last executing test programs: 6m3.079532917s ago: executing program 1 (id=920): r0 = syz_usb_connect$hid(0x5, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406d0488c0000000000001090224000100005000090400fe010300000009210400000122240009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="40062400000024113125417fa88240a93ace11364bad05adfc"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$uac1(0x4, 0xd5, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x990, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x5, 0x80, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x11}, [@selector_unit={0x7, 0x24, 0x5, 0x5, 0xd1, "e812"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8b, 0x98, 0x0, 0xd, 0x8}, @as_header={0x7, 0x24, 0x1, 0x6, 0xee}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0x6, 0xdb, "c9295053c59e3bae"}, @as_header={0x7, 0x24, 0x1, 0xff, 0xb, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x1, 0x8, {0x7, 0x25, 0x1, 0x0, 0xc, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0xfff1, 0x7}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x4, 0x5, 0x7, 'O', "c59a07"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf, 0x4, 0x9, 0x6, "28ee"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x0, 0x5f, "70f45d"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x1a, 0x2, "ed21", "d6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x3, 0xfe, {0x7, 0x25, 0x1, 0xc, 0x2b, 0x8}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x9, 0xdd, 0x3, 0x8, 0x5}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x43, 0x8, 0x3, 0x1, 0x40}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x404}}, {0xa7, &(0x7f0000000200)=@string={0xa7, 0x3, "6442b6f5b0f102068afcaecf1b24ccb4acfd1b57b980c7b9587e9883600f88d5081b8d5af79a3460135537f43751a391b7ca1435d04c24325d7ae8f90bdef1a6d7fbc040b7179eb16daa7390a60e5ee988df6a0bd22ac0e83934b0bdc96922e5f06758e0812d344e581bca8c601fd5d51a4e7c397b8925d62916db6f0940c695b843d3b16c927499ffd545da688c97dd7de7257ff20111dcbfbc6e9235c3d54365ccd8e804"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000500)={0x14, &(0x7f00000003c0)={0x40, 0x1, 0xbf, {0xbf, 0x24, "77b8b8328b10ee0cdbb1dd46883762f7916c6331103d8139afd32e70ffc0911abc5433036010d9ca576c28d5c8c99345ad5ff833d15d372427815ff92cd8c991894c485cc384ccf8be5c319b4d0c9f0483a3298428287bf5f6256550bc689fd4d2c744a70c4665f406f76668a49fda9ded74a1ed3b3e1d22d21b8394498c96b3ada25328d4f3367f058a026d86941d982768977c528bff2c2993596c3d50470d7414319af9766767dbedc31989a359b3fb331530883e7330ec8a495844"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x40, 0xb, 0x72, "7d92111c6b570ea022c84e4de331200f288406eb4b7a452c7e12f9282462c26bdcdda2b92c4af58710c4645d4786841b018839cd16e746b1b0c1b3da5afd723f79e8ad15d754036b561757359e6f30eff7e39f8165057c1fa1dbef2a83ede2b70cd92bcbabd4b8d2e7bfb06cd8c24e7b537a"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x81, 0x1, ']'}, &(0x7f0000000680)={0x20, 0x82, 0x3, "6d916c"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "15"}, &(0x7f0000000700)={0x20, 0x84, 0x3, "ef2c5c"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "2ca457"}}) 6m0.751637613s ago: executing program 1 (id=926): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000200)=0x2, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e1f, @rand_addr=0x64010101}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = getpid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x3) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x194) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000301, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0/file0'}, 0x11) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1bb50}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) 6m0.523299732s ago: executing program 1 (id=928): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x8936, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000180)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r8, 0x1}}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 5m59.493785911s ago: executing program 1 (id=934): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x1d9) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000240)={0x10001, 0x402000, 0x1000000, 0xfffffff8, 0xc}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000400)={0xa54, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f, 0x1d}}}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x360, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffe}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x17}]}, {0x2f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x21c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x144, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x5}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x3, 0x2}, {0x6}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x7}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x2}, {0x0, 0x2}, {0x3, 0xa}, {0x3, 0x9}, {0x1, 0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x7, 0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x3, 0x7}, {0x0, 0x6}, {0x6, 0x3}, {0x7, 0x6}, {0x5, 0x2}, {0x1, 0x8}, {0x7}, {0x0, 0xa}, {0x2, 0x6}, {0x3, 0x5}, {0x4, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0x6}, {0x7, 0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x2, 0xa}, {0x1, 0x7}, {0x1}, {0x7}, {0x0, 0x3}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x7}, {0x0, 0x6}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x3}, {0x2, 0x6}, {0x2}, {0x2}, {0x2, 0x6}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x401, 0x2, 0xa5a, 0x6, 0x9, 0x101, 0x9]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x1b, 0x36, 0x1b, 0x18, 0xb, 0x12, 0x30, 0x1b, 0x30, 0x3, 0x2, 0xc, 0x36, 0x3, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x4, 0xa}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x2}, {0x1, 0x9}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x9}, {0x6, 0x8}, {0x5}, {0x1, 0xa}, {0x1, 0x2}, {0x2, 0x4}, {0x2, 0xa}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x4}, {0x5, 0x2}, {0x4, 0x2}, {0x4, 0x1}, {0x2, 0x7}, {0x1, 0x5}, {0x2, 0xa}, {0x7}, {0x2, 0x8}, {0x2, 0x4}, {0x1, 0x7}, {0x7, 0x2}, {}, {0x7, 0x9}, {0x3, 0x8}, {0x4, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x2, 0x3}, {0x7, 0xa}, {0x6, 0x5}, {0x5, 0x5}, {0x2, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x2, 0xa}, {0x6, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x3, 0x1}, {}, {0x6, 0x7}, {0x2, 0x9}, {0x5}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x1}, {0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x9, 0x3, 0xff, 0x9, 0x401, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x8, 0x80, 0xfffb, 0x2, 0xe000, 0x400]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1d, 0x19, 0x60, 0x18, 0x30, 0x5, 0x7b, 0x9, 0x4, 0x1, 0x24, 0x9, 0x60, 0x1b, 0x48, 0x30, 0xb, 0x1b, 0x3, 0x6, 0x48, 0x12, 0x24, 0x74, 0x9, 0x6, 0x1b]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x2, 0x1}, {0x1, 0x5}, {0x4}, {0x6, 0x6}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x2}, {0x4, 0x2}, {0x4, 0x8}, {0x1, 0x7}, {}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0x9}, {0x5}, {0x4, 0x3}, {0x5, 0x6}, {0x1}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x3}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0x8}, {0x5, 0x7}]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x12, 0x3, 0x60, 0x24, 0x5, 0x4a, 0x48, 0x6c, 0x28, 0x1b, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0xa}, {0x3, 0x3}, {0x7, 0x6}, {0x1}, {0x1, 0x8}, {0x2, 0x4}, {0x1}, {0x4, 0x7}, {0x7, 0x8}, {0x7, 0x3}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x7, 0x2}, {0x6, 0x9}, {0x5, 0x9}, {0x1, 0x4}, {0x4, 0x8}, {0x5, 0x3}, {0x5, 0x2}, {0x2, 0x8}, {0x3, 0x8}, {0x4, 0x2}, {0x1, 0x9}, {0x7, 0x3}, {0x5, 0x5}, {0x6, 0x2}, {0x1, 0x3}, {0x0, 0xa}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x9}, {0x4, 0x4}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0x1}, {0x7, 0x2}, {0x5, 0x7}, {0x4, 0xa}, {0x7, 0x7}, {0x5, 0x2}, {0x2, 0x6}, {0x2, 0x8}, {0x0, 0x1}, {0x4, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x3}, {0x5, 