last executing test programs:

3m56.44389621s ago: executing program 32 (id=129):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000080))
r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000280)={'pcl818\x00', [0x2f00, 0x4, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xf6, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x1]})
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r6, 0x0, 0x0, 0x2002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r7, @ANYRES8], 0x50)

2m59.222267992s ago: executing program 1 (id=300):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b1a0100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="3900004ed13eeb"])
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0x2, 0x44, {0x44, 0x20, "dac4ddc41ff21fa469316dc86ddb146ef571db82f44a90fee4ff7ce499bbb8510a939e879c0874dd63dd6d2e385728b47fc096dc15a74c67d107240fc6552ba530c6"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f0000000100)={0x0, 0x22, 0x1a, {[@global=@item_012={0x2, 0x1, 0x5, '1W'}, @local=@item_012={0x0, 0x2, 0x3}, @main=@item_012={0x2, 0x0, 0xb, "388b"}, @main=@item_012={0x2, 0x0, 0x8, "6a05"}, @local=@item_012={0x1, 0x2, 0x7, '@'}, @global=@item_4={0x3, 0x1, 0xb, "b1d317e8"}, @local=@item_4={0x3, 0x2, 0xa, "728ae2c4"}, @global=@item_012={0x1, 0x1, 0xb, 'L'}, @global=@item_012={0x1, 0x1, 0xb, 's'}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0xc, 0x1, {0x22, 0x9b4}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x20, 0x15, 0x47, "d6998835891377d5d393927b82b37b7b7300d1c2d74cc12a6bf1b2c7f6b823578290c110633e32c82bbda76765035e3a4aac8814603d0d272b0ef9694047cacaa5ed0f007047b6"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xee}, &(0x7f0000000300)={0x20, 0x1, 0xb6, "66d9054480482db19f0f2f3cfcaa3f0e133afc84b58f26c7d47553caefa08ba59d81e42fa45251ddb3451f71832678f387090397d2326184827e448886643e9f39874af7ddff5068a47217bebb86b52ce1e9d611f773339c649eebb5b79cf4ac70d2d662ba0bec2e4de5a7aace617c7a63031b50f84c791efe3660bbf63532245d9ab20dd13e64ff5175d8246ef0f2b9636659be341ac8c8694c554bffc095ad9d8003723c7e6c278e263a78af4bff8206658035f760"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x1}})

2m55.858738686s ago: executing program 1 (id=311):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

2m55.622772759s ago: executing program 1 (id=314):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8001)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)=@multiplanar_overlay={0x6, 0x1, 0x4, 0x40, 0x4, {}, {0x3, 0x0, 0x3, 0x3, 0x8b, 0xe, "03a750cf"}, 0x9, 0x3, {0x0}, 0x40})
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x3, 0x0, 0x2, {0xa, 0x4e22, 0xfffeffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000180)=@req={0xc76, 0xff9, 0x7fffffff, 0x3}, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x8, 0x6, @remote}, 0x14)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff)

2m53.05374468s ago: executing program 33 (id=322):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r0, 0x402, 0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff)
syz_io_uring_setup(0xb7f, 0x0, &(0x7f0000000100), 0x0)
r5 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
signalfd4(r5, &(0x7f00000000c0)={[0xffffffffffff1d2a]}, 0x8, 0x80000)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r4, 0x1, 0xa6, 0x0, {{}, {0xa6}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0)

2m53.011448113s ago: executing program 1 (id=324):
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x8a02, 0xc1)
sendfile(r0, r0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x6)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, r0, 0x0)
r3 = syz_clone(0xa4828000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndpcmp(0x0, 0x5, 0x167502)
socket$netlink(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c)
rmdir(&(0x7f0000000080)='./file0\x00')

2m52.799834385s ago: executing program 1 (id=325):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000400), 0x12)
unshare(0x8000000)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
chroot(0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(0x0, 0x0)
umount2(&(0x7f00000004c0)='./file0\x00', 0x4)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xfffffffffffffe61, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x110}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

2m52.411447245s ago: executing program 1 (id=327):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtfilter={0xfffffee4, 0x2c, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x3}, {0xf, 0xe}, {0xd, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7075}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4008800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"})
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x7, {0x0, 0x0, 0x7fffffff, 0x8, 0x8001, 0x5, {0x3, 0x0, 0x0, 0x400000000, 0x0, 0xffffff7ffffffffd, 0x0, 0x4, 0x4, 0x6000, 0x7fff, 0x0, 0x0, 0x800000, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$netlink(0x10, 0x3, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000400)={'dmm32at\x00', [0x109, 0x5, 0x86c, 0xa, 0x40, 0x401, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0xc, 0x1138fce9, 0x6, 0xffffffa7, 0x4, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x10000, 0xe2e0, 0x9, 0x1, 0x4, 0x223, 0x7, 0x5, 0x5]})

2m51.138528698s ago: executing program 34 (id=327):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtfilter={0xfffffee4, 0x2c, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x3}, {0xf, 0xe}, {0xd, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7075}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4008800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"})
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x7, {0x0, 0x0, 0x7fffffff, 0x8, 0x8001, 0x5, {0x3, 0x0, 0x0, 0x400000000, 0x0, 0xffffff7ffffffffd, 0x0, 0x4, 0x4, 0x6000, 0x7fff, 0x0, 0x0, 0x800000, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$netlink(0x10, 0x3, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000400)={'dmm32at\x00', [0x109, 0x5, 0x86c, 0xa, 0x40, 0x401, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0xc, 0x1138fce9, 0x6, 0xffffffa7, 0x4, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x10000, 0xe2e0, 0x9, 0x1, 0x4, 0x223, 0x7, 0x5, 0x5]})

2m14.088404855s ago: executing program 4 (id=451):
mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0])
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xbd, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(r1, 0x3, &(0x7f0000000000)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r6 = gettid()
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x2, 0x0, 0x7ffffffe})
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
tkill(r6, 0xb)
utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000032c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x90, 0x0, 0x6, {0x1, 0x0, 0x7fffbfdf, 0x1fffffffffffd, 0x400, 0xc, {0x4, 0x5408, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = geteuid()
lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
sendmsg$netlink(r4, &(0x7f0000000b00)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)=[{&(0x7f00000003c0)={0xa8, 0x16, 0x2, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0x14a, 0x0, 0x0, @uid}, @nested={0xc, 0x49, 0x0, 0x1, [@typed={0x7, 0xb9, 0x0, 0x0, @str='ct\x00'}]}, @generic="6f3e4a36743d21da06fb2781835cc9582ddcb90008da23c5bfdf844800d32ca942d5d3a5b06894202cb35a75e96770ada07c6da94798f4fdd1", @typed={0x8, 0x5a, 0x0, 0x0, @uid}, @typed={0x8, 0xfe, 0x0, 0x0, @pid=r1}, @typed={0x35, 0x10d, 0x0, 0x0, @binary="03d4cfee45cab574e8ad39abd03636b2908551a2833fda13e2638c7dc843649c860e1652f7165b429db2c0563dabce0418"}]}, 0xa8}, {&(0x7f0000000480)=ANY=[@ANYBLOB="70000000140000022bbd7000fcdbdf256010c6805c002f007343bbd53ae66e6c8352a1921986c93b12fec09068fbc0cf58e18161761b7e5dcb3ae1c0514a9c09be44b1e8d39f4a28fb3ee8dc5a9dd15117e9b969f91d5c2f68fb7b282239a3df43a662ac3b73114bedf20b895e226c06"], 0x70}, {&(0x7f0000002140)={0x1154, 0x2c, 0x2, 0x70bd25, 0x25dfdbfc, "", [@generic="c526a7b0e3b97a35bdbb91210b96bf9ba2d054e0541e08938d7e00cc58358a08a834975af846c60f3e815ab211e479e8e87f4f01cc94d3bf9476", @typed={0xc, 0x9f, 0x0, 0x0, @str='\xd3%/!{)-\x00'}, @nested={0x10f3, 0xaa, 0x0, 0x1, [@generic="8714d19791814f49352eebe304f022349ccba6da2736bbf27d6a3eb58d06ddc79bfdfe2a7472eaba7c5565195d0f7d2d816f892b295c68fbcab8d2e407214ddf8018c3e1f2b67d35c6ddc1abbc2c9d78eeecf3e3386dfa3c5720d9fa8bc3c80712c5076080f2e850cad92fb9fc45d81bd41fdf6fb679e017aa44b19a49a1a2dc16d477b30a6ba473414af466e62db54efcba604cfc812c4de931ba5ad2c1a1cd42112fdd3c75405cd9", @typed={0xc, 0x9e, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x21}, @generic="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", @generic="752e7e66738f0c24face1ae40351d98f57d9708b9a305d960f76df5b3c89a03e31aecb52449aa55d3d91d858616dce40516d1b9e005e"]}, @typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x1154}], 0x3, &(0x7f0000002000)=ANY=[@ANYBLOB="080000000000f8bfdc0008001785cca21db8eab5242fd83bf734fd6954591c419dca0362f429ce", @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB], 0x128, 0x4814}, 0x40814)

2m13.155414675s ago: executing program 6 (id=459):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{0x804, 0x8040}, {0x1, 0xffff}, 0x6, 0x2})
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
fcntl$dupfd(r1, 0x0, r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)

2m11.867340365s ago: executing program 6 (id=463):
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000500)=0x4, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
r1 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r2, 0x1})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r6, 0x0, 0x20000050)
ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000240))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4010, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090008000000000000000a100000000000000000000008001e0001"], 0x24}}, 0x0)
prctl$PR_MCE_KILL(0x35, 0x1, 0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)

2m11.811315194s ago: executing program 4 (id=464):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x351202, 0x85)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x5)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r3, 0x11e, 0x11, 0x0, &(0x7f0000000040))
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
mq_notify(0xffffffffffffffff, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)
sendto$inet6(r4, &(0x7f0000000340)="cc", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84)
unshare(0x2c060000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)

2m10.68424894s ago: executing program 6 (id=465):
r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
poll(0x0, 0x0, 0x7)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085000000500000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10)
getresgid(&(0x7f0000008b80), &(0x7f0000008bc0), &(0x7f0000008c00))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
fallocate(r0, 0x0, 0x9, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
setpriority(0x0, 0x0, 0x7)
r4 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8})
mq_timedreceive(r4, 0x0, 0xfffffffffffffee3, 0x1, 0x0)
mq_timedreceive(r4, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0)
mq_timedreceive(r4, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0)
mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000400)=0xfb, 0x3, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

2m9.548441358s ago: executing program 6 (id=467):
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x8a02, 0xc1)
sendfile(r0, r0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x6)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, r0, 0x0)
r3 = syz_clone(0xa4828000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c)
rmdir(&(0x7f0000000080)='./file0\x00')

2m9.218445754s ago: executing program 6 (id=469):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082)
syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22004d9078020000f70000000000000000eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b"], 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xf, 0x0, &(0x7f0000000840))
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000008300)=0x5)

2m8.937719833s ago: executing program 4 (id=474):
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
socket$kcm(0x29, 0x5, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r8=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)

2m8.247346974s ago: executing program 6 (id=476):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @ptr={0xc, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x61, 0x61, 0x0, 0x0]}}, &(0x7f00000003c0)=""/157, 0x37, 0x9d, 0x1, 0x2}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, r1}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_setup(0x524, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r6, 0x358, 0x800000000000)
socket$igmp(0x2, 0x3, 0x2)
sched_setaffinity(r6, 0x0, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
listen(r7, 0x3)
r8 = accept4$bt_l2cap(r7, &(0x7f0000000200), 0x0, 0x800)
setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000100)=0x8, 0x2)

2m7.811039585s ago: executing program 35 (id=476):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @ptr={0xc, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x61, 0x61, 0x0, 0x0]}}, &(0x7f00000003c0)=""/157, 0x37, 0x9d, 0x1, 0x2}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, r1}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_setup(0x524, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r6, 0x358, 0x800000000000)
socket$igmp(0x2, 0x3, 0x2)
sched_setaffinity(r6, 0x0, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
listen(r7, 0x3)
r8 = accept4$bt_l2cap(r7, &(0x7f0000000200), 0x0, 0x800)
setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000100)=0x8, 0x2)

2m7.091905392s ago: executing program 4 (id=480):
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x8a02, 0xc1)
sendfile(r0, r0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x6)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, r0, 0x0)
syz_clone(0xa4828000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c)
rmdir(&(0x7f0000000080)='./file0\x00')

2m7.070870628s ago: executing program 0 (id=481):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtfilter={0xfffffee4, 0x2c, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x3}, {0xf, 0xe}, {0xd, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7075}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4008800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"})
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40014)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x7, {0x0, 0x0, 0x7fffffff, 0x8, 0x8001, 0x5, {0x3, 0x0, 0x0, 0x400000000, 0x0, 0xffffff7ffffffffd, 0x0, 0x4, 0x4, 0x6000, 0x7fff, 0x0, 0x0, 0x800000, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$netlink(0x10, 0x3, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000400)={'dmm32at\x00', [0x109, 0x5, 0x86c, 0xa, 0x40, 0x401, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0xc, 0x1138fce9, 0x6, 0xffffffa7, 0x4, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x10000, 0xe2e0, 0x9, 0x1, 0x4, 0x223, 0x7, 0x5, 0x5]})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_usb_connect(0x2, 0x56, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000000)=0x40000009, 0x4)
process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

2m6.77828116s ago: executing program 4 (id=482):
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
fcntl$setownex(r0, 0xf, &(0x7f0000001100)={0x2, r1})
r2 = add_key$keyring(&(0x7f00000024c0), &(0x7f0000002500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001140), 0x8000, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1, 0x0, 0x3)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x6, 0x4002)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000002540)={0xfc00, 0x200, 0x10, 0x9, <r6=>0x0}, &(0x7f0000002580)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000025c0)={<r7=>r6, 0x1, 0x20}, &(0x7f0000002600)=0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002640)=ANY=[@ANYRES64=r7, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x20048040}, 0x4)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000002640), 0x0, 0x20000010)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004840, 0x0, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r11, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r12, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000002480)={&(0x7f0000002400)=[{0x7ff, 0x5810, 0xa9, &(0x7f0000001180)="31c94b92a8a440538780aa5b07d39e44bdb7d2d1946bc1043b517d21bddebcd3f9099191d0404701a15045be617bed228e96f21b6f2ed0ee3b16fd90e7d5b34f44589bcd8f9677907f83689eaf247fdebaaa50a5db24263db75a26c1d929d5d13903114aea0163acd7f7c07c80581a35494657f649303ba7387452487a9d3086d5c31c948829f5df0b5fb3add887f5c3e723e90afc3d714294c0fb98dbb175b0a0fdead5bca1c6f2e5"}, {0x687, 0x2100, 0xe6, &(0x7f0000001240)="87b27bfeddeda835c91c6a00131567e166a9b367e6dcc10dd60c54823a3a6e316017ddd764814d0dfaa95c35a33c73bc276eb430db561eb66731257f8c856c0323a667c67cbaa44573f2185132123618cb084b30194b6566e92b618346d82d256fd6c9b9b8c67a282d636d35ae2bedc7612a0354e9efad2111fe1629dd7dde7edd2dfa327493addc418acb5f66ca36f835741ff94dde9f90967a83b5a14b19666069878f08099bf4ebe65d4e0a39097c368cb4ddb58fd63ab3a82d9920892f4eb56c57efd985de237a374ba8b92d74b393cf9cc3364735c20eea16c3e87892f422647a1104ce"}, {0x8, 0xa10, 0xc0, &(0x7f0000001340)="a12e3b697846867592debc8789f145f371e6470fde144cc8ed245e62405395eaa993444e84a1373485fa120e78513c62dd9ae76cc8142d372902c0f830d40b8c32048355c6aa43623972fea052f6bcfb4dd1bb7caf6ef7c86aebd73eb3ba02fb0d360841b9da5005baed9a2ea7b6a1c431791c747d91dc75673cb584762da71021d33e934a32abe8d599a5f19e2e983bf9e06d8c1a9f0d2d17fc4dafff4a08c275912f16c8a0dab47381ce88fa986a18c772581eebfbcb2a8cca5a86bcb1caa2"}, {0x9f9, 0x601, 0x1000, &(0x7f0000001400)="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"}, {0x8, 0x2000, 0x7f, &(0x7f0000000040)="3028dd826d8a37ec92836fedc1db984b739917656a9a10712bc9f48bdcf1c63cf3be56945d752d14ec0fcf63a1fcbd903fccfb180ae17a1cc95a8d8b4835a683ee12ef0ce87ca9d7c9afe82b8d0dff512b0a92e10a135ee752feceaafb7d073f2cf1affb223eec1261f3ce6622162b2a7f27d59ac19a969cff524dc55c7bf6"}], 0x5})

2m6.003384244s ago: executing program 4 (id=485):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, 0x0, 0x0, 0x10005, 0x0)
r6 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2f08, 0x11a, 0x0, &(0x7f0000000a80)="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", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff9}, 0x50)
socket$netlink(0x10, 0x3, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18001b000000000000000000000963a2b27b3d00000079a3b10f59adf211223fb4178d8ba6000013c3fe9ce025d727e5f25b9a7698f548a7170100b61dbe124570dc95432981194d1659bdeaa897792912ba3ef86f6efa"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)

2m5.626085754s ago: executing program 36 (id=485):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, 0x0, 0x0, 0x10005, 0x0)
r6 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2f08, 0x11a, 0x0, &(0x7f0000000a80)="a162cef056010000000000000052444e1adbe6ff0c75082bf336ae79be4eec32cb4d9c420e2bcd93426cf075b4d19043e53e0dffd1e2595c3d472a6c27f2dd02c4cf31cf98cb483bb892a6c9190edf3cfe4371655d615195aa3451221123ec0d8a6b9bbc4a7070e7a8e036c0f29846199bf03ef9d42627a536c4d9365eb5f57857a84e2b4a1e32ca93353c205406f089a9c9e0670316f15c3c2e369c24524ff8583fd545d6e837e8bff8f49dcd646cf00fa88ab2394d3ccf062b9c52e145341f36f9cdc19938d3b81ff1b58e822bd26582b86e7b7309b292232821ac73ff14c4d3db2cfe53a809de3e97680dd20da2c4b408f64506a8145b8130717bd4cd710efaba6936a4f43314e083a698d95324c054bb5aa1f9df7ee6c4c7", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff9}, 0x50)
socket$netlink(0x10, 0x3, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18001b000000000000000000000963a2b27b3d00000079a3b10f59adf211223fb4178d8ba6000013c3fe9ce025d727e5f25b9a7698f548a7170100b61dbe124570dc95432981194d1659bdeaa897792912ba3ef86f6efa"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)

2m5.622667177s ago: executing program 0 (id=487):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x1}, 0x8)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/prev\x00')
writev(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000440)='FROZEN\x00', 0x7)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r6, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000140)=""/82, 0x52}, {&(0x7f00000013c0)=""/168, 0xa8}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001700)=""/197, 0xc5}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000015c0)=""/165, 0xa5}], 0x8, &(0x7f0000001500)=""/123, 0x7b}, 0x2106)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))

2m5.024085173s ago: executing program 0 (id=490):
r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
poll(0x0, 0x0, 0x7)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085000000500000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10)
getresgid(&(0x7f0000008b80), &(0x7f0000008bc0), &(0x7f0000008c00))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
fallocate(r0, 0x0, 0x9, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
setpriority(0x0, 0x0, 0x7)
r4 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8})
mq_timedreceive(r4, 0x0, 0xfffffffffffffee3, 0x1, 0x0)
mq_timedreceive(r4, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0)
mq_timedreceive(r4, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0)
mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000400)=0xfb, 0x3, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

2m4.68777826s ago: executing program 0 (id=491):
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x8a02, 0xc1)
sendfile(r0, r0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x6)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c)
rmdir(&(0x7f0000000080)='./file0\x00')

