last executing test programs: 24m2.610193342s ago: executing program 32 (id=485): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9", 0x1d}], 0x1}}], 0x1, 0x20000044) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x1a6d, &(0x7f0000000000)={0x0, 0x8969, 0x80, 0xfffffffe, 0x1f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r11, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd04, 0x24dfdbff, {0x0, 0x0, 0x0, r13, {0x4, 0xa}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r17, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r18, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}}, 0x4044890) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x98, r16, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0xe]}, @NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 14m52.24157788s ago: executing program 3 (id=2662): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002800), 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x10, 0xfff3}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x40040) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 14m49.854654626s ago: executing program 3 (id=2667): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x223, 0x70bd27, 0x25dfdbfb, {0x3}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x880) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, 0x56, 0x101, 0x70bd2a, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xc0d1}, 0x40) socket$unix(0x1, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x26, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79"}}}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000480)=0xd293, 0x4) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010501030000000000000000030000070cae9eb10583fb746fae2a9d601601f61628f6b067f32885bf7a74b982d8950e5d4209280528b43192945e29ee384f9c7af465ad65fbc7ea157a8cfa842e7ba41bfbe8a53dcf1bd820bfe383183faac837952869adf7e5637aae156c67964bd79ed03e7890b4cd76b35c05f84f1f9409c2025ea17abf436f952691888d6295103647f744c031"], 0x14}, 0x1, 0x0, 0x0, 0x42}, 0x4000800) 14m48.316363515s ago: executing program 3 (id=2673): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000884) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x844) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x15, 0x1114c1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 14m48.121278046s ago: executing program 4 (id=2676): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, 0x0, 0x262840, 0x0) socket(0x27, 0x2, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc010) epoll_create1(0x80000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r4, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e0009002abd700000000000040000007fbbd1bfb39c77f6"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) getpriority(0x0, 0x0) r5 = syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESHEX], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m47.767428868s ago: executing program 2 (id=2677): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x20, 0x0, 0x11, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c, 0x0, 0x2}, 0x28) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xe1, &(0x7f0000000100)={0x20, 0x3, 0x14, 0x2}, 0x8, 0x1ff, 0xc, 0x0, 0x0, 0x8000000, 0x0}) 14m47.549817121s ago: executing program 2 (id=2679): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x40) socket$netlink(0x10, 0x3, 0x0) 14m46.344531456s ago: executing program 2 (id=2682): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0x88a}, 0x28) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r2, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x5, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}], "", ['\x00']}, 0x158) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r3 = msgget(0x2, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff038}, {0x6, 0x0, 0x0, 0x8}]}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xaec}, 0x1c) msgctl$IPC_RMID(r3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 14m46.051414773s ago: executing program 3 (id=2684): mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000000c0)}, {&(0x7f0000000580)="9d24f8d8adb195736eb34aa7694667d826fd8cf5001531fcbfc06366ace097382e2134bc00685ed13a4cf7d5621959a4ce779a343d8fefb11bae5950f16ae5df686d1a151cbdee610168656568f7ded4540453111f76b9f2874f20cced9fbcb4", 0x60}, {&(0x7f0000000600)="bcd07515e641837a83c259383dac45ee96589adf", 0x14}, {&(0x7f0000000700)="423e3755cba6202767aaa26dd73d0da91a9b26fb239bc96f215ab39b9525ce8ae7d6979e6720ec093da592353bd0bacd23fbcaa6c6ab4f1d23510cec1daaf64d94b2543b6d23cdec55cf7b3985aa470af3a07108323bb3e76a7d580147c5792d11562f1d7ab6f7972227115607db28", 0x6f}, {&(0x7f00000007c0)="8781e3e8e7b5f6c0a430fe7fc91e759a7f3837adc58dd2de8e9541fa6c6c9554891f9fd7c98c0471573b7eaaba8fca491d86891dea770578cf3a576c4d968f90e06b054168757e827368bd40cc92fb2a467561f6aea1d755d4e148b529443004ef865f6fd85b940d2f2359", 0x6b}, {&(0x7f0000000840)="0e184030c09de7bbf0665c615a85f18810ca3f27ce4d57680e9c2d92abeeaa247d52cc7bc836c0b64c16a24d50fb8c1562420d3e2f18f8f65c4d370942406ba071e2641ef9e8863223ff5af2cdd46dad1dd62e5053461433342c13bf8eae320b778e", 0x62}, {&(0x7f00000008c0)="bd80fdf8133601f168c88e3c1b371205e37c932784455b4bbe6e718e0e065494112a907d06113aadf1d1288ead1af167b5b7cb16fd1d8afcf2712b136357c29a8970cc86535638b846c794dc88dd038a907959973d7fc463fd3219b9a3ea2fbe494c96872e51358e766affd31d540976c26a98c2476e4438cbc373323c7a18812806ac587668e7d8abaa7fcbe2d37a782397394f3ec5af9dcad2cb71f2935de6fd93d03342bfc597c7cbf309785fa709e69b74b1f07b8d5d1a4654eebcaad760fd6f8c240e048c63e63ba2fae06c262096ad5beb89a691ff6caae66654adf31e9785130b790a256b", 0xe8}, {&(0x7f00000009c0)="05d9da42f24decda43437513e554248d790b75ea04623b29f005a229a6d031ac8f3ae8d8ac95036e9351ae160d1cd80acc737102b8250ae43ec9f11d985868890cb50929ef5e814bea31a2a75f7c7bb9fe254c811254bff570a833595bb6bf9527de0a1e6de9a7941d924073e2af935b4730c34b26587dce281276056eaa0825b92bab1d6b7230b613e03098fb07a47b55023bcfc06d598dc0d39d751f6001b4dfb9bd5d0168defc6dfca76667a2c91f194a1a0a273db16918ddd407a90936681ffa123234b08998418b7e3d6f5157963d", 0xd1}], 0x8, 0x0, 0x0, 0x20000085}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="4629b0dbeb55da0d62f6f21a203a9c643e14a5b7e9450a9ae0da08dc419fa4cf99d6dd3457b93344385cca49c61d974e1751f5afff5cb6b00e6d4b5084369fff119a323a4ddab2a01bb11c663176d3345e04f9d96b71d402117690a54b4524707bcd2a998f2c76a0c82787f3228468c1078dc23724c74df2dbeee7a0a7549432dbaa3dd0777e42c92ea3eba5526e6dc2c4dd1c9634c07f3f2f9502aebd251add8acd30322970f4a3847839708bdd5e9968918c1518377b57e771346550c3355fad2f36a5a7f74da59aa19748a698a23804db23f00d0a2ad17b804611c693c10cb3d9502ab4923174aa308c20e75ac4", 0xef}, {&(0x7f0000000cc0)="1fe2125fe7a9d91f75ca63767f506d76b04419a0bbcef1b30886c3766f09b919f521cd7eb2c10af5c7265de000332c0907af2f48ec13807c4eb9cdbd2d02eadf2bccf002909341a7e8ef58cbaafb3453f4ef8f6b82d646bcc837d92bc79e6bbb80998efacdd038a1c427df3c9c3e7706d5feb245b4c750fe50d4e8c05809c49f5aa4a505177a02045177f9c4ad0f92393952720c9ff988df5c7af1566aa24fb4b50943e981fbef39882a6e448b061b2c67284c3ee96f9db0e1ecdf5fcc", 0xbd}], 0x2, &(0x7f0000000e40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x80, 0x40891}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x1000016, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200020, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x1002001, 0xde60fe10fea4447b, 0x3ff, 0x7fff, 0x0, 0x40000006, 0x0, 0x0, 0x10, 0x2}}, 0x50) keyctl$get_security(0x11, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mount$nfs4(&(0x7f0000000340)='/dev/f\x02\x00e\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x800c05, &(0x7f0000000540)=ANY=[@ANYRES16=r5]) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a310000000005000100050005000a0000000c00030068"], 0x50}}, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000000180)=0xad) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c0000800000000800010074000000080000002c0005801400028008000200040000000800010001000000140002800800020010000000080001"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008c50) socket$kcm(0x10, 0x2, 0x0) 14m45.951930751s ago: executing program 2 (id=2685): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') readlinkat(r0, 0x0, &(0x7f0000000440)=""/163, 0xa3) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904", @ANYRESDEC=r0, @ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000145f405e04bd84b689010203010902240001000000000904ed0002ff5d0100090503030000000500"], 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x3ca6}, 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f00000000c0)=""/104, 0x12) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x1000000000000}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d80)=@broute={'broute\x00', 0x20, 0x1, 0x1a6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000b40], 0x0, &(0x7f0000000300), &(0x7f0000000b40)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x11, 0x20, 0x9, 'pim6reg1\x00', 'bond_slave_1\x00', 'veth1_macvtap\x00', 'bridge_slave_0\x00', @local, [0xff, 0x0, 0x7f, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0x116, [], [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2, 0xfff, 0x7ff, 0x1, 0x0, "8dc7136656073ab451420ab130a6a27a6202ec4c318763097c08eacd67ad2a0fc0beb9ca4d3547c2f88b0d617a07f1a8b84330bf7636f8a9b25f6217df01d751"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x21e) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000005c0)=ANY=[@ANYRES16=r3], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0}) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f0000000180)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)}, {&(0x7f0000000280)="29a4ab00b4a5c96637597ed73940b65183d075998bb09932352551e5610312cb826d94ee4fd8a54994af9bae8f5c39aea0d92bb2178fea0837", 0x39}], 0x2, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x548}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x68}}, {{&(0x7f0000000780)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000007c0)="1b6768d7764fd7a90a202239a08c1a084b3b2211a7f762718fcca64c07aeb6abcff3ff695d7ec4f602a8bda2479237df76f5c98c690214e5d06b7ef3d861b762c31abeaf6e70d4043acc1553ee3519712f5e6adb5c011bf05e3db3ba0f6d6206bd5bc961b60176a01d0890f1aca56b379bb732b43801c921a411e9bbaabc996bc06e45c5949994dd5e34ed79b1d15deccdd52b8a48e44fb6d051b081b36397f13da1a9379618d2950fb8972b48090a6f7c0d474f7c583070334463a1decd3aeac0efd46fb67fbc13", 0xc8}], 0x1, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x51c1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}], 0xa0}}, {{&(0x7f0000000bc0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000dc0)="3a902f573ce7198e4a78f487d558467a36fcdf08ebaa1d452c03591169e878931e94146bc2d9a522ccb3497efbea44521eda7d3ce7e2fa81a46668a703db837c3e645defb99e85fe99f4c71590ae4a840e4205f6cd64869adc8b6ad164baac7c657dc70d5b0d04a425ee3b", 0x6b}, {&(0x7f0000000e40)="860779535243f8fcef1046cb2a6718d45e4e6fd3c41c972ffa0d9d4f25591698cd8a4e4ab39713c9f9292562f0fa7efcd1f5be9437050d6a6394e641f7c099bea97da6ee28377f", 0x47}], 0x2, &(0x7f0000000fc0)}}], 0x4, 0x4000) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x4820, 0x4) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 14m45.847242178s ago: executing program 4 (id=2686): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d42ffffb800000000000000000000000000010ff0200000000000000000000000000018b"], 0x340a) sendfile(r2, r3, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x32440, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'dvmrp1\x00', 0x1001}) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000380)) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r6, 0x1, 0x8, 0x6, @remote}, 0x14) 14m45.273132621s ago: executing program 4 (id=2689): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x2240, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x200000000000008e, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14m44.749602865s ago: executing program 4 (id=2691): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) clock_adjtime(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x70000000, 0xfffffffffffffd93, 0x0, 0x0, 0x0, 0x65c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') preadv(r4, 0x0, 0x0, 0x4000, 0x400) read$FUSE(r4, &(0x7f0000001680)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x40010) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @none}, 0x8) syz_pidfd_open(r5, 0x0) 14m43.553317159s ago: executing program 4 (id=2692): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000008c0)={0x84, @remote, 0x4e24, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'wrr\x00', 0x9, 0x821}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60160000"], 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404040000000000000057c8"], 0xd) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000d0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, @ethernet={0x6, @multicast}, @ax25={0x3, @null, 0x2}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xfffb, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)='lo\x00', 0x83fc, 0x17, 0xc}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) landlock_restrict_self(r5, 0x9) syz_open_dev$media(&(0x7f0000000240), 0x100000000, 0x802) 14m43.483575s ago: executing program 4 (id=2694): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000884) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x844) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x15, 0x1114c1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 14m42.817042671s ago: executing program 2 (id=2696): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0x88a}, 0x28) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r2, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x5, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}], "", ['\x00']}, 0x158) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) msgget(0x2, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff038}, {0x6, 0x0, 0x0, 0x8}]}, 0x10) socket$inet6(0xa, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 14m42.672395615s ago: executing program 3 (id=2697): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0xb, 0x1}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 14m41.944453178s ago: executing program 2 (id=2701): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x4}, {0x0, 0xfd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x2}, {}, {0x20}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0xa}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000340)=0x200, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00), 0x4) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 14m41.697657528s ago: executing program 3 (id=2702): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffdd7) r1 = socket(0xa, 0x1, 0x0) getsockopt(r1, 0x0, 0xe, 0x0, &(0x7f0000000040)) socket$igmp6(0xa, 0x3, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x5, 0x100, 0x7f}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa3c0800454c001c006800004a029078ac1414377f000001117d9078ffffffffb67aac389e62db0963a388a57eb110bbaf4cf32680dc7edc2e1800c1cae03a96"], 0x0) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffff) getrandom(0x0, 0x0, 0xd86b31f1268e345c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) read$msr(r7, &(0x7f000001e580)=""/102385, 0xffffff90) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10002, 0x0) 14m8.637512532s ago: executing program 33 (id=2700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, 0x0, 0x80) syz_usb_control_io(r1, 0x0, 0x0) 14m8.527243158s ago: executing program 34 (id=2703): r0 = socket$igmp(0x2, 0x3, 0x2) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000005, 0x810, r0, 0xb4e02000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) fcntl$setlease(r5, 0x400, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x9) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r6) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000680), 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000011c0)={0x1, 0x1, 0x1, 0xffdff4ea, @vifc_lcl_addr=@multicast2, @multicast2}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000003c0)=0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) 14m8.056715032s ago: executing program 35 (id=2701): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x4}, {0x0, 0xfd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x2}, {}, {0x20}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0xa}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000340)=0x200, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00), 0x4) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 14m7.914885335s ago: executing program 36 (id=2702): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffdd7) r1 = socket(0xa, 0x1, 0x0) getsockopt(r1, 0x0, 0xe, 0x0, &(0x7f0000000040)) socket$igmp6(0xa, 0x3, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x5, 0x100, 0x7f}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa3c0800454c001c006800004a029078ac1414377f000001117d9078ffffffffb67aac389e62db0963a388a57eb110bbaf4cf32680dc7edc2e1800c1cae03a96"], 0x0) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffff) getrandom(0x0, 0x0, 0xd86b31f1268e345c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) read$msr(r7, &(0x7f000001e580)=""/102385, 0xffffff90) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10002, 0x0) 14m7.728433036s ago: executing program 37 (id=2694): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000884) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x844) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x15, 0x1114c1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 12m46.313702881s ago: executing program 7 (id=2920): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x200000000000008e, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m46.106422104s ago: executing program 7 (id=2921): socket$netlink(0x10, 0x3, 0x13) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000120008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x3}}, 0x18) splice(r4, 0x0, r3, 0x0, 0x18, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 12m44.793737577s ago: executing program 7 (id=2923): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x9, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000ac0)=0x14) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xa0006002}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e40)=ANY=[], 0x124}, 0x1, 0x0, 0x0, 0x20000011}, 0x4004001) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder1\x00', 0x802, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 12m39.11700199s ago: executing program 7 (id=2938): memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc044) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m36.893419351s ago: executing program 7 (id=2943): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3, 0xcccccccc}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x63e6}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r5, 0x8001}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 12m34.641328417s ago: executing program 7 (id=2952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x19}, {0xb, 0xb}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12m34.188157985s ago: executing program 38 (id=2952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x19}, {0xb, 0xb}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m24.700994709s ago: executing program 0 (id=5486): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r3, &(0x7f00000008c0)="bae2bf808214ff98d8d00b4e4aa5b63a86342a471feaedd023fe0d23081a02d33e4a469ab9d700b98dbc637a1ab17ee404dfa6c5d5a144ee", 0x38) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x4840, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000280)=r5) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000a4d000/0x1000)=nil, &(0x7f0000339000/0x1000)=nil, 0x1000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, 0x0, 0x0) 1m22.832649675s ago: executing program 0 (id=5490): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) r2 = socket(0x2c, 0x3, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) 1m20.577948353s ago: executing program 0 (id=5496): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x20, 0x6b, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 1m19.656037711s ago: executing program 0 (id=5497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @local, @val={@val={0x88a8, 0x0, 0x0, 0x6}, {0x8100, 0x5, 0x1, 0x3}}, {@llc={0x8864, {@llc={0xfe, 0x4, 'i'}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000ae000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) r2 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e21, 0x2080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000"], 0x18}, 0x440e0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0a80, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x975}) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x8, 0x2, 0x78516dbe334d8150, 0x0, @msi={0xfffffffb, 0x1dd, 0x101, 0x800}}]}) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001"], 0xfdef) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000240)=0x2) 1m18.056964132s ago: executing program 0 (id=5506): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}, @IFLA_BRPORT_PROXYARP={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000100)={0x10, 0xc, {0x54, 0x8000, 0x10, {0x1ff, 0x5}, {0x10, 0x3}, @cond=[{0x4, 0x0, 0xd5, 0x31, 0x9, 0xf001}, {0x90, 0x1, 0x8, 0x30f, 0x3, 0x2c05}]}, {0x53, 0x1, 0x0, {0x2, 0x400}, {0x8000, 0xfffe}, @const={0x5d1, {0x2, 0x4901, 0xa, 0x5e87}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000fa36022b46a80002c20d0000962b672d6e348b40f24d7f7b23c2a0da0300000100000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x1e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x2, 0x0, 0x2, 0x2, 0xfffe}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xa719}) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000400), 0x6, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000440)={0x2, 0x0, @pic={0x1, 0x2, 0x9, 0x4, 0x0, 0x5, 0x59, 0x1, 0x6, 0x7, 0xb, 0xc, 0xff, 0x4, 0x2, 0x50}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0xb8f7) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m17.61835999s ago: executing program 0 (id=5508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) r1 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="80000000", @ANYRES32=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES8=0x0, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x400c0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x900, 0x8001}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) pread64(r4, 0x0, 0x0, 0x7f9) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)={0x74, r7, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x18}, @NL80211_ATTR_FRAME={0x41, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3d01}, @device_a, @device_b, @from_mac=@device_b, {0xb, 