0x7f0000000d80)={0x2, 0x4e23, @local}, 0x10) (async) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x18, 0x3f9, 0x20, 0x70bd27, 0x25dfdbfd, {0x1, 0x1}, [""]}, 0x18}}, 0x80c0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20004010) syz_open_dev$radio(&(0x7f0000001000), 0x3, 0x2) (async) r7 = getpgrp(0xffffffffffffffff) prlimit64(r7, 0x2, &(0x7f0000001040)={0xfffffffffffffffc, 0x5}, &(0x7f0000001080)) (async) prlimit64(r7, 0x4, &(0x7f00000010c0)={0x7ff}, &(0x7f0000001100)) capset(&(0x7f0000001140)={0x20080522, r7}, &(0x7f0000001180)={0x0, 0x4, 0x1ff, 0x0, 0xcfd, 0x8}) (async) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000011c0), &(0x7f0000001200)=0x4) (async) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000001240)) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) 2m23.468241293s ago: executing program 5 (id=980): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) 2m22.248888848s ago: executing program 5 (id=985): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1ff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xc6b2, 0x0, 0x800, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x1, 0x5, 0xffffffff}, 0x10) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0x11, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0x3, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xd, 0x8, 0x8200806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x89, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xb6, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xd, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x200047, 0x4, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x2000003, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x6, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4ed7, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x4, 0xc2, 0x6, 0x3, 0x7ff, 0x12b, 0x1, 0x1, 0x1000000a, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x90, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x54, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x2, 0x60a7, 0x4, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, 0x0, 0x0) pipe2$9p(0x0, 0x84800) memfd_create(0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) 2m19.596641617s ago: executing program 5 (id=997): r0 = socket$netlink(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}]}) (async, rerun: 32) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x4000800) (async) r1 = socket(0x2a, 0x2, 0x0) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x4004510f, &(0x7f0000000380)=0x2) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000002b60a15b00000000007b9922e37aabddabf7bf83b249323c11f85cffe11ce1679153096d4e6bb9763fff0b2129399d2bfe4cf2ed40488c2dcea30688e83614f2c48a7c8f6a3d2a8153056e391d0ec9c90fd4859870bffc1fef88d1b0513961d08eb30555"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) (async) r8 = socket$kcm(0x29, 0x2, 0x0) (async) r9 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r9, r7}) (async, rerun: 64) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$getregs(0xe, r10, 0x3c, 0x0) (async) sendmmsg$inet(r8, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="69bc", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000008c0)="ea4be6", 0x3}], 0x1}}], 0x2, 0x20000085) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x10, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x7d}, 0x1, 0x0, 0x0, 0x4020080}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}}, 0x24000000) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m19.249434981s ago: executing program 5 (id=998): socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x27) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x88b, &(0x7f0000000240)={0x0, 0x9, 0x4, 0x2003, 0x276}, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000300)="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", 0xfc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1800080, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m17.234299719s ago: executing program 5 (id=1005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfe4f, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m17.141389822s ago: executing program 5 (id=1006): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009, 0x40010, r0, 0x100000000) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="9980030000000000280012800b00010065727370616e00001800028004001200060011004e200000060010004e200000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0xdc, 0x6, 0x3, '\x00', 0xa6}, {0x9, 0x1, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0xc, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0xa) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e310000000000000000000008000a00", @ANYRES32=r13, @ANYBLOB="f5ca61890623b8e5c07473c01ef9e19c6fc1e30e4bf37a4b05fdfc71ee98b278b6dddd83f386f47aae45e3c892123e86b8bdb2e4a50b66161665869e588406fd5b5b6e47685e8b8760e109ba8d921b1876edae706cfbcb7c7c52d9332a9178479dc096ad036ba7e9aeadb45426e6c0e02d787c90fbbae0f2b072cca7a229ee661d4ca402cc07f7f207d9c01bddd0e15fadff6dd17686aaf6cfe08825e5ffb64a099295c88fd7bd39ed074c6e0df1cc86da36481a894d35ebc14ca71c8651db456956abc894c4752679b8b0f82a9259457f98bd5654b280a039ad44960937afd58e1c89cfa7b21229b742312400"/248], 0x3c}}, 0x0) 2m2.619674426s ago: executing program 33 (id=1006): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009, 0x40010, r0, 0x100000000) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="9980030000000000280012800b00010065727370616e00001800028004001200060011004e200000060010004e200000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0xdc, 0x6, 0x3, '\x00', 0xa6}, {0x9, 0x1, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0xc, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0xa) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e310000000000000000000008000a00", @ANYRES32=r13, @ANYBLOB="f5ca61890623b8e5c07473c01ef9e19c6fc1e30e4bf37a4b05fdfc71ee98b278b6dddd83f386f47aae45e3c892123e86b8bdb2e4a50b66161665869e588406fd5b5b6e47685e8b8760e109ba8d921b1876edae706cfbcb7c7c52d9332a9178479dc096ad036ba7e9aeadb45426e6c0e02d787c90fbbae0f2b072cca7a229ee661d4ca402cc07f7f207d9c01bddd0e15fadff6dd17686aaf6cfe08825e5ffb64a099295c88fd7bd39ed074c6e0df1cc86da36481a894d35ebc14ca71c8651db456956abc894c4752679b8b0f82a9259457f98bd5654b280a039ad44960937afd58e1c89cfa7b21229b742312400"/248], 0x3c}}, 0x0) 1m58.605578585s ago: executing program 1 (id=1083): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) socket(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000500)={0x4009, 0x400008, 0x3, 0x797a, 0x3, "00a6400d00000000000000f8ffffff00"}) socket$key(0xf, 0x3, 0x2) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000380)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8200e100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x280449c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1m58.250516913s ago: executing program 1 (id=1084): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0x1001f4, 0x70000}, 0x20) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (async) r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e30400bd86dd420d000000d75849", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x80003}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x2e]}}, 0x0, 0x46, 0x0, 0x6}, 0x28) get_robust_list(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) 1m58.048780662s ago: executing program 1 (id=1086): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) unshare(0x20000400) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x1, 0x0, &(0x7f0000000100)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x8}, 0x18) openat$rdma_cm(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x500}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) close_range(r2, 0xffffffffffffffff, 0x0) r5 = memfd_create(0x0, 0x4) dup(r5) syz_clone(0x54480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x18a7, &(0x7f0000000440)={0x0, 0x7495, 0x1, 0x3, 0x28a}, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000000)=0x1, 0x0, 0x4) syz_io_uring_setup(0x6bad, 0x0, 0x0, &(0x7f00000003c0)) socket$netlink(0x10, 0x3, 0x0) 1m54.974206161s ago: executing program 1 (id=1095): r0 = socket$inet6(0xa, 0x2, 0x0) (async) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x1000) (async) syz_open_dev$dmmidi(0x0, 0x2, 0x93de84e048a4cb8f) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) (rerun: 32) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) (async) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0x2, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x6, 0x1, 0x1, 0x0, 0x7, 0x40400003, 0x8c, 0x1007fff, 0x200006, 0x5, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) sched_setaffinity(0x0, 0x8b, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff4, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) (async) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff4) getpid() mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='jffs2\x00', 0x100800, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='ext2\x00', 0x400, &(0x7f00000001c0)='+{$\x00') (async) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000040)=0xad59) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x1, 0x3, 0x1, 0x8, 0xffff}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x1, 0x80000, @local, 0xf}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYRES16=r0, @ANYRESDEC=0x0], 0x18}, 0x40048d0) 1m54.781543469s ago: executing program 1 (id=1096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = dup3(r1, r2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x9, 0x80340) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r4, &(0x7f0000004040)=[{0x0}], 0x1, 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x7fffffff, 0x2, 0x5, 0x12c00, r4, 0x6, '\x00', 0x0, r4, 0x0, 0x4, 0x1, 0x5, @void, @value, @value=r4}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2043, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x6c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x28}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) 1m54.61743107s ago: executing program 1 (id=1098): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_int(r1, 0x0, 0x21, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a41c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78a57a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420800000000000000c1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1212e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b8393dee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x104b) 1m40.238693472s ago: executing program 34 (id=1098): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_int(r1, 0x0, 0x21, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x104b) 4.996675548s ago: executing program 6 (id=1557): prlimit64(0x0, 0xe, &(0x7f0000002040)={0xc, 0x8b}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xa713, 0xffffffff}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001114410029bd70000000000008004a0000000000080001000000000008004b001300000008"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r4, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f00000001c0)=""/77, 0x4d}, {&(0x7f00000019c0)=""/4096, 0xfe9a}, {0x0}, {0x0}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000400)=""/192, 0xc0}], 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="18000000420007010000f9"], 0x18}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)=@mmap={0x100, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}, 0x36d}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r8}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000080) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) 4.962827045s ago: executing program 7 (id=1559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000029000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="00000400000000000217b93031000000000000009a67ee1040dfc30000956f1442a7f3593cc4d58676fc071f00000000b1d1f02feb4d17eaad33b893b95402ef3ccfeb7b447e01195b6bbfabfc2b88def82c11586a8ad3d975c797332093627c2a25d60000f2", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@iv={0x90, 0x117, 0x2, 0x7b, "2aff84e950b563656b60d5bb6ab24f3f9679941122db790d4737b2334b8854943ce8952cd85f6d298833b1832560c092ce83a9f785d48fe34273b1841f9413cd12c2058e86fcb01f5ebbfe09cf7c7b124095259bb7bd90f7841cae359c2b19a581e5a43d8ea826328439999c7f5e0d197d43c4fadf66c714d9dc3e"}], 0x90}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d35039a0db14b28f934f10ba53d85e591db18684e050068d37a0e5f4fc6b2", 0x49) 4.423224706s ago: executing program 4 (id=1561): r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0) getresgid(0x0, 0x0, &(0x7f00000016c0)) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000380), 0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x43]}, 0x76) getpid() r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r9, 0x1) poll(&(0x7f0000000100)=[{r9, 0x84}], 0x1, 0x3ff) 3.62443383s ago: executing program 6 (id=1562): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) close_range(r0, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (async) close_range(r0, r0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) (async) 3.539125311s ago: executing program 7 (id=1563): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) (rerun: 32) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xff, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="d95839027eb32eb1c65b6daef702bffeba43e38e69de94dc739a8754fcc2b526c12c960b8d45dbfd5d4dc786ca657615776d8dc8ce23be9db45aaad73898e3ee30bea15511a62ba20a0f1b59692bcccefe6c4be06244427d6660eff172d6ce257da6512894c8f2ec99edbd8eab84603c3a242fa5f75148502986f285549c2fee1f2ad82cdefb3bf90d1b7e1265e1521399943fee34205699af751f9624e1a4dfdf6be8b927ee65cd1d5671a3f9f53afe3125e9443ed7e3343ab0ed9fa90dbc061aeb15359a67eed03391daac387eaefc3a7da34e1e093fbcc9f1bec7a69a5b41eb244e0ba179bbf3bc34d4cf547767468fb8b6d98a194f0f77fdeb081ed06f", 0x0, 0x101, 0x2, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x28, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xd1, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x24, 0x7b, 0x1, 0x5, [{@private=0xa010100, 0xf3}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3}, {@rand_addr=0x64010101, 0x8001}]}, @timestamp_addr={0x44, 0x34, 0xf7, 0x1, 0x7, [{@rand_addr=0x64010101, 0x6}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xfffffff0}, {@remote, 0x7f}, {@rand_addr=0x64010101, 0x4}, {@remote, 0xb}]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x3}, {@empty, 0x100862}, {@multicast1, 0x6}, {@broadcast, 0x9}, {@local, 0x5661}, {@multicast1, 0x4}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x1b, 0x4, 0x62, 0x5}}) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000540), 0x4) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') lseek(r7, 0x1000000, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)=@can_newroute={0x290, 0x18, 0x200, 0x70bd2b, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x6, 0x24, 0x4e, 0x40, 0x9, "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", 0x1, "b860fc74cd2b70e80b86f3715dbfb4de44a47dd7"}}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}, @CGW_LIM_HOPS={0x5, 0xd, 0xe}, @CGW_CS_CRC8={0x11e, 0x6, {0x75, 0x1b, 0x51, 0x8, 0x9, "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", 0x1, "1e0dc0599ba058e6d173fcca5e15736d35709b27"}}, @CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x1, 0x7, 0x3}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "37201d263fc15f9f"}, 0x1}}]}, 0x290}, 0x1, 0x0, 0x0, 0x24000891}, 0x40008d0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.468909293s ago: executing program 6 (id=1567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x2}}, 0xa) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000440)=0x1f) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)=0x7fffffffffffffff) close_range(0xffffffffffffffff, r2, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="44010000", @ANYRES64=r1, @ANYBLOB="000225bd7000fedbdf2506000000040009802c000980080002000800000008000200030000000810020008000000080001000600000008000100de070000c40005801c00028008000400d504000008000100130000000800020000000000080001006574680007000100696200000700010069620000240002800800020000800000080003000f2900000800040015000000080004000800000004000280070001006962000008000100ff03000008000300ff070000080001001500000008000200ff010000080001001e000000080001000800000008000400040000000800020000000000080001001a0000000800030003000000100002800800010008000000040004001c0004800900010073797a30000000000c0007800800010013000000100007800c000400ff0700"/318], 0x144}}, 0x4001) 3.413684759s ago: executing program 4 (id=1568): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x4) (async) close(0x3) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x2000}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.413042705s ago: executing program 7 (id=1569): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x690240, 0x0) fcntl$setsig(r0, 0xa, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f00000001c0)=0x3) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c000000000701010000000000000000030000082c000780080002400000000008000140fffffffa080001400000ffff0800024000000004080002400000000908000540000000012c0007800800024000000006080002400000233e080002400000001108000140000000b708000140000000010c000240000000000001e6000900010073797a3100000000"], 0x8c}, 0x1, 0x0, 0x0, 0xc805}, 0x4000) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe961009"], 0x0) 3.372662393s ago: executing program 6 (id=1570): r0 = socket(0x2d, 0x80002, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYBLOB, @ANYRES32=r1], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r3) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000041f1ff0050001100fc020000000000000000000000000000ac1414aa000000000000000000000001fe8800000000000000000000001b0001ac1414bb00000000000000000000000000020000000000000a000a00a09d099772a12e79b5ce20bb1243f9f8a940619175e7da002f40f5c3e08a65c76cdb0b86be9f3140b389c936d5e23cc709771a784a27ce4de9f199a637e9e2fd0cfe498e992243a8c44fc9847c3bf204b619db8626252f48bc7f62639fcd71"], 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x4001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x1f, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xffe4}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$sock(r4, &(0x7f0000000240)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000480)="ada1bade99b18b1deaac61ee7383c6d999836c8ffe32c6190094ae77f9617ce9ad41a3ac12aebf9c3933e7894d9f89af37c930df3865b8aee81fd51860385434ef3b27b58143ef401aaddf07abd974699d88", 0x52}, {&(0x7f00000001c0)="cc39490352d54a6d81d4863b04bde4a9b00bcfbf7a911583b07aaac3201251ef03f018090f729a0d8ad39236a5c357ae08893b420f17578cdb2aed", 0x3b}, {&(0x7f0000000680)="bbe68053ffcbdda4fd828904afc2137702489ba828b79b31080c468ee7ab8554d45866e2fa9112d491d6b3395747a83bc87521c6a47e0136b86b6eeef44c8396dabbda4243f60f26fb559d1a2f73fc2e9425f58d564abcd7f7f66eaf6a08bc05d7dc72b8953959326dc4ea9a8f3a81b714e6ade046ede7dd07e7338ded7fd370a46809fd7ea6ef3b8f755b539ab85cd7", 0x90}, {&(0x7f0000000580)="b51e896e57d0e4db37e12fe3c5065c8f3008b3ce3d9f1b8a4c01f4f435b1107dfea8bffbe1f7eddcc8ed84c2def47217b5ad028997657eaf8909d6a2795dc7f77fa2ecaa2eb68cc8fd6a06a00fdc66ee358f4e", 0x53}, {&(0x7f0000000740)="413322c4e16a917aaee399924a26be7fd4f2f4de5ef5ae3ed4bf0971811ac2b402068a55f177e1881ecf80343f1e36911432ad487036babb884d51d9c707cf585010cc228af2f5d907d75e9fb03d3b3635593aaa0b023cba58eea0fcdd5d8224f134d1300a62d430c38d2ce8553f996a5560a1440dfd947f916e731487d0", 0x7e}, {&(0x7f0000000800)="a5cc63816f2ed89ea8c85294a89a66150d717aa6382bf439bc79160dc6c93f4b067eb1bb4aa54cbed86ec13596028f25baa26b6aa397e8e2e64100409db49d26ea33f0e12ff578e21be3670260b5b46669b922a0d898ba0817a982b1cb767979a1ac8a56608a3974dc221bd20dadbccfefa20d0c3ef0e11ed658705a39dbac2aa2da42c3f03bd519fdb400b2216b877d9052b14fc643d2e67e15faa78a7337ce9f", 0xa1}, {&(0x7f00000008c0)="6ae3e6ebb84b7d76033ff5d1ec1d55581883871469a412e9b9e84d2d1a646b931c1053581d5209caba90429c43e5dcf8ef67ae22d749c109ec7050cf59eac2e129e20cf5b50e001c22d9fa9b1ebbb0168cf8c5fa3d1cf35a1064578400dd1a3a972bafb9d926b495dc8521f779", 0x6d}, {&(0x7f00000009c0)="c15d7a4f75a63d4b911a0b90f0a836d2f3f8efa3569cd08afe225f7cb341632e4e6f03cec77502d76f77f7f9ac938173", 0x30}], 0x8}, 0x4008811) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 3.364839535s ago: executing program 4 (id=1572): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000006119600000000000950000000000000000000000000000397379d45e2c4d63d97563073ab294178c19bd12382b54bb4220e0cb1226592f12f39af0bbf15ce2edb8220219a573e849746a27d649bc4d1c1c64e998c98593ed03"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) sched_setscheduler(0x0, 0x7, &(0x7f0000000040)=0x2) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r5, 0x3) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r1, r6}, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$netrom_NETROM_T2(r8, 0x103, 0x2, &(0x7f0000000380)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x0, &(0x7f00000003c0)) write$P9_RXATTRWALK(r8, &(0x7f0000000000)={0xa, 0x1f, 0x1, 0x4}, 0xca80) 2.466701028s ago: executing program 4 (id=1573): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f000000ae00), 0x2, 0x800) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000018c0)=""/4102) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) preadv(r2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x3524, 0x20, 0x3, 0x201, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000080), 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002000010000000000000000000a00050000000007010000001400110076657462305f746f5f627269646765001400030076657468315f766c616e00000000000014000200fe8000"/86], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x0, 'ip6_vti0\x00', 0x1}, 0x18) 1.997198234s ago: executing program 3 (id=1575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000240)=[0x1], &(0x7f0000000000)=[0x0, 0x0], 0x0) 1.963481854s ago: executing program 3 (id=1576): syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x140}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) gettid() socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x8, 0x7ffc0000}]}) 1.613310197s ago: executing program 2 (id=1579): socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000000), 0xffffffff) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYBLOB="00003b2b92af3fa0a8aadf8eba6493f75266", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020001c580000000c0004400000000000000008140000001100010016000000000000000300000a000000000000000000000000009adf11c0edf437143ea1bc0557fd9da671f791bcf1937286e743e6bac93479627235f072445290b1a838c0a06ac53da96daa62f043fb03ade394ad13c6d4b043bb82c27afec284ec23e31d81a039e69c0f2fc771056fb710e3574797542a424a28c2645556d9c45a443beb5a7fa0c70f4e56d414df3a68dc81daf22ef3a2e021d2e2292d4b83b41acf4b618734c973ef4f2e22e9460d0cb73c28823efebb65037830467c235ec14b339cd6c92d61295aa561ad3c0195f57b1148302ad0e2ce923400000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (rerun: 64) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) pipe(&(0x7f0000000000)) 1.329082818s ago: executing program 4 (id=1580): syz_open_dev$loop(0x0, 0x8, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x3) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket(0xa, 0x3, 0xff) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) setrlimit(0x4, &(0x7f0000000000)={0x6bd7, 0x2}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) (async, rerun: 32) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async, rerun: 32) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000000000000040000000100000000", @ANYRES32], 0x50) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x50) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x1) (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c014) (async) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.077575668s ago: executing program 3 (id=1581): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000380), 0x0, 0x1, 0x3, 0x10) 1.072741147s ago: executing program 4 (id=1582): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x400, &(0x7f00000003c0)=0x0) io_pgetevents(r1, 0xbcb8b23, 0x1, &(0x7f0000000040)=[{}], 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x1]}, 0x8}) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x94) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.026384836s ago: executing program 3 (id=1583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400ad8df47d85b2", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0xc, r5, 0x1, 0xd7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 981.674079ms ago: executing program 6 (id=1584): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x11}, 0x60) listen(r4, 0xf5f) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x100000000, 0x9}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 623.83024ms ago: executing program 2 (id=1585): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x406000, 0x0) r1 = fcntl$getown(r0, 0x9) prlimit64(r1, 0xb, &(0x7f0000000040)={0x1, 0xffffffff}, &(0x7f0000000080)) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c, 0x0) sendto$inet6(r2, &(0x7f0000000140)="e31299f6cfac41990c9d44089a938d4f647118f4e471a897a36ebc45bde8e2a1", 0x20, 0x8080, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @empty, 0xe}, 0x1c) setrlimit(0x6, &(0x7f00000001c0)={0x7fffffffffffffff, 0xffffffffffffffff}) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000200)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x40, 0x8, 0x4, 0x1, {{0x20, 0x4, 0x3, 0x0, 0x80, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast1, @broadcast, {[@end, @timestamp_prespec={0x44, 0x2c, 0x36, 0x3, 0x3, [{@multicast2, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1, 0xc}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x9}]}, @lsrr={0x83, 0x1f, 0xec, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @empty, @local, @private=0xa010102, @private=0xa010102]}, @timestamp={0x44, 0x20, 0x67, 0x0, 0x5, [0x0, 0x3, 0x5, 0xc, 0x6, 0x6, 0x80000000]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x5, 0x0}, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x28, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x2, 0x1, 0x0, 0x8, 0x5, 0xc, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0xe}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x4, 0x37, &(0x7f0000000800)=""/55, 0x41100, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x5, 0xf, 0x93d1, 0xffffffbf}, 