2m4.610678726s ago: executing program 0 (id=492):
r0 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getpid()
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r4 = syz_clone(0xa4943200, 0x0, 0xfffffffffffffdc5, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x200, 0x0)
fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0)
r8 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r10 = dup(r9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r10, 0x2c93a000)
r11 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r11, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xd04, r12, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x318, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x6, 0x5, 0x8, 0x1, 0x2, 0x1, 0x400]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x7, 0x6, 0x1, 0x5, 0x40, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x1e, 0x5, 0x60, 0x24, 0xa51bda2d300e00f8, 0x3, 0x60]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x4}, {0x4, 0x4}, {0x3, 0x4}, {0x3, 0x9}, {0x3, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x6, 0x7}, {0x7, 0x1}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0xa}, {0x5, 0x6}, {0x2, 0x2}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x4}, {0x4, 0x6}, {0x4, 0x9}, {0x4, 0x5}, {0x0, 0x4}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x3}, {0x2, 0x8}, {0x7, 0x5}, {0x6, 0x7}, {0x7, 0x3}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x5}, {0x7, 0x3}, {0x2, 0x9}, {0x4, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x2}, {0x6, 0x7}, {0x2}, {0x5, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x5, 0x3}, {0x2}, {0x1, 0x9}, {0x2, 0x4}, {0x5, 0x5}, {0x2, 0x2}, {0x6, 0x2}, {0x5, 0x4}, {0x4, 0x6}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x9}, {0x3, 0x9}, {0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x5, 0x2, 0x5, 0x7fff, 0x4f4, 0x951]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x1}, {0x7, 0x9}, {0x3}, {0x6, 0xa}, {0x1, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x6}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x4}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x2}, {0x4}, {0x1, 0x5}, {0x4, 0x2}, {0x3, 0x5}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x4}, {0x6, 0x9}, {0x6, 0x6}, {0x3, 0x2}, {0x3, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x3, 0x5}, {0x5, 0x6}, {0x3, 0x7}, {0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0x3}, {0x2, 0x9}, {0x7, 0x8}, {0x4, 0x4}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x5}, {0x4, 0xa}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x1ff, 0x0, 0x1, 0xc1, 0x7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x2, 0x400, 0xd, 0x9, 0x8d33, 0x7fff, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x7}, {0x4, 0x2}, {0x6, 0x8}, {0x1, 0x9}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7ff, 0x9, 0x1, 0x35fd, 0x10, 0x3d92, 0x2]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0xa}, {0x4}, {0x5, 0x3}, {0x5, 0x6}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x7}, {0x2, 0x5}, {0x2, 0x5}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0xa}, {0x6, 0x8}, {0x7, 0x8}, {0x1}, {0x6}, {0x7, 0x2}, {0x1}, {0x2, 0x1}, {0x6}, {0x7, 0x1}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x2}, {0x7}, {0x2, 0x8}, {0x5}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x3, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x2, 0x8}, {0x1, 0xa}, {0x3, 0x8}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x2}, {0x1}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x1, 0x3}, {}, {0x3, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x3}, {0x4, 0x3}, {0x3, 0x8}, {0x1}, {0x1, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x6, 0x8, 0x1, 0x6, 0x0, 0x217]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x200, 0x2, 0x800, 0x0, 0xc5bc, 0xd6a7, 0xf]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x6}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x7, 0x8}, {0x5, 0x9}, {0x2, 0x4}, {0x3, 0x8}, {0x4, 0x4}, {0x1, 0x1}, {0x7}, {0x2, 0x3}, {0x5, 0x6}, {0x6, 0x5}, {0x4, 0x5}, {0x3, 0x8}, {0x6, 0x8}, {0x3, 0x4}, {0x7, 0xa}, {0x1}, {0x2, 0x4}, {}, {0x4}, {0x7, 0x4}, {0x5, 0x1}, {0x5, 0xa}, {0x3, 0x5}, {0x5, 0x3}, {0x1, 0x5}, {0x2, 0x5}, {0x6, 0x6}, {0x6, 0x9}, {0x2, 0x2}, {0x2}, {0x5, 0x7}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x7}, {0x4, 0x9}, {0x5, 0x8}, {0x1, 0x9}, {0x0, 0xa}, {}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x8}, {0x5}, {0x4, 0x1}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x3}, {0x2, 0x7}, {0x3, 0x9}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x4}, {0x1, 0x1}, {0x1}, {0x7, 0x1}, {0x6}, {0x1, 0x7}, {0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x9}, {0x7, 0x2}, {0x2, 0xa}, {0x3, 0x4}, {0x3, 0x1}, {0x7, 0x2}, {0x0, 0x9}, {0x2}, {0x3, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x4, 0x6}, {0x6, 0x3}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0xa}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0xa}, {0x4, 0x6}, {0x6, 0x9}, {0x6}, {0x1, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x0, 0x3}, {0x5}, {0x4, 0x7}]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x67c, 0x0, 0x1, 0x8, 0x0, 0x2, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x6}, {0x5, 0x9}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0x4}, {0x1, 0x3}, {0x1}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0xa}, {0x1, 0xa}, {0x1, 0x7}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x7}, {0x4, 0x2}, {0x3, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x6, 0xa}, {0x1, 0x4}, {0x4, 0x2}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x5}, {0x4, 0x6}, {0x0, 0x9}, {0x0, 0x9}, {0x7, 0x5}, {0x5, 0x7}, {0x0, 0x2}, {0x4, 0x2}, {0x2, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x7, 0x4}, {0x1, 0x4}, {0x3, 0x4}, {0x6, 0xa}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x5}, {0x7, 0x4}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x2}, {0x7, 0xa}, {0x6, 0x1}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x188, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x5}, {0x0, 0x8}, {0x1}, {}, {0x5, 0x8}, {0x6, 0x8}, {0x1, 0x7}, {0x7, 0x8}, {0x4, 0x6}, {0x6, 0x8}, {0x2, 0x9}, {0x6, 0x3}, {0x3, 0x1}, {0x5}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x5}, {0x5}, {0x0, 0x2}, {0x3, 0x6}, {0x3, 0x2}, {0x1, 0x4}, {0x4, 0x9}, {0x6, 0x9}, {0x6, 0x4}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0xa}, {0x1, 0xa}, {0x5, 0x7}, {0x6, 0x9}, {0x5, 0x4}, {0x5}, {0x0, 0xa}, {0x5, 0x5}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0xb}, {0x6, 0x4}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x4, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x5, 0x9}, {0x6, 0x3}, {0x6, 0x2}, {0x4, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x6}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x16, 0x60, 0x12, 0x48, 0x5, 0x6, 0x2, 0x9, 0x35b13d245f7f8775, 0x2, 0x18, 0x56, 0x48, 0x6, 0x6, 0x30, 0x16, 0x2, 0x5, 0x2, 0x6, 0x6, 0x1e]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4a, 0x60, 0x3, 0x4, 0x12, 0x6c, 0x36, 0x0, 0x5e, 0x5, 0x1, 0x18, 0x60, 0x9, 0x60, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x8000, 0x401, 0x4, 0x8, 0xb, 0x6d]}}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x4}, {0x5, 0x8}, {0x6, 0x4}, {0x2, 0x5}, {0x6, 0x2}, {0x7, 0xa}, {0x7, 0xa}, {0x2, 0x8}, {0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x7, 0x7}, {0x1, 0x7}, {0x1, 0x5}, {0x3, 0x4}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0x7}, {0x2, 0x6}, {0x5, 0x6}, {0x4, 0x7}, {0x7, 0x4}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x2}, {0x6, 0x7}, {0x1, 0x7}, {0x4, 0x6}, {0x4, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {0x5, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x3, 0x8}, {0x1}, {0x4, 0x7}, {0x5, 0x9}, {0x1, 0x6}, {0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x3, 0xa}, {0x3, 0x7}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0x3}, {0x3, 0x8}, {0x3, 0x4}, {0x1, 0xa}, {0x2, 0x1}, {0x6, 0x5}, {0x4, 0x8}, {0x2, 0xa}, {0x5, 0x5}, {0x3, 0x5}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0xa}, {0x2, 0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x5, 0x1}, {0x1, 0xa}, {0x6, 0x7}, {0x1}, {0x1}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x3, 0x8}, {0x1, 0x9}, {0x6, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x2, 0x9}, {0x4, 0xa}, {0x1, 0x5}, {0x3, 0xa}, {0x6, 0x6}, {0x5, 0x1}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x9}, {0x0, 0x5}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0xa}, {0x0, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x7, 0x7}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x2, 0x7}, {0x6, 0x7}, {0x4, 0x3}, {0x6}, {0x3, 0x6}, {0x6, 0x3}, {0x2, 0x1}, {0x1, 0x3}, {0x6, 0x1}, {0x5, 0x5}, {0x2, 0x4}, {0x4, 0x2}, {0x6, 0x7}, {0x1}, {0x4}, {0x0, 0xa}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x89d, 0x6, 0x0, 0x400, 0x401, 0x7, 0x98, 0xd071]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9b3, 0x6, 0x137, 0x1, 0xc82, 0x7, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x0, 0x7f, 0xffff, 0x9, 0xeedf, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x2, 0x10, 0x4, 0x5, 0x7, 0xc703, 0x5c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x14, 0x6, 0x800, 0x2, 0x100, 0x44, 0xb43, 0x3a5]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x1b, 0x36, 0x4, 0x36, 0x12, 0x6c, 0x16, 0x1, 0x54, 0x6, 0x1, 0x48, 0x1, 0x60, 0x16, 0x0, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1}, {0x3, 0x9}, {0x3, 0x6}, {0x1, 0x9}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x2, 0x3}, {0x1}, {0x2, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x3, 0x5}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x16, 0x2, 0x36, 0x48, 0xb, 0x24, 0x5, 0x18, 0x3, 0xb, 0x24, 0x6c, 0x12, 0xb, 0x9, 0x36, 0x6, 0x3, 0x34]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x1, 0x9, 0x9, 0xa, 0x6877, 0xe03]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x26e, 0xfff9, 0x10, 0xa, 0x2, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1}, {0x5, 0x3}, {0x4, 0x3}, {0x4}, {0x1}, {0x0, 0xa}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x2}, {0x4, 0x3}, {0x7, 0x9}, {0x1, 0x1}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0x3}, {0x3, 0x9}, {0x5, 0x4}, {0x7}, {0x5, 0x2}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x2}]}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x200, 0x1, 0xea, 0xf06e, 0x4, 0x2db, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x101, 0x1, 0x8, 0x6, 0x4, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xca72, 0x661, 0x1, 0x7f, 0x188a, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x1b, 0x48, 0x1b, 0x6, 0x2, 0x3, 0x24, 0x4, 0x16, 0x1, 0x9, 0x6, 0x30, 0x6, 0x12, 0x60, 0x3, 0x30, 0x7d, 0xc, 0x60, 0x6c, 0x24, 0x1, 0x12, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x442, 0x7, 0x100, 0x8000, 0x9, 0x8, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xa, 0xf9d8, 0x1, 0x8, 0x81, 0x8, 0xb]}}]}]}, @NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x7}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x7}, {0x4, 0x3}, {0x4, 0x1}, {0x5, 0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x1}, {0x4, 0x3}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x9}, {0x1, 0x9}, {0x3, 0x9}, {0x1, 0x6}, {0x2}, {0x6, 0xa}, {0x1, 0x2}, {0x6, 0x8}, {0x0, 0x9}, {0x6, 0x8}, {0x2, 0x9}, {0x5, 0x6}, {0x4, 0x1}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x14}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x2}, {0x4, 0x2}, {0x3, 0x9}, {0x1, 0x2}, {0x2, 0x9}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x2}, {0x6, 0x5}, {0x7, 0x6}, {0x3, 0x2}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0xc, 0x37, 0x12, 0x36, 0x16, 0x13, 0x1, 0x4, 0x5, 0x24, 0x5, 0x1, 0x6c, 0x3, 0xc, 0x16, 0xb, 0x0, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x200, 0xfff4, 0x78, 0x8, 0xd, 0x0, 0xffff]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x5, 0x3, 0x37, 0x7f, 0xd, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x56, 0x5, 0x3, 0x1b, 0x30, 0x2, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x8, 0x0, 0x5, 0x3, 0x101, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x9ea, 0x9, 0x5, 0xfe, 0x1c5d, 0xfffc, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd7, 0xff, 0x2, 0x8, 0x7f, 0x6, 0x1, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x8001, 0x9, 0xb, 0xb, 0x3, 0x9]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x6}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x9}, {0x4, 0x3}, {0x0, 0xa}, {0x4, 0x9}, {0x5, 0x2}, {0x0, 0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0xa}, {0x2, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x3, 0x7}, {0x7, 0x4}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x6}, {0x2, 0x4}, {0x1, 0x9}, {0x2, 0x1}, {0x4, 0x9}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x3, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0x2}, {0x1}, {0x0, 0x1}, {0x7, 0x6}, {0x7, 0x4}, {0x0, 0x3}, {0x3}, {0x4, 0x7}, {0x0, 0x9}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0xa}, {0x3, 0x9}, {0x7, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x2, 0x8}, {0x0, 0x1}, {0x1, 0x3}, {0x2, 0x3}, {0x3, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x6}, {0x6, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x9}, {0x3, 0x7}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x3}, {0x3, 0xa}, {0x5, 0x1}, {0x6, 0x7}, {0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x6, 0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x7, 0x5, 0x0, 0x79, 0x80, 0xd30b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x6, 0x0, 0x5, 0x5, 0x2, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x298, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x3, 0x6, 0xf, 0x6, 0x5, 0xd1c]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x5, 0xc, 0x30, 0x6c, 0x6, 0x4]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x5}, {0x3, 0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x9}, {0x5, 0x3}, {0x2, 0x3}, {0x2}, {0x6}, {0x2, 0x2}, {0x1, 0x2}, {0x5, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x3, 0xa}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0xa}, {0x1}, {0x2, 0xa}, {0x6, 0x3}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x2}, {0x4}, {0x5, 0x8}, {0x2}, {0x2, 0x7}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x401, 0xb, 0x1, 0x6e11, 0x6, 0x9, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x6, 0x3, 0x5, 0xfffa, 0x7fff, 0x8, 0x8]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x0, 0x36, 0xb, 0x18, 0x1, 0x12, 0x9, 0x9, 0x24, 0x3, 0x60, 0x4, 0x4, 0x18, 0x56, 0x36, 0x36, 0xc, 0x12, 0x12, 0x1, 0x48, 0xb, 0x30, 0x12, 0x18, 0x3]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x9, 0x12]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x26, 0x60, 0x6, 0x9, 0x6, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x4}, {0x0, 0x7}, {0x1, 0x1}, {0x2}, {0x7, 0x2}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x4}, {0x3, 0x3}, {0x1}, {0x0, 0x6}, {0x3, 0x9}, {0x7}, {0x7, 0x4}, {0x4, 0xa}, {0x2, 0x7}, {0x3, 0x6}, {0x6, 0x5}, {0x3, 0x2}, {0x3, 0xa}, {0x7, 0x2}, {}, {0x2, 0x5}, {0x5, 0x5}, {0x4, 0x2}, {0x0, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x3}, {0x3, 0x5}, {0x7, 0x5}, {0x2, 0xa}, {0x5, 0x6}, {0x5, 0x5}, {0x3, 0xa}, {0x5, 0x4}, {0x3, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x3}, {0x2, 0x7}, {0x5}, {0x2, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x8, 0x0, 0x15e1, 0xff, 0x22e6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa7, 0x4, 0x3, 0x3, 0x22, 0x3, 0xe67, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x4, 0x5, 0x30, 0x60, 0x60, 0x5, 0x4a, 0x12, 0x1b, 0x1, 0x16, 0x36, 0x18, 0x16, 0x60, 0xc, 0xc, 0x18, 0xc, 0xc, 0xb, 0x24, 0x6, 0x30, 0x36, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0xd, 0x6f8, 0x7, 0x8, 0x4f3c, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x4, 0x5, 0x0, 0xd11, 0x40, 0x6592, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7ff, 0x4, 0x2, 0x1b3, 0x81, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0x30, 0x60, 0x60, 0x60, 0x30, 0x4, 0x3, 0x48, 0x6c, 0x18, 0x4, 0x16, 0x24, 0x24, 0x9, 0x26, 0x9, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9ef0, 0x6, 0x8, 0x5, 0x80, 0x0, 0xb937]}}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x3, 0x6}, {0x7, 0x2}, {0x6, 0x7}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0x2}, {0x0, 0x2}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x1}, {0x6, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0x5}, {0x4, 0x1}, {0x4, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x5}, {0x7, 0x1}, {0x0, 0xa}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x3}, {0x5, 0x8}, {0x5, 0x8}, {0x6, 0x6}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x1}, {0x4}, {0x6, 0x2}, {0x3, 0x1}, {0x4, 0x3}, {0x3, 0x1}, {0x1, 0x5}, {}, {0x3, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x8}, {0x5, 0x8}, {0x1, 0x3}, {0x4, 0x4}, {0x7, 0x5}, {0x1}, {0x1, 0x8}, {0x4, 0xa}, {0x3, 0xa}, {0x1, 0x5}, {0x6, 0x3}, {0x7, 0x3}, {0x7, 0x1}, {0x5, 0x2}, {0x3, 0x7}, {0x4, 0x7}, {0x5, 0x9}, {0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x2, 0x6}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x7}, {0x6, 0x4}, {0x5, 0x3}, {0x7, 0x3}, {0x0, 0x2}, {0x3, 0x9}, {0x6, 0x7}, {0x4, 0x7}, {0x4, 0x1}, {0x5}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x1}, {0x5, 0x3}, {0x0, 0x2}, {0x3, 0x1}, {0x2, 0x4}, {0x3, 0x5}, {0x4, 0x6}, {0x3}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x2, 0x2}, {0x7, 0x3}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x6}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x8}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0x7}, {0x5, 0x2}, {0x3, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x0, 0x8}, {0x4, 0xa}, {0x6, 0x6}, {0x5, 0x4}, {0x0, 0x6}, {0x6}, {0x0, 0x2}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1}, {0x2, 0xa}, {0x5, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x2, 0x7}, {0x2, 0xa}, {0x1, 0x5}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x7}, {0x4, 0x9}, {0x3, 0xa}, {0x5}, {0x7, 0x9}, {0x7, 0x7}, {0x4, 0x5}, {0x4, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x1e8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe55, 0x7, 0x8, 0x7, 0xd, 0x4, 0xa, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x9, 0x4]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x8000, 0xffff, 0xc647, 0x8a6, 0x8, 0xe, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x4, 0xa}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0xa}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x7}, {0x7, 0x1}, {0x6, 0x2}, {0x7, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x5}, {0x6, 0xa}, {0x0, 0x6}, {0x4, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x4}, {0x5, 0x6}, {0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x6}, {0x4, 0x6}, {0x6}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x3, 0x5}, {0x6, 0x6}, {0x5, 0xa}, {0x2, 0x4}, {0x7, 0x2}, {0x6}, {0x1, 0x5}, {0x3, 0x1}, {0x5, 0xa}, {0x5, 0xa}, {0x5, 0x7}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0x5}, {0x2, 0x1}, {}, {0x4, 0x9}, {0x1, 0x9}, {0x5, 0x8}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x8}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0x6, 0x60, 0x18, 0x1, 0x4, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x18, 0x3, 0xb, 0x1b, 0x12, 0x30, 0xb, 0x1, 0x30, 0x36]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x1}, {0x5, 0x3}, {0x1}, {0x7, 0xa}, {0x1, 0x7}, {0x2, 0x4}, {0x2, 0x4}, {0x0, 0x8}, {0x6, 0x5}, {0x2, 0x4}, {0x7, 0x5}, {0x7, 0x3}, {0x5, 0x7}, {0x2, 0x3}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0x1}, {0x4, 0x5}, {0x2, 0x4}, {0x6, 0x2}, {0x7, 0x5}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x1}, {0x4, 0x7}, {0x6, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0x1, 0x401, 0x6, 0xa777, 0x7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x4, 0x5, 0x8, 0x7, 0xb, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8c09, 0x8, 0x2, 0x81, 0x8, 0xf, 0x81, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x4, 0x1, 0x2, 0xc, 0x0, 0xc, 0x93dc]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0x6, 0x1, 0x18, 0xb, 0x5, 0x2, 0x18, 0x3, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x8000, 0xf80e, 0xdc9d, 0x8, 0xfff, 0xfffa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x12, 0x30, 0x1, 0x4, 0x0, 0x12, 0x12, 0x60, 0xb, 0x9, 0x4]}]}]}, @NL80211_ATTR_TX_RATES={0xbc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6f36, 0x9, 0x1ff, 0x2, 0x3, 0x9, 0xff, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7ff, 0x8, 0x3ff, 0x7, 0x8, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0xb, 0xb88, 0x1, 0xa923, 0x4, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xffff, 0x4470, 0x7, 0x7c2, 0x1, 0x2, 0xd40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xffff, 0x1, 0x5c, 0x9, 0x8, 0x7, 0x5]}}]}]}]}, 0xd04}}, 0x4001)

2m4.058571017s ago: executing program 0 (id=494):
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000003c0)=0x200007)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
io_uring_setup(0x178e, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0)
gettid()
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xa, 0x10}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x11000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdc)

2m3.821090097s ago: executing program 37 (id=494):
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000003c0)=0x200007)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
io_uring_setup(0x178e, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0)
gettid()
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xa, 0x10}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x11000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdc)

1m51.807901008s ago: executing program 3 (id=517):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x80ff, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa1e2fd22ecd4da32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m51.707753421s ago: executing program 3 (id=518):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x1c00, 0x0}}], 0x1, 0x0)

1m51.689928703s ago: executing program 3 (id=519):
syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x1, 0x80001000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f1d}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000040)={0xa, 0x85}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020800eeff00000000000000000300050000000000cabdf854e6ca7a770000000000000000030006000020000002000000e00000010000000000000000"], 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000000))
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8)
syz_open_dev$vbi(0x0, 0x2, 0x2)
socket$can_raw(0x1d, 0x3, 0x1)
socket$kcm(0x10, 0x2, 0x0)

1m47.369766922s ago: executing program 3 (id=525):
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x8a02, 0xc1)
sendfile(r0, r0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x6)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c)
rmdir(&(0x7f0000000080)='./file0\x00')