0x16c}, @value=@ver_80211n={0x0, 0x290, 0x2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, @val, @void, @val={0x3, 0x1, 0xd}, @val={0x2d, 0x1a, {0xc, 0x2, 0x4, 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x5, 0x7}}, @void}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r9, 0x4b62, &(0x7f00000003c0)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_init() 1m1.423048494s ago: executing program 39 (id=5508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) r1 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="80000000", @ANYRES32=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES8=0x0, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x400c0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x900, 0x8001}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) pread64(r4, 0x0, 0x0, 0x7f9) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)={0x74, r7, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x18}, @NL80211_ATTR_FRAME={0x41, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3d01}, @device_a, @device_b, @from_mac=@device_b, {0xb, 0x16c}, @value=@ver_80211n={0x0, 0x290, 0x2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, @val, @void, @val={0x3, 0x1, 0xd}, @val={0x2d, 0x1a, {0xc, 0x2, 0x4, 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x5, 0x7}}, @void}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r9, 0x4b62, &(0x7f00000003c0)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_init() 27.844687963s ago: executing program 6 (id=5632): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$tcp_congestion(r0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000040)=0x80000001, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfff8}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xdad, 0x7d, 0x2, 0x10, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ad, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0x0, 0x7fff, 0xb, 0x6, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x7, 0x1, 0x20000004, 0x82, 0x0, 0x44a, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff7, 0x129432e6, 0xfffffffe, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x5, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0x7f, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x5, 0xfb, 0x5, 0x800, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20006, 0x4, 0x9, 0x8, 0xb, 0x6, 0x0, 0xa, 0x3, 0x9, 0x2009, 0x2, 0x7f, 0x9, 0x101, 0x3, 0x9, 0xffffffff, 0x17, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000000, 0x2, 0x7f, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xb4a, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x20003, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x9, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7ffb, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x4, 0x15c, 0x60a7, 0xfbd, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2a, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x1fc, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 26.084836466s ago: executing program 6 (id=5635): socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f929ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340076dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x78, 0xffffffffffffffda, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xe, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0xd9f, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 24.341657101s ago: executing program 6 (id=5642): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x50a7ec80adaf5235, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) userfaultfd(0x801) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) sendmsg$nl_generic(r6, 0x0, 0xc010) 19.916199042s ago: executing program 6 (id=5652): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002800), 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x10, 0xfff3}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x40040) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 17.884808019s ago: executing program 6 (id=5654): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000100)={0xed, 0xffff8004, 0x0, 'queue1\x00', 0xfffffffc}) 16.720806247s ago: executing program 6 (id=5657): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x67, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) execve(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x21, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f00000004c0)="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", 0x135, 0x2000c851, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) mmap(&(0x7f00001f9000/0x1000)=nil, 0x1000, 0x3000003, 0x4000010, r2, 0xec574000) listen(r1, 0x803) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/47) socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) 11.722012601s ago: executing program 8 (id=5666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefeda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000240)='Q', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c, &(0x7f0000000880)}}], 0x2, 0x4000844) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000003c0)={0x0, 0x1, 0x2}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x24044810}, 0x8880) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x5}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendfile(r6, r6, 0x0, 0x200000) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000980)={0x0, "85efe03e505755d8164287526699fa49"}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001980)={0x0, 0x4, {0x7fffffffffffffff, @struct={0x2, 0x9}, 0x0, 0x7fffffffffffffff, 0x7fff, 0x2, 0xbff, 0x7, 0x80, @usage=0x5, 0x3, 0x2, [0x2c1c, 0x100, 0x4000000000007d, 0x200, 0x1, 0x7fffffffffffffff]}, {0x480040000, @usage=0x2, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x3, 0x80000000, 0x88, @struct={0x200, 0x7f}, 0xe2, 0x2, [0x9, 0x0, 0x0, 0x800, 0x4, 0xb]}, {0xffffffffffffffff, @struct={0xc8, 0x1}, 0x0, 0x9fb5, 0x1, 0x7ef, 0xfffffffffffffffa, 0x7, 0xc9, @struct={0x1000, 0x8}, 0x4e3f, 0x81, [0xed69, 0x3, 0x0, 0x2, 0x7, 0x80000000]}, {0x5, 0xa084, 0x3}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000001d80)={0x0, 0x200, 0x6, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000002180)={0x12, 0x1, {0x2, @usage=0xffffffffffffff7f, r7, 0x9, 0x4, 0x401, 0x8, 0x5, 0x420, @struct={0x1, 0x3}, 0x7, 0x8000, [0x7, 0x2, 0xffffffffffffffc0, 0x9, 0x4, 0x7]}, {0x37b, @struct={0xffff, 0x9}, r8, 0x3, 0xa7, 0x6, 0xe3a, 0x8, 0x444, @struct={0x10, 0x7f}, 0x8, 0x0, [0x1, 0x401, 0x3, 0x8, 0x3ff, 0xd]}, {0x5000000000000, @usage=0x9, r9, 0x0, 0x7, 0x0, 0xfffffffffffffff9, 0x3, 0x430, @struct={0x80000000, 0x101}, 0x0, 0xfff, [0x8, 0x2, 0x8, 0x4, 0x3, 0x1]}, {0xb335, 0x3, 0xe}}) (async) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r10, &(0x7f00000000c0)=""/152, 0x98) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'gre0\x00'}) 11.517165071s ago: executing program 8 (id=5667): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88901) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00100029bd7000000000000a0000000000ff0000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="08001000040008"], 0x34}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9.639565823s ago: executing program 8 (id=5669): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, r1, 0x8f56d8f814367c85, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x24040012) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x800}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket(0x8, 0x2, 0x0) bind$packet(r5, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, 0xffffffffffffffff) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000001900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000880)={0x102c, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3a8, 0x11d, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x5, 0x18, 0x12, 0x1, 0x9, 0x1, 0xb, 0x48, 0x3, 0x9, 0x6, 0x48, 0x1b, 0x18, 0x1b, 0x78, 0x30, 0x6c, 0x48, 0x12, 0x9, 0x1, 0x5, 0xc, 0x30, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x7, 0xfe00, 0x2, 0x6, 0x0, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x657}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x300, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x545, 0x7ff, 0x3, 0x945d, 0x8, 0xe1d, 0x3e, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x1dc9, 0x8, 0x1, 0x7, 0x8, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x1000, 0x9, 0x200, 0x7, 0x1, 0x200, 0x4]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xef7, 0x6, 0x4, 0x8, 0x0, 0x40, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x8, 0x8, 0x681, 0xff, 0x7, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x2, 0x6, 0x0, 0xe67, 0xffff, 0x5c, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x3, 0xc, 0x36, 0x5, 0x4, 0x3, 0x4, 0x4, 0xc, 0x4, 0x1, 0x30, 0x48, 0x7e, 0x6c, 0x18, 0x5, 0x30, 0x24, 0xbd, 0x36, 0x9, 0x30, 0x18, 0x16, 0x1]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x60, 0x1b, 0x36, 0x5, 0x24, 0x16, 0xc, 0x5, 0xc, 0x30, 0x48, 0xb, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x3, 0x5, 0x6, 0xffff, 0x2, 0xd4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4002, 0x3, 0x8, 0x7ff, 0x0, 0xdd09, 0x9, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x2, 0x10, 0x9, 0x8, 0x74f, 0x9, 0x4]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x18, 0x24, 0x30, 0xc, 0x12, 0xb, 0x36, 0x9, 0x6d, 0x2, 0x24, 0x6, 0xaf267889c215ddd5, 0x2, 0x1b, 0x48, 0xc, 0x48, 0x65, 0x30, 0x3, 0xc, 0x2, 0x2, 0x24, 0x12, 0x6, 0x6, 0x60]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x1}, {0x4, 0x8}, {0x6}, {0x7, 0x3}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x1}, {0x7, 0x5}, {0x1, 0x4}, {0x6, 0x7}, {0x2, 0x6}, {0x4, 0x7}, {0x5, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x6}, {0x5, 0x3}, {0x1}, {0x0, 0x6}, {0x2, 0x8}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0xa}, {0x4, 0x3}, {0x6, 0x4}, {0x1, 0x6}, {0x4, 0x1}, {0x5, 0x7}, {0x1, 0x7}, {0x6}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x9}, {0x6, 0x5}, {0x7, 0x8}, {0x6, 0x2}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x5}, {0x4, 0x1}, {0x4, 0x3}, {0x0, 0x2}, {0x6, 0x7}, {0x2}, {0x3, 0x7}]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x30, 0xc, 0x18, 0x24, 0x9, 0x48, 0x4, 0x0, 0x2, 0xb, 0x6c, 0x403bbc73026590d9, 0x5, 0xc, 0x9, 0x59, 0x9, 0xc, 0xb, 0xc, 0x18, 0x16, 0x16, 0x16, 0xb9b52b1aafb28f12, 0x6, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff9, 0x9, 0x7, 0xffff, 0x39, 0x200, 0xfff8]}}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x100, 0x8, 0x7, 0x2, 0x6, 0xe20b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x71}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x30, 0xc, 0x0, 0x48, 0x18, 0x12, 0x2, 0x2, 0x16, 0x24, 0x1, 0x15, 0xb, 0x6c, 0x30, 0x36, 0x1b, 0x6c, 0x6, 0x48, 0xb, 0x9, 0x3, 0xc, 0x5, 0x18, 0xb, 0x60, 0x4, 0x16, 0xb]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x24, 0x3, 0x60, 0x30, 0x9, 0x6c, 0x48, 0x60, 0x6, 0x60, 0x48, 0x3, 0x4, 0x2, 0x18, 0x48, 0x18, 0xc, 0x6, 0x18, 0x36, 0x16, 0x30, 0x60, 0x6, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0xc, 0xc, 0x18, 0x12, 0x6, 0x78, 0x24, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x16, 0x1b, 0x30, 0x9, 0xb, 0x36, 0x18, 0x4, 0x48, 0x1b, 0x60, 0x36, 0x3, 0x2, 0x4, 0x18, 0x2, 0x48, 0x9, 0x24, 0x1, 0xb, 0xb, 0x1, 0x1, 0x24, 0x1, 0x6c, 0x36, 0x24]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x60, 0x24, 0x48, 0x2, 0x16, 0x18, 0x2, 0x0, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x7}, {0x2, 0xa}, {0x4, 0xa}, {}, {0x4, 0x2}, {0x4}, {}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x2}, {0x5, 0x7}, {0x7, 0x6}, {0x3, 0x9}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x2}, {0x4, 0x7}, {0x3, 0x9}, {0x0, 0x1}, {0x6, 0x5}, {0x7, 0x9}, {0x7, 0x6}, {0x7, 0x7}, {0x3}, {0x5, 0x1}, {0x2, 0x5}, {0x0, 0x4}, {0x1}, {0x5, 0x5}, {0x3, 0x7}, {0x6, 0x9}, {0x3, 0x1}, {0x0, 0x4}, {0x3, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0x6}, {0x3, 0x2}, {0x1, 0x7}, {0x3, 0x4}, {0x7, 0x3}, {0x6, 0x9}, {0x7, 0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x2, 0x1}, {0x5, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x2, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x1, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x3, 0x2}, {0x0, 0x5}, {0x5, 0x6}, {0x7, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8, 0x7, 0xc8, 0xe, 0x1402, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x438, 0x11d, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x5, 0x3, 0x0, 0x0, 0x3, 0xa, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x0, 0x2, 0x9, 0x4, 0xf000, 0x0, 0xd]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x9}, {0x7}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x5}, {0x6, 0x8}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x1}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x1}, {0x4, 0x5}, {0x5}, {0x2, 0x3}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x7}, {0x7, 0x6}, {0x3, 0x2}, {0x4, 0x4}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x4}, {}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x5}, {0x5, 0x2}, {0x2, 0x4}, {0x7, 0x2}, {0x1, 0x6}, {0x3, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd054, 0x4, 0x1c0, 0xfe56, 0x8, 0x6, 0x9, 0x6824]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x9, 0xc, 0x60, 0x16, 0x36, 0xb, 0x2, 0x48, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x8, 0x7, 0x3, 0xd1, 0x6, 0xb4]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc, 0xc, 0xfff8, 0x7a0, 0x5, 0x1, 0x6]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x8, 0x9, 0x7f, 0x4, 0x1, 0x2, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x4, 0x4, 0x8, 0x9, 0x80, 0x37]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0xfffe, 0x8, 0x462, 0xe80, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2dc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ac, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0x7, 0x8, 0x0, 0x5, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x918, 0x991, 0x2f, 0x9, 0x9c, 0xde, 0x6, 0x7]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x6}, {0x7, 0x6}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0xa}, {0x3, 0x4}, {0x7, 0x1}, {0x7, 0x7}, {0x2, 0x2}, {0x2, 0x2}, {0x5, 0x9}, {0x7, 0x2}, {0x4}, {0x1, 0x3}, {0x7, 0x1}, {0x1}, {0x3, 0x4}, {0x6, 0x4}, {0x3, 0x4}, {0x5}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x2}, {0x4}, {0x5, 0x2}, {0x3}, {0x0, 0xa}, {0x6, 0x8}, {0x3, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x3, 0xa}, {0x1, 0x5}, {0x3, 0x5}, {0x1, 0x7}, {0x7, 0x8}, {0x0, 0x7}, {0x2, 0x9}, {0x6, 0x5}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x2}, {0x7}, {0x6, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0xa}, {0x6, 0x7}, {0x6, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x6, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0xb, 0x3, 0x30, 0x6c, 0x1b, 0x60, 0x6, 0x48, 0x24, 0x5, 0x1b, 0x18, 0x18, 0x5, 0x48, 0x1, 0x48, 0xae66087fbb5921b9, 0x18, 0x1b, 0x6c, 0x48, 0x2, 0x2, 0x6, 0x18, 0x6, 0x16, 0x30, 0x9, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xbbe, 0x5, 0x1, 0x3, 0x7, 0x0, 0x805]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x9, 0x0, 0x24, 0x30, 0xd2daf4441bce31ab, 0x16, 0x60, 0x0, 0x36, 0x2da5249ecd62c332, 0x48, 0x30, 0x3, 0x30, 0x30, 0x18, 0x1b, 0x18, 0x1, 0x24, 0xc, 0x1b, 0x36, 0x5, 0x12, 0x24, 0x6c, 0x41bf49fabb7abda7, 0x3, 0xc, 0x41]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x1, 0xaa, 0x6, 0xb262, 0x1, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x16, 0x3, 0x60, 0x9, 0x6, 0x12, 0x30, 0x4, 0x9, 0x6, 0x2]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x6}, {0x4, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7}, {0x7, 0x7}, {0x5, 0x3}, {0x6, 0x9}, {0x1, 0x5}, {0x3, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x2, 0x3}, {0x2, 0xa}, {0x3, 0x1}, {0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0xa}, {0x1, 0x8}, {0x2, 0x9}, {0x7, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0x7}, {0x1, 0xa}, {0x1, 0x2}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x5}, {}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x7}, {0x7, 0x2}, {0x0, 0x9}, {0x6, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x5c, 0xd, 0x0, 0x1000, 0x2, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x8, 0x0, 0x2, 0x1, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x2}, {0x2}, {0x4, 0x2}, {0x6, 0xa}, {0x3, 0xa}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x6}, {0x4, 0x1}, {0x6, 0x2}, {0x7, 0xa}, {0x0, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x5, 0x4}, {0x4, 0x7}, {0x1}, {0x1}, {0x5, 0xa}, {0x2, 0x1}, {0x7, 0xa}, {0x3, 0x6}, {0x1, 0x7}, {0x6, 0x7}, {0x7, 0x5}, {0x0, 0x1}, {0x2, 0x2}, {0x1, 0x3}, {0x3}, {0x5}, {0x6, 0x9}, {0x7, 0x5}, {0x7, 0x3}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x1}, {0x3, 0x5}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x8}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x2}, {0x7, 0x9}, {0x3, 0x9}, {0x0, 0x9}, {0x3, 0x7}, {0x2, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x2, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x7}, {0x4, 0x2}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x6}, {0x0, 0x3}, {0x5, 0x7}, {0x6}, {0x7, 0x1}, {0x6, 0x6}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xfff, 0x5aac, 0x7071, 0xffff, 0x3, 0x8000, 0xe9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x91b, 0x40, 0x7, 0x0, 0x3, 0x3, 0x3, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x4, 0x0, 0x6, 0x1e21, 0x81, 0x1, 0x10]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7800, 0x2, 0xf1, 0x1, 0x4, 0x7, 0xd]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x33, 0x16, 0x16, 0x48, 0x9, 0x3, 0x12]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x24, 0x12, 0x5, 0x24, 0x60, 0xc, 0x6, 0x16, 0x60, 0xb, 0xb, 0x1, 0x5, 0x36, 0x16, 0x1, 0x48, 0x36, 0x6a, 0x6, 0x60, 0x9, 0x16, 0x12, 0x1b, 0x57]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x2}, {0x7, 0x6}, {0x3, 0x6}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x6}, {0x2, 0x9}, {0x7, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x61}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x7e4, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xec}]}, {0x2a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x4, 0x30, 0x12, 0x30, 0x36, 0x1, 0x9, 0x48, 0xb, 0x3, 0x2, 0x1, 0x48, 0x24, 0x2, 0x4, 0x1b, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x7}, {0x5, 0x2}, {0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0xa}, {0x2, 0x2}, {0x1}, {0x4, 0x8}, {0x5, 0x2}, {0x3}, {0x1, 0x4}, {0x7, 0xa}, {0x7, 0x5}, {0x5, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x6}, {0x0, 0x5}, {0x6, 0x6}, {0x6, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x18, 0x48, 0x24, 0x2, 0x16, 0x48, 0x3, 0xc, 0x36, 0x30, 0xb, 0x24, 0x16, 0x3, 0x30, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x35, 0xffff, 0xffff, 0x10, 0x6b, 0x400, 0xf2b, 0xc]}}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x4}, {0x2, 0x9}, {0x5, 0x1}, {0x1, 0xa}, {0x5, 0x5}, {0x3}, {0x6, 0xa}, {0x4, 0x9}, {0x7, 0x8}, {0x0, 0x3}, {0x2, 0x3}, {0x7, 0x6}, {0x2, 0x3}, {0x5, 0x7}, {0x2}, {0x0, 0x9}, {0x4, 0x5}, {0x5, 0x7}, {0x3, 0x1}, {0x3, 0x8}, {0x0, 0x6}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x4}, {0x4, 0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x4, 0x1}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0x3}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x5}, {0x1, 0x8}, {0x1, 0x8}, {0x2}, {0x5, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x0, 0x4}, {0x2, 0x5}, {0x7}, {0x0, 0xa}, {0x7}, {0x6, 0x1}, {0x7, 0x5}, {0x5, 0x5}, {0x6, 0x4}, {0x7, 0x4}, {0x0, 0x8}, {}, {0x0, 0x3}, {0x7, 0x9}, {0x7, 0x5}, {0x2, 0x5}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x0, 0x4, 0x318a, 0xee11, 0xfff, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x16, 0x4, 0xb, 0x30, 0x19, 0x1f, 0x2f, 0x9, 0x24, 0x0, 0x16, 0x30, 0x3, 0x5a, 0x3, 0x1, 0xb, 0x60, 0x3, 0x48, 0x6, 0x12, 0x12, 0x1, 0x60, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x4, 0x6a3c, 0x4, 0xffff, 0x1, 0xaaf7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffff2a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x1, 0x7, 0xc, 0x7f, 0x1, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x5, 0x5, 0xc, 0x1, 0x9, 0x1, 0x48, 0x1, 0x60, 0x6, 0x60, 0x60, 0xb, 0x18, 0x1, 0x2, 0x5, 0x12, 0x12, 0x48, 0x48, 0x3, 0x3, 0x36, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x1b, 0x24, 0xb, 0x37, 0x12, 0x3, 0x18, 0xc, 0x1b, 0xb, 0x1b, 0x30, 0x6, 0x6, 0x6, 0x24, 0x30, 0x1b, 0x1, 0x3, 0x16]}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0x7}, {0x5}, {0x6, 0x2}, {0x1}, {0x4, 0x8}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x80, 0x5, 0x101, 0x7, 0x3ff, 0xb9d]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x12, 0x1b, 0x12, 0x23, 0x12, 0x6, 0x2, 0x4, 0xb, 0x12, 0x1b, 0x6c, 0x18, 0x2, 0x1b, 0x3, 0x3, 0x16, 0x0, 0x60, 0x3, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0x5, 0x18, 0xc, 0x24, 0x48, 0xc, 0xa85e7a4ca815f8b4, 0x6c, 0x1b, 0x6c, 0x48, 0x3]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x4, 0x5, 0x6, 0x4, 0x3, 0x5, 0x18, 0x5, 0x30, 0x6c]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x5, 0xa}, {0x4, 0x3}, {0x6, 0x3}, {0x0, 0x3}, {0x3}, {0x7, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x8}, {0x4, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x2, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x7}, {0x2, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x2, 0x2}, {0x2, 0x4}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x6}, {0x1, 0x8}, {0x2, 0x9}, {0x5, 0x2}, {0x0, 0xa}, {0x6}, {0x0, 0x4}, {0x4, 0x7}, {0x4, 0x4}, {0x6}, {0x0, 0x2}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0xa}, {0x3, 0x7}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xdb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x4}, {0x2, 0x3}, {0x1, 0x1}, {0x3, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x6, 0x7}, {0x0, 0x2}, {0x4, 0x6}, {0x2, 0xa}, {0x5}, {0x0, 0x1}, {0x6, 0x4}, {0x2, 0x3}, {0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x7}, {0x0, 0x8}, {0x4, 0x5}, {0x7}, {0x7, 0x8}, {0x5, 0x4}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x5}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x5}, {0x1, 0x1}, {0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x5, 0x3}, {0x7, 0x7}, {0x7, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x4, 0x5}, {0x2}, {0x4, 0x7}, {0x0, 0x7}]}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x78}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x56}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x150, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xbc2, 0x7ff, 0x4, 0x2, 0x0, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7c, 0x8000, 0x8, 0x8, 0x0, 0x8b, 0x0, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x166b, 0x6, 0x9, 0x5, 0x2, 