last executing test programs: 3m1.620366173s ago: executing program 2 (id=511): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) 3m1.497865711s ago: executing program 2 (id=514): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="6d6b024e956541e50c83cb6309e20cb3573ee15b11dbab6bdbf477f7bbc24174ce43ac90c2d5c1aaa41dae8fecb1efa77ca075e03d7672bbf74ab2057c0702874d5f8984832f62ebb773d8e61054105b2da967f9188c4f3b93805ff09a5af9d44e6bb6a2c9b044dcaf51c230148c0be36088a50a440886ede222e4d62d060b5fb18f3d9e7a5f62daae43eb9e8e2c584080ba307ae96b952779d7cec55217312bbfa649cd739f3b489d61df62cabe938a0784bd7a20913828f635418ecfdaa169", 0xc0}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000019400)=ANY=[@ANYBLOB="12011001000000206a059a0000000000000109022400010000000f09040002020300040009210000000022023009058103"], 0x0) 3m0.179148724s ago: executing program 2 (id=519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x0, 0x70bd28, 0x25dfdbff, {0x2, 0x20, 0x80, 0x2d, 0xfe, 0x2, 0xc8, 0x9, 0x2c00}, [@RTA_GATEWAY={0x8, 0x5, @multicast1}]}, 0x24}}, 0x20000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3efc000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd6b}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x23ca}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000300)) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x890}, 0x40010) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfd}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x4088) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000640)={0x0, 'veth1_to_team\x00', {0x1}, 0x5}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xfc, r6, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000880)={@private2, 0x9, 0x2, 0x1, 0xd, 0x1, 0x40}, 0x20) syz_open_dev$dri(&(0x7f00000008c0), 0x8, 0x600000) (async) r8 = syz_open_dev$dri(&(0x7f0000000900), 0x3, 0x400000) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r9, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10040004}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0xd08, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) preadv(r3, &(0x7f0000001ec0)=[{&(0x7f0000000a80)=""/79, 0x4f}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/25, 0x19}, {&(0x7f0000000b80)=""/254, 0xfe}, {&(0x7f0000000c80)=""/6, 0x6}, {&(0x7f0000000cc0)=""/51, 0x33}, {&(0x7f0000000d00)=""/195, 0xc3}, {&(0x7f0000000e00)=""/165, 0xa5}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x9, 0x3ff, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x40, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c1}, 0x6004000) (async) fcntl$addseals(r10, 0x409, 0x2) (async) ioctl$KVM_CAP_STEAL_TIME(r9, 0x4068aea3, &(0x7f0000002080)) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000002700)={0x7, &(0x7f0000002600)=[{0xa91a, 0xc3, &(0x7f0000002100)="78498f51880a1c6454d616dcc753a7feda4159b052a9fd620668ca8a85f71c771faaeeb4ca55c35996b928bf2ada7ef821f0969ca708e5bfcaba06c6573639bd70f94e0b8c273b804030e9a240870ce88451b2eac986a7fa0e3ef5ee78a2102ef6ce8bace5bdb12675b880cd051b4801265dd9bfd3401086ed0e4a7d92a8b51eaa9b1f6051982ed68a14e53f8fe08c8d13c07727659957655ce771f689c9515d5aa3985ade8979a284899fb889485e1d0642c50ed3d621fae8f19e4b0abd165dca3669"}, {0x8, 0xc5, &(0x7f0000002200)="0bd8de33f1009db7fece8c19af7f2a53556e952922bcee4cbfd7253e20e4072739037749e65ab812b81e84143d4835853247dafbc99d5b86714a6cc759c5e2169aabef2fa9ca7bbf41cfcd6ff87b42e59fa78ce21a91556fc75d8f606d3533efd95ea8af81805397f59ce2c19ccfabf8b080e4a4b0b3e829aef1545b5bfc78e7b916847c5a28b183e166778e2402686dabddb2bfe3c5a7c1ba9f98977d8c30a3277d937d30ad2d402b6b6e1ea6b400d5e1eb08f3213e2233f8c569288acec1e38ff0cf47e5", 0x0, 0x1}, {0x2, 0x7f, &(0x7f0000002300)="da9863aa87774a83fd4df61d544affb84ea5dc8be5f87674662a7a96e56b044a695f7f2df2f2c4cd6975c3605ef06b05faf46ed74c9a4cfb504f1b358f7d7c3ae41e13118ce041903c9e47a0c885c8bf4bc77eda05be4065eee326aa6d9ac566c2d89717f294ddb0a8afbc2a5d11f826a302a058ce5a7fbbad17667a95d749", 0x1}, {0x8, 0xa0, &(0x7f0000002380)="93336db64cfa24a00e0e7accd57677d5519d9af84f723f9b47c4028ec637a743ac3ef2cc6a827abbbc4a1fd34507384120a0e0aefec85fa8ba1f8cff43c11efd87b021e92d724b3f97b50f9c361e58f1d357d6c66656ff5545ec16c8a4967188f3eeb2ebf828f94ffca2e6fac810ef1b170ac72521d9a103f079137c2d037ebd4df279e9d65999ff195ab2f31c82c93a07b0dec45e5c58eb13bf758c885355b9", 0x539f2f14ad8ef591}, {0x5, 0xaf, &(0x7f0000002440)="8899db85095416db7bd988640f925df516d49f4005850716aa92ed9642dffba60f4161cf511d938e079f83f425ebb94071e760aac93562fd51f40e73e62635531ef517a491ae4140228f9b8edc7153740b3b2d41a77e005ffac8997824bff13bc9b5ef5c030bd249de2ef381f40f7aee1f37f8530a0890c3b0850c3713f97e823f76dc4e53dbcce782150f01eae0b32871ca6b5b6d3f972d17b39acfe4e368aae0a1417759f5cfdb9f04ea428c0f7d", 0x0, 0x1}, {0x4, 0x54, &(0x7f0000002500)="17562da4a29b15a71a4eaa579f5ee281267397723379a9023f1991147b7ce9d9e1317c31b721aa91f8319796e6e29644ff5db7385d0b0489c8c709ba7475626a3e5eadce52f38b678e14ae2548adf7a0d490f76e"}, {0x80000001, 0x6c, &(0x7f0000002580)="03eb8cfc5199a7e0e4b4972afa5e5ee73e5b361509026dcafd8b0b57bd8adb47e0d8bc2827caba6ad1d34516a15818ea857cde498e3c73deb6c46ceecfaeef594052345e42ef3666e119ec44b9fb157d6d3708ca12afcd12192c61a93f55e2108f6afd9c6e745834c962710a"}]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000002740)={0x81, 0x1, 0x5}) (async) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002780), 0x111000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f00000027c0)=0xf7) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000002c40)={&(0x7f0000002800), 0xc, &(0x7f0000002c00)={&(0x7f0000002b00)={0xc8, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x40) 3m0.011563359s ago: executing program 2 (id=522): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r0 = socket(0x2, 0x80805, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000080)='cgroup\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) mprotect(&(0x7f00008da000/0x2000)=nil, 0x2000, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000002740)=@vmx={0x4, 0x0, 0x2080, {0xb000, 0x10000, {0x1}, 0x1, 0x81c}, {"ddc9f13bf4e99507340b331781d43e84680a79d21a788c7973bff200eb85b5715f5c169e50983a8f3e43339c6d5a47a82e50303b18e9b08be66a42f7f8861558bf96750d39e46f3a8d48fe85fec7cd77f60971959c9fee3b37e9a46e71e1047ef02b881f8ff9f505ca955c940824b661284cc6ff0dfb9f8e42cda78df96dcba80ec348fea4a7cef37c83dac807bd7babd9d4c3daf8fe8e1722ec669e89ed9bb564016be6f4721b9fdf2d76c06a8fd03da2c66273f02748d9f135d07cc2a4fb6a90dad66806c02adcf5881472377dc1ef18caa4cd44542c3a1264e0b4df7c35864868ac7c90288b2b9f890b20851d7321eba12a580248a1b6b0eebdf56774a8aca87ff0e7892a06ca23596e7e4ea8581e39b16047978f35636a3e75a17c47e7ffccce9d624b324e3ad52808c8439d4717b2f827dff623adc933574ba60df4ae7d3edbede4cecef77e43f9f295e12a8e267ef23114439ff562885c83f67d20ef849c2524881a0181a48594e5b9047b7cc899f38be3c186127a87e7eec2f5319a6f1d4f273e19b9468970dd8f5ac9658d379d7000722fcfcefd9739c7483b836721963f4cbc0b2faab6fc8c0cf0710209037621314c03c93f1dcf4ca39f15deb7e6ccffb5ad4921c71d0b5c3d8fbb998ba68bb27e36ac4285c50c30261b8ed7e1fe331bf464bda58bba9e8420bcd5dfa317a2c44f7e42f9d78f9855b20f9c632c7b9481bf384056f48510af0dd98ef1c950ab0bda7f8b0c9fb8340c165ee8d1d20bc0986bdb4614acd156ab8dd4c9a837f1e4eaf98b355533dd625d06e4e88d649e59441711e8cfc712a2a43baf06598e760328bed823c37a1703c3c83b7298706bf06f2e26fed9a72a6dbc7304cabca5578f16f83e00a67af5637895d03eb9eddb25af91db7bfc1650bebb845c1c3cd9c9bf4d8b3f28ca452cf3b2d587e1dfbd4dce137e3a579f095b4695bec50f09fa5d2a08d4e85cf96be19fa0fa7dd17681f92efe40c145f9cf09b32be0abc3cc3fe03292fec3a8e9b009eab2e937fc8741996ad3b122dd7b350149e6f82dd90a83bbd2f6f5ec624cbdaea60522aaaa709408180dab43f05e98b6bc0e151d9f6da0ce42f6f5b0608830e5bae02bcf7d8a5c592a8274e13fb5e89540497f4ddbaac1ebd56566af2f734fbf3537606d51ff2f805a906789b4c081d3666e7e8c015bae503f849d1a598a8678005f99a223af0537f5f3104702298d9e70714217e3cbb6aa1d50b7c6b5343c1168e35def4bb1bb71262c7843714fe1501e6c40d86e85d09fd34c8f87ff29c54aa809619151cbba18a5ac31590e20498826e648b6b26f053b3f0027c2d94c0291b7c98b3be6fe8e97834f91eeeade9ef0768559fff84e3e1aecbae10248587357f0a1eed6dd5e3b5c2f5ad1187cee7220e77a0db39c89bfdf0a6b46e1f1ac78cc3a102e34b0402b1afa1eb3011c0c02b93ab2f694adb3740a2a4a59ae0d2f7b670360ad2afb56536ccef7a33fd227a63b41f86fe7680830e70ca8b92123c47bf5c566640e25bca8f407c9c92455bb2dee4355f4354cf416d244a90eaa838b501928197e1bef2dd743d2ffbcdd714e0f96270d382894edffb142d0739c54a1e1c1aa86d02ae8b6d67743882bfddb620593bcf6b7269883a3a05c1fb8ae99a52d43ae24502866d2242ae4eb5d7857c73b67eee3b968eae041bd416485551c89374c4bef22bb4e23dbf5aa6e27269b81766f4d2bce55f88b561dad7b8e929564d302690b5698b8e62964ca7d965dfe5ea9311274fe0b12b727fbaaba99fae2c21b66d3bd02ee9259d68ef289a59e81fa08bf62f9d63d3eaa9e5522cf070ffb87eea259352fc70a2fada2096a0b9fa8dd392e93e40c71f73b3686ffccbb4b28823190ee2b2f6b6faaa29bbbbeca969c58c6c4dbbe943e18a8787bebfcb52c701269d4f466009ea6e1fd2edff0edff081b420c283e371d8890fc1939c7af1d66a134ca7653ddb6b2f0472934b7b1b3513d37220a29d4abd4aaa2acdca9385b712a213aca1d640825c703fe30c4a96c6f1a7894b12cb05284152363ae8105b703dd403cc78886dd18f01737b152ac877ea927a7be8d06068605cdf8466235dd5ad892df52ab1b1a07b4fd7c4a26bfffe176b5f16ea9e4c51d8985fdb059059586c4a8513a740650d6cdcfcda8dc14a81b2c4a424d1c73b45e9894168f1a4b7fea838bc089ed35bc3bcd4122a5b4bdf1ed99786428b334281549499a5deb6c54f81b3429d082bbe9d0339766e1d1e4383a9ba3180bfcdeccf42e8aad0601a0bc43152501d409f2447f43c2729a9efed13873cba487eafaad521aec2778399ffa2e8383466dd6693373dcfdca11dc0781450cdd75c3e53a46bfe3d754d2edd8d478cd32fc896f37f9687d9ea975a6ce8d169f196590be53b0fd3b9948a73f6e2cf8bf33a1ad2f47a0805b58f5626b5e76061273674affb01aca17a1590824ee0029606bd22e8eb8efbc5d7d10817260103f5f6b4fd60ad1b39dab545a9c03d458a40eba6316bed24b9841b369e90ed25c5cc22b9635f4ddf130188b11312d313032527896316fd8c2d7398e3f85b640e70061f3d9eb57432d4892ebef9d33465356c09ce1707f4bec0e3fad1418f3486bb2a24d469ecf8dcea1f72e42207bccc7fa560277d50dea7026cbbd7c36ac9f21b64bd588faab4631ee1e99e541a1adf959261625d9b7b105dc00bdf59284d947d767b2172a7947606eaa63fc97cc283004779dcca1f350a9f0617e93129c84752d3e910dba1dae50a2e0f889a62bd23fa080730dcb915df991fb6a7938953e76483bcc5ce0e54cd0307c7592bd1289c5183addeabb27b6630a1141d511b9d7403d608276fc023a8d995e0959bab9cdd13b619a366c3a13f77aa1a9851e456f43731da36c90c6115661bba562ebefc6d5399cfef31ebcd1f5e147503c63ddb4b0da59fa372438755fc7a532d4a1ba939bbf9340458406724be1460e36155d3227c90bb10a8b55446976943d5e6e1d88cf2f5af388bba51f639b71c4d71e3423e7f345984f9449c14808bae24c96822b8aa4420b5e762f6882fe30403e99ff939a93d18b3fd80de0c74f269a1be0fed8d2620c918299e6631793061044ce7b0463cba790a8c87fbf45d87b0f8594b259c78a533f6616ad612e9365539327a4fd0ab26b25fbf7c63eaf147d23e2b3d88f6dfacb8139324919c0ac2d47866fc494cfd1f6b0a0cff56d7547e26613c2e98e4f0d6f5d0be634fca20b38087f008947e47055c72bf4bfea113214ea51c48c726802a6bf509bd86691b2bab008ce4965cce7ad0448f2cfd69c0d82a1586051ddde10462c28c5dd2832bc45b5b34601cbd3fb2be2175056ba10f636a0ab39e9b5d736836fc7c95da0ddab2afe266c4079e5915af1297c98964f7c2682f604506555396bdbcabf6c0c998196fa6702d7692ceb971cf7b6b95db015e91fde72e053ea5b2fb2fbbf23faee07fc3ab20e29698b74af53305226b4040fc24831bf9a43ffb9cd1f66b6b3f0e51195f7453234d40f1260db3a115dde504c2d4b9535d49e5631c990feb2a9cc1bb0d273b5678c1f67d5ace2acb27aaa876a0f2adf5397f499466fc25193209f5ed7c67578b0465fbc8e9e7c182994849f8303c2aeaad2c8e765e46293bc52b97c0d9c8d23e60302baa3ce039f36e8a8970e274c6d1b570e7e06c597bf6fa933e1ae4e58b21238911a3f93bc282bff6ac291c69e706c14d3063595614e51644d34b1a0bbbef0a92c28f4d9efff8edab40198508de9153215b3828f4e10e54d8e7897cc63e5d3b9003faf33a3000335ccd43eb36b9c22967229bf2cdda1fe28043ff6241f343ba4071cf60d3a3d50048d7183445ba8cf97f998e568370ed6718a4f75d4996765e2813644521db3af77fbf8a0f3e18ec85ebe78521dbe516979e0dd808c6be595c96f3228bc09680c92711b424aed54b33f5f8273672f7c9215923e8e7b53f85b58fac041d6188bd0526678d9e64b0a2b090dea0fcd0593c68ac31704d697e953a8dd7b528adf5a59fb01cdfa307f40fb7670fd86250735e84fa954c556adbb32b026e075b66567b5dd1e7ac414621b9ca0879f8a9c9fa25c28a275fa99459ff9b3f8435bfcc1560e3c7580499bf1804a63112ecfb32a8bd7f56c66bc48595b337bfefd6086d840e0bcea9bfb3825c437b0971085db5c68dd2c678819f467b19ded6a6d54a2432ef7b838fb7596cf591ef17b3ea065d5049bf1e1389b826ac7e9497d8af3d791b4a76cc10776f8ca9db7cb38bba2201ddc20bb117d8f9a5ae466318aaa106e14750bc62af5c7a06bddc5e8b3ca62dab8c88c078178187cfdfc7d1dcad332c69781a2461aa100d6ac12939e57b48d603cce3ec138770dd12c7e3fff19204aeb0817f1a4db0f44506bccbef2fe0f44e38991032516b1a06de5e6cd1bdd46a969d1baaf93d71463ef35015326496d4f3707f987553cf5413a8c1262fb5d163e07b5c837e0c72679bd48f071c19a5e27be907da8c7b8831dd6bfd8834d1db5fdd25261747f8c7a8e08b674b342f905c2f84648ea149e98ea53eb37fcc8cbd6a44204886848eef84eb865d4c670f49f03b6f0959245edea9b3155bf024a1a7018906563de4ff37989286b80fafefcff1a41e8770235e458d4d9dd9e57b70be7ee45212011ec8f4f31fa367c7ad95b4ad7ee0f129e10052119e7d5a682cd05aad79c1809cc197804bd7325cd9376b5b03b69d46ef22d9690769a3e12f514d59b06ab14ec463ab9d86aef60f4dcfd786b3d093d7190d2825b9cb03501952e2427cc4e4c9623754158fc8ec199262c9d50add8e564d041d1658fb7e890594de68a4367c3d84ceecd16dc8c45b81b70e66de4439b7b53faf8ccfc10a79b984e3cede90718e979aa95b3b39c17ba4ef34aa3da05083bb01ed452d03cc3e825da236ebb285ffc25088e62ac4c6e87d88467557343e582050000000000005e87beb44f9cc40dfed108c536868db1a0221379ea23421c3c594ab6afc2e2849ffbf9fb5d85f282c833ecd1df90f99e154eefc890c34baefe4c7975a94498acd46ae447afec1a1c06cbd70b7bb7e840f398fe0ca510aca0b3faae5201a988cd1e7cdab4340d884138f5dd2ecf77bc248734a757b84973c5d3c62667a889d9527e4938bbc849fc078efbe949f886028416d99da5ee59d5f98a3fb6f0ffcf17455988abeae3d23c3bca7b2fb00274eb7f3602998465dbe7080b84b835903058ec5a8c202e0a3d1c68dd658d975d81d072981c0f8f5c35219883e4d52b3af40cacbfb7ce88323741053d160f6e4773a6c321e65262fecf9c395ed183359aa55c280b1c42773137a6da84c820221ddc0e2c42b6c68a8be20c456534ee40c977bc76a491bce6c444b7785737e2f4febe55cc3a6cdcd184bb337b319ade1ac66cd3c8d416473b72c461a96c72455e844a66ddb0af4bb8c1a6ac0da8423db26e243675107f03ee27db3df2a8350d13101beb704420b1bf0c09e766df8fade815bebddd44992037a7e943aa424da081b17f77e8651d593edce231d1ae11c8eef3d0221a8ee3f316a9abccfbc71eb66ca13b39ecb34cb5417a5a6c7b4dc090044c081f006b7c3c535dd0ca48fde78231a0ce39965deb5fa28aa6ee51697294b2be29cf1d08bc9150e859c3e232a911737ce7ccf11190f9a0eec1ef2a969664f6f98ada6a9c6ed42078da5ce2f27a416aa27ee9f8a35f173b442d484d761c175d1006e32616bb615b3d3f7f2300b42839e3a47cc4b255af903895807b617c00", "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"}}) close(0x3) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x100b7c, 0x0, 0x0, 0x807, 0x0, 0x0, 0x0, 0x118, 0xfffffffe}}, 0x50) read$FUSE(r6, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r9}, 0x10) syz_fuse_handle_req(r6, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0xffffffff, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x6000, 0x1, r10, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r7, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$setsig(0x4203, r11, 0x0, 0x0) 2m59.713017228s ago: executing program 2 (id=524): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) 2m59.099503721s ago: executing program 2 (id=529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x3, 0x0, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r9 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595d, 0x1000, 0x1fffe, 0x158, 0x0, r8}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r13, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r14, r15, 0x60000000000, 0x0) sendto$packet(r1, &(0x7f00000002c0)="05031612d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m58.606197331s ago: executing program 32 (id=529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x3, 0x0, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r9 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595d, 0x1000, 0x1fffe, 0x158, 0x0, r8}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r13, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r14, r15, 0x60000000000, 0x0) sendto$packet(r1, &(0x7f00000002c0)="05031612d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m29.903353517s ago: executing program 4 (id=980): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) r2 = syz_io_uring_setup(0x7144, &(0x7f0000000380)={0x0, 0xf622, 0x2000, 0x2, 0x1c8, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb01, 0x0, 0x2, 0x158, 0x0, r2}, &(0x7f0000000100)=0x0, 0x0, 0x0) syz_ublk_add_dev(r3, r4, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x5, 0xa, 0x4c, 0x10000}, {0x6, 0x6, 0x8, 0x3de}]}) r6 = dup(r5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_ublk_setup_queues(r6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) fcntl$lock(r7, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) r8 = socket$packet(0x11, 0x3, 0x300) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x6002}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000180)={0xc02e170c58ffac5b, 0x9, [@link_local, @empty, @remote, @remote, @remote, @remote, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @broadcast]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b40000005908060001080006"], 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r10, &(0x7f0000000080), 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r10) r11 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r11, 0x0) landlock_restrict_self(r11, 0x0) landlock_restrict_self(r11, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r12 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r11, 0x0) landlock_restrict_self(r12, 0x9) 1m29.696447276s ago: executing program 4 (id=981): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x1000000000000000, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x2fd, 0xea94, 0x6, 0xa, 0x4, 0xc091}, [@TCA_NETEM_RATE={0x14, 0x6, {0x200, 0x5b, 0x0, 0xfa}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc074b6db8bfb5ea7}]}}}]}, 0x6c}}, 0x40844) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000280)) landlock_restrict_self(r3, 0xa) 1m28.955966196s ago: executing program 4 (id=987): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) syz_usb_connect$uac3(0x5, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902", @ANYBLOB="38a788"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r3 = socket(0x2, 0x3, 0x100000001) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) ioctl$TIOCSBRK(r4, 0x5427) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x400) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000240)={r1, &(0x7f0000000080)='%\x00', 0x40000, &(0x7f0000000100)={@align=0x8000000000000001, {0x3, 0x0, 0x9, 0x6}}, 0xfff, &(0x7f00000001c0), &(0x7f0000000200)=0x5}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r1) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1ce76f2b", @ANYRES8=0x0, @ANYBLOB="9ba98c49606432f7302bf5", @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=0x0, @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) 1m25.77485688s ago: executing program 4 (id=1001): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x8000, "43a5d33fc396096b1e0d3edb763adb3ec8615fff1adbea1dbdd5f71c08279d05"}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x8001}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_U32_SEL={0x64, 0x5, {0xb, 0x1, 0x5, 0xd, 0x0, 0xcc, 0x4, 0x1, [{0x1, 0x0, 0xf82, 0x101}, {0x6, 0x1, 0x1, 0xc}, {0x4, 0xfffffffe, 0x2, 0x1}, {0x3, 0x5, 0x1, 0xfffffff1}, {0x9, 0x3, 0xfffffff9, 0x2}]}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2002c805}, 0x20000054) 1m25.662881025s ago: executing program 4 (id=1002): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x2, 0x0, 0x0, 0xb49, 0x9, 0x0, 0x4, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x5127, 0x2, 0x4, 0x1d5}, &(0x7f00000002c0), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) dup3(r3, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@handle={0x73682a85, 0x100b, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x178, 0x0, &(0x7f0000000780)="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"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0xa2, 0x0, &(0x7f00000006c0)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc551e7fa1062209100f8e7b6082de0b00000080000000008ac6afcf02f8739c24fbc3b7bcaa35a5312d2ad36b8692ffffff0044f9cecd0df51bec33a47aab5137891e70ce4802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa104b0b4cb24d1a634ffadcb7d8138136929166bc30ddecf8881c5dd57c63894ac49ffda34c9d56"}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000005180)={0x2020}, 0x2020) 1m24.37927723s ago: executing program 4 (id=1008): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fchdir(0xffffffffffffffff) io_setup(0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_open_dev$evdev(&(0x7f0000000100), 0x38, 0x42a81) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008001}, 0x40000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) recvmmsg(r7, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 1m17.484679276s ago: executing program 0 (id=1049): r0 = io_uring_setup(0x659e, &(0x7f00000002c0)={0x0, 0x3, 0x20000, 0x1004a03, 0x403c}) getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000280)=0xe6e8, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = eventfd2(0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 1m17.359556086s ago: executing program 0 (id=1051): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) pipe2(0x0, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xc) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000002ec0)=ANY=[@ANYBLOB="0800080003004400fdff140097004589101a006900006002907800000600ffffffff14f7305280f1"], 0x28) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x20) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000d40)=[{{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000ec0)="1662d17843", 0x5}], 0x1}}], 0x3, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000340)={r7, 0xfffffffe, 0x20}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000240)={r7, 0x234c}, 0x8) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f00000001c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 1m17.070711194s ago: executing program 0 (id=1054): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2000000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000fec000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000fe3000/0x10000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff4000/0x8000)=nil, &(0x7f0000000140)="e4de8ca4bac01e8e87b01b2884c44bb7fd3c0c33c5d3fa32e21442192884183fd635cd8cb83d9f06383d1fdf12867464c30158ae65bb1d686646b43854f81603fe35d8", 0x43, r1}, 0x68) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m16.87615021s ago: executing program 0 (id=1055): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b0300000000000109022200010100803209040000010300000009211101000122170007058103400001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x2, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0xa661, 0xfffffffffffffffc, 0x7, 0x4, 0x7, 0x5]}) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000000)="02c08120") syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)="02000000000000") 1m14.748759099s ago: executing program 0 (id=1061): r0 = io_uring_setup(0x659e, &(0x7f00000002c0)={0x0, 0x3, 0x1000, 0x1004a03, 0x403c}) getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x41000, 0x4, 0xe, 0x0, 0x40, 0x5, 0x7e, 0x9, 0x58, 0x3, 0x23, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0x13, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0x9, 0x0, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@ipv6_delroute={0x2c, 0x19, 0x9, 0x70bd2c, 0x0, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x3, 0x0, 0x2, 0x3000}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}, @RTA_EXPIRES={0x8, 0x17, 0xd145}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) r6 = eventfd2(0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 1m14.581213548s ago: executing program 0 (id=1062): unshare(0x2c020400) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) splice(r3, &(0x7f0000000140)=0xf113, r4, 0x0, 0x6ec, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="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", 0x1d8, 0xffffffffffffffff) 1m9.200829236s ago: executing program 33 (id=1008): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fchdir(0xffffffffffffffff) io_setup(0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_open_dev$evdev(&(0x7f0000000100), 0x38, 0x42a81) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008001}, 0x40000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) recvmmsg(r7, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 59.505361301s ago: executing program 34 (id=1062): unshare(0x2c020400) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) splice(r3, &(0x7f0000000140)=0xf113, r4, 0x0, 0x6ec, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="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", 0x1d8, 0xffffffffffffffff) 13.6334767s ago: executing program 3 (id=1355): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00') sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000040)=""/37, 0x25}], 0x2, &(0x7f0000000180)=""/193, 0xc1}}, {{&(0x7f0000000280)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000006600)=[{&(0x7f0000000300)=""/22, 0x16}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/238, 0xee}, {&(0x7f0000001600)=""/17, 0x11}, {&(0x7f0000001640)=""/242, 0xf2}, {&(0x7f0000001740)=""/162, 0xa2}, {&(0x7f0000001800)=""/153, 0x99}, {&(0x7f00000018c0)=""/225, 0xe1}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000002680)=""/4096, 0x1000}], 0xb}, 0x8}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/184, 0xb8}, {&(0x7f0000001d40)=""/116, 0x74}, {&(0x7f0000001dc0)=""/8, 0x8}], 0x4, &(0x7f0000001e40)=""/84, 0x54}, 0x6}, {{&(0x7f0000001ec0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000005480)=[{&(0x7f0000001f40)=""/8, 0x8}, {&(0x7f0000001f80)=""/43, 0x2b}, {&(0x7f0000001fc0)=""/244, 0xf4}, {&(0x7f0000005580)=""/54, 0x36}, {&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000005340)=""/209, 0xd1}, {&(0x7f0000005440)=""/45, 0x2d}], 0x9, &(0x7f0000002140)=""/59, 0x3b}, 0x401}, {{&(0x7f0000002180)=@tipc, 0x80, &(0x7f0000002300)=[{&(0x7f0000002200)=""/1, 0x1}, {&(0x7f0000002240)=""/172, 0xac}], 0x2, &(0x7f0000002340)=""/53, 0x35}, 0x7fd}, {{&(0x7f0000002380)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003880)=[{&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/246, 0xf6}, {&(0x7f0000002580)=""/225, 0xe1}, {&(0x7f00000055c0)=""/4097, 0x1001}, {&(0x7f0000003680)=""/102, 0x66}, {&(0x7f0000003700)=""/161, 0xa1}, {&(0x7f00000037c0)=""/135, 0x87}], 0x7, &(0x7f0000003900)=""/239, 0xef}, 0x3}, {{&(0x7f0000003a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000005000)=[{&(0x7f0000003a80)=""/32, 0x20}, {&(0x7f0000003ac0)=""/246, 0xf6}, {&(0x7f0000003bc0)=""/253, 0xfd}, {&(0x7f0000003cc0)=""/212, 