1m47.350859445s ago: executing program 3 (id=526):
r0 = socket$inet6(0xa, 0x80002, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000280))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffc79)
poll(0x0, 0x0, 0x10)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41000000000000000290000003e000000", 0x30)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&'], 0xfe33)
sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000119078ac1414aa0000000000004e22009c9078010000000000000000000000000000000000000000000000000000007a392dc1edc22ad2a50000000000000000000000000000000000000000000000e152f0193bc2bd87e844429180000000000000000000000c1a1b5b5d24c5ba000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000483df6a27975744f03e439d7bed7fad9b768320849f65a3a4151d096377b52ca91b3354faea52332f98a0c48b61c0cdfccbe0fe14662bc1a9f81880ee94a4c67c95d76813c7f16ff1653ee962fd112784be61cd508fc39b6955c"], 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x3, 0x2000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d2, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x5, 0x5}}, 0xe8)
setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f00000003c0)={0x7592, {{0xa, 0x4e20, 0x15e, @remote, 0x9}}}, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mkdir(&(0x7f0000000180)='./file0\x00', 0x4)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r0], 0x18}}], 0x1, 0x4000000)

1m47.00377013s ago: executing program 3 (id=527):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/timers\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil)
read$hiddev(r8, &(0x7f0000000000)=""/4118, 0x1016)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x402, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/242, 0xf2, 0x1, 0x24}, @ptr={0x70742a85, 0x2, 0x0, 0xffffffa5, 0x1, 0x2a}}, &(0x7f0000000240)={0x0, 0x55, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGABS20(r0, 0x80184520, 0x0)

1m46.53349703s ago: executing program 38 (id=527):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/timers\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil)
read$hiddev(r8, &(0x7f0000000000)=""/4118, 0x1016)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x402, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/242, 0xf2, 0x1, 0x24}, @ptr={0x70742a85, 0x2, 0x0, 0xffffffa5, 0x1, 0x2a}}, &(0x7f0000000240)={0x0, 0x55, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGABS20(r0, 0x80184520, 0x0)

10.911503536s ago: executing program 7 (id=774):
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000ede1e1ceda436cd80000000000850000009a18ccac6bc2000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x0, 0xb2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0xa})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_RESIZE(r1, 0x5609, 0x0)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000806"], 0x1c}}, 0x20000010)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
splice(r3, 0x0, r4, 0x0, 0x6, 0x0)

9.596397342s ago: executing program 9 (id=777):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
socket$netlink(0x10, 0x3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2)

8.723934348s ago: executing program 7 (id=778):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00')
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
socket(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1})

8.723052399s ago: executing program 2 (id=779):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x2, 0x5, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0x2)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

7.192276029s ago: executing program 2 (id=780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000040122000b00"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0xff, 0xe, 0x9, 0x1}, &(0x7f0000000180)=0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc)

6.871214569s ago: executing program 7 (id=781):
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x396, 0xb, "0062ba7d82000000000000000000f7ffffff00"})
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
io_setup(0xd, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
sendto$inet(r4, 0x0, 0x4d, 0x200047ee, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r5 = accept4(r2, 0x0, 0x0, 0x800)
recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xfffff000, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
syz_open_procfs$pagemap(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ffff00"/28], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0x80000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000850000007500000018110000", @ANYRES32=r6, @ANYBLOB="00000d0000000000b7020000000000008500000086000000bf91000000000000b70200fb0000b7000000000000009500"/64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10)

6.234893593s ago: executing program 9 (id=783):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=<r2=>0x0, @ANYBLOB="000000000000000000000000000000003fd31340e92c4bb8928375464774be97a9127939b7851829fb387e18ed5f3af55d0998e2ce97fc786b575e"], 0x48}, 0x300}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="050000ffef0053a20000564000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8=r2], 0x48}, 0x300}, 0x8040)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_dev$I2C(&(0x7f0000000880), 0x0, 0x101001)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x28, 0x6a, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f00000000c0))
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r7 = socket(0x2, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000280)={'team_slave_1\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffffd, 0x0, 0x200, 0xb, 0x47, 0x3, [0x100, 0xfffffff9]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

5.838992054s ago: executing program 8 (id=786):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xddb}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCFLSH(r1, 0x5608, 0x1)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x20140c4, 0x0)

5.719061805s ago: executing program 2 (id=787):
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
getrusage(0xffffffffffffffff, &(0x7f0000000240))
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000000)={0x8000005, 0x6, "e22e845e3ede57135adc514d00000000001af2bb6b1543835f00", 0x0, 0x4, 0x8000, 0x9, 0x230})
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x901000, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x104, 0x1, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x48, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xea1b}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x48, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0xfffffffffffffe16, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x40, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TIMEOUT={0x8}]}, 0x104}, 0x1, 0x0, 0x0, 0x819}, 0x10)
setresuid(0xffffffffffffffff, 0xee00, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0})
clock_gettime(0xfffffff2, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}})
r6 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0xa0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x1}, {0x0, 0x3, 0x1}, 0x20fdc000, 0x7f}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228)

5.616777381s ago: executing program 7 (id=788):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x3, 0x7, 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r1, <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_connect(0x3, 0x34, &(0x7f0000001300)={{0x12, 0x1, 0x310, 0x7c, 0xb9, 0xfa, 0x8, 0x1004, 0x61aa, 0x9283, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0xc7, 0x4, 0x0, 0xdc, [{{0x9, 0x4, 0xe0, 0x9, 0x1, 0x2, 0x6, 0x0, 0x2, [], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x80, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa9, 0x5}]}}]}}]}}]}}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0})
read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
io_setup(0x1, &(0x7f0000000040)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r3, 0x0, 0x0, 0x8000}])
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r7)

5.251248766s ago: executing program 2 (id=790):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
syz_emit_vhci(0x0, 0x7)
unshare(0x62040200)
syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
getsockopt$IPT_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000440)={'raw\x00', 0x0, [0x4, 0x3, 0x1, 0xe6, 0x63]}, &(0x7f0000000200)=0x54)
socket(0x2, 0x80805, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x80003)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000040)=0x6)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000100fcff06ee04000000010000000400488014000180100010800c000b8008001e80040001800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

4.333396188s ago: executing program 5 (id=793):
r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
poll(0x0, 0x0, 0x7)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085000000500000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10)
getresgid(&(0x7f0000008b80), &(0x7f0000008bc0), &(0x7f0000008c00))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
fallocate(r0, 0x0, 0x9, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
setpriority(0x0, 0x0, 0x7)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f00000008c0)={0x678, r6, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x9, 0x12, 0x61, 0x18, 0x0, 0x48, 0x16, 0x60, 0x6, 0x48, 0x12, 0x4, 0x6c, 0xc, 0xc, 0x36, 0x6, 0x12, 0x18, 0x48, 0x24, 0x1b, 0x60, 0x36, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x36, 0xb768b6f86e364dbb, 0x6, 0x6c, 0x6, 0xb, 0x30, 0x60, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xc, 0x0, 0x80, 0x1000, 0x4, 0x4, 0x3b5e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0xfffc, 0x3, 0x2, 0x9, 0x3ff, 0xf760]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x4}, {0x7, 0x4}, {0x0, 0x9}, {0x6, 0x2}, {0x5, 0x2}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x3}, {0x1, 0xa}, {0x2, 0x8}, {}, {0x4, 0x3}, {0x5, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x1}, {0x2, 0x9}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x4, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x6}, {0x0, 0x4}, {0x7, 0xa}, {0x5, 0x7}, {0x6, 0xa}, {0x7, 0xe}, {0x7}, {0x7, 0x9}, {0x7, 0x8}, {0x5, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x4}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x6}, {0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x3}, {0x3, 0x4}, {0x5, 0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x6}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x3, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {0x2, 0x6}, {0x5, 0x5}, {0x6, 0x4}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0x1}, {0x6, 0x7}, {0x1, 0x5}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x3, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0xa}, {0x6}, {0x4}, {0x1, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0xa}, {0x6, 0x5}, {0x2, 0x5}, {0x0, 0xa}, {0x6, 0x5}, {0x5, 0x4}, {0x2}, {0x4, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x0, 0xa}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x0, 0x1}, {0x6, 0x9}, {0x4}, {0x2, 0x4}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x3}, {0x6, 0x7}, {0x6}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x6}, {0x6, 0x3}, {0x1, 0x5}, {0x6}, {0x0, 0x4}, {0x4}, {0x7}, {0x3, 0xa}, {0x0, 0x1}, {0x7, 0x5}, {0x6}, {0x0, 0x3}, {0x1, 0xa}, {0x3, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x6}, {0x1, 0x1}, {0x6, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0x7}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x3ff, 0x46, 0x8, 0x8, 0x6, 0xca0a, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x40f5, 0x7, 0xee, 0x2, 0x400, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x0, 0x81, 0x6, 0x4, 0xa, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x18, 0x844, 0xf136, 0x2, 0x5, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x8, 0x9b8, 0x3, 0x6, 0xbda, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x8001, 0x4, 0xe00, 0xdab, 0x6, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0xf, 0x200, 0x0, 0x6, 0x7ff, 0xfffd, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x7}, {0x0, 0x1}, {0x3, 0x4}, {0x4, 0x1}, {0x2, 0x2}, {0x6, 0x7}, {0x1, 0x9}, {0x5, 0x7}, {0x6, 0x3}, {0x1, 0x2}, {0x4, 0x7}, {0x3, 0x8}, {0x6, 0x7}, {0x6}, {0x1, 0x8}, {0x3}, {0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x4}, {0x3, 0xa}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x6, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x3, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x6}, {0x6}, {0x7, 0x8}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x4}, {0x5}, {0x6, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x6, 0x8}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x100, 0x2, 0x8, 0x0, 0x8, 0x5, 0xfff]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x7f, 0x4, 0x3, 0x924a, 0xe, 0xfe00]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xec8e, 0x7, 0x7f, 0x1, 0x5, 0xcb03, 0x6, 0x1bc6]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff8, 0x4, 0x10, 0xc9f4, 0x3, 0x5, 0x8, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x8, 0x8e, 0x4, 0x1, 0x7f, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x1, 0x1, 0x8000, 0x4, 0x7, 0x7, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x1b, 0x12, 0x0, 0x36, 0x32, 0x1, 0x6, 0x9, 0x6, 0x3, 0x18, 0x12, 0x21, 0x4, 0x30, 0x48, 0x9, 0x6, 0x0, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xdeb3, 0x1d2, 0x0, 0xe, 0x7, 0x8000, 0x4, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1000, 0xffff, 0xfffb, 0x2, 0x9, 0x3, 0x4]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfac1, 0x4, 0x9, 0x6, 0x0, 0x100, 0x4, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x43, 0x0, 0x8, 0x3, 0x3ff, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x2}, {0x1, 0x1}, {0x6, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x5}, {0x2, 0x5}, {0x5, 0x3}, {0x5}, {0x3, 0x8}, {0x0, 0x9}, {0x6, 0x3}, {0x3, 0x2}, {}, {0x6, 0x9}, {0x1, 0x7}, {0x6, 0x1}, {0x4, 0xa}, {0x5, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x4, 0x3}, {0x7, 0x9}, {0x0, 0xa}, {0x1, 0x4}, {0x4, 0x1}, {}, {0x7, 0x4}, {0x5, 0x3}, {0x1, 0x8}, {0x0, 0xa}, {0x7, 0x3}, {}, {0x6, 0x8}, {0x1, 0x9}, {0x5, 0xa}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7f, 0x1000, 0x8, 0x459, 0x3, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x30, 0x4, 0x48, 0x24, 0x9, 0x4, 0xb, 0x4c, 0x24, 0x6, 0x17, 0x3, 0x4, 0xc, 0xc, 0x9, 0x12, 0x18, 0x36, 0xb, 0x36, 0xc, 0x2, 0xb, 0x24, 0x48, 0x4, 0x6c, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x400, 0x512, 0xfff7, 0x0, 0x7, 0x7d32, 0x2]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x6, 0x48, 0x1b, 0x10, 0xb, 0x18, 0x0, 0x9, 0x5, 0x48, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x60cd, 0x2, 0x7, 0x0, 0xffb0, 0x6, 0x6, 0x3858]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x3, 0x1b, 0xc, 0x10, 0x16, 0x12, 0x1b, 0x12, 0x1b, 0x5, 0x48, 0x2, 0x2, 0x12, 0x1, 0xc, 0xb, 0x5, 0x5b, 0x9, 0x1b, 0x6c, 0x36, 0xc, 0x4]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x8}, {0x4, 0x1}, {0x3, 0x5}, {0x7, 0xa}, {0x6}, {0x2, 0x7}, {0x4, 0x8}, {0x0, 0x1}, {0x6, 0x6}, {0x4, 0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x5, 0x5}, {0x4, 0x2}, {0x6}, {0x2, 0x1}, {0x4, 0x6}, {}, {0x1, 0x4}, {0x4, 0x6}, {0x7, 0x5}, {0x0, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x7, 0xa}, {0x7, 0xa}, {0x4}, {0x7, 0x9}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x4}, {0x1}, {0x3, 0x2}, {0x0, 0x7}, {0x4, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x7, 0x6}, {0x1, 0x7}, {0x5, 0x4}, {0x7, 0x5}, {0x7, 0x8}, {0x5, 0x5}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0xa}, {0x2, 0x3}, {0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x9}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x3}]}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x6, 0x0, 0x4, 0x5, 0x24, 0xc, 0x3, 0x60, 0xb, 0x6c, 0x60, 0x1b, 0x9, 0x18, 0xc, 0x57, 0x4, 0x5, 0x16, 0x36, 0x48, 0xb, 0x2, 0x2, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x942, 0x401, 0x1, 0x1, 0x8, 0x800, 0xbb, 0x40]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x4, 0x36, 0x9, 0x3, 0x30, 0x1b, 0x18, 0xc, 0x5, 0x48, 0x18, 0x4, 0x16, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x3, 0x5}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x7}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x5, 0x9}, {0x7, 0x8}, {0x3, 0x6}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x9}, {0x3, 0xa}, {0x0, 0x9}, {0x5, 0x4}, {0x1, 0x9}, {0x5}, {0x6, 0x8}, {0x2, 0x3}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x9}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x2, 0x5, 0x5, 0x6c, 0x16, 0x9, 0x0, 0x4, 0x60, 0xb, 0xb, 0x36, 0x5, 0x36, 0x16, 0x2, 0x16, 0x3, 0x5, 0x12, 0x9, 0xb, 0x60, 0x5, 0x4, 0x1b, 0x60, 0xb, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x15, 0xbab, 0x10, 0x1, 0x3ff, 0x3, 0x1]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x3ff, 0x2, 0x9, 0xf7fa, 0x401, 0x696, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x5, 0x401, 0x5d7, 0x1, 0xf, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xffff, 0x2, 0x778, 0x955, 0x81, 0xd36, 0xfff7]}}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x678}, 0x1, 0x0, 0x0, 0x44080}, 0x4094)

4.030503794s ago: executing program 8 (id=794):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mount$binder(0x0, 0x0, &(0x7f00000001c0), 0x80000, &(0x7f0000000200))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="144216431ea26362a8000800100001000000000000000000959a78f8c3f000000a2c000000180abd510000000000000000020000030900020073797a300000000009000100"], 0x54}, 0x1, 0x0, 0x0, 0x20040044}, 0x20008000)
lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x1, 'J'}, 0xa, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0)
ioctl$FBIOBLANK(r2, 0x4611, 0xffffffffffffffff)

3.926111711s ago: executing program 9 (id=795):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) (async)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7d) (async)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000480)=0x7e) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) (async)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x3e, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)

3.669367654s ago: executing program 5 (id=796):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) (async)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x2, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffdfff}, 0x0) (async)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0x3) (async, rerun: 32)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 32)
sendmsg$802154_raw(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)="3eae28bffdec9dcea057b3ebe22ce28205938f43930826e813f74a3198", 0x1d}, 0x1, 0x0, 0x0, 0x4008004}, 0x40002) (async)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) (async)
socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64)
r5 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (rerun: 64)
lseek(r5, 0x8000000000000000, 0x4)
r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0x80000)
syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) (async)
accept4$tipc(r6, &(0x7f0000000400)=@id, &(0x7f0000000440)=0x10, 0x800)
getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000480), &(0x7f0000000200)=0xfffffffffffffdd7) (async)
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x0, 0xd}, {0x3, 0x7}]}) (async, rerun: 32)
r7 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) (rerun: 32)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) (async)
writev(r3, &(0x7f0000000000)=[{0x0}], 0x1)
ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12)

3.342388858s ago: executing program 7 (id=797):
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f00000000c0)={0x40, 0x1, 0x3, {0x3, 0x31, "ef"}}, &(0x7f0000000180)={0x0, 0x3, 0xfb, @string={0xfb, 0x3, "c0eede622f075f74264fa135df0f45d1d6364364f7d3613a7edbfdd24e84b306043253c5f361560063d519b93f8838b9ebf175d81a452f2cf573217667af767ed5c7248d39f3c1ea5b08c8b94873e179e28cfd253d27697ef7c7558b599e3d960a4bde08fe1476c0dcd74cd7d1666ca15f1a40d3997cd1a81cb6948b9cfeac3a44c84aad83a39bc0f94a8b9ed69bf2b639297ee42d60748253c877a818151798d1b36ed5311838a1014f91850ca3b9289fc9f2785c34ca26d718ea80b6edcbb15495b4876288ebb96f3bddd2fb8fa0c564ef18aba51f9e9a748f46fc252f99ff8b0878f8849e4e32939b25b5006c104480df52b9371b2fa663"}}}, &(0x7f0000000800)={0x1c, &(0x7f00000002c0)={0x20, 0xf, 0xa5, "b4f4efa6813fbe6bd7d40836ac65b8614f7760df69ccc1699ece42655ee2f7b33b2725dda8440d705ccce26c8707b93038517d43ddd22ac35c204bf37a517281851efa7eb38030ee26868c71409d34f66c072c4718a1a86cfd86db2d083af78eab9c5c3837920e5bda9346febc72bae8e9d4e32a3cea13500c9c4de1ffd144b265ab32fcde736555758e6652c38a982684c464248a81deb28773f578821484a7b53e7632c3"}, &(0x7f0000000380)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000007c0)={0x21, 0x0, 0x1, "d0"}})

3.191168716s ago: executing program 2 (id=798):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000600))
msgctl$MSG_INFO(0x0, 0xc, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f0000000180)='%+9llu \x00'}, 0x20)
syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, 0x0, 0x29, 0x10, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)

3.126182107s ago: executing program 8 (id=799):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0xa, 0x801, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0)

3.101691898s ago: executing program 9 (id=800):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x358, 0xffff8880b8439ac0)

2.328195155s ago: executing program 9 (id=801):
r0 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r2)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000100000001}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x0)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x810)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103100, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
pipe2(&(0x7f0000000300)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4800)
write$FUSE_NOTIFY_POLL(r10, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x6a)
splice(r9, 0x0, r8, 0x0, 0x3ff, 0x7)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0xc0000100, 0x0, 0x2}]})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000197305e07af0300000000000000", @ANYBLOB="04"], 0x1c}], 0x1}, 0x0)

2.101596395s ago: executing program 8 (id=802):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="043e060d031500"], 0x109)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428)

1.967896355s ago: executing program 5 (id=803):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c)
rmdir(&(0x7f0000000080)='./file0\x00')

1.390100913s ago: executing program 5 (id=804):
r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x0, 0x0, 0xfa000, 0x6ae0})

1.299112937s ago: executing program 9 (id=805):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000280), 0x0, 0xfffffffffffffff8)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/80, 0x50, 0x0)
r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x4eadc2, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, &(0x7f0000000040))
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2)
ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5218)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e1e, @local}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x2}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0xce23, 0xffffffff, @local, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x24, 0x10, 0x49920d862a92153b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1008a, 0x1b400}, [@IFLA_IFALIASn={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040840}, 0x4050041)

