last executing test programs:

45.788808977s ago: executing program 0 (id=119):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffffff7ffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}]}, 0x34}}, 0x20000805)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x3b, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4803, @val, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r7 = fsopen(&(0x7f0000000000)='ntfs3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#X\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002800)={&(0x7f0000000880)={0x1bcc, r5, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_TID_CONFIG={0x144, 0x11d, 0x0, 0x1, [{0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x76}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5c8b, 0x800, 0xfff, 0xd, 0x2c3a, 0x7, 0x100, 0xc9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0xb, 0x4, 0x6, 0x7be, 0xf, 0x7]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0xa}, {0x1, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x6, 0x7}, {0x4, 0x7}, {0x4}, {0x2, 0xa}, {0x6, 0x5}, {0x5, 0xa}, {0x6, 0x6}, {0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x5, 0x6}, {0x4, 0x4}, {0x1, 0xa}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x1}, {0x6, 0x8}, {0x4}, {0x7, 0x8}, {0x7, 0x9}, {0x3}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x4, 0x5}, {0x4}, {0x2, 0x6}, {0x1, 0x3}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x2}, {0x0, 0x7}, {0x7, 0xa}, {0x1, 0x4}, {0x6, 0x4}, {0x6, 0x1}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x8}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x4, 0x1}, {0x5, 0x3}, {0x5, 0x6}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x6, 0x6}, {0x0, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x9}, {0x3, 0xa}, {}, {0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x7, 0x6}, {0x4, 0x3}, {0x5, 0x2}, {0x4, 0xa}, {0x1, 0x7}, {0x4, 0x2}, {0x0, 0x5}, {0x1, 0x8}, {0x5}, {0x4, 0x1}, {0x6, 0x9}, {0x1, 0x2}, {0x7, 0x3}, {0x5, 0xc}, {0x4, 0xa}, {0x0, 0x6}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0x3}, {0x1, 0xa}, {0x1}, {0x4, 0x1}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x3}, {0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0x8}, {0x3}, {0x6, 0x2}, {0x4, 0x8}, {0x3, 0x6}, {0x0, 0x9}, {0x2, 0xa}, {0x7, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x2, 0x4}, {0x1, 0x8}, {0x4, 0x7}, {0x6, 0x5}, {0x1}, {0x2, 0x8}, {0x2, 0x4}, {0x1, 0x4}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0x6}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0x8}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x5, 0xf, 0xf000, 0x800, 0x7ff, 0x82e1]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x2bc, 0x11d, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x4, 0x9, 0x8001, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0xd, 0x0, 0x1, 0x9, 0x995, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xb268, 0x4, 0x74, 0x7, 0xfff8, 0xfffb, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x695, 0x6, 0x0, 0x8, 0x7, 0x6, 0x4, 0xc0a]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x24, 0x30, 0x4, 0x48, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xed, 0x6, 0x6, 0x7, 0x668, 0x3, 0x3ff, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x55}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5f0}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x4}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xb, 0x30b7, 0xc, 0x38e7, 0x5000, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x1b, 0x48, 0x0, 0xb, 0x5, 0x1b, 0x36, 0x1, 0x5, 0x6, 0x30, 0xb, 0x6c, 0x0, 0x0, 0x1b, 0x24, 0xb, 0x1, 0x12, 0x23, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x5, 0x1b, 0x12, 0x4a, 0x18, 0xb, 0xc, 0x1, 0x30, 0xc, 0x6, 0x1, 0x5, 0xf, 0x60, 0x6, 0xb, 0x3, 0x2, 0x30, 0x60, 0xc, 0x0, 0xd, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x7}, {0x2, 0x5}, {0x5, 0x6}, {0x5, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x67bb, 0x7, 0x6, 0x2, 0x7633, 0x5, 0x892f, 0xfff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x56c8, 0x6, 0x4, 0x7ff, 0xa, 0x3, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x9}, {0x7, 0x8}, {0x7, 0xa}, {0x4, 0x7}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x8}, {0x3, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0xa}, {0x6, 0x1}, {0x3, 0x4}, {0x7, 0x9}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x7}, {0x4, 0x3}, {0x2, 0x4}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x3}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x3}, {0x3}, {0x6, 0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0xa}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0x4}, {0x4, 0x2}, {0x2, 0x6}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x6}, {0x3, 0x4}, {0x7, 0x3}, {}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x7, 0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x7}, {0x2, 0x6}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x2}, {0x2}, {0x1}, {0x5, 0x5}, {0x5, 0x4}, {0x1, 0x2}, {0x6, 0xa}, {0x2, 0x8}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0x3}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x48, 0x4, 0x4, 0xb, 0x9, 0x60, 0x9, 0x6, 0xb, 0x24]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x258, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xad}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc21}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x110, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x30, 0x18, 0x1b, 0x3, 0xb, 0x36, 0x4, 0x16, 0x3, 0x16, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1}, {0x4, 0x7}, {0x1, 0xa}, {0x0, 0x3}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x0, 0x3, 0x9, 0x8, 0x8, 0xc0]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{}, {0x1, 0x5}, {0x2, 0x6}, {0x7, 0x7}, {0x6, 0x5}, {0x2, 0x5}, {0x3, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x6}, {0x0, 0x4}, {0x6, 0x7}, {0x0, 0x3}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x4, 0x9}, {0x3, 0x9}, {0x3, 0x7}, {0x3}, {0x3}, {0x4, 0x5}, {0x4}, {0x4, 0x4}, {0x6, 0x18}, {0x3, 0x1}, {0x3, 0xa}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x8}, {0x2, 0x3}, {0x1, 0x4}, {0x0, 0xa}, {}, {0x2}, {0x1, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {0x7, 0x8}, {0x1, 0x7}, {0x2, 0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x6, 0x9}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x7}, {0x5, 0xa}, {0x6, 0x5}, {0x2, 0x9}, {0x6, 0x4}, {0x7, 0x7}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0x1}, {0x1, 0x2}, {0x3}, {0x6}, {0x0, 0xa}, {0x4}, {0x5}, {0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x9}, {0x3}, {0x5, 0xa}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x6}, {0x4, 0x3}, {0x4, 0x7}, {0x6, 0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x4}, {0x2, 0x7}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5}, {0x6, 0x1}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x1}, {0x0, 0x3}, {0x2, 0x1}, {}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x5}, {0x0, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5d, 0x9, 0x6, 0x80, 0x0, 0x3, 0x4, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x8, 0x52, 0x1, 0x3, 0x4, 0x1, 0x400]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf5c}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe0}]}]}, @NL80211_ATTR_TID_CONFIG={0x78, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x91}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9a23}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x290, 0x11d, 0x0, 0x1, [{0x134, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x48, 0x60, 0x2, 0x3, 0x60, 0x5, 0x14, 0x6a1d90f2ab30eafb, 0x9, 0xc, 0x6c, 0x1, 0x9, 0x12, 0x36, 0x30, 0x60, 0x9, 0x1b, 0x60, 0xc, 0x36, 0x6, 0xc, 0x6c, 0x60, 0x4]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x2}, {0x1, 0x8}, {0x5}, {0x6, 0x9}, {0x6}, {0x3}, {0x2, 0x3}, {0x4, 0x5}, {0x1, 0x8}, {0x1}, {0x7, 0x8}, {0x6, 0x4}, {0x6, 0x9}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x8}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x2}, {0x6, 0x1}, {0x6, 0x4}, {0x4, 0x5}, {0x0, 0x3}, {0x2, 0x6}, {0x5, 0x1}, {0x0, 0x6}, {0x2, 0x9}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xfe00, 0x1f1, 0x84, 0x8, 0x9, 0xfffa, 0xe9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x6, 0x0, 0xfc00, 0x0, 0xf, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb200, 0x3, 0x3, 0x2, 0x4, 0x7, 0x4, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6b, 0x6f5, 0x9, 0x3, 0x80, 0xa716, 0x0, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x1ff, 0x4d89, 0x8001, 0x8, 0x5, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xbaf6, 0x0, 0x1, 0x6, 0x72f, 0x9, 0x4]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x9}, {0x4, 0x1}, {}, {0x4, 0x8}, {0x6, 0x5}, {0x3}, {0x3, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x6, 0x7}, {0x3, 0x9}, {0x5, 0x6}, {0x3, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x3, 0x8}, {0x4}, {0x2, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x68}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x24, 0xc, 0x6, 0x6, 0xc, 0x48, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xfffe, 0x4, 0x5, 0xffc0, 0x1, 0x9]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x6d, 0x6c, 0xb, 0x0, 0x24, 0xb, 0x30, 0x9, 0x16, 0x1b, 0x6, 0x18, 0x6c, 0x9, 0xc, 0x3, 0x48, 0x1, 0x24, 0xb]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2380, 0x9, 0x5, 0x6, 0xf800, 0x1, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x5, 0x101, 0xb, 0x33, 0x1, 0x62]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x1, 0x80, 0x8, 0x9, 0x2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0xffae, 0x1, 0x8, 0xb, 0x9, 0x3260]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x5, 0xaeb0, 0x8, 0x8, 0x4783, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}]}]}, @NL80211_ATTR_TID_CONFIG={0x6e8, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x661}]}, {0x294, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x268, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xff80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xeb2, 0x4fc3, 0xffff, 0x1, 0xaaf, 0xbc71]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x100, 0x6, 0x3, 0x81, 0xe64, 0x9]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x4, 0x9, 0x5, 0x3, 0x1b, 0x1a, 0x24, 0xc, 0x3, 0xc, 0x60, 0x7bbf0dbce3042be1, 0x6c, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf000, 0x8000, 0xce, 0x3, 0x1, 0x4, 0x5, 0x4]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x6, 0x9, 0x0, 0x8, 0x8b, 0x1, 0xaf]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x3}, {0x4, 0x6}, {0x1}, {0x3, 0x1}, {0x4, 0x3}, {0x6, 0x6}, {0x6, 0x1}, {0x2, 0x3}, {0x7, 0x3}, {0x7, 0x3}, {0x3, 0x6}, {0x0, 0x3}, {0x4}, {0x1, 0xa}, {0x4, 0x8}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x9}, {0x6, 0xa}, {0x6, 0x3}, {0x1, 0x4}, {0x5, 0x6}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x16, 0x24, 0x18]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x9, 0x5, 0xc, 0x81, 0x8, 0x6, 0x81]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x5}, {0x3, 0x6}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x8}, {0x3, 0x5}, {0x5, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x5}, {0x0, 0x2}, {0x3, 0x2}, {0x4, 0x8}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x4}, {0x5, 0x8}, {0x4, 0x2}, {0x3, 0x3}, {0x7}, {0x5, 0x3}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x2}, {0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0x3}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0xa}, {0x3, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x4}, {0x3, 0x9}, {0x1, 0x3}, {0x2, 0x1}, {0x4, 0x5}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9d12, 0x10, 0x2, 0x6, 0x1, 0x3, 0xff01, 0x65]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x8}, {0x2, 0x8}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0x5}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x2}, {0x3}, {0x3, 0x9}, {0x1, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf3, 0xb107, 0x9, 0x47b4, 0xae76, 0xa366, 0x5, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x12, 0x6c, 0xc, 0x3, 0x24, 0x24, 0x36, 0x3, 0x6, 0x2, 0x6c, 0x6, 0x2, 0x3, 0x1b, 0x3, 0x9, 0x13, 0x9, 0x1b, 0x3, 0x16, 0xb, 0x18, 0xb, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x5, 0x7, 0x7, 0x1000, 0x0, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x8}, {0x7, 0x2}, {0x3, 0x3}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x7}, {0x7, 0x8}, {0x7, 0x9}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0x1}, {0x3}, {0x2, 0x9}, {0x7}, {0x0, 0x8}, {0x2}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x9}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x0, 0x8}, {}, {0x0, 0x7}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x9}, {0x6, 0x4}, {0x4, 0x9}, {0x6, 0x8}, {0x7, 0x1}, {0x4, 0x5}, {0x4, 0x8}, {0x3, 0x4}, {0x5, 0x2}, {0x4, 0x2}, {0x3, 0x6}, {0x7, 0x3}, {0x5}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x7}, {0x0, 0x6}, {0x7, 0x5}, {0x7, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x7, 0x4}, {0x5}, {0x1}, {0x3, 0x6}, {0x3}, {0x6, 0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x1, 0x6}, {0x6, 0x7}, {}, {0x6}, {0x1, 0x2}, {0x4}, {0x0, 0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x2, 0x8}, {0x3, 0x4}, {0x4, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x8, 0x0, 0xff, 0x3, 0x7, 0xfff8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x2, 0x8, 0x2, 0x8, 0x200, 0x81]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x9, 0x6, 0x4, 0x8, 0x6, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x3, 0x30, 0x30, 0x5, 0x5, 0x6, 0x12, 0x3, 0x1, 0x5, 0xc, 0x1, 0x18, 0x3]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x348, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfa}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2f0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x3}, {0x6, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x3}, {0x7}, {0x6, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0x7}, {0x7, 0x12}, {0x1, 0x8}, {0x7, 0x6}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x2}, {0x6, 0x3}, {0x3, 0x8}, {0x4, 0x6}, {0x7, 0x1}, {0x3, 0x9}, {0x6}, {0x4, 0x8}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x5}, {0x3, 0x7}, {0x2, 0x4}, {0x6, 0x7}, {0x3, 0x3}, {0x6, 0xa}, {0x5, 0x5}, {0x1, 0x3}, {0x1}, {0x4, 0xa}, {0x6, 0x9}, {}, {0x1, 0x4}, {0x5}, {0x2, 0x2}, {0x7, 0x7}, {0x1, 0x5}, {0x7, 0x3}, {0x7}, {0x1, 0x4}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x4, 0x1}, {0x1, 0x2}, {0x1, 0x1}, {0x3, 0x6}, {0x5}, {0x2, 0x9}, {0x4, 0x3}, {0x6, 0x1}, {0x5, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x6c, 0x58, 0x1, 0x3, 0x4, 0x9d6bd49f7b1f1eb6, 0x6, 0x24, 0x48, 0xc, 0x12, 0x1, 0x18, 0x1b, 0x36, 0x1b, 0x2, 0x24, 0x36]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x7}, {0x7, 0x8}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0x4}, {0x5, 0x4}, {0x2, 0x7}, {0x2, 0x9}, {0x4, 0x7}, {0x7, 0x8}, {0x2, 0x5}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {}, {0x1, 0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x2}, {0x7, 0x2}, {0x4, 0x5}, {0x4, 0x4}, {0x2, 0x3}, {0x5, 0x8}, {0x6}, {0x1, 0x5}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x2}, {0x5, 0x16}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x6}, {0x0, 0x18}, {0x7, 0x8}, {0x0, 0x6}, {0x3, 0x2}, {0x4, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x6, 0x3, 0x7ff, 0x1ff, 0x401, 0x5]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x1000, 0x8, 0x401, 0x6, 0x9, 0x8]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x30, 0x30, 0xb, 0x30, 0x9, 0x5, 0x36, 0x2, 0xb, 0x48, 0x30, 0x3, 0x6, 0x16, 0x48, 0x18, 0xb, 0x36, 0x0, 0x12, 0x44, 0x18, 0x60]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x60, 0x18, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0x3, 0x9, 0x7ff, 0x7ff, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x4, 0x60, 0x1, 0x9, 0x18, 0x3, 0xc, 0x12, 0x5, 0x16, 0x1b, 0x5, 0x4, 0x36, 0x6c, 0x60, 0x1, 0xb, 0x6c, 0x16, 0x1, 0x2f, 0xb, 0x1, 0xb, 0x48, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x6, 0x1, 0x4, 0xb075, 0x6, 0x200]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x9, 0x36, 0x60, 0x60, 0x48, 0xc, 0x4, 0x48, 0xb, 0x6, 0x1b, 0x16, 0x14]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x9}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0xa}, {0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x4}, {0x1, 0x1}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0x4}, {0x7, 0x6}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0x4}, {0x2, 0x4}, {0x2, 0xa}, {0x2, 0xa}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0xa}, {0x0, 0x1}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x7, 0x1}, {}, {0x4, 0x9}, {0x2, 0x7}, {0x1, 0x8}, {0x5, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2a06, 0x3, 0x7, 0x40, 0x3, 0xba24, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0xf07, 0x8000, 0x2, 0x6, 0x0, 0x8000, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfff9, 0x2, 0x0, 0xffff, 0x6, 0xfffd, 0x7]}}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x3, 0x3, 0x4, 0x8, 0x8, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfcaf, 0xff, 0x3, 0xac, 0x8, 0xb13, 0xfff7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x5, 0x18, 0xb, 0x4, 0xc, 0x4, 0x16, 0x36, 0x48, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0xa, 0x373, 0xf5d, 0x2fae, 0x5, 0xeb]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2c9d, 0x55, 0x8000, 0x6, 0x3, 0xaac, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0xff, 0x5, 0x2, 0x9, 0x401, 0xff05]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x29b, 0xff50, 0x5, 0x3, 0x6, 0x1000, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x850, 0x11d, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffeffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x400, 0x1ff, 0x8000, 0x8, 0x4, 0x39, 0xfff8]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xffff, 0x9, 0x400, 0xec, 0x8, 0x96f, 0x80]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x6c, 0x21, 0x36, 0x48, 0x2, 0xc, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x27a, 0x81, 0x0, 0x3, 0x7f, 0x7, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc2, 0x1ff, 0x2, 0x9, 0x7, 0xa0, 0x400, 0x7d4]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x73c5, 0xa, 0x2, 0x80, 0x2, 0xfffd, 0x9a]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2b}]}, {0x350, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2fc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xbb6, 0x2, 0x8, 0x9, 0x78cf, 0x1, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x5}, {0x4}, {0x0, 0x7}, {0x6, 0x7}, {0x7, 0x2}, {0x4}, {0x7, 0x8}, {0x5, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x16}, {0x1, 0xa}, {0x0, 0x7}, {0x6, 0x2}, {0x1}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x5}, {0x4, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x359, 0xb477, 0x100, 0x8, 0xa, 0x9]}}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb, 0x1, 0x4, 0x18, 0x5, 0x60, 0x5, 0x18, 0x60, 0x36, 0x2, 0x5, 0x12, 0x2, 0x6, 0x1f]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x702d, 0x100, 0xf, 0x9, 0x9, 0xfff9, 0x4]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x6}, {0x0, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x1, 0x4}, {0x5, 0x4}, {0x1, 0xa}, {0x6, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {}, {0x5}, {0x0, 0x7}, {0x5, 0x5}, {0x4, 0x2}, {0x4, 0x6}, {0x6, 0x5}, {0x5}, {0x1, 0x8}, {0x0, 0x2}, {0x7, 0x7}, {0x3, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x6, 0x1}, {0x3, 0x5}, {0x1, 0x4}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x9}, {0x3}, {0x5, 0xa}, {0x1, 0x5}, {0x1, 0x6}, {0x6, 0x9}, {0x2, 0x5}, {0x1, 0x9}, {0x6, 0x7}, {0x3, 0x3}, {0x6, 0x2}, {0x3, 0x8}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0xa}, {0x0, 0x6}, {0x2, 0x8}, {0x6, 0x6}, {0x0, 0x8}, {0x7, 0xa}, {0x3, 0x3}, {0x2, 0xa}, {0x4, 0x4}, {0x7, 0xa}, {}, {0x3, 0x4}, {0x1, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x6}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0xa}, {0x7, 0x5}, {0x7, 0x4}, {0x7, 0x3}, {0x6, 0x4}, {0x4, 0x5}, {0x3, 0xa}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0xa}, {0x7, 0x4}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0x5}, {0x1, 0x5}, {0x3, 0x5}, {0x7, 0x9}, {0x6, 0x9}, {0x5}, {0x2, 0x4}, {0x3, 0x7}, {}, {0x0, 0x1}, {0x4, 0x8}, {0x1, 0x6}, {0x6, 0x6}, {0x6}, {0x5}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x5}, {0x4, 0x3}, {0x4}, {}, {0x6, 0x7}, {0x4, 0x7}, {0x3, 0x3}, {0x1, 0x7}, {0x2, 0x6}, {0x2, 0x5}, {0x7, 0x4}, {}, {0x7, 0x4}, {0x1}, {0x6}, {0x0, 0xa}, {}, {0x1, 0x2}, {0x6, 0x7}, {0x0, 0x3}, {0x4, 0x3}, {}, {0x2, 0x7}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x2}, {0x4, 0x4}, {0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x1}, {0x3, 0x9}, {0x3, 0x3}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x4, 0x2}, {0x4, 0xa}, {0x5, 0x4}, {0x3, 0x2}, {0x7, 0x6}, {0x1, 0x6}, {0x4, 0x3}, {0x2, 0x4}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x1}, {0x1}, {0x6, 0x2}, {0x6}, {0x5, 0xa}, {0x2}, {0x1, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x7, 0x5}, {0x4, 0x1}, {0x3}, {0x2, 0x9}, {0x3, 0x2}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x8}, {0x7}, {0x2, 0x6}, {0x2, 0x1}, {0x6, 0x1}]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0xacb, 0x0, 0x0, 0x4, 0x3400, 0x3, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9a3, 0x400, 0x7, 0xfffc, 0x5, 0x7ff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0xfffb, 0xc4aa, 0x3, 0x80, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0x18]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x9}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0x1}, {0x0, 0x4}, {0x3, 0x7}, {0x3, 0x3}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x7, 0x8}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x3}, {0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x3, 0x4}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x2}, {0x4}, {0x6, 0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x2}, {0x6}, {0x4, 0x1}, {0x1, 0x3}, {0x7, 0x9}, {0x1, 0x3}, {0x4, 0x5}, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x1, 0x7}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x6}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x1}, {0x6, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x4, 0x7}, {0x3, 0x4}, {0x2}, {0x2, 0x4}, {0x4, 0x4}, {0x5, 0x2}, {0x4, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x1, 0x2, 0x7, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x18, 0x965fa07a2dbce77d, 0x0, 0x1b, 0xc, 0x6c, 0x12, 0x0, 0xb, 0x36, 0x6, 0x60, 0x7e, 0x16, 0x5, 0x17, 0x8, 0x2, 0x0, 0x2, 0x9, 0x2, 0x1, 0x12, 0x60, 0xc, 0x6c, 0x30, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x651, 0x1, 0x4, 0x3, 0x100, 0x9, 0x1]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x3}, {0x3, 0x7}, {0x4, 0xb}, {0x0, 0x6}, {0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x3, 0x7f, 0x7, 0x2, 0x4, 0x9, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xa, 0x3, 0x5, 0x7ff, 0xfff8, 0x2, 0x1]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x60, 0x6c, 0x362b946283874a7e, 0x18, 0x1, 0x3, 0x1, 0x6, 0x18, 0x4b, 0xc, 0x60, 0x51, 0xf80e61585096cb3, 0x24, 0x12, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x700, 0xa0, 0x1, 0x2, 0x3, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x5, 0x1, 0x95ad, 0x1, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7790}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x20c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x18, 0x1, 0x48, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0xb, 0x3, 0x5, 0x24, 0x4, 0x1b, 0x5, 0x60, 0x48, 0x4, 0x24, 0x12]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4ad, 0x7, 0x3cc2, 0x1000, 0xd, 0x100, 0x1, 0x6]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x3, 0x87d4, 0x81, 0x5b1f, 0x4, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x1}, {0x4}, {0x3, 0xa}, {0x0, 0x9}, {0x4, 0x9}, {0x5, 0x5}, {0x5}, {0x6, 0x4}, {0x0, 0x5}, {0x3, 0x12}, {0x1, 0x9}, {0x2, 0x4}, {0x1, 0x5}, {0x7}, {0x1}, {0x4, 0x3}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x2, 0x2}, {0x1, 0x9}, {0x3, 0x6}, {0x0, 0x5}, {0x4, 0x4}, {0x2, 0x7}, {0x2, 0x1}, {0x3, 0x9}, {0x6, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x5, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x8}, {0x2}, {0x5, 0x9}, {0x7, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x3}, {0x3}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0xea743e265b065882, 0x4, 0x1b, 0x16, 0x6c, 0x9, 0x9, 0x36, 0x4, 0x9, 0x6, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x39, 0x5, 0x1, 0x668, 0x70f6, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xda5, 0x9, 0x3b6, 0x3188, 0x1, 0x1c, 0x100, 0x7]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x13, 0x137, 0xb069, 0xa, 0xfdf3, 0x5000, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc6, 0xb, 0x0, 0x8, 0x1, 0x6, 0x4, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xffff, 0x3, 0xe, 0xef7, 0x9, 0x0, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x7, 0x9}, {0x7, 0x4}, {0x5, 0x4}, {0x1, 0x8}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6e, 0x6, 0x0, 0x24, 0x18, 0x30, 0x48, 0x5, 0x3, 0x5, 0x3, 0x5, 0x1, 0x2, 0x36, 0x30, 0x24, 0x30, 0x2, 0xb, 0x80d2cbf8fa899375, 0xc, 0x3, 0x30, 0x2, 0x3a, 0x5, 0x3d, 0x18, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0xc000, 0xfffe, 0x7, 0x40, 0x6, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x1, 0x6, 0x8, 0x0, 0x5, 0x2, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x62d, 0x540, 0x7fff, 0x2, 0x7, 0x4, 0x4, 0x8269]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0x204, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x2, 0x1b, 0x60, 0x3, 0x1, 0xb, 0x1, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0xa, 0x7, 0x8, 0x3, 0x0, 0x3]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x6}, {0x5, 0x2}, {0x4, 0x1}, {0x0, 0x5}, {0x7, 0x5}, {0x3, 0xa}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x3}, {0x2, 0x1}, {0x2, 0x8}, {0x2, 0x8}, {0x5, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x4}, {0x4, 0x6}, {0x2, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x7}, {0x4, 0x2}, {0x1}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x4}, {0x5, 0x3}, {0x7, 0x6}, {0x7, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x7}, {0x4, 0x9}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x6}, {0x6, 0x1}, {0x2}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0x8}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x6}, {0x6, 0x6}, {0x3, 0x8}, {0x2, 0x5}, {0x7, 0x7}, {0x7, 0x6}, {0x4, 0x9}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0xa}, {0x6, 0x2}, {0x6}, {0x5, 0x4}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0x2}, {0x1}, {0x4, 0x3}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6, 0x8000, 0x6, 0xffff, 0x7, 0x144c, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x200, 0x3, 0x800, 0x817f, 0x1, 0x1, 0x38b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x6}, {0x5, 0x9}, {0x3, 0x8}, {0x4}, {}, {0x7, 0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x8}, {0x4, 0x1}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x3ff, 0x0, 0x4, 0x8, 0x4, 0xc000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x2, 0x2, 0x59, 0x101, 0x3, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0xfce2c5f3aa4f6635}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xfff, 0x7, 0xce, 0x300, 0x4, 0x2, 0xff9f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x4, 0x2, 0x18, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1c3d, 0x3e3, 0x400, 0x2, 0xb83, 0x7, 0x1, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x2}, {0x3, 0x8}, {0x0, 0x5}, {0x7, 0x3}, {0x2, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x2, 0x8}, {0x7}, {0x6, 0x6}, {0x3, 0x4}, {0x3, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x4, 0x7}, {0x7}, {0x3, 0x2}, {0x4, 0x9}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0x9}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x4}, {0x1}, {0x3, 0xa}, {0x6, 0x7}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x6}, {0x2, 0x3}, {0x3, 0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x4, 0x7}, {0x3, 0x4}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbe2, 0x7, 0xd, 0x0, 0x1, 0x7, 0x8, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6e0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}]}]}, @NL80211_ATTR_TID_CONFIG={0x2b0, 0x11d, 0x0, 0x1, [{0x298, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x264, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x4, 0xfff, 0x7ff, 0x3, 0x5, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x80, 0x6, 0x7ff, 0x3, 0xfff7]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0x3}, {0x3, 0x5}, {0x7, 0x2}, {0x0, 0x5}, {0x6}, {0x0, 0x8}, {0x2}, {0x0, 0x3}, {0x4, 0x4}, {0x4, 0x6}, {0x3, 0x7}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0x3}, {0x0, 0xa}, {0x3, 0xa}, {0x5, 0x9}, {0x2, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0x8}, {0x4, 0x2}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x2}, {0x5, 0x5}, {0x0, 0x1}, {0x2, 0x3}, {0x3, 0x5}, {0x2, 0x8}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x2}, {0x1}, {0x3, 0x2}, {0x0, 0x7}, {0x0, 0x7}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0x2}, {0x2}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x2, 0x6}, {0x6, 0x1}, {0x5, 0x6}, {0x3, 0xa}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x9}, {0x2, 0x9}, {0x4, 0x6}, {0x6, 0x9}, {0x3, 0x2}, {0x5, 0x1}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x7}, {0x2, 0x8}, {}, {0x5, 0x4}, {0x0, 0x1}, {0x3, 0x9}, {0x6, 0x5}, {}, {0x4, 0x6}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x4, 0x0, 0x7ff, 0x9, 0x9, 0x10, 0x3]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x1}, {0x3, 0x4}, {0x3, 0x9}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x1}, {}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x3}, {0x6}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0x3}, {0x5}, {0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x3, 0x9}, {0x6, 0x9}, {0x7, 0x8}, {0x3, 0xa}, {0x6, 0x13}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0xa}, {0x6, 0x2}, {0x7, 0xa}, {0x5}, {0x6, 0x9}, {0x4, 0x2}, {0x3, 0xa}, {0x6}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x1}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x7}, {0x7}, {0x7, 0x7}, {0x5, 0x1}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x1, 0x5, 0x9, 0x16, 0x31, 0x60, 0x69, 0x6, 0xb, 0x18, 0x24, 0x4, 0x1e, 0x6c, 0x1b, 0x16, 0x16, 0x48, 0x6c, 0x30, 0x48, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x400, 0x0, 0x7, 0x1, 0xc5c9, 0x7f24, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x0, 0x5, 0x6, 0x40, 0x9, 0x9]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x2}, {0x0, 0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x3, 0xa}, {0x7, 0x6}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x5}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x5}, {0x6, 0x6}, {0x2, 0x5}, {0x3, 0x4}, {0x6, 0x7}, {0x1, 0x4}, {0x3, 0x1}, {0x5}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x1}, {0x2, 0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0x2}, {0x3, 0x6}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x4}, {0x5, 0x9}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0xa}, {0x4, 0x6}, {0x4, 0x2}, {}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x7}, {0x4, 0x7}, {0x6, 0x2}, {0x4, 0x7}, {0x4, 0xa}, {0x1}, {0x3, 0x4}, {0x2, 0x2}, {0x2, 0x1}, {0x7, 0x2}, {0x1, 0x9}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0x5}, {0x6, 0x1}, {0x0, 0x6}, {0x5, 0x2}]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x4}, {0x3}, {0x2, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x3, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x7, 0x3}, {}, {0x1, 0x7}, {0x1, 0x2}, {0x7, 0x5}, {0x3, 0x7}, {0x7}, {0x5, 0x8}, {0x1, 0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x2, 0x4}, {0x7, 0x8}, {0x1, 0xa}, {}, {0x5, 0x6}, {0x2, 0x6}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x4, 0x3}, {0x5, 0x1}, {0x1, 0x9}, {0x7, 0x6}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0x5}, {0x4, 0xa}, {0x3, 0xa}, {0x6, 0x6}, {0x0, 0xa}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x1, 0x8d, 0x3, 0xb, 0x1]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0x60, 0x48, 0x2, 0x16, 0x3, 0x1, 0x2, 0x18, 0x12, 0x9, 0x1, 0x36, 0x66acb41c5c01fb40, 0xb, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfff8, 0x400, 0x7, 0x0, 0x422, 0x3, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xd9, 0x8f, 0x3e5, 0x8, 0x6, 0x7, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfb2f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x1bcc}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0)