0x10, 0x25c54, 0xffffffffffffffff, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x0, 0x1, 0xb, 0x6}], 0x10, 0x6}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x3, 0x9d, 0x1000, 0x4442, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x3}, 0x50) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000ac0)={0x100, 0x80000, r2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x19, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0xc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @generic={0x0, 0x1, 0xf, 0xd, 0x1}, @call={0x85, 0x0, 0x0, 0x2b}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x200, 0x47, &(0x7f0000000440)=""/71, 0x40f00, 0x0, '\x00', r4, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xa, 0x8, 0x800}, 0x10, r5, r6, 0x7, &(0x7f0000000b00)=[r7, r8, r9, 0x1], &(0x7f0000000b40)=[{0x800, 0x5, 0xa, 0x4}, {0x3, 0x1}, {0x5, 0x1, 0xd, 0x8}, {0x2, 0x5, 0xd, 0x3}, {0x1, 0x3, 0x4, 0xc}, {0x5, 0x1, 0xa, 0x5}, {0x5, 0x4, 0xb}], 0x10, 0x4}, 0x94) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x6200045}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r11, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x61}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000e00), 0x7f, 0x40) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000e40)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x4, 0x7, 0x6, 0x8, 0xc0, 0x20, 0x80}, 0x9c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000f00)="907b86c1ee970227c8e9e85ea5b71171", 0x10) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000f40)={0x7, 0x4d, 0x2}, 0x7) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), r10) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f0000001300)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f00000012c0)={&(0x7f0000001000)={0x294, r13, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xed}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7b}, @TIPC_NLA_NODE_ID={0x25, 0x3, "1bf85d5a095d93bbbfc3e271d1047a07a703f966c10c8ef1a028cd93ae1a6f3df4"}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8c21}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1a}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda90}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) writev(r9, &(0x7f00000024c0)=[{&(0x7f0000001340)="54abe894cce89d6403b959c30e54e4a40392d957bcddd11545b4cc89dc3c3ba3834ede96619ab15525ad7dc91e572fb5376d1e7b5518545c2b83f6b6f252592362e333ae18591635cddb12ee6abbad578c0f1b4282347ab76a86124ebf8a32a934a0848b840db403eddecc3fbce6600dbc96c1137526dbd0fb", 0x79}, {&(0x7f00000013c0)="fa2f5458e4d29c471b25689e8d94cfcd41a7d59130445683ddc3c7eddaf4c90a3708c4f3cfb1f4ba9065147df9d2577ac4394041be3509678de9995b60ecd6fef30d0e40b61f8629a7db794209b4d3242c49d181f221745f309d3268957144e3d0aad2ea6aab1c83ebff78ea20d9cf293a1246142fd09b0c6193d370edc4f8337f1ca67644cae2c179ec9431e6b65893277879515b513ae9ab90b8db93746ec59baf9318ddf2d61e0464ecfa99607a7b55b089b0129689ff6c47f29fd775465d5c463c6903eb2e5702655acd500361727c0b12327f080db91749f707db01fbfa2f29576a385b4b166d2175def9e8f897e43d8c77acd7d7107db788401140c4ff2eef890bc9edcabf7074f756691eb64b013b20678717e34f5a578c82a4ee0dea51cb9f3691038995c5ea2bb47b0650c38ce3e01d28571e6aad3bec51d3e21be9cbb38c9054d8ff48fad3c81696babd3d46517467cc5f7ce0293ee2f5036af89e7f26d52c7a14d057cc5158f29e0d1552d4206d9c291f26fd81dbf8ea0dee65c78be04ac5f24f4b05d5e0ff77ceeb6c08f8c8de75545de984caf7e143b3bd852402d6e374a0efe681bc212f46b6a53d7d80f6d1d747162c43875e3d3ad864020425c7d6cb2204934c1628864102c31b0c076f7e6e29ed209cf9ac09dded04ed4d35068467de679ddaa2b4aefac034c4094e13cd5afd12b208f43f36bb93c671d4d41fe10fc68a6d38aa2e0dadee8f0ae3565da4c078e8681fd8c4d023d95fd5a99d5a5f824bbbc5fca8708c595eb6dc77a5fe222c45ad450cc93fa2953b8d540f4dbf8d14bdace3a277623fd92fa021d8d02cc1492616ec746ed6a4c3954e27b76c9ba9583969a6980591dd6f8ad2383a4654b70570d097ae1a943e32e667184c5b99143d4d1ddab7639659f2bc65682901cc2209fbfbb7d9ee6e3b6063a4e95f1606099594da86915f4339ebf787e1b16ed357d596154e171fef89c5b8fa890d2752e13c826499184200495e13a78e3d166cdb069bbd11f4e0ea987405faf79b29ade5c3380cae9a898dddf094459814c6ae58e0b81951486a5a8f416e2ef95fb8e22cab4cd431b76ce039d01b0e42c7855ecff3a5508ad97f9dcee42334ec672993c6a8aca7406b84339221263ad251b4af8dde8a5974dc459f77675a59b00ba0fd695b8790c3b32d3f1e9c7e3325384dda3739ec94bd605a00a3511af49f50c75a388b36f1d55ce8662c0de24c9928f38c0331701db801ef9114815d97bd8a05e58a4909fa665d984648ba38372aa4303bb63c946c8888f24fe72dd4d84f34dd8e5c76e1fa43b1adb785d21b20e230b18a6ed6f411bbafd041383d55f02660d743ffd2e9676c1a6978e227d2cd4d5e2d95ef0a5ba9611bf33bea564d786f191d6131cd55e6c3e7d5e062675f7203ef6308233920229078916bd090ad196a9aeaa923f8cf9f9a0e699aa146e7abab7a568ab973c17917b816aa1b12341d12688e5b29f2f8399ca10206ded1a83e41f4d6a801ef95cd443a178e1080251388075839176b4627331691f39a379c1e63ff1f6e57676d3a98b7f364fbb163f008f9582ee9fdc459cc678f67ad91e025d7f6ad6c1bb0749e10ad21b989066cb7f53783520e4eec351961717beb73383a0f63882812d0f64f06309d3bdb83478d467864bd5073e8780e00ea312917cef6b01f619ed7838cce6fb288517a1b2142d84ecc5be3a73f9ba9c041adb1c20f8e2a6cb58f496fa3811587aea8aac98fea19a8f741d23d283660c5b24d2da7bcb6a271e63f6a2cc80dc0b2561040c50c49d219f66d9db714a7b4efbbcb56c8188fcbd86d427eb90d1db7b9fdf25f594171b9d3cd37c63cd85b9159b85f092ebac35a29d46a62c4af0a2d7d8b9a7be4cc9fd96ba2bc6b3afb4367cdc7f47ea4c6bd274eb6b019d08498709d7121350866957e1ce14b19a43c9ef105982d3516bfa5b78d5728218f4d4f334c055e4cd0c6cd8c00897414c758b40a95e0b4dab0413e08aae6103199a761125f01e9e346cde846b060f2839960ba033470bbd859b76dc694529bf73c08a5d869008d82440b6e46787a99290e74612b5818b45e5c67ba6accdbcf8c53c5f89c9852562e0f5acd182f5240d8526a0adfaecdf762e300b98f49e3ad7d67a9b0be5314997b027f0beb7fff42b64c270cbe6d69dce35be6ee7a83a3644391c8cf578431f408acb83ef0a21b6d1568207a382031df1a32268ecfe668bc4222e63a778594a2b656a72add788a0537b8ab73f1035dee01da56cf8e3d73c5f58b5d8cbbf83898852bbe305712f8d9a9e96f1fa6d93813671db41110d5a69bbfdb1d545707b0b3406a34d20d45e9801a1ac8eaf03553e32ff40f07c163a88b63aa949cee2123f135ffc4c94661e4fe7c77c1da77a3539b207f6530e8651eb85af1d3f972f6996b6d3b49bf661fc23c99bc96d40d67d0ae1f6369e264f4e595499dac850f4c12a2bbca145df1ed1eea1e7889de590e143ec967496930a0586410cfa1703a7ceaa87ba9714732f406342166dfb8b0a9853eb049f8302b4c1dd7c6421a97be47bfe4f7049dbf3d47df870c822d72909931e2b7183ae2aaa53164ddb8ea3501e7c8dca8a91c4037c6283af96a5846ff29d3c24a720d499bc3b8f53200c56b2548149eb30d2428e884ab107c0a33117b77c48f609eba8908c5557792b60727d9a3cc986da88e6de4dd0c6dd79737aeae0f66b9e1fa2d8ffbe1b04b45ca24f6677cd0cec8fc93e973631f14c55fedfc69b616a296fbbdeb18fc11fece00103178e9c588a48615e34cc9b1375c9790c5ff0a24ce822de1014dbe47e4cce60bc92112c61d7ee531f6e2ed68fa5ca252b61aef01ec52fc091c08d8fe5083c6d99c3e5af7f784964f90199093dbfd7189a5a5ab38c202331638db848ffe70290cb821b0370782bbb83fa8a5e547e53ba445f0d7fb1d415ebf088b18176bdbd17ac90be2ef60f111e55212fde50ab747c2c9e4cedf2bc0a963ac891a74a6a2a31a179a14c34ec4c97df8c89b056e415a0c83d98f24f7f999fc9fac8ce8eea245d98a95ac6ccc3b19dcaa2c24336be0b3313f470b83e6ca94375e544d9a4e8fbdd2af3443b21c1089240a0886e7e703f03d15fac56ad2a81ecb2227e62815a023eba8f5a24e9ccd542b15fe11d5bae73d1fb60ab1fd2ca6589825b8f36571137aebe7cdafbd6438b7ffee47373f61fe95d1fbff74f6f6118eedf2598b78cba4f13e41d83ee136ec16c64f7decd67ac845a1514091f61877e9c738f63849eecdd16bfb9c3f16a5fe4cf27d579dc129ba06fe1a20f25e566beb9e1c338e3a2fe592c0b392027ab7e855bcb0f6aa0335e465b0d4d71f20b8c73b7b16f36a61f6d959b8fd46ce775ad432f095a0904f950d815bcac01f527398bcfaa944e672ccb15cf2cbca98731bfc975939e68b13f571cfb76923c78f23e575fc87505e881023cbe9322710e72c8fe6d46e247d8793b9e804d1d80705fc8f1dd3c0cdc07c1ae8c95c635e0e631ee0cd47b4a7d2f7a51fd3346720b932af3a88de34db54886871ee65f85ad7496ad534c67d03c5603c094a2999f733699f5f6546fbd0f783842b238c3978cf42bef2a5786056789f3e2b91eda8f7eee07731aa02df4b8feaa47bd8761a3b05199a9f8ccd1301a770a5855d976b06c00d99d2df4e403c9f828e0fc5d01f2ce60fdd3c9ce2810a9b8897d13849daa393efccb4f172c489f4fa87fcbe01ee2fcf17a54f17cb95a787465f6863fe5da87e90798deb6acb1a308ebfbf19397d7bf726d42f50fca24e2a2e570756a2e3a3c6b6b47abb9fe452fdf7efc6ec99c24c13288135cac80e8436684058e695cd01063ba8d5f3935d8998232a37d3ff9ee59c56c9c60d169b5bd32fbd75f54c35f282065db8dc6cf44090c09aeaf85eca148c866dc817330a580ebf681ba22eac03ddbd13fe0c921aca9d14effadbf95ddca9507a2984704e82b8df8775693986fee2a2ebddbec89f477f8d3f62173ae24b468aaecc5dbf01f02149d2e29b8e81cb3831bff237b286076719831f7145641ac3254650d2ce95787c018123e0c1cf9323dc216c298f3b0c83672c890f79211985cadce37b41f0b1606fc2cc9d10417f25e78f8e164fc1cdf0751431d35f9a9cbf248fc68069c269db5948c5bd33596fda4e92c0ce6c2f30895914eac70a35e51d7e9f0a366b958e5533dc5477c070e26dcbefbcb1e1bb79e62c429910e4db9c786110dac58833edd82e30ac929ebfbd370fee86c0b65a82cd9fe11a68c117ce659d02f5111552805485316aa1628292a3af6be3c49e8368e11fe33405d556bdeb094dfad27bb7975231cdd8feadd264e1a5e097fc453d0ffed2c750d1cc9795620182b825726f723f25ac13977e5a9c7df6c436aa919b557889bbc14794e85814a207f4b8b4b54b67a322cd480a3c98846385ac97ce9e8cfb012ca4b0193a9fd5e2cec6e48ae5b4acc293bd77b87110f9fcfb87e65a8c7f9c04ea9a43b74b4799bf861b5b2a51693d95fb71c83e655baa59f76e14c1a661eb6a690e96dd60407fb78a2ea24f77cbb9212b4c33a2aec9d5ea32917cfbf58a88dc2f9a5565ef40f9121b0788468842c04594a5976e8d5a2cf2effc4490a2637b98ee4ae51019b7e40b3f3f82630584b125a637bd4b64de851a18bd94f5685077444b1d0364ae95ba24e536abd323b9d12177c9c9d2d65cf993de408d300450bb7c68a1d79c926ebaab6bedad98a0113fbc48bc9d07be199bbfb95e2419b3ff33da0fa5716192e722eabedb6ab4e9a915e1a55ef0f498c61628a11387d37f5260579dfec7a6e7e5e9fe8c0a1ce650576b827696dd37181d41c0bf8d8e84d26542eb24aaf85a03b89aa7c95846e84aadc96ee78629c482847959b2becee132b882c1b56cb72c592980f0a9ca3daa3923626d8e4ad06571831ca024b4bddd5bfa32e5aa3bc654bb3393b2ceadd26cac55fa4ba9ccaa97e5142789a032574a1478b8d4766805320b4c7fbcb8706606fa7ebcc45eac7d3f80f40576cc0dabb2948edec50f6d41f231815d25244f292a83bd835398c2de74461b61aae19617664d0ae613ba88aea46e4ebe096da4c9c11ddd7fec28fb3f975aca7ea9312ba3081a6eb020d6b07db5d624b79db4ca74779a08846544b107f3f435978ece837aee1dcbc9f815aa3346b183d06322738f3f6bd1842e2f9cab990bc88bc996894f5af54f2933d3486274cc7a1ec379e5fffef7128aeffebb2853f680ae5fde73eae23ec33785302e1a121d9727804e6a72832d995ca58ffe76f4c5dd8c069c4198dc3635248f113e630a044665eb67093fa39208bcc5a321f33864b5308e39b4075fec485ae4e6ec84f6df7ed4ada4fc5da8b4520db3463fa66a8db5a5772bcd310c68e6e826d3f489dd80ffac8fa46e5c237d4daf09124310efbb066b8fb6a14a1eb50c9ab2eeee28cdb4402d7cb169dd9fa90d4f7bb952f73bff9b40ad06b2356b2499756d360e0b594e3ed6bde8b48ea88dcb94565794fbe2935b3fcf5a49bfddc8114cd0824715b688ae5a7cc479579ea7eeec41c2de7d0aa3ab17aea4b0a4938f274eeccf07393e08c674f6b74421f06b340b72ef7050208d673ad7229effb2fd2aec9a94701dbb3a196b6d3b4928d48c53a5dce32023b2d833bfc894d53ef2d68df1faa456a55ed9aedc1910b827e933a2b89b25ee757c2845072578f68e1109d4f3e1709c7bf6f0ff5df9e7809d520db5b7416b0fb1077a58d8866b72de8f613713c31ffd6c00930ea64f4168776b2fcb53", 0x1000}, {&(0x7f00000023c0)="59fa619ca0d043624bb81db0335a45d897cc234eb93a3d890df773af57437f98860de2dcc9ceaf08b4f11761e2c6e3be8402887f58f91d6cb92feae15dd319b34e8c4d53b5a2cb946623376b91a4c499862c63f081631e8374439a4b65e49361bc5cd1e9593b12dbe0a4a88e02a6c97083ec5861b485536d71c1710f1376e80f9e9308866fa5225a4c3c5e1b55e2226d2526454504efa1971699ba828f304c9c6311f1", 0xa3}, {&(0x7f0000002480)="f1b637459f554bba861767d536a896e23c2315aac35abb20964ff0b027657872a25f131d385dd58be3886242f64609810a78f4852494c3f29c99", 0x3a}], 0x4) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000002500)={0x2, {0x2, 0x8ec, 0x7f, 0x4, 0x9, 0x1}}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002540)={'veth0_to_team\x00'}) socket$nl_route(0x10, 0x3, 0x0) preadv2(r0, &(0x7f0000003800)=[{&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/203, 0xcb}, {&(0x7f0000003680)=""/104, 0x68}, {&(0x7f0000003700)=""/20, 0x14}, {&(0x7f0000003740)=""/138, 0x8a}], 0x5, 0x3, 0x0, 0x13) connect$unix(0xffffffffffffffff, &(0x7f00000038c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 587.431143ms ago: executing program 2 (id=1586): r0 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$FIONCLEX(r0, 0x5450) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x472c7477}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) ioctl$FE_GET_FRONTEND(r1, 0x80246f4d, &(0x7f00000001c0)={0x0, 0x0, @vsb}) (async, rerun: 32) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0xff}, 0x8) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x2710, 0x2, 0xb3611fa5725dcd32, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x11c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4040800}, 0x44011) connect$rxrpc(r1, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) (async) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000500)) (async) sendmsg$inet6(r1, &(0x7f0000000780)={&(0x7f0000000540)={0xa, 0x4e23, 0x7, @remote, 0xfd6}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000580)="3bc63bc2f947bdc5eca0e0e3ce90749ac8761fe630327c5c4594a069b24776969e4cbcb4f10f483113024ca76b79d6f68b0512d5087dfa97c953588f6c2f3ccd1a3229c3da9046cb6439416190c508f228d1963afb8f723c06d3775ea82e26062b62738fe07f38ea9ec58e51f08f5914b56a39a339da8172d865e21da6ede08c1cefe80ff1da025da8779058c8b60943bcc51629bf79eb5105fd59e8ddf310ac3ffb108e2d25172992a6185ce9e73bc9c9db6a32a002c1e00d9909602f7a9788c7a3fa32c0d3a87a0a13cfdff0e4195ec03c7468384a72eb9de32c2bf95a81ba53492f853e", 0xe5}, {&(0x7f0000000680)="655d54763bb66e4e4a1d8c7e0853c7b5f19115ce26b33f4fd33ea0b6341570888d7d0b8d1f1003b11f6dee621994496922dd36fbc2c21880fad1246040cb96", 0x3f}, {&(0x7f00000006c0)="642a5bed990fbfac2f26bbea03c69e4a853ca42859a1507ea5b8730f8a657e4ea235005794d8071b8406622d221cff1f71420681f19bf3c191906e71de7200e289d16713612a66fed163390652001cbf1d7bed0303f1fd1210c64bd8c148c06338dad4e0a881cb5f38413ea497a883315c594d5f8e", 0x75}], 0x3}, 0x0) recvfrom$l2tp(r1, &(0x7f00000007c0)=""/214, 0xd6, 0x2000, &(0x7f00000008c0)={0x2, 0x0, @multicast2}, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8090) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a80), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000ec0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000ac0)={0x38c, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x15c, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010100}}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a70a53040ae6961bed97dcc61a844d91dfb21d7c87c928971ff5e82aef268b8a"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "02be91ecc19591be349950452a1f7d8f2d0be2974784c70beaf3ab5c003a17ac"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xd, @private0, 0xce0f}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x1d4, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b8f75f8e5ec83e6b34511ed7f36f193765aa958306e7eee5b5dab4cba4edc4f6"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}}, @WGPEER_A_FLAGS={0x8}]}, {0x15c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "25a08e1a3a9e94bf743a7fd5999b370d19f54d5f65e9ac8ecc02650f99142efd"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0xc804}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000f00)={'wpan0\x00'}) close_range(r1, r1, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xe4, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x60000011}, 0x48044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001180)={0xa, &(0x7f0000001100)=[{0x4, 0x0, 0x2, 0x2}, {0x4, 0x4, 0x7, 0x1}, {0x40, 0x81, 0x6, 0x800}, {0x8, 0xc4, 0x1, 0x80}, {0x3000, 0x4, 0x9, 0x5}, {0x5d9, 0x78, 0x1, 0x3}, {0x4, 0x1, 0x5, 0x4}, {0x7, 0x0, 0x0, 0x1}, {0x0, 0x81, 0x35}, {0x4, 0x1, 0x2, 0xb0}]}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001200), r3) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r6, 0x20, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000001300)=0x6) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2d) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001380)=[@text16={0x10, &(0x7f0000001340)="0f00d663645c0f06bad004b0c6ee642e0f01c50f23f12e6666f30f09660f38254800660f7d1c0f1f4000", 0x2a}], 0x1, 0x30, &(0x7f00000013c0)=[@dstype0={0x6, 0x8}, @cstype0={0x4, 0xd}], 0x2) (async, rerun: 32) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x30, 0xc, 0x6, 0x503, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0x480d0) (async, rerun: 32) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c1}, 0x40000) 500.817416ms ago: executing program 2 (id=1587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)='Q', 0x1}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000680)}], 0x5, 0xc, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0xffffffffffffff7e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb1f83e8205bc2cc80e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4000855}, 0x24000840) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000feb000/0x3000)=nil, 0x3000, 0x3, 0x132, 0xffffffffffffffff, 0xffffd000) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x80000000004, 0x2, 0x80, 0x25, 0x20000004, 0x7f, 0x44233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0xc, 0x4db6, 0xfffffffffffffffc, 0xfffffdfffffffffd], 0xf000, 0x205204}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$netlink(0x10, 0x3, 0xe) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000180)={0x1, 0x1, 0x80, 0xd, 0x10, 0x1, 0x2, 0x3, 0x20, 0x1, 0x20, 0x0, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d00010029bd70000000000007000000", @ANYRES32=r6, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x17}}}, 0xa0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 488.657088ms ago: executing program 7 (id=1588): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x101ff, 0x0, &(0x7f0000000000/0x3000)=nil}) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0xffffffffffff0001) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0xeeea4000, 0x2000, &(0x7f0000002000/0x2000)=nil}) r1 = socket(0x23, 0x6, 0x9) sendmmsg$alg(r1, &(0x7f0000001340)=[{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)="216296b808c30cf9a371172b567b072dca8ca832fa5dd7cf734d2cce48d48861a2a612623b11a51124e790f612901ed5b8c39b7532d6b00487f325be0dcab722c6bb98db609ade2dead843e795c56644885910e5914ae0182e05674897204597fdcb43fd80fd83910056", 0x6a}, {&(0x7f0000000100)="7d7ead435f95fb272a1af986129e444438c5c34cc88de606454505f04d", 0x1d}, {&(0x7f0000000140)="db5f3f6daf3c4c60d885f887114e2e6dce0766a8230f719fcf44b336500d200000a6745695b52444a44e9b09b4a1b4ce5cb0936f91083c3984d54e5d06211d731e3ad6ec55b8ea48240e2377dc94b76e97912da5d4b6e830d05dd28b91ea649f16416867c7a97ae6d742eb3a2a2c763904bc6b04513de3a7fea0d6ae629a1a054226dc1e08bd4160b8b1f54f52823a62e3a3f14f019beeac2f5243f08383477d4ee8af18c2ae84677bc8aebccbd9f627782a14716be66f582951f7fbe2a57b634870cb576d8488deb12184b88b27fb83617f381820edb651fb2ffd", 0xdb}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="6e9b34c619cc277b564f5295e451a5323dfa3fe7bfd46f655c267f67f6947d2b2ebe0e73520aba3b55015c0337248260dfa6c2d9bc95bd1939f4030656d281184cef992160af4b8586ebe0485965ac737b966637388046585efe3d4946832bc2993449a2a7c5eeefc2365dc515712dfb30a1323ff977", 0x76}], 0x5, 0x0, 0x0, 0x841}], 0x1, 0x5) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, r2, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10, 0x3e}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2906]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0xd, 0x4, 0xa2e, 0x7, 0x0, 0x100, 0x8001]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000002a40)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a00)={&(0x7f0000001540)={0x14b0, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0xc4c, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x67}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x3fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb73, 0x5d8c, 0x4, 0xae, 0x9, 0x46, 0x1000, 0x8000]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x33, 0x2, 0x18, 0x12, 0x36, 0x30, 0x4, 0x1b, 0x18, 0x1a, 0x36, 0x60, 0xc, 0x4, 0x30, 0x35, 0x16, 0x9, 0x25, 0x6, 0x1b, 0xc, 0x9, 0xc, 0x36, 0x3f, 0x48, 0xc]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1ff, 0x1, 0x1000, 0x5, 0xb, 0x4, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x681, 0x1000, 0x6451, 0x200, 0x9, 0x3, 0x8000]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0x7}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x3}, {0x4, 0x4}, {0x2, 0x4}, {0x6}, {0x1, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x5, 0x2}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x2, 0x6}, {0x3, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x4, 0xa}, {0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x2, 0xa}, {0x4, 0xa}, {0x2}, {0x1, 0x8}, {0x4, 0x8}, {}, {0x1, 0x8}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3244, 0x6, 0x8, 0xa, 0xd49, 0x6, 0x5, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x8, 0x7, 0x3f3, 0x1000, 0x7f50, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x7, 0x300, 0x0, 0x6, 0x2, 0x2d, 0x3000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x4, 0xc, 0x1, 0x48, 0x1, 0x6, 0x12, 0x4, 0x24, 0x3, 0x1, 0x48, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x60, 0x18, 0x5, 0x6, 0x5, 0x9, 0x18, 0x24, 0x1b, 0x1, 0x1, 0xc, 0x1e, 0x6c, 0x5, 0x24, 0x18, 0x36, 0x9, 0x12, 0x4, 0x6, 0x6, 0x5, 0x5, 0x48, 0x6, 0x1b, 0x2, 0x48]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xc1d2, 0x800, 0xf461, 0x83c, 0x49f9, 0x5, 0x977]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x30, 0x60, 0x5, 0xd9358b335e2e861b, 0xc, 0x1b, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0xfff9, 0x8000, 0x6, 0xfffc, 0x2, 0xc7d8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0xc, 0x4, 0x5, 0xb, 0x3, 0x30, 0x5, 0xc, 0x48]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x1, 0xfffb, 0x8, 0x40, 0x6, 0xe, 0x9]}}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x72, 0x9, 0x3, 0xa, 0x3, 0x81, 0x4, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfb36, 0xff74, 0x9, 0x2, 0x9, 0xe, 0x1, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8f, 0xfffb, 0x101, 0x3b, 0x3, 0x7fff, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x5}, {0x3, 0x2}, {0x7, 0x7}, {0x4, 0x1}, {0x4, 0xa}, {0x0, 0x8}, {0x7, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x7, 0x9}, {0x0, 0x6}, {0x6, 0x3}, {}, {0x1, 0x2}, {0x0, 0x8}, {0x7}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0x9}, {0x6, 0x4}, {0x7, 0x5}, {0x4}, {0x6, 0x5}, {0x1, 0x7}, {0x1, 0x2}, {0x6, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0xa}, {0x6, 0x3}, {0x5, 0x2}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0x7}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x5, 0x3}, {0x3, 0xa}, {0x5, 0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x4, 0xa}, {0x1, 0xa}, {0x7, 0x4}, {0x7, 0x6}, {0x5, 0x5}, {0x7, 0x2}, {0x7, 0x7}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x4}, {0x3, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x2}, {0x3, 0x5}, {0x7, 0x6}, {0x0, 0xa}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x6}, {0x5, 0xa}, {0x5, 0x9}, {0x3, 0x6}, {0x0, 0x6}, {}, {0x6, 0x6}, {0x5, 0x3}, {0x1, 0x6}]}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x100, 0x0, 0xff80, 0x7, 0x400, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0xf092, 0x3, 0xff53, 0x9, 0x1, 0xc000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x9, 0xff, 0x200, 0xfff5, 0x40, 0x1ff, 0x6]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x4}, {0x0, 0x7}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0x3}, {0x4, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0x6}, {0x0, 0x2}, {0x7, 0xa}, {0x7, 0x8}, {0x7, 0x9}, {0x2, 0x6}, {0x4, 0x8}, {0x4, 0x4}, {0x4, 0x3}, {0x2, 0xa}, {0x1, 0x7}, {0x2, 0x1}, {0x2, 0x2}, {0x1, 0x3}, {0x7, 0x1}, {0x7}, {0x7, 0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x3, 0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x6}, {0x5, 0x6}, {0x3, 0x4}, {0x2, 0x5}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0xa}, {}, {0x6, 0x6}, {0x4, 0x6}, {0x5, 0x5}, {0x1}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x6}, {0x3, 0x6}, {0x3, 0x8}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x4, 0x2}, {0x1}, {0x7, 0x8}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x1}, {0x6, 0x6}, {0x0, 0x9}, {0x2, 0x9}, {0x4, 0x1}, {0x3, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffff7ab}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x4}, {0x4, 0x7}, {0x0, 0x3}, {}, {0x3, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x6}, {0x5, 0x7}, {0x2, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x5, 0x3}, {0x7, 0x7}, {0x0, 0x4}, {0x2, 0x4}, {0x6}, {0x0, 0xa}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x8}, {0x5, 0x5}, {0x2, 0x4}, {0x3, 0x1}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x8001, 0x22, 0x3ce, 0x40, 0x5, 0x17]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x4, 0x3fca, 0x7, 0x0, 0x3, 0x4c, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x400, 0x3, 0x8, 0x0, 0x3, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xf7d2, 0x4, 0x1000, 0x3, 0x4, 0x7, 0x2]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x5, 0x4, 0x2, 0x0, 0x3, 0xcab6]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x200, 0x3ff, 0x4, 0x3, 0x8, 0x9, 0xb]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x66c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x6, 0x9, 0x5, 0x5, 0xf008, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1e01, 0x800, 0x6, 0xd, 0x5, 0x4, 0x8, 0x262]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x6, 0x3, 0x5, 0x101, 0xf7de, 0x7, 0x401]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x2}, {0x5}, {0x4, 0x6}, {0x4, 0x7}, {0x0, 0x9}, {0x1}, {0x2, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x7, 0x6}, {0x6, 0x6}, {0x1, 0x9}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x6, 0x2}, {0x6, 0x6}, {0x6, 0x2}, {0x0, 0x8}, {0x3, 0x5}, {0x6, 0x6}, {0x1, 0x8}, {0x7}, {0x7}, {0x1, 0x2}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x6, 0x3}, {0x5, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x2, 0xa}, {0x0, 0x8}, {0x7, 0x6}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x6, 0x7}, {0x3}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {}, {0x0, 0x6}, {0x1}, {0x4, 0x4}, {0x4, 0x5}, {0x1, 0x5}, {0x3, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x2, 0x79, 0x2, 0x1, 0x0, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x24, 0x1b, 0x1b, 0xc, 0x6c, 0x30, 0x3, 0x2, 0x16, 0x24, 0x1b, 0x3, 0x9, 0x36, 0x6, 0x48, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x4, 0x8001, 0x6, 0x8, 0x967, 0x8]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x3}, {0x4, 0x6}, {0x4}, {0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0x9}, {0x2, 0x6}, {0x5, 0x1}, {0x5, 