1.237969614s ago: executing program 5 (id=806):
r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
poll(0x0, 0x0, 0x7)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085000000500000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10)
getresgid(&(0x7f0000008b80), &(0x7f0000008bc0), &(0x7f0000008c00))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
fallocate(r0, 0x0, 0x9, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
setpriority(0x0, 0x0, 0x7)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f00000008c0)={0x678, r6, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x9, 0x12, 0x61, 0x18, 0x0, 0x48, 0x16, 0x60, 0x6, 0x48, 0x12, 0x4, 0x6c, 0xc, 0xc, 0x36, 0x6, 0x12, 0x18, 0x48, 0x24, 0x1b, 0x60, 0x36, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x36, 0xb768b6f86e364dbb, 0x6, 0x6c, 0x6, 0xb, 0x30, 0x60, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xc, 0x0, 0x80, 0x1000, 0x4, 0x4, 0x3b5e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0xfffc, 0x3, 0x2, 0x9, 0x3ff, 0xf760]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x4}, {0x7, 0x4}, {0x0, 0x9}, {0x6, 0x2}, {0x5, 0x2}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x3}, {0x1, 0xa}, {0x2, 0x8}, {}, {0x4, 0x3}, {0x5, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x1}, {0x2, 0x9}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x4, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x6}, {0x0, 0x4}, {0x7, 0xa}, {0x5, 0x7}, {0x6, 0xa}, {0x7, 0xe}, {0x7}, {0x7, 0x9}, {0x7, 0x8}, {0x5, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x4}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x6}, {0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x3}, {0x3, 0x4}, {0x5, 0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x6}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x3, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {0x2, 0x6}, {0x5, 0x5}, {0x6, 0x4}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0x1}, {0x6, 0x7}, {0x1, 0x5}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x3, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0xa}, {0x6}, {0x4}, {0x1, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0xa}, {0x6, 0x5}, {0x2, 0x5}, {0x0, 0xa}, {0x6, 0x5}, {0x5, 0x4}, {0x2}, {0x4, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x0, 0xa}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x0, 0x1}, {0x6, 0x9}, {0x4}, {0x2, 0x4}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x3}, {0x6, 0x7}, {0x6}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x6}, {0x6, 0x3}, {0x1, 0x5}, {0x6}, {0x0, 0x4}, {0x4}, {0x7}, {0x3, 0xa}, {0x0, 0x1}, {0x7, 0x5}, {0x6}, {0x0, 0x3}, {0x1, 0xa}, {0x3, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x6}, {0x1, 0x1}, {0x6, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0x7}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x3ff, 0x46, 0x8, 0x8, 0x6, 0xca0a, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x40f5, 0x7, 0xee, 0x2, 0x400, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x0, 0x81, 0x6, 0x4, 0xa, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x18, 0x844, 0xf136, 0x2, 0x5, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x8, 0x9b8, 0x3, 0x6, 0xbda, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x8001, 0x4, 0xe00, 0xdab, 0x6, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0xf, 0x200, 0x0, 0x6, 0x7ff, 0xfffd, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x7}, {0x0, 0x1}, {0x3, 0x4}, {0x4, 0x1}, {0x2, 0x2}, {0x6, 0x7}, {0x1, 0x9}, {0x5, 0x7}, {0x6, 0x3}, {0x1, 0x2}, {0x4, 0x7}, {0x3, 0x8}, {0x6, 0x7}, {0x6}, {0x1, 0x8}, {0x3}, {0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x4}, {0x3, 0xa}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x6, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x3, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x6}, {0x6}, {0x7, 0x8}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x4}, {0x5}, {0x6, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x6, 0x8}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x100, 0x2, 0x8, 0x0, 0x8, 0x5, 0xfff]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x7f, 0x4, 0x3, 0x924a, 0xe, 0xfe00]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xec8e, 0x7, 0x7f, 0x1, 0x5, 0xcb03, 0x6, 0x1bc6]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff8, 0x4, 0x10, 0xc9f4, 0x3, 0x5, 0x8, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x8, 0x8e, 0x4, 0x1, 0x7f, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x1, 0x1, 0x8000, 0x4, 0x7, 0x7, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x1b, 0x12, 0x0, 0x36, 0x32, 0x1, 0x6, 0x9, 0x6, 0x3, 0x18, 0x12, 0x21, 0x4, 0x30, 0x48, 0x9, 0x6, 0x0, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xdeb3, 0x1d2, 0x0, 0xe, 0x7, 0x8000, 0x4, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1000, 0xffff, 0xfffb, 0x2, 0x9, 0x3, 0x4]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfac1, 0x4, 0x9, 0x6, 0x0, 0x100, 0x4, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x43, 0x0, 0x8, 0x3, 0x3ff, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x2}, {0x1, 0x1}, {0x6, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x5}, {0x2, 0x5}, {0x5, 0x3}, {0x5}, {0x3, 0x8}, {0x0, 0x9}, {0x6, 0x3}, {0x3, 0x2}, {}, {0x6, 0x9}, {0x1, 0x7}, {0x6, 0x1}, {0x4, 0xa}, {0x5, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x4, 0x3}, {0x7, 0x9}, {0x0, 0xa}, {0x1, 0x4}, {0x4, 0x1}, {}, {0x7, 0x4}, {0x5, 0x3}, {0x1, 0x8}, {0x0, 0xa}, {0x7, 0x3}, {}, {0x6, 0x8}, {0x1, 0x9}, {0x5, 0xa}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7f, 0x1000, 0x8, 0x459, 0x3, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x30, 0x4, 0x48, 0x24, 0x9, 0x4, 0xb, 0x4c, 0x24, 0x6, 0x17, 0x3, 0x4, 0xc, 0xc, 0x9, 0x12, 0x18, 0x36, 0xb, 0x36, 0xc, 0x2, 0xb, 0x24, 0x48, 0x4, 0x6c, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x400, 0x512, 0xfff7, 0x0, 0x7, 0x7d32, 0x2]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x6, 0x48, 0x1b, 0x10, 0xb, 0x18, 0x0, 0x9, 0x5, 0x48, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x60cd, 0x2, 0x7, 0x0, 0xffb0, 0x6, 0x6, 0x3858]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x3, 0x1b, 0xc, 0x10, 0x16, 0x12, 0x1b, 0x12, 0x1b, 0x5, 0x48, 0x2, 0x2, 0x12, 0x1, 0xc, 0xb, 0x5, 0x5b, 0x9, 0x1b, 0x6c, 0x36, 0xc, 0x4]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x8}, {0x4, 0x1}, {0x3, 0x5}, {0x7, 0xa}, {0x6}, {0x2, 0x7}, {0x4, 0x8}, {0x0, 0x1}, {0x6, 0x6}, {0x4, 0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x5, 0x5}, {0x4, 0x2}, {0x6}, {0x2, 0x1}, {0x4, 0x6}, {}, {0x1, 0x4}, {0x4, 0x6}, {0x7, 0x5}, {0x0, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x7, 0xa}, {0x7, 0xa}, {0x4}, {0x7, 0x9}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x4}, {0x1}, {0x3, 0x2}, {0x0, 0x7}, {0x4, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x7, 0x6}, {0x1, 0x7}, {0x5, 0x4}, {0x7, 0x5}, {0x7, 0x8}, {0x5, 0x5}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0xa}, {0x2, 0x3}, {0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x9}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x3}]}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x6, 0x0, 0x4, 0x5, 0x24, 0xc, 0x3, 0x60, 0xb, 0x6c, 0x60, 0x1b, 0x9, 0x18, 0xc, 0x57, 0x4, 0x5, 0x16, 0x36, 0x48, 0xb, 0x2, 0x2, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x942, 0x401, 0x1, 0x1, 0x8, 0x800, 0xbb, 0x40]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x4, 0x36, 0x9, 0x3, 0x30, 0x1b, 0x18, 0xc, 0x5, 0x48, 0x18, 0x4, 0x16, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x3, 0x5}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x7}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x5, 0x9}, {0x7, 0x8}, {0x3, 0x6}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x9}, {0x3, 0xa}, {0x0, 0x9}, {0x5, 0x4}, {0x1, 0x9}, {0x5}, {0x6, 0x8}, {0x2, 0x3}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x9}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x2, 0x5, 0x5, 0x6c, 0x16, 0x9, 0x0, 0x4, 0x60, 0xb, 0xb, 0x36, 0x5, 0x36, 0x16, 0x2, 0x16, 0x3, 0x5, 0x12, 0x9, 0xb, 0x60, 0x5, 0x4, 0x1b, 0x60, 0xb, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x15, 0xbab, 0x10, 0x1, 0x3ff, 0x3, 0x1]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x3ff, 0x2, 0x9, 0xf7fa, 0x401, 0x696, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x5, 0x401, 0x5d7, 0x1, 0xf, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xffff, 0x2, 0x778, 0x955, 0x81, 0xd36, 0xfff7]}}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x678}, 0x1, 0x0, 0x0, 0x44080}, 0x4094)

1.061075128s ago: executing program 8 (id=807):
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
set_robust_list(0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r1 = gettid()
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mq_open(&(0x7f0000000080)='#@-\x00', 0x80, 0x14c, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$inet(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x4, 0x0, 0x0, 0x7fff0000}, {0xe, 0x0, 0x9, 0x7a}]})
set_mempolicy(0x2, 0x0, 0xf5)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000000040))
sched_setattr(0x0, 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000000700)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00})
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x2, 0x6, 0x570, 0x210, 0x0, 0x3d0, 0x2e0, 0x3d0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xffffff00, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)

191.213951ms ago: executing program 5 (id=808):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x2, 0x5, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0x2)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

135.866074ms ago: executing program 7 (id=809):
r0 = socket(0x40000000015, 0x5, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
r1 = socket$kcm(0x2, 0x3, 0x106)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed", 0x4}], 0x1}, 0x0)
getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000))

134.947907ms ago: executing program 2 (id=810):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x2, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x8, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x2, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x0, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0x6, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x3, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0x2, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x231, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4044001)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2)
ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000040)={0x5, @raw_data="cf2868b4bb628e0f8701829223cd63ea49f64743d6e9753799a06844e517c60fe2ea95ce8e89b1606b2393c99f5210f844aebf3fdd90f248e1639b3146ccba5c5c3f511baf8bcc8907cf3d820dff49d4f7a1cf893b0910b3556bd24c671a0b237e5415f93a54ba168bcfe85d4320a4730e3e748762bc2823599fd5f13d2cdf874e5da4881be128d55cd08089f257dd809835045fb50b4cfedd893bd7a2b12e29cc325c1f0b45efbcd9f9f146792c06d9ed897f6808b20aaf7a2d0be42e9bff34be012b0d6c7f505b"})
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000072, 0x0, 0x2b34988d}]})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
r10 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000003c0)="3cfe37e1747b248463ac97e880870f11972a008403fa65a045eeb6f67c518780612330b97fca290b0227ad2670c7300ef0c714989e58c72a854f3659cb7ce5b009f7025a934fc1d22cbd2512a2128c8390a46798fc78cf3dd12937ebaf9cceaed3e74f8951d8e998027411928bf2b4be964abcd77696a33298e10f5a", 0x7c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0xfffffffffffffea4, &(0x7f0000000380)="1000110ec1a900049b0046b30000", 0x0, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 8 (id=811):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r0, 0x358, 0xffff8880b8439ac0)

kernel console output (not intermixed with test programs):