0xd4}, {&(0x7f0000003dc0)=""/127, 0x7f}, {&(0x7f0000003e40)=""/190, 0xbe}, {&(0x7f0000003f00)=""/161, 0xa1}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/42, 0x2a}], 0x9, &(0x7f00000050c0)=""/173, 0xad}, 0x16}], 0x7, 0x40002002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000a0000050900020073797a32000000003800048034000180090001007866726d000000002400028008000140000000100800024000000002050003000000000008000440000000030900010073797a31"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000005540)=0x9, 0x4) 11.914337982s ago: executing program 3 (id=1362): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000700)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_MSS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}}, 0x0) listen(r1, 0x5) pidfd_getfd(r0, r1, 0x0) (async) pidfd_getfd(r0, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3c, 0x0, &(0x7f0000000a80)) (async) getsockopt$inet6_buf(r0, 0x29, 0x3c, 0x0, &(0x7f0000000a80)) syz_usb_connect(0x2, 0xe4, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b75072501020207000905", @ANYBLOB='\"$F'], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e46dd8073f2526b23dfe248f70"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x8010) (async) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e46dd8073f2526b23dfe248f70"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x8010) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) (async) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="32ba6f1cd706b2055bd1fb783314c3543c04c76c71541e487254ae13b3964d818b2d9ebb3b6740d254f38f4d27453d5610dd6a1e4cd6b761c6fdb42e78109f56d5dea689f9d621ca162aa13800020b318b99f27dcdcb8d7d16107bc33c83020ae7267c8ac3def9246cadfc065177b8a510f225dcaf52b242af064c6d30e0d7bed542132ad6dc3a52ee2d6c4e0565795e94cdfc49a117b02f0aae651fe9ea0c454c399bad0b0d565551447198ee18a1a06546a037", 0xb4}, {&(0x7f0000000180)="d01721df22cbd8448ed2b2eac3a13072e053fc89d596c5d621eddac53efe123270b16940699ea4c09a76c1cdddf12c68fe29e1fa4d22967ea937fadafbe4cdff4b18b7217c58416235c51cd50062d4a250a18668425d0623b0cbfb14d4018cee992e373f42bb73972bd4b420f54972fb83f4a7217c4d52c0d3a38e17dbf3f98016f832ba1c31d651eb9d8ec64aa08776374fbba76a84b947e76b091a262072d17a56a399c4eccbc3126ffbb0d700289a9ff33a374225ce3c2e0ecf0856566197ed241ab51a4356a18b0821932129c153cdbf2eda51fa5732d365eb95d9a0f69aec2cf12ac803", 0xe6}], 0x2, &(0x7f00000002c0)}}], 0x1, 0x10) ioctl$sock_proto_private(r4, 0x8921, &(0x7f0000000040)="a43a") sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x50, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x4, 0x0, 0x281ee, 0x106}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x10001}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2c}]]}}}]}, 0x50}}, 0x4004850) (async) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x50, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x4, 0x0, 0x281ee, 0x106}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x10001}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2c}]]}}}]}, 0x50}}, 0x4004850) 9.307676731s ago: executing program 3 (id=1373): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00010000000000fbdb5f250a808000000a"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000004c0)={@mcast2={0xff, 0x5}, 0x800, 0x0, 0xff, 0x2, 0x1}, 0x20) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r6 = socket(0xa, 0x3, 0x3a) unshare(0xc040400) bind$packet(r6, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0xaf}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40080) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000140)={@broadcast, @empty}, &(0x7f0000000180)=0xc) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) 7.653122169s ago: executing program 7 (id=1377): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.723445252s ago: executing program 5 (id=1384): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.460476286s ago: executing program 5 (id=1385): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xff, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x101, 0x2, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd1, 0x0, 0x0, @loopback, @rand_addr=0x640100fe}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @private=0xa010100}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=@random={'security.', 'sit0\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x7c, 0x3f, 0x9, 0x70bd29, 0x0, {0x3}, [@generic="aa56ff28a4d1ca3340e119e4544214c0fbfaefeaf539438c78adb097354307eb8af44109e18e4d42c5c057ca4980375e1290d59ef247ff9ccb9680c579e051babf1c388dc4bd2939240b5489f7d85f", @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) 5.222410103s ago: executing program 7 (id=1387): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) creat(&(0x7f0000000080)='./file0\x00', 0x5d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x5f, 0xfffefe0000000009, 0x7, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) capset(&(0x7f0000000000)={0x20080522}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x4e24, @multicast2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mincore(&(0x7f0000223000/0x2000)=nil, 0x2000, &(0x7f0000000000)) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r4, 0xda8d) accept$inet(r4, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x337) shmget(0x3, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) fcntl$setlease(r2, 0x400, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x7, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5a000e008090030008021100000008021100000108021100000005000c00c6c105000000000000006400d04c010004060606080000002d1a020018020000000000000040003e000a0000000004080000000f72060303030303030000"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0xff, @local, 0x7}, 0x1c) 5.108513929s ago: executing program 6 (id=1388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x21, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x21, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) 4.855511731s ago: executing program 6 (id=1389): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f00000001c0)=0x2, 0x4) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101d42, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xfffffee2) r7 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000480)=0x0) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6ea, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x75, 0x10000}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000200)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r9 = getpid() syz_pidfd_open(r9, 0x0) unshare(0x24020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1ff, 0xa4, 0xffb, 0x7, 0xb69, 0x1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2000fff, 0x9, 0x5, 0x3, 0xff20, 0x40, 0x0, 0x0, 0xc, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x13, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x3, 0x11000, 0x10001, 0x5, 0x0, 0x2, 0xbd, 0xf, 0x4, 0x1000a, 0x7, 0xe, 0x101, 0xd7, 0x1fa0860a, 0x6, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xa9a3, 0x5, 0x5, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x88, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x7f, 0x331, 0xfdffffff, 0x2, 0x2, 0x80000001, 0x800100, 0x5, 0x252, 0x6, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xffffffff, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x404, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000100)="0e7b013e4988c0a800fb2f6494e09db26aee4d34a848deb0fa3ba1659aeffb5794e99232b1f9593fb85b8c52cda5638e1c9b590fd3fd9fe3755a34bfc7a27898e15d7ad298c0c523c5527e988f4bafdf32f2f1a16307e56c5920c7046825bf54a99443d21e18d5a8e7e0d6dca75761abd4a733572afc1b32deee19d0c872a0c08a2821d94a7614ea60d271bb31983f", 0x8f, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000300)={r10}) 4.02970775s ago: executing program 3 (id=1391): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x0, {{0x41000000}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$P9_RREADDIR(r2, 0x0, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) 3.31995146s ago: executing program 3 (id=1392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0xc3, @empty}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4b0500dc74d9e27798c831eec04c24eeec7ff3cc137a508003d2d5c89aefebd468766a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d0000eeffffff00"}, 0xd8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0x21, 0x0, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r3 = gettid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000480)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) eventfd(0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r5 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) readv(0xffffffffffffffff, 0x0, 0x0) tkill(r5, 0x7) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r3, 0x2b, &(0x7f0000000500)={0xa, 0xad84}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000004c0)=0x1) capset(&(0x7f00000003c0)={0x20071026, r3}, &(0x7f0000000400)={0x8, 0xfffffffc, 0x81, 0x9cd, 0x6, 0xffffffff}) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000100)='\x00', &(0x7f0000000180)='^\'(^&\x00']}, &(0x7f0000000380)={[&(0x7f0000000340)='\x00']}) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0xa, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000201e04483040000102030109027e0003010080020904000000010100000a2401020028000201020924030501030303000924060301010700800c240201"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb000203010902340001fb0000000904ca010338e880060905012a0000060206090500000002f803070905061000041c0d090705c1", @ANYRES8], 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000041420002dbd7000dcdbdf2508000100010000000800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x200008c4}, 0x800) 3.055427902s ago: executing program 7 (id=1393): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) prctl$PR_SET_FP_MODE(0x2d, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x16f8, 0x230, 0x438, 0x1538, 0x1538, 0x1538, 0x1678, 0x1678, 0x1678, 0x1678, 0x1628, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1758) 2.864224889s ago: executing program 6 (id=1394): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) (async) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) syz_usb_connect(0x6, 0x36, 0x0, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$unix(0x1, 0x2, 0x0) close(r5) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) (async) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) io_uring_enter(r6, 0x1ffe, 0xfffffffd, 0x8, 0x0, 0xffffff96) (async) r10 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x19, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r10, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r14 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r14, 0xc0d05605, &(0x7f0000000600)={0x0, @win={{0xbba, 0xf, 0x7, 0x4}, 0x0, 0x3ff, &(0x7f0000000200)={{0x6, 0x4, 0x8001, 0x7a}, &(0x7f00000001c0)={{0x0, 0x730, 0x8, 0xfe}, &(0x7f0000000180)={{0x7, 0x1ad0, 0x2aec, 0x8}}}}, 0xdd, &(0x7f0000000240), 0x6}}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x55}, 0x8c081) 2.683532238s ago: executing program 7 (id=1395): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.311632918s ago: executing program 6 (id=1396): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffa]}, 0x8, 0x80000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x14) (async) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000180)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000200)) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x11c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xc}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xd}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9fa}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x80e1}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}]}, 0x11c}}, 0x4000004) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/softlockup_count', 0x0, 0x10) (async) r6 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000480)=[0x2, 0xe, 0x10]) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000004c0)) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x1000, 0x3, 0x70, 0x81, 0x1}}) (async) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000880)={0x0, &(0x7f0000000540)=[@nested_create_vm={0x12d, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x2bd}}, @wrmsr={0x65, 0x20, {0xb55, 0x400}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x60e, 0x3, 0x705c, 0x80000000}}, @nested_load_syzos={0x136, 0x70, {0x0, 0x8000, [@cpuid={0x64, 0x18, {0x1, 0x8}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x75, 0x6, 0x8, 0x1}}]}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xc000, 0x8ae}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x4004, 0xffffffffffff0001, 0x622e520d, 0x6}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_load_syzos={0x136, 0x100, {0x2, 0x2, [@wr_drn={0x68, 0x20, {0x5, 0xfffffffffffffffd}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host16=0xc00, 0x0, 0x0, 0x200}}, @wrmsr={0x65, 0x20, {0xb17, 0x2}}, @uexit={0x0, 0x18, 0x6}, @wr_crn={0x67, 0x20, {0x8, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x2, 0x7, 0x1}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x58c, 0x7fffffff, 0x2, 0x1}}, @wr_crn={0x67, 0x20, {0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @uexit={0x0, 0x18, 0x7fffffff}, @wr_crn={0x67, 0x20, {0x3, 0x3}}], 0x330}) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f00000008c0)="66b9900d00000f32260f0134660f388218baf80c66b8a45f378466efbafc0ced0fc026ed0066b9390a00000f32baa100b000eeb800008ee80fc7b241460f01c5", 0x40}], 0x1, 0x0, &(0x7f0000000940)=[@dstype0={0x6, 0xd}], 0x1) (async) connect$can_bcm(r2, &(0x7f0000000980), 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x4, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000a00)='GPL\x00', 0x5, 0xc4, &(0x7f0000000a40)=""/196, 0x41000, 0x20, '\x00', 0x0, @fallback=0x16, r3, 0x8, &(0x7f0000000b40)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000b80)=[r3], 0x0, 0x10, 0xfff}, 0x94) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000c80)={0x0, 0x1000, "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"}) connect$can_j1939(r5, &(0x7f0000001cc0)={0x1d, 0x0, 0x1, {0x1, 0x1, 0x4}, 0x2}, 0x18) (async) ioctl$BLKPG(r5, 0x1269, &(0x7f0000001dc0)={0x0, 0x0, 0x98, &(0x7f0000001d00)={0x3, 0x4, 0x11}}) (async) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000001e00), &(0x7f0000001e40)=0x4) getpeername$inet(r2, &(0x7f0000001e80)={0x2, 0x0, @dev}, &(0x7f0000001ec0)=0x10) (async) fcntl$setlease(r4, 0x400, 0x1) writev(r4, &(0x7f0000001fc0)=[{&(0x7f0000001f00)="bff0aba433f932baf1a78bd76ebe4c856557b131a6a55cd2bdebb1232f1b40cb2b9d873ab7beb3ce9667708578b560dc2a71c6bc55808bcc7944a2c5e3429606200b61cd76417d", 0x47}, {&(0x7f0000001f80)="bec5c67083be8fbe", 0x8}], 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0xc1004111, &(0x7f0000002000)={0x1, [0x8001, 0x3], [{0x10, 0x800, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x93, 0x5, 0x0, 0x0, 0x1}, {0x236, 0x80, 0x0, 0x0, 0x0, 0x1}, {0xa, 0x1, 0x1, 0x0, 0x1}, {0x4078, 0x7, 0x1}, {0x3, 0x5, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x80000001, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x5}, {0x3, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x5, 0xfffffffd, 0x0, 0x1, 0x1, 0x1}], 0x7}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002100)={0x0, 0x0, "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", "1ea5d32782ba235ddef50e871f14964a852cf57a607c75e9b59b0b46cd7d79c25229c601cd7b97c542082c733fb37adb70b07c617cf640e15904ab867303a20874ae00b9fbe3ccc6323032269d796e4446204b494550cc207b5cbac1c983e6ed17ef9de0ffd79e223601d3c83f7f59fdd93326c5985c548de24ad24e977b5f6f76acae8e4cac3ee9eb59e75b1fdaceecff185e9af0295a2779883889004b837b9242bd23c6f2f06cff919de6e763b68af9928e0a49fd1832361fb5ed26907f86ae28ea6ee8e10366c48f586d5c648d02d0201de9b49f3129caa3cd2a9ac5b8a616c60a482761d959da82f48dce897fe260ec7d64961a9d5bcee428558f2f0de6ff11b6f31fa075a8c7ce83fa09d46cc53766992b786d37e5f0051c33701338def075f0385ba7f1f692835ce484ca0a3b32259eabe0f34433ebad5de49e70d592cbd97f7926d7721e1525fb974f77026ad703b10002dce893908d0b85141f5c93ccff1dfaa758721ba7abd6602ed1789e1794fe386a8f7de409e9fa6e2f75d23b088c46d1fa943177669386e3bb643f8e1198ab7918479082a02298f2f42288d2038b5d41098d44fff38d8ebe308bd0a381c8df9d7da3009fca73802fd802ac57a7ae8403d5d67004e2b5931c7bf8bba16707833fcc6a80d3b52f7d1b79f31134674429f77fb105e1da23b19a41e3edd0c91b462dec7787020ced2b56632c79c32e9adac382c15e2118ec8313188b350b23b5d4cbe521ab3b6d45d5050d42b8bdc14ad2a143584f515eb9b895fe64ea3a1a15d8f76146128f6c8b8afb402652d5e9ba0e4f3987634e37eec5438307aac91599aba338b413580a295be7db5f002010aa2b33ba2639c7889f152b9aaa6ae2bfc27a7d761d4127b7b2f1a4dea893cbc7de95ccb40255c0ec355d3922aa5143eb85edc2c83a758a7c1119f9e75d6cb43c1151a75ce50ec3b3d249356b6266cef34ed4a392d6adbf5bad4f57411779e8921fa8de751cc637a19d3cbfae3100868acd731c602963534fb4032a98db68314e1695cfeb0b546b2d9d8b9df547e0114cc6de1920d9d97e6912adb2e6c45e8013873f0d1fdce48794aad413b91ab67355bca523c19bf49441ced9aaa39712e4330e23bcade9886fcbc6b332699a4488ddde348740748219f42ce4535ab70a0101245d00583aa0ed1261185984bf08b2c1671ea46ad7e232326043557291eea9dacb8dcb43ae5dda268d2464bc48243787aad6a4a1f10b2acda5d2853ed2885a58b0fad6256713d3aa1397766ee8e3c6f0668a76bff835406e491afbaaf73d1c1c6bff149a3b598bb077a96970e9c844b8ee11548345799f50be585d55c8f632ce10497cfb04f2556a320e7d28bab6917c9057136ef200cf219b0c6c35816d0912d19f6eb191a1c9e7d598be8fd86a79cafa8fae177c8ef58ec58f7fbf7d1ae39caa07e8a764d9cc0cf7d0de3db767e048f324bdb0207caefb14d9ac1566715e22d9c07af932a0d649d5ea55a25f387aebb74df0272ebd3d9e49e12d267bcfaccc07d5b33846565c3da5c625364888d41d48524977e03cacdb3eb77b86fe83374d9b2ba166c8f9fa1fb6735be1a89c115eaf9772edeeeacb1ffc9331a67405e5825a4b19fcf04269e4863bd1e9280da26f30a75b1c37f7805e350ed89cc1bdcd80feb6c4fd23476d2f338d9e0354c052b6c80e37c8ad9363b50c5e85c8700ad8efe322cc7abd0d023e65eaf307bfabb5f4498ebf993d2ca9075cd7ec25bc857e6f115c0c15c3b3ec057ed52e1786c4588e009467a8261c1ddb01ce7f1cfc8ca68b1ba1ec94263f41c8d7fafbe1264c0e32704e9abf5524347a5b4f11f5b69ff9fff1d299d976571d4c37d488de16ecfb2c96f620a45d85ef8b4dff83300b918790808639fc7c9aeada29e6d775068c1c72ab20f68d11c5c06eea57adea95c89c5b5d5571265b68d057af5171953d72d8f4f2bfec3c5a5d3bc8f86116f2f38ccf20826c455c755eb691d32efccbebfce3c3b6e18b8e7e0a3795c8d99688f42a0ec7cd300095bd2409e2778f9398a5737e349fa3209be0567acd7289002ff1fe9b1e439352e62688baf1d9701acdeca89182c587c3be85e7daa711eb28c5901a0365ef1fb427ad10d6bd9fd245d5098275e4fa881c054a0421361f7a7f2554a3e1c48d142fa201b2cd95856a3f68e44044959d6f25320dc58f00203550c3d7581b1e7bec499eb1aa8e6789d978cbac471b8a5704408cda4678b958a309094b1fffcdcb04a7b246276dc5230b8f5b9b855b81202f9db58b7128af6aa9a6548fea28c77a93c85b66ded1b83ec895645175108f801a0591a20a63e5315c67d8069b94b2b46db91fdd31a610b34e03752b6d77866d73937319b3fdff730054789b97c9ea996a1ad2e5da47dd5cee10de11c947561a16a8e1d26aff4899f215911bdcc11a5f4009e995da753140cd6ba8cb035d4bb5b68141d0f1a8b6840a178fd2d22bebcddf83b401efcb60e2e3d451d23389330d4a3ceb1f2e6f0ccc776f0692d702749bbe85404cb73355c4be7dd4e6a659a9d2c5dddd356567d9f40a33b072bd3028b769e9e23f0f04f5ea133d0f6e8d4d64ad3b8686ca5bb2ea3e76ff34502ab72de76319043fc74bf78f86bb8fcea4adff6233accece63026e94a2288be8411076230cc3c3f5cd3900aa658acca09d1c991514531e7f9b592d0750be4b044b7502611af47be9c0569ab9b93a7dc402c72aa8d51116a4ccbcf310367e0f07b2fef80da770100e048e27e54a755a04b80a740b90f72c97a54931350ad8a6a6ad24a4ab8c3c0449a2c1af990b885303f4d0b3da4c7d6346d1a36e9257c05e359b23e0b7fb12f79f86837be481d6028bb696e1cd596e02be3884943a796cc97be1fa57640ddff9102910e69c5f0f147a110ba217bc5a6596c785a6dec4ed6fd282c49d3d25ab0365f057414a0ed72059043ff6af7a286fca19b716e012d9cd2972f23c8361623397a11952bd844b09b7c60fb1b50368640860fd6b710fac0f33b0683a1391d5ae819bf987d9d30b0dcb2dd6ade6483ed18985cd5a35fa296225bcbc97865eb304c80e03e307801b6b9320d6cc06a2a6cec1617aae3ec3c3869cc4d0932e5087583d1192dfff9f92199462341e28ab5dfb8136b4f8d08b9f05452d7f8408d3eb5e0a685d87faca6f2a1bb73ca5bfb11edf0fac88f20b00e38fef97a68521936b5a95ede257bc96cdebccad2291534b6f2caa9c85f67b39f9729954a0304ce72b53dd0515e1824b577d92c338156d0defb2630f71aad9b2f02bf13b2b6be320a5ef400bf8c5734a6db8722fcd7a53bf667bf40da6db4b619eaaf284f00dd5332f295e967a9af9b564ac00b3a60087bf4c816206ade5c92d8bdee0ba3baa6f3b44b51c3cb6c229eee392b68c5a3bfff06e0b14e874ed920c847ecafc558d17d02b7ee18d7bb86e720a98f0732069d20ce57d607bf9415907b56c954a4dbd3020a7e6950d580935f953922a49c332c6db1e55bc407f2682272b7b5ba4d8572beb6f52c8bb365e5e5b5840a361c694995bf16bf9649665d7b816737691b99ebfb32c079f654741ac457ea892b7c24f5a33aa102751e1f28e3ba5d49ecba52f39c35b7d3039c36b41f094fe2aa3c9abc04413c2f926374aeb5bf1fe2ab768e4a1aa12385425bf0ab56105f41fc2ef06b86084ecc0e47a8b1c34a9a253960f857665b6050178888a5d216429608965bd674436ed62e32ab413657fdf8dfb0a0b0e67b85daa72ed4945d94206efec5c5267c9a1da7ca1e29586165eb6157b299760abf3d4fb6b29befc692ddd820af20408403ff59798a35bcb473f340ae3afa4cb35407c1e79cdb6c6a5106c33a5fc03c19884af479379ca19e10986429284d6c39c8a9ff1b5c859fa8e34f7a83252bf9f69bdf8d796156b5988be7dfc5ff94cf34c60ba79fc479ee5f323a9934c5dc0416682ee681a14850570cb1a6c624af19fe28be722b931e09220553936d3e9ceda96bfdcb3e43293f7e0f6d92ba928d17faca21e2b56ae31155b860db5675c2795bf8a21e5dd17ca0b99f0f48bc647109924bb19daa33b3621e9207550762863d0e59161a2876e04c35693fd7e01b9b2a4929813f377c4adff6ae312a2c6107818fd191c6d1b1dc6fb350533411b583f730cb9e1e6756756dff4cfd1e6e3f67c56c626e8e1a14775209a1420617317c83837699d8b11329d112ff340e7b1e3376317b6a283cc5f97e35184f1266e506b3e054ea1ecfd55a2b9fd74bf129cce84c732a79e8866a25a667e0cfff3fec06a8fcae89e86534f83de6420aef01cc9cc59d8cac035723ea1a59b60b9f4e1098ee1e84c17fbc123497f5802f6642f9511ccbd384728a2e0b408be9cb0de0f2a15b94ae98897ea4390ef4f20993af13ec12d71179c83c2bb86e92bcefc9e6f061cdac2c629862c1ec410894182ab4e15a2444335e36bbb95ca71c7bebe41f6a561272b62c29a66f2b0f55755bea148ad79f6b855913a2ac2b009f0690ec90aabb1232b366e412c26d228012a25f5312111a0f8f97ac66000848a88972368f6686ce20ccb28606a2ca49784c474a9c7307f0c6e25cb80b6c64603910e813bf2bcf19e1c7461157016a471265773dd83c1b735dfe0ca42cf92dcb917b3893b3c342e2fbb06a30ab2249ec3935c8f09e503c9aacfc07f362aae1acb1e982b91a0c194019955e83903290447b608935ff0e4cb26669894ab748b3d2b88de4588e90659ad575d29fcf0fbda423db544e330ceca7f7642c01fad569d19adcc1df9333d320e8d2b9199ca60a17a0dd46248fc3048825db02f439ab12434dba4aee5f63fb484cf2b579d9c9b28eac601f4922bc480f7e60816a6ccf9ea91eb308067ca1a2c2598d681e7e95bd70b8ffe1e7526324070ad4c1b4b59f6326b18f6b5eb3d41bb355c12d31d0297226daafee79990593851746d6eafcf6ff0fb2b8243766279d512a58218434564c5b1e6a3b1484c6ad4efb738e27d323712da7659998f36c335c4efc1c640a92571d089e89a6d31b98bf456a3e84551274538d7b4be0221ad3b01136c4c9169c8c049bf5e7fdc75d724acb83cd8b5989a0d56cba72f01af5c22d0740785910017443a9f48f1e1566ecd8b55f6e58f9e4a61594f3ca843a39a5e956714c9146e303401395bbd3ac300970bd84d6104d76c063cdac7c943528a1130cf74acf167e4317c36d208de7a070c72bc1753f97d50a3e68677e003bd407dcae06f9f01ea5de939b1856b71a68c479e3d355943a36f4503da8c9c8e7c420d0337d7d3486a1d06bbad9ba10300e085fe6a3f7d8eb3cc08ea2c693fdd3ff28163b43608d4a27f644750e9248b23dc708e6736bc4206f56eb61af46dbcf3fe8eff2625790ea3055f13049b4fcab147"}) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f0000003100)={r9, 