45.787348151s ago: executing program 0 (id=122):
syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df780052501013a"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x60})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0)

44.540649112s ago: executing program 0 (id=143):
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00'})
bind$can_j1939(r0, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}, 0x1, 0xc3}, 0x0)

44.330572668s ago: executing program 0 (id=144):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r0, 0xc138fd09, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x0, 0x2, 0x110, r1, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240), 0x8)
setresgid(0xee00, 0x0, 0x0)
syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_getfd(r3, r3, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}, 0xb}, 0x1c)
sendto$inet6(r2, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37a00001a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

44.260728201s ago: executing program 0 (id=145):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r4)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000040)={0x0})
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
unlink(&(0x7f00000008c0)='./file0\x00')

42.910749189s ago: executing program 0 (id=153):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="08f64fd5250200b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00004615061005001800128008000100767469000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

42.899194472s ago: executing program 32 (id=153):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="08f64fd5250200b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00004615061005001800128008000100767469000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

34.274479854s ago: executing program 4 (id=251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000400)={{0x2, @name="8a183b24e136ddbe8aa2dfee78e983d4ef6725bb81280e85d0cf99cdb449979a"}, "c70104b361aeb34bff91d861e3c065bb35465b517724461931fe74abad358d7b", 0x2})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4e}, 0x94)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r5, 0x81044804, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r6, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
syz_emit_ethernet(0x14, &(0x7f0000000280)={@local, @remote, @val={@void}, {@generic={0x88a2, 'f\n'}}}, 0x0)

32.647510999s ago: executing program 4 (id=269):
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00'})
bind$can_j1939(r0, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}, 0x1, 0x4000000}, 0x0)

32.578311202s ago: executing program 4 (id=270):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0))
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x64, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000600d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)

29.555994227s ago: executing program 4 (id=313):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x610800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64)
r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64)
prctl$PR_GET_SECCOMP(0x15)
sendmmsg$inet(r2, &(0x7f0000000340)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x1, 0x4004800) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) (async)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="dc02d95bbcd2552b867866c232ee4ca389a52e1bc0951fdd1384ca00cdc58825f09df42f2a0ab5e594f5b4ff1858383056b6640fc58324a4b6aac9e20304bca28ad2255d265bdb02375da1e183b2", 0x4e}], 0x1, &(0x7f0000001540)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xc64}}], 0x18, 0x8010}], 0x1, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000280)=0x8)
sendto$inet6(r4, &(0x7f0000000180)="8e", 0x1, 0x10040000, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYBLOB="200300000017"], 0xa)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000002800)={0x2020}, 0x2020) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x20) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 32)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 32)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
chdir(&(0x7f00000001c0)='./bus\x00') (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='./bus\x00', &(0x7f0000000140), 0x40, 0x0) (async)
write$UHID_INPUT(r8, &(0x7f0000000500)={0x8, {"ef24978a60ef40e6dba765d907d57a8d218a5dca37163e2931f864d9ab96f8bd8adc02b1209e12c49927261840c7e6d396e65e3e0fd0251ce56a308434808e0ea1b3087bbbc5b1fab942f2afd759798d8eec4b53f99d83333b55f43f0101ca23d6057f64c3b52ac64482f467490e35bfe3c659afc2a1b6a477a8db76d2070d74a685b9fe2c5d09ef8273e776d8b40e36890bcf13c86a8c0d83fa820d5d284d0eaf7c2694b799f24844124f563ec4083c7af5ce8f556d8009f187ed99b91475e7c086f93cf85486c653d835df426173db44e8cfb65f035457d8b23f26e5d344717d664d7c64d0d3d0f6120b1c91567199629c40ccbd946aa57ad3a474f6078a01995e056814930910f358ee37c2b0617bbd7c724c3fccb35e351ee2ecf87f15ad9f28dbb1fffe37d93abac8384dba3fdefe7576ba42b404198e8aea91f4339cf66296e9911d587e3e768bc524a38bfcfaa0117090f2f402bbc3bde4b930a300ec40e76134bc3cd73d0af0011e491b7175c6e68a7238e3e14c20cef67e36d860b52b89b6a93850c4abdb180aec42baf1a276e16e8fad67456e030b07712b6f668ce5ededb0d282ed4cd754039922df16f7e5ea1da985952787601361cf00fd88b5dc8eddd47a48029d93a2ffa89cbdc39a218699798232cf4103cc11367adc79e00fb5adfdbdfae13d4b73113fbdff79d711803b81fe8677e6e79fb70e8fb30229e9f57a56677168f0f17d37fbae9cf89a94c8cddda0c6d10d00d7680407769a0a603d4571728b4b5a1c3162c4e67462b62434fe4052eef5a119688d18fffecd7717068dc0fde88010d7cdb76bb9f8d21ed9d1480b9341f390e5b8dddb38c8aceb1f379cd07f32dbde632996ec8fab3121779db1984afa6509356fc9adb541d8fb51c897aa104aa87b7447e737461dacf79b8ac7c57a5e6daa150c9c3e6cd0c892567e5c29555f61ffb0f5badfcaa4fdf5783141e64e56b529a1cc93049bec02edfc644fe05fb05c6b0a547aaade36bc6b7b363d9f7631ec7a466f19d1afaa316920da84c6d78b2151b4ea42eaea891202ebdec975674a076437cd816e680a0e28533814f31af0cebcf836f5f5d297f07c1fb784cfc3e77b5a77df16f1102483b8218e05c631278d25e636b7ab667b52def330f3a575c6e2230c5c5748982ae5df1c71b0631026bfebb425851f6f7097301358d34b54688dfae37c41ad7344fa6b7cdf3a5c9f9d51e7e9d3f0a08c9a446a689184db9d329110fc45168f6ba459d14a524eb19682d4a0c4fea71767f420d771c883da5f156336065ed8dc6be2130e8d851ce41ef89ce335db313fca68cb68a3c60e4f1e581b25bc95afeb83cb903ddcda65fd222693c01aa2eadd200c62c8d487d787c441fd7c3a01d3b1833febe8f431e076f03bdcc792515b5b8ca14ca74a8e6a312d1cfa245dbc5c6d595115f7f0d88f9cf85596dfb93b67a34d7e02f31371e19a8841782fcf5905f6f25a4dcd0bfc8cfe17c6850ffc7787b3aed3bea43eba0887f8016890f1f86d3187df5b6194a12db19f56032e971e9b15481201f76058f2aeea880ca68a6b3314d2719981258dae3abcbd597e781b77f0496bde8f344abcdb2371aa52be52d8f81627a5a5a7ad03f666e98cae425f0afc03ce5a7d054992a19f8b23ed085117a716356c37ddfe8881c3df253b04bdca92d43d01ede0d691b0251188819b13b669087654eaa03f978d82f9367e4f53813e97b5ed07db8e73b0f7882fc92fe44fa01ff808b3916b31e8d26cbd71c3213819ce30368773bcf75ad55de5f2d42e90c82b5433a326a7b7c0918f1baa1a189c261157468e2932bfddf2ad7f38ab4c400290506cff586251414ae4ad82844a04e42cafc5c803499c02300440cc7e1649375de03cde7ec280df1319531d7b33e258bb99e2473f5e1795fba7bb3bfc188c0320563a552f744b0d9fb94405dc806006acc2eeb839aa5d72223817d15e8e0c8714cd23ff1d3910ee02b096918875fd3e73680698d59b5378bc490c990b9aa8a227e9ad77eeb5aca3c75e77d7138d708617ae657f90b149dde950d908b7466b3dd6cea97dcc1a32304d77f872558bb343044ce0bc7b251a34c0130933c366e3ece2f08637592a3f0a33cb28f3c8d7fbb7953fd0797c144691fd36a3c3d09bfda4fce23fc30c8fa1165272401bcd056e5a31f7bdd66a34f6d618acb5d83fc90320f1a29523688f2fe203866e99da9629600ff218408630ea16824761e78357fb88231897bafae3bf8c3e0ccbd31dda71d5d8aa88866ce9f4aefb0d3eb0dad7a03ca9d091d320cffa0feb9286757663bcda8223494dc6110fd44e17e8135ee2765260f98ff9b5c5a97438a8471448e542bb5bd27161ba25c109f06b418889f6a7841ecfca9a39034cf2cfbf77a4b7a7aff0b429e10dcfe164962bd405024247a143f8b02f8b0d3fec069b43cf51232f36b5a8b45eddc889f556a1f8c9b6c42d83ca6aa9f2886a7e1b811d4dc24c93ce63e7ba3d6d8b80eccbde9656b93144df7e11ec0177ad78049509702371a7819a2dd2e1fdcf1f999d3fc727dbf4dc2e846f76d185e15d1601c278cf4f2a042cc1079bd5dfaa70b1db3f276b334f9d7d2a36495917a6aaacb818bd823fb82509bc71cab8599f0b76f23e95e923ff9f02ada29d290b4eae2e24a9863e16b858c876feb293f05fbb05dfacecbd6aca32c1b7664c2aee22a2b0185259b9fb996c5d63c7a20226c1934252c8d9787974c62a911da09c97b1f0243a04d5234388bcbb6b4e621e01170af8519847998bfa73bc44aad046ef7f10821bee034f6fd9e182a34d4e06e66968356ab10f3eb2142de030b74a82ccb47b17d978f7073889522cc26cf7337042c723bdf7d8ca2ae6cde63b718ad168b45c412d8f933d0d2eccbeb56695bf5280085fc2e27f5a4a2c29edecd704a18b7b9b39ccce8d3e204e4967e1c773c3b1425d823136828cd983ee6a0fadea8b5b16049bf0e672f39426187579e1cb88299122bef24916f3260388c007606dacf71dac9a170891072a3ecca57008d394e6e2b8e224fac132f3eff822cc96f0542813c74a35c2b0722b03a5c8eb17753f432fa8d29b2ed4a01ae31cc359ebeabb99e0bc7702de06e6444c91a09c66f54b241e1dd919e900e361f362945ca8f833afd437d9f36083da200071d7791e2df3903d452291ef3d1a378338c4f8f5ae4796e01f2ddedeeab786c75d1323ec121df32e6ea1d9e2686349c01248d3468ac7fd0b7cca70b0c69842ce9e74962c26b4b276833ea5c4ba68420f711360f85e46efdd8e474cc87dc2299c4f5824a280b8ff6943252f236f8508d61377ebab321db53aaddc9eb253d04f2516bccef76827f9e797f067cf7cc9acc56bf7f38acecc00d7092754fcba3965cd8423eed9426b7b17b64adade2f6cfb066c5114e7d9597544f8baa59dc9115df81bb929676bcffe99c4a38a5c2de3c2c981d0ff34718de5eddb60eb59b1145940ecd93423a4445ba457aeb597c82ae5e44e3f433a900199d24c42829f27179bbabbd9920e3ce8926ada1785df1deda452c2293dc5481c1532ed5e74eba939b4a4e19b8b9bf7d409292371f6b757632b4cf2ee30c488a9cee452a9a6af05abeb067b7e9735648bde0704cd63b84a5193b58be31f66731533c3f89f2da9142a4124911461aeff44b05712f8f85b0730d7567d80106e244c6d7b801c9d272aa70e5a02d5e3e3dfa25f7d5d6bd3777d7eb71d0b522d58c8d1db5528c57ffa0d89f87984215d894a214d0837cb09d45604658ebb71faf37bcde617518318671d4fbb456e4e1987ab8b9cd2c72af02829a3944c632a6713f2c7e50234b589fc50c10ada3efab2cbbd9a1e08accea9014cd818e201f439a2cf9c61073f6fb6469ff368b289bf4717cf77e352b5703c44d11a0694dc876f836364fb5ab50fd9365249f14a1bae40b3048b4bbe05898c498bc41cd1673a87765691b5c5a12550fd9d9cb0bded8e55250facc8ecbd6c93a692679e4e9ad8268f69146016e0f72de7926a51058c04014d5a035279e58a8f6ac34cad79e9890a0ff69525d085f1d7e3128ef73469a06c228c187bdc1c5aff058a736821a3d61c6daadcaddb48cd1c990fbf4c5592a17e540d7a475f94ce893a634f99698de41abbd03afedc4f8394879680a1b5e7df137bac7a36293d80a688ec2526cebc59fa4ba461c54aaf65dc44f878c8ab083121d03bebae7df39c8506c6fd8675d132858098bd72282f00cb643bb2a69c05efcd7b0d4bb318511a4ee6b39bf9d5049da7217045bbdc0c5a0d06552f13214d05eedb5262fec0fd3f6c061a1412721a1be2b241ea78261ef0e23e5ee50409aa9c5e2bbab1360d7456bd18278380fffd30c9e626a97e142e3f0bbabd2e2159272de66278fb7f3b2d66d64bd436bd142ecaca4a69703640d7597538a478f08f15752502e4ffbf48417ba92f463edae9239a65f4cc5afccd86c20904b17579e39f3a0c80f989e4b1a9ab8566eba375d838b108f269403d40fec1779d64a4742a7eee931900819111d448de9cb76dd61e36f74e38c819f5b746daa7d030fb7f29a39f3dd9ee03de22b582dd5ac2af95d4fe3689eaa11741d7427397928fbe760a972fbcd0a1e5c5a9f439d42168a140610d00e24949f363049b6a816b366ee068241d2552ac0d188206fd8237aae97b764cb419e1a238653375873bbcc724ee516ccce6a04d5ff224f5c8f22f1676c805fde33e2ec81cb9767c2a9d5d0c90350abe4547985d0afc33856b83ddd5c3c2fde197b04ac77355344b079c2894c680d9c26f7dcfd5b52e3bca64a301fdc04958ca9ceb7b949ac5606e917847cbf7fbc77878bf75a19446b93a19689c6b4fc414bcc6ca7595599fc4a8d79218d13da802dc3aff63f5bcb922ca8d2c3bea121e5db488fe8aae26511602ac2bf02aaea140bfa319db5043f5121245e03244981c2300bf0de7b69bdf26f0d11bed1a0f0528767d8a9764e876d5a5ccadfae1292804efb1eb8d0aa0c2142c89c06ba209572841217c8fc37f1da08541f26e905d3d9dc11e69c9b37157c7e8e3417ab0729584a76e8554cc51b558cffa8d02b94e9ac084f24d7e5dbf882225c02c2ee1bc12cdf5cb5f4c797b340b90ca1151f8056539a76566b8de19e6088d9372d80ce8e50f03d07203adc6345373b70db63da7399bf4a521beb94edc4d2cada301e701caf4f428c8a62ccaa739b62baaa0ca4bf6f9f8425fe61e1fa975f945d426ca8ca9ec42a32942701494cd2b7f22674e8e51d7cca68469d32cfd917c40c6d0b3daa134d2d98be2896d6e9292acdb722e0598c5da2497e6354d117cd41b4992a8be7cbc5d0c4006719a4d88d2763807908fe73ed97f6ff4d7a22875971c69129e5654a6f383caec0f9bb1965d0a2578d978288d1f905944a8b937637b2d1222691086e13dfff757cd92940d49c63d032a464693bb3058266c0e28f8cc668c1dc0305931f041c2ef6423697d5bfae295cf221e20ced814a93fdd80cf75113547c0d96d8957ccb812c5f69ced0610cb1cc2875e31c41cb1153b12f9a9daaf74d5db2cf9a667db456e1eac73d1161edcb978af06c8d7335791c2e64124645489b6300055b43e40dabcf11a532fe07c22a9ea8c8a8b83f2edf1b6c648dfd4c7a8b72dcf6813464a765a1e0267c7f52042c391fd326cd1be551f7d4ecedc240bf3a6692acd103d9a99387a7c074b953db8b5e16cd338822881d560115ff55f648e09443991c478d9e264b091c5f302c3585424bdb4092ff10d791260b2b442", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000c, 0x10012, r8, 0x0) (async)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x8008af26, &(0x7f0000000080)=0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (rerun: 64)

28.650704192s ago: executing program 4 (id=337):
r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000240)=ANY=[@ANYBLOB="120110038e3ac6209406010013b101f0030109024600020e10bad5ed8c6b8c6e90f5fac7061003090439d8011adaa80809050810200b00000709800904e40503b956da020905080000040112a297a0305e31407a07857c682a8214976fc3ba6c3773b3b30da33933380d18b49adac90a5fd279e8b7df58744522905eed7d8674e541cdec82f5d0eed0ae6c458841dad7f29cc2d3740b1449612209ade04397c734ad236bed0975c54b32a0f0a8f1fa0dc2b01c44d8ce98c411283ba7fc71cf2f5a5231ebdc2bcf25efb9b8e7e3eabaca2aecfe"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r1, 0xc0086444, 0x0)

28.449472372s ago: executing program 4 (id=340):
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x80101)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003180)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x10, 0x7, 0x0, 0x8f}, 0x3, 0x2, [{0x54356f7f, 0xfffffc00, 0x0, 0xe18e, 0x3, 0x7}]}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x8}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x1, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x9, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x4, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x5, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x2040, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x203, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x44, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x101, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x671f, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0x80d}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x402, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x1009, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xc, 0x9, 0x2}, {0xffff, 0xc22, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0xff, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0xc, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x1, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x7ef49f37}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x5}, {0x5, 0xb382, 0x3, 0xffffffff, 0x0, 0x1}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x401}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x1e38000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {0x6}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r10 = socket$kcm(0x11, 0x3, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
r13 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
keyctl$dh_compute(0x17, &(0x7f0000001e00), 0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={'xcbc(twofish)\x00'}})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r13, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xffff7ffffffffff8, 0x10000009, 0xff7ffffb, 0x2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)

28.373661705s ago: executing program 33 (id=340):
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x80101)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003180)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x10, 0x7, 0x0, 0x8f}, 0x3, 0x2, [{0x54356f7f, 0xfffffc00, 0x0, 0xe18e, 0x3, 0x7}]}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x8}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x1, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x9, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x4, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x5, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x2040, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x203, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x44, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x101, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x671f, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0x80d}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x402, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x1009, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xc, 0x9, 0x2}, {0xffff, 0xc22, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0xff, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0xc, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x1, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x7ef49f37}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x5}, {0x5, 0xb382, 0x3, 0xffffffff, 0x0, 0x1}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x401}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x1e38000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {0x6}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r10 = socket$kcm(0x11, 0x3, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
r13 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
keyctl$dh_compute(0x17, &(0x7f0000001e00), 0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={'xcbc(twofish)\x00'}})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r13, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xffff7ffffffffff8, 0x10000009, 0xff7ffffb, 0x2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)

5.190838611s ago: executing program 5 (id=598):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900011273797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b0001006578746864720000240002800800064000000000080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000040900010073797a30"], 0x188}}, 0x0)