0x4}, {0x1, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x2}, {0x7, 0x7}, {0x6, 0x6}, {0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x2, 0x1}, {0x5, 0x7}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x4, 0x3}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0xa}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x2}, {0x5, 0xa}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0xa}, {0x3, 0x7}, {0x0, 0x8}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x7}, {0x5, 0x8}, {0x2, 0x9}, {0x4, 0xa}, {0x3, 0x6}, {0x3, 0x8}, {0x6, 0x5}, {0x1, 0x6}, {0x6, 0xa}, {0x2, 0x7}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0xa}, {0x5, 0x7}, {0x3, 0x5}, {0x5, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x7, 0x7}, {0x4, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x4, 0x8}, {0x7, 0x1}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x4, 0x4}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0xa}, {0x3, 0x2}, {0x2, 0x4}, {0x3, 0x3}, {0x3, 0x6}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x7}, {0x4, 0x4}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x4}, {0x5}, {0x1, 0x9}, {0x2, 0x2}, {0x6, 0x2}, {0x6, 0x4}, {0x7, 0x6}, {0x7, 0x2}, {0x0, 0x2}, {0x6, 0xb}]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x7}, {0x6, 0x4}, {0x6, 0x7}, {0x2}, {0x2, 0x3}, {0x7, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x8}, {0x7, 0x7}, {0x6, 0x8}, {0x7, 0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x4, 0xa}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x7}, {0x7}, {0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x9}, {0x3, 0x8}, {0x3, 0x1}, {0x6, 0x7}, {0x1}, {0x4, 0xa}, {0x5, 0x3}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x5}, {}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x9}, {0x7, 0x9}, {0x5, 0x4}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x5}, {0x3, 0x4}, {0x1, 0x8}, {0x6, 0x1}, {0x6, 0x4}, {0x4, 0x8}, {0x3, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x5, 0x4}, {0x3, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc64, 0x893, 0x8, 0x6, 0x0, 0x101, 0x67, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x87, 0x8000, 0x8, 0x6, 0x12, 0x7, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6c2, 0x158, 0xf25e, 0x4, 0x7f, 0xff, 0x2]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xf28ab16deec2062c}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x3}, {0x5, 0x4}, {0x3, 0x8}, {0x0, 0x5}, {0x4, 0x8}, {0x7, 0x2}, {0x2, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfff, 0x5, 0x8, 0x8, 0x6, 0x2, 0xeb9]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0xc, 0x6c, 0xff6854cb5e4c88f9, 0x16, 0x16, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x24, 0xc, 0x9, 0x18, 0x30, 0xc, 0x2, 0x60, 0xb]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x24, 0x16, 0x6, 0x30, 0x16, 0x1, 0x9, 0x0, 0x24, 0x16, 0x3b, 0x16, 0x12, 0x1, 0x60, 0x4, 0x1b, 0x1b, 0x3, 0xc, 0x1b, 0x2, 0x6c, 0x5, 0x65, 0x4, 0x1, 0x6, 0x9, 0xb, 0x6c]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x384, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0xb, 0x0, 0x18, 0x9, 0x6, 0x24, 0x1, 0x48, 0x9, 0x5, 0x2, 0x4, 0x48, 0xb, 0x48, 0x48, 0x12, 0x9, 0x60, 0x16, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x6}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x7}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x6}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x5}, {0x3, 0x2}, {}, {0x7, 0x9}, {0x0, 0x2}, {0x5}, {0x2, 0x2}, {0x1, 0x7}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0x8}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x6, 0x6}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x9}, {0x5, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x5}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x200, 0x2, 0x7, 0x10, 0x8, 0x2, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x7, 0x3, 0xf, 0xb, 0x2, 0xe, 0x29e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x1, 0x9, 0xf7fe, 0x8, 0xfff7, 0xac9, 0x9339]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x760, 0x0, 0x3, 0x5, 0x4, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x24, 0x24, 0x9, 0xb, 0x12, 0x24, 0x6, 0x5, 0x9, 0x24, 0x6, 0x18]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x6, 0x3}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0x6}, {0x5}, {0x6, 0x5}, {0x4, 0x3}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x9}, {0x5, 0x4}, {0x3, 0x1}, {0x6, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x8}, {0x0, 0xa}, {0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x6, 0x2}, {0x6}, {0x2, 0x6}, {0x2, 0xa}, {0x0, 0x5}, {0x3, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x3, 0x3}, {0x2, 0xa}, {0x2}, {0x2, 0x1}, {0x2, 0x3}, {0x5, 0x4}, {0x7, 0x2}, {0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x7, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x4, 0x1}, {0x0, 0x5}, {0x2, 0x1}, {0x1}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0xa}, {0x3, 0x8}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0xa}, {0x4, 0x1}, {0x5, 0xa}, {0x7}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x3}, {0x6, 0x9}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x7f, 0x642, 0x2, 0x6, 0x7, 0x141, 0x1]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0xb, 0x60, 0x36, 0xb, 0x60, 0x18, 0x30, 0xb, 0x9, 0x50, 0x60, 0x12, 0x18, 0x1, 0x9, 0x60, 0x12, 0xc, 0x6c, 0x4, 0xc, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x7a, 0x0, 0x36b3, 0x8, 0x9, 0x66, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfff, 0x9, 0x127d, 0x1, 0x6, 0x5, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x6c, 0x5, 0x6, 0xc, 0x5, 0x48, 0x30, 0x30, 0x60, 0x60, 0xb, 0xc, 0x0, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0xc, 0xbe, 0x8, 0x5c72, 0x1ff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x2, 0x2, 0x1, 0xa, 0x7, 0x8001]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x9}, {0x0, 0x5}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x7, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x8}, {0x6, 0x4}, {0x3, 0x8}, {0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x5}, {0x3, 0x9}, {0x5, 0x8}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x8}, {0x4}, {0x3, 0x4}, {0x6, 0x6}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xff, 0x2, 0x3, 0x6, 0x2, 0x3ff, 0xa29]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0xc, 0x3, 0x8, 0x9, 0x0, 0x1000, 0x7ff]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x242, 0x2be, 0x6, 0x81, 0xe, 0x80]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xfff, 0x7fff, 0x0, 0x7, 0x2, 0x4a3, 0x2]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x4, 0xb, 0x5, 0x24, 0x30, 0x30, 0x16, 0xc, 0x5, 0x3, 0xc, 0x12, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0xe, 0x3, 0x6, 0x5, 0x7, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x10, 0x2a, 0x6, 0xa8d, 0x2, 0x9, 0x8]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0xfff9, 0x6, 0x8001, 0xfff9, 0x2, 0x3]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x3}, {0x0, 0x1}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0xa}, {0x7, 0xa}, {0x7, 0x3}, {0x1, 0x5}, {0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0x5, 0x9}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x9}, {0x4, 0x4}, {0x0, 0xa}, {0x3, 0x1}, {0x3, 0x7}, {0x7, 0x4}, {0x5}, {0x6, 0x8}, {0x0, 0x1}, {0x3, 0x5}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x1}, {0x3, 0x5}, {0x4, 0x3}, {0x4, 0x3}, {0x4, 0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x7, 0x6}, {0x3, 0x6}, {0x2, 0x3}, {0x7, 0x2}, {0x6, 0x3}, {0x5, 0x3}, {}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8de, 0x4dc1, 0x400, 0x85, 0x1, 0x3, 0x61, 0xfff6]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x604, 0x11d, 0x0, 0x1, [{0x5e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x48, 0x0, 0x0, 0x0, 0xf3c5, 0xf0c, 0x4, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x10, 0x6df6, 0x7ec, 0x3, 0xd, 0x2, 0xe28]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x75}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x6c, 0x5a, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x93f, 0x6800, 0x4, 0x8001, 0xe, 0x851, 0xfff, 0x2]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x9, 0x12, 0x36, 0x36, 0x5, 0x9, 0x2, 0x18, 0x1b, 0x66, 0x1b, 0xf8c6dcaf8e118ab5, 0x24, 0x36, 0x18, 0x30, 0x3]}]}, @NL80211_BAND_2GHZ={0x13c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x8}, {}, {0x5, 0x6}, {0x3, 0x4}, {0x6, 0x1}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x8}, {0x2}, {0x3}, {0x7, 0x9}, {0x2, 0x4}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x4, 0x3}, {0x5, 0x6}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x6, 0x2}, {0x3, 0x8}, {0x3, 0x3}, {0x5, 0x5}, {0x5, 0x8}, {0x0, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x7}, {0x6, 0x5}, {0x3, 0x5}, {0x2, 0xa}, {0x6, 0xa}, {0x1, 0x3}, {0x4, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x3, 0x1}, {0x1, 0x9}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0x9}, {0x5, 0x2}, {0x1, 0x9}, {0x4, 0xa}, {0x4, 0x5}, {0x3, 0x9}, {0x2, 0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x3, 0xa}, {0x3, 0x6}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1f, 0x4a, 0xadb, 0xa, 0x0, 0x9, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x8}, {0x6, 0x1}, {0x3}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0xa}, {0x6, 0x9}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x5, 0x5}, {0x6, 0x8}, {0x2, 0x6}, {0x5, 0x1}, {}, {0x3}, {0x7}, {0x3}, {0x3, 0xa}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x4}, {0x4, 0x6}, {0x3, 0x7}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0xa}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x8}, {0x1, 0x9}, {0x4, 0x9}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x4}, {0x7, 0xa}, {0x7, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x3, 0x5}, {0x6, 0xa}, {0x7, 0x7}, {0x6, 0x7}, {0x1, 0x8}, {0x5, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x2, 0x6}, {0x5, 0x3}, {0x5, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x4}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0xa}, {0x7, 0x3}, {0x3, 0x7}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x9}, {0x1, 0x3}, {0x2, 0x1}, {0x7, 0x8}, {0x7}, {0x2, 0x3}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0x8}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x2}, {0x4, 0x4}, {0x4, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x0, 0x4}, {0x2, 0x1}, {0x2, 0x4}, {0x7, 0x7}, {0x6}, {0x5, 0x4}, {0x2, 0xa}, {0x3, 0x1}, {0x4}, {0x1, 0x6}, {0x2, 0x4}, {0x1}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x6}, {0x4, 0x5}, {0x0, 0x8}, {0x7, 0xa}, {0x5, 0x5}, {0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x1}, {0x3}, {0x1, 0x9}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0xa}, {0x7}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0x2}, {0x1}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x1}, {0x6, 0x9}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x6, 0x4}, {0x1, 0x3}, {0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x3, 0x7}, {0x3, 0x9}, {0x1}, {0x6, 0x3}, {0x1}, {0x6, 0x1}, {0x1, 0x8}, {0x1}, {0x4, 0x6}, {0x1, 0x2}, {0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x7f, 0xfffe, 0x0, 0xe, 0x2]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x4, 0x75b, 0x1, 0x80, 0x2, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfffa, 0xfb, 0x7, 0x8, 0xfff5, 0x7ff, 0xafd]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x4, 0x2, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x67d, 0xab, 0x993, 0x7, 0xbc, 0x400, 0x7fff]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2622, 0x8, 0x1238, 0x3a70, 0xd, 0x1, 0x1, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x101}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x298, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xb, 0x2, 0x100, 0x7ff, 0x5, 0x253, 0x2]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x7}, {0x4, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0x1}, {0x5}, {0x6, 0x6}, {0x4, 0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x2, 0xa}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x3}, {0x3, 0x8}, {0x7, 0x4}, {0x1, 0x6}, {0x7, 0x6}, {0x3, 0x1}, {0x0, 0x6}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x3}, {0x1, 0xa}, {0x5, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x7}, {0x1, 0x8}, {0x5, 0x7}, {0x6, 0x2}, {0x6, 0x7}, {0x1, 0x5}, {0x4, 0x3}, {0x7, 0x9}, {0x3, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x3}, {0x6, 0x3}, {0x6, 0x8}, {0x1}, {0x6, 0xa}, {0x4, 0x5}, {0x3, 0x3}, {0x2, 0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x8000, 0x401, 0x1ff, 0xfeff, 0x5, 0x7]}}]}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x36, 0x0, 0x36, 0x18, 0x36, 0x18, 0x30, 0x2, 0x9, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8eb2, 0x400, 0x401, 0x100, 0x5, 0x9, 0x1, 0x10]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x14, 0x4, 0x1, 0x48, 0x5, 0x9, 0x6c, 0x6c, 0x4, 0xc, 0x2, 0x1b, 0x12, 0x4, 0x6c, 0x12, 0x18, 0x6c, 0x5, 0x4, 0x6, 0x73]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x59, 0x12, 0x3, 0xb, 0x6c, 0x1b, 0xd, 0xc, 0x0, 0x24, 0x30, 0x48, 0x24, 0x16, 0x48, 0x6, 0x9, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x8, 0x81df, 0x3, 0x7, 0x8, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x100, 0xfff, 0x76bf, 0x100, 0x5, 0x4, 0x6]}}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x0, 0xb, 0x80, 0x8, 0x1, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x9}, {0x0, 0xa}, {0x3, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x2}, {0x1, 0x5}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0x6}, {0x4, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x8, 0x3, 0x101, 0xb, 0x0, 0x7f]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x4, 0x6}, {0x7, 0x2}, {0x5, 0x1}, {0x2, 0x8}, {0x0, 0x6}, {0x4}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x2, 0x3}, {0x4, 0x4}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x3, 0x5}, {0x6, 0x5}, {0x0, 0x7}, {0x3, 0xa}, {0x4, 0x1}, {0x5}, {0x2, 0x7}, {0x2}, {0x7, 0x3}, {0x0, 0x2}, {0x7, 0x5}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x5}, {0x0, 0x9}, {0x3, 0x7}, {0x1, 0x7}, {0x2, 0x8}, {0x6, 0x8}, {0x6, 0x5}, {0x3, 0x8}, {0x3, 0x4}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xcf47, 0x1, 0x3, 0x0, 0xd209, 0xfffd, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x4, 0x0, 0x7ff, 0x9, 0xd47]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x2}, {0x5, 0x7}, {0x5, 0x5}, {0x0, 0x5}, {0x6, 0x8}, {0x1}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0xa}, {0x6, 0x8}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x7}, {0x4, 0xa}, {0x4, 0x7}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x8}, {0x7, 0x9}, {0x5, 0x6}, {0x5, 0x6}, {0x6, 0x3}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0xa}, {0x5, 0x7}, {0x4, 0x5}, {0x6, 0x1}, {0x0, 0xa}, {0x6, 0x6}, {0x3}, {0x4, 0x9}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x1, 0x1}]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0xfff0, 0x9, 0x4fd5, 0x8e, 0x10ba, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x6c, 0x48, 0x2, 0x6, 0x6c, 0x24]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x41b97b610d056213, 0x6c, 0x30, 0x36, 0x24, 0x1b, 0x36, 0x24, 0x4, 0x22, 0x36, 0x12, 0x0, 0x1]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x3, 0x1e, 0x6c, 0x4, 0x0, 0x9, 0x1b, 0x4, 0x30, 0x60, 0x48, 0xc, 0x24, 0x48, 0x6c, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xc4, 0x2, 0x0, 0xfff9, 0x1ff, 0x9, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xec, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0xa439, 0x7, 0x203a, 0x1, 0x9, 0x7398]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x36, 0x12, 0x3, 0x5, 0x9, 0x5, 0x1b, 0x30, 0xc, 0x1, 0x4, 0x20578960fe696a9, 0x6, 0x1]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x2}, {0x2, 0x7}, {0x5, 0xa}, {0x5}, {0x7, 0x2}, {0x6, 0x3}, {0x6, 0x3}, {0x5, 0x3}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0x3}, {0x3, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x4, 0x2}, {0x2, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x7}, {0x2}, {0x7, 0xa}, {0x0, 0xa}, {0x3, 0x5}, {0x4, 0x8}, {0x6, 0xa}, {0x3, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xd, 0x800, 0xce, 0x2ac, 0x0, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x9}, {0x5, 0x2}, {0x2, 0xa}, {0x5, 0x5}, {0x1, 0x7}, {0x1}, {0x7, 0x8}, {0x3, 0x4}, {0x2}, {0x3, 0x6}, {0x4, 0x1}, {0x7}, {0x2, 0x8}, {0x6, 0x3}, {0x6, 0x3}, {0x2, 0x6}, {0x0, 0x6}, {0x4, 0x3}, {0x2, 0x2}, {0x7, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x8}, {0x0, 0x1}, {0x1, 0x6}, {}, {0x6, 0x7}, {0x6, 0x5}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x5}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x9}, {0x0, 0x2}, {0x1}, {0x6, 0x9}, {0x1, 0xa}, {0x5, 0x9}, {0x2, 0x9}, {0x7, 0xa}, {0x3, 0x6}, {0x4, 0x7}, {0x6, 0x7}, {0x7, 0x8}, {0x5, 0x6}, {0x3}, {0x5, 0x1d}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {0x7, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0x6}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x337, 0x2, 0xd, 0x7ff, 0x1, 0x5, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x800, 0x8, 0x9d, 0x100, 0x10, 0x2, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x0, 0xffff, 0x7ff, 0x2, 0x5, 0x6, 0x800]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x51, 0x3, 0x8, 0x399, 0xb, 0x280b, 0x800, 0x1]}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x20}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x10c, 0x11d, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x64a2, 0x2, 0x1000, 0xff, 0x1, 0x6, 0x6, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0xa}, {0x7, 0xa}, {0x7, 0x4}, {0x5, 0x3}, {0x5, 0x6}, {}, {0x2, 0x3}, {0x4, 0xa}, {0x4, 0x4}, {0x1, 0x7}, {0x4, 0xa}, {0x4, 0x3}, {0x6, 0x9}, {0x3, 0x9}, {0x5, 0x2}, {0x7, 0x9}, {0x1, 0x4}, {0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x9}, {0x3, 0x4}, {0x1, 0x4}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x6, 0x8, 0x26f, 0x0, 0x2, 0x80]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x7, 0x1}, {0x7, 0x9}, {0x1, 0x8}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0x5}, {0x6, 0xa}, {0x7, 0x9}, {0x4, 0x4}, {0x0, 0x9}, {0x6, 0x4}, {0x4, 0x7}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x8}, {0x1}, {0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x7, 0x5}, {0x2, 0x4}, {0x7, 0x8}, {0x2, 0x7}, {0x4, 0xa}, {0x2, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x6, 0x401, 0x8, 0xf08c, 0xa3, 0x7]}}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8d}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7e}]}]}, @NL80211_ATTR_TID_CONFIG={0x128, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x4, 0x3, 0x7, 0x0, 0x1fec, 0x9]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x2, 0x1}, {0x4, 0x1}, {0x4, 0x9}, {0x5, 0x7}, {0x4, 0x8}, {0x1}, {0x5, 0x1}, {0x4, 0x5}, {0x2, 0x6}, {0x4, 0x1}, {0x2, 0x7}, {0x3, 0x9}, {0x3}, {0x5, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x6, 0x3}, {0x1, 0x8}, {0x1}, {0x4, 0x9}, {0x2, 0x4}, {0x3, 0x4}, {0x7, 0x3}, {0x2, 0x8}, {0x5, 0x7}, {0x1, 0x3}, {0x4}, {0x6, 0x2}, {0x5}, {0x3, 0x2}, {0x0, 0x7}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x5}, {0x5}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x5}, {}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x8}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x3}, {0x6, 0xa}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x7, 0x4}, {0x3, 0x2}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x8}, {0x1, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x4, 0x0, 0xfffc, 0x2f3, 0x4, 0x2]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x2}, {0x4, 0x8}, {0x1}, {0x3, 0x8}, {0x2, 0x9}, {0x3, 0x8}, {0x3, 0x4}, {0x0, 0x9}, {0x5}, {0x2, 0x3}, {0x3, 0x6}, {0x0, 0x1}, {0x3, 0x4}, {0x4, 0x9}, {0x1, 0x3}, {}, {}, {0x5, 0x2}, {0x0, 0x8}, {0x3, 0x6}, {0x6, 0x8}, {0x6, 0x3}, {0x5, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x7, 0x5}, {0x3, 0x9}, {0x5}, {0x2, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x5}, {}, {0x2, 0x4}, {0x7, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x1, 0xa}, {0x5, 0x7}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x9}, {0x6, 0x3}, {0x7, 0x7}, {0x6, 0x3}, {0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x6, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x6}, {0x1, 0x8}, {0x7, 0xa}, {0x2, 0x7}, {0x6, 0x8}, {0x7, 0x9}, {0x3}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0xa}, {0x5, 0x5}, {0x3, 0x9}, {0x3, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {}, {0x3, 0x3}, {0x2, 0x9}, {0x6}, {0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x6, 0x4}, {0x2, 0x3}, {0x1, 0x7}, {0x4, 0xa}, {0x6, 0x4}, {0x7, 0xa}, {0x1, 0x7}, {0x4, 0x5}, {0x7, 0x4}, {0x2, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x17}]}]}]}, 0x14b0}, 0x1, 0x0, 0x0, 0x1000}, 0x8008) r3 = socket$netlink(0x10, 0x3, 0x6) getsockname$packet(r1, &(0x7f0000002a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002ac0)=0x14) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002b00)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000002cc0)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002b40)=""/135, 0x87, 0x0, &(0x7f0000002c00)=""/136, 0x88}, &(0x7f0000002d00)=0x40) pwritev(r3, &(0x7f0000002f00)=[{&(0x7f0000002d40)="136ff2e98780c957460e57fac448718e8f2ed3a2ca77e8", 0x17}, {&(0x7f0000002d80)="6619e81250a2ffa65f7a2b5eed30e42a3dd0abb07b750945f2534ee6e61883fb481b1b0e05d8252bbf1b2a631cb5438cfe20fc38b161b0938dc97df048bdfa106c418a99f3d1234418161835130e618588ca757f1aa1648b5e41df5db903f4473173fdbf2a6b3172df5ba9ec15bcaa713b827d461a3be9ef154078683fb28835263c8a5c436710da8d57d1a80beab3f48497b39d864b42b3baf1277c3b81fe16bd67ba4e378982391b358441641ff9637e6528c58c549ae805048dccc1dc8a41eaf6f1f083539b4fb5e373126891d70c2d7fe782e013a27d84d769cadeaeb6844d62c4d7c6bf8cdb997cc7e47d08cf8e273e4408ebcf", 0xf6}, {&(0x7f0000002e80)="c7467eac01e83b0acb87d5c2c7bc2dcb143adaa96dd44803ef45c5c885a942de3332ab4c7034e9e670a496db02ab74f5b24172ad745aa8", 0x37}, {&(0x7f0000002ec0)="720c82912858f438032d45ea994c42253084ff", 0x13}], 0x4, 0xee4d, 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002f40)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$IMGETCOUNT(r7, 0x80044943, &(0x7f0000002f80)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000002fc0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000003000)={0x77359400}, 0x10) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003040), 0x802, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000003080)=0x3) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000030c0)={r3}) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000004600)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000045c0)={&(0x7f0000003140)={0x1464, 0x13, 0x100, 0x70bd2c, 0x25dfdbfd, {0x1f, 0x6, 0x0, 0x5, {0x4e20, 0x4e22, [0x5fe, 0x8, 0xfffffffe, 0xfffffffd], [0xe, 0xac00, 0xb, 0x9], r4, [0x4, 0x101]}, 0x81, 0xf859}, [@INET_DIAG_REQ_BYTECODE={0x45, 0x1, "94118b97be132e601f2e6315adde4e31f713d3801a956e45be31a9ea1bde2ad47487f23b7416a2d103ce0138685193a2357605f66fd58dd5b8cfabc859f671a753"}, @INET_DIAG_REQ_BYTECODE={0xbe, 0x1, "d79dabc5cb308586b5b64c3135420a7e977a4d9c2d508b7c718b90a1be4710e22ef2dae4c053cf72ae1f4dd4d705e4d142904c9a6176eb35afaf43b84593c76fb962b2ab9658a36023d6f75970820488c5d7f0475423957ab47c349557f7ebf550e086bc43a4e2c5cc965b3f51fe627d6496e45bd82a4ac5eb18b90957d071e45d6bf2e9ea440316c36f715adaaba505a6a0f52a6036426ed6a0a64a0871b32eb3eccfe1899f9c7204e7e5458c1c97dfceb09cdcfd1a8e3bafdf"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "9f62038141347cabd811ea8297cc7327537166ef30baf0ead9d1f4973b1e914219447e71dd736df98d"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "4e97b377510f0765f6107d453b9bffc0407388a3ccab04c822733424f9bf9c3568527064094f8226472190f482554fa6ca469155e1f71b0050522ee474cf19189c62a8e49fee97ed1a1c47bd6178e4d28aeecc72ede6ef7354c1da353c38bc3c031d6aeaf560811cc28b67d1bebc6e03c4c96a0575c8d731ca5feaafa650181601635c64a3c6c05b70528bf7ad1c71d7641da40fa7b5cbc3a2a0a7c93eb71bc8dce6c8f0b5778e2ddc488f9ff4fb65ae7ae2ffc4eb80407145bf9b81c3a6ad27ade3f72a8d953011f41b5b27ad2b3d6a20eaaf383cc408"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "86775c21f37ae10bb902d957224635ac849225754296aca4a3cdf1ea1b92c2bd7ce2c4a78e79f2ed5f61d82b9c3295da2c2f022cb0cd43b9a66effe816ddfc96ac17ba2a87995fbe63f97bc3e1b64a5de212203aad1a311ca224b992b54d68602069538c827369d6370348d595a90f2add19f8392444e62e6de9ce"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "9f5691bef1369493c384bce74ea9a223e045d1a76ecd2b16931fa604c88f0e70f0361087c9d12d6f81dc2c7fbd87cb35a3050b76c4f8f6c1718854e563b30561bd37aa50dd6558c4016c144c527fe6ad904fb4838b41a611def6a3164b9e9752f8be40655a76e3d27ec6d9d2441d2960385491212458643a007e599972f5497b6224f1d3a19a03b769f3657e791f33d487f027b7b1e62ce895ab4262aabf1dd1bc15213cc2b559a0281a7207eba8aed95889c009b2cf5af4223a2ddc5e04310d83b8386a552a095ba5408a7ec12eb09367"}, @INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "f3dfa554d4cc39e129563974ac130961d7930f9363a9e4a37fb2ac6dd001e5464aa5fcd666ee051dd3b56790ec9b96f635d2e0de55751c34f191e0ca1962bde1985ce5f7f10b48693f584898410b771dad3cdb4036f94ae55e17bb7da2ddabc84870d22f5b643157e44e4067b45a63e78eaf8ca59ca2c42be933472576c2ca4b4837562def818fb8a3ea936c1f6d80a2272da1810be8095b0655bd88ab6ad03e"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1464}, 0x1, 0x0, 0x0, 0x8000}, 0x840) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004900)=@bpf_ext={0x1c, 0x17, &(0x7f0000004640)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xeec9}}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0xb, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xf944}, @alu={0x7, 0x0, 0x0, 0x6, 0x0, 0x4, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0x3, 0x80, 0x8}], &(0x7f0000004700)='syzkaller\x00', 0xfff0000, 0x5a, &(0x7f0000004740)=""/90, 0x41000, 0x29, '\x00', r4, 0x0, r7, 0x8, &(0x7f00000047c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000004800)={0x5, 0xf, 0x5, 0xffffffc1}, 0x10, 0x190d7, r7, 0x8, &(0x7f0000004840)=[0xffffffffffffffff], &(0x7f0000004880)=[{0x4, 0x1, 0xb, 0xc}, {0x3, 0x4, 0xc, 0x2}, {0x0, 0x3, 0xb, 0x8}, {0x3, 0x5, 0x7, 0x1}, {0x4, 0x3, 0xe, 0x4}, {0x3, 0x3, 0x7, 0x8}, {0x5, 0x5, 0x1}, {0x2, 0x3, 0xd, 0xa}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004c80)={r10, 0x0, 0xe0, 