0x8, 0x400, 0x8]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x22, 0xc, 0x6b, 0x30, 0x1b, 0x6c, 0x2, 0x19, 0x4, 0x1b, 0x1, 0x6, 0x1b, 0x1, 0x1, 0x2]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x38, 0x9, 0x6, 0x5, 0x738b, 0x800, 0xe, 0x4bd]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0xc73e35485b6ee2e, 0x1b, 0x5, 0x9, 0x3, 0x1, 0x5, 0x6c, 0x5, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x2, 0x8000, 0x7, 0x2, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6717, 0x9ad, 0xfff, 0x1, 0x1, 0xed07, 0x9]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x8}, {}, {0x0, 0x3}, {}, {0x3, 0x9}, {0x2, 0x2}, {0x4, 0x4}, {0x5, 0x3}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x6}, {0x7, 0x6}, {0x2, 0xa}, {0x0, 0x9}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x1}, {0x6, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0x7}, {0x1}, {0x4, 0x8}, {0x6, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x2}, {0x3}, {0x4}, {0x6}, {0x7, 0x1}, {0x3, 0x5}, {}, {0x7}, {0x2, 0x7}, {0x3, 0x4}]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x8}, {0x4, 0x4}, {0x7, 0xa}, {0x6, 0x1}, {0x3}, {0x1}, {0x3, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x4, 0x4, 0x9, 0x16, 0x1, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x23d5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x2cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf001, 0x2, 0x1, 0x101, 0x2, 0x3, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x2}, {0x0, 0x9}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x4}, {0x4, 0xa}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0x3}, {0x7, 0x3}, {0x4}, {0x4, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x3}, {0x5, 0x3}, {0x5, 0x9}, {0x7, 0x3}, {0x5, 0x8}, {0x3, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0x7}, {0x2, 0xa}, {0x0, 0x5}, {}, {0x5, 0x9}, {0x2, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0x7}, {0x2, 0x9}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0x5}, {0x1}, {0x0, 0x5}, {0x4, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x7}, {0x6}, {0x0, 0x5}, {0x7, 0x4}, {0x7, 0x6}, {0x1, 0x2}, {0x6, 0x6}, {0x6, 0x3}, {0x1, 0x3}, {0x6, 0xa}, {0x6, 0x9}, {0x5, 0x1}, {0x3, 0x8}, {0x3, 0x5}, {0x3, 0x8}, {0x5, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x1, 0x1}, {0x6}, {0x1}, {0x4, 0x6}, {0x3, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0x3}, {0x3, 0x8}, {0x6, 0x6}, {0x5}, {0x2, 0x8}, {0x7, 0x7}, {0x6, 0x9}, {0x7, 0x6}, {0x3, 0x7}, {0x5, 0x2}, {0x5}, {0x6, 0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x6}, {0x3, 0x4}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x2}, {0x0, 0x8}, {0x3, 0x1}, {0x3, 0x6}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x2, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x1ff, 0x62e, 0x815, 0x3, 0xfffc, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x401, 0x40, 0x10, 0x9, 0x9, 0x7000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0x1b, 0x4, 0x30, 0x24, 0x1a, 0x5, 0x5, 0xb0edbfe751a74fd7, 0x6c, 0x4, 0x16, 0x6c, 0x6c, 0x5, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xb9d, 0xe, 0x8, 0x9, 0xfff8, 0xb, 0x1]}}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x7}, {0x4, 0x3}, {0x0, 0x8}, {0x6, 0x8}, {0x7, 0x3}, {0x7, 0x7}, {0x5, 0x6}, {0x2, 0x5}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x7, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x2}, {0x7, 0x3}, {0x2, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0xa}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x6}, {0x4, 0x6}, {0x7, 0x7}, {0x1, 0x8}, {0x1, 0x1}, {0x3, 0x6}, {0x7, 0xa}, {0x7, 0x6}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x6}, {0x6, 0x9}, {0x0, 0x6}, {0x1, 0x9}, {0x3, 0x1}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x200, 0xfffb, 0x9, 0x7ce, 0xfa, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x3}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0x4}, {0x7}, {0x6, 0x7}, {0x5, 0x2}, {0x7, 0x5}, {0x7, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x5}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x9}, {0x7, 0x3}, {0x7, 0x9}, {0x5, 0x2}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x4}, {0x3, 0x6}, {0x4, 0xa}, {0x0, 0xa}, {0x2, 0x3}, {0x7, 0x4}, {0x7, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0x9}, {0x2}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0x8}, {0x4, 0x5}, {0x1, 0x2}, {0x4, 0x7}, {0x4, 0x2}, {0x2, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x6c, 0x6c, 0x48, 0x1, 0xc, 0x4, 0x48, 0x0, 0x16, 0x4, 0x1b, 0x30, 0x1, 0x24, 0x6, 0x3, 0x1b, 0x9, 0x6c, 0x60, 0x36, 0x16, 0x9, 0x5, 0x72, 0xb, 0x5, 0x1b, 0x9, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7fff, 0xdb0f, 0x0, 0xd, 0x7, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9f, 0x80, 0x2, 0x2, 0xd, 0x1, 0x7, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x7, 0x68, 0x4, 0x401, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x5}, {0x6, 0x6}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x1}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x7}, {0x5}, {0x5, 0x7}, {0x5, 0x9}, {0x4, 0x8}, {0x7, 0x6}, {0x6, 0x7}, {0x0, 0x8}, {0x1, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x4, 0x2}, {0x5, 0xa}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x3}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x2}, {0x2, 0x6}, {0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0xa}, {0x4, 0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x2, 0x7}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x0, 0x9, 0x8000, 0x0, 0x0, 0x3]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9b94}]}]}]}, 0x102c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x11000) 9.525216234s ago: executing program 9 (id=5670): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x40000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00000002060108000000000000000000000000050005000a0000000500010007000000050004000000000046830ec5192ae7d815aa201b714f1763bc249f5df1e44a75eda50f3bcb3ce47772ba16dfd25d974317a7894a658837c52f78523744a0795d715506cd3c099ca75b02c6f4f284364495530bf684eb43b497265af21252e99334838401f8f972ac967bd92b03255a8ceb1c8c5f8ef720f8765113ba5b0906be54e2d8e3139ae34eb95355a4d148d01e99fbfd7861106d04aef64a9bf89fd27d330fd2d921a5ec44e5cd3cff045daabb9d1c66500d300fdddbb3cdb8505efa6b843ae6250b"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10040003}, 0x4008850) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="b0dcd010076a689f487da4286ded6eae3640c3fef3c563856cc0f4a594d6bb3796e53660d34170ad1cdba95258f74387ac8ffcc6764cded21ce1232c44115fc3845a119e68", 0x45) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a7", 0x9) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 9.38290937s ago: executing program 5 (id=5671): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0x32bdd75a, 0x5, 0x1, 0xb13a5440, [0xffffffff, 0x2], [0x1000, 0x5], 0x108}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000002c0)={0x2, 0x1, 0x3, 0x0, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) write$FUSE_INIT(r0, &(0x7f0000000600)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x40000005, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0xb, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xff) r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0xdde2017e1a7a890a, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r7, 0x0}]) mq_timedsend(r7, 0x0, 0x0, 0x5, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, {{0xa, 0x2, 0x3fe, @local, 0x1fc}}}, 0x108) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x78, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20000010) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) 8.168266105s ago: executing program 8 (id=5673): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) close(0xffffffffffffffff) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000300)={&(0x7f0000000240)=""/134, 0x86}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x93ba7545fc34d6eb) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = syz_open_dev$I2C(&(0x7f0000000440), 0x35, 0x101400) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000004c0)={0x1, 0x8, 0x7, &(0x7f0000000480)={0x3, "768f6d469b24f4f40873709e81e673b8d9bc9c20cfda470f0f9bc1d7f89c26de8c"}}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000009, 0x40010, r0, 0xdd706000) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='htcp', 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'macvtap0\x00'}) 8.089976312s ago: executing program 5 (id=5674): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe4a, &(0x7f0000000280)=0xca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8014) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b2c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f4070009110000000000fe03000100000000", 0x1c) getsockopt(r5, 0x10117, 0x1002, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 6.249133531s ago: executing program 1 (id=5675): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x200000d0) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.163796463s ago: executing program 8 (id=5676): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20000000) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x64800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="660a0000000000016111760000000000850000001a00000095000000000000005ec67477c8e69ecda9ed5484963fea0e834e96491f5e615dfe5461fe68b53f81eaa7be3aaa0c5d45c0f86c636ddaf599d470c164586a1d33dc4153446500ae7f87fe398bba2aaa7d19e2d0718e3fe90b4b19ad5d8b161ce7903a16acb07c8c5bd363b79151ddffcf9a3f7859b3c2caff1f975d2c21c4c1cca55875d8b7c00e6b94100d77cfd7046552a721763875c9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x40000000, 0x41000000}], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000004180)=ANY=[@ANYRESHEX=r5, @ANYBLOB]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) 6.073466433s ago: executing program 5 (id=5677): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000001e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e00)={&(0x7f0000000cc0)=ANY=[], 0x1120}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000010029bd7100ffdadf2500000000", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e0000140003007465616d3000000000000000000000000a0001000180c200000e0000"], 0x40}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000100001042cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5801050000f300001400350073797a5f74756e000000000000000000050021000500000014001680100001800c0009000000008000000080"], 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x40080) 5.629647626s ago: executing program 9 (id=5678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240000d0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x407, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800014000000002080002400000040008000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000acae1193fc6841467c365af131863765d74f2427a239203c0ded6d79f8aa1308e9370f25962b1226c1ffa648728e0591158a99517b66ee1af12aeba86686e9987f06751f79970c2bee6f2f808e5c28310f096b7cd6f51a904b7637798b1ccef2da31593f72f7b7db05e6158274ddc0fbad984f1530928ebe6bd52836e692782161afb902bee8a0a5ae2ae3038e7b1ccd48c1a230d2d931f271d24eb14bdf52419f8d8259fece337781f94286437752e2e4041e6519840df676fd18ccc9d497f1d7da4c25203e1739b614f63f39723e28d5cc030a530ff179b6b376e8e4c3eaebb875305420847903815cd7c8fdf"], 0x84}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 4.504518242s ago: executing program 9 (id=5679): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 4.414393761s ago: executing program 1 (id=5680): openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, &(0x7f0000000080)={0x1, 0x100000000, 0xa, 0xbede, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c", 0x7f) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.226982629s ago: executing program 1 (id=5681): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88901) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00100029bd7000000000000a0000000000ff0000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="08001000040008"], 0x34}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.033905426s ago: executing program 9 (id=5682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240000d0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x407, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 2.196753624s ago: executing program 5 (id=5683): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00000000120000022abd7000fddbdf2507000000", @ANYRES32=0x0, @ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008805) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r3 = socket(0x1, 0x80003, 0xa0d0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000340)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000cc2b783df200100000c00000002000000000000000000000dffff0f000000e80a3e4efcc80590b18da2efa53f2199386704f653658322570b177d14298f016e8e3e523520023727c5d40c507491ce5b44f9f244d6a68a0ad85db1ca8c960c8d26cbc9d08ceaed"], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ftruncate(0xffffffffffffffff, 0x2007ffb) close(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xffff, 0x3, &(0x7f0000000240)=""/98, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1efbf}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7) 2.045933366s ago: executing program 1 (id=5684): modify_ldt$write(0x1, &(0x7f0000000a40)={0x8, 0x1000, 0x1000, 0x0, 0x1, 0x0, 0x1}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000440)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x80090}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8000, 0x7, 0xffffff81, 0x2, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0xe, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) getresuid(&(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000300)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0xb, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x0, r2, r3}, {0xd69, 0x7, 0x8, 0x6, 0x3ff, 0x8d, 0x6, 0x2a}, {0x81, 0x4, 0xca, 0x3}, 0x6, 0x6e6bb3, 0x0, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, 0x4d5, 0x33}, 0x2, @in=@local, 0x3501, 0x0, 0x2, 0x5, 0x200, 0x6, 0x4}}, 0xe8) ptrace(0x10, r1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x3}]}, 0x10) io_submit(r5, 0x1, &(0x7f0000000340)=[0x0]) ptrace$setregset(0x4205, r1, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aed74c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dec8438c571a70e7ca7b0451a6cc55c", 0x88}) socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r8, 0x400455c8, 0x9) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x6) 1.821339444s ago: executing program 9 (id=5685): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140e, 0x529, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000850}, 0xf000000) 1.533459853s ago: executing program 8 (id=5686): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x202) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x119902) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000001000)=""/91) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/tcp\x00') r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r4, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40010) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc18, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create1(0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000380)={{0x6, 0x3, 0x100, 0xf, 'syz1\x00'}, 0x1, [0x9, 0x7, 0x4ba5, 0x351c, 0x6, 0xfffffffffffffffb, 0x7fffffffffffffff, 0xff, 0x8, 0xde, 0xb, 0x4, 0x3ff, 0x9, 0xe, 0xd, 0xfffffffffffffffa, 0xbec, 0x6, 0x46, 0x6, 0x4, 0x4, 0x9, 0x200, 0xcd5, 0xffffffffffffffff, 0x22, 0x7, 0xfffffffffffffff9, 0x78, 0x7, 0x1, 0xd, 0x7, 0x9, 0xd, 0x6, 0x5, 0x5f1, 0x4ad78327, 0xc, 0x2, 0x9, 0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x1, 0x5, 0x8000, 0xe807, 0x0, 0xd59f, 0x1, 0x6, 0x8, 0x1, 0x8000, 0x4, 0x5, 0xb4, 0x7, 0x2, 0xb3780000, 0xa2cf, 0x4, 0x6e1b, 0x3, 0x8, 0x5, 0x8000, 0x1000, 0x2, 0xec, 0x7c88, 0x0, 0x5, 0x101, 0x7ff, 0x81, 0x9, 0xfffffffffffffffa, 0x5, 0x7fffffff, 0x3, 0x8, 0x6000, 0x2, 0x3f, 0x4, 0xafc, 0xf8f, 0x100, 0xbf7, 0x6, 0x1, 0x7, 0x0, 0x100, 0x7, 0x6, 0x54, 0x100000000, 0x3, 0x7, 0x8000, 0xe863, 0x8, 0x25e, 0xffff, 0x66, 0xa, 0x81, 0x7, 0x7, 0x6, 0x43, 0x1fffe0000000, 0x1, 0x1, 0x5bc, 0x8, 0x8, 0x1, 0x7fffffffffffffff, 0x529a, 0x8]}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x70bd2a, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x2, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x4, 0xa9, @random}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000340)={0x30a32c3, 0x1, @qam={0x2, 0x0, 0xc}}) ioctl$FE_DISEQC_SEND_BURST(r0, 0x6f41, &(0x7f0000000000)) 874.67332ms ago: executing program 5 (id=5687): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2}, 0xc) 805.528094ms ago: executing program 1 (id=5688): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6) syz_ublk_setup_io_uring(0x691b, &(0x7f00000000c0)={0x0, 0x5228, 0x10000, 0x80000001, 0x1c1}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 698.057874ms ago: executing program 5 (id=5689): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) r4 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 595.419342ms ago: executing program 1 (id=5690): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r1 = semget(0x3, 0x0, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x8000000, 0x4, 0x378, 0xffffffff, 0x100, 0x100, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, [0xff000000, 0xff000000, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'nicvf0\x00', 'sit0\x00', {0x7f}, {}, 0x67, 0xc, 0x4, 0x11}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@private1, @mcast1, [0x0, 0x0, 0xff, 0xff000000], [0xffffff00, 0x0, 0xffffff00], 'nr0\x00', 'wg1\x00', {0xff}, {}, 0x3b, 0x3, 0x1, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2bc53a058df9c1f5}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0xff000000, 0xff, 0xff, 0xff0000ff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x0, 0x3, 0x2, 0x10}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xffffffff, 0xff, 0x100fffe00, 0xff000000], 0x4e24, 0x4e20, 0x4e21, 0x4e24, 0xdb, 0x8, 0x548e, 0x0, 0x99}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) semop(r1, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x5000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6a38, &(0x7f00000005c0)={0x0, 0x589a, 0xc000, 0x2, 0x2b9, 0x0, r6}) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000600000000800000", @ANYRES32, @ANYBLOB="0200000e00"/20, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB="00000000000000000200"/20, @ANYRES32=r0, @ANYBLOB="979ae32fd3c941969c45d785ca4eed67a6fc4d913763cb67f09e2a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000004000000040000000000010000000000", @ANYRES32=r7, @ANYBLOB='@\n\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="000000000300"/28], 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x8, 0xb2, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 0s ago: executing program 9 (id=5691): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x0, 0x2, 0x4, 0x4}) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0xc5d, 0x4, &(0x7f0000000100)=""/183, &(0x7f00000001c0)=0xb7) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_disconnect(r3) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x24, &(0x7f0000000200)={0x0, 0x30, 0x5b, {0x5b, 0x11, "bf9e67468842863cb352b4ec892bbfe4a7950291bfae772893f12ab3e4ea89a65433a34aa0c40602afe03e53b6b1d49a792282d7721cc6f4e4d9d02b6253c1fb117736a554f68f59ed0967941555b3eb46c8243c432eea0c35"}}, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0x0, 0x79, "9d88039461b8adb15019278c58871252d5a3320859461e8a107d6e9e23498a0003d17567030aad56c34404699b08d112fb5d0ed053a7907131c826376b72c804d502712bd67f70c413b66d3eb367c74c31bceab2fd6cd63525328fd42ec32a1e8822c7a71b32079000e430187c5ca54189b91d99e1f7b5307c"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0x20, 0x1, 0x91, "0b20a7a7347bfece163e8b0ae95499812259bebe412f265af4efaf420b6bd6b366c33ace2a001e9b15dcb79ea5a041f41e6e736485437ea45f00388a0d659d604c10e4fea62434a746594a103f953d30c162899b37eda1f768fca1b62c2a5a6da778a1cd054ca85e44ae1e6f0d11f9eea2985d956670cec03bb2cf642a6b8a5b42f1737c9dbafb15b097858b6b919bd9c0"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x6f}}) kernel console output (not intermixed with test programs): 793][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5132'. [ 1497.123627][T25535] tmpfs: Bad value for 'mpol' [ 1497.349790][ T5615] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1497.539509][T25537] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5135'. [ 1497.548729][T25537] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5135'. [ 1497.638537][ T5615] usb 10-1: Using ep0 maxpacket: 32 [ 1497.664780][ T5615] usb 10-1: config 250 has an invalid interface number: 252 but max is 0 [ 1497.726271][ T5615] usb 10-1: config 250 has no interface number 0 [ 1497.774608][ T5615] usb 10-1: config 250 interface 252 has no altsetting 0 [ 1498.074742][ T5615] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=c3.27 [ 1498.095629][ T5615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.181940][ T5615] usb 10-1: Product: 烅煒꣓ë©ì§â‘ŒìŠ³ç¸ªì€‹ë ‚殇檋ç’럂욙挣ë˜â¹µî“³ä›´ë©ãŒ¤ç˜§íƒŒäžç˜†å¼šà¼‘屆穀ꦭȥ෋툌é“⇔ணí‘é›åƒåˆ•ì‡©áª¾ì¸™å¸®ëµµè¦Žê¢¿â ƒá³ã½®á«¡ì ¦å“‰åªãˆ–調ᛪêžê°“άì‹ãŽî¼¤è¸¨é‘夞ꄸè¾ì®§ [ 1498.462435][ T5615] usb 10-1: Manufacturer: 압랓ﺿ脨稉ê·æ‹»î¿¸á•µë‹¨ä¿¶á¶¦ã“Ÿå†žë¸Ší´è’©çƒ¿ëŠ³áº–랖èˆä¨ƒç·…ꛅ찚框㜿斨﩯î“î‹ä²­Ö¼ã½¬î–㣻釭岼ᙟ෷咓᰷싢㵡㹲걸埻墠幞乶爌걧ꥼṻꡊ䚇閿뫄眶侕쿌ᘾç⌅틷㊠旰펾尬ëã†ê¨é™¢ç°¿ä²Œï¿‡é°”åƒä·´Í–ê„먒唼⹟ëƒêƒ±îº¾â£¸âŽ­à¥ƒì¶ç©á–«å¾…ꉉ寋់Ð┗ॣ妹䷔픙䆦殶䆪ᕑ [ 1499.001464][ T5615] usb 10-1: SerialNumber: አ[ 1499.269449][ T5615] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 1499.313196][ T5615] gspca_vc032x: reg_r err -71 [ 1499.316072][T19866] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1499.339020][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.369925][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.401549][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.428119][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.452821][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.474188][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.486122][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.498118][T19866] usb 7-1: Using ep0 maxpacket: 32 [ 1499.502376][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.508942][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.522356][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.524587][T19866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.533406][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.558555][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.565906][T19866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.569141][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.582575][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.589135][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.589520][T19866] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1499.595272][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.610530][T19866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.611271][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.625296][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.638083][ T5615] gspca_vc032x: I2c Bus Busy Wait 00 [ 1499.643601][ T5615] gspca_vc032x: Unknown sensor... [ 1499.649063][ T5615] vc032x 10-1:250.252: probe with driver vc032x failed with error -22 [ 1499.650896][T19866] usb 7-1: config 0 descriptor?? [ 1499.665469][ T5615] usb 10-1: USB disconnect, device number 13 [ 1499.668052][T19866] hub 7-1:0.0: USB hub found [ 1499.744035][T19858] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 1499.952635][T19858] usb 2-1: Invalid ep0 maxpacket: 32 [ 1500.073415][T19866] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1500.098966][T25565] SELinux: failed to load policy [ 1500.128022][T19858] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 1500.353895][T19858] usb 2-1: Invalid ep0 maxpacket: 32 [ 1500.415383][T19858] usb usb2-port1: attempt power cycle [ 1500.814252][T19866] hid-generic 0003:046D:C31C.0044: unknown main item tag 0x0 [ 1500.836668][T19858] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 1500.842981][T19866] hid-generic 0003:046D:C31C.0044: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 1500.902922][T19866] usb 7-1: USB disconnect, device number 82 [ 1500.921285][T19858] usb 2-1: Invalid ep0 maxpacket: 32 [ 1501.050138][T25571] fido_id[25571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1501.244510][T19858] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 1501.378218][T19866] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1501.393644][T19858] usb 2-1: Invalid ep0 maxpacket: 32 [ 1501.431163][T19858] usb usb2-port1: unable to enumerate USB device [ 1501.570643][T19866] usb 7-1: Using ep0 maxpacket: 32 [ 1501.585926][T19866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.610958][T19866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.640222][T19866] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1501.667910][T19866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.696021][T19866] usb 7-1: config 0 descriptor?? [ 1501.718681][T19866] hub 7-1:0.0: USB hub found [ 1501.942419][T19866] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1501.990212][T19866] usbhid 7-1:0.0: can't add hid device: -71 [ 1501.996846][T19866] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1502.034182][T19866] usb 7-1: USB disconnect, device number 83 [ 1502.950391][T25589] all: renamed from bridge_slave_1 (while UP) [ 1504.227390][T25615] fuse: Unknown parameter 'fD' [ 1504.401746][ T5615] libceph: connect (1)[c::]:6789 error -101 [ 1504.439953][ T5615] libceph: mon0 (1)[c::]:6789 connect error [ 1504.451947][T16220] libceph: connect (1)[c::]:6789 error -101 [ 1504.474099][T16220] libceph: mon0 (1)[c::]:6789 connect error [ 1504.733584][T19855] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1504.847804][T25633] SELinux: failed to load policy [ 1505.486665][ T5615] libceph: connect (1)[c::]:6789 error -101 [ 1505.493428][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1505.499518][ T5615] libceph: mon0 (1)[c::]:6789 connect error [ 1505.505623][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1505.652629][T19855] usb 7-1: Using ep0 maxpacket: 32 [ 1505.670028][T19855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.686829][T19855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.706267][T19855] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1505.715904][T19855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.729190][T19855] usb 7-1: config 0 descriptor?? [ 1505.743221][T19855] hub 7-1:0.0: USB hub found [ 1505.962943][ T5615] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1505.973908][T19855] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1506.059162][T16220] libceph: connect (1)[c::]:6789 error -101 [ 1506.071416][T16220] libceph: mon0 (1)[c::]:6789 connect error [ 1506.082284][T16220] libceph: connect (1)[c::]:6789 error -101 [ 1506.103956][T25625] ceph: No mds server is up or the cluster is laggy [ 1506.111315][T25619] ceph: No mds server is up or the cluster is laggy [ 1506.121680][T16220] libceph: mon0 (1)[c::]:6789 connect error [ 1506.147881][ T5615] usb 9-1: Using ep0 maxpacket: 8 [ 1506.173457][ T5615] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1506.208534][ T5615] usb 9-1: config 0 has no interface number 0 [ 1506.228330][ T5615] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1506.269375][ T5615] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1506.325616][ T5615] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1506.365237][ T5615] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1506.400987][ T5615] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1506.415199][T19855] hid-generic 0003:046D:C31C.0045: unknown main item tag 0x0 [ 1506.439827][ T5615] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.458590][ T5615] usb 9-1: config 0 descriptor?? [ 1506.463930][T19855] hid-generic 0003:046D:C31C.0045: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 1506.504422][ T5615] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1506.644177][T25643] syzkaller0: entered promiscuous mode [ 1506.650236][T25643] syzkaller0: entered allmulticast mode [ 1506.682187][T25643] tipc: Started in network mode [ 1506.687112][T25643] tipc: Node identity 2637eebbd986, cluster identity 4711 [ 1506.710294][T25643] tipc: Enabled bearer , priority 0 [ 1506.757583][T25638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1506.822419][T19866] usb 9-1: USB disconnect, device number 79 [ 1506.845288][T19866] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1507.330821][ T5615] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1507.395235][T25624] usb 7-1: reset high-speed USB device number 84 using dummy_hcd [ 1507.441800][T25640] tipc: Resetting bearer [ 1507.472082][T25640] tipc: Disabling bearer [ 1507.503679][ T5615] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1507.516019][ T5615] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1507.537244][ T5615] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1507.575016][ T5615] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1507.590007][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.605247][ T5615] usb 2-1: Product: syz [ 1507.613413][ T5615] usb 2-1: Manufacturer: syz [ 1507.627538][ T5615] usb 2-1: SerialNumber: syz [ 1507.648600][ T5615] usb 2-1: config 0 descriptor?? [ 1507.656954][T25651] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1507.672679][T25651] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1507.681909][ T5615] usb 2-1: ucan: probing device on interface #0 [ 1507.775399][T19866] usb 7-1: USB disconnect, device number 84 [ 1507.784013][T25624] usbhid 7-1:0.0: reset_resume error -71 [ 1507.875209][T19855] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1508.046220][T19855] usb 10-1: Using ep0 maxpacket: 16 [ 1508.054371][T19855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.079014][T19855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1508.100997][T19855] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1508.117298][T19855] usb 10-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1508.128389][T19855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.143622][T19855] usb 10-1: config 0 descriptor?? [ 1508.363231][ T5615] ucan 2-1:0.0 can0: registered device [ 1508.592705][T19855] usbhid 10-1:0.0: can't add hid device: -71 [ 1508.608196][T19855] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1508.625267][ T5615] ucan 2-1:0.0 can0: firmware string: unknown [ 1508.643459][T19855] usb 10-1: USB disconnect, device number 14 [ 1508.663018][ T5615] usb 2-1: USB disconnect, device number 99 [ 1509.328106][T25679] FAULT_INJECTION: forcing a failure. [ 1509.328106][T25679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1509.363184][T25679] CPU: 0 UID: 0 PID: 25679 Comm: syz.0.5179 Tainted: G L syzkaller #0 PREEMPT(full) [ 1509.363212][T25679] Tainted: [L]=SOFTLOCKUP [ 1509.363218][T25679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1509.363228][T25679] Call Trace: [ 1509.363234][T25679] [ 1509.363241][T25679] dump_stack_lvl+0x100/0x190 [ 1509.363268][T25679] should_fail_ex.cold+0x5/0xa [ 1509.363289][T25679] ? prepare_alloc_pages+0x16d/0x5f0 [ 1509.363311][T25679] should_fail_alloc_page+0xeb/0x140 [ 1509.363332][T25679] prepare_alloc_pages+0x1f0/0x5f0 [ 1509.363357][T25679] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1509.363402][T25679] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1509.363432][T25679] ? __lock_acquire+0x4a5/0x2630 [ 1509.363461][T25679] ? __lock_acquire+0x4a5/0x2630 [ 1509.363483][T25679] ? __lock_acquire+0x4a5/0x2630 [ 1509.363505][T25679] ? css_rstat_updated+0x1ce/0x5a0 [ 1509.363528][T25679] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1509.363551][T25679] ? policy_nodemask+0xed/0x4f0 [ 1509.363580][T25679] alloc_pages_mpol+0x1fb/0x540 [ 1509.363601][T25679] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1509.363629][T25679] folio_alloc_mpol_noprof+0x36/0x260 [ 1509.363655][T25679] vma_alloc_folio_noprof+0xed/0x1d0 [ 1509.363677][T25679] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1509.363700][T25679] ? rcu_read_unlock+0x2d/0xb0 [ 1509.363726][T25679] ? rcu_read_unlock+0x2d/0xb0 [ 1509.363758][T25679] do_wp_page+0xd75/0x4350 [ 1509.363788][T25679] ? __pfx_do_wp_page+0x10/0x10 [ 1509.363813][T25679] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1509.363847][T25679] __handle_mm_fault+0x1ab6/0x2a00 [ 1509.363876][T25679] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1509.363905][T25679] ? __pfx___handle_mm_fault+0x10/0x10 [ 1509.363934][T25679] ? pte_offset_map_lock+0x174/0x320 [ 1509.363954][T25679] ? find_held_lock+0x2b/0x80 [ 1509.363980][T25679] ? follow_page_pte+0x4d0/0x13f0 [ 1509.364007][T25679] handle_mm_fault+0x36d/0xa20 [ 1509.364037][T25679] __get_user_pages+0x1178/0x32a0 [ 1509.364066][T25679] ? down_read_killable+0x307/0x4b0 [ 1509.364094][T25679] ? __lock_acquire+0x4a5/0x2630 [ 1509.364116][T25679] ? __pfx___get_user_pages+0x10/0x10 [ 1509.364145][T25679] __gup_longterm_locked+0x87d/0x16f0 [ 1509.364175][T25679] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1509.364199][T25679] ? lock_acquire+0x1b1/0x370 [ 1509.364225][T25679] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 1509.364250][T25679] gup_fast_fallback+0x16dc/0x2790 [ 1509.364291][T25679] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1509.364316][T25679] ? bpf_ksym_find+0x128/0x1c0 [ 1509.364346][T25679] ? kernel_text_address+0x8d/0x100 [ 1509.364370][T25679] ? __kernel_text_address+0xd/0x30 [ 1509.364397][T25679] pin_user_pages_fast+0xa7/0xf0 [ 1509.364419][T25679] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1509.364443][T25679] ? iov_iter_advance+0xac/0x6d0 [ 1509.364471][T25679] iov_iter_extract_pages+0xa0d/0x1ef0 [ 1509.364502][T25679] ? sock_kmalloc+0x111/0x170 [ 1509.364522][T25679] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1509.364546][T25679] ? __kasan_kmalloc+0xaa/0xb0 [ 1509.364566][T25679] ? __kmalloc_noprof+0x301/0x850 [ 1509.364591][T25679] ? sock_kmalloc+0x111/0x170 [ 1509.364608][T25679] ? af_alg_alloc_areq+0xbc/0x240 [ 1509.364626][T25679] ? skcipher_recvmsg+0x314/0x1060 [ 1509.364645][T25679] ? sock_recvmsg+0x1a4/0x1f0 [ 1509.364664][T25679] ? ____sys_recvmsg+0x218/0x640 [ 1509.364682][T25679] ? ___sys_recvmsg+0x16a/0x1a0 [ 1509.364701][T25679] ? __sys_recvmsg+0x16d/0x220 [ 1509.364716][T25679] ? do_syscall_64+0x10b/0xf80 [ 1509.364737][T25679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.364760][T25679] extract_iter_to_sg+0xaea/0x2250 [ 1509.364789][T25679] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1509.364818][T25679] ? rcu_is_watching+0x12/0xc0 [ 1509.364851][T25679] af_alg_get_rsgl+0x2bb/0x8f0 [ 1509.364880][T25679] skcipher_recvmsg+0x375/0x1060 [ 1509.364911][T25679] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1509.364938][T25679] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1509.364963][T25679] sock_recvmsg+0x1a4/0x1f0 [ 1509.364985][T25679] ____sys_recvmsg+0x218/0x640 [ 1509.365012][T25679] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1509.365045][T25679] ? __lock_acquire+0x4a5/0x2630 [ 1509.365073][T25679] ___sys_recvmsg+0x16a/0x1a0 [ 1509.365098][T25679] ? __pfx____sys_recvmsg+0x10/0x10 [ 1509.365142][T25679] __sys_recvmsg+0x16d/0x220 [ 1509.365161][T25679] ? __pfx___sys_recvmsg+0x10/0x10 [ 1509.365189][T25679] ? rcu_is_watching+0x12/0xc0 [ 1509.365217][T25679] do_syscall_64+0x10b/0xf80 [ 1509.365238][T25679] ? clear_bhb_loop+0x40/0x90 [ 1509.365258][T25679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.365276][T25679] RIP: 0033:0x7fcc0f99cdd9 [ 1509.365292][T25679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1509.365307][T25679] RSP: 002b:00007fcc10929028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1509.365324][T25679] RAX: ffffffffffffffda RBX: 00007fcc0fc15fa0 RCX: 00007fcc0f99cdd9 [ 1509.365336][T25679] RDX: 0000000000000000 RSI: 000020000000b680 RDI: 0000000000000004 [ 1509.365347][T25679] RBP: 00007fcc10929090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.365358][T25679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1509.365369][T25679] R13: 00007fcc0fc16038 R14: 00007fcc0fc15fa0 R15: 00007ffe7ce78638 [ 1509.365393][T25679] [ 1510.222898][T25684] netlink: 'syz.6.5181': attribute type 12 has an invalid length. [ 1510.230967][T25684] netlink: 'syz.6.5181': attribute type 29 has an invalid length. [ 1510.238937][T25684] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5181'. [ 1510.549984][T25686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5183'. [ 1511.216176][ T30] audit: type=1800 audit(2000000088.975:1913): pid=25693 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5182" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1511.291839][T25693] IPVS: Error connecting to the multicast addr [ 1511.716664][T25678] fuse: Bad value for 'group_id' [ 1511.726362][T25678] fuse: Bad value for 'group_id' [ 1512.395412][T19855] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1512.556160][T25719] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5190'. [ 1512.574631][T19855] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1512.601463][T19855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.621191][T19855] usb 2-1: Product: syz [ 1512.644225][T19855] usb 2-1: Manufacturer: syz [ 1512.661044][T19855] usb 2-1: SerialNumber: syz [ 1512.674602][T19855] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1512.690784][T19858] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1512.833585][T19866] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1512.889785][T25727] lo speed is unknown, defaulting to 1000 [ 1512.901943][T25727] virt_wifi0 speed is unknown, defaulting to 1000 [ 1513.171712][T25734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=25734 comm=syz.9.5196 [ 1513.605133][T19866] usb 7-1: device descriptor read/64, error -71 [ 1513.673663][ T30] audit: type=1800 audit(2000000091.287:1914): pid=25732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5195" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1513.750266][T25732] IPVS: Error connecting to the multicast addr [ 1513.754456][T19849] usb 2-1: USB disconnect, device number 100 [ 1513.998560][T19866] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1514.028211][T19858] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1514.044921][T19858] ath9k_htc: Failed to initialize the device [ 1514.073616][T19849] usb 2-1: ath9k_htc: USB layer deinitialized [ 1514.244298][T19866] usb 7-1: device descriptor read/64, error -71 [ 1514.363844][T19866] usb usb7-port1: attempt power cycle [ 1514.800067][T19866] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1514.832607][T19866] usb 7-1: device descriptor read/8, error -71 [ 1514.844255][T25746] nbd: must specify a size in bytes for the device [ 1515.542818][T19866] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1515.580966][T19866] usb 7-1: device descriptor read/8, error -71 [ 1516.158869][T19866] usb usb7-port1: unable to enumerate USB device [ 1518.792358][ T30] audit: type=1400 audit(2000000095.273:1915): avc: denied { watch } for pid=25779 comm="syz.6.5210" path="/509/bus/file1" dev="overlay" ino=2709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1520.940741][T25795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5214'. [ 1521.296331][ T30] audit: type=1800 audit(2000000098.417:1916): pid=25808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5219" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1521.334529][T25809] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1522.185602][ T30] audit: type=1400 audit(2000000099.054:1917): avc: denied { getopt } for pid=25812 comm="syz.0.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1522.333790][T19858] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1522.483417][T19866] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1522.551470][T25830] SELinux: failed to load policy [ 1522.600830][T19858] usb 10-1: Using ep0 maxpacket: 16 [ 1522.610150][T19858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1522.672164][T19858] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1522.824111][T19858] usb 10-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 1522.962395][T19858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.149331][T19866] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1523.158589][T19866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.166453][T19858] usb 10-1: config 0 descriptor?? [ 1523.166634][T19866] usb 2-1: Product: syz [ 1523.175883][T19866] usb 2-1: Manufacturer: syz [ 1523.180584][T19866] usb 2-1: SerialNumber: syz [ 1523.191897][T19866] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1523.208150][T19849] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1523.513387][T25817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.526980][T25817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.699834][T19866] usb 2-1: USB disconnect, device number 101 [ 1523.997691][T19858] apple 0003:05AC:0241.0046: unknown main item tag 0x0 [ 1524.039891][T19858] apple 0003:05AC:0241.0046: unknown main item tag 0x0 [ 1524.073086][T19858] apple 0003:05AC:0241.0046: unknown main item tag 0x0 [ 1524.089428][T19858] apple 0003:05AC:0241.0046: unknown main item tag 0x0 [ 1524.116733][T19858] apple 0003:05AC:0241.0046: unknown main item tag 0x0 [ 1524.134128][T19858] apple 0003:05AC:0241.0046: unknown main item tag 0x0 [ 1524.152995][T19858] apple 0003:05AC:0241.0046: unknown main item tag 0x0 [ 1524.167254][T19858] apple 0003:05AC:0241.0046: unknown main item tag 0x0 [ 1524.186788][T19858] apple 0003:05AC:0241.0046: unknown main item tag 0x0 [ 1524.205176][T19858] apple 0003:05AC:0241.0046: unknown main item tag 0x0 [ 1524.222939][T19858] apple 0003:05AC:0241.0046: item fetching failed at offset 32/41 [ 1524.323248][T19858] apple 0003:05AC:0241.0046: parse failed [ 1524.336490][T19849] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1524.342276][T19858] apple 0003:05AC:0241.0046: probe with driver apple failed with error -22 [ 1524.367373][T19858] usb 10-1: USB disconnect, device number 15 [ 1524.371687][T19849] ath9k_htc: Failed to initialize the device [ 1524.420411][T19866] usb 2-1: ath9k_htc: USB layer deinitialized [ 1524.468399][T25845] sg_write: process 1533 (syz.1.5228) changed security contexts after opening file descriptor, this is not allowed. [ 1524.732798][T25853] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5231'. [ 1524.743636][T25853] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5231'. [ 1525.349704][T25864] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5235'. [ 1525.553806][T25869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=25869 comm=syz.1.5236 [ 1525.916129][T25864] openvswitch: netlink: IP tunnel dst address not specified [ 1529.924027][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1532.538878][T19849] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1532.731004][T19849] usb 10-1: Using ep0 maxpacket: 16 [ 1532.737553][T19849] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.748311][T19849] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1532.759535][T19849] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1532.769370][T19849] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1532.779390][T19849] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1532.811045][T19849] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1532.839384][T25950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=25950 comm=syz.1.5261 [ 1532.934544][T19849] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1533.067257][T19849] usb 10-1: Manufacturer: syz [ 1533.178302][T19849] usb 10-1: config 0 descriptor?? [ 1533.512491][T19849] rc_core: IR keymap rc-hauppauge not found [ 1533.581661][T19849] Registered IR keymap rc-empty [ 1533.598193][T19849] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1533.631749][T19849] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1533.677520][T25965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1533.702816][T19849] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1533.724575][T19849] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input62 [ 1533.759295][T19849] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1533.793426][ T30] audit: type=1400 audit(2000000110.115:1918): avc: denied { mounton } for pid=25970 comm="syz.6.5268" path="/proc/1653/cgroup" dev="proc" ino=116512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1533.842434][T19849] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1533.863880][T19849] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1533.874525][T19864] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1533.996856][T19849] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1534.024029][T19849] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1534.046044][T19849] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1534.066781][T19849] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1534.551696][T19864] usb 2-1: Using ep0 maxpacket: 8 [ 1534.556913][T19849] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1534.565946][T19864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.576537][T19864] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1534.605464][T19849] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1534.624922][T19864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.653781][T19864] usb 2-1: config 0 