5.189758536s ago: executing program 5 (id=599):
r0 = socket$inet(0x2, 0x5, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000400)={{0x2, 0x4e20, @empty}, {0x0, @random="3c21618477a1"}, 0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, 'team_slave_0\x00'})
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) (async)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000007000000", 0x39}], 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0x8304, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7392, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async)
r7 = socket$kcm(0x11, 0x3, 0x0) (async)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x204c, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x2014, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0xc}}, @TCA_ROUTE4_ACT={0x2000, 0x6, [@m_mpls={0xa8, 0xa, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x6a, 0x6, "ad9281eea419ba4f0d32cb8d886379bf853e5dea450e1e5d58ec9ee79ac8e3a96941647ee7bd76963bd1f61898ad08bd298cbdb5607dc5c5ed3ab39e1949d88c563ef927bfe8adf90b5ec6b68f958f7669f1bd59437f916ca7a6b55ede2d0fadac17ffe2b8ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x13c, 0x1c, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x19d06}, @TCA_MPLS_PROTO={0x6, 0x4, 0x16}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0xd}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffff001, 0x0, 0x2, 0x8, 0xf83b750d}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbd725}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4305}]}, {0xbb, 0x6, "a0a8c9db215b206f03b2145e4b73485441377744e9e23353f8ec642057a47c8f003d311c2921a3807507a062c4e8b49fc348ddd7888929017c4b79c7277b20fa7dd083d801e5b9a4af9f16aa6e231abcc373088fc2ccbc277eaafdb6b97922b38c3efd22d98b5f7ef92d02fad2f5fa9dc45ccf654fbd6d19b1303bc3cef98d246d6ea48aca80ca7508b63a20cf958ab6048d2d5bacf2059bb2afcd98aad0c49e23a5ce0993a5ae8e3c1001ff7683e98128b38dda568f74"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0x1e18, 0xf, 0x0, 0x0, {{0xa}, {0x1d34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x9237, 0x8000, 0x20000000, 0x6, 0xa}, 0x7, 0x9, [{0x2f1, 0x7fff, 0xfffffffd, 0x800, 0xfffffff9, 0x7}]}, [{0x3, 0x4, 0x0, 0x9, 0x9, 0xf}, {0x5, 0x5, 0x910d, 0x80000001, 0x101, 0x2}, {0x401, 0x4, 0x6, 0x1, 0x1, 0x9}, {0x1, 0x0, 0x3, 0x7, 0xc, 0x8}, {0x8, 0x8001, 0x1, 0x0, 0x1, 0x7}, {0xfffff801, 0x4, 0x3, 0x8, 0xffff, 0x5}, {0x4, 0x7, 0x5, 0x5, 0xffff, 0x6}, {0x9, 0x7, 0x7, 0xffffffff, 0x80000001, 0x5}, {0x2, 0x9, 0x4, 0x6, 0x559}, {0x6, 0x4, 0x8, 0x3, 0x1, 0x648}, {0x3aed586, 0x9, 0xc, 0x3, 0x9, 0x7}, {0xa3ad, 0x0, 0x4, 0x3ff, 0xe260, 0x1}, {0x800, 0x3, 0xecb5, 0x10001, 0x0, 0x3}, {0x3, 0x8a, 0xfffffffa, 0x4, 0x0, 0xff}, {0x47c23c59, 0x4, 0x200, 0x4, 0x2, 0xffffffff}, {0x5, 0x6, 0x6, 0x831b, 0x7ff, 0x42}, {0x10d0, 0x5, 0x2, 0x3, 0x6, 0x7}, {0x2, 0x800, 0x5, 0x473, 0x1, 0x9}, {0x4, 0x9, 0x6, 0x4, 0x7, 0x80}, {0x1, 0x4, 0x1, 0x9, 0x101, 0x8000}, {0x2, 0x8, 0x7fff, 0x80, 0xfffffff7, 0x6}, {0x5bc, 0xbadc, 0x4, 0x82, 0x1ff, 0x10}, {0x3, 0x7, 0x4, 0x7, 0x40, 0x7}, {0x2, 0x9, 0x5, 0x6eec, 0x2, 0x8d}, {0x4, 0x9, 0xa97, 0xc491, 0x8, 0x4}, {0x0, 0x3267, 0x3, 0x8, 0xeddf, 0x9}, {0x8001, 0xfa0, 0x0, 0x200, 0x4, 0xffff}, {0x0, 0x0, 0x7ff, 0x8000, 0x7, 0x9}, {0x200, 0x9, 0x7, 0x4, 0x6, 0x9c}, {0x7, 0x0, 0x7, 0xfffffff9, 0x1, 0x5}, {0x9, 0xa56b, 0x2, 0x9, 0xf9, 0xfff}, {0x101, 0x6, 0x101, 0x5, 0x689}, {0x8, 0x0, 0x5, 0x2, 0x10001, 0x7}, {0x8fef, 0x8, 0x6, 0x0, 0x3, 0x8}, {0x800, 0xffffffff, 0x5, 0x7, 0x4, 0x9}, {0x8, 0x100000, 0xfffffffc, 0x4d7, 0x3, 0x6}, {0x2, 0x3ff, 0x3, 0x6094, 0x370, 0x1}, {0xa, 0x7, 0x5, 0x5, 0x5, 0x1}, {0x3, 0x9, 0x67, 0xccc, 0x6, 0x6}, {0x200, 0x7ff, 0x3, 0x7fff, 0x354, 0x4f1f}, {0x8, 0xd6d, 0x2, 0x9, 0x2, 0x6}, {0x0, 0x7, 0xd4a, 0x7, 0xc4d, 0x8}, {0x0, 0x3, 0xb5, 0x5, 0xeb7, 0x9}, {0x0, 0x1, 0x4, 0x0, 0x159b1b23}, {0x3, 0xb, 0x6934, 0x5, 0x72, 0x9}, {0x8, 0x72, 0x7, 0x3, 0x1000, 0x8087}, {0x4, 0x401, 0x3, 0x9b7, 0x28, 0x9}, {0x8, 0x10001, 0x9, 0xe, 0x400, 0x6}, {0x81, 0x8, 0x5, 0x5, 0x5}, {0x0, 0x6, 0x8, 0x78, 0x2, 0xffffffff}, {0x80000001, 0x4, 0x0, 0xfffffff7, 0x80000000, 0x400}, {0x2, 0x8, 0x3, 0x7a, 0x8}, {0x2, 0x2, 0xfffffff8, 0x9, 0x1, 0x3}, {0x5, 0x2, 0x240, 0xfffffff9, 0x3, 0x1}, {0xb8ad, 0x2, 0x6, 0x77, 0xb7, 0x3}, {0x68e6, 0x805, 0x80000000, 0x6, 0x8000, 0xb5e}, {0x0, 0x100, 0x80000001, 0xd3d, 0x3, 0x5}, {0xfffffff7, 0x3ed, 0x1000, 0x2, 0x100, 0xffff}, {0x1, 0x3, 0x8, 0x8, 0x5, 0xf}, {0x3, 0x988, 0x8, 0x3, 0x40, 0xe}, {0x0, 0xe3a4, 0x7, 0x1, 0x0, 0x7fffffff}, {0x1ff, 0x8, 0x2, 0x5, 0xfffffff9, 0x3}, {0x1, 0x1, 0xb, 0x6, 0x2, 0xc0}, {0x47, 0x2, 0x9, 0x6, 0x7, 0x7f}, {0xdd3, 0x8, 0x400, 0x8, 0xf, 0xfffffff7}, {0x9, 0x6, 0x480, 0xdc4, 0x4, 0x76a9}, {0x7ff, 0x7, 0xfffffff9, 0x4, 0x4, 0x9}, {0x2af488f0, 0x7, 0x248f, 0x1, 0x5, 0x2}, {0x7, 0x8, 0x1, 0x80000000, 0x2}, {0x6, 0x80000000, 0x1, 0xa89, 0x8, 0x2}, {0xc, 0xffff0001, 0x7f, 0x6, 0x7f}, {0xe23b, 0x0, 0x8e7f, 0x8000, 0x1000, 0xffff23a5}, {0x3, 0x8, 0x8, 0xff, 0x9, 0x6}, {0xf0, 0xfffffff8, 0xfffffff8, 0x40, 0xe12b, 0x4}, {0x145c, 0x8, 0x2edb0e6, 0x401, 0xfffffe01, 0x5}, {0x2, 0xc, 0xfffffffe, 0x7, 0x4, 0x400}, {0xfffffff7, 0x0, 0x5, 0x1, 0x7, 0x1333}, {0x8, 0x3, 0x0, 0x2, 0xd, 0x1000200}, {0x2, 0x1000, 0x1ff, 0x7, 0x7, 0x401}, {0x3, 0x7, 0x0, 0x2, 0x7, 0x3}, {0xfffffffa, 0x6, 0xc1f, 0xfd5, 0x8001, 0xffffffff}, {0x8, 0x8, 0x7, 0x8, 0x4}, {0x4, 0x0, 0x4, 0x5, 0x5, 0xd26}, {0x7, 0x5, 0x401, 0x9, 0xb, 0x7}, {0x6, 0x6, 0x4, 0x4, 0xc685, 0x3}, {0x9, 0x7, 0x1000, 0xaef, 0xfffffff9, 0x1}, {0x3, 0xb227, 0x0, 0x9, 0x6, 0x401}, {0x8, 0x16c1d468, 0x800, 0x76, 0x10, 0x10}, {0x8, 0xb8, 0x0, 0x7f, 0x8, 0x6}, {0xd28, 0x2, 0x400, 0x7, 0x6661, 0x2}, {0xcfe000, 0x1cb, 0x1, 0x9, 0x3}, {0xdd, 0x1ff, 0x7fff, 0x9, 0x9, 0x7e}, {0x3, 0x8, 0x6, 0x80, 0xffff, 0x3}, {0xc5, 0x9f, 0x6, 0x7, 0x4, 0x6}, {0xf, 0x7, 0x8001, 0x0, 0x1, 0xd7}, {0x6, 0x2, 0x8, 0x6, 0x8a52, 0x3}, {0xb0, 0x1, 0xfffffffa, 0x1000, 0x1f8a5242, 0xa31}, {0x1, 0x5, 0x9, 0xd6f, 0x5, 0x7}, {0xd, 0x7, 0x7d, 0x5, 0x9, 0x4}, {0x400, 0x3, 0x8, 0x8, 0xc, 0x4}, {0x1000, 0x3ff, 0x2, 0x80, 0x1, 0x80000001}, {0x51, 0xfffffff8, 0x1, 0x3, 0x5, 0x7}, {0xfffff001, 0x8d, 0x6, 0xd5, 0xf354, 0x5}, {0xd, 0x1, 0xc, 0x10, 0x5, 0xd}, {0x4, 0x8, 0x3, 0x9, 0x2, 0x6}, {0x8, 0x8001, 0x81, 0x289, 0xbc, 0x2}, {0xbfd5, 0x7, 0x7ff, 0x2, 0x7, 0x2}, {0x5, 0x8, 0x7ff, 0x7fffffff, 0x9, 0x10}, {0x1, 0xb1a, 0xd, 0x7, 0x6, 0xffffffff}, {0x8, 0x3, 0x202, 0x3, 0x31fa, 0x400}, {0x28d, 0x2, 0x100, 0x24, 0x6, 0x12bf}, {0x81, 0xad40, 0x9b95, 0x80, 0x2, 0x5}, {0xc4, 0x8000, 0x7, 0x9e, 0x6, 0x4}, {0x6, 0x8001, 0xf615, 0x9, 0x2, 0x8}, {0xa06c, 0x8001, 0x101, 0x3, 0x5c, 0x4}, {0x0, 0xb, 0xba9f, 0x4, 0xffffffff}, {0xd, 0x8, 0xfffffffe, 0x8}, {0x6, 0x1, 0x3, 0x9, 0x1, 0x8}, {0x0, 0x4, 0x7, 0x8, 0x6, 0x400}, {0xc19, 0x4, 0xfff, 0x0, 0x6, 0x3}, {0x8, 0x7, 0x3ff, 0x4, 0x809e, 0x3f991789}, {0x1, 0xa, 0x9, 0x5, 0x6, 0x2}, {0x7, 0x8, 0x8, 0x800, 0x0, 0x20}, {0x1, 0xfffffffb, 0x6, 0x7, 0x8, 0x1000}, {0x3, 0x8e24, 0xffffffff, 0x400, 0x7, 0x2}, {0x8000000, 0x0, 0x8, 0x2, 0x6, 0x3}, {0x4, 0x9, 0x9, 0x1, 0x7f, 0xfffffffd}, {0x3ff, 0x44, 0xd, 0x8, 0xe, 0x3}], [{0x1, 0x1}, {0x1}, {0x4}, {0x1}, {0x3, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x2}, {}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x7}, {}, {}, {0x2, 0x1}, {0x0, 0x9f931a9c1f9392ce}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2}]}}, @TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0xd1c0, 0x5, 0x7, 0xf, 0x3}, 0x3, 0xe, [{0x0, 0x4, 0x0, 0xfffffff7, 0xa, 0xffffff00}, {0x7f, 0x5, 0x2, 0x9, 0x3}, {0xf2, 0x1, 0x1ff, 0x8, 0x7, 0x1}, {0x8, 0xa425, 0xa36a020, 0x2, 0xfffffffb, 0x5}, {0x80000000, 0x2, 0xc, 0x2, 0x0, 0x1d5}, {0x3, 0x1f, 0xffffffb3, 0x7fff, 0x4, 0xffffffff}, {0x1000000, 0x9, 0x7, 0x8, 0xe6, 0xd}, {0x10, 0x2, 0x0, 0x7f, 0xffffffff, 0x2}, {0x7, 0x3, 0x4, 0x3, 0x5}]}, [{0xffff, 0x7, 0x4, 0x4, 0x0, 0x8}, {0x2, 0x6, 0x4, 0x0, 0x7369, 0x8000}, {0x7, 0x0, 0x3, 0xfffff681, 0x4, 0xfffffffe}, {0x6, 0x1, 0x8000, 0x8, 0x5, 0x3}, {0x6, 0x1, 0x1, 0xffff2c0e, 0x7, 0x8}, {0x3, 0xfff, 0x6, 0x8, 0xa, 0x4}, {0xf, 0xff, 0x2, 0x6, 0x4, 0x6}, {0xd, 0xfffffff8, 0x1, 0x7, 0x9}, {0x1, 0x0, 0x3, 0x6, 0xd, 0xfff}, {0x4, 0x9, 0x80000000, 0xfffffff7, 0x9, 0xfffffffe}, {0xfffffffc, 0x86, 0x8, 0x7fff, 0x6, 0x3}, {0x3, 0x3, 0x10001, 0x3, 0x0, 0x1}, {0x8, 0x3, 0x8322, 0x101, 0x8, 0xfffffff8}, {0x0, 0x1, 0x0, 0xff, 0x800, 0x3}, {0x4, 0x3d0c, 0x4, 0x101, 0xffffffff}, {0x4, 0xa, 0x4, 0x0, 0x2, 0x9}, {0x9, 0x10, 0xff, 0x3ff, 0xd7, 0x2}, {0x5, 0xb, 0x4, 0x3, 0x2, 0x5}, {0x80000000, 0x0, 0x8, 0x3, 0xf, 0x800}, {0x1, 0xfff, 0x3fff80, 0x7, 0xb1d3, 0x3}, {0x101, 0x777, 0x7ff, 0x3, 0x85f1, 0x101}, {0x32, 0x1, 0x800, 0x4, 0x7ff, 0xec}, {0x3, 0x5, 0x0, 0x418, 0x0, 0x7}, {0x8, 0x9, 0x1, 0xf, 0x70, 0x39a}, {0xb, 0x0, 0x81, 0x2, 0x7}, {0xd, 0x2, 0x30e, 0x6f8c, 0x7, 0x4}, {0x0, 0x7, 0x1, 0x8, 0x9, 0x80000001}, {0x4, 0x8000, 0x5, 0x8df, 0xf, 0xfffffffb}, {0x1ef, 0xff, 0xfff, 0x2, 0x4, 0x4}, {0x10000, 0x81, 0x849, 0x6, 0x6, 0xe6}, {0x9, 0x200, 0x4d9, 0x0, 0xffff9549, 0xfffffff9}, {0x7, 0x9e8c, 0x6, 0x6, 0x40, 0xffffffff}, {0x2, 0x3, 0x6, 0x2, 0x4, 0xfd}, {0x6, 0x9, 0x8000, 0x9, 0x6, 0x1}, {0xb72, 0x101, 0x5, 0xfffffff9, 0xfffff000, 0x4}, {0x7, 0x9, 0x3, 0xffffffff, 0x8, 0x1b153bef}, {0x3, 0x6dbd, 0x3946017f, 0x8, 0x101, 0x7}, {0x7fffffff, 0x3, 0x2, 0xffffffff, 0x0, 0x7}, {0x83, 0x3, 0x8, 0xfffffff7, 0x8, 0x80}, {0xa2, 0x1d, 0x1, 0x7, 0x4000000, 0x4}, {0xe, 0x9, 0x1, 0x0, 0xaa8c, 0x10000}, {0x10000, 0x400, 0x0, 0x2, 0x7f, 0x9}, {0x3, 0x1361, 0xa, 0xb355, 0x80000001, 0x4}, {0x8, 0x2, 0x3, 0xc101, 0x1, 0xf76}, {0x3, 0x5, 0x40, 0x54, 0x3, 0x40}, {0x5, 0x7, 0x19, 0x8, 0x9, 0xaae}, {0x8, 0x1c4, 0x9, 0x2000000, 0x96df, 0x6}, {0x2, 0xf, 0x3, 0xad1, 0x4, 0x9}, {0x7326, 0x9502, 0xfffffffe, 0x1, 0x3, 0x7ff}, {0x6, 0x5, 0x6, 0x7fff, 0x6, 0x6}, {0x4, 0x100, 0x100, 0x8, 0x1, 0x1}, {0x3, 0x6, 0x5, 0x2, 0x3, 0xfffffffa}, {0x8, 0x4000000, 0x3b2, 0x9, 0x3, 0x5}, {0x8, 0x9, 0x7fff, 0x4, 0xd83, 0x4}, {0x883, 0x2, 0xffffffff, 0x1ff, 0xca, 0xfffffff8}, {0x8, 0x25, 0x81, 0x9, 0x6, 0x9}, {0x3573, 0x3628, 0x1ff, 0xa7ed, 0x9, 0x8}, {0x5, 0x8001, 0x6, 0x7f80000, 0x9, 0x1}, {0x100, 0x3, 0x1, 0x0, 0x98b0, 0xe}, {0x5, 0x3, 0x9, 0x101, 0x80000001}, {0xfffff800, 0x2, 0x7, 0x5, 0x10000, 0x1000}, {0x7, 0x800, 0x100, 0x1, 0x515, 0x4}, {0x4, 0x139e, 0x0, 0x2, 0x80000000, 0x4}, {0x3, 0x7, 0x1, 0x9, 0x0, 0x8001}, {0x6, 0x0, 0x1, 0x3, 0x1, 0x2}, {0x0, 0xd, 0x9, 0x7, 0x9, 0x3}, {0x8, 0x4, 0x5, 0xfffff96a, 0xffffffff, 0xb}, {0x5, 0xfffffffe, 0x3ff, 0x9, 0x1, 0x81}, {0x7, 0x7, 0x1, 0x21b, 0x4, 0x6}, {0x3, 0xfffffffc, 0x0, 0x9, 0x915, 0xeb3}, {0x7, 0xdb, 0x2, 0x3, 0xf, 0x1}, {0x8, 0x8, 0x1, 0x6, 0x46ff, 0x3}, {0xabb, 0xe185, 0x10, 0x6, 0x7, 0xff}, {0x6, 0x6, 0x7ff, 0x401, 0xff000000, 0x7ff}, {0x9, 0x1, 0x0, 0xbb8, 0xd40c, 0x6c}, {0x69, 0x5, 0x2, 0xffff, 0x5, 0x4ca}, {0x0, 0x1, 0x6, 0x8, 0x3, 0x2}, {0x400, 0x5, 0x8, 0x787, 0xa000, 0x9}, {0x12, 0xa8, 0x0, 0x1, 0x44f, 0x2}, {0x4, 0xfffffbff, 0x7ff, 0x80000001, 0x674, 0x7}, {0xb, 0x9, 0x7f, 0x3, 0x9, 0x36}, {0x7, 0x4, 0x5, 0x5, 0xe, 0x6}, {0xff, 0x3, 0xf6, 0xc0000000, 0x3, 0xffffff5d}, {0x40, 0x6, 0x8, 0x8, 0x2, 0x7}, {0x1, 0x800, 0x7c5a534d, 0xfffffffb, 0xe7a9, 0x1}, {0x2, 0x3, 0x0, 0x4a90, 0x0, 0x1}, {0x4, 0x0, 0xff, 0xe7a, 0x100, 0x7f}, {0x7fff, 0x1ff, 0x10000, 0x9, 0x7ff, 0x6}, {0x3, 0x80000000, 0xe2a, 0x5, 0x3, 0xfffffffd}, {0x7, 0x9, 0xfffffff9, 0x8000, 0x45, 0x2}, {0x8, 0x2, 0xc, 0x5, 0x8386, 0x7c26}, {0x8, 0x2, 0x9, 0x0, 0xffffff05, 0xf}, {0xffffffff, 0x400, 0xc2, 0x9, 0x7, 0x7fffffff}, {0x3, 0x17, 0x6, 0x6a2, 0x5, 0x80000001}, {0x0, 0x7fffffff, 0x7, 0x0, 0x1, 0x2}, {0x5, 0xd, 0x6, 0x0, 0xc00, 0xb}, {0xe, 0x200, 0x9, 0x0, 0x8, 0x1}, {0xf, 0x200, 0x5, 0x1, 0x5, 0xa7}, {0xd5b, 0x6a, 0x3, 0xd7c, 0x10000, 0x4}, {0x7fff, 0x9, 0x3, 0x4398, 0x4, 0x52b}, {0x100, 0xffffffff, 0x80000001, 0xa8, 0x8, 0x8}, {0x10001, 0x6, 0x80, 0x1, 0x1, 0x6}, {0x0, 0x4a3a, 0x4, 0xfffffffb, 0x5, 0x1}, {0x10000, 0xf, 0x2, 0x85, 0xf, 0x1}, {0x9, 0xe, 0x6af3664e, 0x1, 0x5, 0x101}, {0x1, 0x1, 0x3, 0x10, 0x8, 0x9f6f}, {0x0, 0x4, 0x9}, {0x100, 0x100, 0x1ff, 0x1, 0x401, 0x8}, {0xc40, 0x9, 0x733161f3, 0x4, 0x1, 0x3}, {0xffffff81, 0x0, 0xfffffffc, 0x6, 0xfffffff9, 0x5}, {0x9, 0x2, 0x5, 0x28, 0x5, 0x7}, {0xf, 0x3, 0x7fffffff, 0xfffffffe, 0x9b, 0x3}, {0xf1e, 0x70d, 0x7, 0x2, 0x4, 0xfc33}, {0x7f, 0x679a, 0x10000, 0x4, 0x5ee2, 0x6}, {0x0, 0x8001, 0x336, 0xbc9d, 0x7f, 0x4}, {0x6, 0x800, 0x3, 0x4, 0xb, 0x7}, {0x5, 0x46, 0x8, 0x0, 0x8, 0x887}, {0x1, 0x100, 0x90a, 0x7ff, 0xf3}, {0x5, 0x1, 0xfffffff8, 0x9, 0x213, 0x5}, {0x3, 0x6, 0x8, 0x9, 0x7, 0x81}, {0x7, 0x1000, 0x9827, 0x10, 0xc813, 0xf}, {0x4, 0x7, 0xf4, 0x6, 0x0, 0x7fffffff}, {0x9, 0x5be, 0x737, 0x1a13f72e, 0x2, 0x576}, {0x9, 0x9, 0x3, 0x4, 0x80000001, 0x3}, {0x6, 0x6, 0x566b, 0x5, 0x10001, 0x2a1}, {0x2, 0x0, 0xf877, 0x5, 0x7, 0x1}, {0xfff, 0x2, 0x8, 0x4, 0x3, 0x2}, {0x9, 0xf, 0x2, 0x0, 0x7, 0x6}], [{0x5, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x9694d5f69e93c4aa}, {0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0xe, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x4}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x2}, {0x5}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x2}, {0x6, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x5, 0x3f4af951e4066710}, {0x5}]}}]}, {0xbc, 0x6, "e0916d357aaf71794955ced5ec72dc0d28418f0bd52546d18711a64188c51c61635ff1edb38a99bd6bde25be0a4e1b4e8a082a1637f620a05f93e9f8a830396ce5d3bf0b7799be0a054b591a3cd93c4b8a0fbe3c586fdb2944c51d18e0ada2a444e4ff01c784a2ff6168b53f341e686b598fabcd38212f52a9a4a3fb3632fcb1696a1fdff2cae762eae42c872378a1e0a40f76ce0000def9f60e6a38d5abb3666dc5de4367930e473dec6a46bb704777ffa1b927d68f3695"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x50}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xde}}]}, 0x204c}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r11) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
listen(r1, 0x7) (async)
socket$inet(0x2, 0x2, 0x0)

3.865658186s ago: executing program 5 (id=610):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
openat$cgroup_int(r0, 0x0, 0x2, 0x0)
openat(r0, &(0x7f0000000040)='./file1\x00', 0x4000, 0x42)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x60)
write(r1, &(0x7f0000000400)="0000001b00", 0x5)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x9, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_off}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file2\x00', 0x2f, 0x8)

3.777509727s ago: executing program 5 (id=612):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x0, 0xc, {{0x16, 0x4, 0x0, 0x10, 0x58, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@rr={0x7, 0x13, 0xc3, [@loopback, @empty, @broadcast, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xde, 0x3, 0x3, [{@private=0xa010100, 0x3ff}, {@private=0xa010102, 0x1}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x14, 0x3, 0x0, 0x7, [0x1, 0x1, 0x3, 0x401]}]}}}}})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) (async)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0x1c)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000006c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @initial, @broadcast, @device_a, {0x7}, "", @value={0x2, 0x1, 0x2, 0x0, 0x56}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @random="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"}, 0x8ef)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @random="b713165e0692", {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

3.08952157s ago: executing program 5 (id=634):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0))
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x64, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000006d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)

910.440365ms ago: executing program 1 (id=675):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30130000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b0001006578746864720000240002800800064000000000080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000040900010073797a30"], 0x188}}, 0x0)

840.693183ms ago: executing program 1 (id=676):
r0 = memfd_create(&(0x7f0000000480)='\x00\xac=\x9d\x00\x00\"0\xc5\xe1\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xef\x04;s\xe1\xc4\xcf\xaa\xa0\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbc*A\xdcq\xb7\xc1\xba&\xd1\xff\xffs\xf1\xc3G,](\x1dA\x8a\x97\xb1\xdb\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\xe6_\xc9n\x19\x12\xb0m\x06\a\x00\x00\x00\x00\x00\x00', 0x5)
fallocate(r0, 0x0, 0x400000000000000, 0x7)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000140)={"0160bd8f41a34066c329e5c9e7e0b93c4cdc2139bb1c026b2b7398bbddbc"})
ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x7)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)

778.993314ms ago: executing program 2 (id=678):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8002}, 0x30, 0x0)
landlock_restrict_self(r2, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x42a04, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, <r6=>0x0})
getpgid(r6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={0x5c, r4, 0x1, 0x70bd28, 0x25dfdc02, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="89c82434e250edbc62cfc265f644d3732544d1adfd1c1a96"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "000000ff7f00"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="05df5dbd00000900"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000)

694.152088ms ago: executing program 1 (id=681):
r0 = fanotify_init(0x0, 0x400)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0104000007e84a29f35c3a0100000a"], 0xf)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
unshare(0x24020400)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0)
link(&(0x7f0000000280)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', &(0x7f00000002c0)='./file1\x00')
write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2, @ANYBLOB='\x00'], 0x10)
eventfd2(0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

680.695154ms ago: executing program 2 (id=683):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x7)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7f00)

599.181982ms ago: executing program 1 (id=685):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x250, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x394)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x80000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
fcntl$setlease(r0, 0x400, 0x1)

507.793218ms ago: executing program 2 (id=687):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0803, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x32, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

506.975745ms ago: executing program 1 (id=689):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e25, 0x80000, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00ff00000000000000"], 0x18}, 0x40c2)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg/2:0:0:0\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x0)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x3000000)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', <r3=>0x0})
r4 = socket(0x1e, 0x80002, 0x0)
sendmsg(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r5, @ANYBLOB="eec95bdc5128ae65fb1a9ca3ff5c061908808965fc9b27d7a9140773405e18285d2badcdda6a409c6a9e87f89458d274d71d41ebc2f4f22f65eec8c0c9e5345b86a77e81461ba3d9df0542c63abc57d8edf1f0de3f0450cf049a142e"], 0x2c}, 0x1, 0x0, 0x0, 0x88000}, 0xb65a09192b51499f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000300)=[{{<r8=>0x80000000}}, {{0x80000000, <r9=>0x0}, {<r10=>0x80000000, <r11=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000280)={{r8, r11, 0x4, [0x80000001]}, {r10, r9, 0x5, [0x8, 0x8]}, 0x2, [0x3, 0xc]})
truncate(0x0, 0x1)
r12 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0)
r13 = fcntl$dupfd(r12, 0x0, r12)
fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0)
mount(0x0, &(0x7f0000000180)='./sys/bus/serio/devices/serio0/drvctl\x00', &(0x7f00000000c0)='nfs4\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0))
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r14 = openat(r13, &(0x7f0000000200)='./tracing/uprobe_events/file0\x00', 0x8100, 0xc0)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r14, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)

400.311025ms ago: executing program 1 (id=691):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)

400.080147ms ago: executing program 2 (id=692):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
setns(r1, 0x20000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000100)="7c0000001800051105000000000000000a400000fe040001000000001400010000000db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef050008000100aac5391a8bf617660000", 0x7c)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01fca2712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x0, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x64, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x0, 0x2}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)

399.458537ms ago: executing program 3 (id=693):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x6, 0x7fffffff, 0x0, 'queue0\x00', 0x8000000})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a000000010000000000000104000000200000010500000001000004040000001300000001000000000000001700000002000004080000002100000001"], 0x0, 0x8e}, 0x28)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl(r2, 0x4048aec9, &(0x7f0000000140)="030000")
write$sndseq(r0, &(0x7f0000000000)=[{0x85, 0x77, 0x0, 0x0, @tick=0x1000000, {}, {}, @raw32}], 0x1c)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf00001, 0x0, '\x00', @p_u8=0x0}})
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000180)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f0000000780)}, 0x20)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x306575}, 0x0, {0x3}})

248.645881ms ago: executing program 3 (id=694):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a301b0000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b0001006578746864720000240002800800064000000000080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000040900010073797a30"], 0x188}}, 0x0)

248.53971ms ago: executing program 3 (id=695):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x7)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xe200)

189.553744ms ago: executing program 2 (id=696):
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e30"], 0x38}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0)
sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000030701"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x3ffd, @remote}, 0x10) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x3ffd, @remote}, 0x10)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

80.488737ms ago: executing program 3 (id=697):
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x8242)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x3, 0x1}, 0x50)
dup3(r0, r1, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x700, 0x700, 0x2c}, 0x48)

80.153702ms ago: executing program 5 (id=698):
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000154500", @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

80.023061ms ago: executing program 3 (id=699):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6)
ioctl$TCFLSH(r1, 0x540b, 0x2) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0)

134.787µs ago: executing program 3 (id=700):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00')
mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
symlink(0x0, 0x0)
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff)
mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x1, 0x7, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
close(r1)

0s ago: executing program 2 (id=701):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42)
preadv(r2, &(0x7f00000009c0)=[{&(0x7f00000004c0)=""/194, 0xc2}, {0x0}, {0x0}], 0x3, 0x802e, 0x79654e17)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x7)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

kernel console output (not intermixed with test programs):