0x36, &(0x7f00000049c0)="81fd46510947d310870aa09580559106b90821fd45e1b093c68c2d14a2316f51af360bdfce0b391c5386faf9c480b4171873d9e9478245a8697eda7544d150fb0b7055e2d475a6dd33c57149cb9f4670ca6b0723d69e84fc86afc10a99f486c1687fae592fbc0fd7db4541e79009da58d5ff598ed275c564993aa4890696ae9fef07e74c185695db44e09b1014aac9b1829208edf64c6b4224490dc51c3141bf7dbb962d1aa8e97e39d9b0033d9b4f59a9f6ef00774c78c0fccf4df5a0298eb8c1dbb88a53bce0374802fe0ba591e24e31de99c16803c82a7c2158a2d3c91d77", &(0x7f0000004ac0)=""/54, 0x0, 0x0, 0x70, 0xc4, &(0x7f0000004b00)="a81f0fd637a5f0cba55580f5f25fa7f72e3d6cb531e4156e5889f46903dabb7121b2f17ec3a0d6336f6e6b4baea2a115a9fa00ce073545aa14d5e01172f6fa9ef7bc24130ff7b65cd193b09f67c0d8d9bb8e8f90c07a1e2f1f3048564f39e6e617fe29ddbb0b35e55dee7909bd7a837d", &(0x7f0000004b80)="17dcadb51ce8a0649635b4c569fb0f2bab3c0972e4662be3c06af92f0fded76860fcd76ef4fb939c23b054bc7fc7d2ef6e34ff87513935c454084f6484513501c8ec894dd529ec6daaad57824275c0d4a3e2d2e70ecc2ea780b2492f0158fd8acf2fb8d0ee78964acf51a51dceff9406dc41a5f8a6965409bc0befd1bb5d2654201b5356709f4c1a3d4d03b092ef2de28dd921da23ba541181dd7105597ed5f6c4dc45f25e53df06629ab0985fe330dc9c42372e09ed719df4ea6bce4e593e45733397e0", 0x0, 0x0, 0x800}, 0x50) fstatfs(r1, &(0x7f0000004d00)=""/102) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004f40)={'\x00', 0x6, 0xf957, 0x5, 0x401, 0x7, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000004fc0)={{0x1, 0x1, 0x18, r1, {0xee01}}, './file0\x00'}) sendmmsg$unix(r9, &(0x7f000000f2c0)=[{{&(0x7f0000004d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004e00)="4a12", 0x2}, {&(0x7f0000004e40)="196235be3c087c3766354c1945842312e0be551e96b6d61a2e811429fb40f27e9e419bfcec407dc434371cddbd802909a3581c77154a47de4316e2cc19d397f50ca43f693f70dc340dab6a323c14d5ce1cd54839b6f555f8ff8bf2a73406444c0fb45b654b529668fbebb7588d8f70e9e806642704b8297d4b0b0f33eae0c157052ab57c31acdff3afaa9e974fd06dcc71d11ed19de55e5d95998580714dbe570c5f244d56dd7151d5fcfa", 0xab}], 0x2, &(0x7f0000005000)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, 0xffffffffffffffff}}}], 0x20, 0x81}}, {{&(0x7f0000005040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005100)=[{&(0x7f00000050c0)="68e4b5b9743e9233b2f5eed3def55c96c0a76c9d0254", 0x16}], 0x1, 0x0, 0x0, 0x24040005}}, {{&(0x7f0000005140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005380)=[{&(0x7f00000051c0)="15b703b3edfbd421a3cd3abda81f720f4bcb4046dc03b4c27e2cb041f63565a9a0f955af442f18a3b3e78aa0feed74b578a9997d2440657e7a5b609b104daaa93b9cfd3a6dfeeecbf4ad1eeb7b17d515c7bc959539f3acba5b60e88e147122e534c31c3e65c796c9206650339c803a9bf01282f2f44c577efb23861d7ec95b2723aeed018fab53dd7f2710cbbdb6755fbc58bc508ec396e21af33278ec35e7c0317e641acead7616b9ce8b9ccdff69e77462c924417ac01460cd5071e3f01d48189729e4783be2ab03f853a79c531b5d3401f930ad69d9cc55fde85248abc5ee0d7771c0bce7", 0xe6}, {&(0x7f00000052c0)="9513b7dda555f4eef868991332b1a611a06dc11886ddd8f6d3fc3bd6378760b33986dd9e25e0b6f3c02236ef02d1a23e791673749d746b0ed6bde77ae34701d23388158c49cbcda58bb0ae3cd4a0018cba4bb2a5b617f20084b8cd680401bd84a510ddccbd2d9d58e63b958a3e6cba3dc5ccf088607633aa6041150686b203c7ba8436e5f1e273ba31be1d55b17df28491ac6eb9d96299651c90a5897432ab01", 0xa0}], 0x2, &(0x7f0000009780)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r11, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xd0, 0x8000}}, {{&(0x7f0000009880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009900), 0x0, &(0x7f000000c040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r0, r1, r1, r8, r10, r5, 0xffffffffffffffff, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r6, r9, 0xffffffffffffffff, r3, r5, r1]}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}], 0x130, 0x80}}, {{&(0x7f000000c180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000c640)=[{&(0x7f000000c200)="d2c90555d2bef203ae24b632a07e85b3b430c3cc8da1e488652a61ff688fd7eacfff1b73956dddfca2da0297abaa74895ccd3f0f864318bb4bbf20ecfdd408e99ae5d58f3cf33a7a45464cf84eeb0deae2ffdd03e9282fa2a7329291cc496ce2fb9dae8e721bdad5cccf995008bd3f12d0c54444fc375cb080c2e2728aaa10b00c02e1f702ff4055e44f258d0e93ef1e1ed62eda9b654a44f79eaf8066106b687ae982182f3b09a3493eb1b9ac641ed154", 0xb1}, {&(0x7f000000c2c0)="34b8c0b6989d60a4547b37ccb3ff27be65ade6d5adb9eb3b6e513fea14d75d1fd74f5fc1a85cd402c3d76a9b1a7d7312a7c877308c4528cf7978b5dba36b8cee7c95ee4f1c2250b37c68e18f539d32b07ccb9a84079a07ce960d2a63e54d259e2b1d11f77877b33dd11c47e2d497c5a0684719bf2c23568bd9f7a48eb8e5371f1bbc2c64542c1d61e946bd1a2abd5552aaccf79fc25f5c78f69a45309f4a9db87946441b455bd71202e50a172443ac153e782b5c68a94e0b4a9ee823ed7413bed5b45d3cb4fd6b96ac89d1a807b361d0117c5984c15cf692ec868855b8feaaabb0ab68", 0xe3}, {&(0x7f000000c3c0)="666b6296012fa6ff7e47203ba6140dd021e2f4d85c05600144e0e9b98c5c", 0x1e}, {&(0x7f000000c400)="89c115058566c8a8137faf3c01561989e9a7704214cfa343d02de800bcfe0e2f5f5440b8ca6f81b1cd9004134e4ae01acaba0d89087f305aed81084dc6af477616fc69ac5d93103c93b3cad13749e40762491b9c62846f8fa9869ccf0531b41a2ae95000db861c283f546620f285b3775a057eb5cf5ecc68cb60ef2754713055a2431382854640e31a9c14fb2ca8090ec9530ca9cdd6a3a3bb6d783896e8f4d332c4", 0xa2}, {&(0x7f000000c4c0)="f9a49f6f766b49f340fc8d77908798be48e7103ab7220090", 0x18}, {&(0x7f000000c500)="b69a2188b72309e7a92cb2b10016b694174121122e7546c3e8132938a543e249f466f46f233a8e8de69eeb25aed62417b5576f80e32e8302676f50dd4e46a062ee2b60ba58a20e90b6fbc38f582b1b52ab460028d64bab0ca44bdc60bdc3388b1393b8214f17b19a45d06d3de40b239c3df3435ed6a19d5b4d32da490aecf96080da267503f101488a288bab96046000227b1b3b019d38f4714b738169d4a9885bdd81e75061ab2d", 0xa8}, {&(0x7f000000c5c0)="717dbf1cef897c293b14b2e33c008eb428c84f59b53b316f19d04cd1df1093d720b3999900cf1af8ee25f1d32e60af8a64174ef8bc8b31349bfc6b0854208608fc3f30efc3693fefbd32651f43cb8c8862c26bf43a5e94d86a6d560e887982d1e12cb4dd5682ae3eb0409c5a", 0x6c}], 0x7, &(0x7f000000ea80)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58, 0x40084}}, {{&(0x7f000000eb00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000ebc0)=[{&(0x7f000000eb80)="9fb155acea965784b138888f1ef9cb99f008472fd3cd4be3d496d5f6557d288b8eed4c5a75ca412a1e80", 0x2a}], 0x1, &(0x7f000000ed80)=[@rights={{0x1c, 0x1, 0x1, [r9, r6, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r8, r11, 0xffffffffffffffff]}}], 0x80, 0x804}}, {{&(0x7f000000ee00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000000f1c0)=[{&(0x7f000000ee80)="bd6fc5d9dc85c6313fa623260066fa2de1b52d6e39bd96a588fd485d4435c394c5a07d7b769bd5f210491abd6cabb9179139059dc039ca846df4eab57d581e46119e48f4ce5f709f5fbcc8279dcbc9a1ebe1d958938f4fcc1e34659a673c28901b9b597be84e5d5957d09d5a1362e8058ce330910ba6112a752912d36ffd38467033cd0f6d621e11201dbb5ffd52d89b5bb89d8e0b82c0bdad2589e1d20447d5db35b7fd1a4148986aea9100b72a4a76d6e877a0cf27d7ef32c2487ff215c16f64c17019a0383a", 0xc7}, {&(0x7f000000ef80)="177d3e16a0b1cbbb696c534ab585ea87aa38d5f568c6853993747c471aaebebe14eab89ce7e16f", 0x27}, {&(0x7f000000efc0)="1474910a114e5bf00bce8f8a0a2d305739648555a6c4a00cf314833f309717c010f36d9b6b59cd0995543f9cb7b93c813ba0e4cb9dc6f9501359c592795b8c5b704aa9e93bfb9d4a80cd02a56467239ced427f03947c66129f6bc8ccaea08a94bce99aa43387e838afc5d65eeade92bdffe23c3e38271e643126fb922b65cd4069acc500895303c872892adcbfb682e2e7b890a882f9db4b5bfe1b31120924d5579c36eb5c04f15234f3", 0xaa}, {&(0x7f000000f080)="e7468bdb65f88bffd7430a91c91f3b6ff50524bda49e0885c8c52c933b80ff4086c89cef4ca0aba7fe8a77201819f98a99707d2983650c62f76a288c9523caf0c2953eb22982f7c08c7d65d8e196dfa49aea2b97c254fac025e00d6f37f150e34ac7acfc4496185525b668e46851c1741be77af149b8d49a0568dde9862c3161df79eb9e4e755d1fdd8d8f528b4d401adad3a370b54d039440b0816c4d1621182a57e49265620c9538e62494ec60e23f2d5a2ed89de5e0f56f0371559633853c737966", 0xc3}, {&(0x7f000000f180)="d94a56aee89faaf3b814184ccc7a9687c53c80856299f4bbc133", 0x1a}], 0x5, &(0x7f000000f240)=[@rights={{0x28, 0x1, 0x1, [r9, r10, r6, r10, r6, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r3, r7]}}], 0x48, 0x24044800}}], 0x7, 0x80) 430.15623ms ago: executing program 7 (id=1589): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r0, &(0x7f00000bd000), 0x366, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async, rerun: 32) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 32) add_key$user(0x0, 0x0, 0x0, 0x33, 0xfffffffffffffff8) (async) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x3d35, &(0x7f00000002c0)={0x0, 0x7419, 0x10100, 0x3, 0x106}, &(0x7f0000000100), &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0005000000000000000052800c000280050013000100"/32], 0x38}, 0x1, 0x0, 0x0, 0x8808}, 0x800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 372.096943ms ago: executing program 7 (id=1590): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x0, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x2, [{@private=0xa010102, 0x1}]}, @rr={0x7, 0xb, 0x8f, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0xb6, [@rand_addr=0x64010102]}, @timestamp={0x44, 0x1c, 0x31, 0x0, 0x0, [0x13, 0x7fffffff, 0x33ef, 0x0, 0x8, 0x101]}, @timestamp={0x44, 0x8, 0x63, 0x0, 0x9, [0x3]}, @timestamp_addr={0x44, 0x4, 0x9, 0x1, 0x3}]}}}}}}}, 0x0) prlimit64(0x0, 0xc, &(0x7f00000000c0)={0x4, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 209.239226ms ago: executing program 2 (id=1591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x18ba00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x7dc9, &(0x7f0000000340)={0x0, 0x849b, 0x10100, 0xfffffff8, 0x234}, &(0x7f0000000140), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0xf503, 0x40, 0x0, 0x10}, &(0x7f0000000700)=0x0, &(0x7f0000000640)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) close(0x4) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x122, 0x0, 0xb23d}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800f830d0c80465ef0000000000000c0000000c00000000000000080000f000000013a62959c50302"], 0x0, 0x26, 0x0, 0x1, 0x5}, 0x28) r8 = socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4216, 0x0) ptrace$peeksig(0x1a, r9, 0x0, &(0x7f0000000040)) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x8, 0x8, 0x1, 0x8, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004001}, 0x4000000) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x32) socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 160.690902ms ago: executing program 6 (id=1592): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x32}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = socket(0x11, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000001240)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x10) lseek(r8, 0x538a, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x198, 0x100, 0x198, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@private=0xa010102, @private=0xa010100, 0x0, 0xff, 'veth1_vlan\x00', 'team0\x00', {0xff}, {0xff}, 0x21, 0x3, 0x2}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x6, 0x0, 0x4, 0x4, 0x3, 0x2], 0x4}}}, @common=@icmp={{0x28}, {0x11, "cca1", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@multicast1, @remote, 0xff, 0xffffffff, 'veth0\x00', '\x00', {}, {0xff}, 0x5c, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@broadcast, @loopback, 0x0, 0xffffff00, 'wg2\x00', 'team0\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x6}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x2, 0x6], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x6, 0x2, 0x0, 0x1, 0x4], 0x4, 0x4}, {0x2, [0x6, 0x0, 0x1, 0x5, 0x3, 0x1], 0x2, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='ipvlan0\x00'}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) 85.27582ms ago: executing program 3 (id=1593): openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi3\x00', 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002040)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000f80)=[{0x0}, {&(0x7f0000000c40)}, {&(0x7f0000000cc0)}, {0x0}, {&(0x7f0000000f40)="acb1", 0x2}], 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/oss_mixer\x00', 0x480240, 0x0) write$proc_mixer(r7, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mount$nfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc']) 67.740489ms ago: executing program 2 (id=1594): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {0x80000000}}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000300)={r3, &(0x7f0000000080)=[{0x80000000}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000001c0)={{r4, 0x0, 0xe10faebb7221f0, [0x1, 0x6]}, {r5, 0x0, 0x7, [0x5, 0x101]}, 0x1, [0x3, 0x4]}) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x21c) 0s ago: executing program 3 (id=1595): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) (async, rerun: 32) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x78}, 0x1, 0x7}, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x2) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000008400000084000000040000000d0000000a00008513ffffff0000000003000000010000000d0000000100000001000000060000000000000017fe0000070000005c570000dd0000000800000000000005000000018000000e00000000000000040000001400000002000000010000000900000001000000b00c0000eb00000002000000a2b100000061100000000000000000000029183df319c811adc4a90100000040aca794e7457acd9d51b244171c2a6d1ffa79f6896a260e356f2d4802000000000000006b320e803b1c4580192f346a54a4b238ddbee3f8b35f1b81be0c9bcfd6196fb884293a021f2fa2f6f67b13e94420c9b9040d709949b8a5c769f2879efe3b1f2c7f07d1a83936f25f20062acd529390aade5e812e0961433184a4a37a8052c13cacf961ef1900d5df5ea843d05576c8539a4449f14f0540fffc96ba710545844b7f3e8869505ad770fc7eddbfac2d1f61d0587614ac6c5eab44e95a99628f10729b178f3986806ece04f6aee0abfdcb1eb98250091c5508dd7360fd72e92c8cc644fcfd28c7e3e66dca49c56043412ed629294516983c03ffc47722f69e2ab1"], &(0x7f00000002c0)=""/69, 0xa0, 0x45, 0x1, 0xfffffff9}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x74f, '\x00', 0x0, r2, 0x1, 0x0, 0x3}, 0x50) kernel console output (not intermixed with test programs): e=1 [ 339.142593][ T30] audit: type=1400 audit(2000000071.606:1669): avc: denied { ioctl } for pid=10375 comm="syz.2.1091" path="/dev/usbmon1" dev="devtmpfs" ino=717 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 339.297546][ T5813] Bluetooth: hci4: hcon ffff888021acc000 sent 1 < count 42927 [ 339.860852][T10258] veth0_vlan: entered promiscuous mode [ 339.871876][T10258] veth1_vlan: entered promiscuous mode [ 339.931842][T10258] veth0_macvtap: entered promiscuous mode [ 340.001874][T10403] overlayfs: failed to resolve './file0': -2 [ 340.080907][T10258] veth1_macvtap: entered promiscuous mode [ 340.104727][T10407] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1096'. [ 340.120397][T10407] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1096'. [ 340.129959][T10407] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1096'. [ 340.147551][T10258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.156569][T10405] comedi comedi3: comedi_parport: I/O port conflict (0xfffffffffffffff8,3) [ 340.227521][ T30] audit: type=1400 audit(2000000072.730:1670): avc: denied { setattr } for pid=5806 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.254378][T10258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.301128][ T5852] IPVS: starting estimator thread 0... [ 340.330153][ T2953] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.348053][ T2953] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.387852][ T2953] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.396731][T10411] IPVS: using max 71 ests per chain, 170400 per kthread [ 340.409056][ T2953] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.489161][T10415] fuse: Bad value for 'fd' [ 340.523649][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.532159][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.599123][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.608455][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.687004][ T5813] Bluetooth: hci5: command tx timeout [ 340.950175][T10422] overlay: ./file0 is not a directory [ 341.532186][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 341.637221][ T30] audit: type=1326 audit(2000000074.252:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.6.1105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fea4159aeb9 code=0x0 [ 341.668012][T10436] netlink: 'syz.6.1105': attribute type 1 has an invalid length. [ 341.677562][T10436] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1105'. [ 341.706335][T10436] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1105'. [ 341.716934][T10436] netlink: 'syz.6.1105': attribute type 2 has an invalid length. [ 342.197841][ T30] audit: type=1400 audit(2000000074.850:1672): avc: denied { name_bind } for pid=10450 comm="syz.3.1110" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 342.514600][ T5852] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 342.515122][ T6555] block nbd0: Possible stuck request ffff888026bd0000: control (read@0,1024B). Runtime 210 seconds [ 342.535475][ T6555] block nbd0: Possible stuck request ffff888026bd0200: control (read@1024,1024B). Runtime 210 seconds [ 342.546558][ T6555] block nbd0: Possible stuck request ffff888026bd0400: control (read@2048,1024B). Runtime 210 seconds [ 342.557636][ T6555] block nbd0: Possible stuck request ffff888026bd0600: control (read@3072,1024B). Runtime 210 seconds [ 342.841784][T10458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1107'. [ 342.881805][ T5852] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 342.903794][ T5852] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 342.935234][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.956510][ T5852] usb 7-1: config 0 descriptor?? [ 343.371153][ T5852] hkems 0003:2006:0118.000F: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.6-1/input0 [ 343.383808][ T5852] hkems 0003:2006:0118.000F: no inputs found [ 343.389961][ T5852] hkems 0003:2006:0118.000F: force feedback init failed [ 343.427773][T10479] netlink: 182 bytes leftover after parsing attributes in process `syz.3.1113'. [ 343.439808][ T5990] udevd[5990]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 349.516829][T10446] kexec: Could not allocate control_code_buffer [ 349.530612][ T5914] usb 7-1: USB disconnect, device number 2 [ 349.793570][ T30] audit: type=1400 audit(2000000082.818:1673): avc: denied { read } for pid=10487 comm="syz.4.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 350.117988][ T5936] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 350.299934][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.313663][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.326070][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.339846][ T5936] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.349767][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.361268][ T5936] usb 5-1: config 0 descriptor?? [ 350.404779][T10510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.431762][ T5911] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 350.622493][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 350.635468][ T5911] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 350.647192][ T5911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 350.658501][ T5911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.669625][ T5911] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.686059][ T5911] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.695634][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.904426][ T5911] usb 3-1: GET_CAPABILITIES returned 0 [ 350.910678][ T5911] usbtmc 3-1:16.0: can't read capabilities [ 351.107781][ T5911] usb 3-1: USB disconnect, device number 54 [ 352.098750][ T5914] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 352.244515][ T5914] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 352.257783][ T5914] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 352.277733][ T5914] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 352.301129][ T5914] usb 7-1: config 0 interface 0 has no altsetting 0 [ 352.320950][ T5914] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 352.333614][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 352.354835][ T5914] usb 7-1: Product: syz [ 352.363795][ T5914] usb 7-1: Manufacturer: syz [ 352.372541][ T5914] usb 7-1: SerialNumber: syz [ 352.387701][ T5914] usb 7-1: config 0 descriptor?? [ 352.402479][T10528] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 352.414129][ T5914] usb 7-1: selecting invalid altsetting 0 [ 352.611997][ T5936] usbhid 5-1:0.0: can't add hid device: -71 [ 352.622164][ T5936] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 352.646523][ T5936] usb 5-1: USB disconnect, device number 50 [ 352.677181][T10531] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1126'. [ 352.740930][ T30] audit: type=1400 audit(2000000085.905:1674): avc: denied { watch } for pid=10533 comm="syz.4.1128" path="anon_inode:[pidfd]" dev="pidfs" ino=10534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 352.909466][T10534] lo speed is unknown, defaulting to 1000 [ 352.932116][T10534] lo speed is unknown, defaulting to 1000 [ 353.128016][ T5936] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 353.301943][ T5936] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 353.315657][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.348568][ T5936] usb 5-1: config 0 descriptor?? [ 353.363718][ T5936] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 353.622007][ T5936] gp8psk: usb in 128 operation failed. [ 353.825850][ T5936] gp8psk: usb in 146 operation failed. [ 353.835232][ T5936] gp8psk: failed to get FW version [ 353.847596][ T5936] gp8psk: usb in 149 operation failed. [ 353.860736][ T5936] gp8psk: failed to get FPGA version [ 353.873227][ T5936] gp8psk: usb in 138 operation failed. [ 353.885458][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.905890][ T5936] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 353.925592][ T5936] usb 5-1: media controller created [ 353.952034][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.991347][ T5936] gp8psk_fe: Frontend attached [ 354.002892][ T5936] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 354.043784][ T5936] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 354.144648][ T5936] gp8psk: usb in 138 operation failed. [ 354.162501][ T5936] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 354.187114][ T5936] gp8psk: found Genpix USB device pID = 203 (hex) [ 354.227808][ T5936] usb 5-1: USB disconnect, device number 51 [ 354.380043][ T5936] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 354.432546][ T979] usb 7-1: USB disconnect, device number 3 [ 354.922522][ T5820] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 354.930864][ T5820] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 354.947233][ T5820] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 354.959414][ T5820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 354.975928][ T5820] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 355.049940][T10551] lo speed is unknown, defaulting to 1000 [ 355.188253][T10557] lo speed is unknown, defaulting to 1000 [ 355.194605][T10557] lo speed is unknown, defaulting to 1000 [ 355.958290][T10551] lo speed is unknown, defaulting to 1000 [ 356.178143][T10568] netlink: 182 bytes leftover after parsing attributes in process `syz.4.1132'. [ 356.194147][T10569] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1135'. [ 356.363022][T10554] openvswitch: netlink: IP tunnel dst address not specified [ 356.931744][ T5820] Bluetooth: hci6: command tx timeout [ 357.039159][T10551] chnl_net:caif_netlink_parms(): no params data found [ 357.411954][T10581] xt_hashlimit: size too large, truncated to 1048576 [ 357.555005][T10582] syz.2.1136 uses old SIOCAX25GETINFO [ 357.606538][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.699755][T10587] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 357.866136][T10595] netlink: 'syz.6.1139': attribute type 1 has an invalid length. [ 357.921027][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.965070][T10551] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.979068][T10551] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.994294][T10551] bridge_slave_0: entered allmulticast mode [ 358.011856][T10551] bridge_slave_0: entered promiscuous mode [ 358.087489][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.108849][T10551] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.126168][T10551] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.141290][T10551] bridge_slave_1: entered allmulticast mode [ 358.160498][T10551] bridge_slave_1: entered promiscuous mode [ 358.166583][ T5936] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 358.204665][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.274570][T10551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.286791][T10551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.309519][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 358.316033][ T5936] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 358.323851][T10551] team0: Port device team_slave_0 added [ 358.329665][ T5936] usb 3-1: config 1 has no interface number 1 [ 358.333347][T10551] team0: Port device team_slave_1 added [ 358.342217][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 358.356865][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 358.371582][ T5936] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.383313][T10551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.387497][ T5936] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 358.390954][T10551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.399544][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.427231][T10551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.436260][ T5936] usb 3-1: Product: syz [ 358.446664][T10551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.456568][ T5936] usb 3-1: Manufacturer: syz [ 358.461206][ T5936] usb 3-1: SerialNumber: syz [ 358.462083][T10551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.500863][T10551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.772879][ T36] bridge_slave_1: left allmulticast mode [ 358.779912][ T36] bridge_slave_1: left promiscuous mode [ 358.787147][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.930191][ T5820] Bluetooth: hci6: command tx timeout [ 358.939097][ T36] bridge_slave_0: left allmulticast mode [ 358.944816][ T36] bridge_slave_0: left promiscuous mode [ 358.954602][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.272560][ T30] audit: type=1326 audit(2000000092.770:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.3.