1][ T5830]  </TASK>
[  213.655352][ T5830] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  213.917132][ T5830] Bluetooth: hci2: failed to register connection device
[  214.753687][   T30] audit: type=1400 audit(1765914247.471:396): avc:  denied  { ioctl } for  pid=7870 comm="syz.3.420" path="socket:[18644]" dev="sockfs" ino=18644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  214.780956][   T30] audit: type=1400 audit(1765914247.491:397): avc:  denied  { watch } for  pid=7870 comm="syz.3.420" path="/81" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  214.899176][ T7802] hid_parser_main: 17 callbacks suppressed
[  214.899195][ T7802] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  214.937808][   T30] audit: type=1400 audit(1765914247.641:398): avc:  denied  { mount } for  pid=7874 comm="syz.3.422" name="/" dev="ramfs" ino=18121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  214.985686][ T7802] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  215.258943][ T7879] fido_id[7879]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  215.283394][ T6804] usb 7-1: reset high-speed USB device number 2 using dummy_hcd
[  215.553825][ T6804] usb 7-1: device reset changed ep0 maxpacket size!
[  215.586601][ T5954] usb 7-1: USB disconnect, device number 2
[  215.793363][ T5954] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  217.645615][ T5954] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  217.652575][ T7908] nvme_fabrics: unknown parameter or missing value ' KÏ’' in ctrl creation request
[  217.655074][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.672499][ T5954] usb 7-1: Product: syz
[  217.676800][ T5954] usb 7-1: Manufacturer: syz
[  217.681393][ T5954] usb 7-1: SerialNumber: syz
[  217.783635][ T5954] cdc_ncm 7-1:1.0: bind() failure
[  217.926730][ T5954] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  217.942530][ T7908] nvme_fabrics: missing parameter 'transport=%s'
[  217.945714][ T5954] cdc_ncm 7-1:1.1: bind() failure
[  217.963361][ T7908] nvme_fabrics: missing parameter 'nqn=%s'
[  218.019749][ T7915] comedi comedi0: board detection failed
[  218.291684][ T5954] usb 7-1: USB disconnect, device number 3
[  218.435412][   T30] audit: type=1400 audit(1765914251.131:399): avc:  denied  { name_bind } for  pid=7922 comm="syz.6.433" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  218.575040][   T30] audit: type=1400 audit(1765914251.291:400): avc:  denied  { append } for  pid=7931 comm="syz.4.435" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  219.010956][ T7929] netlink: 56 bytes leftover after parsing attributes in process `syz.0.434'.
[  219.253158][   T30] audit: type=1400 audit(1765914251.961:401): avc:  denied  { write } for  pid=7955 comm="syz.7.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  219.305191][   T30] audit: type=1400 audit(1765914252.021:402): avc:  denied  { ioctl } for  pid=7955 comm="syz.7.432" path="socket:[18759]" dev="sockfs" ino=18759 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  219.380333][   T48] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  219.523528][   T48] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  219.827614][   T30] audit: type=1400 audit(1765914252.521:403): avc:  denied  { read } for  pid=7963 comm="syz.7.440" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  219.866677][ T7964] fido_id[7964]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  219.878262][   T30] audit: type=1400 audit(1765914252.581:404): avc:  denied  { bind } for  pid=7963 comm="syz.7.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  220.022696][   T30] audit: type=1400 audit(1765914252.581:405): avc:  denied  { setopt } for  pid=7963 comm="syz.7.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  220.053810][ T5826] Bluetooth: hci2: command 0x0406 tx timeout
[  220.552921][ T7966] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  220.559431][ T7966] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  220.617799][ T7966] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  220.633750][ T7966] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  220.667329][ T7966] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  220.685308][   T30] audit: type=1400 audit(1765914253.401:406): avc:  denied  { bind } for  pid=7979 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  220.723359][ T7966] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  220.746912][ T7966] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  220.967271][ T7966] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  221.080652][ T7966] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  221.114495][ T7966] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  221.123991][ T7997] comedi comedi0: board detection failed
[  221.136933][ T7966] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  221.144427][ T7966] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  221.155885][ T7966] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  221.603661][   T30] audit: type=1400 audit(1765914254.311:407): avc:  denied  { connect } for  pid=8009 comm="syz.7.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  221.691646][   T30] audit: type=1400 audit(1765914254.401:408): avc:  denied  { watch_reads } for  pid=8014 comm="syz.0.450" path="/100" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  221.694253][ T8015] fuse: Unknown parameter '0000000000000000000600000000000000000000006'
[  221.767940][ T8019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  221.973487][ T5830] Bluetooth: hci0: command 0x0406 tx timeout
[  222.456451][ T7802] libceph: connect (1)[c::]:6789 error -101
[  222.477496][ T7802] libceph: mon0 (1)[c::]:6789 connect error
[  222.480410][ T8028] ceph: No mds server is up or the cluster is laggy
[  222.518598][ T8048] nvme_fabrics: unknown parameter or missing value ' KÏ’' in ctrl creation request
[  222.695263][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  222.695419][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  222.879483][ T5953] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  222.903273][ T6002] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[  223.013471][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  223.069970][ T6002] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  223.069993][ T6002] usb 7-1: config 0 has no interface number 0
[  223.070011][ T6002] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  223.070027][ T6002] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  223.070052][ T6002] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  223.070064][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.071250][ T6002] usb 7-1: config 0 descriptor??
[  223.073285][ T5953] usb 4-1: Using ep0 maxpacket: 16
[  223.074757][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  223.089507][ T8056] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  223.091665][ T5953] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  223.091693][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.091709][ T5953] usb 4-1: Product: syz
[  223.091722][ T5953] usb 4-1: Manufacturer: syz
[  223.091735][ T5953] usb 4-1: SerialNumber: syz
[  223.094147][ T5953] usb 4-1: config 0 descriptor??
[  223.098972][ T6002] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  223.102647][ T5953] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  223.102678][ T5953] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  223.183408][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout
[  223.303499][    C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[  223.305131][ T6002] usb 7-1: USB disconnect, device number 4
[  223.513500][ T6734] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  223.710591][ T5953] em28xx 4-1:0.0: chip ID is em2870
[  223.743348][ T6734] usb 1-1: Using ep0 maxpacket: 32
[  223.774288][ T6734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.801707][ T6734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.877360][ T6734] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  223.902771][ T6734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.969977][ T6734] usb 1-1: config 0 descriptor??
[  223.998587][ T6734] hub 1-1:0.0: USB hub found
[  224.056912][ T5830] Bluetooth: hci0: command 0x0406 tx timeout
[  224.189802][ T8094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.197271][ T8094] IPv6: NLM_F_CREATE should be set when creating new route
[  224.204811][ T8094] IPv6: NLM_F_CREATE should be set when creating new route
[  224.521369][ T6734] hub 1-1:0.0: 1 port detected
[  224.541473][ T5953] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  224.552064][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  224.553088][   T30] audit: type=1400 audit(1765914257.261:412): avc:  denied  { getopt } for  pid=8087 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  224.568547][ T5953] em28xx 4-1:0.0: board has no eeprom
[  224.669697][ T5953] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  224.692743][ T5953] em28xx 4-1:0.0: dvb set to bulk mode.
[  224.706531][ T7802] em28xx 4-1:0.0: Binding DVB extension
[  225.074973][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  225.075032][ T5826] Bluetooth: hci2: command 0x0406 tx timeout
[  225.093598][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  225.110072][ T5953] usb 4-1: USB disconnect, device number 18
[  225.126740][ T5953] em28xx 4-1:0.0: Disconnecting em28xx
[  225.244265][ T7802] em28xx 4-1:0.0: Registering input extension
[  225.246870][ T5928] hub 1-1:0.0: activate --> -90
[  225.263267][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout
[  225.278913][ T5953] em28xx 4-1:0.0: Closing input extension
[  225.473732][ T8108] comedi comedi0: board detection failed
[  225.502776][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.747058][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.776235][ T5953] em28xx 4-1:0.0: Freeing device
[  225.830452][   T90] usb 1-1: USB disconnect, device number 12
[  225.836576][ T5928] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  226.362882][   T30] audit: type=1400 audit(1765914259.071:413): avc:  denied  { mount } for  pid=8123 comm="syz.6.467" name="/" dev="autofs" ino=19503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  226.498052][   T30] audit: type=1400 audit(1765914259.211:414): avc:  denied  { unmount } for  pid=7339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  226.673588][ T8131] nvme_fabrics: unknown parameter or missing value ' KÏ’' in ctrl creation request
[  227.140953][ T8144] netlink: 32 bytes leftover after parsing attributes in process `syz.7.473'.
[  227.193381][ T5826] Bluetooth: hci2: command 0x0406 tx timeout
[  227.323729][   T30] audit: type=1400 audit(1765914260.001:415): avc:  denied  { write } for  pid=8140 comm="syz.7.473" path="socket:[18975]" dev="sockfs" ino=18975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  227.395665][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout
[  227.549779][ T8141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8141 comm=syz.7.473
[  227.655682][ T7271] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.933321][ T5953] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  228.317407][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  228.326769][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  228.336410][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  228.349504][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  228.354165][ T5953] usb 4-1: Using ep0 maxpacket: 16
[  228.364625][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  228.406003][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.443458][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.453281][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  228.474374][ T5953] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  228.490780][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.500990][ T5953] usb 4-1: config 0 descriptor??
[  228.955690][ T8187] comedi comedi0: board detection failed
[  229.276799][ T7271] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.292858][ T5953] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  229.314490][ T5953] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  229.321492][ T5953] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  229.331956][ T5953] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  229.386963][ T5953] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  229.426252][ T5953] input: HID 0955:7214 Haptics as /devices/virtual/input/input17
[  229.504173][ T5953] shield 0003:0955:7214.0008: Registered Thunderstrike controller
[  229.532538][ T5953] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  229.597353][ T7271] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.642583][ T8200] loop6: detected capacity change from 0 to 524288000
[  229.656542][ T5954] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  229.674514][ T5953] usb 4-1: USB disconnect, device number 19
[  229.681521][ T5954] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  229.714566][ T5954] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  229.726923][   T48] thermal thermal_zone0: Temperature check failed (-19)
[  229.747319][ T8204] loop6: detected capacity change from 524288000 to 1
[  229.781893][ T5954] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  229.878661][ T7271] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.098108][ T8174] chnl_net:caif_netlink_parms(): no params data found
[  230.163437][ T5953] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  230.370817][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.453738][ T5826] Bluetooth: hci4: command tx timeout
[  230.493144][ T5953] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  230.531703][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.549107][ T5953] usb 4-1: config 0 descriptor??
[  230.550909][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  230.556636][ T5953] pwc: Askey VC010 type 2 USB webcam detected.
[  230.569548][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  230.578296][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  230.587870][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  230.595418][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  230.678994][ T7271] bridge_slave_1: left allmulticast mode
[  230.685513][ T7271] bridge_slave_1: left promiscuous mode
[  230.691203][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.712692][ T7271] bridge_slave_0: left allmulticast mode
[  230.719245][ T7271] bridge_slave_0: left promiscuous mode
[  230.738256][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.964345][ T5953] pwc: recv_control_msg error -32 req 02 val 2b00
[  230.993270][ T5953] pwc: recv_control_msg error -32 req 02 val 2700
[  231.011172][ T5953] pwc: recv_control_msg error -32 req 02 val 2c00
[  231.019550][ T5953] pwc: recv_control_msg error -32 req 04 val 1000
[  231.041512][ T5953] pwc: recv_control_msg error -32 req 04 val 1300
[  231.056147][ T5953] pwc: recv_control_msg error -32 req 04 val 1400
[  231.074760][ T5953] pwc: recv_control_msg error -32 req 02 val 2000
[  231.282610][ T5953] pwc: recv_control_msg error -71 req 04 val 1500
[  231.290860][ T5953] pwc: recv_control_msg error -71 req 02 val 2500
[  231.297948][ T5953] pwc: recv_control_msg error -71 req 02 val 2400
[  231.316812][ T5953] pwc: recv_control_msg error -71 req 02 val 2600
[  231.324601][ T5953] pwc: recv_control_msg error -71 req 02 val 2900
[  231.331483][ T5953] pwc: recv_control_msg error -71 req 02 val 2800
[  231.339162][ T5953] pwc: recv_control_msg error -71 req 04 val 1100
[  231.347304][ T5953] pwc: recv_control_msg error -71 req 04 val 1200
[  231.355451][ T5953] pwc: Registered as video103.
[  231.376281][ T5953] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18
[  231.395481][ T7271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.404234][ T5953] usb 4-1: USB disconnect, device number 20
[  231.426886][ T7271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.442195][ T7271] bond0 (unregistering): Released all slaves
[  231.533954][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.541137][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.578724][ T8174] bridge_slave_0: entered allmulticast mode
[  231.596909][ T8174] bridge_slave_0: entered promiscuous mode
[  231.640801][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.648233][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.656935][ T8174] bridge_slave_1: entered allmulticast mode
[  231.666369][ T8174] bridge_slave_1: entered promiscuous mode
[  231.845881][ T8174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.906131][ T8174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.133636][ T8244] comedi comedi0: board detection failed
[  232.457500][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  232.467117][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  232.477264][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  232.485381][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  232.492955][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  232.504228][ T7271] hsr_slave_0: left promiscuous mode
[  232.520193][ T7271] hsr_slave_1: left promiscuous mode
[  232.526259][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.534050][ T5830] Bluetooth: hci4: command tx timeout
[  232.544060][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.552075][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.559830][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.568896][   T30] audit: type=1400 audit(1765914265.281:416): avc:  denied  { setopt } for  pid=8245 comm="syz.7.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  232.596713][ T7271] veth1_macvtap: left promiscuous mode
[  232.602262][ T7271] veth0_macvtap: left promiscuous mode
[  232.624239][ T7271] veth1_vlan: left promiscuous mode
[  232.629545][ T7271] veth0_vlan: left promiscuous mode
[  232.693791][ T5830] Bluetooth: hci2: command tx timeout
[  233.178359][   T30] audit: type=1400 audit(1765914265.891:417): avc:  denied  { setopt } for  pid=8255 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  233.389915][ T7271] team0 (unregistering): Port device team_slave_1 removed
[  233.434962][ T7271] team0 (unregistering): Port device team_slave_0 removed
[  233.783146][   T30] audit: type=1400 audit(1765914266.491:418): avc:  denied  { create } for  pid=8265 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  234.257936][ T8267] FAULT_INJECTION: forcing a failure.
[  234.257936][ T8267] name failslab, interval 1, probability 0, space 0, times 0
[  234.270705][ T8267] CPU: 0 UID: 0 PID: 8267 Comm: syz.3.501 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  234.270727][ T8267] Tainted: [L]=SOFTLOCKUP
[  234.270731][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  234.270737][ T8267] Call Trace:
[  234.270742][ T8267]  <TASK>
[  234.270746][ T8267]  dump_stack_lvl+0x16c/0x1f0
[  234.270764][ T8267]  should_fail_ex+0x512/0x640
[  234.270780][ T8267]  ? trace_fib_table_lookup+0x19f/0x200
[  234.270793][ T8267]  should_failslab+0xc2/0x120
[  234.270808][ T8267]  kmem_cache_alloc_noprof+0x83/0x770
[  234.270819][ T8267]  ? dst_alloc+0x99/0x1a0
[  234.270837][ T8267]  ? dst_alloc+0x99/0x1a0
[  234.270850][ T8267]  dst_alloc+0x99/0x1a0
[  234.270867][ T8267]  rt_dst_alloc+0x35/0x3a0
[  234.270881][ T8267]  ip_route_output_key_hash_rcu+0x87a/0x28e0
[  234.270897][ T8267]  ip_route_output_key_hash+0x10f/0x2b0
[  234.270908][ T8267]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  234.270924][ T8267]  ip_route_output_flow+0x27/0x150
[  234.270935][ T8267]  raw_sendmsg+0xd75/0x34f0
[  234.270949][ T8267]  ? __pfx_raw_sendmsg+0x10/0x10
[  234.270959][ T8267]  ? avc_has_perm_noaudit+0x149/0x3b0
[  234.270978][ T8267]  ? avc_has_perm+0x144/0x1f0
[  234.271000][ T8267]  ? sock_has_perm+0x258/0x2f0
[  234.271019][ T8267]  ? __pfx_raw_sendmsg+0x10/0x10
[  234.271029][ T8267]  inet_sendmsg+0x11c/0x140
[  234.271038][ T8267]  __sys_sendto+0x43c/0x520
[  234.271055][ T8267]  ? __pfx___sys_sendto+0x10/0x10
[  234.271074][ T8267]  ? preempt_schedule_common+0x44/0xc0
[  234.271093][ T8267]  ? ksys_write+0x1ac/0x250
[  234.271106][ T8267]  ? __pfx_ksys_write+0x10/0x10
[  234.271120][ T8267]  __x64_sys_sendto+0xe0/0x1c0
[  234.271135][ T8267]  ? do_syscall_64+0x91/0xf80
[  234.271147][ T8267]  ? lockdep_hardirqs_on+0x7c/0x110
[  234.271159][ T8267]  do_syscall_64+0xcd/0xf80
[  234.271172][ T8267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.271183][ T8267] RIP: 0033:0x7fddde18f749
[  234.271191][ T8267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.271202][ T8267] RSP: 002b:00007fdddf048038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  234.271212][ T8267] RAX: ffffffffffffffda RBX: 00007fddde3e6090 RCX: 00007fddde18f749
[  234.271218][ T8267] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000006
[  234.271224][ T8267] RBP: 00007fdddf048090 R08: 0000200000000440 R09: 0000000000000010
[  234.271230][ T8267] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001
[  234.271236][ T8267] R13: 00007fddde3e6128 R14: 00007fddde3e6090 R15: 00007ffe6f06ded8
[  234.271250][ T8267]  </TASK>
[  234.949057][ T5821] Bluetooth: hci2: command tx timeout
[  234.955294][   T52] Bluetooth: hci4: command tx timeout
[  234.960809][ T5826] Bluetooth: hci1: command tx timeout
[  235.229871][ T8174] team0: Port device team_slave_0 added
[  235.261308][ T8174] team0: Port device team_slave_1 added
[  235.380682][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.411691][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  235.564183][ T8174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.579232][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.624896][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  235.694748][ T8174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.697687][   T30] audit: type=1400 audit(1765914268.411:419): avc:  denied  { create } for  pid=8280 comm="syz.7.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  235.815096][   T30] audit: type=1400 audit(1765914268.421:420): avc:  denied  { ioctl } for  pid=8280 comm="syz.7.504" path="socket:[19954]" dev="sockfs" ino=19954 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  235.840680][   T30] audit: type=1400 audit(1765914268.421:421): avc:  denied  { connect } for  pid=8280 comm="syz.7.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  235.862337][   T30] audit: type=1400 audit(1765914268.421:422): avc:  denied  { write } for  pid=8280 comm="syz.7.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  235.945553][ T5927] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  236.135151][ T8174] hsr_slave_0: entered promiscuous mode
[  236.141603][ T8174] hsr_slave_1: entered promiscuous mode
[  236.173249][ T5927] usb 8-1: Using ep0 maxpacket: 32
[  236.181526][ T5927] usb 8-1: unable to get BOS descriptor or descriptor too short
[  236.501354][ T8174] debugfs: 'hsr0' already exists in 'hsr'
[  236.507650][ T8174] Cannot create hsr debugfs directory
[  236.523397][ T8217] chnl_net:caif_netlink_parms(): no params data found
[  236.538263][ T5927] usb 8-1: unable to read config index 0 descriptor/start: -71
[  236.556292][ T5927] usb 8-1: can't read configurations, error -71
[  236.728171][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.735858][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.743068][ T8217] bridge_slave_0: entered allmulticast mode
[  236.750915][ T8217] bridge_slave_0: entered promiscuous mode
[  236.826374][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.856454][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.863742][ T8217] bridge_slave_1: entered allmulticast mode
[  236.870988][ T8217] bridge_slave_1: entered promiscuous mode
[  237.013333][ T5826] Bluetooth: hci1: command tx timeout
[  237.013367][ T5821] Bluetooth: hci4: command tx timeout
[  237.026299][ T5830] Bluetooth: hci2: command tx timeout
[  237.032934][ T8217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.133478][ T8314] comedi comedi0: board detection failed
[  237.259739][ T8315] ieee802154 phy0 wpan0: encryption failed: -22
[  237.269943][   T30] audit: type=1400 audit(1765914269.971:423): avc:  denied  { write } for  pid=8310 comm="syz.7.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  237.423349][   T30] audit: type=1400 audit(1765914270.111:424): avc:  denied  { bind } for  pid=8310 comm="syz.7.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  237.475987][ T8247] chnl_net:caif_netlink_parms(): no params data found
[  237.497525][ T8315] [U] 
[  237.500362][ T8315] [U] 
[  237.503033][ T8315] [U] 
[  237.505707][ T8315] [U] 
[  237.508462][ T8315] [U] 
[  237.511127][ T8315] [U] 
[  237.513795][ T8315] [U] 
[  237.516460][ T8315] [U] 
[  237.528163][ T8315] [U] 
[  237.530891][ T8315] [U] 
[  237.533573][ T8315] [U] 
[  237.535530][ T8217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.571363][ T8217] team0: Port device team_slave_0 added
[  237.679002][   T30] audit: type=1400 audit(1765914270.291:425): avc:  denied  { ioctl } for  pid=8310 comm="syz.7.507" path="socket:[20062]" dev="sockfs" ino=20062 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  237.730690][ T7271] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.755644][ T8217] team0: Port device team_slave_1 added
[  237.764531][ T8310] [U] 
[  237.925295][ T5928] IPVS: starting estimator thread 0...
[  237.938702][ T7271] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.979196][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.996788][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  238.013273][ T8322] IPVS: using max 51 ests per chain, 122400 per kthread
[  238.233573][ T8217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.353166][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.385306][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  238.470400][ T8217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.618958][ T7271] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.776144][ T7271] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.808150][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.815634][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.826159][ T8247] bridge_slave_0: entered allmulticast mode
[  238.841842][ T8247] bridge_slave_0: entered promiscuous mode
[  238.948239][   T30] audit: type=1400 audit(1765914271.661:426): avc:  denied  { connect } for  pid=8345 comm="syz.7.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  238.970814][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.978708][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.986315][ T8247] bridge_slave_1: entered allmulticast mode
[  238.993007][ T8247] bridge_slave_1: entered promiscuous mode
[  239.024684][ T8217] hsr_slave_0: entered promiscuous mode
[  239.032442][ T8217] hsr_slave_1: entered promiscuous mode
[  239.039059][ T8217] debugfs: 'hsr0' already exists in 'hsr'
[  239.045161][ T8217] Cannot create hsr debugfs directory
[  239.050708][ T8174] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  239.098461][ T5830] Bluetooth: hci2: command tx timeout
[  239.098496][ T5821] Bluetooth: hci1: command tx timeout
[  239.119070][ T8174] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  239.138327][ T8247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.157935][ T8174] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  239.172472][ T8247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.209442][ T8174] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  239.267379][ T8247] team0: Port device team_slave_0 added
[  239.289918][ T8247] team0: Port device team_slave_1 added
[  239.478188][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.489823][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.517058][ T8247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.644173][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.658060][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.684946][ T8247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.936132][ T7271] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.958917][ T8247] hsr_slave_0: entered promiscuous mode
[  239.965595][ T8247] hsr_slave_1: entered promiscuous mode
[  239.971478][ T8247] debugfs: 'hsr0' already exists in 'hsr'
[  239.979332][ T8247] Cannot create hsr debugfs directory
[  240.013296][ T7802] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  240.127912][   T30] audit: type=1400 audit(1765914272.841:427): avc:  denied  { connect } for  pid=8357 comm="syz.7.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  240.213395][ T7802] usb 4-1: Using ep0 maxpacket: 32
[  240.266445][ T7802] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  240.293438][ T7802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.309973][ T7802] usb 4-1: Product: syz
[  240.325532][ T7802] usb 4-1: Manufacturer: syz
[  240.332637][ T7802] usb 4-1: SerialNumber: syz
[  240.358884][ T7802] usb 4-1: config 0 descriptor??