21] total_active_anon 85876736
[   84.260356][ T7421] total_inactive_file 0
[   84.260359][ T7421] total_active_file 0
[   84.260363][ T7421] total_unevictable 0
[   84.260367][ T7421] anon_cost 0
[   84.260371][ T7421] file_cost 0
[   84.260375][ T7421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.449,pid=7409,uid=0
[   84.260428][ T7421] Memory cgroup out of memory: Killed process 7409 (syz.1.449) total-vm:99072kB, anon-rss:7248kB, file-rss:43972kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000
[   84.267536][ T7427] syz.1.449 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   84.267560][ T7427] CPU: 2 UID: 0 PID: 7427 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(full) 
[   84.267576][ T7427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   84.267584][ T7427] Call Trace:
[   84.267589][ T7427]  <TASK>
[   84.267611][ T7427]  dump_stack_lvl+0x100/0x190
[   84.267636][ T7427]  dump_header+0xfb/0x606
[   84.267659][ T7427]  oom_kill_process.cold+0xd/0x380
[   84.267677][ T7427]  out_of_memory+0x340/0x14f0
[   84.267699][ T7427]  ? __pfx_out_of_memory+0x10/0x10
[   84.267723][ T7427]  mem_cgroup_out_of_memory+0xc6/0x130
[   84.267738][ T7427]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   84.267753][ T7427]  ? find_held_lock+0x2b/0x80
[   84.267776][ T7427]  ? do_raw_spin_unlock+0x145/0x1e0
[   84.267795][ T7427]  ? _raw_spin_unlock+0x28/0x50
[   84.267815][ T7427]  try_charge_memcg+0x783/0xf60
[   84.267840][ T7427]  ? __pfx_try_charge_memcg+0x10/0x10
[   84.267859][ T7427]  ? find_held_lock+0x2b/0x80
[   84.267878][ T7427]  ? rcu_read_unlock+0x17/0x60
[   84.267898][ T7427]  ? rcu_read_unlock+0x17/0x60
[   84.267934][ T7427]  ? find_held_lock+0x2b/0x80
[   84.267954][ T7427]  ? rcu_read_unlock+0x17/0x60
[   84.267979][ T7427]  charge_memcg+0x1ae/0x210
[   84.268000][ T7427]  __mem_cgroup_charge+0x2b/0x1c0
[   84.268015][ T7427]  shmem_alloc_and_add_folio+0x451/0xd40
[   84.268041][ T7427]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   84.268063][ T7427]  ? shmem_allowable_huge_orders+0x2bd/0x400
[   84.268085][ T7427]  ? __lock_acquire+0x5c0/0x1f40
[   84.268101][ T7427]  shmem_get_folio_gfp+0x75b/0x1980
[   84.268126][ T7427]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   84.268146][ T7427]  ? inode_set_ctime_current+0x9c/0x850
[   84.268166][ T7427]  ? find_held_lock+0x2b/0x80
[   84.268187][ T7427]  ? timestamp_truncate+0x22e/0x2f0
[   84.268209][ T7427]  shmem_write_begin+0x1a4/0x420
[   84.268235][ T7427]  ? __pfx_shmem_write_begin+0x10/0x10
[   84.268256][ T7427]  ? inode_set_ctime_current+0x283/0x850
[   84.268276][ T7427]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[   84.268299][ T7427]  ? inode_maybe_inc_iversion+0x169/0x220
[   84.268318][ T7427]  generic_perform_write+0x292/0xa40
[   84.268336][ T7427]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   84.268355][ T7427]  ? __pfx_generic_perform_write+0x10/0x10
[   84.268373][ T7427]  ? mnt_put_write_access_file+0x4e/0x100
[   84.268392][ T7427]  ? file_update_time_flags+0x38c/0x520
[   84.268415][ T7427]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   84.268429][ T7427]  shmem_file_write_iter+0x10e/0x140
[   84.268445][ T7427]  __kernel_write_iter+0x2ac/0x930
[   84.268461][ T7427]  ? __pfx___kernel_write_iter+0x10/0x10
[   84.268476][ T7427]  ? __up_read+0x333/0x980
[   84.268494][ T7427]  ? dump_user_range+0x65e/0xad0
[   84.268510][ T7427]  ? copy_mc_enhanced_fast_string+0x6/0xf
[   84.268529][ T7427]  dump_user_range+0x3f9/0xad0
[   84.268547][ T7427]  ? __pfx_dump_user_range+0x10/0x10
[   84.268567][ T7427]  ? __pfx_writenote+0x10/0x10
[   84.268582][ T7427]  ? elf_core_dump+0x1f25/0x3d20
[   84.268600][ T7427]  elf_core_dump+0x2d68/0x3d20
[   84.268626][ T7427]  ? __pfx_elf_core_dump+0x10/0x10
[   84.268645][ T7427]  ? kasan_save_stack+0x3f/0x50
[   84.268661][ T7427]  ? kasan_save_stack+0x30/0x50
[   84.268675][ T7427]  ? kasan_save_track+0x14/0x30
[   84.268690][ T7427]  ? __kasan_kmalloc+0xaa/0xb0
[   84.268705][ T7427]  ? vfs_coredump+0x21f6/0x54a0
[   84.268717][ T7427]  ? get_signal+0x1f2a/0x21e0
[   84.268732][ T7427]  ? arch_do_signal_or_restart+0x91/0x7e0
[   84.268757][ T7427]  ? 0xffffffffff600000
[   84.268790][ T7427]  ? lock_acquire+0x1d1/0x380
[   84.268804][ T7427]  ? get_signal+0x1f2a/0x21e0
[   84.268825][ T7427]  ? vfs_coredump+0x281a/0x54a0
[   84.268838][ T7427]  vfs_coredump+0x281a/0x54a0
[   84.268859][ T7427]  ? __pfx_vfs_coredump+0x10/0x10
[   84.268874][ T7427]  ? __lock_acquire+0x5c0/0x1f40
[   84.268893][ T7427]  ? __lock_acquire+0x5c0/0x1f40
[   84.268909][ T7427]  ? lock_acquire+0x1d1/0x380
[   84.268923][ T7427]  ? unwind_next_frame+0xbd/0x2090
[   84.268946][ T7427]  ? lock_acquire+0x1d1/0x380
[   84.268965][ T7427]  ? bpf_ksym_find+0x128/0x1c0
[   84.268986][ T7427]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   84.269015][ T7427]  ? arch_stack_walk+0xa6/0xf0
[   84.269038][ T7427]  ? __sigqueue_free+0xbe/0x2a0
[   84.269057][ T7427]  ? stack_trace_save+0x8e/0xc0
[   84.269070][ T7427]  ? __pfx_stack_trace_save+0x10/0x10
[   84.269083][ T7427]  ? stack_depot_save_flags+0x27/0x9f0
[   84.269101][ T7427]  ? __lock_acquire+0x5c0/0x1f40
[   84.269146][ T7427]  ? proc_coredump_connector+0x2d3/0x4f0
[   84.269169][ T7427]  ? __pfx_proc_coredump_connector+0x10/0x10
[   84.269195][ T7427]  ? rcu_is_watching+0x13/0xc0
[   84.269216][ T7427]  get_signal+0x1f2a/0x21e0
[   84.269238][ T7427]  ? __pfx_get_signal+0x10/0x10
[   84.269259][ T7427]  arch_do_signal_or_restart+0x91/0x7e0
[   84.269281][ T7427]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   84.269313][ T7427]  irqentry_exit+0x402/0xa10
[   84.269336][ T7427]  asm_exc_page_fault+0x26/0x30
[   84.269350][ T7427] RIP: 0033:0x7fb72ce53bd7
[   84.269362][ T7427] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   84.269376][ T7427] RSP: 002b:00007fb72de371a0 EFLAGS: 00010206
[   84.269388][ T7427] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb72cf9e159
[   84.269396][ T7427] RDX: 00007fb72de371c0 RSI: 00007fb72de372f0 RDI: 000000000000000b
[   84.269404][ T7427] RBP: 00007fb72d03506b R08: 0000000000000000 R09: 0000000000000000
[   84.269412][ T7427] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   84.269421][ T7427] R13: 00007fb72d226038 R14: 00007fb72d225fa0 R15: 00007ffe210311e8
[   84.269439][ T7427]  </TASK>
[   84.269512][ T7427] memory: usage 307200kB, limit 307200kB, failcnt 22910
[   84.269523][ T7427] memory+swap: usage 431676kB, limit 9007199254740988kB, failcnt 0
[   84.269532][ T7427] kmem: usage 6604kB, limit 9007199254740988kB, failcnt 0
[   84.269539][ T7427] Memory cgroup stats for /syz1:
[   84.286273][ T7427] cache 299089920
[   84.286282][ T7427] rss 8192000
[   84.286287][ T7427] rss_huge 0
[   84.286291][ T7427] shmem 299089920
[   84.286294][ T7427] mapped_file 0
[   84.286298][ T7427] dirty 0
[   84.286302][ T7427] writeback 0
[   84.286305][ T7427] workingset_refault_anon 66
[   84.286309][ T7427] workingset_refault_file 1816
[   84.286314][ T7427] swap 127467520
[   84.286318][ T7427] swapcached 128266240
[   84.286322][ T7427] pgpgin 153165
[   84.286326][ T7427] pgpgout 78527
[   84.286329][ T7427] pgfault 24795
[   84.286333][ T7427] pgmajfault 42
[   84.286337][ T7427] inactive_anon 221933568
[   84.286341][ T7427] active_anon 85876736
[   84.286345][ T7427] inactive_file 0
[   84.286348][ T7427] active_file 0
[   84.286352][ T7427] unevictable 0
[   84.286356][ T7427] hierarchical_memory_limit 314572800
[   84.286360][ T7427] hierarchical_memsw_limit 9223372036854771712
[   84.286365][ T7427] total_cache 299089920
[   84.286369][ T7427] total_rss 8192000
[   84.286373][ T7427] total_rss_huge 0
[   84.286377][ T7427] total_shmem 299089920
[   84.286381][ T7427] total_mapped_file 0
[   84.286384][ T7427] total_dirty 0
[   84.286388][ T7427] total_writeback 0
[   84.286392][ T7427] total_workingset_refault_anon 66
[   84.286396][ T7427] total_workingset_refault_file 1816
[   84.286439][ T7427] total_swap 127467520
[   84.286444][ T7427] total_swapcached 128266240
[   84.286448][ T7427] total_pgpgin 153165
[   84.286452][ T7427] total_pgpgout 78527
[   84.286456][ T7427] total_pgfault 24795
[   84.286460][ T7427] total_pgmajfault 42
[   84.286464][ T7427] total_inactive_anon 221933568
[   84.286468][ T7427] total_active_anon 85876736
[   84.286473][ T7427] total_inactive_file 0
[   84.286477][ T7427] total_active_file 0
[   84.286481][ T7427] total_unevictable 0
[   84.286484][ T7427] anon_cost 0
[   84.286488][ T7427] file_cost 0
[   84.286493][ T7427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.449,pid=7407,uid=0
[   84.286550][ T7427] Memory cgroup out of memory: Killed process 7407 (syz.1.449) total-vm:99072kB, anon-rss:7220kB, file-rss:42244kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000
[   84.345613][ T7417] syz.1.449 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   84.345635][ T7417] CPU: 0 UID: 0 PID: 7417 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(full) 
[   84.345648][ T7417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   84.345655][ T7417] Call Trace:
[   84.345659][ T7417]  <TASK>
[   84.345664][ T7417]  dump_stack_lvl+0x100/0x190
[   84.345698][ T7417]  dump_header+0xfb/0x606
[   84.345711][ T7417]  oom_kill_process.cold+0xd/0x380
[   84.345725][ T7417]  out_of_memory+0x340/0x14f0
[   84.345744][ T7417]  ? __pfx_out_of_memory+0x10/0x10
[   84.345763][ T7417]  mem_cgroup_out_of_memory+0xc6/0x130
[   84.345776][ T7417]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   84.345787][ T7417]  ? find_held_lock+0x2b/0x80
[   84.345807][ T7417]  ? do_raw_spin_unlock+0x145/0x1e0
[   84.345822][ T7417]  ? _raw_spin_unlock+0x28/0x50
[   84.345837][ T7417]  try_charge_memcg+0x783/0xf60
[   84.345857][ T7417]  ? __pfx_try_charge_memcg+0x10/0x10
[   84.345873][ T7417]  ? find_held_lock+0x2b/0x80
[   84.345889][ T7417]  ? rcu_read_unlock+0x17/0x60
[   84.345906][ T7417]  ? rcu_read_unlock+0x17/0x60
[   84.345923][ T7417]  ? find_held_lock+0x2b/0x80
[   84.345939][ T7417]  ? rcu_read_unlock+0x17/0x60
[   84.345959][ T7417]  charge_memcg+0x1ae/0x210
[   84.345977][ T7417]  __mem_cgroup_charge+0x2b/0x1c0
[   84.345989][ T7417]  shmem_alloc_and_add_folio+0x451/0xd40
[   84.346010][ T7417]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   84.346028][ T7417]  ? shmem_allowable_huge_orders+0x2bd/0x400
[   84.346050][ T7417]  shmem_get_folio_gfp+0x75b/0x1980
[   84.346070][ T7417]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   84.346088][ T7417]  ? vm_normal_page+0x1d1/0x380
[   84.346101][ T7417]  ? __pfx_vm_normal_page+0x10/0x10
[   84.346117][ T7417]  shmem_write_begin+0x1a4/0x420
[   84.346136][ T7417]  ? __pfx_shmem_write_begin+0x10/0x10
[   84.346154][ T7417]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[   84.346175][ T7417]  generic_perform_write+0x292/0xa40
[   84.346190][ T7417]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   84.346206][ T7417]  ? __pfx_generic_perform_write+0x10/0x10
[   84.346222][ T7417]  ? file_update_time_flags+0x38c/0x520
[   84.346242][ T7417]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   84.346257][ T7417]  shmem_file_write_iter+0x10e/0x140
[   84.346270][ T7417]  __kernel_write_iter+0x2ac/0x930
[   84.346283][ T7417]  ? __pfx___kernel_write_iter+0x10/0x10
[   84.346295][ T7417]  ? __up_read+0x333/0x980
[   84.346311][ T7417]  ? dump_user_range+0x65e/0xad0
[   84.346324][ T7417]  ? copy_mc_enhanced_fast_string+0x6/0xf
[   84.346340][ T7417]  dump_user_range+0x3f9/0xad0
[   84.346355][ T7417]  ? __pfx_dump_user_range+0x10/0x10
[   84.346372][ T7417]  ? __pfx_writenote+0x10/0x10
[   84.346384][ T7417]  ? elf_core_dump+0x1f25/0x3d20
[   84.346399][ T7417]  elf_core_dump+0x2d68/0x3d20
[   84.346420][ T7417]  ? __pfx_elf_core_dump+0x10/0x10
[   84.346432][ T7417]  ? kasan_save_stack+0x3f/0x50
[   84.346445][ T7417]  ? kasan_save_stack+0x30/0x50
[   84.346457][ T7417]  ? kasan_save_track+0x14/0x30
[   84.346469][ T7417]  ? __kasan_kmalloc+0xaa/0xb0
[   84.346481][ T7417]  ? vfs_coredump+0x21f6/0x54a0
[   84.346492][ T7417]  ? get_signal+0x1f2a/0x21e0
[   84.346504][ T7417]  ? arch_do_signal_or_restart+0x91/0x7e0
[   84.346527][ T7417]  ? 0xffffffffff600000
[   84.346563][ T7417]  ? lock_acquire+0x1d1/0x380
[   84.346575][ T7417]  ? get_signal+0x1f2a/0x21e0
[   84.346592][ T7417]  ? vfs_coredump+0x281a/0x54a0
[   84.346603][ T7417]  vfs_coredump+0x281a/0x54a0
[   84.346621][ T7417]  ? __pfx_vfs_coredump+0x10/0x10
[   84.346633][ T7417]  ? __lock_acquire+0x5c0/0x1f40
[   84.346648][ T7417]  ? __lock_acquire+0x5c0/0x1f40
[   84.346662][ T7417]  ? lock_acquire+0x1d1/0x380
[   84.346673][ T7417]  ? unwind_next_frame+0xbd/0x2090
[   84.346693][ T7417]  ? lock_acquire+0x1d1/0x380
[   84.346708][ T7417]  ? bpf_ksym_find+0x128/0x1c0
[   84.346726][ T7417]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   84.346750][ T7417]  ? arch_stack_walk+0xa6/0xf0
[   84.346770][ T7417]  ? __sigqueue_free+0xbe/0x2a0
[   84.346786][ T7417]  ? stack_trace_save+0x8e/0xc0
[   84.346797][ T7417]  ? __pfx_stack_trace_save+0x10/0x10
[   84.346808][ T7417]  ? stack_depot_save_flags+0x27/0x9f0
[   84.346824][ T7417]  ? __lock_acquire+0x5c0/0x1f40
[   84.346861][ T7417]  ? proc_coredump_connector+0x2d3/0x4f0
[   84.346880][ T7417]  ? __pfx_proc_coredump_connector+0x10/0x10
[   84.346901][ T7417]  ? rcu_is_watching+0x13/0xc0
[   84.346919][ T7417]  get_signal+0x1f2a/0x21e0
[   84.346938][ T7417]  ? __pfx_get_signal+0x10/0x10
[   84.346955][ T7417]  arch_do_signal_or_restart+0x91/0x7e0
[   84.346974][ T7417]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   84.347020][ T7417]  irqentry_exit+0x402/0xa10
[   84.347040][ T7417]  asm_exc_page_fault+0x26/0x30
[   84.347051][ T7417] RIP: 0033:0x7fb72ce53bd7
[   84.347062][ T7417] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   84.347073][ T7417] RSP: 002b:00007fb72de371a0 EFLAGS: 00010206
[   84.347083][ T7417] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb72cf9e159
[   84.347090][ T7417] RDX: 00007fb72de371c0 RSI: 00007fb72de372f0 RDI: 000000000000000b
[   84.347097][ T7417] RBP: 00007fb72d03506b R08: 0000000000000000 R09: 0000000000000000
[   84.347104][ T7417] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   84.347111][ T7417] R13: 00007fb72d226038 R14: 00007fb72d225fa0 R15: 00007ffe210311e8
[   84.347127][ T7417]  </TASK>
[   84.388563][ T7417] memory: usage 307200kB, limit 307200kB, failcnt 23610
[   84.388578][ T7417] memory+swap: usage 432092kB, limit 9007199254740988kB, failcnt 0
[   84.388586][ T7417] kmem: usage 6584kB, limit 9007199254740988kB, failcnt 0
[   84.388592][ T7417] Memory cgroup stats for /syz1:
[   84.388715][ T7417] cache 299745280
[   84.388722][ T7417] rss 7950336
[   84.388726][ T7417] rss_huge 0
[   84.388730][ T7417] shmem 299745280
[   84.388734][ T7417] mapped_file 0
[   84.388738][ T7417] dirty 0
[   84.388742][ T7417] writeback 0
[   84.388746][ T7417] workingset_refault_anon 66
[   84.388750][ T7417] workingset_refault_file 1816
[   84.388755][ T7417] swap 127889408
[   84.388758][ T7417] swapcached 128749568
[   84.388763][ T7417] pgpgin 153593
[   84.388767][ T7417] pgpgout 78950
[   84.388771][ T7417] pgfault 24823
[   84.388774][ T7417] pgmajfault 42
[   84.388778][ T7417] inactive_anon 219332608
[   84.388783][ T7417] active_anon 88260608
[   84.388787][ T7417] inactive_file 0
[   84.388845][ T7417] active_file 0
[   84.388852][ T7417] unevictable 0
[   84.388858][ T7417] hierarchical_memory_limit 314572800
[   84.388866][ T7417] hierarchical_memsw_limit 9223372036854771712
[   84.388874][ T7417] total_cache 299745280
[   84.388880][ T7417] total_rss 7950336
[   84.388887][ T7417] total_rss_huge 0
[   84.388893][ T7417] total_shmem 299745280
[   84.388900][ T7417] total_mapped_file 0
[   84.388906][ T7417] total_dirty 0
[   84.388912][ T7417] total_writeback 0
[   84.388919][ T7417] total_workingset_refault_anon 66
[   84.388924][ T7417] total_workingset_refault_file 1816
[   84.388928][ T7417] total_swap 127889408
[   84.388932][ T7417] total_swapcached 128749568
[   84.388937][ T7417] total_pgpgin 153593
[   84.388941][ T7417] total_pgpgout 78950
[   84.388945][ T7417] total_pgfault 24823
[   84.388949][ T7417] total_pgmajfault 42
[   84.388953][ T7417] total_inactive_anon 219332608
[   84.389007][ T7417] total_active_anon 88260608
[   84.389014][ T7417] total_inactive_file 0
[   84.389018][ T7417] total_active_file 0
[   84.389022][ T7417] total_unevictable 0
[   84.389026][ T7417] anon_cost 0
[   84.389032][ T7417] file_cost 0
[   84.389037][ T7417] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.449,pid=7411,uid=0
[   84.389096][ T7417] Memory cgroup out of memory: Killed process 7411 (syz.1.449) total-vm:99072kB, anon-rss:7244kB, file-rss:41988kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000
[   84.462388][ T7448] kvm: user requested TSC rate below hardware speed
[   84.776543][   T43] kauditd_printk_skb: 12 callbacks suppressed
[   84.776561][   T43] audit: type=1400 audit(1789749666.269:548): avc:  denied  { ioctl } for  pid=7454 comm="syz.2.467" path="socket:[17873]" dev="sockfs" ino=17873 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   85.188291][ T7462] __nla_validate_parse: 3 callbacks suppressed
[   85.188307][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'.
[   85.337723][ T7466] exFAT-fs (nullb0): invalid boot record signature
[   85.337735][ T7466] exFAT-fs (nullb0): failed to read boot sector
[   85.337740][ T7466] exFAT-fs (nullb0): failed to recognize exfat type
[   85.387889][    C0] usb 10-1: yurex_control_callback - control failed: -2
[   85.392309][ T6214] usb 10-1: USB disconnect, device number 3
[   85.395379][ T6214] yurex 10-1:0.50: USB YUREX #0 now disconnected
[   85.437055][ T5821] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   85.585223][ T7388] syz.1.449 (7388) used greatest stack depth: 18744 bytes left
[   85.596888][ T5821] usb 7-1: Using ep0 maxpacket: 8
[   85.600119][ T5821] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   85.601928][ T5821] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   85.601978][ T5821] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   85.602000][ T5821] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   85.602025][ T5821] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   85.602047][ T5821] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   85.602084][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.640508][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.474'.
[   85.851872][ T7464] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x6408 instead
[   85.851897][ T7464] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x642f instead
[   85.851988][ T7464] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007080: 0x0001 instead
[   85.852005][ T7464] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007084: 0x0002 instead
[   85.852021][ T7464] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007088: 0x5f11 instead
[   85.852036][ T7464] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007090: 0xfffd instead
[   85.852052][ T7464] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007098: 0xfffb instead
[   85.852068][ T7464] jffs2: Empty flash at 0x0000709c ends at 0x000070a0
[   85.852079][ T7464] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000070a0: 0x000b instead
[   85.852163][ T7464] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000070a8: 0xfff8 instead
[   85.852180][ T7464] jffs2: Empty flash at 0x000070ac ends at 0x000070b0
[   85.852191][ T7464] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000070b0: 0x01fe instead
[   85.852207][ T7464] jffs2: Further such events for this erase block will not be printed
[   85.873982][ T7464] jffs2: notice: (7464) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   85.908018][   T43] audit: type=1400 audit(1789749667.409:549): avc:  denied  { write } for  pid=7475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.014760][   T43] audit: type=1400 audit(1789749667.509:550): avc:  denied  { write } for  pid=7482 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.030821][   T43] audit: type=1400 audit(1789749667.529:551): avc:  denied  { write } for  pid=7463 comm="syz.2.470" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   86.046030][ T5821] usb 7-1: GET_CAPABILITIES returned 0
[   86.046070][ T5821] usbtmc 7-1:16.0: can't read capabilities
[   86.053130][   T43] audit: type=1400 audit(1789749667.549:552): avc:  denied  { remount } for  pid=7483 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   86.118395][ T7485] binder: 7483:7485 ioctl c0306201 200000000180 returned -11
[   86.119295][   T43] audit: type=1400 audit(1789749667.619:553): avc:  denied  { read } for  pid=7483 comm="syz.3.477" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   86.119464][   T43] audit: type=1400 audit(1789749667.619:554): avc:  denied  { open } for  pid=7483 comm="syz.3.477" path="/dev/ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   86.211254][   T43] audit: type=1400 audit(1789749667.709:555): avc:  denied  { ioctl } for  pid=7483 comm="syz.3.477" path="/dev/ptp0" dev="devtmpfs" ino=728 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   86.227224][ T7485] binder: 7483:7485 ioctl c0306201 2000000000c0 returned -14
[   86.256138][    C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   86.263100][ T5821] usb 7-1: USB disconnect, device number 6
[   86.368602][ T7487] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   86.368792][ T7487] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   86.368921][ T7487] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   86.369022][ T7487] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   86.386613][   T43] audit: type=1400 audit(1789749667.879:556): avc:  denied  { write } for  pid=7496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.444493][ T7487] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   86.551899][   T43] audit: type=1400 audit(1789749668.049:557): avc:  denied  { write } for  pid=7501 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.606020][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.479'.
[   87.058594][ T7523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'.
[   87.093682][ T7525] =======================================================
[   87.093682][ T7525] WARNING: The mand mount option has been deprecated and
[   87.093682][ T7525]          and is ignored by this kernel. Remove the mand
[   87.093682][ T7525]          option from the mount to silence this warning.
[   87.093682][ T7525] =======================================================
[   87.349613][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'.
[   87.526334][ T7424] syz.1.449 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   87.526357][ T7424] CPU: 3 UID: 0 PID: 7424 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(full) 
[   87.526370][ T7424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   87.526376][ T7424] Call Trace:
[   87.526381][ T7424]  <TASK>
[   87.526385][ T7424]  dump_stack_lvl+0x100/0x190
[   87.526405][ T7424]  dump_header+0xfb/0x606
[   87.526419][ T7424]  oom_kill_process.cold+0xd/0x380
[   87.526439][ T7424]  out_of_memory+0x340/0x14f0
[   87.526467][ T7424]  ? __pfx_out_of_memory+0x10/0x10
[   87.526496][ T7424]  mem_cgroup_out_of_memory+0xc6/0x130
[   87.526516][ T7424]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   87.526534][ T7424]  ? find_held_lock+0x2b/0x80
[   87.526562][ T7424]  ? do_raw_spin_unlock+0x145/0x1e0
[   87.526605][ T7424]  ? _raw_spin_unlock+0x28/0x50
[   87.526629][ T7424]  try_charge_memcg+0x783/0xf60
[   87.526660][ T7424]  ? __pfx_try_charge_memcg+0x10/0x10
[   87.526683][ T7424]  ? find_held_lock+0x2b/0x80
[   87.526705][ T7424]  ? rcu_read_unlock+0x17/0x60
[   87.526729][ T7424]  ? rcu_read_unlock+0x17/0x60
[   87.526754][ T7424]  ? find_held_lock+0x2b/0x80
[   87.526777][ T7424]  ? rcu_read_unlock+0x17/0x60
[   87.526807][ T7424]  charge_memcg+0x1ae/0x210
[   87.526832][ T7424]  __mem_cgroup_charge+0x2b/0x1c0
[   87.526850][ T7424]  shmem_alloc_and_add_folio+0x451/0xd40
[   87.526883][ T7424]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   87.526909][ T7424]  ? shmem_allowable_huge_orders+0x2bd/0x400
[   87.526940][ T7424]  shmem_get_folio_gfp+0x75b/0x1980
[   87.526970][ T7424]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   87.527019][ T7424]  ? vm_normal_page+0x1d1/0x380
[   87.527039][ T7424]  ? __pfx_vm_normal_page+0x10/0x10
[   87.527063][ T7424]  shmem_write_begin+0x1a4/0x420
[   87.527091][ T7424]  ? __pfx_shmem_write_begin+0x10/0x10
[   87.527117][ T7424]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[   87.527149][ T7424]  generic_perform_write+0x292/0xa40
[   87.527170][ T7424]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   87.527199][ T7424]  ? __pfx_generic_perform_write+0x10/0x10
[   87.527223][ T7424]  ? file_update_time_flags+0x38c/0x520
[   87.527253][ T7424]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   87.527270][ T7424]  shmem_file_write_iter+0x10e/0x140
[   87.527289][ T7424]  __kernel_write_iter+0x2ac/0x930
[   87.527309][ T7424]  ? __pfx___kernel_write_iter+0x10/0x10
[   87.527327][ T7424]  ? __up_read+0x333/0x980
[   87.527350][ T7424]  ? dump_user_range+0x65e/0xad0
[   87.527368][ T7424]  ? copy_mc_enhanced_fast_string+0x6/0xf
[   87.527393][ T7424]  dump_user_range+0x3f9/0xad0
[   87.527416][ T7424]  ? __pfx_dump_user_range+0x10/0x10
[   87.527442][ T7424]  ? __pfx_writenote+0x10/0x10
[   87.527460][ T7424]  ? elf_core_dump+0x1f25/0x3d20
[   87.527484][ T7424]  elf_core_dump+0x2d68/0x3d20
[   87.527517][ T7424]  ? __pfx_elf_core_dump+0x10/0x10
[   87.527534][ T7424]  ? kasan_save_stack+0x3f/0x50
[   87.527553][ T7424]  ? kasan_save_stack+0x30/0x50
[   87.527570][ T7424]  ? kasan_save_track+0x14/0x30
[   87.527587][ T7424]  ? __kasan_kmalloc+0xaa/0xb0
[   87.527605][ T7424]  ? vfs_coredump+0x21f6/0x54a0
[   87.527620][ T7424]  ? get_signal+0x1f2a/0x21e0
[   87.527637][ T7424]  ? arch_do_signal_or_restart+0x91/0x7e0
[   87.527668][ T7424]  ? 0xffffffffff600000
[   87.527713][ T7424]  ? lock_acquire+0x1d1/0x380
[   87.527730][ T7424]  ? get_signal+0x1f2a/0x21e0
[   87.527756][ T7424]  ? vfs_coredump+0x281a/0x54a0
[   87.527772][ T7424]  vfs_coredump+0x281a/0x54a0
[   87.527799][ T7424]  ? __pfx_vfs_coredump+0x10/0x10
[   87.527816][ T7424]  ? __lock_acquire+0x5c0/0x1f40
[   87.527841][ T7424]  ? __lock_acquire+0x5c0/0x1f40
[   87.527862][ T7424]  ? lock_acquire+0x1d1/0x380
[   87.527878][ T7424]  ? unwind_next_frame+0xbd/0x2090
[   87.527906][ T7424]  ? lock_acquire+0x1d1/0x380
[   87.527930][ T7424]  ? bpf_ksym_find+0x128/0x1c0
[   87.527956][ T7424]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   87.527991][ T7424]  ? arch_stack_walk+0xa6/0xf0