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379f99aeb9 code=0x7fc00000 [ 359.592263][ T36] bond0 (unregistering): (slave 30): Releasing backup interface [ 359.602609][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.612891][ T36] bond0 (unregistering): Released all slaves [ 359.633042][ T5936] usb 3-1: failed to enable PITCH for EP 0x82 [ 359.640052][T10551] hsr_slave_0: entered promiscuous mode [ 359.646425][T10551] hsr_slave_1: entered promiscuous mode [ 359.647658][ T5936] usb 3-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 359.652471][T10551] debugfs: 'hsr0' already exists in 'hsr' [ 359.665448][T10551] Cannot create hsr debugfs directory [ 359.703192][ T5936] usb 3-1: USB disconnect, device number 55 [ 359.778463][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.035413][ T5911] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 360.046412][ T36] hsr_slave_0: left promiscuous mode [ 360.068902][ T36] hsr_slave_1: left promiscuous mode [ 360.084479][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.102165][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.120175][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.129483][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.187481][ T36] veth1_macvtap: left promiscuous mode [ 360.193584][ T36] veth0_macvtap: left promiscuous mode [ 360.202185][ T36] veth1_vlan: left promiscuous mode [ 360.219761][ T5911] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 360.229174][ T36] veth0_vlan: left promiscuous mode [ 360.236422][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.259815][ T5911] usb 7-1: Product: syz [ 360.273959][ T5911] usb 7-1: Manufacturer: syz [ 360.291591][ T5911] usb 7-1: SerialNumber: syz [ 360.321677][ T5911] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 360.344714][ T5936] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 360.435386][ T5873] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 360.503359][ T36] team0 (unregistering): Port device batadv1 removed [ 360.569657][ T36] pimreg (unregistering): left allmulticast mode [ 360.611410][ T5873] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 360.630646][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.651284][ T5873] usb 5-1: Product: syz [ 360.661140][ T5873] usb 5-1: Manufacturer: syz [ 360.670964][ T5873] usb 5-1: SerialNumber: syz [ 360.762820][T10668] input: syz1 as /devices/virtual/input/input37 [ 360.885573][ T5820] Bluetooth: hci6: command tx timeout [ 361.089707][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 361.353354][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 361.469332][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1154'. [ 361.478728][T10673] Unknown options in mask b7f2 [ 361.547689][ T36] team0 (unregistering): Port device team_slave_1 removed [ 361.567412][ T5936] usb 7-1: Service connection timeout for: 256 [ 361.590926][ T5936] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 361.639160][ T5936] ath9k_htc: Failed to initialize the device [ 361.771437][ T5936] usb 7-1: ath9k_htc: USB layer deinitialized [ 361.795623][ T36] team0 (unregistering): Port device team_slave_0 removed [ 362.390221][ T30] audit: type=1326 audit(2000000095.941:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.3.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f379f99aeb9 code=0x7fc00000 [ 362.454394][ T5914] usb 7-1: USB disconnect, device number 4 [ 362.881787][ T5820] Bluetooth: hci6: command tx timeout [ 363.491397][ T30] audit: type=1400 audit(2000000097.190:1677): avc: denied { setcheckreqprot } for pid=10691 comm="syz.6.1159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 363.610058][T10694] IPv4: Oversized IP packet from 127.202.26.0 [ 364.004644][ T5911] lo speed is unknown, defaulting to 1000 [ 364.024076][ T5911] syz2: Port: 1 Link DOWN [ 364.046812][T10695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.071461][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 364.199773][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 364.209106][ T48] lo speed is unknown, defaulting to 1000 [ 364.214831][ T48] syz0: Port: 1 Link ACTIVE [ 364.224159][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 364.243392][ T5873] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 364.284568][ T5873] usb 5-1: USB disconnect, device number 52 [ 364.309408][T10551] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 364.360643][ T30] audit: type=1400 audit(2000000098.103:1678): avc: denied { getopt } for pid=10705 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 364.365185][T10551] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 364.590311][T10551] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 364.645329][T10551] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 364.967050][T10551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.021807][T10551] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.032497][ T30] audit: type=1400 audit(2000000098.817:1679): avc: denied { lock } for pid=10738 comm="syz.6.1167" path="socket:[33568]" dev="sockfs" ino=33568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 365.048569][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.063445][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.225888][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1167'. [ 365.638792][T10715] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 365.648212][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.655331][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.891894][ T30] audit: type=1400 audit(2000000099.710:1680): avc: denied { sys_module } for pid=10752 comm="syz.4.1169" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 366.193646][T10551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.875150][ T30] audit: type=1400 audit(2000000100.759:1681): avc: denied { connect } for pid=10805 comm="syz.2.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 367.151294][T10551] veth0_vlan: entered promiscuous mode [ 367.177133][T10551] veth1_vlan: entered promiscuous mode [ 367.310223][T10551] veth0_macvtap: entered promiscuous mode [ 367.333504][T10551] veth1_macvtap: entered promiscuous mode [ 367.533280][T10551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.552930][T10551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.567584][ T62] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.100921][ T62] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.142052][ T62] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.172053][ T62] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.194328][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.209296][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.301237][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.310891][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.388234][ T5936] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 368.409962][ T5866] IPVS: starting estimator thread 0... [ 368.479314][ T30] audit: type=1400 audit(2000000102.439:1682): avc: denied { set_context_mgr } for pid=10831 comm="syz.7.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 368.500438][T10834] IPVS: using max 41 ests per chain, 98400 per kthread [ 368.552434][ T5936] usb 3-1: Using ep0 maxpacket: 32 [ 368.561087][ T5936] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 368.574072][ T5936] usb 3-1: config 0 has no interface number 0 [ 368.588755][ T5936] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 368.603043][ T5936] usb 3-1: config 0 interface 85 has no altsetting 0 [ 368.613819][ T5936] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 368.623879][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.632637][ T5936] usb 3-1: Product: syz [ 368.637420][ T5936] usb 3-1: Manufacturer: syz [ 368.642753][ T5936] usb 3-1: SerialNumber: syz [ 368.649873][ T5936] usb 3-1: config 0 descriptor?? [ 369.151546][T10830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.157750][T10830] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 369.170547][T10830] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.176448][T10830] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 369.185320][T10830] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.191481][T10830] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 369.200930][T10830] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 369.206822][T10830] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 369.244591][ T5936] appletouch 3-1:0.85: Geyser mode initialized. [ 369.255791][T10830] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 369.261689][T10830] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 369.272802][ T5936] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input38 [ 369.317568][T10830] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 369.323494][T10830] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 369.458268][ T5936] usb 3-1: USB disconnect, device number 56 [ 369.487700][T10846] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 369.585792][ T5936] appletouch 3-1:0.85: input: appletouch disconnected [ 369.681976][ T30] audit: type=1326 audit(2000000103.699:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.6.1189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea4159aeb9 code=0x0 [ 369.778321][ T5873] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 369.930701][ T979] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 369.941875][ T5873] usb 8-1: unable to get BOS descriptor or descriptor too short [ 369.950109][ T5873] usb 8-1: not running at top speed; connect to a high speed hub [ 369.958530][ T5873] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.969069][ T5873] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.981649][ T5873] usb 8-1: string descriptor 0 read error: -22 [ 369.987881][ T5873] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.997090][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.010844][ T5873] usb 8-1: 0:2 : does not exist [ 370.075825][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 370.087391][ T979] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 370.097036][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.105734][ T979] usb 5-1: Product: syz [ 370.109974][ T979] usb 5-1: Manufacturer: syz [ 370.114828][ T979] usb 5-1: SerialNumber: syz [ 370.127865][ T979] usb 5-1: config 0 descriptor?? [ 370.137410][ T979] gspca_main: se401-2.14.0 probing 047d:5003 [ 370.418574][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 370.528549][ T979] gspca_se401: Bayer format not supported! [ 370.730769][ T5914] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 371.495053][ T979] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 371.664716][ T6555] block nbd0: Possible stuck request ffff888026bd0000: control (read@0,1024B). Runtime 240 seconds [ 371.675672][ T6555] block nbd0: Possible stuck request ffff888026bd0200: control (read@1024,1024B). Runtime 240 seconds [ 371.686768][ T6555] block nbd0: Possible stuck request ffff888026bd0400: control (read@2048,1024B). Runtime 240 seconds [ 371.697930][ T6555] block nbd0: Possible stuck request ffff888026bd0600: control (read@3072,1024B). Runtime 240 seconds [ 371.725596][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.940948][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 371.951858][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.962039][ T5914] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.980875][ T5914] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.981759][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.008623][ T979] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 372.018599][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.018946][ T48] usb 5-1: USB disconnect, device number 53 [ 372.036079][ T5914] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 372.042178][ T979] usb 7-1: config 0 descriptor?? [ 372.084820][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 372.099442][ T5914] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 372.125159][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.193486][ T5914] usb 3-1: config 0 descriptor?? [ 372.606891][ T5914] hid-thrustmaster 0003:044F:B65D.0010: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 372.670820][ T5914] hid-thrustmaster 0003:044F:B65D.0010: Wrong number of endpoints? [ 372.799231][ C1] hid-thrustmaster 0003:044F:B65D.0010: Unknown packet type 0x0, unable to proceed further with wheel init [ 372.857191][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 373.036015][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 373.043034][ T9] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 373.051274][ T9] usb 5-1: config 0 has no interface number 0 [ 373.066101][ T9] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.078928][ T9] usb 5-1: config 0 interface 85 has no altsetting 0 [ 373.101895][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 373.111671][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.120624][ T9] usb 5-1: Product: syz [ 373.125972][ T9] usb 5-1: Manufacturer: syz [ 373.134245][ T9] usb 5-1: SerialNumber: syz [ 373.154085][ T9] usb 5-1: config 0 descriptor?? [ 373.473672][ T979] usbhid 7-1:0.0: can't add hid device: -71 [ 373.488798][ T979] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 373.527532][ T5873] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 373.538614][ T5873] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 373.601544][ T979] usb 7-1: USB disconnect, device number 5 [ 373.647932][ T5873] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 373.707807][ T5873] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 373.733015][ T5873] usb 8-1: USB disconnect, device number 2 [ 373.916320][ T9] appletouch 5-1:0.85: Geyser mode initialized. [ 373.939056][ T9] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input39 [ 374.014042][ T979] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 374.061439][ T5914] usb 5-1: USB disconnect, device number 54 [ 374.109500][ T5914] appletouch 5-1:0.85: input: appletouch disconnected [ 374.150014][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 374.198189][ T979] usb 7-1: Using ep0 maxpacket: 32 [ 374.208961][ T979] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.228841][ T979] usb 7-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 374.246167][ T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.254178][ T979] usb 7-1: Product: syz [ 374.331820][ T979] usb 7-1: Manufacturer: syz [ 374.336517][ T979] usb 7-1: SerialNumber: syz [ 374.343557][ T979] usb 7-1: config 0 descriptor?? [ 374.396594][ T979] snd_usb_variax 7-1:0.0: Line 6 Variax Workbench found [ 374.404172][ T979] usb 7-1: selecting invalid altsetting 1 [ 374.410251][ T979] snd_usb_variax 7-1:0.0: set_interface failed [ 374.416656][ T979] snd_usb_variax 7-1:0.0: Line 6 Variax Workbench now disconnected [ 374.425554][ T979] snd_usb_variax 7-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 374.872089][ T979] usb 7-1: USB disconnect, device number 6 [ 374.931184][ T5880] usb 3-1: USB disconnect, device number 57 [ 375.175252][T10933] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 375.195673][T10933] bond1 (unregistering): Released all slaves [ 375.210660][T10940] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 375.265032][ T979] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 375.302902][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'. [ 375.446972][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 375.471362][ T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 375.505366][ T979] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 375.532094][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.559575][ T979] usb 5-1: Product: syz [ 375.581850][ T979] usb 5-1: Manufacturer: syz [ 375.592934][ T979] usb 5-1: SerialNumber: syz [ 375.603901][ T979] usb 5-1: config 0 descriptor?? [ 375.623511][ T979] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 375.837050][ T5866] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 375.844771][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 375.894351][ T5911] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 375.989013][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 375.994193][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 376.001431][ T5866] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 376.001561][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 376.016315][ T5866] usb 7-1: config 0 has no interface number 0 [ 376.022726][ T5866] usb 7-1: config 0 interface 12 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 478 [ 376.033118][ T5866] usb 7-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 376.043207][ T5866] usb 7-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 376.053753][ T5866] usb 7-1: config 0 interface 12 has no altsetting 0 [ 376.061856][ T9] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 376.071181][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.079715][ T5911] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.089574][ T5911] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 376.102594][ T9] usb 8-1: Product: syz [ 376.106951][ T9] usb 8-1: Manufacturer: syz [ 376.111635][ T5866] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 376.120701][ T9] usb 8-1: SerialNumber: syz [ 376.125566][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.133677][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 376.140978][ T5866] usb 7-1: Product: syz [ 376.146068][ T9] usb 8-1: config 0 descriptor?? [ 376.151244][ T5911] usb 3-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 376.160357][ T5866] usb 7-1: Manufacturer: syz [ 376.165010][ T5866] usb 7-1: SerialNumber: syz [ 376.171073][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.181178][ T5866] usb 7-1: config 0 descriptor?? [ 376.187544][T10959] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 376.187818][ T5911] usb 3-1: config 0 descriptor?? [ 376.206910][ T5866] f81534 7-1:0.12: unsupported endpoint max packet size [ 376.361004][ T30] audit: type=1400 audit(2000000110.711:1684): avc: denied { append } for pid=10952 comm="syz.7.1215" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 376.516572][ T5880] usb 7-1: USB disconnect, device number 7 [ 376.531671][T10969] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1218'. [ 376.589272][ T9] gs_usb 8-1:0.0: Couldn't get device config: (err=-121) [ 376.596530][ T9] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 376.627653][ T5911] hid_mf 0003:0079:1843.0011: unknown main item tag 0x0 [ 376.634683][ T5911] hid_mf 0003:0079:1843.0011: unknown main item tag 0x0 [ 376.650705][ T5911] hid_mf 0003:0079:1843.0011: unknown main item tag 0x0 [ 376.658615][ T5911] hid_mf 0003:0079:1843.0011: unknown main item tag 0x0 [ 376.665655][ T5911] hid_mf 0003:0079:1843.0011: unknown main item tag 0x0 [ 376.677922][ T5911] hid_mf 0003:0079:1843.0011: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.2-1/input0 [ 376.689690][ T5911] hid_mf 0003:0079:1843.0011: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 376.807727][T10961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.818029][T10961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.827432][ T5873] usb 3-1: USB disconnect, device number 58 [ 376.922768][ T5880] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 377.065510][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 377.072263][ T5880] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 377.084926][ T5880] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 377.094182][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 377.102344][ T5880] usb 7-1: Product: syz [ 377.106668][ T5880] usb 7-1: Manufacturer: syz [ 377.111259][ T5880] usb 7-1: SerialNumber: syz [ 377.122300][ T5880] usb 7-1: config 0 descriptor?? [ 377.129375][T10972] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 377.137674][ T5880] hub 7-1:0.0: bad descriptor, ignoring hub [ 377.143750][ T5880] hub 7-1:0.0: probe with driver hub failed with error -5 [ 377.599734][ T5936] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 377.783671][T10972] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 377.846485][ T5880] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 377.983362][T10972] netlink: 1244 bytes leftover after parsing attributes in process `syz.6.1219'. [ 377.993879][ T5880] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.007610][ T5880] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.019374][ T5880] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 378.030788][ T5880] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 378.040089][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.050720][T10990] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 378.096330][ T5936] usb 7-1: USB disconnect, device number 8 [ 378.438652][ T5914] usb 8-1: USB disconnect, device number 3 [ 378.452420][T11004] bridge_slave_1: default FDB implementation only supports local addresses [ 378.847022][ T5880] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 378.855774][ T5880] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input40 [ 379.100996][ T979] gspca_zc3xx: i2c_r status error 0e [ 379.780361][ T979] gspca_zc3xx: reg_r err -110 [ 379.835129][ T5880] usb 3-1: USB disconnect, device number 59 [ 379.841131][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 379.867979][ T979] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 379.915495][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 379.952674][ T979] usb 5-1: USB disconnect, device number 55 [ 380.073543][T11035] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1227'. [ 380.887827][ T5873] IPVS: starting estimator thread 0... [ 381.074418][T11049] IPVS: using max 53 ests per chain, 127200 per kthread [ 382.285264][T11080] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000000000000000000000177777777777777777777718446744073709551615fd' [ 382.403014][T11080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.998474][ T30] audit: type=1800 audit(2000000117.651:1685): pid=11083 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1239" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=37207 res=0 errno=0 [ 383.392504][ T30] audit: type=1800 audit(2000000117.651:1686): pid=11083 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1239" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=37207 res=0 errno=0 [ 383.470042][T11096] netlink: 'syz.4.1242': attribute type 4 has an invalid length. [ 383.492032][T11096] netlink: 'syz.4.1242': attribute type 27 has an invalid length. [ 383.814554][ T30] audit: type=1400 audit(2000000118.532:1687): avc: denied { watch_mount } for pid=11099 comm="syz.4.1243" path="/260" dev="tmpfs" ino=1379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 383.915214][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1245'. [ 384.185859][T11126] netlink: 'syz.2.1247': attribute type 2 has an invalid length. [ 384.225965][T11126] !: entered promiscuous mode [ 384.857729][ T979] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 384.879420][T11143] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1251'. [ 385.018286][ T30] audit: type=1400 audit(2000000119.740:1688): avc: denied { append } for pid=11144 comm="syz.4.1250" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 385.066944][ T979] usb 7-1: Using ep0 maxpacket: 8 [ 385.074123][ T979] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 385.085079][ T979] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.116557][ T979] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.125867][ T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.139885][ T979] usb 7-1: Product: á五巃ꊪížï±»ïŒ¡å«ˆëœžëµ›ç„’៰Ꞗ [ 385.163170][ T979] usb 7-1: Manufacturer: à° [ 385.168535][ T979] usb 7-1: SerialNumber: 籸â‚貸ç–㤿係ﻒ툎æ“䬇⶯ìµé¶ˆï¡ƒî‹‘撌졀椑㬧郧ᶵ껅çšà½µïˆ§ê»ê›ˆÌ¼ì»¯ã“¤ê¢Šå¸¨åºƒä¥¶âš‡á‹ƒàµ›î¿™ä¥„毜⊥廹é¬ê©½ê³¦ç‚顭滢ï±éƒ°îœ˜ëŠì‘Šíž¦á•¿í™½ë¡•à®Œëžâ—ï©æ‚¾ç•‘åžä©è‘¢ã©¦êš§ï®ŽïŽ½ï‚³êºî’®ãµžî²ç˜³ë½¿ê‘²äº¶éµ»ã¬…ç¡€ä±ì¸´ë’¦äƒ°æ¥™ã¤â™¦ïªäžžâ©Ÿè©‹ç±†ä€‚涖é¥ä†»æ©·ì¨™ï¬“プ昫袤哾텷ꛄáƒá…Ÿï‹à³Šé®¼ï«‰ [ 385.520427][T11171] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1254'. [ 385.763859][T11183] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1258'. [ 386.050614][ T979] usb 7-1: 0:2 : does not exist [ 386.109962][ T979] usb 7-1: USB disconnect, device number 9 [ 386.189072][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.245387][ T30] audit: type=1326 audit(2000000121.031:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.4.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc93d9aeb9 code=0x7ffc0000 [ 386.276352][ T30] audit: type=1326 audit(2000000121.031:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.4.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc93d9aeb9 code=0x7ffc0000 [ 386.301568][ T30] audit: type=1326 audit(2000000121.031:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.4.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc93d5b78e code=0x7ffc0000 [ 386.329133][ T30] audit: type=1326 audit(2000000121.031:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.4.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc93d5b78e code=0x7ffc0000 [ 386.354451][ T30] audit: type=1326 audit(2000000121.031:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.4.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc93d5b78e code=0x7ffc0000 [ 386.417374][ T30] audit: type=1326 audit(2000000121.031:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.4.