0x5}, {}, {0x7, 0x5}, {0x6, 0x7}, {0x3, 0xa}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x1}, {0x3, 0x2}, {0x5, 0x2}, {0x7}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x6, 0x0, 0x631e, 0x1800, 0x9, 0x0, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3}, {0x5, 0x3}, {0x7}, {0x4, 0x8}, {0x5, 0x9}, {0x4, 0x3}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x1}, {0x5, 0x8}]}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7}, {0x4, 0x5}, {0x4, 0x4}, {0x7, 0x1}, {0x2, 0x18}, {0x5, 0x4}, {0x6, 0x7}, {0x6, 0x9}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6}, {0x7, 0x5}, {0x4, 0x7}, {0x5, 0x7}, {0x2}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x4}, {0x3, 0x8}, {0x5, 0x1}, {0x3, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x3, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x7}, {0x3, 0x6}, {0x2, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {}, {0x4, 0x5}, {}, {0x7, 0xa}, {0x1, 0x1}, {0x3, 0xa}, {0x3, 0x2}, {0x4, 0x6}, {0x6, 0x9}, {0x4, 0x2}, {0x2, 0x3}, {0x4, 0xa}, {0x4, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x3, 0x1}, {0x5, 0x6}, {0x5, 0x1}, {0x1, 0x7}, {0x6}, {0x4, 0x4}, {0x0, 0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x7}, {0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x3, 0x9}, {0x4}, {0x6, 0x4}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x7}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x30, 0xc, 0x16, 0x36, 0x1b, 0x36, 0xc]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x5, 0x2}, {0x3, 0x9}, {0x7, 0x5}, {0x2, 0x7}, {0x5, 0x7}, {0x4, 0x2}, {0x0, 0x4}, {0x7}, {0x2, 0x4}, {0x7, 0xa}, {0x5, 0x5}, {0x3, 0x8}, {0x5, 0x1}, {0x6, 0x3}, {0x7, 0x5}, {0x4, 0x5}, {0x4, 0x3}, {0x3, 0x5}, {0x6, 0x4}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x4, 0x6}, {0x7, 0x3}, {0x0, 0x1}, {0x2, 0x2}, {0x1, 0x4}, {0x6}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0xa}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x2, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x60, 0x16, 0x24, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x38d0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x69c, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x1000, 0x7, 0x0, 0x6, 0x4, 0x3ff, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x7, 0xf5d2, 0x1, 0x3d, 0x3ff, 0xe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x3}, {0x1, 0x9}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x7}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x7}, {0x6}, {0x4, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x1, 0x3}, {0x0, 0x7}, {0x3, 0x9}, {0x3, 0x9}, {0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x6, 0x1}, {0x5, 0x9}, {0x7, 0x5}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0x4}, {0x7, 0xa}, {0x7, 0x4}, {0x7, 0x7}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0x8}, {0x1, 0x3}, {0x2, 0x3}, {0x2, 0x1}, {0x4, 0x4}, {0x7, 0x3}, {0x5, 0xa}, {0x2}, {0x7, 0x1}, {0x5, 0x8}, {0x4, 0x4}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x6}, {0x6, 0x8}, {0x5, 0x4}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0x6}, {0x7, 0x3}, {0x6, 0x1}, {0x5, 0x3}, {0x7, 0x7}, {0x7}, {0x2, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x6, 0x8}, {0x2, 0x9}, {0x7, 0x6}, {0x7, 0x8}, {0x7, 0x6}, {0x5, 0x6}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x3ff, 0x1, 0x3ff, 0x6, 0x7fff, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xbd, 0xaa, 0x7, 0xd149, 0x7, 0x405, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9200, 0x3, 0x3, 0x2, 0x8, 0x3, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x753, 0x8, 0x7, 0x0, 0x7fff, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x6}, {0x3, 0x6}, {0x3, 0xa}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0x8}, {0x6, 0x2}, {0x1, 0x8}, {0x3, 0xa}, {0x1}, {0x4}, {0x2, 0x4}, {0x3, 0x6}, {0x1, 0x5}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x46}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x260, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x6, 0x8001, 0x2, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x5}, {0x0, 