0xb}) (async) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000004100)={{r2}, "4c5d8533a0baaa26dfed0358afcb5158419a729867754021195249cb3c0b33ae3f85b2c3679101b03f4a5424ddd15cee29832d16859d8892f90098b43d0df5b5de468e466d452d55e74bf3c288fc529965ed5dfb57013160c187642ddcb4bc456e26b9271db177c96320217ca50fb95b7b5af2e4d4b463d0e61343f55793e19ccb5a10d287bff40da18e4d5787769606cf7e9fafd89ad4cacfce24a444ea52d73cd498bec4c56ab3661a6dfa8e51e2605b819843b564552ac2dc1a2adcb7ceec20fb6aa1bfe9676ccbddd5ce8c115078d051eea54f020964e91ea69dde01fdb4396a93ee346f3b4c4270d304d571780ab9868d0c6c7dbf40918689be639b5af84e45e1ea0dee0f052e2dd3c162f0ea4c3fc2c0ff09b25f2c3e2332671d61b2f50a89e6dd6d562d7903978580de17828d47cebb75f82b80c2777ff47995ad5a448896b4e6a17af42c7a3e51bff975e5a973e1673c816e589aa278b4bb83d2bbb1194262341f04ba6e38761fff3b337f64746fd51649ed267f4ef42138c1dfaf014c5db160b25f0a59b575b28d56b0e21d450efeab301d2609d6b5fc7d8c88b0f1c309419f46e373222bd3a691ab81c41aa07f2723d0f594df5f5782522b0a87b4683afc9f4f27216c7dbb5a6bcec33e46cc24b8ab1f89cad70cccc733b7c6c2d5e442f77aedee403ebe2dc115e3e1db8951c7e7d6fc37a6121f8adaf00b911f14abbd876d926be8ffbe203a56c64ec7c3372c85d36b71a3460e03d05326aa41d470cbe69d70971a96e9812a28d6d47ba662c77de46b6d7c52f3113a8ae0f21b1ddc127f03d926eaea4a9ec022298f150795186b5182393a7230cdb0477fc3723207f91408f62c943887a5d06487d52bfc4b8bdac9aa6026d4c082425c0a6ee2beea26333da74b9e65c9a218fe0a1dcdd8857a7337fe3bf203594e29f09b4c66c163d3546bf05e720d54ca788579df2116df200499a1774434a99001834568c632405aa744d448bef7ff80d42762e565030f5a1ed054b2f80780c1b1b2feaf5f09a0dcf6406a14976c6559234ea94dcc915483f1d014c2b80f0de3d2060035b9175eea86ab9c66eb0c2d8d846841eef17b9643003cd2e795aadcd84b160d953ae8bfa2ce44bdd3dd6e23e3d15d64762311255e70369f79fc04b48f1f0829d389b411f6b6b153a6b9bec3c61610fb59fcd5a46a1eec8099667b71d45c24bd8387644d76027940923f69a0048e13376910b2f5c8f81eba5658d35cba0deec539ca368532684820d7da296b450321738cfb298da59c2b68280e15e5bd1caeab6462566f396014b1f2676c41ab0e236680f5d9a3cb0fd6da49f814860985fc5835903a584155249d5ce67dabc98f3cb7c4cc3aa21670f132fac70dec20b9950711e6b260c1bbd1305e0cad7d324e0762e1cca4189f88275d901d6d2261d7afd65a3f909b952338b488e4e4e3b3747d88c4505a97850d57a130454a64b0dfb073c9a25ab592e35064f4541366364419d94bdb060c784dedce88aae93aea168823274c07531dd85d24dfb7ba3176a402e9045dda7cf8ccb2e8fab9d8499db622a11b6da8932cd7b0576898249cab2a23728547bf90d2496deae3d84d6c7058b5bd793d807ddb6569b5d5ec415586e3e3c341df2cfd0316d3b59c2acd3ba6d0e3138eaad83c0ca97551521358b4a5e0453ec06bf76edb8be34deb649839f2f28de7d8b3fdd2b7d306026e8280ba576d0cd18331dbc5320bff84c330a6ffee269aaa9983b661d653183cd15f91af051ec3b3d5ea6c2cd4f8b90c236165fca722e953c9a330786d0a7986d09e72379be7518ef7701eb19f2fc5b0f8bc8e74e437bae54ef790b43ecae19f5f2845cb38d84195d9ccb2b5d36337025cfcd4d417e843c938547ce303b8b80265f50f435d38c0d5f0b9a08b45eded1fdcefc49e037ca538a21cbcc403a46918d307e766cd06f810939604ec9469aa98ed1275fce8c137b9ac6e06625e160740c851fb313dcdbd2ce08b63dfee1105e2b1d9a0d0748f0cb74cf6f122b4b46a7a6f5bed9451b6cc3d10644f425af9290eb8ce842d11c99ec9c624b96e7154cb758c55059dc8052af6f78ba8c5cbd68d5c5b42df3bc74533459bbab70d2e7b2bd75eed9bec020f9927a6c2105cfd01bc414be6444fcbb3ca28152b59a58de9a9ab748fa2100aca886a49a246fb8743e4c37ee5247bbd973f861f32c85f06c3cd21967568570421ee7fb2899aa6252ffddc676c146685cedf527c8b2d7370a594950e0a7907221e4b2495dd6c1c6b2b154920d217711a0d0f1b15805436ae7ea27504c0d2781380046a88fcb342d15a45995e1e6b97457d7ac1b2ed4b97cfe4ce9eed0079ac41019a8295b27b7eb04ce48febb28be547c6f1e579e8de80b84c35e5996c0a1675767910142673eaef669d653348a48b4b7458e7aab8f77c190b5192a7dc6b2f57343b231086b58bb7df3fae4ddac276f57ec2a3347809842b348b63499c98661eab097525c7b7ba240131c7012c2842bce62328d27eff1d0673530f54a39aea2f11f28b940c9a34307036950f0dc9950397b2611e4675fece8e465345ff9f7ce9ca69c3b7faf8fb6a064891513d74567d9ecb870268ea70fa3e6cce3bf91c19844982b43ce8b8016c29b1b7f67407202a0c7215c8c655da26e5b1e6e7920ab3586b9c068b3332f465742e9a329235b7afcd66536118b1f20cb3faa5c2a3eaa46f8713538d65a21efb06e72b9ac1d5909484cad3d712957e37684f4a84faf5e91e089ce19e1973246ea66c12d55e0a0e931aaf1c2dd1ea768f587f716c1bae72924384eb7dafa58be6c4a43ea51dd953f18feee79217e814a1bf1f0700480b0044b3aaa32e9757f79531163c3ce96d0cf52a62556b17ea6b6f8f7ca023efc17af88923348c22c05a162f820bded9d1acb3cddab9af4d7a0b89fce6c3eb15aa919a2d8ea9edc60c41d45ceba296243a67c21d10047d6f08267695dea77eed29776617c5714a12c5e872b67fb7b58049e8cd4f7297e0968e46ea16d42647998511ebb377bcb70ec2dd1e0ba830cb0c0ec74b98f1bb39549339b73295c50f9aea39d89d4c18dcfcbfd6210a8f6212d60970734fda8fdfbad812c48f9cf63614c9f8afe0a960b0442e01aa4db16f1d9c6b0ff72d23b162f35022a2101c70d3a7d71e8f97843719e013bcd1d5f2dd90d7b2f4f00c0436d9c846746fb462913f1ec91a558b11839a0d959861864e0aba8c2e53c63598238b0d180f43cb16b0a94700e2836f3b777bde01dad20cf4b0e9c77a0cee5170ceec839eda6567c229e7490928e0eff1eb3f65d832eac8ab339ead8ba00f5dd0c322f64b37755fc0343f2f8b5812cb9235cc35292c28a75ddfd4a730e65d8a3f98f04930cb5bc5c5d45b506b79fac0da06a47acbbeb721abe433102e88a89d1595022d0c916b655fee2f6a88f891b45ba9b63150fd3fffc3e70284f168d8a3254f81c76dba148ed8cb5b2ff08eb9f504177798bc443c7547926a3d35f30422f57127051e55e75c3398012750c47a9334afe495e7b596d1aa4e03085e86ecf5eae650cad2206fcb7ab4817a7c227c0360919b7ce7417b56e0fd5314af5e9e205ee995308ccd00b0d0d305af764d5b6217373dff3186b6afdeeb0fb45693fd328b684866559032517e60cb973a0d4f733cee7d920e859e0aa66846c19dfab7cfd7840227797af20ad0ab7caaadcf54ba01fe5b79ede1698c9cfc1eac3b80827420fe4db7a198bca54881cf9522287080beccbab0a346fbddd1a4ae2cfc1f46d47989541f8654bb9de596f9dda2c9b53747025c0f6ee0ed5607f61269d14a16a1b9d918be58c7931da742d52bfc577f9e156f6147b0df7094458d4ca518bedd2b8ce4ad05dea65a109b8e2cf04e21a77cdead7fe9e23c618f8cfea510ee9b5d6b4f6e0377ce9fe82c96bae9ee423724380ec7e30fa1f42afe2e8d8b8beaef715692404c748fabd1174c16111c0c5e3e47810e2dc432371ab21fed7071be6d7b7f137a2a8d22d497d220b193e6d2e52b8269a4495c232666252f0e387e8c2a1953a916b6c3067e39019ce5860fdbf385c952719198c0da0140158a38abfd7305ecde8d0c738931ac7f3d45441e8fbfefbeeb9bdd4f9173a5b05531494aa11179e04fab4f598b09aebe07b9edb755dc0e38c0b8ef2d52711c66d18344857eb22686fa6af8a747e440ad8a46259ec2e415a8d7860f42eb816ef1fd7be9051259e2bf3606b992130ba53669a0ddb71e127eb832315f78c495c806f5cf9f5a79f7bfbc12e1db8b7a4da1c17dbc692d088050b81505a053750d9fac14983fda561adb49878f8f50c9b68203c98abd7b1aa4e4766d0ad908b9cb2118aab7534710118034b9a8144c1919934d4a2115c0363901af2ef80f1243b9a5422023baf26cbedb1668ba6f1b7c92f2e0dab189b5a0082e7ae545929e0581d41afef0fa356e7a13e4b2e8a21e65c18bd2141a3aaef959d61c241b8c3dfa3fe18b6b4cf99ab28cf27b26340232e0c4c5231121c98357f084b6cfcc3d5ede291354264e7a8bb10cabe5bdc2e068a8447bed124d2df154d26c278555e3e689b071dcaaa9f3611e445835a7253db0dba726b772cc100c2e82daa08bf0b65cd80fe976da17cdd9d665e6f8428750e5cd7f33ad9deead41242f2f06be6ff0496c68a4a8b890263b781e220a922dc3f81a092b46eee9c43b32d6b9f0b9e9d63f2f3a4bc790162fd53af8d0715a1b0fb7af14dcbda7d6a8a268b78e5fe23892f6887aa9204cf032045c93a5501d326fddb22be53cfd0a11fc2991f7e9de4cc91010a791216e653d74a4125ec1bb31ba2149d6992130100d0794adc294f3e0acd5557f73abc0848cf91b74d8ea974fa9ae129112013cff33cc80de0f5c1f6f90255946e9f4324a9f55ae71442ecd859043dc182bb03aad5e557e37d6fe574e5aa143a98591774af92b6559bf4ab491c96d173530af22efc782210e0344d18474ce2480587ce9bc16b11da863294bdb4a426587cdf12fc8ce22b6e49ea7b031b4a356e9e60431e2732bf34ab52971b617372ead162fefdd2fe81f8ec7fa90a16fae7a89fb29c1d8efd6951595eff7727be94ad571b4686ecd4de7b9b002a3b994d44d771bd18c4631219a2773a040bdc40c442a3b27ddb61e3b85ac4cba56bd86e5eb51d7f9d43ce5681704db7f786d9c93c792aa5bab2be157188988cccb943a74ec6aef43d884571d1814e17b3d072cc6eee9cdbeccd544c2321c2307e2a661ec68b8d43225f6f1a08b5bf578168e8b0cb84c27c3a6bbff405dddeb29745f2396c5b1322aa034e2ccd0921c88e7f96dbf62ce7b99acb2f8f2843b76e36641cfc3adf8c09bfc1c8a7a0f138a2978d4b75492eaa4699db23f6ea2a15f32f68939286c79dcf33faa54802f62ca5b69919a5de7d2d7f8525fd3c8fe60723a7f549ca0e89f8ac1d8e23f4e2d78c36f1fce524b56a1416ef5d1e41d596fb521e0adce54f8344b4ccb3548a4b3ceb1f28af49f61548024b9c039875550c92e320f31073174e9d3f3b803f19659a7b7dee71ab6a1ee1797c6e39978183ed1f594684facccce125a3a71da001b50e8fae3e8db4be988c828961a8027bfd5a674c4b4cffdb441980919aeffd9a055d76d4139528413184df4d13d37f31b318244d3c4df9f9bb3496d9528e32fa452bc9ea75a2e806d6c5ed2623aad3b777992270f6994cec23fd67a3c1d38ab13665d250d320ff0e155bff9fd9b2fe90a581e6fa99908fa119a7cdfd6b43d07eedf"}) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000005100), 0x581800, 0x0) 2.309110025s ago: executing program 7 (id=1397): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.097082698s ago: executing program 6 (id=1398): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3f7, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)={0x0, 0xc, 0x81, {0x81, 0x21, "de2a2317a42d836374802f20356ec5f9dd2bd85bb92847450a27118ba852ed1fbe19c88a5015d16099a9467bb56016178ff54aa4a3878a2d2435e64467e6993e14a091e3483e64a2a2eb28f00ba28df688f362b8f625ba8e1c74937a6957f36ebee6b5af33939b279d6d1e1fb54e64b13447d69cd35b809aa91e34e3ac36d5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20000000002e) 1.574654079s ago: executing program 5 (id=1401): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1d) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000480)=0x45c, 0x4) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) tee(r2, r3, 0xe, 0x4) syz_usb_connect$uac2(0x3, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026e00030104600e080b0202010620400904000000010120000924010700020e000105240b1400090401800001022000090401010101022000090501"], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x5, 0x2, 0x80000001}) getsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f0000000340), &(0x7f0000000300)=0x60) syz_usb_connect$uac3(0x3, 0x13e, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x1, 0x9, 0xf8, 0x8, 0xa}, 0x70, &(0x7f0000000180)={0x5, 0xf, 0x70, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x4, 0x7, 0x10}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xd, 0x1, 0xfffe, 0x7}, @generic={0x59, 0x10, 0x2, "af5b66fc7bbd62b876114bd0423a510badbfb3a71ee432fec2b71a41126073d04abb1a2aacb444895dd2917670fe26175ca45aca4e90051da8caf52beaf58e0aa3707e2e1af64b81a03cddc6333401900fb00e22c8ac"}]}}) 1.188183755s ago: executing program 1 (id=1403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffff}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 932.458872ms ago: executing program 1 (id=1404): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) r0 = socket(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x4, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4, @private2, 0x4f0}}}, 0x108) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) (async, rerun: 32) r2 = fsopen(&(0x7f0000000680)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000006c0)='acl\x00\x9a\v\x9e\xdf@\x18\xe6\xca\xf1\x0f\xc8H\xc83A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4ZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x11Tj\x12\xc2\xf5_\x9c\x98\x00\x00\x00\x00\x00\a\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Th;\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xbaLO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[<\xd9\xc2v\xbe\xdaH\\H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x00\x00\x00\x00\x00\x00\x17\x96\xf7x4\x8a\x06\xc3\xa2\xceFl\x91%\xe9\xbd=\xff\xaaF\xf7\xa5\xb6\x18;g\xa0:\x06\x84C5\x99\xf8@\x0fC\x8e\x99`[kH*hL\xea3\xd1\xfa\xc1T\xf68\x80\x15\xde\x8a\xfd\t\'4\xe2\bhg\a]WS8?!\xb9\xe4\x1a.\xf6\xe6\xf9\x06J\x01\xf0!\x04\x8f\x82\xeaT\x816\x19\xc2\xb3`\ap\x89\xabp\xade.*\xdc\x00\x10\xa7%T=\xe5\n}\x89\xd42\xf7\xd8J\x90\x9d\x89}|\xe7\x95K<7\xe3\x1a\xf0\xb9\xff\xdd\xe8\xfcI\x16\xfe\x0f\xa2\x06\xa2\xe80\x0e\av\x19\xb5LAr\x97\xa7\xf1\xa8\xfe6\xce\x14c1#\x89CQ\xd5\xac\x10\x88z\xca1\xd1!\xf5\xdf\"\xd7\x8a>\xd8\x82%\x13\xe7\x87\xb8\t\xb3\'2>2z\x81\\\xe8\xbd\x9ec5\xc7<\x05\xea04\x8f2\xa5\x10\b\xc3&\xa9\x15\x9e\xab=\x01\xce& VN=\xe8\xe0\xd4\x92\x06\x82\xa9L\xf7.j\x8d\x96\x1aM\x16\xab\x91\xeb\xa1A\xaa\"\xd3p\xbc\x7f_\x1e\xcb\x92\xef\x00'/469, &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) (async) fallocate(r2, 0x0, 0x1, 0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 770.262498ms ago: executing program 5 (id=1405): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x5cdd, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xf) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r3], 0x24}}, 0x4000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) (async) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0xfe6e4365ec8a4cca, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 698.58441ms ago: executing program 1 (id=1406): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000000180)={0x1384, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x58}}}}, [@NL80211_ATTR_TID_CONFIG={0x6e0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7, 0x400, 0x36d, 0x0, 0x2b, 0xecc3, 0x9]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x7, 0xa}, {0x4, 0x5}, {0x7, 0x3}, {0x4}, {0x7, 0x8}, {0x5, 0x1}, {0x5, 0xa}, {0x1, 0xa}, {0x7}, {}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x7, 0x6}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x5}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x3, 0x6}, {0x6, 0x6}, {0x1, 0x5}, {0x2, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x6, 0x7}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x5, 0x8}, {0x4, 0x9}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x6}, {0x1, 0xa}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x6b2, 0x9, 0x7, 0x2, 0x3a3, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x5, 0x1, 0x2, 0x4, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xc, 0x3, 0x9, 0x4, 0x4, 0x1, 0x6]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xb, 0x0, 0x2, 0x209f, 0x401, 0x8018, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x0, 0x9, 0xba, 0x80, 0x3, 0x4, 0xe2]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x97d, 0x0, 0xc, 0x4, 0x2, 0x1, 0x88, 0x48]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x98}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x210, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3, 0x4}, {0x1, 0x1a}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x0, 0x2}, {0x7, 0x1}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x5}, {0x6, 0x2}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x3}, {0x1}, {0x0, 0x6}, {0x5, 0x6}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x4}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x4, 0x3}, {0x5, 0x9}, {0x6, 0x3}, {0x1, 0x4}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0x3}, {0x1}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x2}, {0x6, 0x6}, {0x0, 0xa}, {0x7, 0x8}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x6}, {0x6, 0x6}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x2}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x6, 0x5}, {0x3, 0xa}, {0x2, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x3, 0x6}, {0x3, 0xa}, {0x0, 0xa}, {0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x4, 0x7}, {0x4, 0x9}, {0x4, 0x5}, {0x4, 0x9}, {0x5}, {0x4, 0x4}, {0x3, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x5}, {0x5, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x9}, {0x2}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x6, 0x1}, {0x6, 0x6}, {0x2, 0x6}, {0x5, 0x9}, {0x3, 0x4}, {0x5, 0x2}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0xa}, {0x6, 0x7}, {0x7, 0x5}, {0x4}, {0x7, 0x7}, {0x4, 0x2}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x9}, {0x7, 0x8}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x4}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x9}, {0x3, 0x7}, {0x2, 0x3}, {0x4, 0xa}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x8}, {0x4, 0x9}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x4, 0x2}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x2, 0x3, 0x4, 0xd, 0x6, 0x892, 0x4000]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x41, 0x9, 0xc175, 0x7, 0xffff, 0xfdf9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x8000, 0x2, 0x0, 0x4, 0x1, 0x6, 0x4]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0xc, 0x2, 0x6c, 0xc, 0x60, 0x4, 0x48, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x7, 0x5, 0x4, 0x9, 0x7, 0x7]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x6, 0xe, 0x1, 0x6, 0x5, 0xe]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x6c, 0x1b]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x0, 0x8, 0xffff, 0x2, 0x10, 0x7]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x2}, {0x2, 0x4}, {0x3, 0x3}, {0x5, 0x4}, {0x5, 0x8}, {0x4, 0x4}, {0x2, 0x5}, {0x5, 0x7}, {0x5}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x11}, {0x3, 0x8}, {0x5, 0x9}, {0x6, 0x4}, {0x0, 0x6}, {0x1, 0x7}, {0x4, 0x9}, {0x7, 0x1}, {0x0, 0x7}, {0x6, 0x7}, {0x6, 0x7}, {0x7, 0x5}, {0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x7}, {0x2, 0x2}, {0x2, 0x6}, {0x5, 0x3}, {0x2, 0x7}, {0x1, 0x3}, {0x6, 0x2}, {0x0, 0xa}, {0x7, 0xa}, {0x2, 0x2}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x1}, {0x6, 0xa}, {0x6, 0x1}, {0x2, 0xa}, {0x4, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x7, 0x8}, {0x3}, {0x1, 0x5}, {0x3, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x5}, {0x4, 0x8}, {0x4, 0x9}, {0x6, 0x2}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x9}, {0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x6}, {0x2}, {0x6, 0x7}, {0x0, 0x1}, {0x7, 0xa}, {0x3, 0x8}, {0x4, 0x9}, {0x2, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x3}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0x8}, {0x3, 0x4}, {0x4, 0x5}, {0x5}, {0x7, 0x7}, {0x4, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdf1, 0x8, 0xb5d, 0xd, 0x3, 0xfff, 0x4da4]}}]}]}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x8}, {0x7, 0x2}, {0x3, 0x6}, {0x3, 0x8}, {0x3, 0xa}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x2, 0x9}, {0x0, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x1}, {0x4, 0x6}, {0x6, 0x3}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x2, 0xa}, {0x3, 0x8}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x2, 0xe2c, 0x5, 0x8, 0x4, 0x3, 0xfffe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd5a, 0x0, 0x5, 0x1, 0x7ff, 0x4, 0x8, 0x1]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x5, 0x81, 0x0, 0x5, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x3}, {0x3, 0x7}, {0x1}, {0x5, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fee, 0x2, 0x4, 0x2, 0x9, 0x7, 0x10]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2688, 0xc000, 0x1, 0x4, 0x1, 0xeadf, 0x10, 0x10]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x1, 0x1b, 0x1b, 0x9, 0x36, 0x12, 0x6c, 0x16, 0x1b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0xb, 0x1, 0x0, 0x1, 0x30, 0x28, 0x5, 0x9, 0x30, 0x1b, 0x9, 0xc, 0x4, 0x0, 0x0, 0x16, 0x48, 0x16, 0x16, 0x12, 0x24, 0x24, 0xc, 0x4, 0x36]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x9, 0xfe00, 0xec, 0x7, 0xfffa, 0xff]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x5}, {0x6, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x7, 0x8}, {0x5, 0x4}]}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}]}, {0x184, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x15c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x3ff, 0x8, 0x400, 0x9, 0x7, 0x9, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0xb, 0x1b, 0x3, 0x2, 0x1, 0x48, 0x1b, 0x30, 0x30, 0x2d, 0x18, 0x0, 0x6, 0x1b, 0x4, 0x16, 0x16, 0x60, 0x60, 0x1, 0x1b, 0x1, 0x24, 0x48, 0x12, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf92b, 0x5, 0xfffe, 0x8, 0x5, 0x5, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x3}, {0x6, 0x6}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x1}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x8}, {0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x6, 0x5}, {0x2, 0x9}, {0x3, 0x6}, {0x3, 0x4}, {0x7, 0x7}, {0x1, 0x7}, {0x2, 0x1}, {0x0, 0x8}, {0x3}, {0x1, 0xa}, {0x3, 0x5}, {0x0, 0x6}, {0x6, 0x5}, {0x7, 0xa}, {0x7, 0x9}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x5, 0x2}, {0x1}, {0x6, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0xa}]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x66f, 0x4, 0xeb77, 0x4f2e, 0x100, 0x4, 0xe3, 0x56f6]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x1, 0x0, 0x16, 0x24, 0x1b, 0x24, 0x16, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xa0, 0x1, 0x8, 0x1, 0x0, 0x6, 0xfff0]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x5, 0x18, 0x16, 0x5, 0x6, 0x1b, 0x5, 0x60, 0x5, 0x4, 0x12, 0x3, 0x5, 0xb, 0x60, 0x9, 0x2, 0x4]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x6c, 0x6, 0x0, 0x16, 0x3, 0x12, 0x6c, 0x6c, 0x2, 0x30, 0x6, 0x16, 0x36, 0xb, 0x6f, 0xc, 0x3, 0x1, 0x4, 0x6, 0x5, 0x12, 0x1b, 0x6c, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa81, 0x7, 0x101, 0x7, 0x1f30, 0xaa, 0x5, 0x5a]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xb, 0x61, 0x1, 0x3, 0x1, 0x8, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x2f0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf, 0x9, 0x8000, 0x6, 0x1, 0x0, 0xba]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7ff, 0x40, 0x4, 0x6, 0x6, 0x7f, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x9}, {0x5}, {0x6, 0x7}, {0x5, 0x1}, {0x3, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf02, 0x8, 0x9, 0x8, 0x9, 0xfff8, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x46, 0x5, 0x6c, 0x4, 0x2, 0x18, 0x18, 0x9, 0x5, 0x24, 0x60, 0x16, 0x36, 0x9, 0x36, 0xb, 0x6c, 0x16, 0x9, 0x16, 0x18]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x3}, {0x6, 0x6}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x6, 0x9}, {0x1, 0x6}, {0x1, 0x7}, {0x7, 0x1}, {0x5, 0x9}, {0x3}, {0x6, 0x6}, {0x5, 0x4}, {0x7, 0x8}, {0x7, 0x2}, {0x7}, {0x2, 0xa}, {0x3, 0x7}, {0x3, 0x6}, {0x1, 0x2}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff9, 0x2, 0x8001, 0x4, 0x8000, 0xcd, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x6, 0xd, 0x101, 0x8, 0x4, 0x19]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x4}, {0x3, 0x2}, {0x4}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x12}, {0x1, 0xa}, {0x3, 0x1}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x2, 0x8}, {0x4, 0x7}, {0x1, 0x3}, {0x2, 0x2}, {0x2, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x5}, {0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x0, 0xa}, {0x6, 0x5}, {0x5, 0x9}, {0x6, 0x6}, {0x7, 0x7}, {0x1, 0xa}, {0x6}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x3}, {0x5, 0x4}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x3, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {}, {0x2, 0x6}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0x6}, {0x2, 0x8}, {0x2, 0xa}, {0x1, 0x4}, {0x1, 0xa}, {}, {0x3, 0x8}, {0x0, 0x3}, {}, {0x1, 0x4}, {0x5, 0x6}, {0x6}, {0x3, 0x6}, {0x2, 0x1}, {0x4, 0x8}, {0x4, 0x1}, {0x1, 0x2}, {0x6, 0x7}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x9}, {0x3, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x5}, {0x5, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x4, 0x5}, {0x2, 0x2}, {0x2, 0x2}, {0x0, 0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x4, 0x3}, {0x2, 0x4}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x3}, {0x1}, {0x3, 0x7}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x6}, {0x7, 0x9}, {0x5, 0x9}, {0x0, 0x4}, {0x7, 0x1}, {0x5, 0x3}, {0x5}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0xe, 0x8, 0x8, 0xf9e1, 0x6, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x200, 0x6, 0x5, 0x9, 0x9, 0xfffa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0x3}, {0x3, 0x1}, {0x4, 0x6}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0xa}, {0x6, 0x8}, {0x2, 0x7}, {0x4, 0x9}, {0x4, 0x1}, {0x2, 0x8}, {0x4}, {0x7, 0x3}, {0x0, 0x7}, {0x5}, {0x6, 0x1}, {0x7, 0x4}, {}, {0x5, 0x4}, {0x4, 0x2}, {0x5}, {0x7}, {0x5, 0x3}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0xa}, {0x0, 0x9}, {0x4, 0x1}, {0x3, 0x6}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x9}, {0x6, 0x6}, {0x3, 0x8}, {0x3, 0x1}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x52, 0x9, 0x2, 0x9, 0xffff, 0x1, 0x8000, 0x62cd]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xec, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x36, 0x78, 0x5, 0x3, 0x12, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x1, 0xc000, 0x2d, 0x7, 0x8, 0x19, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0xd93b, 0x7, 0xb643, 0x9, 0x2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x661, 0x463, 0x3, 0x1109, 0x4, 0x68d5, 0x100, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xeaaf, 0x1000, 0x10, 0x0, 0x2, 0x101, 0x9]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x200, 0x7, 0xf, 0xc, 0x200, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xff, 0x0, 0xde07, 0x7, 0xfffe, 0xacf, 0xcf7f]}}, @NL80211_TXRATE_GI={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4bc, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0xc, 0x30, 0x48, 0x4, 0x16, 0x1b, 0x9, 0x2, 0x1, 0x36, 0xc, 0x3, 0x3, 0x1, 0x30, 0x6, 0x6, 0x1f, 0x6c, 0x2, 0x18, 0x18, 0x9, 0xc, 0x12, 0x1b, 0x24, 0x9, 0x3b, 0x7e]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x140, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0xd, 0x0, 0x5, 0x8001, 0x390, 0xfffd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x300, 0xe, 0x0, 0x7fff, 0x1, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb8cf, 0x4b5, 0x8, 0x5, 0x8, 0x43, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x7}, {0x6, 0x1}, {0x2}, {}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8e16, 0x0, 0x53, 0x7, 0x3, 0x80]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0xc, 0x2, 0x9, 0x1, 0x18, 0x16, 0x5, 0x5, 0x18, 0x6, 0x2, 0xb, 0x1, 0x16, 0x4, 0x48, 0x15, 0x48, 0x0, 0x8]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x8642, 0x3, 0x120, 0x4, 0x5, 0x1]}}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x1}, {0x7, 0x6}, {0x5, 0x6}, {0x7, 0x8}, {0x7, 0x9}, {0x0, 0xa}, {0x3, 0x5}, {0x1, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x4, 0x4}, {0x4, 0x1}, {0x1, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0xa}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x4, 0x4}, {0x5, 0x2}, {0x3, 0x5}, {0x1, 0x9}, {0x7, 0xa}, {0x5}, {0x2, 0xa}, {0x7, 0x1}, {0x7, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x4}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x7}, {0x4, 0x9}, {0x6, 0x3}, {0x2, 0xa}, {0x1, 0x9}, {0x3, 0x5}, {0x0, 0x8}, {0x3, 0x6}, {0x4, 0x2}, {0x6, 0x4}, {0x3}, {0x0, 0x8}, {0x4, 0x8}, {}, {0x1, 0x7}, {0x6, 0x4}, {0x7, 0x5}, {0x1, 0x7}, {0x7, 0x9}, {0x4, 0xa}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0x8}, {0x0, 0x7}, {0x0, 0x6}, {0x2, 0xa}, {0x3, 0x4}, {0x5, 0x7}, {0x3, 0x7}, {0x2}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x1}, {0x6, 0x7}, {0x6, 0x6}, {0x6, 0x5}, {0x5, 0x2}, {0x1, 0x7}, {0x2, 0x7}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x3}, {0x3, 0x4}, {0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x7, 0x8}, {0x7}, {0x0, 0x2}, {0x5, 0x7}, {0x5}, {0x6, 0xa}, {0x6, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x1}, {0x6, 0x8}, {0x2, 0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x9}, {0x6, 0x8}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0x1}, {0x5, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x3, 0xa}, {0x6, 0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x7, 0x4}, {0x6, 0x9}, {0x2, 0xa}, {0x3, 0x1}, {0x7, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffd}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x29c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x264, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xea83, 0xf, 0xb56, 0x5, 0x9, 0x6, 0x1, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x8, 0xd8b9, 0xc902, 0x400, 0x6071, 0x20, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x0, 0xb, 0x1b, 0x1, 0x4, 0x30, 0x3, 0x9, 0x18, 0x5, 0x36, 0x6, 0x1, 0x36, 0x18, 0xb, 0x16, 0x2, 0x1b, 0x36, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x1}, {0x2, 0x4}, {0x7, 0x2}, {0x2, 0x9}, {0x5, 0x4}, {0x4, 0x9}, {0x7, 0x1}, {0x6, 0x2}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0x5}, {0x0, 0x1}, {0x7, 0x3}, {0x4, 0x8}, {0x6}, {0x6, 0x4}, {0x7, 0x1}, {0x5, 0x4}, {0x4, 0x3}, {0x6, 0x7}, {0x3, 0x4}, {}, {0x1, 0xa}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x4, 0x3}, {0x1, 0x8}, {0x7, 0x2}, {0x1, 0x8}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x9}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0x7}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x7}, {0x0, 0xa}, {0x7, 0x8}, {0x5, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x7, 0x6}, {0x3, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x4}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x8}, {0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x6, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x5, 0x1}, {0x3, 0x3}, {0x4, 0xa}, {0x5, 0x8}, {0x3, 0x9}, {0x7, 0x4}, {0x5, 0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x5}, {}, {0x3, 0x7}, {0x1, 0x7}, {0x1, 0x5}, {0x1, 0x8}, {0x4, 0x3}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x6, 0x7}, {0x3}, {0x7, 0x3}, {0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x6, 0x5}, {0x3, 0x8}, {0x1, 0x8}, {0x6, 0x9}, {0x7, 0x9}, {0x0, 0x7}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0xa}, {0x7, 0x6}, {0x2, 0x1}, {0x6, 0x8}, {0x6, 0x1}, {0x6, 0x7}, {0x7, 0x5}, {0x5, 0x8}, {0x4, 0x7}, {0x4, 0x1}, {0x6, 0xa}, {0x4, 0x5}, {0x6, 0x3}, {}, {0x4, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x5, 0x7}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x9}, {0x6, 0x6}, {0x1, 0x8}, {0x6}, {0x6, 0x1}, {0x2}, {0x3, 0x9}, {0x0, 0x5}, {0x3, 0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x5}, {0x1, 0x3}, {0x4, 0x1}, {0x6, 0x3}, {0x5, 0x5}, {0x0, 0x3}, {0x7, 0x9}, {0x0, 0x1}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0x5}, {0x3, 0x7}, {0x2, 0x9}, {0x6}, {0x1, 0x5}, {0x4, 0x1}, {0x4, 0x4}, {0x2}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x7}, {0x7, 0xa}, {0x6, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x6, 0x8, 0x6, 0x5, 0x7, 0xe1af, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x80, 0x81fe, 0xfffa, 0xe, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x61f3, 0x2, 0x9, 0x81, 0xffff, 0x9, 0x7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x4}, {0x0, 