[  240.376717][ T7271] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.544231][ T7271] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.575507][   T30] audit: type=1400 audit(1765914273.291:428): avc:  denied  { open } for  pid=8355 comm="syz.3.511" path="/dev/ttyqa" dev="devtmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  240.682562][ T7271] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.025166][   T30] audit: type=1400 audit(1765914273.741:429): avc:  denied  { map } for  pid=8355 comm="syz.3.511" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  241.052880][ T7802] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  241.133795][ T7802] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[  241.156647][ T8217] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  241.166930][ T7802] usb 4-1: USB disconnect, device number 21
[  241.191415][ T5821] Bluetooth: hci1: command tx timeout
[  241.248431][ T8217] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  241.322688][ T8217] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  241.347196][ T8217] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  241.370709][ T8174] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.405821][ T7271] bridge_slave_1: left allmulticast mode
[  241.412025][ T7271] bridge_slave_1: left promiscuous mode
[  241.418666][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.428161][ T7271] bridge_slave_0: left allmulticast mode
[  241.434049][ T7271] bridge_slave_0: left promiscuous mode
[  241.442028][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.451773][ T7271] bridge_slave_1: left allmulticast mode
[  241.457694][ T7271] bridge_slave_1: left promiscuous mode
[  241.463497][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.473453][ T7271] bridge_slave_0: left allmulticast mode
[  241.479096][ T7271] bridge_slave_0: left promiscuous mode
[  241.487148][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.554050][ T5953] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  241.704388][ T5953] usb 8-1: Using ep0 maxpacket: 32
[  241.711236][ T5953] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  241.719997][ T5953] usb 8-1: config 0 has no interface number 0
[  241.726598][ T5953] usb 8-1: config 0 interface 184 has no altsetting 0
[  241.735823][ T5953] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  241.744998][ T5953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.752993][ T5953] usb 8-1: Product: syz
[  241.757379][ T5953] usb 8-1: Manufacturer: syz
[  241.761988][ T5953] usb 8-1: SerialNumber: syz
[  241.769000][ T5953] usb 8-1: config 0 descriptor??
[  241.780547][ T5953] smsc75xx v1.0.0
[  241.864426][ T7271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.875613][ T7271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.885787][ T7271] bond0 (unregistering): Released all slaves
[  241.977871][ T8391] =======================================================
[  241.977871][ T8391] WARNING: The mand mount option has been deprecated and
[  241.977871][ T8391]          and is ignored by this kernel. Remove the mand
[  241.977871][ T8391]          option from the mount to silence this warning.
[  241.977871][ T8391] =======================================================
[  241.977899][   T30] audit: type=1400 audit(1765914274.691:430): avc:  denied  { mounton } for  pid=8389 comm="syz.3.515" path="/106/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1
[  242.058070][   T30] audit: type=1400 audit(1765914274.731:431): avc:  denied  { mount } for  pid=8389 comm="syz.3.515" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  242.278385][ T7271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.288716][ T7271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.298767][ T7271] bond0 (unregistering): Released all slaves
[  242.340558][ T8174] 8021q: adding VLAN 0 to HW filter on device team0
[  242.418474][ T7275] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.425629][ T7275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.514043][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.521198][ T7268] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.986426][ T8397] comedi comedi0: board detection failed
[  243.651048][ T7271] hsr_slave_0: left promiscuous mode
[  243.668288][ T7271] hsr_slave_1: left promiscuous mode
[  243.676455][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.684175][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.692991][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.702761][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.715515][ T7271] hsr_slave_0: left promiscuous mode
[  243.721876][ T7271] hsr_slave_1: left promiscuous mode
[  243.728221][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.738357][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.747815][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.756029][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.799152][ T7271] veth1_macvtap: left promiscuous mode
[  243.805631][ T7271] veth0_macvtap: left promiscuous mode
[  243.811371][ T7271] veth1_vlan: left promiscuous mode
[  243.817974][ T7271] veth0_vlan: left promiscuous mode
[  243.842397][ T7271] veth1_macvtap: left promiscuous mode
[  243.855063][ T7271] veth0_macvtap: left promiscuous mode
[  243.864975][ T7271] veth1_vlan: left promiscuous mode
[  243.873794][ T7271] veth0_vlan: left promiscuous mode
[  244.418532][ T5953] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  244.525323][ T5953] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  244.760067][ T5953] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  246.073825][ T8428] Set syz1 is full, maxelem 65536 reached
[  246.246973][ T5953] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  246.259921][ T5953] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  246.260161][ T7271] team0 (unregistering): Port device team_slave_1 removed
[  246.392303][ T5953] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  246.486434][ T5953] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71
[  246.499621][ T7271] team0 (unregistering): Port device team_slave_0 removed
[  246.524398][ T5953] usb 8-1: USB disconnect, device number 8
[  247.840795][ T7271] team0 (unregistering): Port device team_slave_1 removed
[  247.877321][ T7271] team0 (unregistering): Port device team_slave_0 removed
[  248.174644][ T8217] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.398114][ T8217] 8021q: adding VLAN 0 to HW filter on device team0
[  248.576714][ T7262] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.583821][ T7262] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.612626][ T8174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.686245][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.693417][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.801186][ T8247] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  248.863113][ T8247] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  248.923449][ T8247] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  248.958753][ T8247] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  249.070266][ T7271] IPVS: stop unused estimator thread 0...
[  249.217726][ T8247] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.268287][ T8247] 8021q: adding VLAN 0 to HW filter on device team0
[  249.337867][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.345034][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.461460][ T7271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.536582][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  249.546266][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  249.555463][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  249.563565][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  249.571190][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  249.632916][ T8174] veth0_vlan: entered promiscuous mode
[  249.651125][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.658289][ T7256] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.720163][ T7271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.757454][ T8174] veth1_vlan: entered promiscuous mode
[  249.928807][ T7271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.092000][ T7271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.150539][ T8217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.388030][ T8174] veth0_macvtap: entered promiscuous mode
[  250.505427][ T8174] veth1_macvtap: entered promiscuous mode
[  250.545598][ T8247] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.657610][ T8484] chnl_net:caif_netlink_parms(): no params data found
[  250.712570][ T7271] bridge_slave_1: left allmulticast mode
[  250.723590][ T7271] bridge_slave_1: left promiscuous mode
[  250.735187][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.747371][ T7271] bridge_slave_0: left allmulticast mode
[  250.753049][ T7271] bridge_slave_0: left promiscuous mode
[  250.773576][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.004024][ T5954] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  251.112335][ T7271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.122567][ T7271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  251.132200][ T7271] bond0 (unregistering): Released all slaves
[  251.163402][ T5954] usb 8-1: Using ep0 maxpacket: 32
[  251.170758][ T5954] usb 8-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8
[  251.183673][ T5954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.199315][ T5954] usb 8-1: config 0 descriptor??
[  251.212154][ T5954] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[  251.218656][ T5954] gspca_mr97310a: reg write [21] error -22
[  251.224680][ T5954] mr97310a 8-1:0.0: probe with driver mr97310a failed with error -22
[  251.261927][ T7271] bond1 (unregistering): Released all slaves
[  251.407108][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.480008][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.488556][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.497182][ T8484] bridge_slave_0: entered allmulticast mode
[  251.507006][ T8484] bridge_slave_0: entered promiscuous mode
[  251.518043][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.532350][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.545477][ T7802] usb 8-1: USB disconnect, device number 9
[  251.560082][ T8484] bridge_slave_1: entered allmulticast mode
[  251.568061][ T8484] bridge_slave_1: entered promiscuous mode
[  251.578943][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.653558][ T5830] Bluetooth: hci0: command tx timeout
[  251.660217][ T5927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  251.675927][ T7262] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.694254][ T7262] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.703271][ T7262] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.728628][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.758266][ T7262] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.777620][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.787213][ T8247] veth0_vlan: entered promiscuous mode
[  251.837842][ T8484] team0: Port device team_slave_0 added
[  251.851360][ T7271] hsr_slave_0: left promiscuous mode
[  251.859507][ T7271] hsr_slave_1: left promiscuous mode
[  251.868334][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.877827][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.885544][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.892943][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.906751][ T7271] veth1_macvtap: left promiscuous mode
[  251.912268][ T7271] veth0_macvtap: left promiscuous mode
[  251.918125][ T7271] veth1_vlan: left promiscuous mode
[  251.923570][ T7271] veth0_vlan: left promiscuous mode
[  252.303753][ T7271] team0 (unregistering): Port device team_slave_1 removed
[  252.341546][ T7271] team0 (unregistering): Port device team_slave_0 removed
[  252.684047][ T5931] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  252.700363][ T8484] team0: Port device team_slave_1 added
[  252.726927][ T8217] veth0_vlan: entered promiscuous mode
[  252.746192][ T8247] veth1_vlan: entered promiscuous mode
[  252.791650][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.798728][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  252.825063][ T8484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.839033][ T8217] veth1_vlan: entered promiscuous mode
[  252.845146][ T5931] usb 8-1: Using ep0 maxpacket: 32
[  252.867653][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.880892][ T5931] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  252.891050][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  252.917845][ T8484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.933150][ T5931] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  252.943156][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  252.952652][ T5931] usb 8-1: Product: syz
[  252.953110][ T8247] veth0_macvtap: entered promiscuous mode
[  252.962703][ T5931] usb 8-1: Manufacturer: syz
[  252.967401][ T5931] usb 8-1: SerialNumber: syz
[  252.977684][ T5931] usb 8-1: config 0 descriptor??
[  252.984798][ T8556] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  252.994401][ T5931] hub 8-1:0.0: bad descriptor, ignoring hub
[  253.000641][ T5931] hub 8-1:0.0: probe with driver hub failed with error -5
[  253.030934][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.057310][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.076530][ T8247] veth1_macvtap: entered promiscuous mode
[  253.119071][ T8484] hsr_slave_0: entered promiscuous mode
[  253.126462][ T8484] hsr_slave_1: entered promiscuous mode
[  253.171037][ T7255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.175373][ T8217] veth0_macvtap: entered promiscuous mode
[  253.191085][ T7255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.232712][ T8247] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.242303][ T8217] veth1_macvtap: entered promiscuous mode
[  253.250234][   T30] audit: type=1400 audit(1765914285.961:432): avc:  denied  { mounton } for  pid=8174 comm="syz-executor" path="/root/syzkaller.WgPxO2/syz-tmp" dev="sda1" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  253.292490][   T30] audit: type=1400 audit(1765914285.971:433): avc:  denied  { mounton } for  pid=8174 comm="syz-executor" path="/root/syzkaller.WgPxO2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  253.322164][   T30] audit: type=1400 audit(1765914286.001:434): avc:  denied  { mounton } for  pid=8174 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  253.332446][ T7802] usb 8-1: USB disconnect, device number 10
[  253.356979][ T8247] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.405532][ T2898] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.440998][ T2898] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.459414][ T2898] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.479985][ T8564] fuse: Bad value for 'fd'
[  253.480374][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.509913][ T2898] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.678608][ T8565] netlink: 'syz.8.478': attribute type 5 has an invalid length.
[  253.695621][ T5931] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  253.736364][ T5830] Bluetooth: hci0: command tx timeout
[  253.798956][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.820974][ T7271] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.839261][ T7271] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.879487][ T7271] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.894615][ T5931] usb 8-1: Using ep0 maxpacket: 32
[  253.901388][ T5931] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  253.932939][ T5931] usb 8-1: string descriptor 0 read error: -22
[  253.956007][ T5931] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  253.966364][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  253.982344][ T5931] usb 8-1: config 0 descriptor??
[  253.989037][ T8556] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  253.997530][ T5931] hub 8-1:0.0: bad descriptor, ignoring hub
[  254.011546][ T5931] hub 8-1:0.0: probe with driver hub failed with error -5
[  254.054520][ T7271] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.199595][ T8556] netlink: 16 bytes leftover after parsing attributes in process `syz.7.534'.
[  254.263351][ T7267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.273577][ T7267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.321081][   T24] usb 8-1: USB disconnect, device number 11
[  254.523336][ T7266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.541467][ T7266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.579136][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.659432][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.097655][ T8484] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  255.123366][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  255.147483][ T8484] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  255.203742][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.537'.
[  255.212957][ T8484] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  255.221025][ T7274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.233641][ T7274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.433299][   T24] usb 3-1: Using ep0 maxpacket: 16
[  255.540438][ T8484] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  255.830416][ T5830] Bluetooth: hci0: command tx timeout
[  255.840716][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.848051][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  255.854511][   T30] audit: type=1400 audit(1765914288.491:435): avc:  denied  { bind } for  pid=8602 comm="syz.8.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  255.883125][   T30] audit: type=1400 audit(1765914288.501:436): avc:  denied  { create } for  pid=8602 comm="syz.8.538" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  256.231374][   T30] audit: type=1400 audit(1765914288.501:437): avc:  denied  { write } for  pid=8602 comm="syz.8.538" name="file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  256.277582][   T30] audit: type=1400 audit(1765914288.501:438): avc:  denied  { open } for  pid=8602 comm="syz.8.538" path="/3/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  256.305092][   T30] audit: type=1400 audit(1765914288.501:439): avc:  denied  { ioctl } for  pid=8602 comm="syz.8.538" path="/3/file0" dev="tmpfs" ino=38 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  256.329386][   T30] audit: type=1400 audit(1765914288.971:440): avc:  denied  { unlink } for  pid=8174 comm="syz-executor" name="file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  256.356752][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.441009][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.470279][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  256.526237][   T24] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  256.566548][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.611167][   T24] usb 3-1: config 0 descriptor??
[  257.348369][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.389200][ T8484] 8021q: adding VLAN 0 to HW filter on device team0
[  257.410599][ T7271] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.417789][ T7271] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.508612][ T7265] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.515776][ T7265] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.558769][   T24] hid-multitouch 0003:0457:07DA.0009: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0
[  258.355926][ T5830] Bluetooth: hci0: command tx timeout
[  258.382861][   T24] usb 3-1: USB disconnect, device number 8
[  258.756963][ T8484] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.063090][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.7.547'.
[  259.071953][ T8671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.079403][ T8671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.379649][ T8671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.387131][ T8671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.587742][ T5927] IPVS: starting estimator thread 0...
[  259.593567][ T8677] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  259.725420][ T8681] IPVS: using max 47 ests per chain, 112800 per kthread
[  260.621280][ T8484] veth0_vlan: entered promiscuous mode
[  260.674405][ T8484] veth1_vlan: entered promiscuous mode
[  260.757895][ T8484] veth0_macvtap: entered promiscuous mode
[  260.814778][ T8484] veth1_macvtap: entered promiscuous mode
[  260.861619][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.958081][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.054244][ T7267] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.103891][ T7267] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.147090][ T7267] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.178764][ T8702] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present
[  261.204162][ T7267] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.254860][   T90] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  261.292802][   T30] audit: type=1400 audit(1765914294.001:441): avc:  denied  { mounton } for  pid=8704 comm="syz.8.553" path="/proc/24/cgroup" dev="proc" ino=23833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  261.294263][ T6002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  261.971301][   T30] audit: type=1400 audit(1765914294.301:442): avc:  denied  { module_request } for  pid=8704 comm="syz.8.553" kmod="netdev-syztnl0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  262.179047][ T7265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.207936][ T7265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.483799][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.501658][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.752004][ T8731] netlink: 'syz.9.552': attribute type 4 has an invalid length.
[  262.989425][   T30] audit: type=1400 audit(1765914295.701:443): avc:  denied  { connect } for  pid=8727 comm="syz.5.528" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  263.374101][   T30] audit: type=1400 audit(1765914296.091:444): avc:  denied  { write } for  pid=8747 comm="syz.7.559" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  263.519080][   T30] audit: type=1400 audit(1765914296.111:445): avc:  denied  { open } for  pid=8747 comm="syz.7.559" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  263.633346][   T30] audit: type=1400 audit(1765914296.111:446): avc:  denied  { ioctl } for  pid=8747 comm="syz.7.559" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x54a2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  263.709094][ T8760] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  264.823335][   T30] audit: type=1326 audit(1765914296.771:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.2.560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f521ab8f749 code=0x0
[  265.871835][ T8776] input: syz1 as /devices/virtual/input/input19
[  265.901695][   T30] audit: type=1400 audit(1765914298.611:448): avc:  denied  { read } for  pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=3002 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  266.044365][   T30] audit: type=1400 audit(1765914298.641:449): avc:  denied  { open } for  pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3002 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  266.166741][   T30] audit: type=1400 audit(1765914298.641:450): avc:  denied  { ioctl } for  pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3002 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  266.368969][ T8783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  267.022081][ T8765] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  267.033769][ T5929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  268.205350][ T8800] block nbd8: shutting down sockets
[  268.473328][   T30] audit: type=1400 audit(1765914301.041:451): avc:  denied  { read } for  pid=8806 comm="syz.5.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  269.627634][ T8827] FAULT_INJECTION: forcing a failure.
[  269.627634][ T8827] name failslab, interval 1, probability 0, space 0, times 0
[  269.640447][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.5.572 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  269.640475][ T8827] Tainted: [L]=SOFTLOCKUP
[  269.640480][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  269.640490][ T8827] Call Trace:
[  269.640496][ T8827]  <TASK>
[  269.640501][ T8827]  dump_stack_lvl+0x16c/0x1f0
[  269.640526][ T8827]  should_fail_ex+0x512/0x640
[  269.640550][ T8827]  ? kmem_cache_alloc_lru_noprof+0x66/0x770
[  269.640569][ T8827]  should_failslab+0xc2/0x120
[  269.640588][ T8827]  kmem_cache_alloc_lru_noprof+0x87/0x770
[  269.640606][ T8827]  ? __d_alloc+0x35/0xa80
[  269.640633][ T8827]  ? __d_alloc+0x35/0xa80
[  269.640652][ T8827]  __d_alloc+0x35/0xa80
[  269.640678][ T8827]  d_alloc_pseudo+0x1c/0xc0
[  269.640698][ T8827]  alloc_file_pseudo+0xcf/0x230
[  269.640715][ T8827]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  269.640733][ T8827]  ? _raw_spin_unlock+0x28/0x50
[  269.640749][ T8827]  ? alloc_fd+0x471/0x7d0
[  269.640774][ T8827]  __anon_inode_getfile+0xe8/0x280
[  269.640795][ T8827]  __anon_inode_getfd+0x5c/0x160
[  269.640814][ T8827]  __x64_sys_fsopen+0x18b/0x240
[  269.640835][ T8827]  do_syscall_64+0xcd/0xf80
[  269.640857][ T8827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.640873][ T8827] RIP: 0033:0x7f9e90f8f749
[  269.640887][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.640902][ T8827] RSP: 002b:00007f9e91e36038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  269.640918][ T8827] RAX: ffffffffffffffda RBX: 00007f9e911e6090 RCX: 00007f9e90f8f749
[  269.640928][ T8827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  269.640937][ T8827] RBP: 00007f9e91e36090 R08: 0000000000000000 R09: 0000000000000000
[  269.640946][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  269.640956][ T8827] R13: 00007f9e911e6128 R14: 00007f9e911e6090 R15: 00007ffc0eadaab8
[  269.640977][ T8827]  </TASK>
[  269.723437][   T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  271.103290][   T48] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  271.113091][   T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.141824][   T30] audit: type=1400 audit(1765914303.851:452): avc:  denied  { ioctl } for  pid=8838 comm="syz.5.576" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  271.145989][ T8839] sg_write: data in/out 532239/1 bytes for SCSI command 0x0-- guessing data in;
[  271.145989][ T8839]    program syz.5.576 not setting count and/or reply_len properly
[  271.176250][   T24] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  271.203762][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.225644][   T24] usb 9-1: config 0 descriptor??
[  271.246604][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  271.456794][   T48] usb 10-1: Using ep0 maxpacket: 16
[  271.506737][   T48] usb 10-1: config 4 has an invalid interface number: 9 but max is 0
[  271.515500][   T48] usb 10-1: config 4 has no interface number 0
[  271.545945][ T8765] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  271.547464][   T48] usb 10-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  271.583158][   T48] usb 10-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  271.609746][   T48] usb 10-1: config 4 interface 9 has no altsetting 0
[  271.630074][   T48] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  271.641063][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  271.649687][   T48] usb 10-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  271.665507][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  271.678118][   T48] usb 10-1: Product: syz
[  271.686856][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  271.696502][   T48] usb 10-1: Manufacturer: syz
[  271.704816][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  271.705382][ T8765] usb 6-1: unable to get BOS descriptor or descriptor too short
[  271.719161][   T48] usb 10-1: SerialNumber: syz
[  271.730589][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  271.741319][ T8765] usb 6-1: not running at top speed; connect to a high speed hub
[  271.750439][ T8831] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  271.758067][ T8831] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  271.766447][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  271.781226][   T24] pwc: recv_control_msg error -32 req 02 val 2000
[  271.784975][ T8765] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.788643][   T24] pwc: recv_control_msg error -32 req 02 val 2100
[  271.827936][   T24] pwc: recv_control_msg error -32 req 04 val 1500
[  271.837469][   T24] pwc: recv_control_msg error -32 req 02 val 2500
[  271.845647][   T24] pwc: recv_control_msg error -32 req 02 val 2400
[  271.852711][   T24] pwc: recv_control_msg error -32 req 02 val 2600