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc93d5b78e code=0x7ffc0000 [ 386.695837][ T5880] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 386.875340][T11197] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1264'. [ 386.955810][ T5880] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 387.041443][T11201] lo speed is unknown, defaulting to 1000 [ 387.254725][ T5880] usb 8-1: config 0 has no interface number 0 [ 387.263684][ T5880] usb 8-1: config 0 interface 41 has no altsetting 0 [ 387.270679][ T5873] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 387.286969][ T5880] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 387.297108][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.305246][ T5880] usb 8-1: Product: syz [ 387.371971][ T5880] usb 8-1: Manufacturer: syz [ 387.383382][ T5880] usb 8-1: SerialNumber: syz [ 387.398878][ T5880] usb 8-1: config 0 descriptor?? [ 387.453476][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 387.463620][ T5873] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 387.473768][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 387.490962][ T5873] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 387.612246][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.644629][ T5873] usb 7-1: config 0 descriptor?? [ 387.647549][ T5873] hdpvr 7-1:0.0: Could not find bulk-in endpoint [ 387.647590][ T5873] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 387.715495][T11212] syz_tun: entered allmulticast mode [ 387.806263][ T5880] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 387.807754][ T5880] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 388.096997][ T5880] usb 8-1: USB disconnect, device number 4 [ 388.362021][T11215] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1262'. [ 388.383504][T11215] NILFS (nullb0): couldn't find nilfs on the device [ 388.841613][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 388.841625][ T30] audit: type=1400 audit(2000000123.802:1764): avc: denied { write } for pid=11216 comm="syz.2.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 388.841650][ T30] audit: type=1400 audit(2000000123.802:1765): avc: denied { accept } for pid=11216 comm="syz.2.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 388.853948][ T30] audit: type=1400 audit(2000000123.823:1766): avc: denied { getopt } for pid=11217 comm="syz.7.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 389.640095][ T5873] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 389.705969][ T5880] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 389.803819][ T5914] usb 7-1: USB disconnect, device number 10 [ 389.861256][ T5873] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 389.873186][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.903559][ T5880] usb 8-1: Using ep0 maxpacket: 32 [ 390.030392][ T30] audit: type=1400 audit(2000000124.999:1767): avc: denied { lock } for pid=11227 comm="syz.4.1272" path="socket:[36672]" dev="sockfs" ino=36672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 390.189570][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.204170][ T5880] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 390.239762][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 390.266993][ T5880] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 390.284943][T11240] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1275'. [ 390.294637][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 390.303826][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 390.313122][ T5880] usb 8-1: Product: syz [ 390.321723][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.336197][ T5880] usb 8-1: Manufacturer: syz [ 390.341143][ T5880] usb 8-1: SerialNumber: syz [ 390.346151][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 390.355496][ T5880] usb 8-1: config 0 descriptor?? [ 390.365851][T11226] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 390.375461][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 390.406044][ T5880] hub 8-1:0.0: bad descriptor, ignoring hub [ 390.569274][ T30] audit: type=1400 audit(2000000125.629:1768): avc: denied { getopt } for pid=11241 comm="syz.6.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 390.613798][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.625129][ T5880] hub 8-1:0.0: probe with driver hub failed with error -5 [ 390.722481][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 390.737031][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 390.746864][ T5880] usb 8-1: USB disconnect, device number 5 [ 390.766330][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.783928][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 390.808165][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 390.817544][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.907855][ T5852] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 390.925512][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 390.932988][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 390.942042][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.953130][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 390.960886][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 390.969924][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.980825][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 391.008562][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 391.017868][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 391.277728][ T5911] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 391.415987][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 391.426669][ T5873] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 391.438439][ T5873] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 391.442770][ T5911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 391.464230][ T5852] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 391.476142][ T5852] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x6 has invalid wMaxPacketSize 0 [ 391.485721][ T5911] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 391.486245][ T5873] usb 3-1: Product: syz [ 391.501344][ T5911] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 391.506591][ T5852] usb 7-1: config 0 interface 0 has no altsetting 0 [ 391.518184][ T5873] usb 3-1: Manufacturer: syz [ 391.526897][ T5911] usb 8-1: Product: syz [ 391.528174][ T5852] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 391.540800][ T5873] usb 3-1: SerialNumber: syz [ 391.543448][ T5911] usb 8-1: Manufacturer: syz [ 391.550514][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 391.559585][ T5911] usb 8-1: SerialNumber: syz [ 391.561647][ T5873] usb 3-1: config 0 descriptor?? [ 391.576150][ T5852] usb 7-1: Product: syz [ 391.581997][ T5911] usb 8-1: config 0 descriptor?? [ 391.583501][ T5852] usb 7-1: Manufacturer: syz [ 391.595663][ T5873] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 391.603492][T11226] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 391.610872][ T5852] usb 7-1: SerialNumber: syz [ 391.616946][ T5911] hub 8-1:0.0: bad descriptor, ignoring hub [ 391.622182][ T5852] usb 7-1: config 0 descriptor?? [ 391.653515][ T5911] hub 8-1:0.0: probe with driver hub failed with error -5 [ 391.656350][ T5852] usb 7-1: selecting invalid altsetting 0 [ 391.698094][ T30] audit: type=1400 audit(2000000126.805:1769): avc: denied { watch watch_reads } for pid=11253 comm="syz.4.1279" path="pipe:[37541]" dev="pipefs" ino=37541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 391.854301][T11242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.862994][T11242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.876015][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 391.877009][ T5936] usb 3-1: USB disconnect, device number 60 [ 391.889273][ T5911] usb 7-1: USB disconnect, device number 11 [ 391.921555][ T5936] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 391.965362][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1271'. [ 391.994614][T11226] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1271'. [ 392.126403][ T5852] usb 8-1: USB disconnect, device number 6 [ 393.280065][ T5852] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 393.287665][ T5873] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 393.498792][ T5873] usb 8-1: Using ep0 maxpacket: 16 [ 393.531599][ T5852] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 393.544730][ T5852] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 393.554776][ T5873] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 393.565796][ T5873] usb 8-1: config 1 has no interface number 0 [ 393.576125][ T5873] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 393.586110][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 393.633579][ T5852] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 393.645980][ T5873] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 393.732548][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 393.741094][ T5873] usb 8-1: config 1 interface 105 has no altsetting 0 [ 393.848955][ T5852] usb 3-1: Product: syz [ 393.855924][ T5852] usb 3-1: Manufacturer: syz [ 393.860911][ T5852] usb 3-1: SerialNumber: syz [ 393.867264][ T5873] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 393.885533][ T5852] usb 3-1: config 0 descriptor?? [ 393.890701][T11284] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1287'. [ 393.899989][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.913383][ T5852] hub 3-1:0.0: bad descriptor, ignoring hub [ 393.920204][ T5873] usb 8-1: Product: syz [ 393.924478][ T5852] hub 3-1:0.0: probe with driver hub failed with error -5 [ 393.932626][ T5873] usb 8-1: Manufacturer: syz [ 393.937718][ T5873] usb 8-1: SerialNumber: syz [ 393.944232][ T5852] usb 3-1: selecting invalid altsetting 0 [ 393.953745][T11272] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 393.968570][T11272] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 394.023370][T11289] netlink: 'syz.3.1288': attribute type 26 has an invalid length. [ 394.527338][T11272] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 395.261383][T11272] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 395.647874][ T5873] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 395.664123][ T5873] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 395.689109][ T5873] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 395.716585][ T5873] aqc111 8-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b6:d4:81:e1:8b:91 [ 395.738236][ T5873] usb 8-1: USB disconnect, device number 7 [ 395.759171][ T5873] aqc111 8-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 395.813292][ T5873] aqc111 8-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 395.822818][ T5873] aqc111 8-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 395.840835][ T5873] aqc111 8-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 395.976306][ T5911] usb 3-1: USB disconnect, device number 61 [ 396.103935][T11315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'. [ 396.519515][ T5873] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 396.671904][T11338] bond3: option arp_interval: invalid value (18446744073709551615) [ 396.698236][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 396.711513][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 396.731204][T11351] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1298'. [ 396.784201][T11338] bond3: option arp_interval: allowed values 0 - 2147483647 [ 396.811650][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 396.841909][T11338] bond3 (unregistering): Released all slaves [ 396.880714][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 396.909485][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 396.949579][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 397.011068][ T5873] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 397.047764][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.070653][ T5873] usb 3-1: Product: syz [ 397.085774][ T5873] usb 3-1: Manufacturer: syz [ 397.110576][ T5873] usb 3-1: SerialNumber: syz [ 397.887822][ T5873] usb 3-1: config 0 descriptor?? [ 397.922896][ T30] audit: type=1326 audit(2000000133.345:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc93d9aeb9 code=0x7ffc0000 [ 398.090352][ T30] audit: type=1326 audit(2000000133.345:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc93d5b78e code=0x7ffc0000 [ 398.157532][ T30] audit: type=1326 audit(2000000133.345:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc93d9aeb9 code=0x7ffc0000 [ 398.230879][ T30] audit: type=1326 audit(2000000133.345:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc93d94cd7 code=0x7ffc0000 [ 398.312163][T11375] kAFS: unparsable volume name [ 398.378663][ T30] audit: type=1326 audit(2000000133.345:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc93d3c2d9 code=0x7ffc0000 [ 398.404569][T11322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.415458][T11322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.453905][ T30] audit: type=1326 audit(2000000133.345:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc93d9aeb9 code=0x7ffc0000 [ 398.454451][T11322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.560629][ T30] audit: type=1326 audit(2000000133.345:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc93d9aeb9 code=0x7ffc0000 [ 398.564413][T11322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.648134][ T30] audit: type=1326 audit(2000000133.345:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc93d5b78e code=0x7ffc0000 [ 398.890651][ T30] audit: type=1326 audit(2000000133.408:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc93d94cd7 code=0x7ffc0000 [ 398.946601][ T30] audit: type=1326 audit(2000000133.408:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc93d3c2d9 code=0x7ffc0000 [ 399.189326][ T5873] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 399.195396][ T5873] input input42: Device does not respond to id packet P [ 399.203542][ T5873] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 399.209550][ T5873] input input42: Device does not respond to id packet B [ 399.247769][ T5873] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 399.270942][ T5873] input input42: Device does not respond to id packet N [ 399.303046][T11391] lo speed is unknown, defaulting to 1000 [ 399.357167][T11391] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1303'. [ 399.366369][ T5873] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 399.376979][ T5873] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 399.394598][ T5873] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 399.413838][ T5873] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 399.461750][ T5873] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 399.584499][ T5873] usb 3-1: USB disconnect, device number 62 [ 399.656914][T11399] overlay: Unknown parameter 'euid<00000000000000000000' [ 400.242989][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 400.299143][ T6555] block nbd0: Possible stuck request ffff888026bd0000: control (read@0,1024B). Runtime 270 seconds [ 400.309908][ T6555] block nbd0: Possible stuck request ffff888026bd0200: control (read@1024,1024B). Runtime 270 seconds [ 400.321172][ T6555] block nbd0: Possible stuck request ffff888026bd0400: control (read@2048,1024B). Runtime 270 seconds [ 400.333117][ T6555] block nbd0: Possible stuck request ffff888026bd0600: control (read@3072,1024B). Runtime 270 seconds [ 400.936736][ T5914] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 401.262005][ T5914] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 401.279469][ T5914] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 401.317789][ T5914] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 401.380242][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.410316][ T5914] usb 3-1: config 0 descriptor?? [ 401.421329][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1319'. [ 401.557502][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1319'. [ 401.790680][ T5873] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 401.965446][ T5873] usb 5-1: device descriptor read/64, error -71 [ 402.015186][ T5936] kernel read not supported for file /rfkill (pid: 5936 comm: kworker/0:7) [ 402.027603][T11438] loop2: detected capacity change from 0 to 7 [ 402.039682][T11438] Dev loop2: unable to read RDB block 7 [ 402.048976][T11438] loop2: unable to read partition table [ 402.061088][T11438] loop2: partition table beyond EOD, truncated [ 402.070201][T11438] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 402.157096][ T5914] usb 3-1: string descriptor 0 read error: -71 [ 402.480317][ T5936] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 402.491299][ C0] raw-gadget.2 gadget.6: ignoring, device is not running [ 402.590152][ T5873] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 402.610854][ T5914] usb 3-1: USB disconnect, device number 63 [ 402.622839][ T5936] usb 7-1: device descriptor read/64, error -32 [ 402.728130][ T5873] usb 5-1: device descriptor read/64, error -71 [ 402.861416][ T5873] usb usb5-port1: attempt power cycle [ 402.898910][ T5936] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 403.052619][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 403.063845][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.073702][ T5936] usb 7-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 403.082793][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.093925][ T5936] usb 7-1: config 0 descriptor?? [ 403.232808][ T979] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 403.266242][ T5873] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 403.399496][T11479] gfs2: gfs2 mount does not exist [ 403.418767][T11479] hugetlbfs: Bad value for 'size' [ 403.797868][ T5873] usb 5-1: device descriptor read/8, error -71 [ 403.805413][ T5936] pantherlord 0003:0810:0002.0012: unknown main item tag 0x0 [ 403.805554][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 403.805566][ T30] audit: type=1400 audit(2000000139.119:1910): avc: denied { remount } for pid=11472 comm="syz.2.1327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 403.812797][ T5936] pantherlord 0003:0810:0002.0012: item fetching failed at offset 6/7 [ 403.813220][ T5936] pantherlord 0003:0810:0002.0012: parse failed [ 403.856866][ T30] audit: type=1400 audit(2000000139.129:1911): avc: denied { setopt } for pid=11472 comm="syz.2.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 403.883696][ T5936] pantherlord 0003:0810:0002.0012: probe with driver pantherlord failed with error -22 [ 403.903068][ T979] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 403.919567][ T979] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.938824][ T979] usb 8-1: Product: syz [ 403.942991][ T979] usb 8-1: Manufacturer: syz [ 403.996593][T11457] netlink: 'syz.6.1320': attribute type 21 has an invalid length. [ 404.029981][ T979] usb 8-1: SerialNumber: syz [ 404.034514][ T30] audit: type=1400 audit(2000000139.749:1912): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 404.189743][ T5873] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 404.262952][ T5873] usb 5-1: device descriptor read/8, error -71 [ 404.391043][ T5873] usb usb5-port1: unable to enumerate USB device [ 404.463671][T11493] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1326'. [ 404.712248][T11506] netlink: 'syz.3.1332': attribute type 1 has an invalid length. [ 404.720239][ T30] audit: type=1400 audit(2000000140.473:1913): avc: denied { listen } for pid=11501 comm="syz.3.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 404.805748][ T30] audit: type=1400 audit(2000000140.536:1914): avc: denied { mounton } for pid=11504 comm="syz.4.1333" path="/proc/985/cgroup" dev="proc" ino=39164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 404.934565][ T30] audit: type=1400 audit(2000000140.704:1915): avc: denied { create } for pid=11501 comm="syz.3.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 405.035615][ T30] audit: type=1400 audit(2000000140.799:1916): avc: denied { create } for pid=11501 comm="syz.3.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 405.118314][ T30] audit: type=1400 audit(2000000140.799:1917): avc: denied { write } for pid=11501 comm="syz.3.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 405.207764][ T5936] usb 7-1: USB disconnect, device number 13 [ 405.623411][ T5936] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 405.769594][ T5936] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 405.778720][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.796984][ T5936] usb 7-1: config 0 descriptor?? [ 405.804183][ T9] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 405.896036][ T979] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 405.909832][ T979] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 405.926221][ T979] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 405.939242][ T979] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 405.950707][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 95 [ 405.959494][ T9] usb 3-1: can't read configurations, error -22 [ 405.988075][ T979] usb 8-1: USB disconnect, device number 8 [ 406.147552][ T9] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 406.414123][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 95 [ 406.423385][ T9] usb 3-1: can't read configurations, error -22 [ 406.435793][ T9] usb usb3-port1: attempt power cycle [ 406.738490][ T30] audit: type=1400 audit(2000000142.594:1918): avc: denied { listen } for pid=11525 comm="syz.7.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 406.823854][ T9] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 406.852376][ T5820] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 406.853286][ T5936] ath6kl: Failed to submit usb control message: -110 [ 406.897630][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 95 [ 406.917334][ T9] usb 3-1: can't read configurations, error -22 [ 406.953669][ T5936] ath6kl: unable to send the bmi data to the device: -110 [ 406.977261][ T5936] ath6kl: Unable to send get target info: -110 [ 407.107877][ T5936] ath6kl: Failed to init ath6kl core: -110 [ 407.119885][ T5936] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 407.156900][ T9] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 407.200682][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 95 [ 407.589334][ T9] usb 3-1: can't read configurations, error -22 [ 407.599736][ T9] usb usb3-port1: unable to enumerate USB device [ 407.936641][T11539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.104619][ T5914] usb 7-1: USB disconnect, device number 14 [ 409.077424][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 409.134696][T11562] macvtap1: entered promiscuous mode [ 409.158226][T11562] macvtap1: entered allmulticast mode [ 409.226383][T11570] sctp: [Deprecated]: syz.2.1352 (pid 11570) Use of int in max_burst socket option. [ 409.226383][T11570] Use struct sctp_assoc_value instead [ 409.242168][T11562] dummy0: entered promiscuous mode [ 409.280234][T11562] dummy0: entered allmulticast mode [ 409.331113][T11562] team0: Device macvtap1 failed to register rx_handler [ 409.419206][T11562] dummy0: left allmulticast mode [ 409.448078][T11562] dummy0: left promiscuous mode [ 409.632156][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1353'. [ 409.690767][ T5873] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 409.709535][T11580] bridge1: entered promiscuous mode [ 409.842508][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.852740][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 409.860725][ T5873] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 409.872467][ T5873] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 600 [ 409.885830][ T5873] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.903767][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.910902][T11592] netlink: 'syz.7.1356': attribute type 1 has an invalid length. [ 409.961218][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.973687][T11592] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1356'. [ 409.986515][ T5873] usb 3-1: Product: ë’酢븜弯嵪ç³ï…¿åŽ”॑栈륅稛䛷♤႖칛ä˜ç‘¦ç’ࣞì¶èƒ¨éº®â´«ä«¹ì®§çŽ©ãœŠì™­ì¤Žï„èºê°Œã·´Ç’â—஻硶㷵䣷쭴궴ㅠ泥筒阒ုîµé¦ë¼›êƒ²ê½¸ãºµè£‹é“ªå¦äŠ‘ã«î’봡죜䂧뿾餘﹤缕⦻赹ꆲ缑蘀銀碔à®é†›ï©á©ºî’¹Ä² [ 409.987241][T11592] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.019128][T11592] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.038572][ T5873] usb 3-1: Manufacturer: á–£à£â¨‘呹ç‰è³›â©Œà¼©è—ŒìŠî„ŽåŠºì¬Ú¾á‰›ì£˜âŠžç³ºäµ‰ï¬â­¾éƒá·µá²ï ºáŽ“ᄱ冔줵鎺ꪃ骜ബí›ï‰¬î¸£ë¥ºÒ‚冨ꥷ澷幾倻æ›ëŠˆè³ê¨Žê˜€ì›íœ›ä㬞ᇜㆵ쮦ꇛﵿ峔漥厂ã¬â”¨å¾Õ”巺僸嵶ì…腉瀒夹竫놹뵥䀥㔧Ƙ匸洂ä¥åž…语槗혹㡹רּ麷㆙ϡ䃹연å…踣挮á¾æ’¥è­žì”¶Ô’䦣쎅뷙ã£ê‹âµ¡â£±ä¿†ï¹®å§«àº¨ã—⒣ɨ [ 410.081671][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 410.116888][ T5873] usb 3-1: SerialNumber: syz [ 410.287870][T11609] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1358'. [ 410.400335][ T5873] cdc_ncm 3-1:1.0: bind() failure [ 410.485949][ T5873] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 410.545365][ T5873] cdc_ncm 3-1:1.1: bind() failure [ 410.646580][ T5873] usb 3-1: USB disconnect, device number 68 [ 411.104024][T11620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22842 sclass=netlink_route_socket pid=11620 comm=syz.3.1363 [ 411.136469][T11618] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1364'. [ 411.184585][ T30] audit: type=1326 audit(2000000147.265:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.3.1363" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f379f99aeb9 code=0x0 [ 411.239692][ T30] audit: type=1400 audit(2000000147.328:1920): avc: denied { setopt } for pid=11624 comm="syz.4.