[   87.528021][ T7424]  ? __sigqueue_free+0xbe/0x2a0
[   87.528043][ T7424]  ? stack_trace_save+0x8e/0xc0
[   87.528058][ T7424]  ? __pfx_stack_trace_save+0x10/0x10
[   87.528074][ T7424]  ? stack_depot_save_flags+0x27/0x9f0
[   87.528096][ T7424]  ? __lock_acquire+0x5c0/0x1f40
[   87.528158][ T7424]  ? proc_coredump_connector+0x2d3/0x4f0
[   87.528189][ T7424]  ? __pfx_proc_coredump_connector+0x10/0x10
[   87.528221][ T7424]  ? rcu_is_watching+0x13/0xc0
[   87.528248][ T7424]  get_signal+0x1f2a/0x21e0
[   87.528277][ T7424]  ? __pfx_get_signal+0x10/0x10
[   87.528304][ T7424]  arch_do_signal_or_restart+0x91/0x7e0
[   87.528330][ T7424]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   87.528371][ T7424]  irqentry_exit+0x402/0xa10
[   87.528398][ T7424]  asm_exc_page_fault+0x26/0x30
[   87.528415][ T7424] RIP: 0033:0x7fb72ce53bd7
[   87.528429][ T7424] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   87.528445][ T7424] RSP: 002b:00007fb72de371a0 EFLAGS: 00010206
[   87.528460][ T7424] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb72cf9e159
[   87.528471][ T7424] RDX: 00007fb72de371c0 RSI: 00007fb72de372f0 RDI: 000000000000000b
[   87.528482][ T7424] RBP: 00007fb72d03506b R08: 0000000000000000 R09: 0000000000000000
[   87.528491][ T7424] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   87.528502][ T7424] R13: 00007fb72d226038 R14: 00007fb72d225fa0 R15: 00007ffe210311e8
[   87.528526][ T7424]  </TASK>
[   87.528619][ T7424] memory: usage 307200kB, limit 307200kB, failcnt 38033
[   87.528631][ T7424] memory+swap: usage 428668kB, limit 9007199254740988kB, failcnt 0
[   87.528642][ T7424] kmem: usage 5636kB, limit 9007199254740988kB, failcnt 0
[   87.528654][ T7424] Memory cgroup stats for /syz1:
[   87.528754][ T7424] cache 304066560
[   87.528760][ T7424] rss 4288512
[   87.528764][ T7424] rss_huge 0
[   87.528767][ T7424] shmem 303763456
[   87.528771][ T7424] mapped_file 4096
[   87.528775][ T7424] dirty 0
[   87.528779][ T7424] writeback 0
[   87.528782][ T7424] workingset_refault_anon 332
[   87.528786][ T7424] workingset_refault_file 2925
[   87.528791][ T7424] swap 124383232
[   87.528794][ T7424] swapcached 215285760
[   87.528798][ T7424] pgpgin 210057
[   87.528802][ T7424] pgpgout 135177
[   87.528806][ T7424] pgfault 29749
[   87.528809][ T7424] pgmajfault 708
[   87.528813][ T7424] inactive_anon 50806784
[   87.528817][ T7424] active_anon 257691648
[   87.528821][ T7424] inactive_file 81920
[   87.528825][ T7424] active_file 4096
[   87.528829][ T7424] unevictable 0
[   87.528833][ T7424] hierarchical_memory_limit 314572800
[   87.528837][ T7424] hierarchical_memsw_limit 9223372036854771712
[   87.528842][ T7424] total_cache 304066560
[   87.528846][ T7424] total_rss 4288512
[   87.528850][ T7424] total_rss_huge 0
[   87.528853][ T7424] total_shmem 303763456
[   87.528857][ T7424] total_mapped_file 4096
[   87.528861][ T7424] total_dirty 0
[   87.528865][ T7424] total_writeback 0
[   87.528869][ T7424] total_workingset_refault_anon 332
[   87.528873][ T7424] total_workingset_refault_file 2925
[   87.528878][ T7424] total_swap 124383232
[   87.528881][ T7424] total_swapcached 215285760
[   87.528886][ T7424] total_pgpgin 210057
[   87.528890][ T7424] total_pgpgout 135177
[   87.528893][ T7424] total_pgfault 29749
[   87.528897][ T7424] total_pgmajfault 708
[   87.528901][ T7424] total_inactive_anon 50806784
[   87.528906][ T7424] total_active_anon 257691648
[   87.528910][ T7424] total_inactive_file 81920
[   87.528914][ T7424] total_active_file 4096
[   87.528918][ T7424] total_unevictable 0
[   87.528922][ T7424] anon_cost 0
[   87.528925][ T7424] file_cost 0
[   87.528929][ T7424] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.449,pid=7415,uid=0
[   87.528979][ T7424] Memory cgroup out of memory: Killed process 7415 (syz.1.449) total-vm:99072kB, anon-rss:3448kB, file-rss:57476kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000
[   87.577764][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.577783][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.588587][    T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[   87.716766][    T9] usb 10-1: device descriptor read/64, error -71
[   87.764579][ T7424] syz.1.449 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   87.764615][ T7424] CPU: 3 UID: 0 PID: 7424 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(full) 
[   87.764630][ T7424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   87.764637][ T7424] Call Trace:
[   87.764641][ T7424]  <TASK>
[   87.764646][ T7424]  dump_stack_lvl+0x100/0x190
[   87.764666][ T7424]  dump_header+0xfb/0x606
[   87.764680][ T7424]  oom_kill_process.cold+0xd/0x380
[   87.764694][ T7424]  out_of_memory+0x340/0x14f0
[   87.764712][ T7424]  ? __pfx_out_of_memory+0x10/0x10
[   87.764731][ T7424]  mem_cgroup_out_of_memory+0xc6/0x130
[   87.764744][ T7424]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   87.764755][ T7424]  ? find_held_lock+0x2b/0x80
[   87.764789][ T7424]  ? do_raw_spin_unlock+0x145/0x1e0
[   87.764804][ T7424]  ? _raw_spin_unlock+0x28/0x50
[   87.764819][ T7424]  try_charge_memcg+0x783/0xf60
[   87.764839][ T7424]  ? __pfx_try_charge_memcg+0x10/0x10
[   87.764855][ T7424]  ? find_held_lock+0x2b/0x80
[   87.764870][ T7424]  ? rcu_read_unlock+0x17/0x60
[   87.764886][ T7424]  ? rcu_read_unlock+0x17/0x60
[   87.764903][ T7424]  ? find_held_lock+0x2b/0x80
[   87.764918][ T7424]  ? rcu_read_unlock+0x17/0x60
[   87.764938][ T7424]  charge_memcg+0x1ae/0x210
[   87.764955][ T7424]  __mem_cgroup_charge+0x2b/0x1c0
[   87.764966][ T7424]  shmem_alloc_and_add_folio+0x451/0xd40
[   87.764986][ T7424]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   87.765004][ T7424]  ? shmem_allowable_huge_orders+0x2bd/0x400
[   87.765024][ T7424]  shmem_get_folio_gfp+0x75b/0x1980
[   87.765044][ T7424]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   87.765061][ T7424]  ? vm_normal_page+0x1d1/0x380
[   87.765074][ T7424]  ? __pfx_vm_normal_page+0x10/0x10
[   87.765089][ T7424]  shmem_write_begin+0x1a4/0x420
[   87.765107][ T7424]  ? __pfx_shmem_write_begin+0x10/0x10
[   87.765124][ T7424]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[   87.765145][ T7424]  generic_perform_write+0x292/0xa40
[   87.765159][ T7424]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   87.765174][ T7424]  ? __pfx_generic_perform_write+0x10/0x10
[   87.765190][ T7424]  ? file_update_time_flags+0x38c/0x520
[   87.765209][ T7424]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   87.765220][ T7424]  shmem_file_write_iter+0x10e/0x140
[   87.765232][ T7424]  __kernel_write_iter+0x2ac/0x930
[   87.765245][ T7424]  ? __pfx___kernel_write_iter+0x10/0x10
[   87.765257][ T7424]  ? __up_read+0x333/0x980
[   87.765272][ T7424]  ? dump_user_range+0x65e/0xad0
[   87.765283][ T7424]  ? copy_mc_enhanced_fast_string+0x6/0xf
[   87.765299][ T7424]  dump_user_range+0x3f9/0xad0
[   87.765313][ T7424]  ? __pfx_dump_user_range+0x10/0x10
[   87.765330][ T7424]  ? __pfx_writenote+0x10/0x10
[   87.765341][ T7424]  ? elf_core_dump+0x1f25/0x3d20
[   87.765356][ T7424]  elf_core_dump+0x2d68/0x3d20
[   87.765376][ T7424]  ? __pfx_elf_core_dump+0x10/0x10
[   87.765388][ T7424]  ? kasan_save_stack+0x3f/0x50
[   87.765400][ T7424]  ? kasan_save_stack+0x30/0x50
[   87.765412][ T7424]  ? kasan_save_track+0x14/0x30
[   87.765423][ T7424]  ? __kasan_kmalloc+0xaa/0xb0
[   87.765435][ T7424]  ? vfs_coredump+0x21f6/0x54a0
[   87.765445][ T7424]  ? get_signal+0x1f2a/0x21e0
[   87.765456][ T7424]  ? arch_do_signal_or_restart+0x91/0x7e0
[   87.765476][ T7424]  ? 0xffffffffff600000
[   87.765502][ T7424]  ? lock_acquire+0x1d1/0x380
[   87.765513][ T7424]  ? get_signal+0x1f2a/0x21e0
[   87.765530][ T7424]  ? vfs_coredump+0x281a/0x54a0
[   87.765540][ T7424]  vfs_coredump+0x281a/0x54a0
[   87.765556][ T7424]  ? __pfx_vfs_coredump+0x10/0x10
[   87.765567][ T7424]  ? __lock_acquire+0x5c0/0x1f40
[   87.765582][ T7424]  ? __lock_acquire+0x5c0/0x1f40
[   87.765600][ T7424]  ? lock_acquire+0x1d1/0x380
[   87.765611][ T7424]  ? unwind_next_frame+0xbd/0x2090
[   87.765630][ T7424]  ? lock_acquire+0x1d1/0x380
[   87.765644][ T7424]  ? bpf_ksym_find+0x128/0x1c0
[   87.765662][ T7424]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   87.765685][ T7424]  ? arch_stack_walk+0xa6/0xf0
[   87.765704][ T7424]  ? __sigqueue_free+0xbe/0x2a0
[   87.765719][ T7424]  ? stack_trace_save+0x8e/0xc0
[   87.765729][ T7424]  ? __pfx_stack_trace_save+0x10/0x10
[   87.765740][ T7424]  ? stack_depot_save_flags+0x27/0x9f0
[   87.765755][ T7424]  ? __lock_acquire+0x5c0/0x1f40
[   87.765790][ T7424]  ? proc_coredump_connector+0x2d3/0x4f0
[   87.765808][ T7424]  ? __pfx_proc_coredump_connector+0x10/0x10
[   87.765829][ T7424]  ? rcu_is_watching+0x13/0xc0
[   87.765847][ T7424]  get_signal+0x1f2a/0x21e0
[   87.765865][ T7424]  ? __pfx_get_signal+0x10/0x10
[   87.765881][ T7424]  arch_do_signal_or_restart+0x91/0x7e0
[   87.765898][ T7424]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   87.765924][ T7424]  irqentry_exit+0x402/0xa10
[   87.765942][ T7424]  asm_exc_page_fault+0x26/0x30
[   87.765953][ T7424] RIP: 0033:0x7fb72ce53bd7
[   87.765963][ T7424] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   87.765974][ T7424] RSP: 002b:00007fb72de371a0 EFLAGS: 00010206
[   87.765984][ T7424] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb72cf9e159
[   87.765990][ T7424] RDX: 00007fb72de371c0 RSI: 00007fb72de372f0 RDI: 000000000000000b
[   87.765997][ T7424] RBP: 00007fb72d03506b R08: 0000000000000000 R09: 0000000000000000
[   87.766003][ T7424] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   87.766010][ T7424] R13: 00007fb72d226038 R14: 00007fb72d225fa0 R15: 00007ffe210311e8
[   87.766024][ T7424]  </TASK>
[   87.771512][ T7424] memory: usage 307200kB, limit 307200kB, failcnt 38733
[   87.771524][ T7424] memory+swap: usage 428668kB, limit 9007199254740988kB, failcnt 0
[   87.771531][ T7424] kmem: usage 5628kB, limit 9007199254740988kB, failcnt 0
[   87.771537][ T7424] Memory cgroup stats for /syz1:
[   87.771614][ T7424] cache 304074752
[   87.771619][ T7424] rss 4288512
[   87.771623][ T7424] rss_huge 0
[   87.771627][ T7424] shmem 304070656
[   87.771630][ T7424] mapped_file 0
[   87.771634][ T7424] dirty 0
[   87.771638][ T7424] writeback 0
[   87.771642][ T7424] workingset_refault_anon 332
[   87.771646][ T7424] workingset_refault_file 2925
[   87.771650][ T7424] swap 124383232
[   87.771654][ T7424] swapcached 215285760
[   87.771658][ T7424] pgpgin 210132
[   87.771661][ T7424] pgpgout 135250
[   87.771665][ T7424] pgfault 29754
[   87.771669][ T7424] pgmajfault 708
[   87.771673][ T7424] inactive_anon 133836800
[   87.771677][ T7424] active_anon 174968832
[   87.771687][ T7424] inactive_file 0
[   87.771691][ T7424] active_file 4096
[   87.771695][ T7424] unevictable 0
[   87.771699][ T7424] hierarchical_memory_limit 314572800
[   87.771703][ T7424] hierarchical_memsw_limit 9223372036854771712
[   87.771708][ T7424] total_cache 304074752
[   87.771712][ T7424] total_rss 4288512
[   87.771716][ T7424] total_rss_huge 0
[   87.771720][ T7424] total_shmem 304070656
[   87.771724][ T7424] total_mapped_file 0
[   87.771728][ T7424] total_dirty 0
[   87.771731][ T7424] total_writeback 0
[   87.771735][ T7424] total_workingset_refault_anon 332
[   87.771740][ T7424] total_workingset_refault_file 2925
[   87.771744][ T7424] total_swap 124383232
[   87.771748][ T7424] total_swapcached 215285760
[   87.771752][ T7424] total_pgpgin 210132
[   87.771756][ T7424] total_pgpgout 135250
[   87.771760][ T7424] total_pgfault 29754
[   87.771764][ T7424] total_pgmajfault 708
[   87.771768][ T7424] total_inactive_anon 133836800
[   87.771773][ T7424] total_active_anon 174968832
[   87.771777][ T7424] total_inactive_file 0
[   87.771781][ T7424] total_active_file 4096
[   87.771785][ T7424] total_unevictable 0
[   87.771789][ T7424] anon_cost 0
[   87.771792][ T7424] file_cost 0
[   87.771796][ T7424] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.449,pid=7414,uid=0
[   87.772300][ T7424] Memory cgroup out of memory: Killed process 7414 (syz.1.449) total-vm:99072kB, anon-rss:4528kB, file-rss:57476kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000
[   87.976726][    T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[   88.030923][ T7421] syz.1.449 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   88.030946][ T7421] CPU: 0 UID: 0 PID: 7421 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(full) 
[   88.030959][ T7421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   88.030966][ T7421] Call Trace:
[   88.030970][ T7421]  <TASK>
[   88.030993][ T7421]  dump_stack_lvl+0x100/0x190
[   88.031014][ T7421]  dump_header+0xfb/0x606
[   88.031027][ T7421]  oom_kill_process.cold+0xd/0x380
[   88.031041][ T7421]  out_of_memory+0x340/0x14f0
[   88.031063][ T7421]  ? __pfx_out_of_memory+0x10/0x10
[   88.031082][ T7421]  mem_cgroup_out_of_memory+0xc6/0x130
[   88.031095][ T7421]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   88.031107][ T7421]  ? find_held_lock+0x2b/0x80
[   88.031125][ T7421]  ? do_raw_spin_unlock+0x145/0x1e0
[   88.031140][ T7421]  ? _raw_spin_unlock+0x28/0x50
[   88.031157][ T7421]  try_charge_memcg+0x783/0xf60
[   88.031176][ T7421]  ? __pfx_try_charge_memcg+0x10/0x10
[   88.031192][ T7421]  ? find_held_lock+0x2b/0x80
[   88.031207][ T7421]  ? rcu_read_unlock+0x17/0x60
[   88.031223][ T7421]  ? rcu_read_unlock+0x17/0x60
[   88.031239][ T7421]  ? find_held_lock+0x2b/0x80
[   88.031255][ T7421]  ? rcu_read_unlock+0x17/0x60
[   88.031274][ T7421]  charge_memcg+0x1ae/0x210
[   88.031291][ T7421]  __mem_cgroup_charge+0x2b/0x1c0
[   88.031303][ T7421]  shmem_alloc_and_add_folio+0x451/0xd40
[   88.031328][ T7421]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   88.031353][ T7421]  ? shmem_allowable_huge_orders+0x2bd/0x400
[   88.031378][ T7421]  ? __lock_acquire+0x5c0/0x1f40
[   88.031401][ T7421]  shmem_get_folio_gfp+0x75b/0x1980
[   88.031434][ T7421]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   88.031459][ T7421]  ? inode_set_ctime_current+0x9c/0x850
[   88.031487][ T7421]  ? find_held_lock+0x2b/0x80
[   88.031516][ T7421]  ? timestamp_truncate+0x22e/0x2f0
[   88.031541][ T7421]  shmem_write_begin+0x1a4/0x420
[   88.031564][ T7421]  ? __pfx_shmem_write_begin+0x10/0x10
[   88.031581][ T7421]  ? inode_set_ctime_current+0x283/0x850
[   88.031597][ T7421]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[   88.031615][ T7421]  ? inode_maybe_inc_iversion+0x169/0x220
[   88.031630][ T7421]  generic_perform_write+0x292/0xa40
[   88.031644][ T7421]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   88.031659][ T7421]  ? __pfx_generic_perform_write+0x10/0x10
[   88.031674][ T7421]  ? mnt_put_write_access_file+0x4e/0x100
[   88.031689][ T7421]  ? file_update_time_flags+0x38c/0x520
[   88.031708][ T7421]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   88.031720][ T7421]  shmem_file_write_iter+0x10e/0x140
[   88.031732][ T7421]  __kernel_write_iter+0x2ac/0x930
[   88.031745][ T7421]  ? __pfx___kernel_write_iter+0x10/0x10
[   88.031757][ T7421]  ? __up_read+0x333/0x980
[   88.031772][ T7421]  ? dump_user_range+0x65e/0xad0
[   88.031784][ T7421]  ? copy_mc_enhanced_fast_string+0x6/0xf
[   88.031800][ T7421]  dump_user_range+0x3f9/0xad0
[   88.031814][ T7421]  ? __pfx_dump_user_range+0x10/0x10
[   88.031830][ T7421]  ? __pfx_writenote+0x10/0x10
[   88.031842][ T7421]  ? elf_core_dump+0x1f25/0x3d20
[   88.031857][ T7421]  elf_core_dump+0x2d68/0x3d20
[   88.031877][ T7421]  ? __pfx_elf_core_dump+0x10/0x10
[   88.031889][ T7421]  ? kasan_save_stack+0x3f/0x50
[   88.031901][ T7421]  ? kasan_save_stack+0x30/0x50
[   88.031912][ T7421]  ? kasan_save_track+0x14/0x30
[   88.031924][ T7421]  ? __kasan_kmalloc+0xaa/0xb0
[   88.031936][ T7421]  ? vfs_coredump+0x21f6/0x54a0
[   88.031946][ T7421]  ? get_signal+0x1f2a/0x21e0
[   88.031958][ T7421]  ? arch_do_signal_or_restart+0x91/0x7e0
[   88.031978][ T7421]  ? 0xffffffffff600000
[   88.032009][ T7421]  ? lock_acquire+0x1d1/0x380
[   88.032021][ T7421]  ? get_signal+0x1f2a/0x21e0
[   88.032037][ T7421]  ? vfs_coredump+0x281a/0x54a0
[   88.032050][ T7421]  vfs_coredump+0x281a/0x54a0
[   88.032066][ T7421]  ? __pfx_vfs_coredump+0x10/0x10
[   88.032078][ T7421]  ? __lock_acquire+0x5c0/0x1f40
[   88.032093][ T7421]  ? __lock_acquire+0x5c0/0x1f40
[   88.032106][ T7421]  ? lock_acquire+0x1d1/0x380
[   88.032117][ T7421]  ? unwind_next_frame+0xbd/0x2090
[   88.032136][ T7421]  ? lock_acquire+0x1d1/0x380
[   88.032151][ T7421]  ? bpf_ksym_find+0x128/0x1c0
[   88.032169][ T7421]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   88.032192][ T7421]  ? arch_stack_walk+0xa6/0xf0
[   88.032210][ T7421]  ? __sigqueue_free+0xbe/0x2a0
[   88.032226][ T7421]  ? stack_trace_save+0x8e/0xc0
[   88.032236][ T7421]  ? __pfx_stack_trace_save+0x10/0x10
[   88.032247][ T7421]  ? stack_depot_save_flags+0x27/0x9f0
[   88.032264][ T7421]  ? __lock_acquire+0x5c0/0x1f40
[   88.032321][ T7421]  ? proc_coredump_connector+0x2d3/0x4f0
[   88.032350][ T7421]  ? __pfx_proc_coredump_connector+0x10/0x10
[   88.032379][ T7421]  ? rcu_is_watching+0x13/0xc0
[   88.032404][ T7421]  get_signal+0x1f2a/0x21e0
[   88.032452][ T7421]  ? __pfx_get_signal+0x10/0x10
[   88.032480][ T7421]  arch_do_signal_or_restart+0x91/0x7e0
[   88.032499][ T7421]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   88.032525][ T7421]  irqentry_exit+0x402/0xa10
[   88.032544][ T7421]  asm_exc_page_fault+0x26/0x30
[   88.032563][ T7421] RIP: 0033:0x7fb72ce53bd7
[   88.032574][ T7421] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   88.032585][ T7421] RSP: 002b:00007fb72de371a0 EFLAGS: 00010206
[   88.032594][ T7421] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb72cf9e159
[   88.032601][ T7421] RDX: 00007fb72de371c0 RSI: 00007fb72de372f0 RDI: 000000000000000b
[   88.032608][ T7421] RBP: 00007fb72d03506b R08: 0000000000000000 R09: 0000000000000000
[   88.032615][ T7421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   88.032624][ T7421] R13: 00007fb72d226038 R14: 00007fb72d225fa0 R15: 00007ffe210311e8
[   88.032646][ T7421]  </TASK>
[   88.046564][ T7421] memory: usage 307200kB, limit 307200kB, failcnt 39715
[   88.046579][ T7421] memory+swap: usage 428504kB, limit 9007199254740988kB, failcnt 0
[   88.046586][ T7421] kmem: usage 5600kB, limit 9007199254740988kB, failcnt 0
[   88.046592][ T7421] Memory cgroup stats for /syz1:
[   88.046755][ T7421] cache 304099328
[   88.046761][ T7421] rss 4292608
[   88.046765][ T7421] rss_huge 0
[   88.046768][ T7421] shmem 304087040
[   88.046772][ T7421] mapped_file 4096
[   88.046776][ T7421] dirty 4096
[   88.046779][ T7421] writeback 0
[   88.046783][ T7421] workingset_refault_anon 332
[   88.046788][ T7421] workingset_refault_file 2925
[   88.046792][ T7421] swap 124215296
[   88.046796][ T7421] swapcached 215289856
[   88.046800][ T7421] pgpgin 210140
[   88.046803][ T7421] pgpgout 135251
[   88.046807][ T7421] pgfault 29757
[   88.046811][ T7421] pgmajfault 710
[   88.046814][ T7421] inactive_anon 160333824
[   88.046818][ T7421] active_anon 148492288
[   88.046822][ T7421] inactive_file 4096
[   88.046826][ T7421] active_file 4096
[   88.046830][ T7421] unevictable 0
[   88.046834][ T7421] hierarchical_memory_limit 314572800
[   88.046838][ T7421] hierarchical_memsw_limit 9223372036854771712
[   88.046843][ T7421] total_cache 304099328
[   88.046847][ T7421] total_rss 4292608
[   88.046850][ T7421] total_rss_huge 0
[   88.046854][ T7421] total_shmem 304087040
[   88.046858][ T7421] total_mapped_file 4096
[   88.046862][ T7421] total_dirty 4096
[   88.046866][ T7421] total_writeback 0
[   88.046870][ T7421] total_workingset_refault_anon 332
[   88.046874][ T7421] total_workingset_refault_file 2925
[   88.046878][ T7421] total_swap 124215296
[   88.046882][ T7421] total_swapcached 215289856
[   88.046886][ T7421] total_pgpgin 210140
[   88.046890][ T7421] total_pgpgout 135251
[   88.046894][ T7421] total_pgfault 29757
[   88.046898][ T7421] total_pgmajfault 710
[   88.046902][ T7421] total_inactive_anon 160333824
[   88.046906][ T7421] total_active_anon 148492288
[   88.046910][ T7421] total_inactive_file 4096
[   88.046914][ T7421] total_active_file 4096
[   88.046918][ T7421] total_unevictable 0
[   88.046922][ T7421] anon_cost 0
[   88.046926][ T7421] file_cost 0
[   88.046930][ T7421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.449,pid=7413,uid=0
[   88.047003][ T7421] Memory cgroup out of memory: Killed process 7413 (syz.1.449) total-vm:99072kB, anon-rss:2232kB, file-rss:57476kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000
[   88.083374][ T7418] syz.1.449 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   88.083405][ T7418] CPU: 0 UID: 0 PID: 7418 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(full) 
[   88.083426][ T7418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   88.083438][ T7418] Call Trace:
[   88.083444][ T7418]  <TASK>
[   88.083453][ T7418]  dump_stack_lvl+0x100/0x190
[   88.083485][ T7418]  dump_header+0xfb/0x606
[   88.083524][ T7418]  oom_kill_process.cold+0xd/0x380
[   88.083550][ T7418]  out_of_memory+0x340/0x14f0
[   88.083579][ T7418]  ? __pfx_out_of_memory+0x10/0x10
[   88.083608][ T7418]  mem_cgroup_out_of_memory+0xc6/0x130
[   88.083630][ T7418]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   88.083648][ T7418]  ? find_held_lock+0x2b/0x80
[   88.083673][ T7418]  ? do_raw_spin_unlock+0x145/0x1e0
[   88.083693][ T7418]  ? _raw_spin_unlock+0x28/0x50
[   88.083715][ T7418]  try_charge_memcg+0x783/0xf60
[   88.083743][ T7418]  ? __pfx_try_charge_memcg+0x10/0x10
[   88.083765][ T7418]  ? find_held_lock+0x2b/0x80
[   88.083790][ T7418]  ? rcu_read_unlock+0x17/0x60
[   88.083815][ T7418]  ? rcu_read_unlock+0x17/0x60
[   88.083842][ T7418]  ? find_held_lock+0x2b/0x80
[   88.083866][ T7418]  ? rcu_read_unlock+0x17/0x60
[   88.083898][ T7418]  charge_memcg+0x1ae/0x210
[   88.083925][ T7418]  __mem_cgroup_charge+0x2b/0x1c0
[   88.083944][ T7418]  shmem_alloc_and_add_folio+0x451/0xd40
[   88.083977][ T7418]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   88.084006][ T7418]  ? shmem_allowable_huge_orders+0x2bd/0x400
[   88.084038][ T7418]  shmem_get_folio_gfp+0x75b/0x1980
[   88.084070][ T7418]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   88.084099][ T7418]  ? vm_normal_page+0x1d1/0x380
[   88.084121][ T7418]  ? __pfx_vm_normal_page+0x10/0x10
[   88.084146][ T7418]  shmem_write_begin+0x1a4/0x420
[   88.084176][ T7418]  ? __pfx_shmem_write_begin+0x10/0x10
[   88.084203][ T7418]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[   88.084236][ T7418]  generic_perform_write+0x292/0xa40
[   88.084258][ T7418]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   88.084283][ T7418]  ? __pfx_generic_perform_write+0x10/0x10
[   88.084307][ T7418]  ? file_update_time_flags+0x38c/0x520
[   88.084335][ T7418]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   88.084350][ T7418]  shmem_file_write_iter+0x10e/0x140
[   88.084374][ T7418]  __kernel_write_iter+0x2ac/0x930
[   88.084394][ T7418]  ? __pfx___kernel_write_iter+0x10/0x10
[   88.084411][ T7418]  ? __up_read+0x333/0x980
[   88.084433][ T7418]  ? dump_user_range+0x65e/0xad0
[   88.084453][ T7418]  ? copy_mc_enhanced_fast_string+0x6/0xf
[   88.084479][ T7418]  dump_user_range+0x3f9/0xad0
[   88.084505][ T7418]  ? __pfx_dump_user_range+0x10/0x10
[   88.084533][ T7418]  ? __pfx_writenote+0x10/0x10
[   88.084563][ T7418]  ? elf_core_dump+0x1f25/0x3d20
[   88.084587][ T7418]  elf_core_dump+0x2d68/0x3d20
[   88.084619][ T7418]  ? __pfx_elf_core_dump+0x10/0x10
[   88.084637][ T7418]  ? kasan_save_stack+0x3f/0x50
[   88.084657][ T7418]  ? kasan_save_stack+0x30/0x50
[   88.084676][ T7418]  ? kasan_save_track+0x14/0x30
[   88.084694][ T7418]  ? __kasan_kmalloc+0xaa/0xb0
[   88.084713][ T7418]  ? vfs_coredump+0x21f6/0x54a0
[   88.084730][ T7418]  ? get_signal+0x1f2a/0x21e0
[   88.084748][ T7418]  ? arch_do_signal_or_restart+0x91/0x7e0
[   88.084781][ T7418]  ? 0xffffffffff600000
[   88.084829][ T7418]  ? lock_acquire+0x1d1/0x380
[   88.084848][ T7418]  ? get_signal+0x1f2a/0x21e0
[   88.084878][ T7418]  ? vfs_coredump+0x281a/0x54a0
[   88.084897][ T7418]  vfs_coredump+0x281a/0x54a0
[   88.084926][ T7418]  ? __pfx_vfs_coredump+0x10/0x10
[   88.084948][ T7418]  ? __lock_acquire+0x5c0/0x1f40
[   88.084974][ T7418]  ? __lock_acquire+0x5c0/0x1f40
[   88.084998][ T7418]  ? lock_acquire+0x1d1/0x380
[   88.085018][ T7418]  ? unwind_next_frame+0xbd/0x2090
[   88.085049][ T7418]  ? lock_acquire+0x1d1/0x380
[   88.085074][ T7418]  ? bpf_ksym_find+0x128/0x1c0
[   88.085104][ T7418]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   88.085143][ T7418]  ? arch_stack_walk+0xa6/0xf0
[   88.085178][ T7418]  ? __sigqueue_free+0xbe/0x2a0
[   88.085204][ T7418]  ? stack_trace_save+0x8e/0xc0
[   88.085222][ T7418]  ? __pfx_stack_trace_save+0x10/0x10
[   88.085242][ T7418]  ? stack_depot_save_flags+0x27/0x9f0
[   88.085267][ T7418]  ? __lock_acquire+0x5c0/0x1f40
[   88.085337][ T7418]  ? proc_coredump_connector+0x2d3/0x4f0
[   88.085369][ T7418]  ? __pfx_proc_coredump_connector+0x10/0x10
[   88.085405][ T7418]  ? rcu_is_watching+0x13/0xc0
[   88.085436][ T7418]  get_signal+0x1f2a/0x21e0
[   88.085469][ T7418]  ? __pfx_get_signal+0x10/0x10
[   88.085499][ T7418]  arch_do_signal_or_restart+0x91/0x7e0
[   88.085530][ T7418]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   88.085582][ T7418]  irqentry_exit+0x402/0xa10
[   88.085614][ T7418]  asm_exc_page_fault+0x26/0x30
[   88.085633][ T7418] RIP: 0033:0x7fb72ce53bd7
[   88.085649][ T7418] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   88.085668][ T7418] RSP: 002b:00007fb72de371a0 EFLAGS: 00010206
[   88.085684][ T7418] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb72cf9e159
[   88.085696][ T7418] RDX: 00007fb72de371c0 RSI: 00007fb72de372f0 RDI: 000000000000000b
[   88.085707][ T7418] RBP: 00007fb72d03506b R08: 0000000000000000 R09: 0000000000000000
[   88.085718][ T7418] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   88.085728][ T7418] R13: 00007fb72d226038 R14: 00007fb72d225fa0 R15: 00007ffe210311e8
[   88.085755][ T7418]  </TASK>
[   88.099483][ T7418] memory: usage 307076kB, limit 307200kB, failcnt 39900
[   88.099504][ T7418] memory+swap: usage 428540kB, limit 9007199254740988kB, failcnt 0
[   88.099515][ T7418] kmem: usage 5396kB, limit 9007199254740988kB, failcnt 0
[   88.099527][ T7418] Memory cgroup stats for /syz1:
[   88.099667][ T7418] cache 304304128
[   88.099676][ T7418] rss 4272128
[   88.099682][ T7418] rss_huge 0
[   88.099689][ T7418] shmem 304185344
[   88.099695][ T7418] mapped_file 4096
[   88.099701][ T7418] dirty 0
[   88.099708][ T7418] writeback 0
[   88.099714][ T7418] workingset_refault_anon 332