descriptor?? [ 1534.665271][T19849] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1534.675191][T19864] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 1534.699578][T19849] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1534.730604][T19849] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1534.750915][T19849] usb 10-1: USB disconnect, device number 16 [ 1534.896383][T25966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5265'. [ 1534.935376][T25966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5265'. [ 1535.068035][T19864] usb 2-1: USB disconnect, device number 102 [ 1535.640229][T25990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1536.077463][T26004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=26004 comm=syz.0.5276 [ 1536.813198][T26015] FAULT_INJECTION: forcing a failure. [ 1536.813198][T26015] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.825978][T26015] CPU: 0 UID: 0 PID: 26015 Comm: syz.8.5280 Tainted: G L syzkaller #0 PREEMPT(full) [ 1536.826007][T26015] Tainted: [L]=SOFTLOCKUP [ 1536.826012][T26015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1536.826018][T26015] Call Trace: [ 1536.826023][T26015] [ 1536.826027][T26015] dump_stack_lvl+0x100/0x190 [ 1536.826046][T26015] should_fail_ex.cold+0x5/0xa [ 1536.826061][T26015] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1536.826078][T26015] should_failslab+0xc2/0x120 [ 1536.826091][T26015] __kmalloc_noprof+0xe0/0x850 [ 1536.826110][T26015] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1536.826134][T26015] genl_family_rcv_msg_doit+0xc7/0x300 [ 1536.826151][T26015] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1536.826172][T26015] ? bpf_lsm_capable+0x9/0x10 [ 1536.826183][T26015] ? security_capable+0x80/0x260 [ 1536.826196][T26015] ? ns_capable+0xd2/0xf0 [ 1536.826213][T26015] genl_rcv_msg+0x560/0x800 [ 1536.826230][T26015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1536.826246][T26015] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1536.826261][T26015] ? __lock_acquire+0x4a5/0x2630 [ 1536.826277][T26015] netlink_rcv_skb+0x159/0x420 [ 1536.826292][T26015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1536.826308][T26015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1536.826327][T26015] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1536.826342][T26015] genl_rcv+0x28/0x40 [ 1536.826356][T26015] netlink_unicast+0x585/0x850 [ 1536.826373][T26015] ? __pfx_netlink_unicast+0x10/0x10 [ 1536.826392][T26015] netlink_sendmsg+0x8b0/0xda0 [ 1536.826408][T26015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.826421][T26015] ? __might_fault+0x90/0x140 [ 1536.826442][T26015] ____sys_sendmsg+0x9e1/0xb70 [ 1536.826455][T26015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.826470][T26015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1536.826490][T26015] ___sys_sendmsg+0x190/0x1e0 [ 1536.826505][T26015] ? __pfx____sys_sendmsg+0x10/0x10 [ 1536.826548][T26015] __sys_sendmsg+0x170/0x220 [ 1536.826559][T26015] ? __pfx___sys_sendmsg+0x10/0x10 [ 1536.826576][T26015] ? rcu_is_watching+0x12/0xc0 [ 1536.826594][T26015] do_syscall_64+0x10b/0xf80 [ 1536.826614][T26015] ? clear_bhb_loop+0x40/0x90 [ 1536.826635][T26015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.826652][T26015] RIP: 0033:0x7fe9a839cdd9 [ 1536.826668][T26015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.826681][T26015] RSP: 002b:00007fe9a92b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1536.826692][T26015] RAX: ffffffffffffffda RBX: 00007fe9a8616090 RCX: 00007fe9a839cdd9 [ 1536.826699][T26015] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1536.826705][T26015] RBP: 00007fe9a92b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.826711][T26015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.826717][T26015] R13: 00007fe9a8616128 R14: 00007fe9a8616090 R15: 00007ffd0e1499a8 [ 1536.826732][T26015] [ 1537.603944][T19849] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1538.642640][T19849] usb 9-1: Using ep0 maxpacket: 16 [ 1538.666323][T19849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.692573][T19849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1538.709565][T19849] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1538.853191][T19849] usb 9-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1538.862846][T19849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.876759][T19849] usb 9-1: config 0 descriptor?? [ 1539.037675][T26038] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1539.172568][T26045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=26045 comm=syz.6.5291 [ 1539.420997][T19858] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1539.535612][T19849] usbhid 9-1:0.0: can't add hid device: -71 [ 1539.542525][T19849] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1539.554146][T19849] usb 9-1: USB disconnect, device number 80 [ 1539.592776][T19858] usb 10-1: config 0 has no interfaces? [ 1539.599273][T19858] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1539.611140][T19858] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1539.619518][T19858] usb 10-1: Manufacturer: syz [ 1539.625864][T19858] usb 10-1: config 0 descriptor?? [ 1539.882485][ T5615] usb 10-1: USB disconnect, device number 17 [ 1540.199766][T26059] lo speed is unknown, defaulting to 1000 [ 1540.248471][T26059] virt_wifi0 speed is unknown, defaulting to 1000 [ 1541.760730][T26076] SET target dimension over the limit! [ 1541.802029][T26077] openvswitch: netlink: Message has 8 unknown bytes. [ 1541.887080][T26078] openvswitch: netlink: EtherType 0 is less than min 600 [ 1542.111445][T26079] random: crng reseeded on system resumption [ 1542.143461][T26072] syz_tun: entered promiscuous mode [ 1542.170158][T26072] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1542.171032][T26059] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5294'. [ 1542.200583][T26059] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5294'. [ 1542.266241][T26077] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1542.629479][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5299'. [ 1542.673468][T26083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5299'. [ 1543.813287][T19849] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 1543.972854][T19858] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1544.037472][T19849] usb 2-1: Invalid ep0 maxpacket: 32 [ 1544.218509][T19858] usb 9-1: Using ep0 maxpacket: 16 [ 1544.230708][T19858] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.239902][T19849] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 1544.248359][T19858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1544.261089][T19858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1544.271021][T19858] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1544.281168][T19858] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1544.297130][T26119] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5311'. [ 1544.309757][T19858] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1544.322676][T19858] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1544.332207][T19858] usb 9-1: Manufacturer: syz [ 1544.405880][T19849] usb 2-1: Invalid ep0 maxpacket: 32 [ 1544.406085][T19858] usb 9-1: config 0 descriptor?? [ 1544.522860][T19849] usb usb2-port1: attempt power cycle [ 1544.682336][ T30] audit: type=1400 audit(2000000120.240:1919): avc: denied { setattr } for pid=26118 comm="syz.6.5311" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1544.716275][T26125] SELinux: failed to load policy [ 1545.310775][ T30] audit: type=1400 audit(2000000120.895:1920): avc: denied { listen } for pid=26127 comm="syz.9.5313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1545.329845][T19849] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 1545.364787][T19858] rc_core: IR keymap rc-hauppauge not found [ 1545.388477][T19858] Registered IR keymap rc-empty [ 1545.395502][T19849] usb 2-1: Invalid ep0 maxpacket: 32 [ 1545.408438][T19858] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1545.421227][ T30] audit: type=1400 audit(2000000120.895:1921): avc: denied { read } for pid=26127 comm="syz.9.5313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1545.480358][T19858] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1545.526209][T19858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1545.543744][T19849] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 1545.576455][T19849] usb 2-1: Invalid ep0 maxpacket: 32 [ 1545.582518][T26137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.583802][T19858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input63 [ 1545.597819][T19849] usb usb2-port1: unable to enumerate USB device [ 1545.616496][T26137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.745409][T19858] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1545.768716][T19858] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1545.800669][T19858] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1545.939964][T19858] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1546.079990][T19858] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1546.195928][T19858] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1546.217335][T19858] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1546.250633][T19858] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1546.281034][T19858] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1546.313110][T19858] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1546.336713][T19858] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1546.346370][T19858] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1546.361479][T19858] usb 9-1: USB disconnect, device number 81 [ 1547.887222][ T30] audit: type=1400 audit(2000000123.300:1922): avc: denied { setopt } for pid=26167 comm="syz.6.5325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1549.208593][ T30] audit: type=1400 audit(2000000124.536:1923): avc: denied { getopt } for pid=26176 comm="syz.1.5326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1549.779752][ T30] audit: type=1400 audit(2000000124.667:1924): avc: denied { search } for pid=26182 comm="syz.0.5328" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1549.937905][ T30] audit: type=1400 audit(2000000124.667:1925): avc: denied { search } for pid=26182 comm="syz.0.5328" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1550.069850][ T30] audit: type=1400 audit(2000000124.667:1926): avc: denied { read } for pid=26182 comm="syz.0.5328" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1550.120980][T26194] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5330'. [ 1550.172761][ T30] audit: type=1400 audit(2000000124.667:1927): avc: denied { read open } for pid=26182 comm="syz.0.5328" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1550.416754][T19851] usb 7-1: new low-speed USB device number 89 using dummy_hcd [ 1550.707614][ T30] audit: type=1326 audit(2000000125.939:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26203 comm="syz.8.5333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a839cdd9 code=0x7ffc0000 [ 1550.740872][T26204] overlayfs: failed to resolve './file1/file0': -2 [ 1550.758421][T19851] usb 7-1: Invalid ep0 maxpacket: 32 [ 1550.765994][ T30] audit: type=1326 audit(2000000125.939:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26203 comm="syz.8.5333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a839cdd9 code=0x7ffc0000 [ 1550.806777][ T30] audit: type=1326 audit(2000000125.967:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26203 comm="syz.8.5333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe9a839cdd9 code=0x7ffc0000 [ 1550.844005][ T30] audit: type=1326 audit(2000000125.967:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26203 comm="syz.8.5333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a839cdd9 code=0x7ffc0000 [ 1550.898847][T19851] usb 7-1: new low-speed USB device number 90 using dummy_hcd [ 1550.924962][ T30] audit: type=1326 audit(2000000125.967:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26203 comm="syz.8.5333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a839cdd9 code=0x7ffc0000 [ 1550.954586][ T30] audit: type=1326 audit(2000000125.967:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26203 comm="syz.8.5333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe9a839cdd9 code=0x7ffc0000 [ 1550.988823][ T30] audit: type=1326 audit(2000000125.967:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26203 comm="syz.8.5333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a839cdd9 code=0x7ffc0000 [ 1551.023705][ T30] audit: type=1326 audit(2000000125.967:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26203 comm="syz.8.5333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a839cdd9 code=0x7ffc0000 [ 1551.068403][T19851] usb 7-1: Invalid ep0 maxpacket: 32 [ 1551.077281][T19851] usb usb7-port1: attempt power cycle [ 1551.079476][T26209] random: crng reseeded on system resumption [ 1551.474357][T19851] usb 7-1: new low-speed USB device number 91 using dummy_hcd [ 1551.526504][T26216] netlink: 'syz.8.5338': attribute type 10 has an invalid length. [ 1551.556871][T26216] team0: Port device dummy0 added [ 1551.615698][T19851] usb 7-1: Invalid ep0 maxpacket: 32 [ 1551.762397][T26220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=26220 comm=syz.9.5337 [ 1552.229466][T19851] usb 7-1: new low-speed USB device number 92 using dummy_hcd [ 1552.447410][T19851] usb 7-1: Invalid ep0 maxpacket: 32 [ 1552.478354][T19851] usb usb7-port1: unable to enumerate USB device [ 1552.566158][T26226] blktrace: Concurrent blktraces are not allowed on loop5 [ 1553.106286][T26236] lo speed is unknown, defaulting to 1000 [ 1553.116623][T26236] virt_wifi0 speed is unknown, defaulting to 1000 [ 1553.461937][T19851] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1553.724268][T19851] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 1553.846816][T26253] CIFS mount error: No usable UNC path provided in device string! [ 1553.846816][T26253] [ 1553.857124][T26253] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1554.199344][T19851] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1554.230712][T19851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.251072][T19851] usb 2-1: Product: syz [ 1554.464205][T19851] usb 2-1: Manufacturer: syz [ 1554.470908][T19851] usb 2-1: SerialNumber: syz [ 1554.556225][T26262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=26262 comm=syz.8.5350 [ 1554.612398][T26264] openvswitch: netlink: EtherType 0 is less than min 600 [ 1554.880764][T26265] random: crng reseeded on system resumption [ 1554.933394][T19851] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1554.955943][T26264] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1554.973620][T19851] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1554.986610][T19851] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1555.002601][T19851] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1555.030677][T19851] usb 2-1: USB disconnect, device number 107 [ 1555.802499][T26276] FAULT_INJECTION: forcing a failure. [ 1555.802499][T26276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1555.862634][T26276] CPU: 0 UID: 0 PID: 26276 Comm: syz.1.5353 Tainted: G L syzkaller #0 PREEMPT(full) [ 1555.862665][T26276] Tainted: [L]=SOFTLOCKUP [ 1555.862672][T26276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1555.862682][T26276] Call Trace: [ 1555.862688][T26276] [ 1555.862695][T26276] dump_stack_lvl+0x100/0x190 [ 1555.862723][T26276] should_fail_ex.cold+0x5/0xa [ 1555.862748][T26276] _copy_from_user+0x2e/0xd0 [ 1555.862776][T26276] __x64_sys_cachestat+0x18a/0x5f0 [ 1555.862800][T26276] ? __pfx___x64_sys_cachestat+0x10/0x10 [ 1555.862826][T26276] ? rcu_is_watching+0x12/0xc0 [ 1555.862856][T26276] do_syscall_64+0x10b/0xf80 [ 1555.862880][T26276] ? clear_bhb_loop+0x40/0x90 [ 1555.862901][T26276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.862920][T26276] RIP: 0033:0x7f778ed9cdd9 [ 1555.862936][T26276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1555.862950][T26276] RSP: 002b:00007f778fbb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 1555.862966][T26276] RAX: ffffffffffffffda RBX: 00007f778f015fa0 RCX: 00007f778ed9cdd9 [ 1555.862976][T26276] RDX: 000020000009de80 RSI: 0000200000000040 RDI: 0000000000000008 [ 1555.862986][T26276] RBP: 00007f778fbb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.862996][T26276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1555.863005][T26276] R13: 00007f778f016038 R14: 00007f778f015fa0 R15: 00007fff67253358 [ 1555.863030][T26276] [ 1556.731983][T19858] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1556.860114][T19864] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1556.893424][T19858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.904626][T19858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.914513][T19858] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1556.923760][T19858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.934527][T19858] usb 9-1: config 0 descriptor?? [ 1557.257562][T19864] usb 7-1: Using ep0 maxpacket: 16 [ 1557.265047][T19864] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1557.275186][T19864] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1557.290829][T19864] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1557.300671][T19864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.309485][T19864] usb 7-1: Product: syz [ 1557.313752][T19864] usb 7-1: Manufacturer: syz [ 1557.318410][T19864] usb 7-1: SerialNumber: syz [ 1557.843201][T19858] usbhid 9-1:0.0: can't add hid device: -71 [ 1557.867578][T19858] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1557.907665][T19858] usb 9-1: USB disconnect, device number 82 [ 1558.540004][T19849] IPVS: starting estimator thread 0... [ 1558.548097][T26306] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1558.558972][T19864] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1558.577250][T19864] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1558.673448][T26307] IPVS: using max 51 ests per chain, 122400 per kthread [ 1558.826597][T26312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5362'. [ 1559.234870][T19864] usb 7-1: USB disconnect, device number 93 [ 1559.914152][T21273] udevd[21273]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1559.949529][T26325] openvswitch: netlink: EtherType 0 is less than min 600 [ 1559.965679][T26325] random: crng reseeded on system resumption [ 1559.991760][T26327] syzkaller0: entered promiscuous mode [ 1559.998846][T26327] syzkaller0: entered allmulticast mode [ 1560.008032][T26325] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1560.098156][ T5615] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1560.102279][T26327] tipc: Enabled bearer , priority 0 [ 1560.762292][T26326] tipc: Resetting bearer [ 1560.817673][ T5615] usb 9-1: Using ep0 maxpacket: 8 [ 1560.828564][ T5615] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1560.880925][T26326] tipc: Disabling bearer [ 1560.891783][ T5615] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1560.902282][ T5615] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.910556][ T5615] usb 9-1: Product: syz [ 1560.914782][ T5615] usb 9-1: Manufacturer: syz [ 1560.919437][ T5615] usb 9-1: SerialNumber: syz [ 1560.931038][ T5615] usb 9-1: config 0 descriptor?? [ 1560.940240][ T5615] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1560.948644][ T5615] usb 9-1: setting power ON [ 1560.953719][ T5615] dvb-usb: bulk message failed: -22 (2/0) [ 1560.967244][ T5615] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1560.977211][ T5615] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1560.986156][ T5615] usb 9-1: media controller created [ 1561.007414][ T5615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1561.054305][ T5615] usb 9-1: selecting invalid altsetting 6 [ 1561.064702][ T5615] usb 9-1: digital interface selection failed (-22) [ 1561.093332][ T5615] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1561.111184][ T5615] usb 9-1: setting power OFF [ 1561.385689][ T5615] dvb-usb: bulk message failed: -22 (2/0) [ 1561.494970][ T30] kauditd_printk_skb: 200 callbacks suppressed [ 1561.495016][ T30] audit: type=1400 audit(2000000136.037:2136): avc: denied { ioctl } for pid=26318 comm="syz.8.5365" path="socket:[118498]" dev="sockfs" ino=118498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1561.503501][ T5615] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1561.820875][ T5615] (NULL device *): no alternate interface [ 1562.385664][T19858] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1562.780285][T19858] usb 2-1: Using ep0 maxpacket: 8 [ 1562.787120][T19858] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1562.796297][T19858] usb 2-1: config 1 has an invalid interface number: 103 but max is 0 [ 1562.811430][T19858] usb 2-1: config 1 has no interface number 0 [ 1562.825619][T19858] usb 2-1: config 1 interface 103 has no altsetting 0 [ 1562.852327][ T5615] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1562.876762][ T5615] usb 9-1: USB disconnect, device number 83 [ 1562.901703][T19858] usb 2-1: string descriptor 0 read error: -22 [ 1562.917224][T19858] usb 2-1: New USB device found, idVendor=0984, idProduct=0301, bcdDevice= 1.28 [ 1562.943462][T19858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.971982][T19858] usb-storage 2-1:1.103: USB Mass Storage device detected [ 1563.074935][T19858] usb-storage 2-1:1.103: Quirks match for vid 0984 pid 0301: 800000 [ 1563.167844][ T30] audit: type=1400 audit(2000000137.599:2137): avc: denied { accept } for pid=26354 comm="syz.8.5375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1563.180757][T26347] ALSA: mixer_oss: invalid OSS volume '' [ 1563.222806][T19858] usb 2-1: USB disconnect, device number 108 [ 1563.471952][T26360] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5376'. [ 1563.704847][T26362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1565.302161][T26373] fuse: Bad value for 'fd' [ 1565.744949][T26385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5383'. [ 1566.109711][ T9] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1566.274627][ T9] usb 10-1: device descriptor read/64, error -71 [ 1566.513668][T26391] openvswitch: netlink: EtherType 0 is less than min 600 [ 1566.543027][T26391] random: crng reseeded on system resumption [ 1566.566375][ T9] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1566.579658][T26391] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1566.597581][T26393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5385'. [ 1566.744888][ T9] usb 10-1: device descriptor read/64, error -71 [ 1566.752095][T26400] ALSA: mixer_oss: invalid OSS volume '' [ 1566.758091][T26400] ALSA: mixer_oss: invalid OSS volume '' [ 1566.763745][T26400] ALSA: mixer_oss: invalid OSS volume 'IÝqªµ z…¯y?