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 411.268864][T11627] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 411.280618][T11625] syzkaller0: entered promiscuous mode [ 411.286108][T11625] syzkaller0: entered allmulticast mode [ 411.303519][T11627] exFAT-fs (nullb0): invalid boot record signature [ 411.310019][T11627] exFAT-fs (nullb0): failed to read boot sector [ 411.317810][ T30] audit: type=1400 audit(2000000147.381:1921): avc: denied { setattr } for pid=11623 comm="syz.7.1365" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 411.345277][T11627] exFAT-fs (nullb0): failed to recognize exfat type [ 411.378501][ T5880] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 411.579355][ T5880] usb 7-1: not running at top speed; connect to a high speed hub [ 411.626205][ T5936] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 411.627268][ T5880] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 411.646368][ T5880] usb 7-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.666395][ T5880] usb 7-1: config 1 interface 0 has no altsetting 0 [ 412.262927][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 412.273145][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.304773][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.315695][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 412.348110][ T5936] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 412.368297][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.379520][ T5936] usb 5-1: config 0 descriptor?? [ 412.411212][ T30] audit: type=1326 audit(2000000148.557:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379f99aeb9 code=0x7ffc0000 [ 412.477360][ T30] audit: type=1326 audit(2000000148.557:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379f99aeb9 code=0x7ffc0000 [ 412.502133][ T30] audit: type=1326 audit(2000000148.557:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f379f95b78e code=0x7ffc0000 [ 412.529496][ T30] audit: type=1326 audit(2000000148.557:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f379f95b78e code=0x7ffc0000 [ 412.558179][ T30] audit: type=1326 audit(2000000148.557:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f379f95b78e code=0x7ffc0000 [ 412.586545][ T30] audit: type=1326 audit(2000000148.557:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f379f95b78e code=0x7ffc0000 [ 412.611237][ T30] audit: type=1326 audit(2000000148.567:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f379f95b78e code=0x7ffc0000 [ 412.635935][T11640] netlink: 'syz.2.1369': attribute type 1 has an invalid length. [ 412.643706][T11640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1369'. [ 412.653499][T11640] bridge0: port 3(team0) entered disabled state [ 412.659935][T11640] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.844899][ T5936] usbhid 5-1:0.0: can't add hid device: -71 [ 412.851358][ T5936] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 412.878748][ T5936] usb 5-1: USB disconnect, device number 61 [ 413.501311][T11671] fuse: Bad value for 'fd' [ 414.032667][ T5880] usb 7-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.40 [ 414.041885][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.107011][ T5880] usb 7-1: can't set config #1, error -71 [ 414.116923][ T5880] usb 7-1: USB disconnect, device number 15 [ 414.203304][T11682] netlink: 'syz.2.1381': attribute type 1 has an invalid length. [ 414.214556][T11682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1381'. [ 414.521512][ T5880] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 414.729882][ T5880] usb 7-1: Using ep0 maxpacket: 16 [ 414.787538][ T5880] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 414.881966][ T5880] usb 7-1: config 1 has no interface number 0 [ 414.957781][ T5880] usb 7-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid maxpacket 63248, setting to 1024 [ 415.081176][ T5880] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 1024 [ 415.202251][ T5880] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 415.319495][ T5880] usb 7-1: config 1 interface 105 has no altsetting 0 [ 415.369614][ T5880] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 415.496652][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.506549][ T5880] usb 7-1: Product: syz [ 415.510786][ T5880] usb 7-1: Manufacturer: syz [ 415.516382][ T5880] usb 7-1: SerialNumber: syz [ 415.523900][T11680] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 415.545084][T11680] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 416.513347][T11680] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 416.528839][T11680] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 416.714367][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1395'. [ 416.735567][T11725] netlink: 'syz.4.1394': attribute type 1 has an invalid length. [ 416.904259][T11728] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 416.914068][T11728] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 416.923672][T11728] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 416.931316][T11728] UDF-fs: Scanning with blocksize 512 failed [ 416.937777][T11728] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 416.947401][T11728] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 416.956940][T11728] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 416.964570][T11728] UDF-fs: Scanning with blocksize 1024 failed [ 416.970978][T11728] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 416.980585][T11728] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 416.990124][T11728] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 416.997874][T11728] UDF-fs: Scanning with blocksize 2048 failed [ 417.004211][T11728] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 417.013797][T11728] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 417.023339][T11728] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 417.030985][T11728] UDF-fs: Scanning with blocksize 4096 failed [ 417.037052][T11728] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 417.075765][ T5880] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 417.128976][T11735] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1394'. [ 417.165359][T11731] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 417.180137][T11731] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 417.221026][T11727] overlayfs: failed to resolve './file0': -2 [ 417.233688][T11727] vti0: entered promiscuous mode [ 417.238984][T11727] vti0: entered allmulticast mode [ 417.736396][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 417.736411][ T30] audit: type=1400 audit(2000000154.142:2012): avc: denied { connect } for pid=11744 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 418.206104][T11748] lo speed is unknown, defaulting to 1000 [ 418.310546][ T5880] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 418.352699][ T5880] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: 0 [ 418.414092][ T5880] aqc111 7-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:ae:f3:69:96:fd [ 418.654552][ T30] audit: type=1400 audit(2000000155.107:2013): avc: denied { load_policy } for pid=11759 comm="syz.7.1403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 418.694865][T11760] SELinux: failed to load policy [ 418.890067][ T9] usb 7-1: USB disconnect, device number 16 [ 418.899733][ T9] aqc111 7-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 419.233591][T11779] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1407'. [ 419.312977][ T30] audit: type=1400 audit(2000000155.685:2014): avc: denied { map } for pid=11775 comm="syz.3.1407" path="socket:[39738]" dev="sockfs" ino=39738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 419.973043][ T9] aqc111 7-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 419.984708][ T9] aqc111 7-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 420.122030][T11792] random: crng reseeded on system resumption [ 420.698296][ T9] aqc111 7-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 420.912513][T11798] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 420.932386][ T30] audit: type=1400 audit(2000000157.501:2015): avc: denied { accept } for pid=11800 comm="syz.4.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.992418][ T30] audit: type=1400 audit(2000000157.501:2016): avc: denied { read } for pid=11800 comm="syz.4.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 421.047924][T11798] netlink: 'syz.7.1410': attribute type 1 has an invalid length. [ 421.055862][T11798] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1410'. [ 421.832280][ T30] audit: type=1326 audit(2000000158.446:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b95d9aeb9 code=0x7ffc0000 [ 421.971386][ T30] audit: type=1326 audit(2000000158.530:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.7.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09c19aeb9 code=0x7ffc0000 [ 422.052479][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1420'. [ 422.056418][ T30] audit: type=1326 audit(2000000158.530:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.7.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09c19aeb9 code=0x7ffc0000 [ 422.077413][T11832] lo speed is unknown, defaulting to 1000 [ 422.176296][ T30] audit: type=1326 audit(2000000158.551:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b95d9aeb9 code=0x7ffc0000 [ 422.224952][ T30] audit: type=1326 audit(2000000158.551:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b95d5b78e code=0x7ffc0000 [ 422.505871][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 422.505887][ T30] audit: type=1326 audit(2000000159.160:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2b95d9aeb9 code=0x7ffc0000 [ 422.646061][ T30] audit: type=1326 audit(2000000159.160:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b95d94cd7 code=0x7ffc0000 [ 422.767197][T11832] dvmrp1: entered allmulticast mode [ 423.008130][ T49] dvmrp1 (unregistering): left allmulticast mode [ 423.161739][ T5852] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 423.322252][ T5852] usb 3-1: Using ep0 maxpacket: 8 [ 423.328724][ T5852] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 423.353816][ T5852] usb 3-1: config 127 has no interface number 1 [ 423.360097][ T5852] usb 3-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0x91, changing to 0x81 [ 423.398129][ T5852] usb 3-1: config 127 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.426818][ T5852] usb 3-1: config 127 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.713817][ T5852] usb 3-1: config 127 interface 171 has no altsetting 0 [ 423.720793][ T5852] usb 3-1: config 127 interface 0 has no altsetting 0 [ 423.738100][T11886] netlink: 'syz.6.1430': attribute type 10 has an invalid length. [ 423.770913][ T5852] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 423.781061][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.796398][ T5852] usb 3-1: Product: syz [ 423.805995][ T5852] usb 3-1: Manufacturer: syz [ 423.811648][T11886] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.825800][ T5852] usb 3-1: SerialNumber: syz [ 423.854505][T11886] bridge_slave_1: left allmulticast mode [ 423.875596][T11886] bridge_slave_1: left promiscuous mode [ 423.922484][T11886] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.232927][T11886] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 424.277369][ T5852] xr_serial 3-1:127.171: xr_serial converter detected [ 424.308273][ T5852] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 424.323271][ T5852] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 424.341419][ T5914] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 424.374176][ T5852] usb 3-1: USB disconnect, device number 69 [ 424.388907][ T5852] xr_serial 3-1:127.171: device disconnected [ 424.493810][ T5914] usb 8-1: Using ep0 maxpacket: 32 [ 424.500377][ T5914] usb 8-1: config 0 has an invalid interface number: 90 but max is 0 [ 424.508699][ T5914] usb 8-1: config 0 has no interface number 0 [ 424.517178][ T5914] usb 8-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 424.526469][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.534807][ T5914] usb 8-1: Product: syz [ 424.538974][ T5914] usb 8-1: Manufacturer: syz [ 424.543587][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 424.551249][ T5914] usb 8-1: SerialNumber: syz [ 424.553185][ T5914] usb 8-1: config 0 descriptor?? [ 424.633614][T11903] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1435'. [ 424.703013][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 424.709421][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 424.717842][ T9] usb 5-1: config 0 has no interface number 0 [ 424.725693][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 424.735707][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.744016][ T9] usb 5-1: Product: syz [ 424.748165][ T9] usb 5-1: Manufacturer: syz [ 424.752995][ T9] usb 5-1: SerialNumber: syz [ 424.784153][ T9] usb 5-1: config 0 descriptor?? [ 424.800873][ T5914] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 424.819531][ T9] smsc95xx v2.0.0 [ 424.820378][ T5914] input: Griffin PowerMate as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.90/input/input43 [ 424.867075][ C1] powermate: config urb returned -71 [ 424.872727][ C1] powermate: config urb returned -71 [ 424.878336][ C1] powermate: config urb returned -71 [ 424.883755][ C1] powermate: config urb returned -71 [ 424.912301][ T5914] usb 8-1: USB disconnect, device number 9 [ 424.918298][ C1] powermate 8-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 424.923484][T11907] lo speed is unknown, defaulting to 1000 [ 425.216558][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 425.241313][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 425.271165][ T30] audit: type=1400 audit(2000000162.047:2126): avc: denied { create } for pid=11913 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 425.308841][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 425.332104][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 425.455936][ T9] usb 5-1: USB disconnect, device number 62 [ 425.552002][ T30] audit: type=1400 audit(2000000162.351:2127): avc: denied { write } for pid=11926 comm="syz.7.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 425.874732][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 426.047575][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 426.114583][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.194792][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 426.236010][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.290960][ T9] usb 5-1: Product: syz [ 426.319822][ T9] usb 5-1: Manufacturer: syz [ 426.350725][ T9] usb 5-1: SerialNumber: syz [ 426.375749][ T9] usb 5-1: config 0 descriptor?? [ 426.392407][ T9] sr9700 5-1:0.0: probe with driver sr9700 failed with error -22 [ 427.070911][ T30] audit: type=1400 audit(2000000163.936:2128): avc: denied { shutdown } for pid=11948 comm="syz.7.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 427.331765][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1449'. [ 427.385910][T11955] vlan0: entered allmulticast mode [ 427.428768][T11955] veth0_vlan: entered allmulticast mode [ 427.620128][ T30] audit: type=1400 audit(2000000164.493:2129): avc: denied { map } for pid=11960 comm="syz.3.1450" path="socket:[40111]" dev="sockfs" ino=40111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 427.974029][T11971] IPVS: Error connecting to the multicast addr [ 428.055478][ T5852] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 428.286466][T11988] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1441'. [ 428.293131][ T5852] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 428.296130][T11988] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1441'. [ 428.319656][T11988] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1441'. [ 428.331912][T11988] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1441'. [ 428.348393][T11988] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1441'. [ 428.350944][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.362907][T11988] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1441'. [ 428.380618][T11988] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1441'. [ 428.389732][T11988] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1441'. [ 428.417883][ T5852] usb 7-1: Product: syz [ 428.428240][ T5852] usb 7-1: Manufacturer: syz [ 428.461383][T11988] bridge1: left promiscuous mode [ 428.495790][ T5852] usb 7-1: SerialNumber: syz [ 428.653424][ T5852] usb 7-1: config 0 descriptor?? [ 428.856456][ T5852] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 428.869405][T11992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.881110][T11992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.882892][ T5852] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 428.948950][ T6555] block nbd0: Possible stuck request ffff888026bd0000: control (read@0,1024B). Runtime 300 seconds [ 428.959752][ T6555] block nbd0: Possible stuck request ffff888026bd0200: control (read@1024,1024B). Runtime 300 seconds [ 428.970799][ T6555] block nbd0: Possible stuck request ffff888026bd0400: control (read@2048,1024B). Runtime 300 seconds [ 428.983812][ T6555] block nbd0: Possible stuck request ffff888026bd0600: control (read@3072,1024B). Runtime 300 seconds [ 429.004979][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 429.008804][ T5866] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 429.058835][T11997] vxcan1: entered promiscuous mode [ 429.265700][T11997] team0: Device vxcan1 is of different type [ 429.420659][ T5866] usb 3-1: device descriptor read/64, error -71 [ 429.517575][T12004] FAULT_INJECTION: forcing a failure. [ 429.517575][T12004] name failslab, interval 1, probability 0, space 0, times 0 [ 429.538811][T12004] CPU: 1 UID: 0 PID: 12004 Comm: syz.2.1459 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.538834][T12004] Tainted: [L]=SOFTLOCKUP [ 429.538838][T12004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 429.538845][T12004] Call Trace: [ 429.538850][T12004] [ 429.538855][T12004] dump_stack_lvl+0x100/0x190 [ 429.538875][T12004] should_fail_ex.cold+0x5/0xa [ 429.538888][T12004] should_failslab+0xc2/0x120 [ 429.538904][T12004] __kmalloc_cache_noprof+0x80/0x810 [ 429.538917][T12004] ? rtnl_newlink+0x126/0x2380 [ 429.538936][T12004] ? __pfx_rtnl_newlink+0x10/0x10 [ 429.538951][T12004] ? rtnl_newlink+0x126/0x2380 [ 429.538966][T12004] rtnl_newlink+0x126/0x2380 [ 429.538986][T12004] ? __pfx_rtnl_newlink+0x10/0x10 [ 429.539001][T12004] ? find_held_lock+0x2b/0x80 [ 429.539017][T12004] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 429.539033][T12004] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 429.539051][T12004] ? avc_has_perm_noaudit+0x145/0x3b0 [ 429.539070][T12004] ? __lock_acquire+0x4a5/0x2630 [ 429.539081][T12004] ? consume_skb+0xd6/0x110 [ 429.539104][T12004] ? find_held_lock+0x2b/0x80 [ 429.539118][T12004] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 429.539134][T12004] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 429.539150][T12004] ? __pfx_rtnl_newlink+0x10/0x10 [ 429.539167][T12004] rtnetlink_rcv_msg+0x95e/0xe90 [ 429.539184][T12004] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.539204][T12004] ? ref_tracker_free+0x37e/0x6c0 [ 429.539223][T12004] netlink_rcv_skb+0x159/0x420 [ 429.539241][T12004] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.539258][T12004] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.539280][T12004] ? netlink_deliver_tap+0x1ae/0xcc0 [ 429.539299][T12004] netlink_unicast+0x5aa/0x870 [ 429.539318][T12004] ? __pfx_netlink_unicast+0x10/0x10 [ 429.539340][T12004] netlink_sendmsg+0x8b0/0xda0 [ 429.539360][T12004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.539376][T12004] ? PageHuge+0x180/0x180 [ 429.539392][T12004] ____sys_sendmsg+0xa54/0xc30 [ 429.539405][T12004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.539422][T12004] ___sys_sendmsg+0x190/0x1e0 [ 429.539434][T12004] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.539453][T12004] ? find_held_lock+0x2b/0x80 [ 429.539476][T12004] __sys_sendmsg+0x170/0x220 [ 429.539492][T12004] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.539516][T12004] do_syscall_64+0xc9/0xf80 [ 429.539530][T12004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.539542][T12004] RIP: 0033:0x7f2b95d9aeb9 [ 429.539552][T12004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.539563][T12004] RSP: 002b:00007f2b96be9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.539574][T12004] RAX: ffffffffffffffda RBX: 00007f2b96015fa0 RCX: 00007f2b95d9aeb9 [ 429.539581][T12004] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000005 [ 429.539588][T12004] RBP: 00007f2b96be9090 R08: 0000000000000000 R09: 0000000000000000 [ 429.539594][T12004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.539605][T12004] R13: 00007f2b96016038 R14: 00007f2b96015fa0 R15: 00007ffc11ec70e8 [ 429.539620][T12004] [ 429.876670][T12009] ptrace attach of "./syz-executor exec"[12008] was attempted by "./syz-executor exec"[12009] [ 430.225982][T12013] fuse: Bad value for 'fd' [ 430.352677][ T5914] usb 5-1: USB disconnect, device number 63 [ 430.538514][ T5852] usb 7-1: USB disconnect, device number 17 [ 431.113876][ T5852] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 431.262708][ T5852] usb 7-1: config 1 has an invalid interface number: 3 but max is 2 [ 431.275064][ T5852] usb 7-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 431.332809][ T5852] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 431.374888][ T5852] usb 7-1: config 1 has no interface number 1 [ 431.403099][ T5852] usb 7-1: too many endpoints for config 1 interface 3 altsetting 15: 68, using maximum allowed: 30 [ 431.438470][ T5852] usb 7-1: config 1 interface 3 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 431.510492][ T5852] usb 7-1: config 1 interface 3 has no altsetting 0 [ 431.545761][ T5852] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 431.556990][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.580916][ T5852] usb 7-1: Product: syz [ 431.594818][ T5852] usb 7-1: Manufacturer: syz [ 431.610717][ T5852] usb 7-1: SerialNumber: syz [ 431.978193][T12034] __nla_validate_parse: 140 callbacks suppressed [ 431.978228][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1467'. [ 432.267363][T12040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.337690][T12040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.368824][ T30] audit: type=1400 audit(2000000169.500:2130): avc: denied { append } for pid=12033 comm="syz.6.1467" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 433.345300][ T5852] hub 7-1:1.3: Invalid hub with more than one config or interface [ 433.371448][ T5852] hub 7-1:1.3: probe with driver hub failed with error -22 [ 433.398725][ T5852] usb 7-1: USB disconnect, device number 18 [ 433.991021][ T30] audit: type=1400 audit(2000000171.201:2131): avc: denied { mounton } for pid=12065 comm="syz.7.1476" path="/64/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 434.001996][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1476'. [ 434.031310][T12060] netlink: 182 bytes leftover after parsing attributes in process `syz.3.1473'. [ 434.083402][T12069] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 434.101933][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 434.274630][ T9] usb 5-1: config 0 has no interfaces? [ 434.286650][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 434.311387][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.331999][ T9] usb 5-1: config 0 descriptor?? [ 434.435701][T12077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.484260][T12079] macvtap0: entered allmulticast mode [ 434.489792][T12079] veth0_macvtap: entered allmulticast mode [ 434.498557][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 434.533506][ T5873] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 434.789233][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.808020][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 434.819809][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 434.832542][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 434.843468][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 435.264404][ T5873] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 435.275643][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 435.316690][ T5873] usb 7-1: Product: syz [ 435.320880][ T5873] usb 7-1: Manufacturer: syz [ 435.335772][ T5873] usb 7-1: SerialNumber: syz [ 435.358128][ T5873] usb 7-1: config 0 descriptor?? [ 435.389686][T12088] Bluetooth: MGMT ver 1.23 [ 435.581938][ T5873] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 435.588732][ T5873] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 435.794031][T12096] cgroup: Unknown subsys name 'cpuset' [ 435.866256][ T5873] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 435.876147][ T5873] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 435.894740][ T5873] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 435.935452][ T5873] usb 7-1: USB disconnect, device number 19 [ 436.003802][T12100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.054951][T12100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.737578][T12117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.795537][T12117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.858315][T12117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1486'. [ 437.066797][T12115] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1489'. [ 437.076339][T12115] netlink: ct family unspecified [ 437.377807][T12126] netlink: 182 bytes leftover after parsing attributes in process `syz.4.1490'. [ 437.522698][ T979] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 437.706326][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 437.736457][ T979] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 437.744908][ T979] usb 3-1: config 0 has no interface number 0 [ 437.754688][ T979] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 437.786148][ T979] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 437.798929][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.814100][ T979] usb 3-1: Product: syz [ 437.820897][ T979] usb 3-1: Manufacturer: syz [ 437.830736][ T979] usb 3-1: SerialNumber: syz [ 437.846643][ T979] usb 3-1: config 0 descriptor?? [ 437.889269][ T979] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 437.906116][ T979] em28xx 3-1:0.132: Video interface 132 found: [ 438.075490][ T5873] usb 5-1: USB disconnect, device number 64 [ 438.239601][ T5852] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 438.262035][ T979] em28xx 3-1:0.132: chip ID is em2884 [ 438.387326][ T5852] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 438.399689][ T5873] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 438.414604][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.432810][ T5852] usb 7-1: Product: syz [ 438.440888][ T5852] usb 7-1: Manufacturer: syz [ 438.450491][ T5852] usb 7-1: SerialNumber: syz [ 438.501048][T12125] lo speed is unknown, defaulting to 1000 [ 438.558028][T12143] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1491'. [ 438.571766][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 438.585124][ T5873] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 438.609805][ T5873] usb 5-1: config 179 has no interface number 0 [ 438.624942][ T5873] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 438.639174][ T5873] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 438.724734][ T5873] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 438.737786][ T5873] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 438.749756][ T5873] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 438.763628][ T5873] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 438.798271][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.810409][ T30] audit: type=1400 audit(2000000176.271:2132): avc: denied { ioctl } for pid=12145 comm="syz.3.1497" path="socket:[40479]" dev="sockfs" ino=40479 ioctlcmd=0x5541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 438.848037][ T979] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 438.851993][ T30] audit: type=1400 audit(2000000176.271:2133): avc: denied { write } for pid=12145 comm="syz.3.1497" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 438.857054][T12142] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 438.884904][ T30] audit: type=1400 audit(2000000176.271:2134): avc: denied { read } for pid=12145 comm="syz.3.1497" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 438.890827][ T979] em28xx 3-1:0.132: board has no eeprom [ 438.982116][ T979] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 439.049335][ T979] em28xx 3-1:0.132: analog set to bulk mode. [ 439.055382][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 439.302716][ T979] usb 3-1: USB disconnect, device number 72 [ 439.321912][ T979] em28xx 3-1:0.132: Disconnecting em28xx [ 439.452944][ T5914] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input44 [ 439.454625][ T30] audit: type=1400 audit(2000000176.943:2135): avc: granted { setsecparam } for pid=12153 comm="syz.7.1498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 439.609897][ T9] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 439.619028][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 439.644027][T12142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.653590][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 439.660013][T12142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.685470][ T9] usb 3-1: Decoder not found [ 439.711797][ T9] em28xx 3-1:0.132: failed to create media graph [ 439.748091][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 439.781545][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 439.818089][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1501'. [ 439.828517][ T979] em28xx 3-1:0.132: Closing input extension [ 439.845670][ T5852] rtl8150 7-1:1.0: couldn't reset the device [ 439.846359][ T979] em28xx 3-1:0.132: Freeing device [ 439.857732][ T5852] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 439.913259][ T9] usb 5-1: USB disconnect, device number 65 [ 439.913298][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 439.927633][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 440.502909][T12168] qnx4: unable to read the superblock [ 440.993521][ T5852] usb 7-1: USB disconnect, device number 20 [ 441.529414][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1515'. [ 441.538847][T12255] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1515'. [ 441.671948][T12267] lo speed is unknown, defaulting to 1000 [ 441.688297][ T5914] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 441.719705][T12267] 9p: Bad value for 'rfdno' [ 441.897162][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 441.904214][ T5914] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 441.913527][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.928054][ T5914] usb 3-1: config 0 descriptor?? [ 441.944048][ T5914] as10x_usb: device has been detected [ 441.956146][ T5914] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 441.987016][ T5914] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 442.044983][ T5914] as10x_usb: error during firmware upload part1 [ 442.054716][ T5914] Registered device nBox DVB-T Dongle [ 442.135789][ T5914] usb 3-1: USB disconnect, device number 73 [ 442.167873][ T5914] Unregistered device nBox DVB-T Dongle [ 442.169719][ T5914] as10x_usb: device has been disconnected [ 442.543551][T12296] input: syz0 as /devices/virtual/input/input45 [ 442.579651][ T30] audit: type=1400 audit(2000000180.229:2136): avc: denied { ioctl } for pid=12295 comm="syz.7.1526" path="socket:[41897]" dev="sockfs" ino=41897 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 442.706886][ T30] audit: type=1400 audit(2000000180.355:2137): avc: denied { call } for pid=12294 comm="syz.6.