[   88.099720][ T7418] workingset_refault_file 2925
[   88.099727][ T7418] swap 124383232
[   88.099733][ T7418] swapcached 215658496
[   88.099739][ T7418] pgpgin 210307
[   88.099745][ T7418] pgpgout 135399
[   88.099752][ T7418] pgfault 29767
[   88.099758][ T7418] pgmajfault 710
[   88.099764][ T7418] inactive_anon 159256576
[   88.099771][ T7418] active_anon 149409792
[   88.099778][ T7418] inactive_file 12288
[   88.099784][ T7418] active_file 61440
[   88.099790][ T7418] unevictable 0
[   88.099797][ T7418] hierarchical_memory_limit 314572800
[   88.099804][ T7418] hierarchical_memsw_limit 9223372036854771712
[   88.099812][ T7418] total_cache 304304128
[   88.099819][ T7418] total_rss 4272128
[   88.099826][ T7418] total_rss_huge 0
[   88.099832][ T7418] total_shmem 304185344
[   88.099839][ T7418] total_mapped_file 4096
[   88.099846][ T7418] total_dirty 0
[   88.099852][ T7418] total_writeback 0
[   88.099859][ T7418] total_workingset_refault_anon 332
[   88.099867][ T7418] total_workingset_refault_file 2925
[   88.099875][ T7418] total_swap 124383232
[   88.099882][ T7418] total_swapcached 215658496
[   88.099889][ T7418] total_pgpgin 210307
[   88.099896][ T7418] total_pgpgout 135399
[   88.099903][ T7418] total_pgfault 29767
[   88.099911][ T7418] total_pgmajfault 710
[   88.099918][ T7418] total_inactive_anon 159256576
[   88.099925][ T7418] total_active_anon 149409792
[   88.099933][ T7418] total_inactive_file 12288
[   88.099940][ T7418] total_active_file 61440
[   88.099947][ T7418] total_unevictable 0
[   88.099954][ T7418] anon_cost 0
[   88.099960][ T7418] file_cost 0
[   88.099967][ T7418] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.449,pid=7424,uid=0
[   88.100072][ T7418] Memory cgroup out of memory: Killed process 7424 (syz.1.449) total-vm:99072kB, anon-rss:1592kB, file-rss:53572kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000
[   88.126774][    T9] usb 10-1: device descriptor read/64, error -71
[   88.237133][    T9] usb usb10-port1: attempt power cycle
[   88.258659][ T5091] Bluetooth: hci2: command 0x0401 tx timeout
[   88.425327][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout
[   88.425390][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout
[   88.587392][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'.
[   88.596802][    T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[   88.631968][    T9] usb 10-1: device descriptor read/8, error -71
[   88.801141][ T7415] syz.1.449 (7415) used greatest stack depth: 18352 bytes left
[   88.814806][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'.
[   88.867138][    T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[   88.888601][    T9] usb 10-1: device descriptor read/8, error -71
[   88.996887][    T9] usb usb10-port1: unable to enumerate USB device
[   89.001140][ T7583] CacheFiles: Failed to register: -95
[   89.013405][ T7584] tmpfs: Unknown parameter 'usrquota��@'
[   89.176859][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'.
[   89.470943][ T7420] syz.1.449 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   89.470997][ T7420] CPU: 1 UID: 0 PID: 7420 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(full) 
[   89.471013][ T7420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   89.471021][ T7420] Call Trace:
[   89.471026][ T7420]  <TASK>
[   89.471032][ T7420]  dump_stack_lvl+0x100/0x190
[   89.471056][ T7420]  dump_header+0xfb/0x606
[   89.471087][ T7420]  oom_kill_process.cold+0xd/0x380
[   89.471103][ T7420]  out_of_memory+0x340/0x14f0
[   89.471125][ T7420]  ? __pfx_out_of_memory+0x10/0x10
[   89.471147][ T7420]  mem_cgroup_out_of_memory+0xc6/0x130
[   89.471163][ T7420]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   89.471176][ T7420]  ? find_held_lock+0x2b/0x80
[   89.471199][ T7420]  ? do_raw_spin_unlock+0x145/0x1e0
[   89.471216][ T7420]  ? _raw_spin_unlock+0x28/0x50
[   89.471234][ T7420]  try_charge_memcg+0x783/0xf60
[   89.471257][ T7420]  ? __pfx_try_charge_memcg+0x10/0x10
[   89.471275][ T7420]  ? find_held_lock+0x2b/0x80
[   89.471293][ T7420]  ? rcu_read_unlock+0x17/0x60
[   89.471313][ T7420]  ? rcu_read_unlock+0x17/0x60
[   89.471332][ T7420]  ? find_held_lock+0x2b/0x80
[   89.471350][ T7420]  ? rcu_read_unlock+0x17/0x60
[   89.471373][ T7420]  charge_memcg+0x1ae/0x210
[   89.471393][ T7420]  __mem_cgroup_charge+0x2b/0x1c0
[   89.471406][ T7420]  shmem_alloc_and_add_folio+0x451/0xd40
[   89.471436][ T7420]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   89.471457][ T7420]  ? shmem_allowable_huge_orders+0x2bd/0x400
[   89.471481][ T7420]  shmem_get_folio_gfp+0x75b/0x1980
[   89.471504][ T7420]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   89.471525][ T7420]  ? vm_normal_page+0x1d1/0x380
[   89.471543][ T7420]  ? __pfx_vm_normal_page+0x10/0x10
[   89.471561][ T7420]  shmem_write_begin+0x1a4/0x420
[   89.471582][ T7420]  ? __pfx_shmem_write_begin+0x10/0x10
[   89.471603][ T7420]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[   89.471630][ T7420]  generic_perform_write+0x292/0xa40
[   89.471645][ T7420]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   89.471663][ T7420]  ? __pfx_generic_perform_write+0x10/0x10
[   89.471681][ T7420]  ? file_update_time_flags+0x38c/0x520
[   89.471704][ T7420]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   89.471717][ T7420]  shmem_file_write_iter+0x10e/0x140
[   89.471732][ T7420]  __kernel_write_iter+0x2ac/0x930
[   89.471747][ T7420]  ? __pfx___kernel_write_iter+0x10/0x10
[   89.471760][ T7420]  ? __up_read+0x333/0x980
[   89.471778][ T7420]  ? dump_user_range+0x65e/0xad0
[   89.471792][ T7420]  ? copy_mc_enhanced_fast_string+0x6/0xf
[   89.471810][ T7420]  dump_user_range+0x3f9/0xad0
[   89.471827][ T7420]  ? __pfx_dump_user_range+0x10/0x10
[   89.471846][ T7420]  ? __pfx_writenote+0x10/0x10
[   89.471860][ T7420]  ? elf_core_dump+0x1f25/0x3d20
[   89.471877][ T7420]  elf_core_dump+0x2d68/0x3d20
[   89.471907][ T7420]  ? __pfx_elf_core_dump+0x10/0x10
[   89.471921][ T7420]  ? kasan_save_stack+0x3f/0x50
[   89.471935][ T7420]  ? kasan_save_stack+0x30/0x50
[   89.471948][ T7420]  ? kasan_save_track+0x14/0x30
[   89.471962][ T7420]  ? __kasan_kmalloc+0xaa/0xb0
[   89.471976][ T7420]  ? vfs_coredump+0x21f6/0x54a0
[   89.471988][ T7420]  ? get_signal+0x1f2a/0x21e0
[   89.472002][ T7420]  ? arch_do_signal_or_restart+0x91/0x7e0
[   89.472025][ T7420]  ? 0xffffffffff600000
[   89.472057][ T7420]  ? lock_acquire+0x1d1/0x380
[   89.472071][ T7420]  ? get_signal+0x1f2a/0x21e0
[   89.472090][ T7420]  ? vfs_coredump+0x281a/0x54a0
[   89.472102][ T7420]  vfs_coredump+0x281a/0x54a0
[   89.472121][ T7420]  ? __pfx_vfs_coredump+0x10/0x10
[   89.472135][ T7420]  ? __lock_acquire+0x5c0/0x1f40
[   89.472152][ T7420]  ? __lock_acquire+0x5c0/0x1f40
[   89.472168][ T7420]  ? lock_acquire+0x1d1/0x380
[   89.472180][ T7420]  ? unwind_next_frame+0xbd/0x2090
[   89.472202][ T7420]  ? lock_acquire+0x1d1/0x380
[   89.472220][ T7420]  ? bpf_ksym_find+0x128/0x1c0
[   89.472240][ T7420]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   89.472266][ T7420]  ? arch_stack_walk+0xa6/0xf0
[   89.472289][ T7420]  ? __sigqueue_free+0xbe/0x2a0
[   89.472307][ T7420]  ? stack_trace_save+0x8e/0xc0
[   89.472319][ T7420]  ? __pfx_stack_trace_save+0x10/0x10
[   89.472332][ T7420]  ? stack_depot_save_flags+0x27/0x9f0
[   89.472348][ T7420]  ? __lock_acquire+0x5c0/0x1f40
[   89.472390][ T7420]  ? proc_coredump_connector+0x2d3/0x4f0
[   89.472410][ T7420]  ? __pfx_proc_coredump_connector+0x10/0x10
[   89.472435][ T7420]  ? rcu_is_watching+0x13/0xc0
[   89.472454][ T7420]  get_signal+0x1f2a/0x21e0
[   89.472475][ T7420]  ? __pfx_get_signal+0x10/0x10
[   89.472494][ T7420]  arch_do_signal_or_restart+0x91/0x7e0
[   89.472515][ T7420]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   89.472549][ T7420]  irqentry_exit+0x402/0xa10
[   89.472569][ T7420]  asm_exc_page_fault+0x26/0x30
[   89.472583][ T7420] RIP: 0033:0x7fb72ce53bd7
[   89.472595][ T7420] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   89.472608][ T7420] RSP: 002b:00007fb72de371a0 EFLAGS: 00010206
[   89.472619][ T7420] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb72cf9e159
[   89.472627][ T7420] RDX: 00007fb72de371c0 RSI: 00007fb72de372f0 RDI: 000000000000000b
[   89.472635][ T7420] RBP: 00007fb72d03506b R08: 0000000000000000 R09: 0000000000000000
[   89.472643][ T7420] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   89.472651][ T7420] R13: 00007fb72d226038 R14: 00007fb72d225fa0 R15: 00007ffe210311e8
[   89.472668][ T7420]  </TASK>
[   89.472715][ T7420] memory: usage 307200kB, limit 307200kB, failcnt 47103
[   89.472725][ T7420] memory+swap: usage 424584kB, limit 9007199254740988kB, failcnt 0
[   89.472733][ T7420] kmem: usage 4720kB, limit 9007199254740988kB, failcnt 0
[   89.472740][ T7420] Memory cgroup stats for /syz1:
[   89.472834][ T7420] cache 296603648
[   89.472839][ T7420] rss 12136448
[   89.472844][ T7420] rss_huge 0
[   89.472848][ T7420] shmem 296591360
[   89.472853][ T7420] mapped_file 8192
[   89.472857][ T7420] dirty 8192
[   89.472862][ T7420] writeback 0
[   89.472866][ T7420] workingset_refault_anon 1516
[   89.472871][ T7420] workingset_refault_file 4294
[   89.472876][ T7420] swap 120201216
[   89.472881][ T7420] swapcached 256258048
[   89.472885][ T7420] pgpgin 252917
[   89.472890][ T7420] pgpgout 177808
[   89.472894][ T7420] pgfault 48893
[   89.472898][ T7420] pgmajfault 2492
[   89.472903][ T7420] inactive_anon 44359680
[   89.472908][ T7420] active_anon 265367552
[   89.472912][ T7420] inactive_file 0
[   89.472917][ T7420] active_file 0
[   89.472921][ T7420] unevictable 0
[   89.472925][ T7420] hierarchical_memory_limit 314572800
[   89.472931][ T7420] hierarchical_memsw_limit 9223372036854771712
[   89.472937][ T7420] total_cache 296603648
[   89.472941][ T7420] total_rss 12136448
[   89.472946][ T7420] total_rss_huge 0
[   89.472951][ T7420] total_shmem 296591360
[   89.472956][ T7420] total_mapped_file 8192
[   89.472960][ T7420] total_dirty 8192
[   89.472965][ T7420] total_writeback 0
[   89.472970][ T7420] total_workingset_refault_anon 1516
[   89.472975][ T7420] total_workingset_refault_file 4294
[   89.472980][ T7420] total_swap 120201216
[   89.472984][ T7420] total_swapcached 256258048
[   89.472989][ T7420] total_pgpgin 252917
[   89.472994][ T7420] total_pgpgout 177808
[   89.472999][ T7420] total_pgfault 48893
[   89.473003][ T7420] total_pgmajfault 2492
[   89.473008][ T7420] total_inactive_anon 44359680
[   89.473013][ T7420] total_active_anon 265367552
[   89.473018][ T7420] total_inactive_file 0
[   89.473023][ T7420] total_active_file 0
[   89.473027][ T7420] total_unevictable 0
[   89.473032][ T7420] anon_cost 0
[   89.473036][ T7420] file_cost 0
[   89.473042][ T7420] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.449,pid=7427,uid=0
[   89.474600][ T7420] Memory cgroup out of memory: Killed process 7427 (syz.1.449) total-vm:99072kB, anon-rss:12868kB, file-rss:57476kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000
[   89.497590][ T7420] syz.1.449 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   89.497616][ T7420] CPU: 1 UID: 0 PID: 7420 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(full) 
[   89.497630][ T7420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   89.497637][ T7420] Call Trace:
[   89.497642][ T7420]  <TASK>
[   89.497648][ T7420]  dump_stack_lvl+0x100/0x190
[   89.497668][ T7420]  dump_header+0xfb/0x606
[   89.497682][ T7420]  oom_kill_process.cold+0xd/0x380
[   89.497696][ T7420]  out_of_memory+0x340/0x14f0
[   89.497714][ T7420]  ? __pfx_out_of_memory+0x10/0x10
[   89.497732][ T7420]  mem_cgroup_out_of_memory+0xc6/0x130
[   89.497745][ T7420]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   89.497757][ T7420]  ? find_held_lock+0x2b/0x80
[   89.497776][ T7420]  ? do_raw_spin_unlock+0x145/0x1e0
[   89.497790][ T7420]  ? _raw_spin_unlock+0x28/0x50
[   89.497806][ T7420]  try_charge_memcg+0x783/0xf60
[   89.497826][ T7420]  ? __pfx_try_charge_memcg+0x10/0x10
[   89.497841][ T7420]  ? find_held_lock+0x2b/0x80
[   89.497857][ T7420]  ? rcu_read_unlock+0x17/0x60
[   89.497873][ T7420]  ? rcu_read_unlock+0x17/0x60
[   89.497889][ T7420]  ? find_held_lock+0x2b/0x80
[   89.497909][ T7420]  ? rcu_read_unlock+0x17/0x60
[   89.497937][ T7420]  charge_memcg+0x1ae/0x210
[   89.497960][ T7420]  __mem_cgroup_charge+0x2b/0x1c0
[   89.498002][ T7420]  shmem_alloc_and_add_folio+0x451/0xd40
[   89.498036][ T7420]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   89.498065][ T7420]  ? shmem_allowable_huge_orders+0x2bd/0x400
[   89.498095][ T7420]  shmem_get_folio_gfp+0x75b/0x1980
[   89.498126][ T7420]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   89.498147][ T7420]  ? vm_normal_page+0x1d1/0x380
[   89.498159][ T7420]  ? __pfx_vm_normal_page+0x10/0x10
[   89.498174][ T7420]  shmem_write_begin+0x1a4/0x420
[   89.498193][ T7420]  ? __pfx_shmem_write_begin+0x10/0x10
[   89.498210][ T7420]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[   89.498231][ T7420]  generic_perform_write+0x292/0xa40
[   89.498244][ T7420]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   89.498263][ T7420]  ? __pfx_generic_perform_write+0x10/0x10
[   89.498279][ T7420]  ? file_update_time_flags+0x38c/0x520
[   89.498298][ T7420]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   89.498308][ T7420]  shmem_file_write_iter+0x10e/0x140
[   89.498321][ T7420]  __kernel_write_iter+0x2ac/0x930
[   89.498334][ T7420]  ? __pfx___kernel_write_iter+0x10/0x10
[   89.498346][ T7420]  ? __up_read+0x333/0x980
[   89.498361][ T7420]  ? dump_user_range+0x65e/0xad0
[   89.498373][ T7420]  ? copy_mc_enhanced_fast_string+0x6/0xf
[   89.498389][ T7420]  dump_user_range+0x3f9/0xad0
[   89.498403][ T7420]  ? __pfx_dump_user_range+0x10/0x10
[   89.498419][ T7420]  ? __pfx_writenote+0x10/0x10
[   89.498431][ T7420]  ? elf_core_dump+0x1f25/0x3d20
[   89.498446][ T7420]  elf_core_dump+0x2d68/0x3d20
[   89.498466][ T7420]  ? __pfx_elf_core_dump+0x10/0x10
[   89.498478][ T7420]  ? kasan_save_stack+0x3f/0x50
[   89.498489][ T7420]  ? kasan_save_stack+0x30/0x50
[   89.498501][ T7420]  ? kasan_save_track+0x14/0x30
[   89.498513][ T7420]  ? __kasan_kmalloc+0xaa/0xb0
[   89.498525][ T7420]  ? vfs_coredump+0x21f6/0x54a0
[   89.498535][ T7420]  ? get_signal+0x1f2a/0x21e0
[   89.498546][ T7420]  ? arch_do_signal_or_restart+0x91/0x7e0
[   89.498567][ T7420]  ? 0xffffffffff600000
[   89.498593][ T7420]  ? lock_acquire+0x1d1/0x380
[   89.498613][ T7420]  ? get_signal+0x1f2a/0x21e0
[   89.498630][ T7420]  ? vfs_coredump+0x281a/0x54a0
[   89.498640][ T7420]  vfs_coredump+0x281a/0x54a0
[   89.498657][ T7420]  ? __pfx_vfs_coredump+0x10/0x10
[   89.498668][ T7420]  ? __lock_acquire+0x5c0/0x1f40
[   89.498683][ T7420]  ? __lock_acquire+0x5c0/0x1f40
[   89.498696][ T7420]  ? lock_acquire+0x1d1/0x380
[   89.498707][ T7420]  ? unwind_next_frame+0xbd/0x2090
[   89.498726][ T7420]  ? lock_acquire+0x1d1/0x380
[   89.498740][ T7420]  ? bpf_ksym_find+0x128/0x1c0
[   89.498758][ T7420]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   89.498781][ T7420]  ? arch_stack_walk+0xa6/0xf0
[   89.498801][ T7420]  ? __sigqueue_free+0xbe/0x2a0
[   89.498815][ T7420]  ? stack_trace_save+0x8e/0xc0
[   89.498825][ T7420]  ? __pfx_stack_trace_save+0x10/0x10
[   89.498836][ T7420]  ? stack_depot_save_flags+0x27/0x9f0
[   89.498851][ T7420]  ? __lock_acquire+0x5c0/0x1f40
[   89.498886][ T7420]  ? proc_coredump_connector+0x2d3/0x4f0
[   89.498905][ T7420]  ? __pfx_proc_coredump_connector+0x10/0x10
[   89.498937][ T7420]  ? rcu_is_watching+0x13/0xc0
[   89.498956][ T7420]  get_signal+0x1f2a/0x21e0
[   89.498991][ T7420]  ? __pfx_get_signal+0x10/0x10
[   89.499009][ T7420]  arch_do_signal_or_restart+0x91/0x7e0
[   89.499026][ T7420]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   89.499052][ T7420]  irqentry_exit+0x402/0xa10
[   89.499070][ T7420]  asm_exc_page_fault+0x26/0x30
[   89.499081][ T7420] RIP: 0033:0x7fb72ce53bd7
[   89.499091][ T7420] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   89.499102][ T7420] RSP: 002b:00007fb72de371a0 EFLAGS: 00010206
[   89.499112][ T7420] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb72cf9e159
[   89.499119][ T7420] RDX: 00007fb72de371c0 RSI: 00007fb72de372f0 RDI: 000000000000000b
[   89.499125][ T7420] RBP: 00007fb72d03506b R08: 0000000000000000 R09: 0000000000000000
[   89.499132][ T7420] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   89.499138][ T7420] R13: 00007fb72d226038 R14: 00007fb72d225fa0 R15: 00007ffe210311e8
[   89.499153][ T7420]  </TASK>
[   89.500036][ T7420] memory: usage 307200kB, limit 307200kB, failcnt 47238
[   89.500045][ T7420] memory+swap: usage 424584kB, limit 9007199254740988kB, failcnt 0
[   89.500052][ T7420] kmem: usage 4720kB, limit 9007199254740988kB, failcnt 0
[   89.500058][ T7420] Memory cgroup stats for /syz1:
[   89.500122][ T7420] cache 296603648
[   89.500127][ T7420] rss 12136448
[   89.500131][ T7420] rss_huge 0
[   89.500134][ T7420] shmem 296591360
[   89.500138][ T7420] mapped_file 8192
[   89.500142][ T7420] dirty 8192
[   89.500146][ T7420] writeback 0
[   89.500149][ T7420] workingset_refault_anon 1516
[   89.500154][ T7420] workingset_refault_file 4294
[   89.500159][ T7420] swap 120201216
[   89.500163][ T7420] swapcached 256258048
[   89.500166][ T7420] pgpgin 252917
[   89.500170][ T7420] pgpgout 177808
[   89.500174][ T7420] pgfault 48893
[   89.500178][ T7420] pgmajfault 2492
[   89.500182][ T7420] inactive_anon 44359680
[   89.500186][ T7420] active_anon 265367552
[   89.500190][ T7420] inactive_file 0
[   89.500193][ T7420] active_file 0
[   89.500197][ T7420] unevictable 0
[   89.500201][ T7420] hierarchical_memory_limit 314572800
[   89.500205][ T7420] hierarchical_memsw_limit 9223372036854771712
[   89.500210][ T7420] total_cache 296603648
[   89.500214][ T7420] total_rss 12136448
[   89.500218][ T7420] total_rss_huge 0
[   89.500222][ T7420] total_shmem 296591360
[   89.500226][ T7420] total_mapped_file 8192
[   89.500230][ T7420] total_dirty 8192
[   89.500233][ T7420] total_writeback 0
[   89.500237][ T7420] total_workingset_refault_anon 1516
[   89.500242][ T7420] total_workingset_refault_file 4294
[   89.500246][ T7420] total_swap 120201216
[   89.500250][ T7420] total_swapcached 256258048
[   89.500254][ T7420] total_pgpgin 252917
[   89.500258][ T7420] total_pgpgout 177808
[   89.500262][ T7420] total_pgfault 48893
[   89.500265][ T7420] total_pgmajfault 2492
[   89.500269][ T7420] total_inactive_anon 44359680
[   89.500274][ T7420] total_active_anon 265367552
[   89.500278][ T7420] total_inactive_file 0
[   89.500282][ T7420] total_active_file 0
[   89.500286][ T7420] total_unevictable 0
[   89.500289][ T7420] anon_cost 0
[   89.500293][ T7420] file_cost 0
[   89.500297][ T7420] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.449,pid=7421,uid=0
[   89.500349][ T7420] Memory cgroup out of memory: Killed process 7421 (syz.1.449) total-vm:99072kB, anon-rss:12316kB, file-rss:57476kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000
[   89.524446][ T7590] syz.1.504 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000
[   89.524479][ T7590] CPU: 0 UID: 0 PID: 7590 Comm: syz.1.504 Not tainted syzkaller #0 PREEMPT(full) 
[   89.524498][ T7590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   89.524509][ T7590] Call Trace:
[   89.524515][ T7590]  <TASK>
[   89.524522][ T7590]  dump_stack_lvl+0x100/0x190
[   89.524576][ T7590]  dump_header+0xfb/0x606
[   89.524592][ T7590]  oom_kill_process.cold+0xd/0x380
[   89.524606][ T7590]  out_of_memory+0x340/0x14f0
[   89.524624][ T7590]  ? __pfx_out_of_memory+0x10/0x10
[   89.524643][ T7590]  mem_cgroup_out_of_memory+0xc6/0x130
[   89.524656][ T7590]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   89.524668][ T7590]  ? find_held_lock+0x2b/0x80
[   89.524687][ T7590]  ? do_raw_spin_unlock+0x145/0x1e0
[   89.524702][ T7590]  ? _raw_spin_unlock+0x28/0x50
[   89.524717][ T7590]  try_charge_memcg+0x783/0xf60
[   89.524738][ T7590]  ? __pfx_try_charge_memcg+0x10/0x10
[   89.524762][ T7590]  ? find_held_lock+0x2b/0x80
[   89.524784][ T7590]  ? rcu_read_unlock+0x17/0x60
[   89.524808][ T7590]  ? rcu_read_unlock+0x17/0x60
[   89.524833][ T7590]  obj_cgroup_charge_pages+0x2b/0x1f0
[   89.524851][ T7590]  __memcg_kmem_charge_page+0x1c4/0x4d0
[   89.524870][ T7590]  __alloc_frozen_pages_noprof+0x534/0x3300
[   89.524884][ T7590]  ? rcu_is_watching+0x13/0xc0
[   89.524900][ T7590]  ? trace_sched_exit_tp+0x120/0x160
[   89.524917][ T7590]  ? __lock_acquire+0x5c0/0x1f40
[   89.524930][ T7590]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   89.524941][ T7590]  ? __lock_acquire+0x5c0/0x1f40
[   89.524955][ T7590]  ? __lock_acquire+0x5c0/0x1f40
[   89.524967][ T7590]  ? futex_unqueue+0x29/0x2c0
[   89.524986][ T7590]  ? do_raw_spin_lock+0x128/0x260
[   89.525000][ T7590]  ? find_held_lock+0x2b/0x80
[   89.525017][ T7590]  ? look_up_lock_class+0x64/0x120
[   89.525033][ T7590]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   89.525049][ T7590]  ? policy_nodemask+0xed/0x4f0
[   89.525065][ T7590]  alloc_pages_mpol+0x201/0x550
[   89.525081][ T7590]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   89.525099][ T7590]  alloc_pages_noprof+0x1a/0x160
[   89.525116][ T7590]  __pud_alloc+0x3b/0x690
[   89.525131][ T7590]  __handle_mm_fault+0x1078/0x2f60
[   89.525149][ T7590]  ? lock_vma_under_rcu+0x11d/0x590
[   89.525165][ T7590]  ? __pfx___handle_mm_fault+0x10/0x10
[   89.525184][ T7590]  ? lock_vma_under_rcu+0x17c/0x590
[   89.525207][ T7590]  handle_mm_fault+0x363/0xa20
[   89.525226][ T7590]  do_user_addr_fault+0x59c/0x12f0
[   89.525246][ T7590]  exc_page_fault+0x6f/0xd0
[   89.525262][ T7590]  asm_exc_page_fault+0x26/0x30
[   89.525273][ T7590] RIP: 0033:0x7fb72cf6e788
[   89.525283][ T7590] Code: 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 62 e1 fe 28 6f 54 16 ff 62 e1 fe 28 6f
[   89.525293][ T7590] RSP: 002b:00007ffe21031348 EFLAGS: 00010246
[   89.525303][ T7590] RAX: 00002000000001c0 RBX: 0000000000000004 RCX: 00737973796d2f2e
[   89.525311][ T7590] RDX: 0000000000000008 RSI: 00737973796d2f2e RDI: 00002000000001c0
[   89.525317][ T7590] RBP: fffffffffffffffe R08: 0000001b31d20000 R09: 0000000000000001
[   89.525324][ T7590] R10: 7ffffffffffffff7 R11: 0000000000000009 R12: 00007ffe21031470
[   89.525331][ T7590] R13: 00007fb72d225fac R14: 0000000000015bfa R15: 00007fb72d225fa0
[   89.525345][ T7590]  </TASK>
[   89.529950][ T7590] memory: usage 307200kB, limit 307200kB, failcnt 47304
[   89.529963][ T7590] memory+swap: usage 424584kB, limit 9007199254740988kB, failcnt 0
[   89.529971][ T7590] kmem: usage 4720kB, limit 9007199254740988kB, failcnt 0
[   89.529978][ T7590] Memory cgroup stats for /syz1:
[   89.530098][ T7590] cache 296603648
[   89.530107][ T7590] rss 12136448
[   89.530114][ T7590] rss_huge 0
[   89.530120][ T7590] shmem 296591360
[   89.530127][ T7590] mapped_file 8192
[   89.530133][ T7590] dirty 8192
[   89.530139][ T7590] writeback 0
[   89.530146][ T7590] workingset_refault_anon 1516
[   89.530152][ T7590] workingset_refault_file 4294
[   89.530159][ T7590] swap 120201216
[   89.530166][ T7590] swapcached 256258048
[   89.530172][ T7590] pgpgin 252917
[   89.530179][ T7590] pgpgout 177808
[   89.530184][ T7590] pgfault 48893
[   89.530190][ T7590] pgmajfault 2492
[   89.530197][ T7590] inactive_anon 44359680
[   89.530258][ T7590] active_anon 265367552
[   89.530267][ T7590] inactive_file 0
[   89.530274][ T7590] active_file 0
[   89.530280][ T7590] unevictable 0
[   89.530285][ T7590] hierarchical_memory_limit 314572800
[   89.530292][ T7590] hierarchical_memsw_limit 9223372036854771712
[   89.530300][ T7590] total_cache 296603648
[   89.530306][ T7590] total_rss 12136448
[   89.530313][ T7590] total_rss_huge 0
[   89.530319][ T7590] total_shmem 296591360
[   89.530325][ T7590] total_mapped_file 8192
[   89.530332][ T7590] total_dirty 8192
[   89.530338][ T7590] total_writeback 0
[   89.530344][ T7590] total_workingset_refault_anon 1516
[   89.530351][ T7590] total_workingset_refault_file 4294
[   89.530358][ T7590] total_swap 120201216
[   89.530363][ T7590] total_swapcached 256258048
[   89.530367][ T7590] total_pgpgin 252917
[   89.530371][ T7590] total_pgpgout 177808
[   89.530375][ T7590] total_pgfault 48893
[   89.530380][ T7590] total_pgmajfault 2492
[   89.530384][ T7590] total_inactive_anon 44359680
[   89.530388][ T7590] total_active_anon 265367552
[   89.530393][ T7590] total_inactive_file 0
[   89.530397][ T7590] total_active_file 0
[   89.530401][ T7590] total_unevictable 0
[   89.530482][ T7590] anon_cost 0
[   89.530487][ T7590] file_cost 0
[   89.530492][ T7590] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.449,pid=7420,uid=0
[   89.531201][ T7590] Memory cgroup out of memory: Killed process 7420 (syz.1.449) total-vm:99072kB, anon-rss:6144kB, file-rss:57476kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000
[   89.773782][ T7578] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   89.773800][ T7578] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   89.782537][ T7578] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   89.782559][ T7578] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   89.794085][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'.
[   89.805546][ T7578] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   89.805563][ T7578] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   89.828397][ T7601] bond5: entered allmulticast mode
[   89.962475][   T43] kauditd_printk_skb: 18 callbacks suppressed
[   89.962487][   T43] audit: type=1400 audit(1789749671.459:576): avc:  denied  { kexec_image_load } for  pid=7590 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   90.230574][ T7421] syz.1.449 (7421) used greatest stack depth: 17400 bytes left
[   90.413704][ T7628] netlink: 16 bytes leftover after parsing attributes in process `syz.5.517'.
[   90.490700][   T43] audit: type=1804 audit(1789749671.989:577): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.1.518" name="ima_policy_written" res=0 errno=-17
[   90.492651][   T43] audit: type=1807 audit(1789749671.989:578): UNKNOWN= res=0
[   90.494604][   T43] audit: type=1802 audit(1789749671.989:579): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.1.518" res=0 errno=0
[   90.494863][ T7630] ima: policy update failed
[   90.494983][   T43] audit: type=1802 audit(1789749671.989:580): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.518" res=0 errno=0
[   90.578063][   T43] audit: type=1400 audit(1789749672.069:581): avc:  denied  { write } for  pid=7632 comm="syz.3.519" name="/" dev="9p" ino=75267623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   90.599197][   T43] audit: type=1400 audit(1789749672.099:582): avc:  denied  { write } for  pid=7632 comm="syz.3.519" name="cpuacct.usage_percpu" dev="9p" ino=75267677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   90.836004][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.521'.