Œ¦±¢}' [ 1566.771494][T26400] ALSA: mixer_oss: invalid OSS volume 'P #¥dÜŸ¡žQ…á°{i0RÚ¬ßk ÿœ¼m5' [ 1566.780373][T26400] ALSA: mixer_oss: invalid OSS volume '2}f7ðçجÍ:÷L‘¹' [ 1566.788498][T26400] ALSA: mixer_oss: invalid OSS volume '^¡@¶¸ÜÂ䇵_u@½)øPàŸY 00ùìV' [ 1566.873443][ T9] usb usb10-port1: attempt power cycle [ 1568.176896][ T9] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1568.185893][T19858] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1568.230610][ T9] usb 10-1: device descriptor read/8, error -71 [ 1568.358301][T19858] usb 9-1: Using ep0 maxpacket: 16 [ 1568.376666][T19858] usb 9-1: config 1 has an invalid interface number: 228 but max is 0 [ 1568.385311][T19858] usb 9-1: config 1 has no interface number 0 [ 1568.391466][T19858] usb 9-1: config 1 interface 228 has no altsetting 0 [ 1568.400040][T19858] usb 9-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 1568.409256][T19858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.417357][T19858] usb 9-1: Product: syz [ 1568.421693][T19858] usb 9-1: Manufacturer: syz [ 1568.426575][T19858] usb 9-1: SerialNumber: syz [ 1568.497368][ T9] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 1568.519348][ T9] usb 10-1: device descriptor read/8, error -71 [ 1568.638702][ T9] usb usb10-port1: unable to enumerate USB device [ 1568.677208][T19858] usb 9-1: USB disconnect, device number 84 [ 1570.825221][T26428] SELinux: failed to load policy [ 1571.584853][ T30] audit: type=1400 audit(2000000145.469:2138): avc: denied { ioctl } for pid=26432 comm="syz.6.5398" path="socket:[119040]" dev="sockfs" ino=119040 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1571.733291][T26443] tipc: Enabling of bearer rejected, already enabled [ 1571.915381][T26454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5403'. [ 1572.209229][T26456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1575.075760][T26460] netlink: 'syz.9.5407': attribute type 10 has an invalid length. [ 1575.392966][T26477] netlink: 'syz.6.5413': attribute type 1 has an invalid length. [ 1575.528875][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1576.282779][T26484] SELinux: failed to load policy [ 1576.330155][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1576.340208][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1576.551725][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.558128][ T30] audit: type=1326 audit(2000000150.130:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26486 comm="syz.6.5414" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1e1b9cdd9 code=0x0 [ 1576.610625][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1576.665383][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.711135][ T9] usb 2-1: config 0 descriptor?? [ 1576.752480][ T9] hub 2-1:0.0: USB hub found [ 1576.769460][T26491] tipc: Enabling of bearer rejected, failed to enable media [ 1576.973483][ T9] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1577.441185][ T9] hid_parser_main: 3 callbacks suppressed [ 1577.441199][ T9] hid-generic 0003:046D:C31C.0047: unknown main item tag 0x0 [ 1577.485955][ T9] hid-generic 0003:046D:C31C.0047: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 1578.395570][T26537] No source specified [ 1578.415235][T26536] lo speed is unknown, defaulting to 1000 [ 1578.425333][T26471] usb 2-1: reset high-speed USB device number 109 using dummy_hcd [ 1578.435850][T26536] virt_wifi0 speed is unknown, defaulting to 1000 [ 1578.736328][ T30] audit: type=1326 audit(2000000152.151:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26535 comm="syz.9.5427" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f6179cdd9 code=0x0 [ 1579.044534][ T9] usb 2-1: USB disconnect, device number 109 [ 1579.132896][T26548] SELinux: policydb magic number 0x74687465 does not match expected magic number 0xf97cff8c [ 1579.143677][T26548] SELinux: failed to load policy [ 1579.255747][T26471] usbhid 2-1:0.0: reset_resume error -19 [ 1581.127623][T19864] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1581.318471][T19864] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.344662][T19864] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.357807][T19864] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1581.465590][T19864] usb 9-1: string descriptor 0 read error: -22 [ 1581.476171][T19864] usb 9-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 1581.486750][T19864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.071067][T19864] glorious 0003:258A:0033.0048: unknown main item tag 0x0 [ 1582.079733][T19864] glorious 0003:258A:0033.0048: unknown main item tag 0x0 [ 1582.107472][T19864] glorious 0003:258A:0033.0048: unknown main item tag 0x0 [ 1582.138149][T19864] glorious 0003:258A:0033.0048: unknown main item tag 0x0 [ 1582.148618][T19864] glorious 0003:258A:0033.0048: unknown main item tag 0x0 [ 1582.157909][T19864] glorious 0003:258A:0033.0048: unknown main item tag 0x0 [ 1582.186390][T19864] glorious 0003:258A:0033.0048: unknown main item tag 0x0 [ 1582.207889][T19864] glorious 0003:258A:0033.0048: unknown main item tag 0x0 [ 1582.231881][T19864] glorious 0003:258A:0033.0048: unknown main item tag 0x0 [ 1582.480183][T19864] glorious 0003:258A:0033.0048: unexpected long global item [ 1582.569829][T19864] glorious 0003:258A:0033.0048: probe with driver glorious failed with error -22 [ 1582.638961][T19864] usb 9-1: USB disconnect, device number 85 [ 1584.007299][T26600] openvswitch: netlink: IP tunnel dst address not specified [ 1584.017475][T26600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1584.623956][T26616] tipc: Enabling of bearer rejected, failed to enable media [ 1585.456438][T26630] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5451'. [ 1585.466331][T26630] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1585.785513][T19852] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 1585.981968][T19852] usb 10-1: Invalid ep0 maxpacket: 32 [ 1586.150734][T19852] usb 10-1: new low-speed USB device number 23 using dummy_hcd [ 1586.180873][T26641] syzkaller0: entered promiscuous mode [ 1586.188667][T26641] syzkaller0: entered allmulticast mode [ 1586.353689][T19852] usb 10-1: Invalid ep0 maxpacket: 32 [ 1586.761619][T19852] usb usb10-port1: attempt power cycle [ 1587.148694][ T9] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1587.155177][T19852] usb 10-1: new low-speed USB device number 24 using dummy_hcd [ 1587.187812][T19852] usb 10-1: Invalid ep0 maxpacket: 32 [ 1587.337097][T19852] usb 10-1: new low-speed USB device number 25 using dummy_hcd [ 1587.350525][ T9] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1587.370371][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.379968][T19852] usb 10-1: Invalid ep0 maxpacket: 32 [ 1587.380334][ T9] usb 9-1: Product: syz [ 1587.389702][ T9] usb 9-1: Manufacturer: syz [ 1587.393925][T19852] usb usb10-port1: unable to enumerate USB device [ 1587.395489][ T9] usb 9-1: SerialNumber: syz [ 1587.452569][ T9] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1587.471571][T19858] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1587.678829][ T5615] usb 7-1: new low-speed USB device number 94 using dummy_hcd [ 1587.874668][ T5615] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1587.892357][ T5615] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1587.914028][ T5615] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1587.945836][ T5615] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1587.961145][ T5615] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1587.968098][T26668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5462'. [ 1587.982293][ T5615] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1587.990189][ T5615] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1588.003203][ T5615] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1588.015570][ T5615] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1588.065354][ T5615] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1588.080425][ T5615] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1588.088232][ T5615] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1588.099799][ T5615] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1588.129962][ T5615] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1588.185187][ T9] usb 9-1: USB disconnect, device number 86 [ 1588.260606][T26670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1588.422594][ T5615] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1588.620141][T19858] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1588.629153][T19858] ath9k_htc: Failed to initialize the device [ 1588.645244][ T5615] usb 7-1: string descriptor 0 read error: -22 [ 1588.654948][ T9] usb 9-1: ath9k_htc: USB layer deinitialized [ 1588.661190][ T5615] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1588.682840][ T5615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.703903][ T5615] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1589.585473][T26682] Cannot find del_set index 1 as target [ 1589.607061][T26682] overlayfs: missing 'lowerdir' [ 1589.712632][T19849] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1590.867319][T19849] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1590.890329][T19849] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1590.916529][T19849] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1590.961245][T19849] usb 10-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1590.979809][T19849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.025756][T19849] usb 10-1: config 0 descriptor?? [ 1591.514461][T19849] steelseries 0003:1038:1410.0049: missing HID_OUTPUT_REPORT 0 [ 1591.700675][ T5615] usb 7-1: USB disconnect, device number 94 [ 1592.073035][T19849] usb 10-1: USB disconnect, device number 26 [ 1592.511079][T26714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5474'. [ 1593.711082][ T30] audit: type=1400 audit(2000000166.188:2141): avc: denied { map } for pid=26724 comm="syz.8.5477" path="socket:[121171]" dev="sockfs" ino=121171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1593.813731][ T30] audit: type=1400 audit(2000000166.188:2142): avc: denied { accept } for pid=26724 comm="syz.8.5477" path="socket:[121171]" dev="sockfs" ino=121171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1595.917612][T26750] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5481'. [ 1595.921227][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1596.068846][T19864] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1596.220145][ T30] audit: type=1400 audit(2000000168.537:2143): avc: denied { write } for pid=26754 comm="syz.8.5485" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1596.264931][ T30] audit: type=1400 audit(2000000168.537:2144): avc: denied { ioctl } for pid=26754 comm="syz.8.5485" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1596.301507][T19864] usb 10-1: Using ep0 maxpacket: 32 [ 1596.315743][T19864] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.337954][T19864] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.354925][T19864] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1596.365653][T26755] ceph: No mds server is up or the cluster is laggy [ 1596.372511][T19866] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1596.383701][T19852] libceph: connect (1)[c::]:6789 error -101 [ 1596.390415][T19852] libceph: mon0 (1)[c::]:6789 connect error [ 1596.396459][T19864] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.414663][T19864] usb 10-1: config 0 descriptor?? [ 1596.479891][T19864] hub 10-1:0.0: USB hub found [ 1596.710441][T19852] usb 7-1: new full-speed USB device number 95 using dummy_hcd [ 1596.839753][T19866] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1597.134501][T19864] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1597.242968][T19866] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.275589][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1597.294220][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1597.301130][T19866] usb 2-1: config 8 has no interface number 0 [ 1597.315527][T19866] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1597.371402][T19866] usb 2-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1597.497588][T19866] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1597.505132][T19866] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1597.522476][T19864] hid_parser_main: 237 callbacks suppressed [ 1597.522513][T19864] hid-generic 0003:046D:C31C.004A: unknown main item tag 0x0 [ 1597.536603][T19866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.103718][T19864] hid-generic 0003:046D:C31C.004A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.9-1/input0 [ 1598.131633][T19866] usb 2-1: string descriptor 0 read error: -71 [ 1598.172953][T19866] ir_toy 2-1:8.177: required endpoints not found [ 1598.205910][T19864] usb 10-1: USB disconnect, device number 27 [ 1598.323214][T19866] usb 2-1: USB disconnect, device number 110 [ 1598.456971][ T30] audit: type=1400 audit(2000000170.624:2145): avc: denied { create } for pid=26745 comm="syz.9.5482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1598.461277][T26773] lo speed is unknown, defaulting to 1000 [ 1598.508932][T26772] fido_id[26772]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1598.528179][T26773] virt_wifi0 speed is unknown, defaulting to 1000 [ 1598.645485][T26778] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1598.682530][T26778] random: crng reseeded on system resumption [ 1598.949271][T26778] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1599.208845][ T30] audit: type=1326 audit(2000000171.326:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26770 comm="syz.0.5490" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc0f99cdd9 code=0x0 [ 1599.866010][T19852] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1599.998266][T19852] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1600.067606][T19852] usb 7-1: can't read configurations, error -71 [ 1600.720549][T26798] FAULT_INJECTION: forcing a failure. [ 1600.720549][T26798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1600.962515][T26798] CPU: 0 UID: 0 PID: 26798 Comm: syz.1.5495 Tainted: G L syzkaller #0 PREEMPT(full) [ 1600.962547][T26798] Tainted: [L]=SOFTLOCKUP [ 1600.962553][T26798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1600.962564][T26798] Call Trace: [ 1600.962571][T26798] [ 1600.962578][T26798] dump_stack_lvl+0x100/0x190 [ 1600.962606][T26798] should_fail_ex.cold+0x5/0xa [ 1600.962636][T26798] _copy_from_user+0x2e/0xd0 [ 1600.962665][T26798] memdup_user+0x6b/0xe0 [ 1600.962685][T26798] strndup_user+0x78/0xe0 [ 1600.962704][T26798] __x64_sys_mount+0x136/0x310 [ 1600.962733][T26798] ? __pfx___x64_sys_mount+0x10/0x10 [ 1600.962762][T26798] ? rcu_is_watching+0x12/0xc0 [ 1600.962794][T26798] do_syscall_64+0x10b/0xf80 [ 1600.962817][T26798] ? clear_bhb_loop+0x40/0x90 [ 1600.962840][T26798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.962859][T26798] RIP: 0033:0x7f778ed9cdd9 [ 1600.962874][T26798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.962891][T26798] RSP: 002b:00007f778fb95028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1600.962909][T26798] RAX: ffffffffffffffda RBX: 00007f778f016090 RCX: 00007f778ed9cdd9 [ 1600.962921][T26798] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 1600.962932][T26798] RBP: 00007f778fb95090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.962942][T26798] R10: 0000000000010005 R11: 0000000000000246 R12: 0000000000000001 [ 1600.962951][T26798] R13: 00007f778f016128 R14: 00007f778f016090 R15: 00007fff67253358 [ 1600.962976][T26798] [ 1601.337318][T26790] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1602.789726][ T30] audit: type=1400 audit(2000000174.685:2147): avc: denied { map } for pid=26823 comm="syz.8.5504" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1602.851641][ T30] audit: type=1400 audit(2000000174.685:2148): avc: denied { execute } for pid=26823 comm="syz.8.5504" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1603.067205][ T5615] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1603.346821][ T5615] usb 7-1: Using ep0 maxpacket: 16 [ 1603.363698][T26826] openvswitch: netlink: IP tunnel dst address not specified [ 1603.371086][T26826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1603.384854][T26817] fuse: Bad value for 'fd' [ 1603.388843][ T5615] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1603.423088][ T5615] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1603.490598][ T5615] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1603.776925][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.822567][ T5615] usb 7-1: config 0 descriptor?? [ 1604.033456][T26847] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5509'. [ 1605.253343][ T30] audit: type=1400 audit(2000000176.229:2149): avc: denied { create } for pid=26849 comm="syz.9.5511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 1605.269277][T26850] bridge2: entered allmulticast mode [ 1605.934029][T26863] batman_adv: batadv0: Adding interface: macvtap1 [ 1605.946300][T26863] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.974335][T26863] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1606.703328][T26875] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1606.899301][ T5615] usbhid 7-1:0.0: can't add hid device: -71 [ 1606.917063][ T5615] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1606.955162][ T5615] usb 7-1: USB disconnect, device number 97 [ 1607.065312][ T30] audit: type=1326 audit(2000000178.681:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26881 comm="syz.6.5521" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e1b9cdd9 code=0x7ffc0000 [ 1607.140922][ T30] audit: type=1326 audit(2000000178.681:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26881 comm="syz.6.5521" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e1b9cdd9 code=0x7ffc0000 [ 1607.212752][ T30] audit: type=1326 audit(2000000178.681:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26881 comm="syz.6.5521" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff1e1b9cdd9 code=0x7ffc0000 [ 1607.288262][ T30] audit: type=1326 audit(2000000178.681:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26881 comm="syz.6.5521" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e1b9cdd9 code=0x7ffc0000 [ 1607.315730][ T30] audit: type=1326 audit(2000000178.681:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26881 comm="syz.6.5521" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e1b9cdd9 code=0x7ffc0000 [ 1607.343613][ T30] audit: type=1326 audit(2000000178.681:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26881 comm="syz.6.5521" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff1e1b9cdd9 code=0x7ffc0000 [ 1607.377655][ T30] audit: type=1326 audit(2000000178.681:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26881 comm="syz.6.5521" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e1b9cdd9 code=0x7ffc0000 [ 1607.420875][ T30] audit: type=1326 audit(2000000178.681:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26881 comm="syz.6.5521" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e1b9cdd9 code=0x7ffc0000 [ 1607.469243][ T30] audit: type=1326 audit(2000000178.681:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26881 comm="syz.6.5521" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7ff1e1b9cdd9 code=0x7ffc0000 [ 1607.509594][T26887] fuse: Bad value for 'fd' [ 1608.132953][T26898] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1611.070962][T26921] tipc: Enabling of bearer rejected, already enabled [ 1611.202633][T26924] pim6reg: entered allmulticast mode [ 1611.429496][T26928] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1612.373436][T26938] syzkaller0: entered promiscuous mode [ 1612.384054][T26938] syzkaller0: entered allmulticast mode [ 1613.755606][T26959] sd 0:0:1:0: PR command failed: 1026 [ 1613.759718][T26962] fuse: Bad value for 'fd' [ 1613.781098][T26959] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1613.807809][T26959] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1614.619056][ T29] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1615.045804][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 1615.058164][ T29] usb 7-1: config 1 has too many interfaces: 129, using maximum allowed: 32 [ 1615.068707][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 129 [ 1615.079489][ T29] usb 7-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1615.090584][ T29] usb 7-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 1615.100638][ T29] usb 7-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 1615.110692][ T29] usb 7-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1615.158770][ T29] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1615.217767][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 1615.246761][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1615.250835][T26973] qnx6: unable to read the first superblock [ 1615.310626][T26973] qnx6: unable to read the first superblock [ 1615.322558][T26973] qnx6: unable to read the first superblock [ 1615.346412][T26975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5546'. [ 1615.356511][ T29] usb 7-1: SerialNumber: syz [ 1615.385271][T26961] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1615.405162][T26961] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1615.431913][ T29] cdc_ether 7-1:1.0: missing cdc header descriptor [ 1615.663496][T26959] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1615.695449][T26959] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1615.766986][ T29] cdc_subset 7-1:1.0 usb0: register 'cdc_subset' at usb-dummy_hcd.6-1, Linux Device, 5e:4f:82:75:9a:7f [ 1616.035354][T19864] usb 7-1: USB disconnect, device number 98 [ 1616.075135][T19864] cdc_subset 7-1:1.0 usb0: unregister 'cdc_subset' usb-dummy_hcd.6-1, Linux Device [ 1616.503623][T26994] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1616.506809][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1616.506824][ T30] audit: type=1400 audit(2000000187.515:2181): avc: denied { write } for pid=26980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1616.653263][ T30] audit: type=1400 audit(2000000187.655:2182): avc: denied { write } for pid=26998 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1617.559610][ T30] audit: type=1400 audit(2000000188.507:2183): avc: denied { write } for pid=27002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1617.834935][T19852] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1618.134071][T19852] usb 10-1: Using ep0 maxpacket: 16 [ 