[  271.860424][   T24] pwc: recv_control_msg error -32 req 02 val 2900
[  271.868175][ T8765] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  271.900109][   T48] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  271.912709][ T8765] usb 6-1: string descriptor 0 read error: -22
[  271.921730][ T8765] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  271.930945][ T8765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.946673][ T8765] usb 6-1: 0:2 : does not exist
[  272.020207][ T7265] usb 10-1: Failed to submit usb control message: -71
[  272.020453][ T6002] usb 10-1: USB disconnect, device number 2
[  272.049477][ T7265] usb 10-1: unable to send the bmi data to the device: -71
[  272.070702][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  272.077556][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  272.105022][   T24] pwc: Registered as video103.
[  272.110263][ T7265] usb 10-1: unable to get target info from device
[  272.137845][ T7265] usb 10-1: could not get target info (-71)
[  272.147093][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input20
[  272.167929][ T7265] usb 10-1: could not probe fw (-71)
[  272.199090][   T24] usb 9-1: USB disconnect, device number 2
[  272.428104][   T30] audit: type=1400 audit(1765914305.141:453): avc:  denied  { create } for  pid=8861 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  272.475868][ T8765] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  272.580804][   T30] audit: type=1400 audit(1765914305.181:454): avc:  denied  { connect } for  pid=8861 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  272.660340][ T8765] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[  272.677038][ T8869] input: syz0 as /devices/virtual/input/input21
[  272.813970][ T8765] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  272.903928][ T8867] comedi comedi0: board detection failed
[  273.124000][ T8765] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  273.147520][ T8872] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  273.335018][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.9.579'.
[  273.368635][ T8765] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  273.399728][ T8765] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[  273.485843][ T8765] usb 6-1: USB disconnect, device number 5
[  273.505933][   T30] audit: type=1400 audit(1765914306.221:455): avc:  denied  { map } for  pid=8878 comm="syz.8.580" path="socket:[24986]" dev="sockfs" ino=24986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  273.682416][   T30] audit: type=1400 audit(1765914306.221:456): avc:  denied  { read accept } for  pid=8878 comm="syz.8.580" path="socket:[24986]" dev="sockfs" ino=24986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  274.133424][ T5929] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  274.134124][   T30] audit: type=1400 audit(1765914306.851:457): avc:  denied  { setopt } for  pid=8891 comm="syz.5.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  274.288920][   T30] audit: type=1400 audit(1765914306.871:458): avc:  denied  { setopt } for  pid=8891 comm="syz.5.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  275.177979][ T5929] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  275.187050][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.196642][ T5929] usb 9-1: Product: syz
[  275.200834][ T5929] usb 9-1: Manufacturer: syz
[  275.273407][ T5929] usb 9-1: SerialNumber: syz
[  275.281300][ T5929] usb 9-1: config 0 descriptor??
[  275.315291][ T5929] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 003
[  275.725732][ T8914] xt_CT: You must specify a L4 protocol and not use inversions on it
[  276.623978][ T8765] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  276.663297][ T5954] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  276.926018][ T5929]  (null): failure reading functionality
[  276.957601][ T5929] i2c i2c-1: connected i2c-tiny-usb device
[  277.073796][ T5954] usb 8-1: Using ep0 maxpacket: 8
[  277.084755][ T5954] usb 8-1: config 0 has an invalid interface number: 17 but max is 0
[  277.106091][ T5954] usb 8-1: config 0 has no interface number 0
[  277.112227][ T5954] usb 8-1: New USB device found, idVendor=2013, idProduct=1faa, bcdDevice=ca.f7
[  277.133857][ T5954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.182111][ T5954] usb 8-1: config 0 descriptor??
[  277.193125][ T8883] netlink: 35 bytes leftover after parsing attributes in process `syz.8.580'.
[  277.652186][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.588'.
[  279.233003][ T5954] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in cold state, will try to load a firmware
[  279.326297][   T30] audit: type=1400 audit(1765914312.021:459): avc:  denied  { firmware_load } for  pid=5954 comm="kworker/1:9" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  279.353315][ T5929] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  279.363496][ T5954] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  279.372677][ T5954] dib0700: firmware download failed at 7 with -22
[  279.379737][ T7802] usb 9-1: USB disconnect, device number 3
[  279.525657][ T5954] usb 8-1: USB disconnect, device number 12
[  279.685885][ T8950] /dev/nullb0: Can't open blockdev
[  279.700504][   T30] audit: type=1326 audit(1765914312.391:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.7.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d238f749 code=0x7ffc0000
[  279.938843][ T5929] usb 3-1: Using ep0 maxpacket: 32
[  279.957887][ T5929] usb 3-1: config 2 has an invalid interface number: 194 but max is 0
[  279.998251][   T30] audit: type=1326 audit(1765914312.391:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.7.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d238f749 code=0x7ffc0000
[  280.023560][ T5929] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  280.044466][ T5929] usb 3-1: config 2 has no interface number 0
[  280.067753][ T5929] usb 3-1: config 2 interface 194 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  280.071060][   T30] audit: type=1326 audit(1765914312.391:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.7.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f60d238f749 code=0x7ffc0000
[  280.139750][   T30] audit: type=1400 audit(1765914312.401:463): avc:  denied  { mounton } for  pid=8946 comm="syz.7.592" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  280.746137][ T5929] usb 3-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024
[  280.757466][ T5929] usb 3-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  280.793284][   T30] audit: type=1326 audit(1765914312.401:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.7.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d238f749 code=0x7ffc0000
[  280.818210][   T30] audit: type=1326 audit(1765914312.401:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.7.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d238f749 code=0x7ffc0000
[  280.841674][ T5929] usb 3-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  280.860531][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.905094][ T8940] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  281.039629][   T30] audit: type=1326 audit(1765914312.411:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.7.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60d238f749 code=0x7ffc0000
[  281.259790][   T30] audit: type=1326 audit(1765914312.411:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.7.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d238f749 code=0x7ffc0000
[  281.349026][   T30] audit: type=1326 audit(1765914312.411:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.7.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d238f749 code=0x7ffc0000
[  282.287225][ T7802] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  282.467251][ T7802] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[  282.523745][ T7802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  282.598633][ T5929] usb 3-1: string descriptor 0 read error: -71
[  282.615774][ T7802] usb 9-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  282.653358][ T7802] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.675141][ T7802] usb 9-1: Product: syz
[  282.682739][ T7802] usb 9-1: Manufacturer: syz
[  282.696557][ T5929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  282.751981][ T7802] usb 9-1: SerialNumber: syz
[  282.823951][ T5929] usb 3-1: USB disconnect, device number 9
[  282.865393][ T7802] usb 9-1: config 0 descriptor??
[  282.918805][ T7802] powermate 9-1:0.0: probe with driver powermate failed with error -5
[  283.246590][   T90] usb 9-1: USB disconnect, device number 4
[  283.520377][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.601'.
[  284.219703][ T7802] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  284.373270][ T7802] usb 8-1: Using ep0 maxpacket: 32
[  284.410505][ T7802] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  284.440534][ T7802] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.469408][ T7802] usb 8-1: Product: syz
[  284.475141][ T7802] usb 8-1: Manufacturer: syz
[  284.479769][ T7802] usb 8-1: SerialNumber: syz
[  284.557802][ T7802] usb 8-1: config 0 descriptor??
[  284.657287][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  284.657302][   T30] audit: type=1400 audit(1765914317.371:476): avc:  denied  { audit_write } for  pid=9017 comm="syz.5.605" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  284.842161][ T9028] netlink: 52 bytes leftover after parsing attributes in process `syz.8.606'.
[  284.871523][   T30] audit: type=1326 audit(1765914317.581:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.8.606" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9609d8f749 code=0x0
[  285.352701][ T7802] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: failure sending bit rate
[  285.380323][ T7802] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71
[  285.476892][ T7802] usb 8-1: USB disconnect, device number 13
[  285.588804][   T30] audit: type=1400 audit(1765914318.301:478): avc:  denied  { read } for  pid=9037 comm="syz.5.608" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  285.703781][   T30] audit: type=1400 audit(1765914318.301:479): avc:  denied  { open } for  pid=9037 comm="syz.5.608" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  285.757385][   T30] audit: type=1400 audit(1765914318.301:480): avc:  denied  { ioctl } for  pid=9037 comm="syz.5.608" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  286.379288][   T30] audit: type=1400 audit(1765914318.981:481): avc:  denied  { write } for  pid=9044 comm="syz.8.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  286.786640][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'.
[  286.801732][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'.
[  286.821962][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'.
[  286.882172][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'.
[  287.014319][   T48] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  287.193615][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'.
[  287.204794][   T48] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  287.214954][   T48] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  287.224917][   T48] usb 9-1: config 1 interface 0 has no altsetting 0
[  287.233863][   T48] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  287.272465][   T48] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.413340][   T48] usb 9-1: Product: syz
[  287.417751][   T48] usb 9-1: Manufacturer: syz
[  287.422376][   T48] usb 9-1: SerialNumber: syz
[  287.440703][ T9063] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  287.448050][ T9063] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  287.731027][ T9080] QAT: Device 116 not found
[  288.965356][   T48] rtl8150 9-1:1.0: couldn't reset the device
[  289.047606][   T48] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5
[  289.143490][   T48] usb 9-1: USB disconnect, device number 5
[  289.414235][ T9101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9101 comm=syz.9.618
[  290.223504][   T30] audit: type=1400 audit(1765914578.934:482): avc:  denied  { create } for  pid=9106 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  292.194230][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.7.628'.
[  293.761230][ T9154] syzkaller0: entered promiscuous mode
[  293.766926][ T9154] syzkaller0: entered allmulticast mode
[  293.814103][   T48] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  293.984540][   T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  294.010330][   T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  294.120011][   T48] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  294.188998][   T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.208869][   T48] usb 6-1: Product: syz
[  294.230858][   T48] usb 6-1: Manufacturer: syz
[  294.238122][   T48] usb 6-1: SerialNumber: syz
[  294.260248][   T48] usb 6-1: config 0 descriptor??
[  294.532668][ T5954] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  294.732771][   T48] usb 6-1: USB disconnect, device number 6
[  295.647865][ T7283] udevd[7283]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  295.894724][ T5830] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  295.911236][ T5830] Bluetooth: hci2: Injecting HCI hardware error event
[  295.920442][ T5821] Bluetooth: hci2: hardware error 0x00
[  296.371448][   T48] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  297.145662][   T48] usb 6-1: Using ep0 maxpacket: 16
[  297.174814][   T48] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  297.185403][   T48] usb 6-1: config 0 has no interface number 0
[  297.196340][   T48] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  297.208813][   T48] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  297.324071][   T48] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  297.352551][   T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.382566][   T48] usb 6-1: Product: syz
[  297.386767][   T48] usb 6-1: Manufacturer: syz
[  297.399464][   T48] usb 6-1: SerialNumber: syz
[  297.437255][   T48] usb 6-1: config 0 descriptor??
[  297.466484][ T9199] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  297.482319][ T9199] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  297.708434][ T9199] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  297.715826][ T9199] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  297.958373][   T48] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  297.983975][   T48] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  298.015981][   T48] asix 6-1:0.251: probe with driver asix failed with error -5
[  298.071897][   T48] usb 6-1: USB disconnect, device number 7
[  298.133210][ T5821] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  298.834884][   T30] audit: type=1400 audit(1765914587.525:483): avc:  denied  { connect } for  pid=9221 comm="syz.7.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  298.943132][   T30] audit: type=1400 audit(1765914587.545:484): avc:  denied  { write } for  pid=9224 comm="syz.5.645" path="socket:[25393]" dev="sockfs" ino=25393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  299.112007][ T8765] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  299.292018][ T8765] usb 6-1: Using ep0 maxpacket: 8
[  299.355830][ T8765] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  299.375886][ T8765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.476079][ T8765] pvrusb2: Hardware description: Terratec Grabster AV400
[  299.512902][ T8765] pvrusb2: **********
[  299.557048][ T8765] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  299.621099][ T8765] pvrusb2: Important functionality might not be entirely working.
[  299.674821][ T8765] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  299.686415][ T8765] pvrusb2: **********
[  299.757651][ T2330] pvrusb2: Invalid write control endpoint
[  299.827888][ T2330] pvrusb2: Invalid write control endpoint
[  299.854043][ T2330] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  299.877109][ T2330] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  299.898968][ T2330] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  299.919528][ T2330] pvrusb2: Device being rendered inoperable
[  299.950368][ T9229] pvrusb2: Attempted to execute control transfer when device not ok
[  299.975346][ T9226] pvrusb2: Attempted to execute control transfer when device not ok
[  300.133060][ T2330] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  300.141872][ T2330] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  300.201920][ T2330] pvrusb2: Attached sub-driver cx25840
[  300.220494][ T2330] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  300.277486][ T2330] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  302.148819][ T9285] fuse: Unknown parameter ''
[  302.226887][ T9293] fuse: blksize only supported for fuseblk
[  302.301273][   T30] audit: type=1400 audit(1765914591.006:485): avc:  denied  { accept } for  pid=9280 comm="syz.5.654" laddr=fe80::e lport=53448 faddr=::ffff:172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  302.615404][ T9300] nvme_fabrics: unknown parameter or missing value ' KÏ’' in ctrl creation request
[  304.693871][   T90] usb 6-1: USB disconnect, device number 8
[  304.732108][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'.
[  304.780763][   T30] audit: type=1326 audit(1765914593.486:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.9.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11c98f749 code=0x7ffc0000
[  304.902899][   T30] audit: type=1326 audit(1765914593.486:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.9.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc11c98f749 code=0x7ffc0000
[  304.989541][   T30] audit: type=1326 audit(1765914593.486:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.9.660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc11c98f749 code=0x0
[  305.367345][   T30] audit: type=1400 audit(1765914594.076:489): avc:  denied  { read } for  pid=9330 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  305.435471][   T30] audit: type=1400 audit(1765914594.146:490): avc:  denied  { watch watch_reads } for  pid=9330 comm="syz.5.665" path="/proc/89/map_files" dev="proc" ino=25566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  305.493371][ T5185] Dev loop6: unable to read RDB block 1
[  305.499268][ T5185]  loop6: unable to read partition table
[  305.593766][ T5185] loop6: partition table beyond EOD, truncated
[  305.641810][ T9343] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  305.681148][   T90] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  305.809697][ T9352] FAULT_INJECTION: forcing a failure.
[  305.809697][ T9352] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  305.839378][ T9352] CPU: 0 UID: 0 PID: 9352 Comm: syz.5.668 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  305.839406][ T9352] Tainted: [L]=SOFTLOCKUP
[  305.839415][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  305.839425][ T9352] Call Trace:
[  305.839430][ T9352]  <TASK>
[  305.839436][ T9352]  dump_stack_lvl+0x16c/0x1f0
[  305.839461][ T9352]  should_fail_ex+0x512/0x640
[  305.839490][ T9352]  _copy_from_user+0x2e/0xd0
[  305.839515][ T9352]  kstrtouint_from_user+0xd6/0x1d0
[  305.839535][ T9352]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  305.839552][ T9352]  ? __lock_acquire+0x436/0x2890
[  305.839574][ T9352]  ? lock_acquire+0x179/0x330
[  305.839598][ T9352]  proc_fail_nth_write+0x83/0x220
[  305.839616][ T9352]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  305.839640][ T9352]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  305.839656][ T9352]  vfs_write+0x2a0/0x11d0
[  305.839678][ T9352]  ? __pfx___mutex_lock+0x10/0x10
[  305.839702][ T9352]  ? __pfx_vfs_write+0x10/0x10
[  305.839730][ T9352]  ? __fget_files+0x20e/0x3c0
[  305.839760][ T9352]  ksys_write+0x12a/0x250
[  305.839780][ T9352]  ? __pfx_ksys_write+0x10/0x10
[  305.839802][ T9352]  ? fdget+0x187/0x210
[  305.839827][ T9352]  do_syscall_64+0xcd/0xf80
[  305.839850][ T9352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.839867][ T9352] RIP: 0033:0x7f9e90f8e1ff
[  305.839881][ T9352] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  305.839897][ T9352] RSP: 002b:00007f9e91e36030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  305.839913][ T9352] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9e90f8e1ff
[  305.839924][ T9352] RDX: 0000000000000001 RSI: 00007f9e91e360a0 RDI: 0000000000000004
[  305.839934][ T9352] RBP: 00007f9e91e36090 R08: 0000000000000000 R09: 0000000000000000
[  305.839944][ T9352] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  305.839953][ T9352] R13: 00007f9e911e6128 R14: 00007f9e911e6090 R15: 00007ffc0eadaab8
[  305.839978][ T9352]  </TASK>
[  306.042551][   T90] usb 8-1: Using ep0 maxpacket: 8
[  306.049600][   T90] usb 8-1: unable to get BOS descriptor or descriptor too short
[  306.058551][   T90] usb 8-1: config 199 has an invalid interface number: 224 but max is 0
[  306.067003][   T90] usb 8-1: config 199 has no interface number 0
[  306.073320][   T90] usb 8-1: config 199 interface 224 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  306.084724][   T90] usb 8-1: config 199 interface 224 has no altsetting 0
[  306.099236][   T90] usb 8-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=92.83
[  306.108355][   T90] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.116457][   T90] usb 8-1: Product: syz
[  306.120620][   T90] usb 8-1: Manufacturer: syz
[  306.125279][   T90] usb 8-1: SerialNumber: syz
[  306.353140][   T90] lg-vl600 8-1:199.224: skipping garbage
[  306.370710][   T90] usb 8-1: bad CDC descriptors
[  306.390073][   T90] usb 8-1: USB disconnect, device number 14
[  306.471072][  T976] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  306.633121][  T976] usb 9-1: Using ep0 maxpacket: 8
[  306.666259][  T976] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  306.676354][  T976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.686659][  T976] usb 9-1: Product: syz
[  306.730089][  T976] usb 9-1: Manufacturer: syz
[  306.736830][  T976] usb 9-1: SerialNumber: syz
[  306.814109][  T976] usb 9-1: config 0 descriptor??
[  306.911012][ T6039] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  307.043178][  T976] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  307.071012][ T5954] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  307.102625][ T6039] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[  307.114627][ T6039] usb 6-1: config 1 has no interface number 0
[  307.125714][ T6039] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  307.139098][ T6039] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  307.150645][ T6039] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.169560][ T6039] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  307.179379][ T6039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.188828][ T6039] usb 6-1: Product: syz
[  307.194823][ T6039] usb 6-1: Manufacturer: syz
[  307.199500][ T6039] usb 6-1: SerialNumber: syz
[  307.251101][ T5954] usb 3-1: Using ep0 maxpacket: 16
[  307.256816][ T9382] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  307.384696][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  307.430749][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  307.470456][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  307.507844][ T5954] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  307.550500][ T9382] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  307.567632][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  307.629598][ T5954] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  307.650984][ T5886] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  307.678660][  T976] usb write operation failed. (-71)
[  307.697057][ T5954] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  307.710116][  T976] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  307.741939][ T5954] usb 3-1: Manufacturer: syz
[  307.764405][  T976] dvbdev: DVB: registering new adapter (Terratec H7)
[  307.776687][ T5954] usb 3-1: config 0 descriptor??
[  307.801511][  T976] usb 9-1: media controller created
[  307.827582][ T6039] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[  307.843995][ T5886] usb 8-1: Using ep0 maxpacket: 32
[  307.850401][  T976] usb read operation failed. (-71)
[  307.854642][ T5886] usb 8-1: config 0 has an invalid interface number: 136 but max is 0
[  307.864644][ T5886] usb 8-1: config 0 has no interface number 0
[  307.871414][ T5886] usb 8-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32
[  307.893750][  T976] usb write operation failed. (-71)
[  307.915301][ T5886] usb 8-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2
[  307.932198][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.972021][ T5886] usb 8-1: Product: syz
[  307.986815][ T5886] usb 8-1: Manufacturer: syz
[  307.993005][  T976] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  307.996727][ T5886] usb 8-1: SerialNumber: syz
[  308.018013][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.034713][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.050124][ T5886] usb 8-1: config 0 descriptor??
[  308.070618][ T9398] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[  308.079888][ T6039] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71
[  308.093992][ T5886] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  308.100275][  T976] usb 9-1: USB disconnect, device number 6
[  308.119178][ T6039] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71
[  308.163742][ T6039] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71
[  308.219095][ T6039] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71
[  308.278333][ T6039] usb 6-1: USB disconnect, device number 9
[  308.311391][ T5954] rc_core: IR keymap rc-hauppauge not found
[  308.320893][ T5954] Registered IR keymap rc-empty
[  308.327320][ T6039] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem
[  308.339165][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  308.441086][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  308.813393][ T5954] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  308.863952][ T6039] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  308.873912][   T30] audit: type=1400 audit(1765914597.576:491): avc:  denied  { read } for  pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  308.937285][ T5954] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22
[  309.057207][   T30] audit: type=1400 audit(1765914597.756:492): avc:  denied  { write } for  pid=9426 comm="syz.5.682" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  309.217985][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  309.656394][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  309.685149][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  309.722952][   T30] audit: type=1400 audit(1765914598.436:493): avc:  denied  { bind } for  pid=9435 comm="syz.5.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  309.773296][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  309.800685][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  309.852830][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  310.551270][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  310.581056][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  310.620981][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  310.660674][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  310.694423][ T5954] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  310.710698][ T5954] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  310.742900][ T5954] usb 3-1: USB disconnect, device number 11
[  310.776861][   T30] audit: type=1400 audit(1765914599.487:494): avc:  denied  { bind } for  pid=9453 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  310.811019][ T6039] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  311.134410][ T9457] netlink: 2 bytes leftover after parsing attributes in process `syz.2.688'.
[  311.150656][ T6039] usb 10-1: Using ep0 maxpacket: 8
[  311.158188][ T6039] usb 10-1: unable to get BOS descriptor or descriptor too short
[  311.166942][ T6039] usb 10-1: config 199 has an invalid interface number: 224 but max is 0
[  311.188505][ T5886] usb 8-1: USB disconnect, device number 15
[  311.200715][ T6039] usb 10-1: config 199 has no interface number 0
[  311.217785][ T6039] usb 10-1: config 199 interface 224 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  311.250496][ T6039] usb 10-1: config 199 interface 224 has no altsetting 0
[  311.284355][ T6039] usb 10-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=92.83
[  311.334136][ T6039] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.373856][ T6039] usb 10-1: Product: syz
[  311.394074][ T6039] usb 10-1: Manufacturer: syz
[  311.412682][ T6039] usb 10-1: SerialNumber: syz
[  312.121415][ T6039] lg-vl600 10-1:199.224: skipping garbage