[   90.844598][ T7646] bond1: entered allmulticast mode
[   90.941388][   T43] audit: type=1400 audit(1789749672.439:583): avc:  denied  { map } for  pid=7650 comm="syz.5.522" path="socket:[17970]" dev="sockfs" ino=17970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   90.941623][   T43] audit: type=1400 audit(1789749672.439:584): avc:  denied  { read } for  pid=7650 comm="syz.5.522" path="socket:[17970]" dev="sockfs" ino=17970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   90.958870][ T7653] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   90.958886][ T7653] overlayfs: missing 'lowerdir'
[   90.973098][   T43] audit: type=1400 audit(1789749672.469:585): avc:  denied  { map } for  pid=7649 comm="syz.2.523" path="socket:[20496]" dev="sockfs" ino=20496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   91.046187][ T7658] xt_TCPMSS: Only works on TCP SYN packets
[   91.167799][ T7667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.528'.
[   91.484929][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.530'.
[   91.494826][ T7678] bond10: entered allmulticast mode
[   91.625250][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xb
[   91.842628][ T7695] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   92.050784][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.539'.
[   92.058683][ T7706] bridge1: entered promiscuous mode
[   92.376749][    T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[   92.527121][    T9] usb 10-1: Using ep0 maxpacket: 32
[   92.528883][    T9] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   92.530162][    T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024
[   92.530184][    T9] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[   92.533331][    T9] usb 10-1: string descriptor 0 read error: -22
[   92.533518][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.538920][ T7710] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   92.542270][    T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[   92.542294][    T9] usb 10-1: MIDIStreaming interface descriptor not found
[   92.742898][ T5821] usb 10-1: USB disconnect, device number 8
[   92.916770][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   93.067670][    T9] usb 7-1: Using ep0 maxpacket: 32
[   93.069247][    T9] usb 7-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[   93.070213][    T9] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81
[   93.070237][    T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1007
[   93.070257][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[   93.072319][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.072340][    T9] usb 7-1: Product: syz
[   93.072353][    T9] usb 7-1: Manufacturer: syz
[   93.072365][    T9] usb 7-1: SerialNumber: syz
[   93.105565][ T7714] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   93.134740][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'.
[   93.134760][ T7720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.546'.
[   93.327566][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.331109][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.348082][    T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[   93.348124][    T9] usb 7-1: MIDIStreaming interface descriptor not found
[   93.393076][    T9] usb 7-1: USB disconnect, device number 7
[   93.420343][ T5738] udevd[5738]: setting owner of /dev/bus/usb/007/007 to uid=0, gid=0 failed: No such file or directory
[   93.435706][ T7173] udevd[7173]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   93.913510][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.913578][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.913634][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.913697][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.913770][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.913826][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.913882][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.913937][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914008][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914064][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914156][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914215][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914287][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914342][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914398][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914454][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914525][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914581][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914637][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914699][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914771][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914826][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.914882][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.915841][ T7744] binder_alloc: binder_alloc_mmap_handler: 7741 200000ffc000-200000fff000 already mapped failed -16
[   93.916077][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.916163][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.916222][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.916280][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.916337][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.916412][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.916470][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.916531][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.916590][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.916745][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.917008][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.917093][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.917101][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.917170][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.917178][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.917248][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.917255][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.917348][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.917355][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.917426][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.917432][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.917549][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.917556][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.917637][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.917645][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.917731][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.917739][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.917809][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.917817][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.917888][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.917895][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.917965][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.917973][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.918052][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.918060][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.918131][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.918139][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.918211][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.918218][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.918291][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.918298][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.918374][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.918381][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.918454][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.918462][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.918534][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.918541][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.918613][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.918620][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.918695][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.918703][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.918776][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.918784][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.918856][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.918863][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.918937][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.918972][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.919059][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.919066][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.919246][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.919254][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.919408][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.919418][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.919494][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.919501][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.919569][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.919577][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.919649][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.919656][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.919730][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.919737][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.919810][ T7745] binder: BINDER_SET_CONTEXT_MGR already set
[   93.919817][ T7745] binder: 7741:7745 ioctl 4018620d 200000004a80 returned -16
[   93.919936][ T7744] binder_alloc: binder_alloc_mmap_handler: 7741 200000ffc000-200000fff000 already mapped failed -16
[   93.920151][ T7744] binder_alloc: binder_alloc_mmap_handler: 7741 200000ffc000-200000fff000 already mapped failed -16
[   93.920292][ T7744] binder_alloc: binder_alloc_mmap_handler: 7741 200000ffc000-200000fff000 already mapped failed -16
[   93.920427][ T7744] binder_alloc: binder_alloc_mmap_handler: 7741 200000ffc000-200000fff000 already mapped failed -16
[   93.920571][ T7744] binder_alloc: binder_alloc_mmap_handler: 7741 200000ffc000-200000fff000 already mapped failed -16
[   93.920709][ T7744] binder_alloc: binder_alloc_mmap_handler: 7741 200000ffc000-200000fff000 already mapped failed -16
[   93.920844][ T7744] binder_alloc: binder_alloc_mmap_handler: 7741 200000ffc000-200000fff000 already mapped failed -16
[   93.920987][ T7744] binder_alloc: binder_alloc_mmap_handler: 7741 200000ffc000-200000fff000 already mapped failed -16
[   93.921131][ T7744] binder_alloc: binder_alloc_mmap_handler: 7741 200000ffc000-200000fff000 already mapped failed -16
[   93.924936][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.925155][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.925255][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.925340][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.925423][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.925510][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.925590][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.925668][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.925743][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.925822][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.925940][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.926019][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.926105][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.926212][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.926293][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.926371][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.926449][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.926546][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.927668][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.927737][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.927801][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.927893][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.927941][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.927984][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.928028][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.928088][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.928134][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.928178][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.928221][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.928275][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.928322][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.928366][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.928408][ T7742] binder: 7741:7742 ioctl c0306201 200000000080 returned -14
[   93.938700][ T5878] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[   93.970023][ T7747] ip_tables: iptables: counters copy to user failed while replacing table
[   94.097959][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.097989][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098009][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098029][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098049][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098068][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098088][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098108][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098127][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098147][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098166][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098186][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098208][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098228][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098249][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098269][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098288][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098310][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098330][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098350][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098369][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098389][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098409][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098428][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098448][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098468][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098488][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098508][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098528][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098547][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098567][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098587][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098607][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098626][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098646][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098665][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098685][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098711][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098731][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098751][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098771][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098790][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098838][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098860][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098880][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098900][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098920][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098939][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.098985][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099006][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099025][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099046][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099065][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099085][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099105][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099125][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099145][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099165][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099184][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099204][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099230][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099250][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099268][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099286][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.099304][ T7752] i2c i2c-0: delete_device: Can't parse I2C address
[   94.128658][ T5878] usb 8-1: Using ep0 maxpacket: 32
[   94.159045][ T5878] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   94.180784][ T5878] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024
[   94.180803][ T5878] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[   94.247351][ T5878] usb 8-1: string descriptor 0 read error: -22
[   94.247443][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.315116][ T7738] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   94.317254][ T5878] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[   94.317280][ T5878] usb 8-1: MIDIStreaming interface descriptor not found
[   94.341583][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.5.556'.
[   94.412390][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'.
[   94.412412][ T7765] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   94.412412][ T7765] Please contact the netfilter-devel mailing list or update your nftables rules.
[   94.428663][ T7765] kvm: user requested TSC rate below hardware speed
[   94.465727][ T7767] netlink: 84 bytes leftover after parsing attributes in process `syz.2.558'.
[   94.465746][ T7767] nbd: must specify at least one socket
[   94.529312][ T5878] usb 8-1: USB disconnect, device number 9
[   94.571412][ T7775] nbd: must specify at least one socket
[   94.631828][ T7776] binder: binder_mmap: 7774 200000000000-200000200000 bad vm_flags failed -1
[   94.701547][ T7782] bond3: entered allmulticast mode
[   94.805873][ T7793] kvm: user requested TSC rate below hardware speed
[   95.119491][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   95.143044][ T7805] FAULT_INJECTION: forcing a failure.
[   95.143044][ T7805] name failslab, interval 1, probability 0, space 0, times 0
[   95.143076][ T7805] CPU: 1 UID: 0 PID: 7805 Comm: syz.3.572 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   95.143102][ T7805] Tainted: [L]=SOFTLOCKUP
[   95.143108][ T7805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   95.143118][ T7805] Call Trace:
[   95.143125][ T7805]  <TASK>
[   95.143132][ T7805]  dump_stack_lvl+0x100/0x190
[   95.143175][ T7805]  should_fail_ex.cold+0x5/0xa
[   95.143201][ T7805]  should_failslab+0xc2/0x120
[   95.143231][ T7805]  kmem_cache_alloc_noprof+0x92/0x6a0
[   95.143252][ T7805]  ? kvm_vm_ioctl+0x405/0x42d0
[   95.143277][ T7805]  kvm_vm_ioctl+0x405/0x42d0
[   95.143307][ T7805]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[   95.143344][ T7805]  ? kasan_quarantine_put+0x104/0x240
[   95.143363][ T7805]  ? lockdep_hardirqs_on+0x7d/0x110
[   95.143396][ T7805]  ? find_held_lock+0x2b/0x80
[   95.143421][ T7805]  ? tomoyo_path_number_perm+0x28f/0x580
[   95.143440][ T7805]  ? tomoyo_path_number_perm+0x28f/0x580
[   95.143463][ T7805]  ? tomoyo_path_number_perm+0x188/0x580
[   95.143482][ T7805]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   95.143510][ T7805]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   95.143533][ T7805]  ? do_vfs_ioctl+0x226/0x13e0
[   95.143552][ T7805]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   95.143574][ T7805]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[   95.143598][ T7805]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   95.143622][ T7805]  ? __fget_files+0x34/0x3d0
[   95.143653][ T7805]  ? selinux_file_ioctl+0x13b/0x290
[   95.143671][ T7805]  ? selinux_file_ioctl+0xb6/0x290
[   95.143692][ T7805]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[   95.143712][ T7805]  __x64_sys_ioctl+0x18e/0x210
[   95.143733][ T7805]  do_syscall_64+0x123/0x790
[   95.143762][ T7805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.143781][ T7805] RIP: 0033:0x7f14c279e159
[   95.143797][ T7805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.143814][ T7805] RSP: 002b:00007f14c36f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   95.143833][ T7805] RAX: ffffffffffffffda RBX: 00007f14c2a25fa0 RCX: 00007f14c279e159
[   95.143844][ T7805] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[   95.143855][ T7805] RBP: 00007f14c36f9090 R08: 0000000000000000 R09: 0000000000000000
[   95.143866][ T7805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.143894][ T7805] R13: 00007f14c2a26038 R14: 00007f14c2a25fa0 R15: 00007ffd5485b4d8
[   95.143921][ T7805]  </TASK>
[   95.196579][ T7806] ALSA: seq fatal error: cannot create timer (-19)
[   95.198371][   T43] kauditd_printk_skb: 10 callbacks suppressed
[   95.198385][   T43] audit: type=1400 audit(1789749676.699:596): avc:  denied  { write } for  pid=7803 comm="syz.1.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   95.287103][    T9] usb 7-1: Using ep0 maxpacket: 8
[   95.291929][    T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   95.292939][    T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   95.292982][    T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   95.293002][    T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   95.293023][    T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   95.293044][    T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   95.293078][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.350247][ T7811] bond11: entered allmulticast mode
[   95.355451][ T7813] vlan3: entered allmulticast mode
[   95.355473][ T7813] bond0: entered allmulticast mode
[   95.355487][ T7813] bond_slave_0: entered allmulticast mode
[   95.355503][ T7813] bond_slave_1: entered allmulticast mode
[   95.434845][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.434865][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.511197][ T7797] jffs2: notice: (7797) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   95.523439][   T43] audit: type=1400 audit(1789749677.019:597): avc:  denied  { write } for  pid=7796 comm="syz.2.568" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   95.545900][    T9] usb 7-1: GET_CAPABILITIES returned 0
[   95.545924][    T9] usbtmc 7-1:16.0: can't read capabilities
[   95.611810][ T7832] kvm: user requested TSC rate below hardware speed
[   95.643366][ T7835] __nla_validate_parse: 5 callbacks suppressed
[   95.643380][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.580'.
[   95.749798][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   95.753049][ T5878] usb 7-1: USB disconnect, device number 8
[   95.824390][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'.
[   95.847520][ T7843] bond12: entered allmulticast mode
[   95.849472][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'.
[   95.853665][ T7846] xt_recent: Unsupported userspace flags (000000b2)
[   95.856109][ T7850] xt_recent: Unsupported userspace flags (000000b2)
[   95.909847][   T43] audit: type=1400 audit(1789749677.409:598): avc:  denied  { read } for  pid=7853 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   95.914020][ T7858] netlink: 'syz.3.588': attribute type 64 has an invalid length.
[   96.186832][ T5879] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[   96.346803][ T5879] usb 8-1: Using ep0 maxpacket: 32
[   96.350348][ T5879] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   96.351229][ T5879] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024
[   96.351245][ T5879] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[   96.354070][ T5879] usb 8-1: string descriptor 0 read error: -22
[   96.354137][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.368356][ T7860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   96.370180][ T5879] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[   96.370203][ T5879] usb 8-1: MIDIStreaming interface descriptor not found
[   96.497252][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.594'.
[   96.577118][ T5879] usb 8-1: USB disconnect, device number 10
[   96.738732][   T43] audit: type=1400 audit(1789749678.239:599): avc:  denied  { create } for  pid=7873 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   96.739299][   T43] audit: type=1400 audit(1789749678.239:600): avc:  denied  { setopt } for  pid=7873 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   96.742238][   T43] audit: type=1400 audit(1789749678.239:601): avc:  denied  { ioctl } for  pid=7873 comm="syz.2.595" path="socket:[19195]" dev="sockfs" ino=19195 ioctlcmd=0x583d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   96.807825][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'.
[   96.818494][ T7878] bond6: entered allmulticast mode
[   96.820610][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'.
[   96.844925][ T7885] netlink: 'syz.5.599': attribute type 4 has an invalid length.
[   96.850175][ T7884] netlink: 'syz.5.599': attribute type 4 has an invalid length.
[   96.852592][   T43] audit: type=1400 audit(1789749678.349:602): avc:  denied  { connect } for  pid=7886 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   96.868583][ T7883] syzkaller0: entered promiscuous mode
[   96.868598][ T7883] syzkaller0: entered allmulticast mode
[   97.329954][ T7898] kvm: user requested TSC rate below hardware speed
[   97.796895][ T5879] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   97.949017][ T5879] usb 6-1: unable to get BOS descriptor or descriptor too short
[   97.949061][ T5879] usb 6-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98
[   97.950041][ T5879] usb 6-1: config 4 has an invalid interface number: 13 but max is 0
[   97.950055][ T5879] usb 6-1: config 4 has no interface number 0
[   97.950075][ T5879] usb 6-1: config 4 interface 13 has no altsetting 0
[   97.951644][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.951658][ T5879] usb 6-1: Product: syz
[   97.951667][ T5879] usb 6-1: Manufacturer: syz
[   97.951675][ T5879] usb 6-1: SerialNumber: syz
[   98.172842][ T5879] ums-realtek 6-1:4.13: USB Mass Storage device detected