0x2}, {0x1, 0xa}, {0x2, 0x1}, {0x5, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x2, 0x8}, {0x2, 0x8}, {0x0, 0x6}, {0x3, 0x4}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0xa}, {}, {0x1, 0x7}, {0x2}, {0x5, 0x6}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x200, 0x401, 0x850, 0x7ff, 0xfe00, 0x4a2, 0x1]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0xf, 0xb5, 0x7e42, 0x3, 0xc0, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9ea3, 0x2, 0x4, 0x1, 0x98c, 0x8, 0x1ff, 0x8]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb96cf7622116c816, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x7, 0x401, 0x9, 0xfff, 0x5, 0x7fff]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x3ec, 0x11d, 0x0, 0x1, [{0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4f, 0x951, 0x1, 0x6, 0x5, 0xf, 0x4, 0xfbc2]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x8001, 0x21, 0x896, 0xe73, 0x7, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x0, 0x1b, 0xb, 0xc, 0x24, 0x9, 0x48, 0x0, 0x60, 0x12, 0x60, 0x4, 0x56]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xf834, 0x1d8a, 0x6, 0x0, 0x6, 0x9, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x30, 0x30, 0x27, 0x786180f18b165b8b, 0x4, 0x3, 0x5]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x1}, {0x4, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1e2, 0x8, 0x1, 0x9, 0x7, 0xffff, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0xa}, {0x0, 0x9}, {0x1, 0x6}, {0x2, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x5}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9c, 0x2, 0x1e4, 0x1, 0xb4, 0x5, 0x1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xb7a, 0xfff8, 0xa, 0x4, 0x8, 0xffff, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x2}, {0x0, 0x5}, {0x6, 0xa}, {0x7, 0x9}, {0x6, 0x1d}, {0x1, 0x6}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0xa}, {0x4, 0x7}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x2, 0x3}, {0x7, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0x3}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x5}, {0x0, 0x7}, {0x2, 0x7}, {0x1, 0x6}, {0x4, 0x9}, {0x7, 0x9}, {0x1, 0x7}, {0x2, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x6, 0x4, 0x520, 0x4, 0xd, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x1e]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}]}, {0x240, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffc80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x9}, {0x3}, {0x6, 0xa}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x9}, {0x4, 0x8}, {0x4, 0x6}, {0x3, 0x6}, {}, {0x1, 0x8}, {0x3, 0x6}, {0x2, 0x4}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x5}, {0x1, 0x5}, {0x3, 0x4}, {0x7, 0xa}, {0x1, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x2}, {0x6}, {0x5, 0x1}, {0x3, 0x4}, {0x3, 0x7}, {0x4, 0x2}, {0x3, 0x1}, {0x7, 0x4}, {0x6, 0x6}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x9}, {0x3}, {0x4, 0x2}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x5}, {0x4}, {0x2, 0x1}, {0x7, 0xd}, {0x1}, {0x4, 0x5}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x2, 0x1}, {0x6, 0x3}, {}, {0x0, 0x7}, {0x1, 0x11}, {0x1, 0x4}, {0x4, 0x2}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x24, 0x1b, 0xb, 0x0, 0x30, 0x20, 0x24, 0xc, 0x9, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x7, 0x841b, 0x5, 0xfff5, 0xf906, 0x4]}}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0xa}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x9}, {0x6, 0x2}, {0x6, 0x3}, {0x1, 0x4}, {0x1, 0x8}, {0x5, 0x9}, {0x2}, {0x0, 0x7}, {0x6, 0x2}, {0x2, 0x6}, {0x4, 0x9}, {0x3, 0x2}, {}, {0x0, 0x7}, {0x7, 0x5}, {0x0, 0x5}, {0x3, 0x6}, {0x2, 0x2}, {0x1, 0x6}, {0x5, 0xa}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x3, 0x9}, {0x0, 0x1}, {0x6, 0x4}, {0x1, 0x8}, {0x3, 0xa}, {0x5, 0x4}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x1}, {}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x6, 0x3}, {0x7, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x5}, {0x0, 0x8}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0x5}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x2}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x385c, 0x0, 0x6, 0x2, 0x4, 0x8, 0x1, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x6d, 0x16, 0x18, 0x18, 0x5, 0x5, 0x1, 0x9, 0x18, 0x1b, 0x1, 0x4, 0x24, 0x35, 0x3]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x9, 0x2, 0x8, 0x1, 0xfff9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x9, 0x1ff, 0x6, 0xb, 0x3ad8, 0x4, 0x5]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x30, 0x60, 0x1b, 0x9, 0x12, 0x30, 0x1b, 0x9]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x5, 0x4, 0x2, 0x8d, 0x9735, 0xfffd, 0x1]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x3, 0x401, 0xa, 0x2, 0x3, 0x8]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x86a, 0x4, 0x1, 0x7, 0x9, 0x5, 0x4, 0x5]}}]}]}]}]}]}, 0x1384}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 500.275045ms ago: executing program 5 (id=1407): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 480.632319ms ago: executing program 1 (id=1408): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x402500, 0x14a) execveat$binfmt(r1, 0x0, &(0x7f0000000200)={[&(0x7f0000000080)='\x00', &(0x7f0000000100)='/dev/ptmx\x00', &(0x7f0000000140)='/dev/ptmx\x00', &(0x7f00000001c0)='/dev/ptmx\x00']}, &(0x7f00000002c0)={[&(0x7f0000000240)=']{%#-#.]\x00', &(0x7f0000000280)=',-!(\xea!$\xfb/:\']\r/\xbb:,\'\x00']}, 0x1000) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000180)) 319.936535ms ago: executing program 1 (id=1409): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000380)={0x1, 0x3, 0x1000, 0xeb, &(0x7f0000000140)="be9bb19c1b03c69f5f9b21545dbc3f2419a28ac5a5979c969a70fb88e7ba47b04d976b53bd844199c9d26879518b5d676605adbbf73f66e5d0ca35882e47d2981a6c61cc38ac8be29aae9fdfba9a01ef3c4d8c9b544adaea907144e46e901b0d178eccdab5b1798944c382bae0b34459bada9d34e39e32dea73a6ad228fa2317df80459d2aa4ff7497bf304bf9fa74c136212b166ac38e4bcd83c01a3e17540650a42a1c8d4113152a0d04ce6466255661842bb582ce3d64b82e8a9e517f7bcaeb6a5c6b30f576fa78bb5813d16ac93ac9ff408a7ebc46b82b8355efb39505fb4da80ef4e23b219c77e635", 0x0, 0x0, 0x0}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010300, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 301.591201ms ago: executing program 5 (id=1410): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000af40)=ANY=[@ANYBLOB="9c2c00004400010029bd7000040000000300000004004880812c01"], 0x2c9c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) syz_emit_ethernet(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb48, 0x9, 0x7, 0x2, 0x21}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f34, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x210000, 0x33}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r2, 0x0, 0x0, 0xffe0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x5, 0x2) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[]) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000102010200"], 0x44}, 0x1, 0x0, 0x0, 0x400c054}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee1768812003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x3, 0x36, 0x7, 0x2, 0x6, 0xf, 0x8, 0x0, 0x7, 0x6, 0x4, 0x15, 0xf3, 0x9}, 0xe) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000025c0), 0x8400, 0x0) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x128, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @mcast1, [0x0, 0xffffff00, 0x0, 0xff], [0xffffff00, 0x0, 0x0, 0xff000000], 'macvlan0\x00', 'veth0\x00', {0xff}, {0xff}, 0x67, 0x4, 0x4, 0xc}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d2], 0x2560, 0xfd, 0x1}}, @common=@hl={{0x28}, {0x0, 0xc}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x71, 0x6, 0xf3, 0x1, 0x7, @mcast1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, [0xff000000, 0xffffff00], [0x0, 0xff, 0xffffffff, 0xff], [0xff000000, 0x0, 0xffffff00], 0x2920, 0x822}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) 151.571121ms ago: executing program 6 (id=1411): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xf14, 0x105401) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) (async) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f00000000c0)) (async) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x5) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000140)='$\xa1!\x00', 0x4) (async) unshare(0x22000480) (async) futex(&(0x7f0000000180)=0x1, 0x80, 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x1, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x208800) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1d}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x34}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x20044081) (async) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000003c0)=0x8) epoll_pwait2(r2, &(0x7f0000000400)=[{}, {}], 0x2, &(0x7f0000000440), &(0x7f0000000480)={[0x78]}, 0x8) (async) ioctl$TCXONC(r2, 0x540a, 0x2) (async) write$char_usb(r2, &(0x7f00000004c0)="d036623e3590322963d64ef30e26094c3214a8669379ffb1fc912c8ea66926025dac4732d7da489d4d5310a2a1bbb1feca49f3f82e96feea204da0074dfff294f2f635a6535784ffc5617210db2d4455b07e604f6fc39f", 0x57) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r5, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x16}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000010}, 0x4081) (async, rerun: 64) syz_open_dev$radio(&(0x7f00000007c0), 0x1, 0x2) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='/dev/qrtr-tun\x00', &(0x7f0000000840)='wlan0\x00', 0x0) (async) r7 = syz_open_dev$vcsn(&(0x7f0000000880), 0x2, 0x0) (async, rerun: 32) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000008c0), 0x240) (rerun: 32) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000900)={0x8000, 0x0, 0x5, 0x0, 0x0, [{{r7}, 0x55f}, {{r4}, 0x4}, {{r8}, 0xb}, {{r2}, 0x80000001}, {{r4}, 0x1ff}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x644eedf611c2e471}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x80) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)='/dev/qrtr-tun\x00', 0x0) 147.227176ms ago: executing program 3 (id=1412): syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000240)={r3, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x204, 0x4, 0x18000, r4}, 0x10) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x49, 0x8, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x1, 0x20, 0x8, 0x3}}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="74010000120720002cbd7000ffdbdf251ead48f94e204e2309000000060000000600000050a199ec579247e2511a010000bc0d0000b50e0000070000005e05000089d26c6a25e57742fc1f6975ed9a7eea9c41034c1afae6efac5459eed762f05124c92b723cfcb3635e7be9326c5b95658b4b88aa49f6efcc8378c6c6b87bc40229f8ef2c6a49fb37a737c87de4477001d713f5cf8024c7b3ab98cafe26d69d9d8e4a82fcc0800385af9292e94216d1ce9515fa067e39d50bbfec5b9f55364866908535169576674595b27193b018bfbaf473cac44b842ca90ac4f73cdb8d86fc532fa70b6d18e73e51fe1df84c002e", @ANYRES32=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x804) 64.48371ms ago: executing program 1 (id=1413): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x67, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x0, 0x8, "08c82ce8da6e"}, {0x5, 0x2}, {0x0, 0xb, "7434954373561de584"}, {0x0, 0x2}, {0x2, 0x6, "cf0a0000"}, {0x6, 0x4, '\x00\x00'}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x5, "c8f469"}]}]}}}}}}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x1a, 0x37, 0xf9, 0x8, 0x19d2, 0x75a, 0xbd91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x4, 0xb0, 0x1, "", [{{0x9, 0x4, 0xc3, 0x4, 0x0, 0x2, 0x6, 0x0, 0x10}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 7 (id=1414): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x80000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) writev(r3, &(0x7f00000001c0), 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0xffffffffffffff86, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/134, 0x0, 0x2, 0x36}, @fda={0x66646185, 0x2, 0x1, 0x6}, @fda={0x66646185, 0x9, 0x0, 0x10}}, &(0x7f00000003c0)}}, @register_looper], 0x2f, 0x0, 0x0}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000300)={{0x7, 0x7}, {0x7, 0xa}, 0x7, 0x5}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r2, r1, 0x80000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) writev(r3, &(0x7f00000001c0), 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0xffffffffffffff86, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/134, 0x0, 0x2, 0x36}, @fda={0x66646185, 0x2, 0x1, 0x6}, @fda={0x66646185, 0x9, 0x0, 0x10}}, &(0x7f00000003c0)}}, @register_looper], 0x2f, 0x0, 0x0}) (async) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000300)={{0x7, 0x7}, {0x7, 0xa}, 0x7, 0x5}) (async) kernel console output (not intermixed with test programs): : 3 but max is 0 [ 328.480537][ T10] usb 1-1: config 5 has an invalid interface association descriptor of length 2, skipping [ 328.498721][ T10] usb 1-1: config 5 has no interface number 0 [ 328.511467][ T10] usb 1-1: config 5 interface 3 altsetting 78 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 328.537094][ T10] usb 1-1: config 5 interface 3 altsetting 78 endpoint 0x2 has invalid maxpacket 64, setting to 8 [ 328.554104][ T10] usb 1-1: config 5 interface 3 altsetting 78 has a duplicate endpoint with address 0x9, skipping [ 328.578489][ T10] usb 1-1: config 5 interface 3 altsetting 78 endpoint 0x8 has invalid maxpacket 64, setting to 8 [ 328.610140][ T10] usb 1-1: config 5 interface 3 has no altsetting 0 [ 328.628635][ T10] usb 1-1: New USB device found, idVendor=0b05, idProduct=1776, bcdDevice=a9.aa [ 328.650866][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.678476][ T9376] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 328.945014][ T10] usb 1-1: USB disconnect, device number 49 [ 329.127685][ T9386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.175582][ T9386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.730008][ T9395] netlink: 'syz.0.940': attribute type 1 has an invalid length. [ 329.790866][ T9395] bond5: entered promiscuous mode [ 329.806114][ T9395] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.815110][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 329.904907][ T9395] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.913693][ T9395] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 329.924410][ T9395] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 329.946404][ T9395] bond5: (slave vti0): making interface the new active one [ 329.954068][ T9395] vti0: entered promiscuous mode [ 329.970787][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 329.977689][ T9395] bond5: (slave vti0): Enslaving as an active interface with an up link [ 329.993335][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 330.023095][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=36.00 [ 330.044997][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.064252][ T24] usb 5-1: Product: syz [ 330.075826][ T24] usb 5-1: Manufacturer: syz [ 330.088875][ T24] usb 5-1: SerialNumber: syz [ 330.319831][ T24] ftdi_sio 5-1:6.0: FTDI USB Serial Device converter detected [ 330.329070][ T24] usb 5-1: Detected FT4232HA [ 330.350190][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 330.490600][ T10] usb 1-1: device descriptor read/64, error -71 [ 330.726356][ T24] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 330.740791][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 330.890464][ T10] usb 1-1: device descriptor read/64, error -71 [ 331.001134][ T10] usb usb1-port1: attempt power cycle [ 331.340225][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 331.359698][ T9412] IPv6: sit2: Disabled Multicast RS [ 331.366945][ T10] usb 1-1: device descriptor read/8, error -71 [ 331.374063][ T9412] sit2: entered allmulticast mode [ 331.621406][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 331.650722][ T10] usb 1-1: device descriptor read/8, error -71 [ 331.664296][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.684525][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.776588][ T10] usb usb1-port1: unable to enumerate USB device [ 331.910368][ T9434] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 332.043090][ T9435] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 332.094474][ T9434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.151514][ T9434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.390727][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.416061][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.499012][ T24] usb 5-1: USB disconnect, device number 60 [ 332.567944][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 332.606752][ T24] ftdi_sio 5-1:6.0: device disconnected [ 332.772526][ T9442] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 332.962131][ T9444] veth3: entered allmulticast mode [ 333.334689][ T9448] loop3: detected capacity change from 0 to 7 [ 333.366326][ T9448] Dev loop3: unable to read RDB block 7 [ 333.383845][ T9448] loop3: unable to read partition table [ 333.397494][ T9448] loop3: partition table beyond EOD, truncated [ 333.434690][ T9448] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 333.476484][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.476982][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.669532][ T9456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.959'. [ 334.892298][ T9470] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 335.380707][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 335.470347][ T1094] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.488613][ T1094] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.520648][ T1094] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.538098][ T1094] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.553569][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.580562][ T10] usb 4-1: config 0 has no interface number 0 [ 335.594056][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.609241][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.629622][ T10] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.644402][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 335.655424][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.671725][ T10] usb 4-1: config 0 descriptor?? [ 336.150339][ T9496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.968'. [ 336.332275][ T9502] kAFS: unable to lookup cell '' [ 337.894896][ T9518] bridge_slave_0: left allmulticast mode [ 337.910351][ T9518] bridge_slave_0: left promiscuous mode [ 337.928813][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.965233][ T9518] bridge_slave_1: left allmulticast mode [ 338.001397][ T9518] bridge_slave_1: left promiscuous mode [ 338.023543][ T9519] SET target dimension over the limit! [ 338.057389][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.106749][ T9518] bond0: (slave bond_slave_0): Releasing backup interface [ 338.167174][ T9518] bond0: (slave bond_slave_1): Releasing backup interface [ 338.293012][ T9518] team0: Port device team_slave_1 removed [ 338.316145][ T9518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.335963][ T9518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.381982][ T9518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.414188][ T9518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.446155][ T9518] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 338.535380][ T9519] team0: Port device xfrm0 added [ 338.573023][ T9520] tipc: Started in network mode [ 338.596447][ T9520] tipc: Node identity daf1ac826e6b, cluster identity 4711 [ 338.636268][ T9520] tipc: Enabled bearer , priority 0 [ 338.672718][ T10] usbhid 4-1:0.1: can't add hid device: -71 [ 338.702613][ T10] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 338.780121][ T10] usb 4-1: USB disconnect, device number 43 [ 339.315380][ T9536] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 339.461019][ T9536] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 339.523523][ T9536] netlink: 'syz.5.979': attribute type 10 has an invalid length. [ 339.576533][ T9536] netlink: 40 bytes leftover after parsing attributes in process `syz.5.979'. [ 339.745068][ T9536] team0: entered promiscuous mode [ 339.758481][ T9536] team_slave_0: entered promiscuous mode [ 339.770965][ T9536] team_slave_1: entered promiscuous mode [ 339.778034][ T9536] team0: entered allmulticast mode [ 339.790438][ T9536] team_slave_0: entered allmulticast mode [ 339.806546][ T9536] team_slave_1: entered allmulticast mode [ 339.826281][ T9536] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.843353][ T9536] bridge0: port 3(team0) entered blocking state [ 339.859583][ T9536] bridge0: port 3(team0) entered disabled state [ 340.066734][ T9559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.091429][ T9559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.208497][ T9565] netlink: 52 bytes leftover after parsing attributes in process `syz.0.986'. [ 340.228586][ T5706] tipc: Node number set to 3030035586 [ 340.681634][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.716718][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.788248][ T9582] x_tables: duplicate underflow at hook 3 [ 340.800422][ T5706] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 342.648704][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.667741][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.685704][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.704676][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.728535][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.744668][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.390577][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.5.999'. [ 343.424622][ T9611] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 343.490827][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.518778][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.712291][ T9613] input: syz1 as /devices/virtual/input/input27 [ 343.740471][ T9619] binder_alloc: 9618: binder_alloc_buf, no vma [ 344.030235][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 344.200341][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 344.212209][ T24] usb 4-1: config 9 has an invalid interface number: 122 but max is 0 [ 344.225265][ T24] usb 4-1: config 9 has an invalid descriptor of length 170, skipping remainder of the config [ 344.239289][ T24] usb 4-1: config 9 has no interface number 0 [ 344.245920][ T24] usb 4-1: config 9 interface 122 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.261297][ T24] usb 4-1: config 9 interface 122 has no altsetting 0 [ 344.273295][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=f7.cd [ 344.284001][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.292530][ T24] usb 4-1: Product: syz [ 344.297407][ T24] usb 4-1: Manufacturer: syz [ 344.302599][ T24] usb 4-1: SerialNumber: syz [ 344.447665][ T9627] FAULT_INJECTION: forcing a failure. [ 344.447665][ T9627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.461485][ T9627] CPU: 1 UID: 0 PID: 9627 Comm: syz.5.1005 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.461516][ T9627] Tainted: [L]=SOFTLOCKUP [ 344.461528][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.461539][ T9627] Call Trace: [ 344.461547][ T9627] [ 344.461555][ T9627] dump_stack_lvl+0xe8/0x150 [ 344.461589][ T9627] should_fail_ex+0x40c/0x560 [ 344.461617][ T9627] _copy_from_user+0x2d/0xb0 [ 344.461646][ T9627] ___sys_sendmsg+0x1c6/0x360 [ 344.461667][ T9627] ? __lock_acquire+0x683/0x2cf0 [ 344.461696][ T9627] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.461752][ T9627] ? __fget_files+0x2a/0x420 [ 344.461776][ T9627] ? __fget_files+0x3a2/0x420 [ 344.461811][ T9627] __x64_sys_sendmsg+0x1b1/0x290 [ 344.461835][ T9627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.461874][ T9627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.461895][ T9627] do_syscall_64+0x174/0x580 [ 344.461920][ T9627] ? trace_irq_disable+0x3b/0x140 [ 344.461942][ T9627] ? clear_bhb_loop+0x70/0xc0 [ 344.461966][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.461984][ T9627] RIP: 0033:0x7f23eed9e0d9 [ 344.462003][ T9627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.462019][ T9627] RSP: 002b:00007f23efc9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.462040][ T9627] RAX: ffffffffffffffda RBX: 00007f23ef025fa0 RCX: 00007f23eed9e0d9 [ 344.462054][ T9627] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 344.462066][ T9627] RBP: 00007f23efc9f090 R08: 0000000000000000 R09: 0000000000000000 [ 344.462078][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.462089][ T9627] R13: 00007f23ef026038 R14: 00007f23ef025fa0 R15: 00007f23ef14fa48 [ 344.462120][ T9627] [ 344.832317][ T9629] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1006'. [ 345.225483][ T9649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.246246][ T9649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.043293][ T9657] fuse: Unknown parameter 'use' [ 346.603034][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.612247][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.622422][ T9663] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 346.636982][ T9663] fuse: Bad value for 'fd' [ 346.700673][ T9663] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1016'. [ 346.731295][ T9663] netlink: 'syz.5.1016': attribute type 1 has an invalid length. [ 346.745833][ T24] usbhid 4-1:9.122: couldn't find an input interrupt endpoint [ 346.771219][ T24] usb 4-1: USB disconnect, device number 44 [ 346.918881][ T9668] pimreg: entered allmulticast mode [ 346.929057][ T9668] pimreg: left allmulticast mode [ 347.144774][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.155608][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.170004][ T9680] netlink: 'syz.1.1020': attribute type 11 has an invalid length. [ 347.254858][ T9688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.267765][ T9688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.343394][ T9688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.354388][ T9688] bond0: (slave bond1): Enslaving as an active interface with an up link [ 347.763113][ T9694] loop8: detected capacity change from 0 to 7 [ 347.788743][ T9694] Dev loop8: unable to read RDB block 7 [ 347.800486][ T9694] loop8: unable to read partition table [ 347.806524][ T9694] loop8: partition table beyond EOD, truncated [ 347.818139][ T9694] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 348.008332][ T9698] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1025'. [ 348.035084][ T9698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.054270][ T9698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.064906][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.080912][ T9698] bond0 (unregistering): (slave bond1): Releasing backup interface [ 348.089871][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.104187][ T9698] bond0 (unregistering): Released all slaves [ 349.699307][ T9725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.742724][ T9725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.930578][ T5706] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 350.242890][ T9734] loop8: detected capacity change from 0 to 7 [ 350.270814][ T9734] Dev loop8: unable to read RDB block 7 [ 350.284791][ T9734] loop8: unable to read partition table [ 350.302075][ T9734] loop8: partition table beyond EOD, truncated [ 350.317230][ T9734] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 350.765810][ T9750] Invalid logical block size (33554432) [ 350.858549][ T9754] x_tables: duplicate underflow at hook 3 [ 351.380224][ T8803] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 351.554183][ T8803] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 351.578339][ T8803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.592638][ T8803] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 351.612006][ T8803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.631945][ T9777] loop8: detected capacity change from 0 to 7 [ 351.646907][ T8803] usb 4-1: config 0 descriptor?? [ 351.649900][ T9777] Dev loop8: unable to read RDB block 7 [ 351.659849][ T9777] loop8: unable to read partition table [ 351.662485][ T9772] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.666637][ T9777] loop8: partition table beyond EOD, truncated [ 351.689199][ T9777] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 351.933992][ T9785] netlink: 'syz.5.1050': attribute type 22 has an invalid length. [ 351.948658][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1050'. [ 351.974457][ T9785] netlink: 'syz.5.1050': attribute type 22 has an invalid length. [ 351.985773][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1050'. [ 351.995139][ T8065] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.005192][ T8065] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.015825][ T8065] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.037866][ T8065] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.095001][ T9791] Invalid logical block size (50331648) [ 352.117189][ T8803] hid_parser_main: 28 callbacks suppressed [ 352.117249][ T8803] lenovo 0003:17EF:6062.000A: unknown main item tag 0x2 [ 352.158468][ T8803] lenovo 0003:17EF:6062.000A: unknown main item tag 0x3 [ 352.173882][ T8803] lenovo 0003:17EF:6062.000A: unknown main item tag 0x1 [ 352.194283][ T8803] lenovo 0003:17EF:6062.000A: unknown main item tag 0x2 [ 352.209722][ T8803] lenovo 0003:17EF:6062.000A: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0 [ 352.211641][ T9793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.259148][ T9793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.316755][ T24] usb 4-1: USB disconnect, device number 45 [ 352.670424][ T8803] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 352.822825][ T8803] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 352.838747][ T8803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.017241][ T9805] trusted_key: syz.5.1056 sent an empty control message without MSG_MORE. [ 353.208993][ T30] audit: type=1326 audit(1786144273.662:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.1056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23eed9e0d9 code=0x7ffc0000 [ 353.268321][ T30] audit: type=1326 audit(1786144273.712:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.1056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23eed9e0d9 code=0x7ffc0000 [ 353.317362][ T8803] wacom 0003:056A:033B.000B: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 353.359529][ T8803] wacom 0003:056A:033B.000B: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 353.401738][ T8803] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.000B/input/input28 [ 353.964686][ T8803] usb 1-1: USB disconnect, device number 55 [ 354.358031][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.391798][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.612921][ T9822] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 354.958950][ T9829] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1063'. [ 354.989214][ T9829] openvswitch: netlink: Message has 8 unknown bytes. [ 355.326158][ T9836] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 355.395206][ T9836] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 355.460478][ T9844] syzkaller1: entered promiscuous mode [ 355.506099][ T9844] syzkaller1: entered allmulticast mode [ 355.985846][ T9856] tipc: Failed to remove unknown binding: 66,0,0/0:4043331290/4043331291 [ 356.003120][ T9857] tipc: Failed to remove unknown binding: 66,0,0/0:839807482/839807484 [ 356.013022][ T9856] tipc: Failed to remove unknown binding: 66,0,0/0:4043331290/4043331291 [ 356.850434][ T8801] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 357.020166][ T8801] usb 4-1: Using ep0 maxpacket: 16 [ 357.036488][ T8801] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 357.061048][ T8801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.069219][ T8801] usb 4-1: Product: syz [ 357.080141][ T8801] usb 4-1: Manufacturer: syz [ 357.086517][ T8801] usb 4-1: SerialNumber: syz [ 357.103276][ T8801] usb 4-1: config 0 descriptor?? [ 357.124044][ T8801] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 358.030681][ T8801] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 358.118752][ T24] usb 4-1: USB disconnect, device number 46 [ 358.520746][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 358.683797][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 358.701914][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50610, setting to 1024 [ 358.717348][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 358.735813][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.746154][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.757795][ T24] usb 4-1: config 0 descriptor?? [ 358.764683][ T9875] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 358.972992][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.013860][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.039171][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.048716][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 359.056810][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 359.078959][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.099403][ T24] usb 4-1: USB disconnect, device number 47 [ 359.108907][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.143070][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.161381][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.176445][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.193422][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.207984][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1079'. [ 359.209560][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.247221][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.258174][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.376804][ T9897] loop8: detected capacity change from 0 to 7 [ 359.384961][ T9897] Dev loop8: unable to read RDB block 7 [ 359.391777][ T9897] loop8: unable to read partition table [ 359.397816][ T9897] loop8: partition table beyond EOD, truncated [ 359.411130][ T9897] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 359.437123][ T4977] Dev loop8: unable to read RDB block 7 [ 359.443834][ T4977] loop8: unable to read partition table [ 359.449773][ T4977] loop8: partition table beyond EOD, truncated [ 360.247106][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.264714][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.273674][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.287321][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.295795][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.829040][ T9944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.872917][ T9944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.899699][ T9951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.918160][ T9951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.972833][ T9938] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.987698][ T9938] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.002447][ T9938] bridge_slave_0: entered allmulticast mode [ 361.022325][ T9938] bridge_slave_0: entered promiscuous mode [ 361.033412][ T9938] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.050646][ T9938] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.070597][ T9938] bridge_slave_1: entered allmulticast mode [ 361.077955][ T9938] bridge_slave_1: entered promiscuous mode [ 361.122264][ T9938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.135767][ T9938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.182816][ T9938] team0: Port device team_slave_0 added [ 361.192304][ T9938] team0: Port device team_slave_1 added [ 361.232944][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.239951][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.266911][ T9938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.280275][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.288143][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.317152][ T9938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.395789][ T9938] hsr_slave_0: entered promiscuous mode [ 361.403268][ T9938] hsr_slave_1: entered promiscuous mode [ 361.409821][ T9938] debugfs: 'hsr0' already exists in 'hsr' [ 361.416800][ T9938] Cannot create hsr debugfs directory [ 361.591125][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.611734][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.633088][ T9953] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 361.688732][ T9953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.743231][ T9954] bond1: (slave geneve2): making interface the new active one [ 361.765477][ T9954] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 361.860751][ T8078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.880596][ T8078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.955792][ T9938] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 361.969820][ T9938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.978826][ T9938] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 361.991814][ T9938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.001157][ T8078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 362.026003][ T9938] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 362.040543][ T9938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.048860][ T9938] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 362.061383][ T9938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.150320][ T8039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 362.218365][ T9938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.247225][ T9938] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.264081][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.271365][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.294023][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.301311][ T7949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.340566][ T5613] Bluetooth: hci5: command tx timeout [ 362.449708][ T9963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.479071][ T9963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.502808][ T9963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.521315][ T9963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.523812][ T9938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.609347][ T9938] veth0_vlan: entered promiscuous mode [ 362.629966][ T9938] veth1_vlan: entered promiscuous mode [ 362.713572][ T9938] veth0_macvtap: entered promiscuous mode [ 362.747838][ T9938] veth1_macvtap: entered promiscuous mode [ 362.806690][ T9938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.849359][ T9938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.911649][ T7949] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.939989][ T7949] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.986152][ T1094] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.065460][ T1094] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.213244][ T7949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.226859][ T7949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.299572][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.316638][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.326180][ T9971] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 363.489364][ T9973] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 363.503969][ T9973] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 363.513932][ T9973] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 364.301004][ T9992] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1101'. [ 364.422165][ T5613] Bluetooth: hci5: command tx timeout [ 364.551687][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.574917][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.606064][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.623824][ T8801] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 364.624743][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.805387][ T8801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.829645][ T8801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 364.855984][ T8801] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 364.879193][ T8801] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.910648][ T8801] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 364.930312][ T8801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.957056][ T8801] usb 4-1: config 0 descriptor?? [ 364.973152][ T8801] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 364.991985][ T8801] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 365.059245][ T30] audit: type=1326 audit(1786144285.512:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66d79e0d9 code=0x7ffc0000 [ 365.113316][ T30] audit: type=1326 audit(1786144285.542:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66d79e0d9 code=0x7ffc0000 [ 365.115169][T10001] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1104'. [ 365.160442][ T30] audit: type=1326 audit(1786144285.542:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb66d79f947 code=0x7ffc0000 [ 365.189231][ T30] audit: type=1326 audit(1786144285.542:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb66d75e90e code=0x7ffc0000 [ 365.236205][ T8801] usb 4-1: USB disconnect, device number 48 [ 365.240182][ T30] audit: type=1326 audit(1786144285.542:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb66d75e90e code=0x7ffc0000 [ 365.287212][ T30] audit: type=1326 audit(1786144285.542:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb66d75e90e code=0x7ffc0000 [ 365.315689][ T30] audit: type=1326 audit(1786144285.542:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb66d75e90e code=0x7ffc0000 [ 365.356812][ T30] audit: type=1326 audit(1786144285.542:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66d79e0d9 code=0x7ffc0000 [ 365.385383][ T30] audit: type=1326 audit(1786144285.542:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66d79e0d9 code=0x7ffc0000 [ 365.453092][ T30] audit: type=1326 audit(1786144285.552:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb66d79e0d9 code=0x7ffc0000 [ 365.560507][ T8785] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 365.710417][ T8785] usb 7-1: Using ep0 maxpacket: 32 [ 365.722270][ T8785] usb 7-1: unable to get BOS descriptor or descriptor too short [ 365.733523][ T8785] usb 7-1: config 251 has an invalid interface number: 87 but max is 2 [ 365.748319][ T8785] usb 7-1: config 251 has an invalid interface number: 99 but max is 2 [ 365.758570][ T8785] usb 7-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 365.769394][ T8785] usb 7-1: config 251 has 2 interfaces, different from the descriptor's value: 3 [ 365.779817][ T8785] usb 7-1: config 251 has no interface number 0 [ 365.786621][ T8785] usb 7-1: config 251 has no interface number 1 [ 365.830377][ T8785] usb 7-1: config 251 interface 87 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 365.862212][ T8785] usb 7-1: config 251 interface 87 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 365.887777][ T8785] usb 7-1: config 251 interface 87 altsetting 14 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 365.903876][ T8785] usb 7-1: config 251 interface 87 has no altsetting 0 [ 365.917388][ T8785] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=9d.e7 [ 365.927794][ T8785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.936833][ T8785] usb 7-1: Product: syz [ 365.942582][ T8785] usb 7-1: Manufacturer: syz [ 365.947300][ T8785] usb 7-1: SerialNumber: syz [ 365.958206][T10001] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 366.200628][T10017] binder: 10016:10017 ioctl c0306201 200000000440 returned -14 [ 366.237498][T10020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.267822][T10020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.344748][ T8785] usb 7-1: USB disconnect, device number 2 [ 366.429203][ T7663] udevd[7663]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:251.87/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.511015][ T5613] Bluetooth: hci5: command tx timeout [ 367.251366][T10042] syzkaller0: entered promiscuous mode [ 367.260842][T10042] syzkaller0: entered allmulticast mode [ 367.783299][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1122'. [ 367.818929][T10057] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 367.842250][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 367.859825][T10057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1122'. [ 367.926839][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1121'. [ 368.099636][T10067] sctp: [Deprecated]: syz.5.1124 (pid 10067) Use of int in max_burst socket option. [ 368.099636][T10067] Use struct sctp_assoc_value instead [ 368.422004][T10071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.436764][T10071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.574671][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 368.590372][ T5613] Bluetooth: hci5: command tx timeout [ 368.655508][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.663261][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.133436][ T5613] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 369.290400][ T8803] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 369.325993][T10087] Invalid logical block size (218103808) [ 369.450228][ T8803] usb 7-1: Using ep0 maxpacket: 32 [ 369.467127][ T8803] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 369.488694][ T8803] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 369.509248][ T8803] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 369.531034][ T8803] usb 7-1: config 1 has no interface number 0 [ 369.551243][ T8803] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.570954][ T8803] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 369.591125][ T8803] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 369.607363][ T8803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.642146][ T8803] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 369.689799][T10093] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1131'. [ 369.713229][T10093] 0X: renamed from batadv0 [ 369.759270][T10093] 0X: entered allmulticast mode [ 369.833045][T10093] 8021q: adding VLAN 0 to HW filter on device 60X [ 369.861403][T10093] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 369.990603][T10084] dvmrp8: entered allmulticast mode [ 370.042224][T10114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.144662][T10114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.197794][T10084] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1128'. [ 370.242644][ T5610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.269704][ T5610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.280501][ T5610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.292515][ T5610] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.305165][ T5610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.309554][T10119] loop8: detected capacity change from 0 to 7 [ 370.334673][ T8803] snd_usb_pod 7-1:1.1: set_interface failed [ 370.366926][T10119] Dev loop8: unable to read RDB block 7 [ 370.375467][ T8803] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 370.387471][T10119] loop8: unable to read partition table [ 370.400848][ T8803] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 370.409767][T10119] loop8: partition table beyond EOD, truncated [ 370.435466][ T8803] usb 7-1: USB disconnect, device number 3 [ 370.445237][T10119] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 370.536379][T10125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.569866][T10125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.679774][T10125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.719017][T10125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.073686][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.084852][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.101179][T10121] bridge_slave_0: entered allmulticast mode [ 371.118287][T10121] bridge_slave_0: entered promiscuous mode [ 371.129341][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.136831][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.140423][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 371.144975][T10121] bridge_slave_1: entered allmulticast mode [ 371.161243][T10121] bridge_slave_1: entered promiscuous mode [ 371.219594][T10121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.234497][T10121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.281803][T10121] team0: Port device team_slave_0 added [ 371.292216][T10121] team0: Port device team_slave_1 added [ 371.336736][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 371.361932][T10121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.375435][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.378068][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.418344][ T24] usb 4-1: Product: syz [ 371.430715][ T24] usb 4-1: Manufacturer: syz [ 371.443327][T10121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.453952][ T24] usb 4-1: SerialNumber: syz [ 371.464578][T10121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.480023][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'. [ 371.488881][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.598115][T10121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.769704][T10121] hsr_slave_0: entered promiscuous mode [ 371.781314][T10121] hsr_slave_1: entered promiscuous mode [ 371.803003][T10121] debugfs: 'hsr0' already exists in 'hsr' [ 371.814939][T10121] Cannot create hsr debugfs directory [ 371.827843][T10165] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1145'. [ 371.872996][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 371.931158][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 371.991368][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1146'. [ 372.057034][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1145'. [ 372.127122][T10169] bridge_slave_1: left allmulticast mode [ 372.141317][T10169] bridge_slave_1: left promiscuous mode [ 372.153464][T10169] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.216427][T10169] bridge_slave_0: left allmulticast mode [ 372.225731][T10169] bridge_slave_0: left promiscuous mode [ 372.238618][T10169] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.423502][ T5613] Bluetooth: hci6: command tx timeout [ 372.672751][T10175] x_tables: unsorted entry at hook 2 [ 373.009779][T10121] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 373.036903][T10121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.054946][T10121] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 373.089388][T10121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.107451][T10121] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 373.130467][ T8801] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 373.154108][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 373.154603][T10121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.197924][T10121] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 373.218893][T10121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.310799][ T8801] usb 7-1: device descriptor read/64, error -71 [ 373.466920][T10121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.506495][T10121] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.527159][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.534457][ T8039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.555036][ T8801] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 373.585530][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.592803][ T7949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.701704][ T8801] usb 7-1: device descriptor read/64, error -71 [ 373.755295][T10121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.765464][T10194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.788040][T10194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.824463][ T8801] usb usb7-port1: attempt power cycle [ 373.864499][T10121] veth0_vlan: entered promiscuous mode [ 373.882691][T10121] veth1_vlan: entered promiscuous mode [ 373.942378][T10121] veth0_macvtap: entered promiscuous mode [ 373.954724][T10121] veth1_macvtap: entered promiscuous mode [ 373.991930][T10121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.006024][T10198] CUSE: unknown device info "n|zQC*" [ 374.012935][T10198] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 374.016138][T10121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.033200][T10198] CUSE: unknown device info "" [ 374.039754][T10198] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 374.054568][T10198] CUSE: DEVNAME unspecified [ 374.062197][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.071722][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.142074][ T7949] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.169915][ T7949] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.173448][ T8801] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 374.193772][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 374.221208][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 374.234361][ T8801] usb 7-1: device descriptor read/8, error -71 [ 374.253657][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 374.278340][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 374.290382][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 374.304492][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.316785][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.335971][ T24] usb 4-1: USB disconnect, device number 49 [ 374.408222][ T8039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.427624][ T8039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.433751][T10203] netlink: 'syz.5.1155': attribute type 12 has an invalid length. [ 374.451051][T10203] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1155'. [ 374.478492][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.491395][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.502195][ T8801] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 374.502368][ T5613] Bluetooth: hci6: command tx timeout [ 374.534926][T10205] program syz.1.1156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.551747][ T8801] usb 7-1: device descriptor read/8, error -71 [ 374.560840][T10205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.571901][T10205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.671991][ T8801] usb usb7-port1: unable to enumerate USB device [ 374.840424][ T8800] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 375.001259][ T8800] usb 8-1: Using ep0 maxpacket: 8 [ 375.015273][ T8800] usb 8-1: config 1 interface 0 has no altsetting 0 [ 375.043600][ T8800] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 375.064202][ T8800] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.084223][ T8800] usb 8-1: Product: 鏲꾠즂ꇜ볫疾럜棧㺇倄瑌醷游㌗蚷嚽몔훨ᛋ钟ꀰ⿘靇졾뀦祋䤃᭡騮ጛㄌ悝ຈ糉脑귩렯ꗄᾰ냙㪜裉䁭⪟㌁괪ↅ꼶媛鿸᩻繓芻ᯘ痑.