[  312.136958][ T6039] usb 10-1: bad CDC descriptors
[  312.164150][ T6039] usb 10-1: USB disconnect, device number 3
[  312.204182][ T9479] nvme_fabrics: unknown parameter or missing value ' KÏ’' in ctrl creation request
[  312.830584][ T6039] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  314.680076][ T6039] usb 10-1: Using ep0 maxpacket: 16
[  314.707237][ T6039] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  314.722963][ T6039] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  314.747422][ T6039] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.788990][ T6039] usb 10-1: Product: syz
[  314.793955][ T6039] usb 10-1: Manufacturer: syz
[  314.808239][ T6039] usb 10-1: SerialNumber: syz
[  314.815273][ T6039] usb 10-1: config 0 descriptor??
[  314.827022][ T6039] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  314.859970][ T6039] em28xx 10-1:0.0: DVB interface 0 found: bulk
[  314.940492][ T9509] nvme_fabrics: unknown parameter or missing value ' KÏ’' in ctrl creation request
[  315.810683][ T6039] em28xx 10-1:0.0: chip ID is em2870
[  316.333213][ T6039] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  316.338271][ T9526] netlink: 'syz.7.701': attribute type 1 has an invalid length.
[  316.388054][ T6039] em28xx 10-1:0.0: board has no eeprom
[  316.396354][ T9526] bond1: entered promiscuous mode
[  316.417405][ T9526] 8021q: adding VLAN 0 to HW filter on device bond1
[  316.461926][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.7.701'.
[  316.489917][ T6039] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  316.497835][ T6039] em28xx 10-1:0.0: dvb set to bulk mode.
[  316.516215][ T9531] bond1: entered allmulticast mode
[  316.547047][   T30] audit: type=1400 audit(1765914605.247:495): avc:  denied  { ioctl } for  pid=9525 comm="syz.7.701" path="socket:[26114]" dev="sockfs" ino=26114 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  316.577107][   T48] em28xx 10-1:0.0: Binding DVB extension
[  316.598540][ T6039] usb 10-1: USB disconnect, device number 4
[  316.627314][ T9526] bond1: (slave bridge3): making interface the new active one
[  316.635643][ T6039] em28xx 10-1:0.0: Disconnecting em28xx
[  316.689032][ T9526] bridge3: entered promiscuous mode
[  316.716439][ T9526] bridge3: entered allmulticast mode
[  316.735966][   T48] em28xx 10-1:0.0: Registering input extension
[  316.747581][ T6039] em28xx 10-1:0.0: Closing input extension
[  316.757887][ T9526] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  316.788041][ T6039] em28xx 10-1:0.0: Freeing device
[  316.934852][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  316.941319][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  317.746066][ T9544] nvme_fabrics: unknown parameter or missing value ' KÏ’' in ctrl creation request
[  318.231696][ T9554] binder: Unknown parameter 'subj_user'
[  318.268969][ T9552] netlink: 'syz.8.706': attribute type 10 has an invalid length.
[  318.289328][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.7.707'.
[  318.444532][   T30] audit: type=1400 audit(1765914607.158:496): avc:  denied  { mount } for  pid=9559 comm="syz.9.708" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  318.636135][ T9572] nvme_fabrics: unknown parameter or missing value ' KÏ’' in ctrl creation request
[  318.672710][   T30] audit: type=1400 audit(1765914607.388:497): avc:  denied  { unmount } for  pid=8217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  318.868378][ T6039] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  319.111452][ T6039] usb 8-1: Using ep0 maxpacket: 32
[  319.144263][ T6039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.679405][ T6039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.699520][ T6039] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  319.719442][ T6039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.740823][ T6039] usb 8-1: config 0 descriptor??
[  319.770397][ T6039] hub 8-1:0.0: USB hub found
[  320.702785][ T6039] hub 8-1:0.0: 1 port detected
[  321.159144][   T30] audit: type=1400 audit(1765914609.838:498): avc:  denied  { read } for  pid=9567 comm="syz.7.709" path="socket:[26257]" dev="sockfs" ino=26257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  321.246363][ T9568] input: syz1 as /devices/virtual/input/input24
[  321.501849][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.9.716'.
[  321.578597][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.9.716'.
[  321.708482][ T6039] hub 8-1:0.0: activate --> -90
[  321.966614][ T5954] usb 8-1: USB disconnect, device number 16
[  321.976538][ T6039] hub 8-1:0.0: hub_ext_port_status failed (err = -71)
[  324.806776][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.723'.
[  324.820109][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.723'.
[  324.830478][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.723'.
[  324.950820][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.723'.
[  325.019027][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.723'.
[  325.066873][ T9660] FAULT_INJECTION: forcing a failure.
[  325.066873][ T9660] name failslab, interval 1, probability 0, space 0, times 0
[  325.153897][ T9660] CPU: 0 UID: 0 PID: 9660 Comm: syz.2.725 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  325.153916][ T9660] Tainted: [L]=SOFTLOCKUP
[  325.153919][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  325.153925][ T9660] Call Trace:
[  325.153929][ T9660]  <TASK>
[  325.153934][ T9660]  dump_stack_lvl+0x16c/0x1f0
[  325.153952][ T9660]  should_fail_ex+0x512/0x640
[  325.153968][ T9660]  ? fs_reclaim_acquire+0xae/0x150
[  325.153983][ T9660]  should_failslab+0xc2/0x120
[  325.153997][ T9660]  __kmalloc_noprof+0xeb/0x910
[  325.154014][ T9660]  ? tomoyo_encode2+0x100/0x3e0
[  325.154030][ T9660]  ? tomoyo_encode2+0x100/0x3e0
[  325.154043][ T9660]  tomoyo_encode2+0x100/0x3e0
[  325.154058][ T9660]  tomoyo_encode+0x29/0x50
[  325.154071][ T9660]  tomoyo_realpath_from_path+0x18f/0x6e0
[  325.154089][ T9660]  tomoyo_path_number_perm+0x245/0x580
[  325.154100][ T9660]  ? tomoyo_path_number_perm+0x237/0x580
[  325.154113][ T9660]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  325.154125][ T9660]  ? find_held_lock+0x2b/0x80
[  325.154153][ T9660]  ? find_held_lock+0x2b/0x80
[  325.154167][ T9660]  ? hook_file_ioctl_common+0x144/0x410
[  325.154186][ T9660]  ? __fget_files+0x20e/0x3c0
[  325.154204][ T9660]  security_file_ioctl+0x9b/0x240
[  325.154218][ T9660]  __x64_sys_ioctl+0xb7/0x210
[  325.154231][ T9660]  do_syscall_64+0xcd/0xf80
[  325.154246][ T9660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.154256][ T9660] RIP: 0033:0x7f521ab8f749
[  325.154270][ T9660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.154280][ T9660] RSP: 002b:00007f521ba5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  325.154290][ T9660] RAX: ffffffffffffffda RBX: 00007f521ade5fa0 RCX: 00007f521ab8f749
[  325.154296][ T9660] RDX: 0000000000000000 RSI: 0000000041045508 RDI: 0000000000000003
[  325.154302][ T9660] RBP: 00007f521ba5c090 R08: 0000000000000000 R09: 0000000000000000
[  325.154308][ T9660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.154314][ T9660] R13: 00007f521ade6038 R14: 00007f521ade5fa0 R15: 00007ffc0d1c9448
[  325.154327][ T9660]  </TASK>
[  325.154338][ T9660] ERROR: Out of memory at tomoyo_realpath_from_path.
[  325.672644][ T9666] 9p: Bad value for 'wfdno'
[  327.809150][ T5953] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  327.973205][ T5953] usb 8-1: Using ep0 maxpacket: 8
[  327.995163][ T5953] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  328.038507][ T5953] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  328.048278][ T5953] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  328.070298][ T5953] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  328.080594][ T5953] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  328.102673][ T5953] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  328.138669][ T5953] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.162741][ T9697] ªªªªªª: renamed from vlan0 (while UP)
[  328.310024][   T30] audit: type=1400 audit(1765914617.019:499): avc:  denied  { ioctl } for  pid=9700 comm="syz.5.733" path="socket:[26435]" dev="sockfs" ino=26435 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  328.427270][ T5953] usb 8-1: usb_control_msg returned -32
[  328.440076][ T5953] usbtmc 8-1:16.0: can't read capabilities
[  328.987981][ T6039] usb 8-1: USB disconnect, device number 17
[  330.759615][ T9733] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  332.413762][ T9754] netlink: 16 bytes leftover after parsing attributes in process `syz.8.741'.
[  332.883184][   T30] audit: type=1400 audit(1765914621.599:500): avc:  denied  { write } for  pid=9760 comm="syz.5.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  333.270910][   T30] audit: type=1400 audit(1765914621.649:501): avc:  denied  { getopt } for  pid=9762 comm="syz.8.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  334.019327][ T5927] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  334.208123][   T30] audit: type=1400 audit(1765914622.929:502): avc:  denied  { block_suspend } for  pid=9769 comm="syz.2.746" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  334.777784][ T5927] usb 6-1: Using ep0 maxpacket: 8
[  334.787042][ T5927] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  334.805278][ T5927] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  334.837557][ T5927] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  334.894622][ T5927] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  334.914280][ T5927] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  334.949997][ T5927] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  335.066978][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.192872][   T30] audit: type=1400 audit(1765914623.880:503): avc:  denied  { ioctl } for  pid=9780 comm="syz.2.748" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  335.521424][   T30] audit: type=1400 audit(1765914623.880:504): avc:  denied  { set_context_mgr } for  pid=9780 comm="syz.2.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  335.609506][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  335.770397][ T5927] usb 6-1: GET_CAPABILITIES returned 0
[  335.780104][ T5927] usbtmc 6-1:16.0: can't read capabilities
[  335.788052][   T24] usb 3-1: Using ep0 maxpacket: 32
[  335.796719][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.836888][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.872876][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  335.907494][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.948595][   T24] usb 3-1: config 0 descriptor??
[  335.999322][   T24] hub 3-1:0.0: USB hub found
[  336.164132][   T24] hub 3-1:0.0: 1 port detected
[  336.170033][ T5954] usb 6-1: USB disconnect, device number 10
[  336.710048][ T9795] netlink: 7 bytes leftover after parsing attributes in process `syz.8.752'.
[  336.879323][ T9798] netlink: 13 bytes leftover after parsing attributes in process `syz.8.753'.
[  337.757266][ T9808] netlink: 'syz.8.755': attribute type 4 has an invalid length.
[  337.765012][ T9808] netlink: 17 bytes leftover after parsing attributes in process `syz.8.755'.
[  338.621879][   T24] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[  338.690586][ T6022] usb 3-1: Failed to suspend device, error -71
[  339.629397][   T24] usb 3-1: USB disconnect, device number 12
[  339.753138][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.756'.
[  339.763246][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.756'.
[  340.368364][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.756'.
[  340.404167][   T30] audit: type=1400 audit(1765914629.120:505): avc:  denied  { write } for  pid=9831 comm="syz.7.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  340.615357][ T9834] Cannot find add_set index 0 as target
[  340.937080][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.756'.
[  340.986125][   T30] audit: type=1400 audit(1765914629.700:506): avc:  denied  { getopt } for  pid=9831 comm="syz.7.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  342.127540][ T5821] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  342.153347][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: kworker/u9:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  342.153382][ T5821] Tainted: [L]=SOFTLOCKUP
[  342.153388][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  342.153400][ T5821] Workqueue: hci4 hci_rx_work
[  342.153422][ T5821] Call Trace:
[  342.153428][ T5821]  <TASK>
[  342.153436][ T5821]  dump_stack_lvl+0x16c/0x1f0
[  342.153462][ T5821]  sysfs_warn_dup+0x7f/0xa0
[  342.153484][ T5821]  sysfs_create_dir_ns+0x24b/0x2b0
[  342.153506][ T5821]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  342.153525][ T5821]  ? find_held_lock+0x2b/0x80
[  342.153558][ T5821]  ? do_raw_spin_unlock+0x172/0x230
[  342.153584][ T5821]  kobject_add_internal+0x2c4/0x9d0
[  342.153610][ T5821]  kobject_add+0x16e/0x240
[  342.153634][ T5821]  ? __pfx_kobject_add+0x10/0x10
[  342.153661][ T5821]  ? kobject_put+0xaf/0x6f0
[  342.153682][ T5821]  ? _raw_spin_unlock+0x28/0x50
[  342.153709][ T5821]  device_add+0x288/0x1980
[  342.153728][ T5821]  ? __pfx_dev_set_name+0x10/0x10
[  342.153749][ T5821]  ? __pfx_device_add+0x10/0x10
[  342.153768][ T5821]  ? mgmt_send_event_skb+0x2fb/0x460
[  342.153795][ T5821]  hci_conn_add_sysfs+0x1a8/0x260
[  342.153818][ T5821]  le_conn_complete_evt+0x11ed/0x1fa0
[  342.153844][ T5821]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  342.153868][ T5821]  hci_le_conn_complete_evt+0x23c/0x3a0
[  342.153894][ T5821]  hci_le_meta_evt+0x357/0x610
[  342.153914][ T5821]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  342.153936][ T5821]  hci_event_packet+0x685/0x1210
[  342.153956][ T5821]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  342.153978][ T5821]  ? __pfx_hci_event_packet+0x10/0x10
[  342.153996][ T5821]  ? hci_sock_setsockopt+0xc0/0xb00
[  342.154016][ T5821]  ? kasan_check_range+0x15c/0x1b0
[  342.154050][ T5821]  hci_rx_work+0x2c9/0x1020
[  342.154074][ T5821]  process_one_work+0x9ba/0x1b20
[  342.154118][ T5821]  ? __pfx_process_one_work+0x10/0x10
[  342.154151][ T5821]  ? assign_work+0x1a0/0x250
[  342.154176][ T5821]  worker_thread+0x6c8/0xf10
[  342.154213][ T5821]  ? __pfx_worker_thread+0x10/0x10
[  342.154237][ T5821]  kthread+0x3c5/0x780
[  342.154263][ T5821]  ? __pfx_kthread+0x10/0x10
[  342.154287][ T5821]  ? rcu_is_watching+0x12/0xc0
[  342.154305][ T5821]  ? __pfx_kthread+0x10/0x10
[  342.154326][ T5821]  ret_from_fork+0x983/0xb10
[  342.154345][ T5821]  ? __pfx_ret_from_fork+0x10/0x10
[  342.154363][ T5821]  ? __switch_to+0x7af/0x10d0
[  342.154383][ T5821]  ? __pfx_kthread+0x10/0x10
[  342.154404][ T5821]  ret_from_fork_asm+0x1a/0x30
[  342.154444][ T5821]  </TASK>
[  342.415204][ T5821] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  342.429542][ T5821] Bluetooth: hci4: failed to register connection device
[  342.649140][   T30] audit: type=1400 audit(1765914631.370:507): avc:  denied  { ioctl } for  pid=9857 comm="syz.2.765" path="socket:[26614]" dev="sockfs" ino=26614 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  344.696547][   T30] audit: type=1400 audit(1765914633.411:508): avc:  denied  { watch } for  pid=9883 comm="syz.8.771" path="/49/file1" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  344.766551][   T30] audit: type=1400 audit(1765914633.441:509): avc:  denied  { watch_sb watch_reads } for  pid=9883 comm="syz.8.771" path="/49/file1" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  345.796801][  T791] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  345.913782][ T9913] netlink: 24 bytes leftover after parsing attributes in process `syz.9.775'.
[  346.027121][  T791] usb 8-1: Using ep0 maxpacket: 32
[  346.056256][  T791] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  346.096209][  T791] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.177008][  T791] usb 8-1: config 0 descriptor??
[  346.215041][  T791] as10x_usb: device has been detected
[  346.254713][  T791] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  346.316739][  T791] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  346.326560][ T5930] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  346.359463][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.9.777'.
[  346.401700][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.9.777'.
[  346.472550][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.9.777'.
[  346.484390][  T791] as10x_usb: error during firmware upload part1
[  346.517436][  T791] Registered device nBox DVB-T Dongle
[  346.526662][ T5930] usb 6-1: Using ep0 maxpacket: 16
[  346.542820][  T791] usb 8-1: USB disconnect, device number 18
[  346.579102][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.9.777'.
[  346.657399][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  346.689540][ T5930] usb 6-1: config 0 has no interfaces?
[  346.696527][  T791] Unregistered device nBox DVB-T Dongle
[  346.714163][ T5930] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  346.732219][  T791] as10x_usb: device has been disconnected
[  346.752881][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.766305][ T5930] usb 6-1: Product: syz
[  346.839907][ T5930] usb 6-1: Manufacturer: syz
[  346.853495][ T5930] usb 6-1: SerialNumber: syz
[  346.903312][ T5930] usb 6-1: config 0 descriptor??
[  348.526411][ T5830] Bluetooth: hci4: command 0x0406 tx timeout
[  349.006876][   T90] usb 6-1: USB disconnect, device number 11
[  349.166038][   T30] audit: type=1400 audit(1765914637.801:510): avc:  denied  { write } for  pid=9948 comm="syz.7.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  350.194573][ T9969] comedi comedi4: bad chanlist[0]=0x00000fff chan=4095 range length=2
[  350.236069][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.785'.
[  350.496996][   T90] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  350.717559][   T90] usb 8-1: Using ep0 maxpacket: 8
[  350.776707][   T90] usb 8-1: unable to get BOS descriptor or descriptor too short
[  350.855022][   T90] usb 8-1: config 199 has an invalid interface number: 224 but max is 0
[  350.915617][   T90] usb 8-1: config 199 has no interface number 0
[  350.927873][   T90] usb 8-1: config 199 interface 224 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  350.950508][   T90] usb 8-1: config 199 interface 224 has no altsetting 0
[  350.974004][   T90] usb 8-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=92.83
[  351.015729][   T90] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.023742][   T90] usb 8-1: Product: syz
[  351.053757][   T90] usb 8-1: Manufacturer: syz
[  351.065632][ T7802] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  351.073353][   T90] usb 8-1: SerialNumber: syz
[  351.190814][ T9999] autofs: Unknown parameter '0x0000000000000000'
[  351.353595][   T90] lg-vl600 8-1:199.224: skipping garbage
[  351.409826][   T90] usb 8-1: bad CDC descriptors
[  351.423098][ T7802] usb 3-1: config 0 has no interfaces?
[  351.437926][ T7802] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  351.455714][ T7802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.464764][   T90] usb 8-1: USB disconnect, device number 19
[  351.473190][ T7802] usb 3-1: config 0 descriptor??
[  351.787645][ T9988] openvswitch: netlink: VXLAN extension 30 out of range max 1
[  351.808265][   T90] usb 3-1: USB disconnect, device number 13
[  352.695612][  T976] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  352.866312][  T976] usb 8-1: no configurations
[  352.870937][  T976] usb 8-1: can't read configurations, error -22
[  353.505510][  T976] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  353.703069][  T976] usb 8-1: no configurations
[  353.753612][  T976] usb 8-1: can't read configurations, error -22
[  353.894251][T10065] autofs: Unknown parameter '0x0000000000000000'
[  353.907697][  T976] usb usb8-port1: attempt power cycle
[  353.917501][   T52] Bluetooth: hci4: unexpected event 0x3e length: 262 > 260
[  353.917558][   T52] Bluetooth: hci4: unexpected subevent 0x0d length: 261 > 260
[  353.968491][T10066] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  354.740407][  T976] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  354.820646][  T976] usb 8-1: no configurations
[  354.832845][  T976] usb 8-1: can't read configurations, error -22
[  354.873627][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  354.873662][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  354.899802][T10084] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  354.905305][   T30] audit: type=1400 audit(1765914643.612:511): avc:  denied  { ioctl } for  pid=10079 comm="syz.8.807" path="socket:[28821]" dev="sockfs" ino=28821 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  355.075144][  T976] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  355.162909][  T976] usb 8-1: no configurations
[  355.185006][  T976] usb 8-1: can't read configurations, error -22
[  355.206412][  T976] usb usb8-port1: unable to enumerate USB device
[  460.692462][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  460.699426][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P10075/1:b..l
[  460.707798][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=34461, q=449 ncpus=2)
[  460.715487][    C0] task:syz.9.805       state:R  running task     stack:26440 pid:10075 tgid:10071 ppid:8217   task_flags:0x400040 flags:0x00080002
[  460.729585][    C0] Call Trace:
[  460.732870][    C0]  <TASK>
[  460.735777][    C0]  ? __schedule+0x10b9/0x6150
[  460.740429][    C0]  __schedule+0x1139/0x6150
[  460.744907][    C0]  ? find_held_lock+0x2b/0x80
[  460.749565][    C0]  ? __pfx___schedule+0x10/0x10
[  460.754387][    C0]  ? mark_held_locks+0x49/0x80
[  460.759131][    C0]  preempt_schedule_irq+0x51/0x90
[  460.764138][    C0]  irqentry_exit+0x1d8/0x8c0
[  460.768703][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  460.774661][    C0] RIP: 0010:lock_is_held_type+0x107/0x150
[  460.780364][    C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 5c f0 3a 08 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 87 2c 03 00 45 31 ed eb
[  460.799944][    C0] RSP: 0018:ffffc9000b89f828 EFLAGS: 00000286
[  460.806001][    C0] RAX: 0000000000000046 RBX: ffff88805a59b018 RCX: 0000000000000001
[  460.813957][    C0] RDX: 0000000000000000 RSI: ffffffff8daa7ad1 RDI: ffffffff8bf2b380
[  460.821899][    C0] RBP: ffffffff8e428008 R08: 0000000000000005 R09: 0000000000000000
[  460.830109][    C0] R10: 0000000000000001 R11: ffff88805a59aff0 R12: ffff88805a59a4c0
[  460.838050][    C0] R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000002
[  460.846010][    C0]  task_css.constprop.0+0x7b/0x130
[  460.851097][    C0]  count_memcg_events_mm.constprop.0+0xae/0x2a0
[  460.857311][    C0]  handle_mm_fault+0x5f9/0xad0
[  460.862051][    C0]  do_user_addr_fault+0x7a6/0x1370
[  460.867147][    C0]  ? rcu_is_watching+0x12/0xc0
[  460.871879][    C0]  exc_page_fault+0x64/0xc0
[  460.876357][    C0]  asm_exc_page_fault+0x26/0x30
[  460.881175][    C0] RIP: 0010:rep_movs_alternative+0x30/0x90
[  460.886957][    C0] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  460.906541][    C0] RSP: 0018:ffffc9000b89fa48 EFLAGS: 00050206
[  460.912578][    C0] RAX: 0000000000000001 RBX: 000020000038c000 RCX: 0000000000000038
[  460.920522][    C0] RDX: fffff52001713f5a RSI: 000020000038c000 RDI: ffffc9000b89fa98
[  460.928476][    C0] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff52001713f59
[  460.936425][    C0] R10: ffffc9000b89facf R11: ffff88805a59aff0 R12: 0000000000000000
[  460.944386][    C0] R13: ffffc9000b89fa98 R14: ffffc9000b89fb80 R15: ffffc9000b89fa98
[  460.952344][    C0]  _copy_from_user+0x98/0xd0
[  460.956912][    C0]  copy_msghdr_from_user+0x98/0x160
[  460.962083][    C0]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  460.967874][    C0]  ___sys_recvmsg+0xdb/0x1a0
[  460.972441][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  460.977621][    C0]  ? __pfx___might_resched+0x10/0x10
[  460.982889][    C0]  do_recvmmsg+0x2fe/0x750
[  460.987276][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  460.992200][    C0]  ? find_held_lock+0x2b/0x80
[  460.996853][    C0]  __x64_sys_recvmmsg+0x22a/0x280
[  461.001850][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  461.007368][    C0]  do_syscall_64+0xcd/0xf80
[  461.011847][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.017710][    C0] RIP: 0033:0x7fc11c98f749
[  461.022092][    C0] RSP: 002b:00007fc11d849038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  461.030471][    C0] RAX: ffffffffffffffda RBX: 00007fc11cbe6090 RCX: 00007fc11c98f749
[  461.038587][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006
[  461.046527][    C0] RBP: 00007fc11ca13f91 R08: 0000000000000000 R09: 0000000000000000
[  461.054468][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  461.062412][    C0] R13: 00007fc11cbe6128 R14: 00007fc11cbe6090 R15: 00007ffc3d5b2c08
[  461.070383][    C0]  </TASK>
[  461.073378][    C0] rcu: rcu_preempt kthread starved for 10537 jiffies! g34461 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  461.084536][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  461.094487][    C0] rcu: RCU grace-period kthread stack dump:
[  461.100351][    C0] task:rcu_preempt     state:R  running task     stack:28968 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  461.113817][    C0] Call Trace:
[  461.117070][    C0]  <TASK>
[  461.119985][    C0]  ? __schedule+0x10b9/0x6150
[  461.124635][    C0]  __schedule+0x1139/0x6150
[  461.129125][    C0]  ? __pfx___schedule+0x10/0x10
[  461.133955][    C0]  ? find_held_lock+0x2b/0x80
[  461.138626][    C0]  ? schedule+0x2d7/0x3a0
[  461.142936][    C0]  schedule+0xe7/0x3a0
[  461.146981][    C0]  schedule_timeout+0x123/0x290
[  461.151803][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  461.157144][    C0]  ? __pfx_process_timeout+0x10/0x10
[  461.162405][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  461.168190][    C0]  ? prepare_to_swait_event+0xf5/0x480
[  461.173626][    C0]  rcu_gp_fqs_loop+0x1ea/0xaf0
[  461.178368][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  461.183626][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  461.188795][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  461.193704][    C0]  ? rcu_gp_cleanup+0x7c1/0xe90
[  461.198528][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  461.204316][    C0]  rcu_gp_kthread+0x26d/0x380
[  461.208978][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  461.214148][    C0]  ? rcu_is_watching+0x12/0xc0
[  461.218893][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  461.224115][    C0]  ? __kthread_parkme+0x19e/0x250
[  461.229110][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  461.234278][    C0]  kthread+0x3c5/0x780
[  461.238318][    C0]  ? __pfx_kthread+0x10/0x10
[  461.242891][    C0]  ? rcu_is_watching+0x12/0xc0
[  461.247635][    C0]  ? __pfx_kthread+0x10/0x10
[  461.252195][    C0]  ret_from_fork+0x983/0xb10
[  461.256759][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  461.262013][    C0]  ? __switch_to+0x7af/0x10d0
[  461.266663][    C0]  ? __pfx_kthread+0x10/0x10
[  461.271230][    C0]  ret_from_fork_asm+0x1a/0x30
[  461.275975][    C0]  </TASK>
[  461.278965][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  461.285256][    C0] Sending NMI from CPU 0 to CPUs 1:
[  461.290527][    C1] NMI backtrace for cpu 1
[  461.290539][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  461.290555][    C1] Tainted: [L]=SOFTLOCKUP
[  461.290559][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  461.290566][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  461.290582][    C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  461.290593][    C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6
[  461.290604][    C1] RAX: 0000000001326161 RBX: 0000000000000001 RCX: ffffffff8b7806d9
[  461.290612][    C1] RDX: 0000000000000000 RSI: ffffffff8dacdb69 RDI: ffffffff8bf2b380
[  461.290620][    C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d
[  461.290628][    C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001
[  461.290636][    C1] R13: ffff88801dab24c0 R14: ffffffff9088afd0 R15: 0000000000000000
[  461.290644][    C1] FS:  0000000000000000(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000
[  461.290658][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  461.290666][    C1] CR2: 00007f9e90f733e0 CR3: 000000007c5d4000 CR4: 00000000003526f0
[  461.290674][    C1] Call Trace:
[  461.290678][    C1]  <TASK>
[  461.290682][    C1]  default_idle+0x13/0x20
[  461.290699][    C1]  default_idle_call+0x6c/0xb0
[  461.290714][    C1]  do_idle+0x38d/0x510
[  461.290733][    C1]  ? __pfx_do_idle+0x10/0x10
[  461.290753][    C1]  cpu_startup_entry+0x4f/0x60
[  461.290770][    C1]  start_secondary+0x21d/0x2d0
[  461.290782][    C1]  ? __pfx_start_secondary+0x10/0x10
[  461.290796][    C1]  common_startup_64+0x13e/0x148
[  461.290816][    C1]  </TASK>