[   98.202795][ T7916] overlay: ./file1 is not a directory
[   98.234826][ T5879] usb 6-1: USB disconnect, device number 2
[   98.245094][ T7919] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[   98.302055][   T43] audit: type=1400 audit(1789749679.799:603): avc:  denied  { cmd } for  pid=7924 comm="syz.2.613" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[   98.302137][ T7925] tun0: tun_chr_ioctl cmd 1074025675
[   98.302150][ T7925] tun0: persist enabled
[   98.321144][ T7927] tun0: tun_chr_ioctl cmd 1074025675
[   98.321218][ T7927] tun0: persist enabled
[   98.322906][ T7925] tun0: tun_chr_ioctl cmd 1074025673
[   98.328393][ T7923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.382427][ T7936] syz_tun: entered allmulticast mode
[   98.383370][ T7935] syz_tun: left allmulticast mode
[   98.441798][ T7945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.619'.
[   98.504496][ T7951] kvm: user requested TSC rate below hardware speed
[   98.564123][   T43] audit: type=1400 audit(1789749680.059:604): avc:  denied  { ioctl } for  pid=7954 comm="syz.2.623" path="socket:[20035]" dev="sockfs" ino=20035 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   98.721569][ T7965] mmap: syz.1.629 (7965) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   98.724085][   T43] audit: type=1400 audit(1789749680.219:605): avc:  denied  { write } for  pid=7964 comm="syz.1.629" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   98.865773][ T7975] kvm: user requested TSC rate below hardware speed
[   98.887300][ T7977] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   98.887300][ T7977] The task syz.1.632 (7977) triggered the difference, watch for misbehavior.
[   99.106738][ T5821] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[   99.182047][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'.
[   99.286714][ T5821] usb 8-1: Using ep0 maxpacket: 32
[   99.290126][ T5821] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   99.291112][ T5821] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024
[   99.291127][ T5821] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[   99.293639][ T5821] usb 8-1: string descriptor 0 read error: -22
[   99.293695][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.298673][ T7976] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   99.300529][ T5821] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[   99.300553][ T5821] usb 8-1: MIDIStreaming interface descriptor not found
[   99.501857][ T5879] usb 8-1: USB disconnect, device number 11
[   99.816528][ T7999] netlink: 'syz.1.641': attribute type 2 has an invalid length.
[   99.820105][ T7999] netlink: 14 bytes leftover after parsing attributes in process `syz.1.641'.
[   99.868304][ T5879] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[   99.979338][ T8007] FAULT_INJECTION: forcing a failure.
[   99.979338][ T8007] name failslab, interval 1, probability 0, space 0, times 0
[   99.979374][ T8007] CPU: 2 UID: 0 PID: 8007 Comm: syz.2.644 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   99.979399][ T8007] Tainted: [L]=SOFTLOCKUP
[   99.979406][ T8007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   99.979419][ T8007] Call Trace:
[   99.979426][ T8007]  <TASK>
[   99.979435][ T8007]  dump_stack_lvl+0x100/0x190
[   99.979483][ T8007]  should_fail_ex.cold+0x5/0xa
[   99.979508][ T8007]  ? __pfx_switchdev_port_obj_del_deferred+0x10/0x10
[   99.979542][ T8007]  should_failslab+0xc2/0x120
[   99.979578][ T8007]  __kmalloc_noprof+0xfc/0x840
[   99.979599][ T8007]  ? mark_held_locks+0x40/0x70
[   99.979617][ T8007]  ? switchdev_deferred_enqueue+0x3e/0x2d0
[   99.979647][ T8007]  ? __pfx_switchdev_port_obj_del_deferred+0x10/0x10
[   99.979674][ T8007]  switchdev_deferred_enqueue+0x3e/0x2d0
[   99.979702][ T8007]  switchdev_port_obj_del+0xf3/0x150
[   99.979728][ T8007]  br_switchdev_host_mdb+0x203/0x3a0
[   99.979756][ T8007]  ? __pfx_br_switchdev_host_mdb+0x10/0x10
[   99.979783][ T8007]  ? lockdep_hardirqs_on+0x7d/0x110
[   99.979810][ T8007]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   99.979835][ T8007]  ? __wake_up+0x3f/0x60
[   99.979863][ T8007]  br_switchdev_mdb_notify+0x4b9/0x570
[   99.979886][ T8007]  ? __pfx_br_switchdev_mdb_notify+0x10/0x10
[   99.979911][ T8007]  ? __pfx_br_multicast_star_g_host_state+0x10/0x10
[   99.979937][ T8007]  ? nlmsg_notify+0xbf/0x290
[   99.979959][ T8007]  __br_mdb_notify+0x5c4/0x830
[   99.979981][ T8007]  br_multicast_host_leave+0x192/0x230
[   99.980008][ T8007]  br_mdb_del_bulk+0x7e8/0xad0
[   99.980032][ T8007]  ? __pfx_br_mdb_del_bulk+0x10/0x10
[   99.980060][ T8007]  ? __nla_parse+0x40/0x60
[   99.980085][ T8007]  ? __pfx_br_mdb_del_bulk+0x10/0x10
[   99.980104][ T8007]  rtnl_mdb_del+0x2f1/0x650
[   99.980128][ T8007]  ? __pfx_rtnl_mdb_del+0x10/0x10
[   99.980158][ T8007]  ? __pfx_rtnl_mdb_del+0x10/0x10
[   99.980182][ T8007]  rtnetlink_rcv_msg+0x3c9/0xe90
[   99.980207][ T8007]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   99.980236][ T8007]  ? __lock_acquire+0x5c0/0x1f40
[   99.980258][ T8007]  ? __netlink_lookup+0xa9/0x900
[   99.980281][ T8007]  netlink_rcv_skb+0x159/0x420
[   99.980302][ T8007]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   99.980326][ T8007]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   99.980357][ T8007]  ? netlink_deliver_tap+0x1ae/0xcc0
[   99.980382][ T8007]  netlink_unicast+0x585/0x850
[   99.980407][ T8007]  ? __pfx_netlink_unicast+0x10/0x10
[   99.980435][ T8007]  netlink_sendmsg+0x8b0/0xda0
[   99.980459][ T8007]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.980483][ T8007]  ? selinux_socket_sendmsg+0x198/0x2f0
[   99.980508][ T8007]  ____sys_sendmsg+0xa4d/0xbe0
[   99.980535][ T8007]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.980555][ T8007]  ? __pfx_____sys_sendmsg+0x10/0x10
[   99.980600][ T8007]  ___sys_sendmsg+0x190/0x1e0
[   99.980631][ T8007]  ? __pfx____sys_sendmsg+0x10/0x10
[   99.980660][ T8007]  ? futex_wait+0x11e/0x370
[   99.980691][ T8007]  ? find_held_lock+0x2b/0x80
[   99.980736][ T8007]  __sys_sendmsg+0x160/0x210
[   99.980759][ T8007]  ? __pfx___sys_sendmsg+0x10/0x10
[   99.980794][ T8007]  do_syscall_64+0x123/0x790
[   99.980824][ T8007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.980844][ T8007] RIP: 0033:0x7fdbd0b9e159
[   99.980862][ T8007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.980878][ T8007] RSP: 002b:00007fdbd1acf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.980898][ T8007] RAX: ffffffffffffffda RBX: 00007fdbd0e25fa0 RCX: 00007fdbd0b9e159
[   99.980913][ T8007] RDX: 0000000020000150 RSI: 0000200000000180 RDI: 0000000000000006
[   99.980927][ T8007] RBP: 00007fdbd0c3506b R08: 0000000000000000 R09: 0000000000000000
[   99.980940][ T8007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.980953][ T8007] R13: 00007fdbd0e26038 R14: 00007fdbd0e25fa0 R15: 00007ffc758732c8
[   99.980980][ T8007]  </TASK>
[  100.033124][ T8009] netlink: 80 bytes leftover after parsing attributes in process `syz.1.645'.
[  100.036756][ T5879] usb 8-1: Using ep0 maxpacket: 16
[  100.038274][ T5879] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  100.039504][ T5879] usb 8-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 511
[  100.039528][ T5879] usb 8-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 544
[  100.039547][ T5879] usb 8-1: config 1 interface 0 has no altsetting 0
[  100.041673][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.041692][ T5879] usb 8-1: Product: 㖘庆ꆇሿ岚뫅ᧁ㦛㵈ᔍ㇁ㅮፋ腘믖㟕੆琞廠㖛殾栱걩䆈뒺遱堤繄ﾇਯ썇刓헦빢䬶蠂콺㜿꘿ᷣ靨嗸⣡똓縌㚣秲조㰜挬鄟玹恑룿쓄哮鷵ᦩǦ꽮
[  100.041713][ T5879] usb 8-1: Manufacturer: ⎶෯蔖ǀ挈쀇턲ꄯ鳔𧻓ճ튐翳Ⱕ㒔啎㼋繝棸麟嚡㜝旵ﷳ쭗큻诵察찼皨㛓ᬗ裬珩陛眭㉬ꕰ劍ඌ퀡׌媄寶ȡ猘娖⇸唣歲饕믚巆㱊鈏샆ᜠ䞖⻗췓㏪켊硑砑鲊鵴脻㥷㚅气鱇㤳⾿淋拹⻊춬逻
[  100.041738][ T5879] usb 8-1: SerialNumber: ⠉
[  100.050098][ T7976] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  100.050230][ T7976] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  100.089774][ T8012] netlink: 'syz.1.645': attribute type 10 has an invalid length.
[  100.089959][ T8012] batadv0: entered promiscuous mode
[  100.089975][ T8012] batadv0: entered allmulticast mode
[  100.093482][ T8012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.094342][ T8012] bridge0: port 3(batadv0) entered blocking state
[  100.094466][ T8012] bridge0: port 3(batadv0) entered disabled state
[  100.277518][   T43] kauditd_printk_skb: 2 callbacks suppressed
[  100.277530][   T43] audit: type=1400 audit(1789749681.769:608): avc:  denied  { ioctl } for  pid=8021 comm="syz.1.649" path="socket:[19327]" dev="sockfs" ino=19327 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  100.281644][   T43] audit: type=1400 audit(1789749681.779:609): avc:  denied  { create } for  pid=8021 comm="syz.1.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  100.566782][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  100.566794][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  100.639594][   T43] audit: type=1400 audit(1789749682.139:610): avc:  denied  { setopt } for  pid=8049 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  100.668324][ T8052] __nla_validate_parse: 3 callbacks suppressed
[  100.668385][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'.
[  100.691138][   T43] audit: type=1400 audit(1789749682.189:611): avc:  denied  { nlmsg_read } for  pid=8056 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  100.765420][ T8062] jffs2: notice: (8062) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  100.772992][ T8062] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  100.789870][   T43] audit: type=1400 audit(1789749682.289:612): avc:  denied  { create } for  pid=8060 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  100.790007][   T43] audit: type=1400 audit(1789749682.289:613): avc:  denied  { getopt } for  pid=8060 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  100.792567][   T43] audit: type=1400 audit(1789749682.289:614): avc:  denied  { write } for  pid=8060 comm="syz.1.664" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  100.799814][   T43] audit: type=1400 audit(1789749682.299:615): avc:  denied  { write } for  pid=8060 comm="syz.1.664" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  100.800130][ T5879] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71
[  100.805105][ T5879] usb 8-1: USB disconnect, device number 12
[  100.936463][   T43] audit: type=1400 audit(1789749682.429:616): avc:  denied  { ioctl } for  pid=8074 comm="syz.1.669" path="socket:[21218]" dev="sockfs" ino=21218 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  100.942366][ T8075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.669'.
[  100.972763][ T8069] mmap: syz.2.667 (8069): VmData 37593088 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data.
[  101.013528][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'.
[  101.060038][   T43] audit: type=1400 audit(1789749682.559:617): avc:  denied  { bind } for  pid=8082 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  101.192147][ T8095] kvm: user requested TSC rate below hardware speed
[  101.275909][ T8102] (syz.3.680,8102,2):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  101.275930][ T8102] (syz.3.680,8102,2):ocfs2_fill_super:1177 ERROR: status = -22
[  101.375289][ T8110] gadgetfs: bound to dummy_udc driver
[  101.500894][ T8126] xt_CT: You must specify a L4 protocol and not use inversions on it
[  101.552838][ T8137] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  101.978626][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.5.698'.
[  102.082260][ T8182] kvm: user requested TSC rate below hardware speed
[  102.098268][ T8184] 
[  102.099098][ T8184] ======================================================
[  102.101927][ T8184] WARNING: possible circular locking dependency detected
[  102.104358][ T8184] syzkaller #0 Tainted: G             L     
[  102.106537][ T8184] ------------------------------------------------------
[  102.109440][ T8184] syz.3.700/8184 is trying to acquire lock:
[  102.111390][ T8184] ffffffff903fcae8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650
[  102.115883][ T8184] 
[  102.115883][ T8184] but task is already holding lock:
[  102.118460][ T8184] ffff8880399d6500 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}, at: configfs_symlink+0x452/0x1340
[  102.122136][ T8184] 
[  102.122136][ T8184] which lock already depends on the new lock.
[  102.122136][ T8184] 
[  102.125555][ T8184] 
[  102.125555][ T8184] the existing dependency chain (in reverse order) is:
[  102.129011][ T8184] 
[  102.129011][ T8184] -> #3 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}:
[  102.132053][ T8184]        lock_acquire+0x1d1/0x380
[  102.134278][ T8184]        down_write+0x8b/0x1f0
[  102.136405][ T8184]        configfs_depend_item_unlocked+0xf3/0x6a0
[  102.138423][ T8187] FAULT_INJECTION: forcing a failure.
[  102.138423][ T8187] name fail_futex, interval 1, probability 0, space 0, times 1
[  102.138421][ T8184]        usbg_make_tpg+0x251/0x610
[  102.138443][ T8187] CPU: 3 UID: 0 PID: 8187 Comm: syz.5.703 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  102.138458][ T8187] Tainted: [L]=SOFTLOCKUP
[  102.138462][ T8187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  102.138469][ T8187] Call Trace:
[  102.138472][ T8187]  <TASK>
[  102.138477][ T8187]  dump_stack_lvl+0x100/0x190
[  102.138495][ T8187]  should_fail_ex.cold+0x5/0xa
[  102.138508][ T8187]  ? rcu_is_watching+0x13/0xc0
[  102.138523][ T8187]  get_futex_key+0x1d0/0x14f0
[  102.138537][ T8187]  ? __pfx_get_futex_key+0x10/0x10
[  102.138551][ T8187]  ? __pfx_futex_hash+0x10/0x10
[  102.138563][ T8187]  ? get_pid_task+0xfc/0x250
[  102.138582][ T8187]  ? rcu_is_watching+0x13/0xc0
[  102.138596][ T8187]  ? get_pid_task+0xfc/0x250
[  102.138609][ T8187]  ? lock_release+0x24d/0x310
[  102.138621][ T8187]  futex_wake+0xf4/0x5e0
[  102.138637][ T8187]  ? futex_wait+0x11e/0x370
[  102.138647][ T8187]  ? __pfx_futex_wake+0x10/0x10
[  102.138664][ T8187]  ? __fget_files+0x215/0x3d0
[  102.138677][ T8187]  ? rcu_is_watching+0x13/0xc0
[  102.138691][ T8187]  ? __fget_files+0x215/0x3d0
[  102.138704][ T8187]  do_futex+0x2b2/0x440
[  102.138718][ T8187]  ? __pfx_do_futex+0x10/0x10
[  102.138733][ T8187]  ? fdget+0x18b/0x210
[  102.138746][ T8187]  __x64_sys_futex+0x34f/0x4d0
[  102.138761][ T8187]  ? __pfx___x64_sys_futex+0x10/0x10
[  102.138777][ T8187]  ? rcu_is_watching+0x13/0xc0
[  102.138791][ T8187]  do_syscall_64+0x123/0x790
[  102.138808][ T8187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.138839][ T8187] RIP: 0033:0x7f0c2a79e159
[  102.138847][ T8187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.138858][ T8187] RSP: 002b:00007f0c2b7320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  102.138869][ T8187] RAX: ffffffffffffffda RBX: 00007f0c2aa25fa8 RCX: 00007f0c2a79e159
[  102.138876][ T8187] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0c2aa25fac
[  102.138883][ T8187] RBP: 00007f0c2aa25fa0 R08: 0000000000000001 R09: 0000000000000000
[  102.138889][ T8187] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  102.138896][ T8187] R13: 00007f0c2aa26038 R14: 00007fff09359f10 R15: 00007fff09359ff8
[  102.138906][ T8187]  </TASK>
[  102.167435][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.706'.
[  102.176004][ T8192] bond4: entered allmulticast mode
[  102.236768][ T8184]        target_fabric_make_tpg+0xab/0x8c0
[  102.239127][ T8184]        configfs_mkdir+0x525/0xd40
[  102.241201][ T8184]        vfs_mkdir+0x364/0x850
[  102.243174][ T8184]        filename_mkdirat+0x48b/0x5e0
[  102.245332][ T8184]        __x64_sys_mkdir+0x6b/0x90
[  102.247417][ T8184]        do_syscall_64+0x123/0x790
[  102.249321][ T8184]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.251869][ T8184] 
[  102.251869][ T8184] -> #2 (tpg_instances_lock){+.+.}-{4:4}:
[  102.255302][ T8184]        lock_acquire+0x1d1/0x380
[  102.257368][ T8184]        __mutex_lock+0x1a4/0x1bd0
[  102.259317][ T8184]        tcm_alloc_inst+0x5f/0x1e0
[  102.260889][ T8184]        try_get_usb_function_instance+0x136/0x1f0
[  102.263545][ T8184]        usb_get_function_instance+0x16/0x70
[  102.266050][ T8184]        function_make+0x18c/0x3f0
[  102.268439][ T8184]        configfs_mkdir+0x525/0xd40
[  102.270818][ T8184]        vfs_mkdir+0x364/0x850
[  102.272848][ T8184]        filename_mkdirat+0x48b/0x5e0
[  102.275158][ T8184]        __x64_sys_mkdir+0x6b/0x90
[  102.277243][ T8184]        do_syscall_64+0x123/0x790
[  102.279309][ T8184]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.281831][ T8184] 
[  102.281831][ T8184] -> #1 (func_lock){+.+.}-{4:4}:
[  102.284694][ T8184]        lock_acquire+0x1d1/0x380
[  102.286271][ T8184]        __mutex_lock+0x1a4/0x1bd0
[  102.288137][ T8184]        try_get_usb_function_instance+0x26/0x1f0
[  102.290737][ T8184]        usb_get_function_instance+0x16/0x70
[  102.292829][ T8184]        function_make+0x18c/0x3f0
[  102.294650][ T8184]        configfs_mkdir+0x525/0xd40
[  102.296830][ T8184]        vfs_mkdir+0x364/0x850
[  102.298411][ T8184]        filename_mkdirat+0x48b/0x5e0
[  102.300296][ T8184]        __x64_sys_mkdirat+0x89/0xc0
[  102.302519][ T8184]        do_syscall_64+0x123/0x790
[  102.304147][ T8184]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.306301][ T8184] 
[  102.306301][ T8184] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[  102.309213][ T8184]        check_prev_add+0xeb/0xe60
[  102.310938][ T8184]        __lock_acquire+0x1528/0x1f40
[  102.313168][ T8184]        lock_acquire+0x1d1/0x380
[  102.315246][ T8184]        __mutex_lock+0x1a4/0x1bd0
[  102.317363][ T8184]        uvcg_streaming_header_allow_link+0x7c/0x650
[  102.320104][ T8184]        configfs_symlink+0x695/0x1340
[  102.322321][ T8184]        vfs_symlink+0x178/0x4d0
[  102.324377][ T8184]        filename_symlinkat+0x2a6/0x560
[  102.326433][ T8184]        __x64_sys_symlink+0x79/0xb0
[  102.328124][ T8184]        do_syscall_64+0x123/0x790
[  102.330178][ T8184]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.332810][ T8184] 
[  102.332810][ T8184] other info that might help us debug this:
[  102.332810][ T8184] 
[  102.336542][ T8184] Chain exists of:
[  102.336542][ T8184]   gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#25
[  102.336542][ T8184] 
[  102.341907][ T8184]  Possible unsafe locking scenario:
[  102.341907][ T8184] 
[  102.344455][ T8184]        CPU0                    CPU1
[  102.346625][ T8184]        ----                    ----
[  102.348373][ T8184]   lock(&sb->s_type->i_mutex_key#25);
[  102.350301][ T8184]                                lock(tpg_instances_lock);
[  102.353086][ T8184]                                lock(&sb->s_type->i_mutex_key#25);
[  102.355775][ T8184]   lock(gadget_subsys.su_mutex);
[  102.357834][ T8184] 
[  102.357834][ T8184]  *** DEADLOCK ***
[  102.357834][ T8184] 
[  102.360522][ T8184] locks held by syz.3.700/8184: 2, last CPU#1:
[  102.363072][ T8184]  #0: ffff88802399a460 (sb_writers#14){.+.+}-{0:0}, at: filename_create+0x10d/0x400
[  102.366172][ T8184]  #1: ffff8880399d6500 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}, at: configfs_symlink+0x452/0x1340
[  102.370052][ T8184] 
[  102.370052][ T8184] stack backtrace:
[  102.372195][ T8184] CPU: 1 UID: 0 PID: 8184 Comm: syz.3.700 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  102.375893][ T8184] Tainted: [L]=SOFTLOCKUP
[  102.377444][ T8184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  102.381142][ T8184] Call Trace:
[  102.382198][ T8184]  <TASK>
[  102.383455][ T8184]  dump_stack_lvl+0x100/0x190
[  102.385426][ T8184]  print_circular_bug.cold+0x178/0x1be
[  102.387224][ T8184]  check_noncircular+0x146/0x160
[  102.389069][ T8184]  check_prev_add+0xeb/0xe60
[  102.390967][ T8184]  __lock_acquire+0x1528/0x1f40
[  102.392707][ T8184]  lock_acquire+0x1d1/0x380
[  102.394149][ T8184]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[  102.396369][ T8184]  ? __pfx___might_resched+0x10/0x10
[  102.398042][ T8184]  __mutex_lock+0x1a4/0x1bd0
[  102.399639][ T8184]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[  102.402253][ T8184]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[  102.404333][ T8184]  ? __pfx___mutex_lock+0x10/0x10
[  102.406047][ T8184]  ? __pfx___might_resched+0x10/0x10
[  102.408259][ T8184]  ? make_vfsgid+0xf1/0x140
[  102.409824][ T8184]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[  102.411887][ T8184]  uvcg_streaming_header_allow_link+0x7c/0x650
[  102.414301][ T8184]  ? inode_permission+0x374/0x620
[  102.416190][ T8184]  ? mntput_no_expire+0xe7/0x220
[  102.417779][ T8184]  configfs_symlink+0x695/0x1340
[  102.419819][ T8184]  ? __pfx_configfs_symlink+0x10/0x10
[  102.421916][ T8184]  vfs_symlink+0x178/0x4d0
[  102.423366][ T8184]  filename_symlinkat+0x2a6/0x560
[  102.425309][ T8184]  ? __pfx_filename_symlinkat+0x10/0x10
[  102.427407][ T8184]  ? strncpy_from_user+0x19d/0x2d0
[  102.429060][ T8184]  ? do_getname+0x191/0x390
[  102.430868][ T8184]  __x64_sys_symlink+0x79/0xb0
[  102.432710][ T8184]  do_syscall_64+0x123/0x790
[  102.434194][ T8184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.436650][ T8184] RIP: 0033:0x7f14c279e159
[  102.438495][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.445750][ T8184] RSP: 002b:00007f14c36d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  102.449043][ T8184] RAX: ffffffffffffffda RBX: 00007f14c2a26090 RCX: 00007f14c279e159
[  102.451633][ T8184] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000200000001000
[  102.454813][ T8184] RBP: 00007f14c283506b R08: 0000000000000000 R09: 0000000000000000
[  102.457574][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.460798][ T8184] R13: 00007f14c2a26128 R14: 00007f14c2a26090 R15: 00007ffd5485b4d8
[  102.464106][ T8184]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  102.950343][   T13] bridge_slave_1: left allmulticast mode
[  102.950359][   T13] bridge_slave_1: left promiscuous mode
[  102.950452][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.951295][   T13] bridge_slave_0: left allmulticast mode
[  102.951306][   T13] bridge_slave_0: left promiscuous mode
[  102.951368][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.991346][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.992093][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.992541][   T13] bond0 (unregistering): Released all slaves
[  102.994074][   T13] bond1 (unregistering): Released all slaves
[  103.066311][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10
[  103.174486][   T13] hsr_slave_0: left promiscuous mode
[  103.174740][   T13] hsr_slave_1: left promiscuous mode
[  103.174989][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.175260][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.215357][   T13] team0 (unregistering): Port device team_slave_1 removed
[  103.220603][   T13] team0 (unregistering): Port device team_slave_0 removed
[  103.242724][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11
[  103.357629][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12
[  103.469159][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13
[  103.910139][ T5444] 8021q: adding VLAN 0 to HW filter on device eth14
[  104.039010][   T13] bridge_slave_1: left allmulticast mode
[  104.039070][   T13] bridge_slave_1: left promiscuous mode
[  104.039176][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.040136][   T13] bridge_slave_0: left allmulticast mode
[  104.040156][   T13] bridge_slave_0: left promiscuous mode
[  104.040262][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.054116][   T13] bridge_slave_1: left allmulticast mode
[  104.054139][   T13] bridge_slave_1: left promiscuous mode
[  104.054266][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.055486][   T13] bridge_slave_0: left allmulticast mode
[  104.055502][   T13] bridge_slave_0: left promiscuous mode
[  104.055609][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.130846][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.132027][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.133128][   T13] bond0 (unregistering): (slave macvlan1): Releasing backup interface
[  104.133727][   T13] bond0 (unregistering): Released all slaves
[  104.135659][   T13] bond1 (unregistering): Released all slaves
[  104.141741][   T13] bond2 (unregistering): Released all slaves
[  104.145361][   T13] bond3 (unregistering): Released all slaves
[  104.149282][   T13] bond4 (unregistering): Released all slaves
[  104.152903][   T13] bond5 (unregistering): Released all slaves
[  104.157591][   T13] bond6 (unregistering): Released all slaves
[  104.213549][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.214744][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.215365][   T13] bond0 (unregistering): Released all slaves
[  104.219130][   T13] bond1 (unregistering): Released all slaves
[  104.222390][   T13] bond2 (unregistering): Released all slaves
[  104.225641][   T13] bond3 (unregistering): Released all slaves
[  104.228992][   T13] bond4 (unregistering): Released all slaves
[  104.232208][   T13] bond5 (unregistering): Released all slaves
[  104.235463][   T13] bond6 (unregistering): Released all slaves
[  104.239608][   T13] bond7 (unregistering): Released all slaves
[  104.244002][   T13] bond8 (unregistering): Released all slaves
[  104.248397][   T13] bond9 (unregistering): Released all slaves
[  104.252896][   T13] bond10 (unregistering): Released all slaves
[  104.257556][   T13] bond11 (unregistering): Released all slaves
[  104.262306][   T13] bond12 (unregistering): Released all slaves
[  104.283885][ T5444] 8021q: adding VLAN 0 to HW filter on device eth15
[  104.424054][ T5444] 8021q: adding VLAN 0 to HW filter on device eth16
[  104.552005][ T5444] 8021q: adding VLAN 0 to HW filter on device eth17
[  104.657787][ T5444] 8021q: adding VLAN 0 to HW filter on device eth18
[  104.670136][   T13] hsr_slave_0: left promiscuous mode
[  104.672091][   T13] hsr_slave_1: left promiscuous mode
[  104.672423][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.672925][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.675562][   T13] hsr_slave_0: left promiscuous mode
[  104.675929][   T13] hsr_slave_1: left promiscuous mode
[  104.676241][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.676615][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.756921][   T13] team0 (unregistering): Port device team_slave_1 removed
[  104.759244][   T13] team0 (unregistering): Port device team_slave_0 removed
[  104.825801][   T13] team0 (unregistering): Port device team_slave_1 removed
[  104.980554][ T5444] 8021q: adding VLAN 0 to HW filter on device eth19
[  105.103923][ T5444] 8021q: adding VLAN 0 to HW filter on device eth20
[  105.210941][ T5444] 8021q: adding VLAN 0 to HW filter on device eth21