1618.162358][T19852] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1618.251417][ T30] audit: type=1400 audit(2000000189.087:2184): avc: denied { write } for pid=27025 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1618.276541][T19852] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1618.300772][T19852] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1618.459696][T27033] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1619.370188][T19852] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1619.467000][T19852] usb 10-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1619.512672][T19852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.585420][T19852] usb 10-1: Product: syz [ 1619.599207][T27038] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1619.608794][T27038] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1619.619870][T27038] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1619.631976][ T30] audit: type=1400 audit(2000000190.425:2185): avc: denied { firmware_load } for pid=27036 comm="syz.1.5557" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1619.736347][T19852] usb 10-1: Manufacturer: syz [ 1619.761853][T19852] usb 10-1: SerialNumber: syz [ 1619.783407][T27040] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1619.829581][T27040] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1619.855098][T27040] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1619.930763][ T30] audit: type=1400 audit(2000000190.715:2186): avc: denied { lock } for pid=27023 comm="syz.8.5555" path="socket:[122424]" dev="sockfs" ino=122424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1620.057975][T19852] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1620.103083][T16224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1620.126335][T16224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1620.138545][T16224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1620.139755][T27050] vivid-000: disconnect [ 1620.160732][T16224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1620.169575][T16224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1620.412174][ T30] audit: type=1400 audit(2000000191.165:2187): avc: denied { read write } for pid=27015 comm="syz.9.5548" name="lp0" dev="devtmpfs" ino=4958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1620.476087][ T30] audit: type=1400 audit(2000000191.165:2188): avc: denied { open } for pid=27015 comm="syz.9.5548" path="/dev/usb/lp0" dev="devtmpfs" ino=4958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1620.956605][T27046] vivid-000: reconnect [ 1621.446637][ T5615] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1621.545749][T27048] lo speed is unknown, defaulting to 1000 [ 1621.577520][T27048] virt_wifi0 speed is unknown, defaulting to 1000 [ 1621.606943][ T5615] usb 2-1: device descriptor read/64, error -71 [ 1621.856745][T27074] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1621.895723][ T5615] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1621.948379][T19858] usb 10-1: USB disconnect, device number 28 [ 1621.964442][T19858] usblp0: removed [ 1622.055732][ T5615] usb 2-1: device descriptor read/64, error -71 [ 1622.180215][ T5615] usb usb2-port1: attempt power cycle [ 1622.257927][T27048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.284441][T27048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.307620][T27048] bridge_slave_0: entered allmulticast mode [ 1622.332959][T27048] bridge_slave_0: entered promiscuous mode [ 1622.368466][T27048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.381755][T27048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.397971][ T50] Bluetooth: hci2: command tx timeout [ 1622.430349][T27048] bridge_slave_1: entered allmulticast mode [ 1622.458349][T27048] bridge_slave_1: entered promiscuous mode [ 1622.675459][ T5615] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1622.754889][ T5615] usb 2-1: device descriptor read/8, error -71 [ 1622.806220][T27048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.028138][ T5615] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1623.046365][T27048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.125591][T27086] SELinux: failed to load policy [ 1623.381170][ T5615] usb 2-1: device descriptor read/8, error -71 [ 1623.509285][ T5615] usb usb2-port1: unable to enumerate USB device [ 1623.564287][T27048] team0: Port device team_slave_0 added [ 1623.585577][T27048] team0: Port device team_slave_1 added [ 1623.673415][T27093] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1623.693755][T27093] random: crng reseeded on system resumption [ 1623.705294][T27048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1623.718805][T27048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1623.746021][T27048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1623.758537][T27093] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1623.775928][T27048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1623.784036][T27048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1623.878080][T27048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1624.078467][T27048] hsr_slave_0: entered promiscuous mode [ 1624.099082][T27048] hsr_slave_1: entered promiscuous mode [ 1624.114192][T27048] debugfs: 'hsr0' already exists in 'hsr' [ 1624.120734][T27048] Cannot create hsr debugfs directory [ 1624.166030][T27098] tipc: Enabled bearer , priority 0 [ 1624.660518][ T50] Bluetooth: hci2: command tx timeout [ 1624.970605][T27096] tipc: Disabling bearer [ 1625.296849][T27048] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.523127][T27048] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.763857][ T29] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 1625.956310][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 1626.164910][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1626.188460][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1626.203043][ T29] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1626.213363][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.222593][T27048] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.244128][ T29] usb 9-1: config 0 descriptor?? [ 1626.376678][T27048] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.742835][ T29] HID 045e:07da: Invalid code 65791 type 1 [ 1626.767669][ T29] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.004B/input/input66 [ 1626.832943][ T50] Bluetooth: hci2: command tx timeout [ 1626.842780][ T29] microsoft 0003:045E:07DA.004B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1626.997684][T27119] fuse: Invalid rootmode [ 1627.024586][T27125] tipc: Enabled bearer , priority 0 [ 1627.082229][T27120] tipc: Disabling bearer [ 1627.167264][T27048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1627.180370][T27048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1627.188741][T27048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1627.237564][T27048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1627.268935][T27048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1627.305001][T27048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1627.314666][T27048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1627.324966][T27048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1627.841292][T19858] usb 9-1: USB disconnect, device number 87 [ 1627.898879][T27048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1627.955434][T27048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1627.995934][T17267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.003142][T17267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.053670][T17267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.060813][T17267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1629.671768][ T50] Bluetooth: hci2: command tx timeout [ 1629.874377][T19852] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1630.038838][T19852] usb 2-1: device descriptor read/64, error -71 [ 1630.120476][T27048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1630.316190][T19852] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1630.351305][T27169] lo speed is unknown, defaulting to 1000 [ 1630.359744][T27169] virt_wifi0 speed is unknown, defaulting to 1000 [ 1631.070275][T27148] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1631.844101][T19852] usb 2-1: device descriptor read/64, error -71 [ 1631.983232][T19852] usb usb2-port1: attempt power cycle [ 1633.501648][T27048] veth0_vlan: entered promiscuous mode [ 1633.574156][T27048] veth1_vlan: entered promiscuous mode [ 1633.654858][T27048] veth0_macvtap: entered promiscuous mode [ 1633.683261][T27190] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1633.696150][T27048] veth1_macvtap: entered promiscuous mode [ 1633.712564][T27190] random: crng reseeded on system resumption [ 1633.753378][T27048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.787460][T27190] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1633.863994][T27048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.909196][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.938969][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.974414][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.998733][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.277637][T17270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.320208][T17270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.920108][T17262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1635.952364][T17262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.347796][T27211] fuse: Bad value for 'rootmode' [ 1638.178809][ T30] audit: type=1400 audit(2000000207.794:2189): avc: denied { append } for pid=27223 comm="syz.8.5594" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1638.298495][T19864] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1638.504187][T19864] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1639.407898][T19864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.436404][T19864] usb 6-1: Product: syz [ 1639.440700][T19864] usb 6-1: Manufacturer: syz [ 1639.455273][T19864] usb 6-1: SerialNumber: syz [ 1639.508905][T19864] usb 6-1: config 0 descriptor?? [ 1640.119092][T19864] usb 6-1: ignoring: probably an ADSL modem [ 1640.388897][T27222] netlink: get zone limit has 4 unknown bytes [ 1640.945580][T27244] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1640.977142][T19864] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1640.994697][T19864] usb 6-1: USB disconnect, device number 46 [ 1641.109297][T27247] FAULT_INJECTION: forcing a failure. [ 1641.109297][T27247] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.122294][T27247] CPU: 1 UID: 0 PID: 27247 Comm: syz.1.5601 Tainted: G L syzkaller #0 PREEMPT(full) [ 1641.122322][T27247] Tainted: [L]=SOFTLOCKUP [ 1641.122329][T27247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1641.122340][T27247] Call Trace: [ 1641.122347][T27247] [ 1641.122354][T27247] dump_stack_lvl+0x100/0x190 [ 1641.122381][T27247] should_fail_ex.cold+0x5/0xa [ 1641.122407][T27247] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1641.122433][T27247] should_failslab+0xc2/0x120 [ 1641.122454][T27247] __kmalloc_noprof+0xe0/0x850 [ 1641.122480][T27247] ? kfree+0x1dd/0x6c0 [ 1641.122508][T27247] tomoyo_realpath_from_path+0xb6/0x690 [ 1641.122539][T27247] tomoyo_path_number_perm+0x23c/0x580 [ 1641.122560][T27247] ? tomoyo_path_number_perm+0x22e/0x580 [ 1641.122583][T27247] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1641.122630][T27247] ? find_held_lock+0x2b/0x80 [ 1641.122648][T27247] ? __fget_files+0x215/0x3d0 [ 1641.122669][T27247] ? hook_file_ioctl_common+0x149/0x410 [ 1641.122695][T27247] ? __fget_files+0x215/0x3d0 [ 1641.122722][T27247] ? __fget_files+0x21f/0x3d0 [ 1641.122748][T27247] security_file_ioctl+0xd3/0x230 [ 1641.122773][T27247] __x64_sys_ioctl+0xb7/0x210 [ 1641.122794][T27247] do_syscall_64+0x10b/0xf80 [ 1641.122818][T27247] ? clear_bhb_loop+0x40/0x90 [ 1641.122840][T27247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.122863][T27247] RIP: 0033:0x7f778ed9cdd9 [ 1641.122879][T27247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.122895][T27247] RSP: 002b:00007f778fbb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1641.122913][T27247] RAX: ffffffffffffffda RBX: 00007f778f015fa0 RCX: 00007f778ed9cdd9 [ 1641.122925][T27247] RDX: 0000200000000240 RSI: 00000000c0405602 RDI: 0000000000000003 [ 1641.122936][T27247] RBP: 00007f778fbb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1641.122947][T27247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.122957][T27247] R13: 00007f778f016038 R14: 00007f778f015fa0 R15: 00007fff67253358 [ 1641.122982][T27247] [ 1641.122990][T27247] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1641.450363][T19855] usb 9-1: new low-speed USB device number 88 using dummy_hcd [ 1641.680814][T27253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1641.915485][T19855] usb 9-1: Invalid ep0 maxpacket: 32 [ 1642.060705][T19855] usb 9-1: new low-speed USB device number 89 using dummy_hcd [ 1642.083801][T27262] fuse: Bad value for 'rootmode' [ 1642.274791][T27267] syzkaller0: entered promiscuous mode [ 1642.282561][T27267] syzkaller0: entered allmulticast mode [ 1642.331535][T19855] usb 9-1: Invalid ep0 maxpacket: 32 [ 1642.463925][T19855] usb usb9-port1: attempt power cycle [ 1643.662077][T19864] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 1643.703647][T19864] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1643.898020][T19852] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1644.571174][T19852] usb 10-1: Using ep0 maxpacket: 16 [ 1644.596039][T19852] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1644.639457][T19852] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1644.689448][T19852] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1644.724309][T27294] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1645.279800][T19852] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1645.293231][T19852] usb 10-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1645.302929][T19852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.311353][T19852] usb 10-1: Product: syz [ 1645.316387][T19852] usb 10-1: Manufacturer: syz [ 1645.324073][T19852] usb 10-1: SerialNumber: syz [ 1645.459128][T27292] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1645.686063][ T5615] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1645.825342][T19852] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1645.982169][ T5615] usb 7-1: Using ep0 maxpacket: 16 [ 1646.008871][ T5615] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.069210][ T5615] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.104824][T27309] openvswitch: netlink: IP tunnel dst address not specified [ 1646.112641][T27309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1646.143472][ T5615] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1646.187668][ T5615] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1646.230845][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.451185][ T5615] usb 7-1: config 0 descriptor?? [ 1647.458595][T19852] usb 10-1: USB disconnect, device number 29 [ 1647.476763][T19852] usblp0: removed [ 1647.653180][ T9] usb 9-1: new low-speed USB device number 91 using dummy_hcd [ 1647.666152][T27296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.682814][T27296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.981488][T27315] fuse: Bad value for 'rootmode' [ 1648.034290][ T9] usb 9-1: Invalid ep0 maxpacket: 32 [ 1648.129242][ T5615] mcp2221 0003:04D8:00DD.004D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1648.167417][T27324] syzkaller0: entered promiscuous mode [ 1648.173368][ T9] usb 9-1: new low-speed USB device number 92 using dummy_hcd [ 1648.180979][T27324] syzkaller0: entered allmulticast mode [ 1648.344861][ T9] usb 9-1: Invalid ep0 maxpacket: 32 [ 1648.363924][ T9] usb usb9-port1: attempt power cycle [ 1648.393503][T27326] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1648.412739][T27326] random: crng reseeded on system resumption [ 1648.430142][T27326] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1648.751178][ T9] usb 9-1: new low-speed USB device number 93 using dummy_hcd [ 1648.772982][T27334] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1649.188632][ T9] usb 9-1: Invalid ep0 maxpacket: 32 [ 1649.241177][ T5615] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1649.306757][T27336] tipc: Enabling of bearer rejected, already enabled [ 1649.390618][T19858] usb 7-1: reset high-speed USB device number 99 using dummy_hcd [ 1649.427442][ T5615] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1649.435682][ T5615] usb 6-1: config 0 has no interface number 0 [ 1649.444418][ T5615] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1649.453640][ T5615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.461791][ T5615] usb 6-1: Product: syz [ 1649.466550][ T5615] usb 6-1: Manufacturer: syz [ 1649.471222][ T5615] usb 6-1: SerialNumber: syz [ 1649.479046][ T5615] usb 6-1: config 0 descriptor?? [ 1649.481669][T27338] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5627'. [ 1649.491933][ T5615] usb 6-1: selecting invalid altsetting 1 [ 1649.659684][ T5615] dvb_ttusb_budget: ttusb_init_controller: error [ 1649.678039][ T5615] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1650.237273][T27330] i2c i2c-1: unsupported multi-msg i2c transaction [ 1650.886495][ T5615] DVB: Unable to find symbol stv0299_attach() [ 1651.418801][T19855] usb 7-1: USB disconnect, device number 99 [ 1652.597553][ T5615] DVB: Unable to find symbol tda8083_attach() [ 1652.684176][ T5615] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1652.833801][ T5615] usb 6-1: USB disconnect, device number 47 [ 1653.344463][ T5615] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1654.894090][ T5615] usb 6-1: Using ep0 maxpacket: 16 [ 1654.900865][ T5615] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1654.911225][ T5615] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1654.926904][ T5615] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1654.963883][ T5615] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1654.979995][ T5615] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1654.999696][ T5615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.008951][ T5615] usb 6-1: Product: syz [ 1655.013532][ T5615] usb 6-1: Manufacturer: syz [ 1655.018242][ T5615] usb 6-1: SerialNumber: syz [ 1655.034858][T27371] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5636'. [ 1655.258193][ T5615] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1655.391121][T27369] fuse: Unknown parameter 'use00000000000000000000' [ 1655.567233][ T5610] usb 9-1: new low-speed USB device number 95 using dummy_hcd [ 1655.621325][T27383] FAULT_INJECTION: forcing a failure. [ 1655.621325][T27383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1655.649850][T27383] CPU: 1 UID: 0 PID: 27383 Comm: syz.1.5638 Tainted: G L syzkaller #0 PREEMPT(full) [ 1655.649876][T27383] Tainted: [L]=SOFTLOCKUP [ 1655.649880][T27383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1655.649886][T27383] Call Trace: [ 1655.649890][T27383] [ 1655.649895][T27383] dump_stack_lvl+0x100/0x190 [ 1655.649912][T27383] should_fail_ex.cold+0x5/0xa [ 1655.649928][T27383] _copy_from_iter+0x1f4/0x1690 [ 1655.649946][T27383] ? __asan_memset+0x23/0x50 [ 1655.649962][T27383] ? __pfx__copy_from_iter+0x10/0x10 [ 1655.649978][T27383] ? __pfx___alloc_skb+0x10/0x10 [ 1655.649999][T27383] netlink_sendmsg+0x808/0xda0 [ 1655.650016][T27383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1655.650029][T27383] ? __might_fault+0x90/0x140 [ 1655.650050][T27383] ____sys_sendmsg+0x9e1/0xb70 [ 1655.650063][T27383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1655.650078][T27383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1655.650101][T27383] ___sys_sendmsg+0x190/0x1e0 [ 1655.650125][T27383] ? __pfx____sys_sendmsg+0x10/0x10 [ 1655.650167][T27383] __sys_sendmsg+0x170/0x220 [ 1655.650179][T27383] ? __pfx___sys_sendmsg+0x10/0x10 [ 1655.650195][T27383] ? rcu_is_watching+0x12/0xc0 [ 1655.650214][T27383] do_syscall_64+0x10b/0xf80 [ 1655.650228][T27383] ? clear_bhb_loop+0x40/0x90 [ 1655.650241][T27383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.650253][T27383] RIP: 0033:0x7f778ed9cdd9 [ 1655.650263][T27383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.650273][T27383] RSP: 002b:00007f778fb95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1655.650284][T27383] RAX: ffffffffffffffda RBX: 00007f778f016090 RCX: 00007f778ed9cdd9 [ 1655.650291][T27383] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1655.650297][T27383] RBP: 00007f778fb95090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.650304][T27383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.650310][T27383] R13: 00007f778f016128 R14: 00007f778f016090 R15: 00007fff67253358 [ 1655.650326][T27383] [ 1655.898473][ T5610] usb 9-1: Invalid ep0 maxpacket: 32 [ 1655.951833][T19864] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1656.037339][ T5610] usb 9-1: new low-speed USB device number 96 using dummy_hcd [ 1656.114144][T19864] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 1656.144257][T19864] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1656.164792][T19864] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 37020, setting to 64 [ 1656.188264][T19864] usb 10-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1656.197860][T19864] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.205961][T19864] usb 10-1: Product: syz [ 1656.208307][ T5610] usb 9-1: Invalid ep0 maxpacket: 32 [ 1656.210615][T19864] usb 10-1: Manufacturer: syz [ 1656.215836][ T5610] usb usb9-port1: attempt power cycle [ 1656.220462][T19864] usb 10-1: SerialNumber: syz [ 1656.222615][T19864] usb 10-1: config 0 descriptor?? [ 1656.240241][T27376] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1656.333189][T27385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5640'. [ 1656.492767][ T30] audit: type=1400 audit(2000000224.938:2190): avc: denied { create } for pid=27375 comm="syz.9.5639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1656.593365][ T5610] usb 9-1: new low-speed USB device number 97 using dummy_hcd [ 1656.636901][ T5610] usb 9-1: Invalid ep0 maxpacket: 32 [ 1656.903428][ T5610] usb 9-1: new low-speed USB device number 98 using dummy_hcd [ 1657.067731][ T5610] usb 9-1: Invalid ep0 maxpacket: 32 [ 1657.148933][ T5610] usb usb9-port1: unable to enumerate USB device [ 1657.153481][T19864] powermate: unknown product id 0240 [ 1657.197896][T19864] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1657.399442][ T5610] usb 6-1: USB disconnect, device number 48 [ 1657.572008][T19864] input: Griffin