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 442.925729][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 443.077978][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 443.091012][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 443.107899][ T9] usb 7-1: config 255 has an invalid interface number: 81 but max is 0 [ 443.116275][ T9] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 443.130540][ T9] usb 7-1: config 255 has no interface number 0 [ 443.136912][ T9] usb 7-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 443.149489][ T9] usb 7-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 443.162566][ T9] usb 7-1: config 255 interface 81 has no altsetting 0 [ 443.171886][ T9] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 443.181607][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.193079][ T9] usb 7-1: Product: syz [ 443.197308][ T9] usb 7-1: Manufacturer: syz [ 443.202007][ T9] usb 7-1: SerialNumber: syz [ 443.675788][T12321] netlink: 6448 bytes leftover after parsing attributes in process `syz.2.1532'. [ 444.030503][ T5914] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 444.163868][ T5914] usb 3-1: device descriptor read/64, error -71 [ 444.220417][T12325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64616 sclass=netlink_route_socket pid=12325 comm=syz.3.1533 [ 444.392509][ T5914] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 444.535337][ T5914] usb 3-1: device descriptor read/64, error -71 [ 444.640714][ T5914] usb usb3-port1: attempt power cycle [ 444.668759][ T5936] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 444.811612][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 444.817135][ T5936] usb 5-1: too many configurations: 102, using maximum allowed: 8 [ 444.834259][ T5936] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 444.843501][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.851731][ T5936] usb 5-1: Product: syz [ 444.855968][ T5936] usb 5-1: Manufacturer: syz [ 444.865569][ T5936] usb 5-1: SerialNumber: syz [ 444.880704][ T5936] usb 5-1: config 0 descriptor?? [ 444.899392][ T5936] gspca_main: 047d:5003 too many config [ 444.960609][T12330] xt_hashlimit: size too large, truncated to 1048576 [ 444.967925][ T5914] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 444.994353][ T5914] usb 3-1: device descriptor read/8, error -71 [ 445.087573][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.099247][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.108265][ T5936] usb 5-1: USB disconnect, device number 66 [ 445.178146][ T30] audit: type=1400 audit(2000000182.959:2138): avc: denied { create } for pid=12335 comm="syz.3.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 445.221168][ T5914] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 445.242629][ T5914] usb 3-1: device descriptor read/8, error -71 [ 445.345373][ T5914] usb usb3-port1: unable to enumerate USB device [ 445.414378][ T9] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:255.81/input/input47 [ 445.457087][ T9] usb 7-1: USB disconnect, device number 21 [ 445.463430][ C0] usbtouchscreen 7-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -19 [ 446.114103][T12343] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 446.165833][T12352] netlink: 'syz.6.1541': attribute type 1 has an invalid length. [ 446.173629][T12352] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1541'. [ 446.230558][T12352] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.807398][T12362] syz_tun: entered allmulticast mode [ 446.818403][T12362] kernel read not supported for file /cgroup.stat (pid: 12362 comm: syz.4.1544) [ 446.831804][ T30] audit: type=1800 audit(2000000184.691:2139): pid=12362 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1544" name="cgroup.stat" dev="mqueue" ino=43042 res=0 errno=0 [ 446.854018][T12361] syz_tun: left allmulticast mode [ 446.854179][ T30] audit: type=1800 audit(2000000184.691:2140): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1545" name="file1" dev="tmpfs" ino=441 res=0 errno=0 [ 446.895877][ T30] audit: type=1800 audit(2000000184.691:2141): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1545" name="file1" dev="tmpfs" ino=441 res=0 errno=0 [ 447.248873][ T5852] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 447.706140][T12382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1548'. [ 448.266250][ T5852] usb 7-1: device descriptor read/64, error -71 [ 448.898320][ T5852] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 448.936471][T12400] bridge0: entered allmulticast mode [ 449.031790][ T5852] usb 7-1: device descriptor read/64, error -71 [ 449.342717][T12406] batadv_slave_1: entered promiscuous mode [ 449.669827][ T5852] usb usb7-port1: attempt power cycle [ 451.457193][T12457] binder: 12456:12457 ioctl 40044591 2000000001c0 returned -22 [ 451.650914][ T30] audit: type=1400 audit(2000000189.740:2142): avc: denied { connect } for pid=12462 comm="syz.6.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 451.895198][T12464] netlink: 'syz.6.1570': attribute type 1 has an invalid length. [ 452.071241][ T30] audit: type=1400 audit(2000000189.751:2143): avc: denied { write } for pid=12462 comm="syz.6.1570" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 452.121029][T12464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.160286][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1570'. [ 452.173371][T12471] bond1: (slave veth3): Enslaving as an active interface with a down link [ 452.234031][T12464] bond1: (slave dummy0): making interface the new active one [ 452.243111][T12464] dummy0: entered promiscuous mode [ 452.248616][T12464] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 452.933538][T12464] bond1 (unregistering): (slave veth3): Releasing active interface [ 452.957883][T12464] bond1 (unregistering): (slave dummy0): Releasing active interface [ 452.966721][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1573'. [ 452.980867][T12464] bond1 (unregistering): Released all slaves [ 453.020729][ T30] audit: type=1326 audit(2000000191.189:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379f99aeb9 code=0x7ffc0000 [ 453.049402][ T30] audit: type=1326 audit(2000000191.189:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f379f95b78e code=0x7ffc0000 [ 453.073864][ T30] audit: type=1326 audit(2000000191.189:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379f99aeb9 code=0x7ffc0000 [ 453.119892][ T30] audit: type=1326 audit(2000000191.221:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f379f95b78e code=0x7ffc0000 [ 453.144429][ T30] audit: type=1326 audit(2000000191.221:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f379f95b78e code=0x7ffc0000 [ 453.174016][ T30] audit: type=1326 audit(2000000191.221:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f379f95b78e code=0x7ffc0000 [ 453.200060][ T30] audit: type=1326 audit(2000000191.221:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f379f95b78e code=0x7ffc0000 [ 453.477981][ T30] audit: type=1326 audit(2000000191.252:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f379f95b78e code=0x7ffc0000 [ 453.632938][T12499] bridge0: port 3(team0) entered blocking state [ 453.639224][T12499] bridge0: port 3(team0) entered listening state [ 453.645635][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.652684][T12499] bridge0: port 2(bridge_slave_1) entered listening state [ 453.660274][T12499] bridge0: left allmulticast mode [ 453.704463][T12499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.999488][T12516] hub 9-0:1.0: USB hub found [ 454.004407][T12516] hub 9-0:1.0: 1 port detected [ 454.042369][ T5852] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 454.175686][ T5852] usb 5-1: device descriptor read/64, error -71 [ 454.400222][T12525] kvm: pic: non byte write [ 454.413760][ T5852] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 454.426553][T12525] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3349529702 (428739801856 ns) > initial count (100683520 ns). Using initial count to start timer. [ 454.538154][ T5852] usb 5-1: device descriptor read/64, error -71 [ 454.672024][ T5852] usb usb5-port1: attempt power cycle [ 454.946848][ T5914] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 455.023230][ T5852] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 455.062672][ T5852] usb 5-1: device descriptor read/8, error -71 [ 455.111359][ T5914] usb 7-1: Using ep0 maxpacket: 32 [ 455.129286][ T5914] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 455.147440][ T31] INFO: task syz.5.1006:10009 blocked for more than 143 seconds. [ 455.147711][ T5914] usb 7-1: config 0 has no interface number 0 [ 455.156630][ T31] Tainted: G L syzkaller #0 [ 455.178533][ T5914] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 455.179844][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.192111][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.215860][ T31] task:syz.5.1006 state:D stack:24232 pid:10009 tgid:9998 ppid:8395 task_flags:0x400140 flags:0x00080002 [ 455.232756][ T5914] usb 7-1: Product: syz [ 455.238397][ T5914] usb 7-1: Manufacturer: syz [ 455.242108][ T31] Call Trace: [ 455.248422][ T31] [ 455.251552][ T5914] usb 7-1: SerialNumber: syz [ 455.255799][ T31] ? __schedule+0xf67/0x5fa0 [ 455.262417][ T5914] usb 7-1: config 0 descriptor?? [ 455.268528][ T31] __schedule+0xfe6/0x5fa0 [ 455.277669][ T31] ? __lock_acquire+0x4a5/0x2630 [ 455.278068][ T5914] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 455.286961][ T31] ? __pfx___schedule+0x10/0x10 [ 455.300080][ T5852] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 455.309282][ T31] ? find_held_lock+0x2b/0x80 [ 455.313974][ T31] ? schedule+0x2bf/0x390 [ 455.318288][ T31] schedule+0xdd/0x390 [ 455.322673][ T31] io_schedule+0x8a/0xf0 [ 455.326912][ T31] folio_wait_bit_common+0x414/0xa70 [ 455.330437][ T5852] usb 5-1: device descriptor read/8, error -71 [ 455.337526][ T31] ? folio_wait_bit_common+0x2a0/0xa70 [ 455.343804][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 455.356447][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 455.362311][ T31] ? __pfx___might_resched+0x10/0x10 [ 455.368127][ T31] migrate_pages_batch+0x1b85/0x4530 [ 455.373856][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 455.382577][ T31] ? __pfx_compaction_free+0x10/0x10 [ 455.388355][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 455.394192][ T31] ? finish_task_switch.isra.0+0x204/0xb70 [ 455.400453][ T31] ? rcu_is_watching+0x12/0xc0 [ 455.405596][ T31] ? __schedule+0xf67/0x5fa0 [ 455.410669][ T31] ? __schedule+0xff8/0x5fa0 [ 455.415601][ T31] migrate_pages_sync+0x4db/0x880 [ 455.420875][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 455.426529][ T31] ? __pfx_compaction_free+0x10/0x10 [ 455.432044][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 455.437943][ T31] migrate_pages+0x1a5b/0x2810 [ 455.443346][ T5852] usb usb5-port1: unable to enumerate USB device [ 455.450488][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 455.458403][ T31] ? __pfx_compaction_free+0x10/0x10 [ 455.463949][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 455.471508][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 455.482250][ T5914] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 455.492000][ T31] ? __nr_to_section+0xaa/0x100 [ 455.511538][ T31] ? pfn_to_online_page+0x178/0x4c0 [ 455.516893][ T31] compact_zone+0x240c/0x4320 [ 455.522583][ T5914] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 455.532345][ T31] ? __pfx_compact_zone+0x10/0x10 [ 455.540859][ T31] ? __flush_work+0xa38/0xcb0 [ 455.548303][ T31] ? __flush_work+0xa38/0xcb0 [ 455.553082][ T31] compact_node+0x17f/0x2c0 [ 455.557998][ T31] ? __pfx_compact_node+0x10/0x10 [ 455.563102][ T31] ? __lru_add_drain_all+0x43c/0x650 [ 455.574747][ T31] ? __lru_add_drain_all+0x441/0x650 [ 455.580502][ T31] sysctl_compaction_handler+0x141/0x210 [ 455.586431][ T31] proc_sys_call_handler+0x47f/0x5a0 [ 455.591980][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 455.598240][ T31] ? splice_from_pipe_next+0x1ec/0x5a0 [ 455.603980][ T31] iter_file_splice_write+0x82b/0x10a0 [ 455.606465][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 455.620676][ C1] bridge0: port 3(team0) entered learning state [ 455.628333][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 455.634543][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 455.640179][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 455.646480][ T31] direct_splice_actor+0x192/0x6c0 [ 455.652222][ T31] splice_direct_to_actor+0x345/0xa30 [ 455.657655][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 455.676279][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 455.874700][T12547] syz.2.1594 (12547): drop_caches: 2 [ 455.887946][ T31] do_splice_direct+0x174/0x240 [ 455.893549][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 455.899680][ T31] ? avc_policy_seqno+0x9/0x20 [ 455.904468][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 455.910936][ T31] ? rw_verify_area+0xce/0x6d0 [ 455.915733][ T31] do_sendfile+0xadc/0xe20 [ 455.920212][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 455.925162][ T31] __x64_sys_sendfile64+0x154/0x220 [ 455.930522][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 455.936357][ T31] do_syscall_64+0xc9/0xf80 [ 455.940938][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.946854][ T31] RIP: 0033:0x7f0c5039aeb9 [ 456.033431][ T31] RSP: 002b:00007f0c51245028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 456.042774][ T31] RAX: ffffffffffffffda RBX: 00007f0c50616270 RCX: 00007f0c5039aeb9 [ 456.050965][ T31] RDX: 00002000000000c0 RSI: 000000000000000b RDI: 000000000000000c [ 456.059341][ T31] RBP: 00007f0c50408c1f R08: 0000000000000000 R09: 0000000000000000 [ 456.067904][ T31] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 456.076284][ T31] R13: 00007f0c50616308 R14: 00007f0c50616270 R15: 00007ffc4de4f068 [ 456.084631][ T31] [ 456.107939][ T31] [ 456.107939][ T31] Showing all locks held in the system: [ 456.147466][ T31] 1 lock held by khungtaskd/31: [ 456.160848][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 456.170979][ T31] 2 locks held by getty/5566: [ 456.176061][ T31] #0: ffff88814d2b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 456.186095][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 456.196545][ T31] 1 lock held by udevd/5993: [ 456.201253][ T31] #0: ffff888141bd3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 456.210973][ T31] 1 lock held by syz.5.1006/10009: [ 456.216613][ T31] #0: ffff888034c70420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 456.232593][ T31] 2 locks held by kworker/u8:36/12200: [ 456.240982][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 456.253141][ T31] #1: ffffc9000391fc98 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 456.263463][ T31] 1 lock held by syz.6.1592/12558: [ 456.268813][ T31] [ 456.273794][ T31] ============================================= [ 456.273794][ T31] [ 456.282357][ T31] NMI backtrace for cpu 1 [ 456.282374][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 456.282402][ T31] Tainted: [L]=SOFTLOCKUP [ 456.282407][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 456.282418][ T31] Call Trace: [ 456.282423][ T31] [ 456.282430][ T31] dump_stack_lvl+0x100/0x190 [ 456.282456][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 456.282481][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 456.282500][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 456.282533][ T31] sys_info+0x141/0x190 [ 456.282554][ T31] watchdog+0xcc3/0xfe0 [ 456.282586][ T31] ? __pfx_watchdog+0x10/0x10 [ 456.282611][ T31] ? __kthread_parkme+0x18c/0x230 [ 456.282637][ T31] ? __pfx_watchdog+0x10/0x10 [ 456.282662][ T31] ? __pfx_watchdog+0x10/0x10 [ 456.282685][ T31] kthread+0x3b3/0x730 [ 456.282703][ T31] ? __pfx_kthread+0x10/0x10 [ 456.282720][ T31] ? ret_from_fork+0x79/0xaf0 [ 456.282738][ T31] ? ret_from_fork+0x79/0xaf0 [ 456.282757][ T31] ? rcu_is_watching+0x12/0xc0 [ 456.282780][ T31] ? __pfx_kthread+0x10/0x10 [ 456.282798][ T31] ret_from_fork+0x754/0xaf0 [ 456.282818][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 456.282839][ T31] ? __switch_to+0x7b9/0x10c0 [ 456.282863][ T31] ? __pfx_kthread+0x10/0x10 [ 456.282881][ T31] ret_from_fork_asm+0x1a/0x30 [ 456.282909][ T31] [ 456.282932][ T31] Sending NMI from CPU 1 to CPUs 0: [ 456.428217][ C0] NMI backtrace for cpu 0 [ 456.428232][ C0] CPU: 0 UID: 0 PID: 5169 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 456.428251][ C0] Tainted: [L]=SOFTLOCKUP [ 456.428256][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 456.428264][ C0] RIP: 0010:__lock_acquire+0x398/0x2630 [ 456.428281][ C0] Code: 90 e8 bc 36 01 03 85 c0 74 10 44 8b 15 51 87 d4 0e 45 85 d2 0f 84 51 0f 00 00 90 31 c0 48 8b 54 24 68 65 48 2b 15 70 75 01 12 <0f> 85 65 1c 00 00 48 83 c4 70 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc [ 456.428293][ C0] RSP: 0018:ffffc9000411f530 EFLAGS: 00000046 [ 456.428305][ C0] RAX: 0000000000000001 RBX: ffff88807d65b018 RCX: 0000000000000001 [ 456.428313][ C0] RDX: 0000000000000000 RSI: 00000000ab1725e3 RDI: 00000000c6942346 [ 456.428321][ C0] RBP: ffff88807d65a4c0 R08: 000000001b7cfd63 R09: 0000000000000007 [ 456.428330][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 456.428339][ C0] R13: 0000000000000007 R14: 0000000000000001 R15: aa0ea35905c5c154 [ 456.428347][ C0] FS: 00007f19b3466c80(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000 [ 456.428360][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.428369][ C0] CR2: 00007f2b95fe6358 CR3: 0000000027849000 CR4: 00000000003526f0 [ 456.428378][ C0] Call Trace: [ 456.428382][ C0] [ 456.428387][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 456.428406][ C0] ? stack_depot_save_flags+0x27/0x9c0 [ 456.428424][ C0] ? __lock_acquire+0x4a5/0x2630 [ 456.428437][ C0] lock_acquire+0x17c/0x330 [ 456.428448][ C0] ? __update_page_owner_free_handle.isra.0+0x3c/0x4d0 [ 456.428466][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 456.428482][ C0] ? __kmalloc_node_track_caller_noprof+0x310/0x9d0 [ 456.428500][ C0] ? kmalloc_reserve+0xef/0x2c0 [ 456.428518][ C0] ? __alloc_skb+0x186/0x410 [ 456.428532][ C0] ? alloc_skb_with_frags+0xe0/0x810 [ 456.428550][ C0] __update_page_owner_free_handle.isra.0+0x4d/0x4d0 [ 456.428566][ C0] ? __update_page_owner_free_handle.isra.0+0x3c/0x4d0 [ 456.428584][ C0] __reset_page_owner+0x93/0x190 [ 456.428599][ C0] __free_frozen_pages+0x822/0x1130 [ 456.428621][ C0] __put_partials+0x127/0x160 [ 456.428634][ C0] qlist_free_all+0x47/0xe0 [ 456.428648][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 456.428663][ C0] __kasan_slab_alloc+0x69/0x90 [ 456.428678][ C0] __kmalloc_node_track_caller_noprof+0x310/0x9d0 [ 456.428693][ C0] ? rcu_is_watching+0x12/0xc0 [ 456.428709][ C0] ? __alloc_skb+0x186/0x410 [ 456.428723][ C0] ? kmalloc_reserve+0xef/0x2c0 [ 456.428742][ C0] kmalloc_reserve+0xef/0x2c0 [ 456.428761][ C0] __alloc_skb+0x186/0x410 [ 456.428774][ C0] ? __alloc_skb+0x35d/0x410 [ 456.428787][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 456.428801][ C0] ? __lock_acquire+0x4a5/0x2630 [ 456.428815][ C0] ? __lock_acquire+0x4a5/0x2630 [ 456.428827][ C0] alloc_skb_with_frags+0xe0/0x810 [ 456.428846][ C0] ? find_held_lock+0x2b/0x80 [ 456.428863][ C0] sock_alloc_send_pskb+0x801/0x980 [ 456.428882][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 456.428896][ C0] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 456.428916][ C0] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 456.428939][ C0] unix_dgram_sendmsg+0x3c7/0x1820 [ 456.428953][ C0] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 456.428969][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 456.428985][ C0] __sys_sendto+0x4aa/0x520 [ 456.428999][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 456.429018][ C0] ? do_syslog+0x18c/0x6d0 [ 456.429035][ C0] ? xfd_validate_state+0x129/0x190 [ 456.429050][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 456.429064][ C0] ? do_syscall_64+0x94/0xf80 [ 456.429078][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 456.429091][ C0] do_syscall_64+0xc9/0xf80 [ 456.429105][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.429117][ C0] RIP: 0033:0x7f19b35b6407 [ 456.429127][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 456.429155][ C0] RSP: 002b:00007ffe229e8940 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 456.429168][ C0] RAX: ffffffffffffffda RBX: 00007f19b3466c80 RCX: 00007f19b35b6407 [ 456.429176][ C0] RDX: 0000000000000073 RSI: 00007ffe229e8a80 RDI: 0000000000000003 [ 456.429184][ C0] RBP: 00007ffe229e8eb0 R08: 0000000000000000 R09: 0000000000000000 [ 456.429191][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe229e8ec8 [ 456.429199][ C0] R13: 00007ffe229e8a80 R14: 0000000000000058 R15: 00007ffe229e8a80 [ 456.429213][ C0] [ 456.876506][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 456.883346][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 456.894006][ T31] Tainted: [L]=SOFTLOCKUP [ 456.898318][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 456.908360][ T31] Call Trace: [ 456.911626][ T31] [ 456.914549][ T31] dump_stack_lvl+0x100/0x190 [ 456.919224][ T31] vpanic+0x20d/0x630 [ 456.923203][ T31] panic+0xd1/0xd1 [ 456.926903][ T31] ? __pfx_panic+0x10/0x10 [ 456.931298][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 456.937439][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 456.943574][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 456.949718][ T31] ? watchdog.cold+0x198/0x1ca [ 456.954457][ T31] ? watchdog+0xcd3/0xfe0 [ 456.958779][ T31] watchdog.cold+0x1a9/0x1ca [ 456.963442][ T31] ? __pfx_watchdog+0x10/0x10 [ 456.968104][ T31] ? __kthread_parkme+0x18c/0x230 [ 456.973119][ T31] ? __pfx_watchdog+0x10/0x10 [ 456.977792][ T31] ? __pfx_watchdog+0x10/0x10 [ 456.982471][ T31] kthread+0x3b3/0x730 [ 456.986524][ T31] ? __pfx_kthread+0x10/0x10 [ 456.991112][ T31] ? ret_from_fork+0x79/0xaf0 [ 456.995791][ T31] ? ret_from_fork+0x79/0xaf0 [ 457.000457][ T31] ? rcu_is_watching+0x12/0xc0 [ 457.005207][ T31] ? __pfx_kthread+0x10/0x10 [ 457.009778][ T31] ret_from_fork+0x754/0xaf0 [ 457.014358][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 457.019459][ T31] ? __switch_to+0x7b9/0x10c0 [ 457.024118][ T31] ? __pfx_kthread+0x10/0x10 [ 457.028687][ T31] ret_from_fork_asm+0x1a/0x30 [ 457.033441][ T31] [ 457.036720][ T31] Kernel Offset: disabled [ 457.041018][ T31] Rebooting in 86400 seconds..