᪯綺벱ንሔి⥈瓾⁡៯ 詅蹥섦轚㭾꽃你都뇸铮騂䕚蔧댦ޖ  [ 375.127358][ T8800] usb 8-1: Manufacturer: 뤧관屪ᇅ岓䴘투桦燫팀ዑ뚙暂Ω럭騠㠻⥣ꋧ騻믮犦ዽ俇ܴ谊魴⿻ṱ⹞ᯁ儞땑婄틝ꢛ딹畢젦ꥎ셸ᨡ泈贒튀꼜⠔勷欈୏⩠䃭勢잃푦蓧檈﹘뵭䷵繪 [ 375.161285][ T8800] usb 8-1: SerialNumber: Э [ 375.239487][T10216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.383794][ T8800] usblp0: Disabling reads from problematic bidirectional printer [ 375.419409][ T8800] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 5 proto 1 vid 0x03F0 pid 0x0004 [ 375.439166][ T8800] usb 8-1: USB disconnect, device number 2 [ 375.464367][ T8800] usblp0: removed [ 375.700864][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 375.977838][T10223] ALSA: mixer_oss: invalid OSS volume 'u' [ 376.089105][T10227] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1161'. [ 376.366210][T10235] loop8: detected capacity change from 0 to 7 [ 376.398882][T10235] Dev loop8: unable to read RDB block 7 [ 376.418925][T10235] loop8: unable to read partition table [ 376.436004][T10235] loop8: partition table beyond EOD, truncated [ 376.453978][T10235] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 376.575535][T10242] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 376.584587][ T5610] Bluetooth: hci6: command tx timeout [ 376.653003][T10242] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 376.946261][T10242] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1165'. [ 377.390211][ T5706] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 377.550262][ T5706] usb 8-1: device descriptor read/64, error -71 [ 377.598835][T10264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1170'. [ 377.668958][T10264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.822436][ T5706] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 377.980239][ T8798] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 377.990307][ T5706] usb 8-1: device descriptor read/64, error -71 [ 378.120407][ T5706] usb usb8-port1: attempt power cycle [ 378.179540][ T8798] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 378.207700][ T8798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.242689][ T8798] usb 4-1: Product: syz [ 378.249006][ T8798] usb 4-1: Manufacturer: syz [ 378.253826][ T8800] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 378.271278][ T8798] usb 4-1: SerialNumber: syz [ 378.286060][ T8798] usb 4-1: config 0 descriptor?? [ 378.372666][T10273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.387078][T10273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.423183][T10273] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 378.424443][ T8800] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 378.443687][ T8800] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 378.453129][ T8800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.490305][ T5706] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 378.490577][ T8800] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 378.518365][ T8798] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 378.520958][ T5706] usb 8-1: device descriptor read/8, error -71 [ 378.617244][T10276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.626326][T10276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.660596][ T5610] Bluetooth: hci6: command tx timeout [ 378.719205][ T8798] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 378.742546][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.749112][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.763167][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1172'. [ 378.771512][ T5706] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 378.800818][ T5706] usb 8-1: device descriptor read/8, error -71 [ 378.921924][ T5706] usb usb8-port1: unable to enumerate USB device [ 379.373584][T10297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.399778][T10297] bond0: (slave bond2): Enslaving as an active interface with an up link [ 379.545309][ T8800] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 379.577076][ T8800] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 379.610632][ T8800] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 379.650377][ T8800] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 379.677879][ T8800] usb 7-1: USB disconnect, device number 8 [ 379.990387][T10312] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 379.999413][T10312] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 380.039405][T10312] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.054415][T10312] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 380.163262][T10312] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.188960][T10312] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 380.277570][T10312] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 380.307947][T10312] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 380.339872][T10312] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.357610][T10312] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 380.386649][T10312] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 380.415147][T10312] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 380.488570][T10312] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 380.539575][T10312] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 380.549163][T10312] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 380.567776][T10312] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 380.611158][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.636468][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.685485][ T8800] usb 4-1: USB disconnect, device number 50 [ 380.694068][T10311] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1184'. [ 381.190427][ T8800] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 381.326748][T10336] IPv6: addrconf: prefix option has invalid lifetime [ 381.327976][T10337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.361811][T10336] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1192'. [ 381.371402][ T8800] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.371433][ T8800] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 381.371486][ T8800] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 381.371510][ T8800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.375460][T10337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.421611][ T8800] usb 4-1: config 0 descriptor?? [ 381.439585][ T8800] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 381.447976][ T8800] dvb-usb: bulk message failed: -22 (3/0) [ 381.472176][ T8800] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 381.485508][ T8800] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 381.493438][ T8800] usb 4-1: media controller created [ 381.506227][ T8800] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.544439][ T8800] dvb-usb: bulk message failed: -22 (6/0) [ 381.551182][ T8800] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 381.564386][ T8800] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 381.631659][ T8800] dvb-usb: schedule remote query interval to 150 msecs. [ 381.668750][ T8800] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 381.833513][ T8800] dvb-usb: bulk message failed: -22 (1/0) [ 381.875214][ T8800] dvb-usb: error while querying for an remote control event. [ 382.017072][T10344] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.020610][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 382.024839][T10344] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.080161][ T8801] dvb-usb: bulk message failed: -22 (1/0) [ 382.086530][ T8801] dvb-usb: error while querying for an remote control event. [ 382.100680][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 382.180450][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 382.271685][ T8801] dvb-usb: bulk message failed: -22 (1/0) [ 382.284964][T10344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.293601][ T8801] dvb-usb: error while querying for an remote control event. [ 382.337653][T10344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.350183][ T5610] Bluetooth: hci4: command 0x0406 tx timeout [ 382.420237][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 382.427620][ T5610] Bluetooth: hci5: command 0x0c1a tx timeout [ 382.481265][ T8801] dvb-usb: bulk message failed: -22 (1/0) [ 382.496070][ T8801] dvb-usb: error while querying for an remote control event. [ 382.582031][ T5610] Bluetooth: hci6: command 0x0c1a tx timeout [ 382.672667][ T36] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.691279][ T8803] dvb-usb: bulk message failed: -22 (1/0) [ 382.698573][ T8803] dvb-usb: error while querying for an remote control event. [ 382.716673][ T36] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.736159][ T36] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.765157][ T24] usb 4-1: USB disconnect, device number 51 [ 382.783734][ T36] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.837562][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 383.716132][T10401] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1210'. [ 383.943638][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.988213][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.032078][ T5706] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 384.100711][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 384.182542][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 384.190421][ T5706] usb 7-1: Using ep0 maxpacket: 8 [ 384.203648][ T5706] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 384.219638][ T5706] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 384.240161][ T5706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.248321][ T5706] usb 7-1: Product: syz [ 384.253142][ T5706] usb 7-1: Manufacturer: syz [ 384.258441][ T5706] usb 7-1: SerialNumber: syz [ 384.263524][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 384.288801][ T5706] usb 7-1: config 0 descriptor?? [ 384.317596][ T5706] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 384.332645][ T5706] usb 7-1: setting power ON [ 384.359823][ T5706] dvb-usb: bulk message failed: -22 (2/0) [ 384.371162][ T5706] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 384.381327][ T5706] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 384.394289][ T5706] usb 7-1: media controller created [ 384.421085][ T5610] Bluetooth: hci4: command 0x0406 tx timeout [ 384.452033][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.491879][ T5706] usb 7-1: selecting invalid altsetting 6 [ 384.497799][ T5706] usb 7-1: digital interface selection failed (-22) [ 384.504938][ T5610] Bluetooth: hci5: command 0x0c1a tx timeout [ 384.510658][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 384.511647][ T5706] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 384.584648][ T5706] usb 7-1: setting power OFF [ 384.604825][ T5706] dvb-usb: bulk message failed: -22 (2/0) [ 384.644081][ T5706] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 384.660944][ T5613] Bluetooth: hci6: command 0x0c1a tx timeout [ 384.676405][ T5706] (NULL device *): no alternate interface [ 384.807940][ T5706] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 384.886484][ T5706] usb 7-1: USB disconnect, device number 9 [ 385.634461][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.652245][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.790256][ T8798] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 385.944220][T10448] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1222'. [ 385.961649][ T8798] usb 4-1: Using ep0 maxpacket: 32 [ 385.976983][ T8798] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 386.002784][ T8798] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 386.022535][ T8798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.043510][ T8798] usb 4-1: Product: syz [ 386.052061][ T8798] usb 4-1: Manufacturer: syz [ 386.062040][ T8798] usb 4-1: SerialNumber: syz [ 386.078017][ T8798] usb 4-1: config 0 descriptor?? [ 386.087581][T10438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 386.105399][ T8798] hub 4-1:0.0: bad descriptor, ignoring hub [ 386.117219][ T8798] hub 4-1:0.0: probe with driver hub failed with error -5 [ 386.136804][ T8798] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33 [ 386.285107][T10451] syz.6.1224 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 386.307683][ T8798] usb 4-1: USB disconnect, device number 52 [ 386.313885][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 386.339975][T10451] CPU: 1 UID: 0 PID: 10451 Comm: syz.6.1224 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.340011][T10451] Tainted: [L]=SOFTLOCKUP [ 386.340018][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.340030][T10451] Call Trace: [ 386.340108][T10451] [ 386.340150][T10451] dump_stack_lvl+0xe8/0x150 [ 386.340336][T10451] dump_header+0xd3/0x4b0 [ 386.340371][T10451] oom_kill_process+0x3ab/0x970 [ 386.340422][T10451] out_of_memory+0x1064/0x1480 [ 386.340451][T10451] ? try_charge_memcg+0xbca/0x1590 [ 386.340551][T10451] ? __pfx_out_of_memory+0x10/0x10 [ 386.340580][T10451] ? do_raw_spin_unlock+0xf5/0x210 [ 386.340630][T10451] try_charge_memcg+0xc74/0x1590 [ 386.340674][T10451] ? __pfx_try_charge_memcg+0x10/0x10 [ 386.340707][T10451] ? percpu_ref_tryget+0x15/0x180 [ 386.340734][T10451] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 386.340766][T10451] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 386.340789][T10451] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 386.340815][T10451] __memcg_slab_post_alloc_hook+0x909/0xf10 [ 386.340861][T10451] kmem_cache_alloc_lru_noprof+0x358/0x5f0 [ 386.340900][T10451] ? kmem_cache_alloc_lru_noprof+0x150/0x5f0 [ 386.340923][T10451] ? __d_alloc+0x37/0x6f0 [ 386.340966][T10451] ? __d_alloc+0x37/0x6f0 [ 386.341000][T10451] __d_alloc+0x37/0x6f0 [ 386.341033][T10451] d_alloc_pseudo+0x21/0xc0 [ 386.341061][T10451] alloc_path_pseudo+0x107/0x220 [ 386.341089][T10451] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 386.341112][T10451] ? trace_kmem_cache_alloc+0x29/0xe0 [ 386.341145][T10451] alloc_file_pseudo+0xa8/0x1e0 [ 386.341171][T10451] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 386.341192][T10451] ? security_inode_alloc+0xd5/0x310 [ 386.341290][T10451] ? inode_init_always_gfp+0x994/0xd30 [ 386.341320][T10451] sock_alloc_file+0xb8/0x2e0 [ 386.341442][T10451] do_accept+0x3a0/0x750 [ 386.341476][T10451] ? __pfx_do_accept+0x10/0x10 [ 386.341527][T10451] __sys_accept4+0x139/0x230 [ 386.341558][T10451] ? __pfx___sys_accept4+0x10/0x10 [ 386.341591][T10451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.341630][T10451] __x64_sys_accept+0x7d/0x90 [ 386.341662][T10451] do_syscall_64+0x174/0x580 [ 386.341785][T10451] ? trace_irq_disable+0x3b/0x140 [ 386.341833][T10451] ? clear_bhb_loop+0x70/0xc0 [ 386.341859][T10451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.341880][T10451] RIP: 0033:0x7fb66d79e0d9 [ 386.341928][T10451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.341945][T10451] RSP: 002b:00007fb66e672028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 386.341996][T10451] RAX: ffffffffffffffda RBX: 00007fb66da26090 RCX: 00007fb66d79e0d9 [ 386.342011][T10451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 386.342021][T10451] RBP: 00007fb66d835024 R08: 0000000000000000 R09: 0000000000000000 [ 386.342036][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.342047][T10451] R13: 00007fb66da26128 R14: 00007fb66da26090 R15: 00007fb66db4fa48 [ 386.342080][T10451] [ 386.843583][ T5613] Bluetooth: hci5: command 0x0c1a tx timeout [ 386.843618][ T5610] Bluetooth: hci6: command 0x0c1a tx timeout [ 386.859269][T10451] memory: usage 8kB, limit 8kB, failcnt 59 [ 386.895255][T10451] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 386.906202][T10451] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 386.923585][T10451] Memory cgroup stats for /syz6/test: [ 386.924017][T10451] cache 0 [ 386.967587][T10451] rss 0 [ 386.978680][T10451] rss_huge 0 [ 386.995377][T10451] shmem 0 [ 387.012381][T10451] mapped_file 0 [ 387.027082][T10451] dirty 0 [ 387.037245][T10451] writeback 0 [ 387.046890][T10451] workingset_refault_anon 0 [ 387.065768][T10451] workingset_refault_file 0 [ 387.080706][T10451] swap 0 [ 387.090800][T10451] swapcached 0 [ 387.099740][T10451] pgpgin 0 [ 387.108563][T10451] pgpgout 0 [ 387.120115][T10451] pgfault 1 [ 387.123359][T10451] pgmajfault 0 [ 387.126901][T10451] inactive_anon 0 [ 387.133558][T10451] active_anon 0 [ 387.138770][T10451] inactive_file 0 [ 387.142646][T10451] active_file 0 [ 387.146382][T10451] unevictable 0 [ 387.153214][T10451] hierarchical_memory_limit 8192 [ 387.158247][T10451] hierarchical_memsw_limit 9223372036854771712 [ 387.166019][T10451] total_cache 0 [ 387.185898][T10451] total_rss 0 [ 387.189264][T10451] total_rss_huge 0 [ 387.199995][T10451] total_shmem 0 [ 387.211883][T10451] total_mapped_file 0 [ 387.231733][T10451] total_dirty 0 [ 387.237775][T10451] total_writeback 0 [ 387.244219][T10451] total_workingset_refault_anon 0 [ 387.249727][T10451] total_workingset_refault_file 0 [ 387.256362][T10451] total_swap 0 [ 387.260388][ T8798] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 387.268083][T10451] total_swapcached 0 [ 387.274091][T10451] total_pgpgin 0 [ 387.277815][T10451] total_pgpgout 0 [ 387.294065][T10451] total_pgfault 1 [ 387.300117][T10451] total_pgmajfault 0 [ 387.308584][T10451] total_inactive_anon 0 [ 387.319263][T10451] total_active_anon 0 [ 387.330526][T10451] total_inactive_file 0 [ 387.339916][T10460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.349438][T10451] total_active_file 0 [ 387.358828][T10451] total_unevictable 0 [ 387.368441][T10460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.378619][T10451] anon_cost 0 [ 387.382081][T10451] file_cost 0 [ 387.386953][T10451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.1224,pid=10449,uid=0 [ 387.425995][T10451] Memory cgroup out of memory: Killed process 10449 (syz.6.1224) total-vm:102444kB, anon-rss:1436kB, file-rss:22996kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 387.473215][ T8798] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.487925][ T8798] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.522970][ T8798] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 387.533998][ T8798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 387.547813][ T8798] usb 4-1: SerialNumber: syz [ 387.780666][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.791471][ T8798] usb 4-1: 0:2 : does not exist [ 387.813539][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.890982][ T8798] usb 4-1: USB disconnect, device number 53 [ 387.932132][T10477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.964411][T10477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.090841][ T8800] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 388.225957][T10489] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1235'. [ 388.260637][ T8800] usb 7-1: Using ep0 maxpacket: 8 [ 388.275641][ T8800] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 388.310712][ T8800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 388.322082][ T8800] usb 7-1: Product: syz [ 388.332098][ T8800] usb 7-1: Manufacturer: syz [ 388.340415][ T8800] usb 7-1: SerialNumber: syz [ 388.364728][ T8800] usb 7-1: config 0 descriptor?? [ 388.370194][ T8785] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 388.385756][ T8800] gspca_main: sq905-2.14.0 probing 2770:9120 [ 388.546579][ T8785] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.583687][ T8785] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.609948][ T8785] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 388.624771][ T8785] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 388.634571][ T8785] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.649800][ T8785] usb 8-1: config 0 descriptor?? [ 388.657351][T10501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.680813][T10501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.886784][ T8785] plantronics 0003:047F:FFFF.000C: collection stack underflow [ 388.896765][ T8785] plantronics 0003:047F:FFFF.000C: item 0 0 0 12 parsing failed [ 388.908921][ T8785] plantronics 0003:047F:FFFF.000C: parse failed [ 388.915944][ T8785] plantronics 0003:047F:FFFF.000C: probe with driver plantronics failed with error -22 [ 389.089299][ T8785] usb 8-1: USB disconnect, device number 7 [ 389.217511][T10472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.241015][T10472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.349781][T10472] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 389.514128][ T8800] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 389.534842][ T8800] sq905 7-1:0.0: probe with driver sq905 failed with error -71 [ 389.564886][ T8800] usb 7-1: USB disconnect, device number 10 [ 390.559037][T10540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.584484][T10540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.758381][T10541] xt_ecn: cannot match TCP bits for non-tcp packets [ 390.855983][T10546] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1250'. [ 391.010424][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 391.041533][T10546] bridge1: entered promiscuous mode [ 391.055956][T10546] bridge1: entered allmulticast mode [ 391.180478][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 391.205311][ T24] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 391.214615][T10550] netlink: 'syz.7.1251': attribute type 39 has an invalid length. [ 391.225777][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.234761][ T24] usb 7-1: Product: syz [ 391.239181][ T24] usb 7-1: Manufacturer: syz [ 391.254837][ T24] usb 7-1: SerialNumber: syz [ 391.278397][ T24] usb 7-1: config 0 descriptor?? [ 391.304572][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 391.382181][T10557] : renamed from lo [ 391.687655][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 391.687685][ T30] audit: type=1326 audit(1786144312.142:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.3.1255" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c2bb9e0d9 code=0x0 [ 391.871941][ T8785] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 391.896337][T10574] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1254'. [ 391.948155][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.962646][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.030256][ T8785] usb 8-1: Using ep0 maxpacket: 8 [ 392.038308][ T8785] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.057475][ T8785] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 392.077189][ T8785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.085797][ T8785] usb 8-1: Product: syz [ 392.090089][ T8785] usb 8-1: Manufacturer: syz [ 392.096574][ T8785] usb 8-1: SerialNumber: syz [ 392.116478][ T8785] usb 8-1: config 0 descriptor?? [ 392.125011][T10544] input: syz0 as /devices/virtual/input/input35 [ 392.166545][ T24] gspca_sq930x: ucbus_write failed -71 [ 392.348789][ T8800] usb 8-1: USB disconnect, device number 8 [ 392.400886][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 392.409671][ T24] sq930x 7-1:0.0: probe with driver sq930x failed with error -22 [ 392.434683][ T24] usb 7-1: USB disconnect, device number 11 [ 393.101095][ T8803] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 393.250448][ T8800] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 393.280457][ T8803] usb 7-1: Using ep0 maxpacket: 32 [ 393.288246][ T8803] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 393.306978][ T8803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.333545][ T8803] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 393.350375][ T8803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.369403][ T8803] usb 7-1: Product: syz [ 393.381814][ T8803] usb 7-1: Manufacturer: syz [ 393.389658][ T8803] usb 7-1: SerialNumber: syz [ 393.407208][ T8803] usb 7-1: config 0 descriptor?? [ 393.429819][ T8803] keyspan 7-1:0.0: Keyspan 1 port adapter converter detected [ 393.438694][ T8803] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87 [ 393.447982][ T8803] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 393.456969][ T8800] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.491843][ T8803] keyspan 7-1:0.0: unsupported endpoint type 0 [ 393.498127][ T8800] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.509064][ T8803] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 393.517997][ T8800] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 393.531970][ T8803] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 393.539898][ T8803] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 393.548509][ T8800] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.558694][ T8803] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 393.566687][ T8800] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.581729][ T8803] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 393.595303][ T8800] usb 8-1: config 0 descriptor?? [ 393.638702][ T24] usb 7-1: USB disconnect, device number 12 [ 393.673961][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 393.709873][ T24] keyspan 7-1:0.0: device disconnected [ 394.056772][ T8800] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 394.091204][ T8803] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 394.142180][ T30] audit: type=1326 audit(1786144314.602:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1263" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ef6597e57 code=0x7ffc0000 [ 394.231496][ T30] audit: type=1326 audit(1786144314.602:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1263" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ef653f459 code=0x7ffc0000 [ 394.282052][ T8803] usb 4-1: Using ep0 maxpacket: 32 [ 394.305911][ T8803] usb 4-1: unable to get BOS descriptor or descriptor too short [ 394.327026][ T8803] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 394.343195][ T30] audit: type=1326 audit(1786144314.602:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1263" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ef6597e57 code=0x7ffc0000 [ 394.367515][ T8803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.386020][ T8803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.430666][ T8803] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.444428][ T30] audit: type=1326 audit(1786144314.602:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1263" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ef653f459 code=0x7ffc0000 [ 394.470651][ T8803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.492875][ T8803] usb 4-1: Product: syz [ 394.501770][ T8803] usb 4-1: Manufacturer: syz [ 394.519099][ T8803] usb 4-1: SerialNumber: syz [ 394.539985][ T30] audit: type=1326 audit(1786144314.602:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1263" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ef6597e57 code=0x7ffc0000 [ 394.622399][ T30] audit: type=1326 audit(1786144314.602:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1263" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ef653f459 code=0x7ffc0000 [ 394.697623][T10606] sg_write: data in/out 211/120 bytes for SCSI command 0x0-- guessing data in; [ 394.697623][T10606] program syz.6.1264 not setting count and/or reply_len properly [ 394.720146][ T30] audit: type=1326 audit(1786144314.632:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1263" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ef6597e57 code=0x7ffc0000 [ 394.784960][T10597] CUSE: DEVNAME unspecified [ 394.786238][ T24] usb 8-1: USB disconnect, device number 9 [ 394.820361][T10597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.832369][ T30] audit: type=1326 audit(1786144314.632:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1263" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ef653f459 code=0x7ffc0000 [ 394.870506][T10597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.935045][ T30] audit: type=1326 audit(1786144314.632:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1263" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ef6597e57 code=0x7ffc0000 [ 395.039081][ T8803] usb 4-1: 0:2 : does not exist [ 395.233024][ T8803] usb 4-1: USB disconnect, device number 54 [ 395.661418][T10617] kernel read not supported for file / 7âW)s!Qfsr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10617 comm: syz.7.1266) [ 395.891582][T10622] Invalid logical block size (-625016833) [ 396.300181][ T24] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 396.377306][T10628] hub 1-0:1.0: USB hub found [ 396.386319][T10628] hub 1-0:1.0: 1 port detected [ 396.435077][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 396.462524][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 396.512707][ T24] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 396.530739][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.555459][ T24] usb 4-1: Product: syz [ 396.573470][ T24] usb 4-1: Manufacturer: syz [ 396.584642][ T24] usb 4-1: SerialNumber: syz [ 396.607400][ T24] usb 4-1: config 0 descriptor?? [ 396.656385][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 397.330650][ T8798] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 397.448300][T10625] input: syz0 as /devices/virtual/input/input36 [ 397.510187][ T8798] usb 7-1: Using ep0 maxpacket: 16 [ 397.518578][ T24] gspca_sq930x: ucbus_write failed -71 [ 397.537277][ T8798] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.578536][ T8798] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.623840][ T8798] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 397.688453][ T8798] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 397.709306][ T8798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.749540][ T8798] usb 7-1: config 0 descriptor?? [ 397.750203][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 397.766058][ T24] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 397.794591][ T24] usb 4-1: USB disconnect, device number 55 [ 397.970226][ T5706] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 398.144066][ T5706] usb 8-1: Using ep0 maxpacket: 16 [ 398.157323][ T5706] usb 8-1: config 4 has an invalid interface number: 104 but max is 0 [ 398.185324][ T5706] usb 8-1: config 4 has no interface number 0 [ 398.200313][ T5706] usb 8-1: config 4 interface 104 altsetting 0 endpoint 0x1 has an invalid bInterval 190, changing to 11 [ 398.229923][ T8798] usbhid 7-1:0.0: can't add hid device: -71 [ 398.243231][ T8798] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 398.261262][ T5706] usb 8-1: New USB device found, idVendor=1bda, idProduct=0140, bcdDevice=4b.f8 [ 398.274706][ T5706] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.287777][ T8798] usb 7-1: USB disconnect, device number 13 [ 398.306705][ T5706] usb 8-1: Product: syz [ 398.325261][ T5706] usb 8-1: Manufacturer: syz [ 398.337420][ T5706] usb 8-1: SerialNumber: syz [ 398.560762][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1273'. [ 398.594582][T10640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.615009][T10640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.674921][ T5706] usb 8-1: USB disconnect, device number 10 [ 399.060848][ T8798] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 399.163262][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.214152][ T8798] usb 7-1: Using ep0 maxpacket: 32 [ 399.239676][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.263441][ T8798] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 399.283505][ T8798] usb 7-1: config 0 has no interface number 0 [ 399.297844][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.315710][ T8798] usb 7-1: config 0 interface 12 has no altsetting 0 [ 399.329907][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.349494][ T8798] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 399.368032][ T8798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.381384][ T8798] usb 7-1: Product: syz [ 399.395956][ T8798] usb 7-1: Manufacturer: syz [ 399.404724][ T8798] usb 7-1: SerialNumber: syz [ 399.416328][ T8798] usb 7-1: config 0 descriptor?? [ 399.480219][ T8785] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 399.630351][ T8785] usb 8-1: Using ep0 maxpacket: 16 [ 399.647491][ T8785] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 399.663568][ T8785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.678081][ T8785] usb 8-1: Product: syz [ 399.686638][ T8785] usb 8-1: Manufacturer: syz [ 399.696511][ T8785] usb 8-1: SerialNumber: syz [ 399.711642][ T8785] usb 8-1: config 0 descriptor?? [ 400.100219][ T8798] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 400.119360][ T8798] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 400.129931][ T8785] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 400.137391][ T8798] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 400.161185][ T8798] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 400.172794][ T8785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 400.183679][ T8785] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 400.193257][ T8798] usb 7-1: USB disconnect, device number 14 [ 400.193672][ T8785] usb 8-1: media controller created [ 400.236028][ T8785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.318505][ T8785] zl10353_read_register: readreg error (reg=127, ret==0) [ 400.326318][ T8785] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 400.327536][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.353910][ T8785] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 400.368447][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.537623][T10671] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 400.676270][ T5613] Bluetooth: hci6: command 0x0c1a tx timeout [ 400.782984][ T24] usb 8-1: USB disconnect, device number 11 [ 400.895324][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 400.970172][ T8785] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 400.986580][T10681] vlan1: entered allmulticast mode [ 400.992250][T10681] veth0_vlan: entered allmulticast mode [ 401.001626][T10683] fuse: Bad value for 'fd' [ 401.130190][ T8785] usb 7-1: Using ep0 maxpacket: 8 [ 401.176439][ T8785] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 401.188830][ T8785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.216945][ T8785] usb 7-1: Product: syz [ 401.226512][ T8785] usb 7-1: Manufacturer: syz [ 401.240798][ T8785] usb 7-1: SerialNumber: syz [ 401.259970][ T8785] usb 7-1: config 0 descriptor?? [ 401.285339][ T8785] gspca_main: sq930x-2.14.0 probing 2770:930c [ 402.103386][ T8785] gspca_sq930x: ucbus_write failed -71 [ 402.330204][ T8785] gspca_sq930x: Sensor ov9630 not yet treated [ 402.343120][ T8785] sq930x 7-1:0.0: probe with driver sq930x failed with error -22 [ 402.372221][ T8785] usb 7-1: USB disconnect, device number 15 [ 402.583174][T10705] FAULT_INJECTION: forcing a failure. [ 402.583174][T10705] name failslab, interval 1, probability 0, space 0, times 0 [ 402.597569][T10705] CPU: 1 UID: 0 PID: 10705 Comm: syz.5.1290 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.597591][T10705] Tainted: [L]=SOFTLOCKUP [ 402.597595][T10705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.597602][T10705] Call Trace: [ 402.597608][T10705] [ 402.597613][T10705] dump_stack_lvl+0xe8/0x150 [ 402.597636][T10705] should_fail_ex+0x40c/0x560 [ 402.597731][T10705] should_failslab+0xa8/0x100 [ 402.597755][T10705] __kmalloc_cache_noprof+0xa8/0x660 [ 402.597769][T10705] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 402.597783][T10705] ? tipc_nametbl_lookup_group+0x78c/0xc10 [ 402.597852][T10705] ? tipc_nametbl_lookup_group+0x78c/0xc10 [ 402.597872][T10705] tipc_nametbl_lookup_group+0x78c/0xc10 [ 402.597893][T10705] ? tipc_nametbl_lookup_group+0xac/0xc10 [ 402.597911][T10705] __tipc_sendmsg+0xf81/0x2b60 [ 402.597944][T10705] ? up_write+0x19f/0x4a0 [ 402.597959][T10705] ? __pfx___tipc_sendmsg+0x10/0x10 [ 402.597973][T10705] ? kasan_quarantine_put+0xbb/0x1f0 [ 402.597987][T10705] ? aa_label_sk_perm+0x532/0x6e0 [ 402.598038][T10705] ? ktime_get+0x45/0x220 [ 402.598056][T10705] ? lock_acquire+0x106/0x350 [ 402.598073][T10705] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 402.598090][T10705] ? ktime_get+0x45/0x220 [ 402.598104][T10705] ? __lock_acquire+0x683/0x2cf0 [ 402.598121][T10705] ? clockevents_program_event+0x491/0x630 [ 402.598152][T10705] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 402.598166][T10705] ? tipc_sendmsg+0x47/0x70 [ 402.598194][T10705] ? __local_bh_enable_ip+0xd0/0x130 [ 402.598222][T10705] tipc_sendmsg+0x55/0x70 [ 402.598236][T10705] ? __pfx_tipc_sendmsg+0x10/0x10 [ 402.598249][T10705] sock_sendmsg_nosec+0x13a/0x180 [ 402.598266][T10705] ____sys_sendmsg+0x54e/0x850 [ 402.598282][T10705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.598299][T10705] ? import_iovec+0x73/0xa0 [ 402.598348][T10705] ___sys_sendmsg+0x2a5/0x360 [ 402.598359][T10705] ? __lock_acquire+0x683/0x2cf0 [ 402.598376][T10705] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.598417][T10705] ? __fget_files+0x2a/0x420 [ 402.598432][T10705] ? __fget_files+0x3a2/0x420 [ 402.598451][T10705] __x64_sys_sendmsg+0x1b1/0x290 [ 402.598465][T10705] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.598487][T10705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.598499][T10705] do_syscall_64+0x174/0x580 [ 402.598515][T10705] ? trace_irq_disable+0x3b/0x140 [ 402.598529][T10705] ? clear_bhb_loop+0x70/0xc0 [ 402.598542][T10705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.598554][T10705] RIP: 0033:0x7f23eed9e0d9 [ 402.598567][T10705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.598577][T10705] RSP: 002b:00007f23efc9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.598592][T10705] RAX: ffffffffffffffda RBX: 00007f23ef025fa0 RCX: 00007f23eed9e0d9 [ 402.598600][T10705] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000004 [ 402.598607][T10705] RBP: 00007f23efc9f090 R08: 0000000000000000 R09: 0000000000000000 [ 402.598614][T10705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.598621][T10705] R13: 00007f23ef026038 R14: 00007f23ef025fa0 R15: 00007f23ef14fa48 [ 402.598638][T10705] [ 402.917866][ T5613] Bluetooth: hci6: command 0x0c1a tx timeout [ 403.740233][ T8785] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 403.850360][ T8798] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 403.890225][ T8785] usb 4-1: Using ep0 maxpacket: 8 [ 403.898028][ T8785] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1608, setting to 1024 [ 403.934780][ T8785] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.963044][ T8785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.022926][ T8785] usb 4-1: Product: Б [ 404.066182][ T8785] usb 4-1: Manufacturer: Ⰹ [ 404.077357][ T8798] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.116276][ T8785] usb 4-1: SerialNumber: 욻썬ඇ는갠蜖䌀༏ဿ⇛醖眯⾒铋逩ᗹ༢萲玔鹥 [ 404.136531][ T8798] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 404.167087][ T8798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 404.215556][ T8798] usb 7-1: Product: syz [ 404.223347][ T8798] usb 7-1: Manufacturer: syz [ 404.239756][ T8798] usb 7-1: SerialNumber: syz [ 404.288310][T10724] loop9: detected capacity change from 0 to 2640 [ 404.365194][ T7663] Buffer I/O error on dev loop9, logical block 0, async page read [ 404.388315][ T7663] Buffer I/O error on dev loop9, logical block 0, async page read [ 404.408904][ T7663] Buffer I/O error on dev loop9, logical block 0, async page read [ 404.445474][ T7663] Buffer I/O error on dev loop9, logical block 0, async page read [ 404.457239][ T7663] Buffer I/O error on dev loop9, logical block 0, async page read [ 404.468916][ T8785] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 404.497209][ T8785] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 404.547848][ T8798] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 404.575852][T10731] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1297'. [ 404.719470][T10736] kvm: emulating exchange as write [ 404.722997][ T8803] usb 7-1: USB disconnect, device number 16 [ 404.771891][ T8803] usblp0: removed [ 405.101236][T10743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.124687][T10743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.566273][T10747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.594164][T10747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.659927][T10749] FAULT_INJECTION: forcing a failure. [ 405.659927][T10749] name failslab, interval 1, probability 0, space 0, times 0 [ 405.680293][T10749] CPU: 1 UID: 0 PID: 10749 Comm: syz.5.1302 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.680327][T10749] Tainted: [L]=SOFTLOCKUP [ 405.680334][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.680345][T10749] Call Trace: [ 405.680353][T10749] [ 405.680361][T10749] dump_stack_lvl+0xe8/0x150 [ 405.680397][T10749] should_fail_ex+0x40c/0x560 [ 405.680425][T10749] should_failslab+0xa8/0x100 [ 405.680454][T10749] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 405.680476][T10749] ? ____sys_sendmsg+0x54e/0x850 [ 405.680496][T10749] ? ___sys_sendmsg+0x2a5/0x360 [ 405.680517][T10749] ? __alloc_skb+0x1d7/0x7a0 [ 405.680604][T10749] ? __alloc_skb+0x1d7/0x7a0 [ 405.680632][T10749] ? tipc_own_addr+0x45/0x2a0 [ 405.680663][T10749] __alloc_skb+0x1d7/0x7a0 [ 405.680694][T10749] tipc_msg_create+0x4c/0x4c0 [ 405.680719][T10749] ? tipc_own_addr+0x45/0x2a0 [ 405.680742][T10749] ? tipc_own_addr+0x45/0x2a0 [ 405.680771][T10749] tipc_group_proto_xmit+0xce/0x790 [ 405.680806][T10749] tipc_group_cong+0x4db/0x5e0 [ 405.680837][T10749] ? __pfx_tipc_group_cong+0x10/0x10 [ 405.680861][T10749] ? lockdep_hardirqs_on+0x7a/0x110 [ 405.680930][T10749] ? tipc_dest_pop+0x19c/0x230 [ 405.680952][T10749] __tipc_sendmsg+0xffd/0x2b60 [ 405.680984][T10749] ? up_write+0x19f/0x4a0 [ 405.681012][T10749] ? __pfx___tipc_sendmsg+0x10/0x10 [ 405.681035][T10749] ? kasan_quarantine_put+0xbb/0x1f0 [ 405.681057][T10749] ? aa_label_sk_perm+0x532/0x6e0 [ 405.681085][T10749] ? __lock_acquire+0x683/0x2cf0 [ 405.681113][T10749] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 405.681147][T10749] ? __lock_acquire+0x683/0x2cf0 [ 405.681178][T10749] ? __lock_acquire+0x683/0x2cf0 [ 405.681235][T10749] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 405.681260][T10749] ? tipc_sendmsg+0x47/0x70 [ 405.681286][T10749] ? __local_bh_enable_ip+0xd0/0x130 [ 405.681312][T10749] tipc_sendmsg+0x55/0x70 [ 405.681335][T10749] ? __pfx_tipc_sendmsg+0x10/0x10 [ 405.681354][T10749] sock_sendmsg_nosec+0x13a/0x180 [ 405.681381][T10749] ____sys_sendmsg+0x54e/0x850 [ 405.681406][T10749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.681435][T10749] ? import_iovec+0x73/0xa0 [ 405.681465][T10749] ___sys_sendmsg+0x2a5/0x360 [ 405.681483][T10749] ? __lock_acquire+0x683/0x2cf0 [ 405.681511][T10749] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.681567][T10749] ? __fget_files+0x2a/0x420 [ 405.681591][T10749] ? __fget_files+0x3a2/0x420 [ 405.681625][T10749] __x64_sys_sendmsg+0x1b1/0x290 [ 405.681648][T10749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.681686][T10749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.681707][T10749] do_syscall_64+0x174/0x580 [ 405.681729][T10749] ? trace_irq_disable+0x3b/0x140 [ 405.681751][T10749] ? clear_bhb_loop+0x70/0xc0 [ 405.681774][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.681792][T10749] RIP: 0033:0x7f23eed9e0d9 [ 405.681811][T10749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.681827][T10749] RSP: 002b:00007f23efc9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.681849][T10749] RAX: ffffffffffffffda RBX: 00007f23ef025fa0 RCX: 00007f23eed9e0d9 [ 405.681863][T10749] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000004 [ 405.681873][T10749] RBP: 00007f23efc9f090 R08: 0000000000000000 R09: 0000000000000000 [ 405.681885][T10749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.681896][T10749] R13: 00007f23ef026038 R14: 00007f23ef025fa0 R15: 00007f23ef14fa48 [ 405.681927][T10749] [ 406.257165][T10757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.302265][T10757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.348522][T10761] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 406.492198][ T8785] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 406.517533][ T8785] usb 4-1: 2:1 : invalid channels 0 [ 406.673207][ T8785] usb 4-1: USB disconnect, device number 56 [ 406.864879][T10777] loop8: detected capacity change from 0 to 7 [ 406.881908][T10777] Dev loop8: unable to read RDB block 7 [ 406.895767][T10777] loop8: unable to read partition table [ 406.917231][T10777] loop8: partition table beyond EOD, truncated [ 406.936238][T10777] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 407.463824][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1312'. [ 407.508766][T10790] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1312'. [ 407.564966][ T8798] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 407.615540][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.640654][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.744746][ T8798] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.770391][ T8798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 407.790124][ T8798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 407.810120][ T8798] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 407.840190][ T8798] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 407.849312][ T8798] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.872823][ T8798] usb 8-1: config 0 descriptor?? [ 407.880775][T10785] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 408.309930][ T8798] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 408.327909][T10803] netlink: 'syz.6.1318': attribute type 32 has an invalid length. [ 408.336544][ T8798] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 408.346459][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1318'. [ 408.354514][ T8798] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 408.381385][T10805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.391791][ T8798] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 408.392206][T10803] bond1: Setting coupled_control to off (0) [ 408.417675][ T8798] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 408.428878][T10805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.467618][ T8798] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 408.618285][ T8803] usb 8-1: USB disconnect, device number 12 [ 409.159472][T10820] xt_l2tp: unknown flags: 10 [ 409.188559][T10823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.211896][T10823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.361209][T10830] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1325'. [ 409.440407][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 409.551576][T10836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.591319][T10836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.603407][ T24] usb 7-1: config 0 has an invalid interface number: 252 but max is 0 [ 409.628956][ T24] usb 7-1: config 0 has no interface number 0 [ 409.653071][ T24] usb 7-1: config 0 interface 252 has no altsetting 0 [ 409.683645][ T24] usb 7-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=5d.91 [ 409.705921][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.722013][ T24] usb 7-1: Product: syz [ 409.729699][ T24] usb 7-1: Manufacturer: syz [ 409.736595][ T24] usb 7-1: SerialNumber: syz [ 409.749548][ T24] usb 7-1: config 0 descriptor?? [ 409.896813][T10844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.906931][T10844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.934521][T10844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.954435][T10844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.991189][ T8798] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 410.019137][T10821] kernel read not supported for file / 7âW)s!QfsrX%)rO2:"T+͟v|ղDvc֠6xc: (pid: 10821 comm: syz.6.1322) [ 410.036387][ T30] kauditd_printk_skb: 603 callbacks suppressed [ 410.036407][ T30] audit: type=1800 audit(1786144330.492:841): pid=10821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1322" name=C020019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772A05825D4E0D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=45357 res=0 errno=0 [ 410.046434][ T24] usb 7-1: USB disconnect, device number 17 [ 410.172775][ T8798] usb 8-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 410.184737][ T8798] usb 8-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 410.200431][ T8798] usb 8-1: config 1 interface 0 has no altsetting 0 [ 410.209124][ T8798] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.220981][ T8785] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 410.240946][ T8798] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 410.251843][ T8798] usb 8-1: SerialNumber: syz [ 410.271492][ T8798] hub 8-1:1.0: bad descriptor, ignoring hub [ 410.280834][ T8798] hub 8-1:1.0: probe with driver hub failed with error -5 [ 410.288848][ T8798] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 410.331710][T10853] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1333'. [ 410.381167][ T8785] usb 4-1: Using ep0 maxpacket: 8 [ 410.391787][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1333'. [ 410.403636][T10854] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1333'. [ 410.413561][ T8785] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 410.423060][ T8785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.431872][ T8785] usb 4-1: Product: syz [ 410.436125][ T8785] usb 4-1: Manufacturer: syz [ 410.444262][ T8785] usb 4-1: SerialNumber: syz [ 410.463416][ T8785] usb 4-1: config 0 descriptor?? [ 410.476773][ T8785] gspca_main: sq930x-2.14.0 probing 2770:930c [ 410.582451][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1334'. [ 410.948557][T10873] vlan1: entered allmulticast mode [ 410.957428][T10873] veth0_vlan: entered allmulticast mode [ 411.014062][ T8798] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 411.041141][ T8798] usb 8-1: USB disconnect, device number 13 [ 411.087458][T10849] input: syz0 as /devices/virtual/input/input41 [ 411.170915][T10880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.190600][ T8785] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 411.198712][T10880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.250622][ T7949] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.270505][ T7949] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.290484][ T7949] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.301680][ T7949] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.520442][ T8798] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 411.694251][ T8798] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 411.716540][ T8798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.739660][ T8798] usb 8-1: Product: syz [ 411.753464][ T8798] usb 8-1: Manufacturer: syz [ 411.758770][T10888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.768991][ T8798] usb 8-1: SerialNumber: syz [ 411.789876][ T8798] usb 8-1: config 0 descriptor?? [ 411.808116][ T8798] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 