SoundKnob as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input67 [ 1657.573182][ T5610] usblp0: removed [ 1657.659848][T27400] tipc: Enabled bearer , priority 0 [ 1657.768714][T27403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5642'. [ 1658.287390][ C1] powermate: config urb returned -71 [ 1658.293405][ C1] powermate: config urb returned -71 [ 1658.298831][ C1] powermate: config urb returned -71 [ 1658.304302][ C1] powermate: config urb returned -71 [ 1658.349763][T27403] bridge_slave_1: left allmulticast mode [ 1658.374846][T19864] usb 10-1: USB disconnect, device number 30 [ 1658.380962][ C1] powermate 10-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1658.597251][T27403] bridge_slave_1: left promiscuous mode [ 1658.660562][T27403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.360883][ T5610] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1659.464548][T27403] bridge_slave_0: left allmulticast mode [ 1659.484982][T27403] bridge_slave_0: left promiscuous mode [ 1659.522988][T27403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.728481][ T5610] usb 10-1: Using ep0 maxpacket: 32 [ 1659.745650][ T5610] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.757208][ T5610] usb 10-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1659.760859][T27417] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5647'. [ 1659.766359][ T5610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.790607][ T5610] usb 10-1: config 0 descriptor?? [ 1659.824366][ T5610] rndis_host 10-1:0.0: rndis: master #0/ffff888034dea000 slave #1/0000000000000000 [ 1660.295532][ T5610] usb 10-1: USB disconnect, device number 31 [ 1660.461408][T19864] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1660.632381][T19864] usb 6-1: Using ep0 maxpacket: 32 [ 1660.647183][T19864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.666762][T19864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.676997][T19864] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1660.686933][T19864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.697324][T19864] usb 6-1: config 0 descriptor?? [ 1660.715318][T19864] hub 6-1:0.0: USB hub found [ 1660.776089][T27399] tipc: Disabling bearer [ 1660.792896][T19858] tipc: Node number set to 3087536498 [ 1660.938941][T19864] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1661.035601][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1661.201496][T27437] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1661.823120][T19858] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1661.846790][T19864] hid-generic 0003:046D:C31C.004E: unknown main item tag 0x0 [ 1661.957417][T27441] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5652'. [ 1662.409504][T19858] usb 9-1: Using ep0 maxpacket: 16 [ 1662.451017][T19864] hid-generic 0003:046D:C31C.004E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 1662.928082][T19858] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1662.939805][T19858] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1662.949882][T19858] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1662.963094][T19858] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1662.972586][T19858] usb 9-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1662.981940][T19858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.989991][T19858] usb 9-1: Product: syz [ 1662.994424][T19858] usb 9-1: Manufacturer: syz [ 1662.999032][T19858] usb 9-1: SerialNumber: syz [ 1663.133534][T19864] usb 6-1: reset high-speed USB device number 49 using dummy_hcd [ 1663.263538][T19858] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 99 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1664.006792][T19864] usb 6-1: device descriptor read/all, error -71 [ 1664.457996][ T30] audit: type=1400 audit(2000000232.386:2191): avc: denied { map } for pid=27461 comm="syz.6.5657" path="socket:[126132]" dev="sockfs" ino=126132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1664.885035][T27471] openvswitch: netlink: IP tunnel dst address not specified [ 1664.892597][T27471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1665.116682][T19864] usb 6-1: USB disconnect, device number 49 [ 1668.264421][T19852] usb 9-1: USB disconnect, device number 99 [ 1668.292567][T16224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1668.309413][T16224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1668.319703][T16224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1668.332878][T19852] usblp0: removed [ 1668.366523][T16224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1668.381075][T16224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1668.483107][T27473] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1668.613806][T27506] netlink: 452 bytes leftover after parsing attributes in process `syz.5.5665'. [ 1668.647014][T19849] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1668.668351][ T9] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1668.828547][T19849] usb 2-1: Using ep0 maxpacket: 32 [ 1669.011712][ T9] usb 10-1: config 0 has an invalid interface number: 11 but max is 0 [ 1669.023026][T19849] usb 2-1: config 0 interface 0 altsetting 193 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.055674][ T9] usb 10-1: config 0 has no interface number 0 [ 1669.056356][T19849] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1669.100256][ T9] usb 10-1: config 0 interface 11 altsetting 245 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 1669.107642][T19849] usb 2-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice=2d.00 [ 1669.151393][ T9] usb 10-1: config 0 interface 11 altsetting 245 endpoint 0x87 has invalid maxpacket 9496, setting to 1024 [ 1669.153305][T19849] usb 2-1: New USB device strings: Mfr=253, Product=0, SerialNumber=0 [ 1669.177733][ T9] usb 10-1: config 0 interface 11 has no altsetting 0 [ 1669.192918][ T9] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1669.210235][T19849] usb 2-1: Manufacturer: syz [ 1669.218413][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.251627][T19849] usb 2-1: config 0 descriptor?? [ 1669.279457][ T9] usb 10-1: config 0 descriptor?? [ 1669.296496][T27482] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1669.312429][ T9] keyspan 10-1:0.11: Keyspan 2 port adapter converter detected [ 1669.343972][ T9] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 81 [ 1669.366041][ T9] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 82 [ 1669.384053][ T9] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 1 [ 1669.422857][ T9] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 2 [ 1669.448382][ T9] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 85 [ 1669.470007][ T9] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 5 [ 1669.718989][ T9] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1669.733061][T27481] lo speed is unknown, defaulting to 1000 [ 1669.833652][T27525] openvswitch: netlink: IP tunnel dst address not specified [ 1669.841044][T27525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1669.960437][T19849] usbhid 2-1:0.0: can't add hid device: -71 [ 1669.982831][ T9] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 83 [ 1669.983124][T27481] virt_wifi0 speed is unknown, defaulting to 1000 [ 1670.009503][T19849] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1670.045809][ T9] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 84 [ 1670.071430][ T9] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 3 [ 1670.094658][ T9] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 4 [ 1670.159663][T19849] usb 2-1: USB disconnect, device number 118 [ 1670.192754][ T9] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 86 [ 1670.222055][ T9] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 6 [ 1670.463732][T27532] Bluetooth: MGMT ver 1.23 [ 1671.152224][T27530] netlink: 172 bytes leftover after parsing attributes in process `syz.5.5668'. [ 1671.211633][T16224] Bluetooth: hci3: command tx timeout [ 1671.590228][ T9] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1671.615251][ T9] usb 10-1: USB disconnect, device number 32 [ 1671.866488][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1671.882637][T27542] SELinux: policydb magic number 0x74687465 does not match expected magic number 0xf97cff8c [ 1671.893073][T27542] SELinux: failed to load policy [ 1672.635432][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1672.649071][ T9] keyspan 10-1:0.11: device disconnected [ 1672.815817][T27481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.823052][T27481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.831383][T27481] bridge_slave_0: entered allmulticast mode [ 1672.839442][T27481] bridge_slave_0: entered promiscuous mode [ 1672.847499][T27481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.855585][T27481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.864742][T27481] bridge_slave_1: entered allmulticast mode [ 1672.883574][T27481] bridge_slave_1: entered promiscuous mode [ 1673.029429][ T9] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1673.213342][T27481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1673.241987][T27481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1673.252726][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1673.259286][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1673.274010][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1673.287038][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1673.297010][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1673.307079][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1673.321310][ T9] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1673.330734][ T9] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1673.339042][ T9] usb 10-1: Manufacturer: syz [ 1673.352823][ T9] usb 10-1: config 0 descriptor?? [ 1673.375354][T27481] team0: Port device team_slave_0 added [ 1673.384960][T27481] team0: Port device team_slave_1 added [ 1673.412513][T27481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1673.419663][T27481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.445982][T16224] Bluetooth: hci3: command tx timeout [ 1673.451455][T27481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1673.463464][T27481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1673.470458][T27481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.497328][T27481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.541998][T27481] hsr_slave_0: entered promiscuous mode [ 1673.548315][T27481] hsr_slave_1: entered promiscuous mode [ 1673.554467][T27481] debugfs: 'hsr0' already exists in 'hsr' [ 1673.560199][T27481] Cannot create hsr debugfs directory [ 1673.650970][ T9] rc_core: IR keymap rc-hauppauge not found [ 1673.678719][ T9] Registered IR keymap rc-empty [ 1673.709911][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.750443][T27562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1673.764342][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.897245][T27565] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 1674.270320][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1674.305738][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input68 [ 1674.347682][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1674.385605][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1674.428738][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1674.460118][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1674.492725][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1674.513044][T27481] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.525410][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1674.545760][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1674.603619][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1674.631156][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1674.653165][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1674.676039][ T9] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1674.686043][ T9] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1674.755511][ T9] usb 10-1: USB disconnect, device number 33 [ 1674.925310][T27481] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.158698][T27481] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.236332][T27579] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1675.270252][T27579] random: crng reseeded on system resumption [ 1675.395544][T27577] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1675.530096][T27581] syz_tun: entered promiscuous mode [ 1675.560341][T27581] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1675.667771][T16224] Bluetooth: hci3: command tx timeout [ 1676.154302][T27481] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.684949][T27600] openvswitch: netlink: IP tunnel dst address not specified [ 1677.692560][T27600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1677.908124][T16224] Bluetooth: hci3: command tx timeout [ 1678.207523][T27481] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1678.873693][T27481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1679.130707][T27609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5683'. [ 1679.193361][T27481] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1679.378608][ T30] audit: type=1400 audit(2000000246.358:2192): avc: denied { unmount } for pid=16145 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1680.105143][T27481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1680.124585][T27481] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1680.176681][T27481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1680.188104][T27481] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1680.213606][T27481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1680.405878][T27481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.408794][T27634] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1680.446953][T27481] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.478333][T17264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.485520][T17264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.507764][ T9587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.514936][ T9587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1680.626107][ T5610] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1680.796998][ T5610] usb 6-1: Using ep0 maxpacket: 32 [ 1680.804213][ T5610] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1680.821132][ T5610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.849401][ T5610] usb 6-1: config 0 descriptor?? [ 1680.868794][ T5610] as10x_usb: device has been detected [ 1680.884348][ T5610] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1681.038040][ T5610] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1681.124333][T27632] netlink: 49 bytes leftover after parsing attributes in process `syz.5.5689'. [ 1681.141284][T27632] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5689'. [ 1681.191417][T27644] ------------[ cut here ]------------ [ 1681.196963][T27644] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1681.196972][T27644] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x94f/0x1b10, CPU#0: syz.5.5689/27644 [ 1681.212850][T27644] Modules linked in: [ 1681.216748][T27644] CPU: 0 UID: 0 PID: 27644 Comm: syz.5.5689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1681.227668][T27644] Tainted: [L]=SOFTLOCKUP [ 1681.231966][T27644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1681.242057][T27644] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 1681.247509][T27644] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d b6 4b 05 45 85 f6 75 13 48 8d 3d b1 e2 4e 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 1681.267357][T27644] RSP: 0018:ffffc90003d67a50 EFLAGS: 00010246 [ 1681.273433][T27644] RAX: 0000000000000003 RBX: ffff888054ee0b30 RCX: 1ffffffff21afadc [ 1681.281406][T27644] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90db0360 [ 1681.289466][T27644] RBP: ffffc90003d67bc0 R08: 0000000000000001 R09: 0000000000000000 [ 1681.297423][T27644] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1681.305412][T27644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1681.313398][T27644] FS: 00007f612ca4a6c0(0000) GS:ffff888124373000(0000) knlGS:0000000000000000 [ 1681.322326][T27644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1681.328900][T27644] CR2: 0000563c6ec787d0 CR3: 000000006298b000 CR4: 00000000003526f0 [ 1681.336880][T27644] Call Trace: [ 1681.340150][T27644] [ 1681.341917][T27632] netlink: 49 bytes leftover after parsing attributes in process `syz.5.5689'. [ 1681.343076][T27644] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 1681.357651][T27644] ? __mutex_lock+0x26d/0x1b10 [ 1681.362504][T27644] ? dmx_section_feed_start_filtering+0x56/0x660 [ 1681.368877][T27644] ? find_held_lock+0x2b/0x80 [ 1681.373564][T27644] ? __pfx___mutex_lock+0x10/0x10 [ 1681.378681][T27644] ? __pfx___mutex_lock+0x10/0x10 [ 1681.383707][T27644] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1681.389399][T27644] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 1681.395034][T27644] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 1681.400576][T27644] dmx_section_feed_start_filtering+0x3a8/0x660 [ 1681.406836][T27644] dvb_dmxdev_filter_start+0x767/0xdd0 [ 1681.412289][T27644] dvb_demux_do_ioctl+0xe64/0x1200 [ 1681.417407][T27644] dvb_usercopy+0x167/0x340 [ 1681.421909][T27644] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1681.427477][T27644] ? __pfx_dvb_usercopy+0x10/0x10 [ 1681.432521][T27644] ? selinux_file_ioctl+0x13b/0x290 [ 1681.437711][T27644] ? selinux_file_ioctl+0xb6/0x290 [ 1681.442848][T27644] dvb_demux_ioctl+0x29/0x40 [ 1681.447437][T27644] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1681.448714][T19864] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1681.452737][T27644] __x64_sys_ioctl+0x18e/0x210 [ 1681.465101][T27644] do_syscall_64+0x10b/0xf80 [ 1681.469677][T27644] ? clear_bhb_loop+0x40/0x90 [ 1681.474441][T27644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.480338][T27644] RIP: 0033:0x7f612bb9cdd9 [ 1681.484764][T27644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1681.504389][T27644] RSP: 002b:00007f612ca4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1681.512822][T27644] RAX: ffffffffffffffda RBX: 00007f612be16090 RCX: 00007f612bb9cdd9 [ 1681.520782][T27644] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 1681.528758][T27644] RBP: 00007f612bc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1681.536744][T27644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1681.544717][T27644] R13: 00007f612be16128 R14: 00007f612be16090 R15: 00007ffd26be8f28 [ 1681.552993][T27644] [ 1681.556100][T27644] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1681.563360][T27644] CPU: 0 UID: 0 PID: 27644 Comm: syz.5.5689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1681.574277][T27644] Tainted: [L]=SOFTLOCKUP [ 1681.578586][T27644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1681.588633][T27644] Call Trace: [ 1681.591889][T27644] [ 1681.594801][T27644] dump_stack_lvl+0x100/0x190 [ 1681.599460][T27644] vpanic+0x552/0x970 [ 1681.603418][T27644] ? __pfx_vpanic+0x10/0x10 [ 1681.607896][T27644] ? lock_release+0x245/0x310 [ 1681.612574][T27644] panic+0xd1/0xe0 [ 1681.616269][T27644] ? __pfx_panic+0x10/0x10 [ 1681.620664][T27644] check_panic_on_warn.cold+0x19/0x34 [ 1681.626010][T27644] ? __mutex_lock+0x94f/0x1b10 [ 1681.630752][T27644] __warn.cold+0x191/0x328 [ 1681.635144][T27644] __report_bug+0x296/0x3d0 [ 1681.639636][T27644] ? __mutex_lock+0x94f/0x1b10 [ 1681.644379][T27644] ? __pfx___report_bug+0x10/0x10 [ 1681.649381][T27644] ? register_lock_class+0x40/0x560 [ 1681.654560][T27644] report_bug_entry+0xe1/0x290 [ 1681.659300][T27644] ? __mutex_lock+0x956/0x1b10 [ 1681.664042][T27644] handle_bug+0x1cd/0x2a0 [ 1681.668353][T27644] exc_invalid_op+0x17/0x50 [ 1681.672839][T27644] asm_exc_invalid_op+0x1a/0x20 [ 1681.677674][T27644] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 1681.683024][T27644] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d b6 4b 05 45 85 f6 75 13 48 8d 3d b1 e2 4e 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 1681.702606][T27644] RSP: 0018:ffffc90003d67a50 EFLAGS: 00010246 [ 1681.708651][T27644] RAX: 0000000000000003 RBX: ffff888054ee0b30 RCX: 1ffffffff21afadc [ 1681.716598][T27644] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90db0360 [ 1681.724548][T27644] RBP: ffffc90003d67bc0 R08: 0000000000000001 R09: 0000000000000000 [ 1681.732493][T27644] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1681.740448][T27644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1681.748418][T27644] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 1681.754032][T27644] ? __mutex_lock+0x26d/0x1b10 [ 1681.758785][T27644] ? dmx_section_feed_start_filtering+0x56/0x660 [ 1681.765093][T27644] ? find_held_lock+0x2b/0x80 [ 1681.769743][T27644] ? __pfx___mutex_lock+0x10/0x10 [ 1681.774747][T27644] ? __pfx___mutex_lock+0x10/0x10 [ 1681.779764][T27644] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1681.785382][T27644] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 1681.791002][T27644] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 1681.796436][T27644] dmx_section_feed_start_filtering+0x3a8/0x660 [ 1681.802672][T27644] dvb_dmxdev_filter_start+0x767/0xdd0 [ 1681.808116][T27644] dvb_demux_do_ioctl+0xe64/0x1200 [ 1681.813204][T27644] dvb_usercopy+0x167/0x340 [ 1681.817689][T27644] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1681.823206][T27644] ? __pfx_dvb_usercopy+0x10/0x10 [ 1681.828212][T27644] ? selinux_file_ioctl+0x13b/0x290 [ 1681.833401][T27644] ? selinux_file_ioctl+0xb6/0x290 [ 1681.838502][T27644] dvb_demux_ioctl+0x29/0x40 [ 1681.843069][T27644] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1681.848350][T27644] __x64_sys_ioctl+0x18e/0x210 [ 1681.853097][T27644] do_syscall_64+0x10b/0xf80 [ 1681.857687][T27644] ? clear_bhb_loop+0x40/0x90 [ 1681.862340][T27644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.868209][T27644] RIP: 0033:0x7f612bb9cdd9 [ 1681.872597][T27644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1681.892371][T27644] RSP: 002b:00007f612ca4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1681.900759][T27644] RAX: ffffffffffffffda RBX: 00007f612be16090 RCX: 00007f612bb9cdd9 [ 1681.908705][T27644] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 1681.916652][T27644] RBP: 00007f612bc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1681.924598][T27644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1681.932560][T27644] R13: 00007f612be16128 R14: 00007f612be16090 R15: 00007ffd26be8f28 [ 1681.940511][T27644] [ 1681.943779][T27644] Kernel Offset: disabled [ 1681.948088][T27644] Rebooting in 86400 seconds..