411.820321][T10888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.934635][T10890] syzkaller1: entered allmulticast mode [ 412.080364][ T8785] gspca_sq930x: Unknown sensor [ 412.094859][ T8785] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 412.136719][ T8785] usb 4-1: USB disconnect, device number 57 [ 412.488018][ T30] audit: type=1326 audit(1786144332.942:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.3.1345" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c2bb9e0d9 code=0x7ffb0000 [ 413.093823][ T8796] usb 8-1: USB disconnect, device number 14 [ 413.761084][ T8796] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 413.944643][ T8796] usb 8-1: Using ep0 maxpacket: 8 [ 413.964871][ T8796] usb 8-1: config 0 has an invalid interface number: 6 but max is 2 [ 413.980641][ T8796] usb 8-1: config 0 has an invalid interface number: 176 but max is 2 [ 413.998898][ T8796] usb 8-1: config 0 has no interface number 1 [ 414.015434][ T8796] usb 8-1: config 0 has no interface number 2 [ 414.026194][ T8796] usb 8-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 414.044541][ T8796] usb 8-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 414.061024][ T8796] usb 8-1: config 0 interface 0 has no altsetting 0 [ 414.068928][ T8796] usb 8-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 414.085054][ T8796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.101572][ T8796] usb 8-1: config 0 descriptor?? [ 414.204386][T10906] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1348'. [ 414.318001][ T8796] usb 8-1: Could not set interface, error -71 [ 414.357881][ T8796] qmi_wwan 8-1:0.0: probe with driver qmi_wwan failed with error -22 [ 414.387853][ T8796] usb 8-1: USB disconnect, device number 15 [ 415.228768][T10922] sock: sock_timestamping_bind_phc: sock not bind to device [ 415.540405][ T8796] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 415.711238][ T8796] usb 8-1: Using ep0 maxpacket: 8 [ 415.724872][ T8796] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 415.746125][ T8796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.763608][ T8796] usb 8-1: Product: syz [ 415.780692][ T8796] usb 8-1: Manufacturer: syz [ 415.785476][ T8796] usb 8-1: SerialNumber: syz [ 415.803689][ T8796] usb 8-1: config 0 descriptor?? [ 415.826605][ T8796] gspca_main: sq930x-2.14.0 probing 2770:930c [ 416.183820][T10932] raw_sendmsg: syz.1.1356 forgot to set AF_INET. Fix it! [ 416.218850][T10926] input: syz0 as /devices/virtual/input/input42 [ 416.278663][ T8796] gspca_sq930x: ucbus_write failed -71 [ 417.200155][ T8796] gspca_sq930x: Unknown sensor [ 417.209585][ T8796] sq930x 8-1:0.0: probe with driver sq930x failed with error -22 [ 417.233685][ T8796] usb 8-1: USB disconnect, device number 16 [ 418.290584][ T8796] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 418.315862][T10973] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1365'. [ 418.347245][T10973] vlan2: entered allmulticast mode [ 418.357033][T10973] erspan0: entered allmulticast mode [ 418.373864][T10974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.462483][ T8796] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 418.489379][ T8796] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 418.510653][ T8796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.525515][ T8796] usb 4-1: config 0 has no interface number 0 [ 418.559481][ T8796] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 418.636400][T10977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.669631][T10977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.681063][ T8796] usb 4-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 418.722041][T10979] input: syz1 as /devices/virtual/input/input43 [ 418.765928][ T8796] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x2 has invalid maxpacket 70, setting to 64 [ 418.794902][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'. [ 418.842817][ T8796] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 418.860021][ T8796] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 418.870385][ T8796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.890579][ T8796] usb 4-1: config 0 descriptor?? [ 418.932603][ T8796] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 418.976866][T10975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.120805][ T7949] usb 4-1: Failed to submit usb control message: -71 [ 419.120933][ T8796] usb 4-1: USB disconnect, device number 58 [ 419.165615][ T7949] usb 4-1: unable to send the bmi data to the device: -71 [ 419.221234][ T7949] usb 4-1: unable to get target info from device [ 419.241847][ T7949] usb 4-1: could not get target info (-71) [ 419.255124][ T7949] usb 4-1: could not probe fw (-71) [ 419.421225][ T8798] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 419.592834][ T8798] usb 7-1: config 0 has no interfaces? [ 419.608329][ T8798] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 419.628600][ T8798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.657395][ T8798] usb 7-1: config 0 descriptor?? [ 419.765081][T11001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.791732][T11001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.814688][T11001] input: syz0 as /devices/virtual/input/input44 [ 420.012021][ T5610] Bluetooth: hci6: Malformed Event: 0x13 [ 420.422745][T11005] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1372'. [ 420.580085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 420.720153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 420.740065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 420.781291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 420.850176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 420.873041][T11018] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 420.900089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 420.930066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 420.958150][T11023] netlink: 'syz.1.1374': attribute type 11 has an invalid length. [ 421.016509][T11018] kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 421.103656][T11018] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 421.125243][T11018] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 421.181507][T11018] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 421.215329][T11018] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 421.261597][T11018] kvm: requested 127390 ns i8254 timer period limited to 200000 ns [ 421.333855][T11018] kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 421.403955][T11018] kvm: requested 169295 ns i8254 timer period limited to 200000 ns [ 421.458541][T11018] kvm: requested 157562 ns i8254 timer period limited to 200000 ns [ 421.803924][T11041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.844743][T11045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.874476][T11041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.948844][T11045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.023486][T11042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.123274][T11042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.798712][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.811067][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.858114][ T8798] usb 7-1: USB disconnect, device number 18 [ 423.032324][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.053063][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.127460][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 423.156174][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 423.665794][T11083] input: syz0 as /devices/virtual/input/input45 [ 424.002889][T11089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.031456][T11089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.377021][T11094] netlink: 'syz.5.1385': attribute type 10 has an invalid length. [ 424.418519][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.427463][T11098] netlink: 'syz.5.1385': attribute type 10 has an invalid length. [ 424.559473][ T30] audit: type=1326 audit(1786144345.012:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.7.1387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557c79e0d9 code=0x7ffc0000 [ 424.605463][T11094] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 424.619412][ T30] audit: type=1326 audit(1786144345.042:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.7.1387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557c79e0d9 code=0x7ffc0000 [ 424.651077][T11094] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 424.679508][T11104] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1385'. [ 424.737165][ T30] audit: type=1326 audit(1786144345.042:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.7.1387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557c79e0d9 code=0x7ffc0000 [ 424.781409][T11094] team0: Port device netdevsim1 added [ 424.787359][ T30] audit: type=1326 audit(1786144345.042:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.7.1387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f557c79e0d9 code=0x7ffc0000 [ 424.816476][ T30] audit: type=1326 audit(1786144345.042:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.7.1387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557c79e0d9 code=0x7ffc0000 [ 424.842545][T11098] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 424.855130][T11098] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 424.866520][ T30] audit: type=1326 audit(1786144345.052:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.7.1387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557c79e0d9 code=0x7ffc0000 [ 424.897423][ T30] audit: type=1326 audit(1786144345.042:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.7.1387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557c79e0d9 code=0x7ffc0000 [ 425.096628][ T30] audit: type=1326 audit(1786144345.052:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.7.1387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f557c79e0d9 code=0x7ffc0000 [ 425.125531][T11098] team0: Port device netdevsim1 removed [ 425.285137][ T30] audit: type=1326 audit(1786144345.052:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.7.1387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557c79e0d9 code=0x7ffc0000 [ 425.312748][ T30] audit: type=1326 audit(1786144345.112:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.7.1387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f557c79de42 code=0x7ffc0000 [ 426.388593][T11123] xt_connbytes: Forcing CT accounting to be enabled [ 426.412326][ T8785] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 426.570182][ T8785] usb 4-1: Using ep0 maxpacket: 32 [ 426.613980][ T8785] usb 4-1: unable to get BOS descriptor or descriptor too short [ 426.660608][ T8785] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.703424][ T8785] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.745483][ T8785] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 426.780242][ T8785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.812252][ T8785] usb 4-1: Product: syz [ 426.855265][ T8785] usb 4-1: Manufacturer: syz [ 426.874598][ T8785] usb 4-1: SerialNumber: syz [ 426.953278][ T8785] usb 4-1: 0:1 : does not exist [ 426.975466][ T8785] usb 4-1: 0:2 : does not exist [ 427.137950][T11121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.214230][T11121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.421079][T11144] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 427.472192][T11144] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 427.570333][ T8798] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 427.736296][ T8798] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 427.752513][ T8798] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 427.791540][ T8798] usb 7-1: config 0 interface 0 has no altsetting 0 [ 427.809297][ T8798] usb 7-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 427.811279][T11153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.830531][ T8798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.850186][ T8798] usb 7-1: config 0 descriptor?? [ 427.856307][T11142] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 427.861752][T11153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.916929][T11150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.942587][T11150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.166002][T11161] syzkaller0: entered promiscuous mode [ 428.172214][T11161] syzkaller0: entered allmulticast mode [ 428.186815][T11161] tipc: Enabled bearer , priority 0 [ 428.199484][T11160] tipc: Resetting bearer [ 428.250916][T11160] tipc: Disabling bearer [ 428.282545][ T8798] a4tech 0003:09DA:022B.000F: item 0 0 0 8 parsing failed [ 428.300579][ T8798] a4tech 0003:09DA:022B.000F: parse failed [ 428.310916][ T8798] a4tech 0003:09DA:022B.000F: probe with driver a4tech failed with error -22 [ 428.486637][ T29] usb 7-1: USB disconnect, device number 19 [ 428.618289][T11169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.651293][T11169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.037213][T11180] loop3: detected capacity change from 0 to 7 [ 429.047800][T11180] Dev loop3: unable to read RDB block 7 [ 429.053499][T11180] loop3: unable to read partition table [ 429.059458][T11180] loop3: partition table beyond EOD, truncated [ 429.071323][T11180] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 429.111301][ T8785] usb 4-1: 3:0: failed to get current value for ch 0 (-22) [ 429.162657][T11182] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1410'. [ 429.177792][ T8785] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 429.194887][ T8785] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 429.307060][ T8785] usb 4-1: [3] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 429.311030][ T31] INFO: task kworker/1:5:5675 blocked for more than 143 seconds. [ 429.341680][ T31] Tainted: G L syzkaller #0 [ 429.351345][T11193] binder: 11192:11193 ioctl c0306201 200000000180 returned -14 [ 429.357015][ T8785] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 429.359243][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.359258][ T31] task:kworker/1:5 state:D stack:21504 pid:5675 tgid:5675 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 429.359319][ T31] Workqueue: usb_hub_wq hub_event [ 429.359471][ T31] Call Trace: [ 429.359480][ T31] [ 429.359495][ T31] __schedule+0x17d9/0x56c0 [ 429.411988][T11193] binder: BINDER_SET_CONTEXT_MGR already set [ 429.428146][T11193] binder: 11192:11193 ioctl 4018620d 200000000100 returned -16 [ 429.436889][T11194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.454865][T11194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.505325][ T31] ? __pfx___schedule+0x10/0x10 [ 429.510827][ T31] ? schedule+0x90/0x2b0 [ 429.515290][ T31] schedule+0x164/0x2b0 [ 429.521563][ T31] schedule_timeout+0xc0/0x2c0 [ 429.527605][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 429.554054][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 429.563356][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.568541][ T8785] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 429.568683][ T31] ? wait_for_completion+0x272/0x5e0 [ 429.583379][ T31] wait_for_completion+0x2ca/0x5e0 [ 429.588710][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 429.591397][ T8785] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 429.594595][ T31] ? kobject_put+0x50f/0x550 [ 429.607256][ T31] i2c_del_adapter+0x281/0x430 [ 429.612665][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 429.618049][ T31] ? kfree+0x4d/0x640 [ 429.622873][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 429.627751][ T31] dvb_usb_device_exit+0x1cb/0x350 [ 429.632882][ T8785] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 429.641510][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 429.648342][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 429.650150][ T8785] usb 4-1: USB disconnect, device number 59 [ 429.653529][ T31] cxusb_probe+0x60f/0x710 [ 429.664959][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 429.673012][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 429.680749][ T31] ? __pm_runtime_set_status+0x994/0xc80 [ 429.687821][ T31] usb_probe_interface+0x653/0xc60 [ 429.694802][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 429.702766][ T31] really_probe+0x254/0xae0 [ 429.707514][ T31] __driver_probe_device+0x1e8/0x360 [ 429.713031][ T31] driver_probe_device+0x4f/0x240 [ 429.718111][ T31] __device_attach_driver+0x270/0x410 [ 429.724530][ T31] bus_for_each_drv+0x258/0x2f0 [ 429.729515][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 429.735992][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 429.741917][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.747266][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 429.753344][ T31] __device_attach+0x2c4/0x450 [ 429.758555][ T31] ? __pfx___device_attach+0x10/0x10 [ 429.764591][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 429.769760][ T31] ? _raw_spin_unlock+0x28/0x50 [ 429.775351][ T31] device_initial_probe+0xa1/0xd0 [ 429.782113][ T31] bus_probe_device+0x12a/0x220 [ 429.787027][ T31] device_add+0x7d7/0xb80 [ 429.791748][ T31] usb_set_configuration+0x1ad8/0x2180 [ 429.797284][ T31] usb_generic_driver_probe+0x8d/0x150 [ 429.804256][ T31] usb_probe_device+0x1c3/0x3b0 [ 429.809267][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 429.814716][ T31] really_probe+0x254/0xae0 [ 429.819258][ T31] __driver_probe_device+0x1e8/0x360 [ 429.825137][ T31] driver_probe_device+0x4f/0x240 [ 429.830987][ T31] __device_attach_driver+0x270/0x410 [ 429.836456][ T31] bus_for_each_drv+0x258/0x2f0 [ 429.842022][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 429.847991][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 429.853733][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.858971][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 429.865635][ T31] __device_attach+0x2c4/0x450 [ 429.870590][ T31] ? __pfx___device_attach+0x10/0x10 [ 429.875920][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 429.881734][ T31] ? _raw_spin_unlock+0x28/0x50 [ 429.886726][ T31] device_initial_probe+0xa1/0xd0 [ 429.893362][ T31] bus_probe_device+0x12a/0x220 [ 429.898289][ T31] device_add+0x7d7/0xb80 [ 429.903019][ T31] usb_new_device+0x99d/0x1620 [ 429.907861][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.915021][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 429.920779][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.926023][ T31] hub_event+0x28e8/0x4d30 [ 429.930520][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 429.935680][ T31] ? __pfx_hub_event+0x10/0x10 [ 429.943145][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 429.948925][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.954581][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 429.960692][ T31] process_scheduled_works+0xa8e/0x14e0 [ 429.966366][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 429.973122][ T31] ? assign_work+0x3cf/0x5d0 [ 429.973515][ T8785] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 429.977803][ T31] worker_thread+0xa47/0xfb0 [ 429.977849][ T31] ? __kthread_parkme+0x71/0x1f0 [ 429.996023][ T31] kthread+0x388/0x470 [ 430.001511][ T31] ? __pfx_worker_thread+0x10/0x10 [ 430.006681][ T31] ? __pfx_kthread+0x10/0x10 [ 430.011694][ T31] ret_from_fork+0x514/0xb70 [ 430.020098][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.031200][ T31] ? __switch_to+0xc89/0x1420 [ 430.038739][ T31] ? __pfx_kthread+0x10/0x10 [ 430.043497][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.048317][ T31] [ 430.052319][ T31] [ 430.052319][ T31] Showing all locks held in the system: [ 430.068557][ T31] 2 locks held by kworker/0:1/10: [ 430.075326][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 430.086851][ T31] #1: ffffc900000f7c40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 430.099477][ T31] 1 lock held by khungtaskd/31: [ 430.104455][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 430.115158][ T31] 2 locks held by getty/5368: [ 430.120000][ T31] #0: ffff888035bb00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.131318][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 430.132746][ T8785] usb 4-1: Using ep0 maxpacket: 16 [ 430.148975][ T31] 5 locks held by kworker/1:5/5675: [ 430.150234][ T8785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.155003][ T31] #0: ffff888021ec9d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 430.167709][ T8785] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 430.176956][ T31] #1: [ 430.185892][ T8785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.189079][ T31] ffffc90003f0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 430.197121][ T8785] usb 4-1: Product: syz [ 430.209548][ T31] #2: [ 430.213251][ T8785] usb 4-1: Manufacturer: syz [ 430.214400][ T31] ffff88802a50d1d8 [ 430.216285][ T8785] usb 4-1: SerialNumber: syz [ 430.224042][ T31] ( [ 430.227987][ T8785] usb 4-1: config 0 descriptor?? [ 430.230447][ T31] &dev->mutex [ 430.234769][ T8785] hub 4-1:0.0: bad descriptor, ignoring hub [ 430.238026][ T31] ){....}-{4:4} [ 430.242437][ T8785] hub 4-1:0.0: probe with driver hub failed with error -5 [ 430.247343][ T31] , at: hub_event+0x184/0x4d30 [ 430.253319][ T8785] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 430.269590][ T31] #3: ffff888035ba91d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 430.283602][ T31] #4: ffff888078f5d1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 430.293300][ T31] 4 locks held by udevd/7560: [ 430.298051][ T31] #0: ffff888012176ab8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 430.308739][ T31] #1: ffff888034b30c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 430.316056][ T8785] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 430.320287][ T31] #2: ffff88807eca4878 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 430.340870][ T31] #3: ffff888035ba91d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 430.351375][ T31] 1 lock held by syz.4.1008/9634: [ 430.356796][ T31] #0: ffff88802a50d1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 430.366479][ T31] 1 lock held by syz.0.1062/9825: [ 430.371780][ T31] #0: ffff88802a50d1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 430.381425][ T31] [ 430.383830][ T31] ============================================= [ 430.383830][ T31] [ 430.393559][ T31] NMI backtrace for cpu 0 [ 430.393575][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 430.393592][ T31] Tainted: [L]=SOFTLOCKUP [ 430.393595][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.393602][ T31] Call Trace: [ 430.393607][ T31] [ 430.393613][ T31] dump_stack_lvl+0xe8/0x150 [ 430.393634][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 430.393701][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.393726][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 430.393745][ T31] sys_info+0x135/0x170 [ 430.393756][ T31] watchdog+0xfd7/0x1030 [ 430.393773][ T31] ? watchdog+0x1c7/0x1030 [ 430.393788][ T31] kthread+0x388/0x470 [ 430.393803][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.393815][ T31] ? __pfx_kthread+0x10/0x10 [ 430.393830][ T31] ret_from_fork+0x514/0xb70 [ 430.393846][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.393861][ T31] ? __switch_to+0xc89/0x1420 [ 430.393875][ T31] ? __pfx_kthread+0x10/0x10 [ 430.393890][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.393913][ T31] [ 430.393927][ T31] Sending NMI from CPU 0 to CPUs 1: [ 430.513796][ C1] NMI backtrace for cpu 1 [ 430.513816][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.513838][ C1] Tainted: [L]=SOFTLOCKUP [ 430.513843][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.513852][ C1] RIP: 0010:tick_nohz_idle_retain_tick+0x0/0xa0 [ 430.513880][ C1] Code: 0a 65 4c 8b 25 21 0d b5 11 e9 a6 fd ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 57 41 56 53 e8 d1 1e 0f 00 e8 9c de 18 0a 89 c5 [ 430.513892][ C1] RSP: 0018:ffffc90000197e58 EFLAGS: 00000046 [ 430.513907][ C1] RAX: 0000000000000000 RBX: ffff88801e2a0000 RCX: ffff88801e2a0000 [ 430.513918][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.513928][ C1] RBP: ffffc90000197f10 R08: ffffffff90574637 R09: 1ffffffff20ae8c6 [ 430.513939][ C1] R10: dffffc0000000000 R11: fffffbfff20ae8c7 R12: 0000000000000000 [ 430.513950][ C1] R13: 1ffff11003c54000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 430.513961][ C1] FS: 0000000000000000(0000) GS:ffff888125055000(0000) knlGS:0000000000000000 [ 430.513973][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.513984][ C1] CR2: 000055833a6b8db8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 430.514000][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 430.514010][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 430.514021][ C1] Call Trace: [ 430.514028][ C1] [ 430.514033][ C1] do_idle+0x2db/0x540 [ 430.514055][ C1] ? __pfx_do_idle+0x10/0x10 [ 430.514076][ C1] cpu_startup_entry+0x43/0x60 [ 430.514093][ C1] start_secondary+0x101/0x110 [ 430.514112][ C1] common_startup_64+0x13e/0x157 [ 430.514135][ C1] [ 430.571297][ T8785] usb 4-1: USB disconnect, device number 60 [ 430.578017][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 430.578050][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 430.578075][ T31] Tainted: [L]=SOFTLOCKUP [ 430.578083][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.578093][ T31] Call Trace: [ 430.578101][ T31] [ 430.578110][ T31] vpanic+0x56c/0xa60 [ 430.578141][ T31] ? __pfx___schedule+0x10/0x10 [ 430.578165][ T31] ? __pfx_vpanic+0x10/0x10 [ 430.578188][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 430.578215][ T31] panic+0xc5/0xd0 [ 430.578237][ T31] ? __pfx_panic+0x10/0x10 [ 430.578257][ T31] ? preempt_schedule_common+0x82/0xd0 [ 430.578279][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 430.578299][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 430.578320][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 430.578343][ T31] watchdog+0x1030/0x1030 [ 430.578370][ T31] ? watchdog+0x1c7/0x1030 [ 430.578396][ T31] kthread+0x388/0x470 [ 430.578419][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.578436][ T31] ? __pfx_kthread+0x10/0x10 [ 430.578460][ T31] ret_from_fork+0x514/0xb70 [ 430.578486][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.578509][ T31] ? __switch_to+0xc89/0x1420 [ 430.578532][ T31] ? __pfx_kthread+0x10/0x10 [ 430.578556][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.578593][ T31] [ 430.585937][ T31] Kernel Offset: disabled