0xa}, {0x5, 0x2}, {0x7, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0x1}, {0x6, 0x9}, {0x2, 0x2}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x9}, {0x2, 0x6}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x6}, {0x7, 0x5}, {0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x1}, {0x2, 0x6}, {0x5, 0x2}, {0x5, 0x5}, {0x2, 0x5}, {0x0, 0x5}, {0x3, 0xa}, {0x3, 0x8}, {0x3, 0x6}, {0x1}, {0x3, 0x3}, {0x5, 0x3}, {0x4, 0x8}, {0x6, 0x2}, {0x2}, {0x2, 0x5}, {0x4, 0x7}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x6}, {0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x6}, {0x6, 0x9}, {0x6, 0x6}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x774, 0xffff, 0x5, 0x5, 0x7, 0x7, 0xce7a, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xe6, 0x1, 0x0, 0x8, 0x152, 0xff05, 0x3]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0xffff, 0x1, 0x6e, 0x8bcd, 0x2, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x6, 0x8000, 0x1, 0x1, 0x2, 0x8, 0xaa5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x8, 0x1000, 0x8, 0x1000, 0x6355, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x93, 0x4, 0x2, 0xb, 0x1, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x2, 0x2, 0x80, 0x9, 0x7ff, 0x8, 0x4]}}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x6}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x5, 0x3}, {0x1, 0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x1b, 0x2, 0x2d1d, 0x400, 0xf9d1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xd8, 0x0, 0x2, 0x3, 0x8, 0x80, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4e05, 0x1ff, 0x7fff, 0x0, 0x8, 0x0, 0x7bef, 0x3]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x4, 0x5}, {0x7, 0xa}, {0x7, 0x3}, {0x5, 0x1}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x2}, {0x2}, {0x5, 0x3}, {0x3}, {0x6, 0x8}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x3}, {0x7, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0x6}, {0x5, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x5}, {0x1, 0x9}, {0x6, 0xa}, {0x2, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0xa}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0x8}, {0x2, 0x7}, {0x6, 0xa}, {0x5, 0x9}, {0x0, 0x8}, {0x6}, {0x4}, {0x5, 0x6}, {0x5, 0x2}, {0x7, 0xa}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x7}, {0x7}, {0x0, 0x8}, {0x3, 0xa}, {0x0, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x3, 0x6}, {0x2, 0x8}, {0x1}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x7, 0x1}, {0x3, 0x9}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x1b, 0x60, 0x36, 0x24, 0xb, 0x4, 0x18, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x6}, {0x0, 0x8}, {0x2, 0x1}, {0x0, 0x16}, {0x6, 0x6}, {0x6, 0xa}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x2, 0x3}, {0x1}, {}, {0x0, 0x1}, {0x7, 0x5}, {0x6, 0x7}, {0x5, 0x2}, {0x7, 0xa}, {0x6, 0x6}, {0x2}, {0x3, 0x2}, {0x6}, {0x3, 0x6}, {0x6, 0xa}, {0x4, 0xa}, {}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x7}, {0x6, 0x2}, {0x4}, {0x1}, {0x3, 0x9}, {0x4, 0x3}, {0x5, 0x1}, {0x3, 0x3}, {0x5, 0x2}, {0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x4, 0x7}, {0x6, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x1, 0x10, 0xfff7, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1, 0x4, 0xb8c1, 0x0, 0x5e84, 0x937, 0xfff8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x25c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x8}, {0x3}, {0x5, 0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0x8}, {0x5}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x5}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0x4}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x3}, {0x5, 0x7}, {0x6, 0x8}, {0x2, 0x8}, {0x6, 0x1}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x0, 0x4}, {0x1}, {0x4, 0x4}, {0x2, 0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x2, 0x2}, {0x3, 0x4}, {0x0, 0x8}, {0x4, 0xa}, {0x6, 0x1}, {0x3, 0x2}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x8}, {0x6}, {0x6, 0x9}, {0x2, 0x5}, {0x2, 0x2}, {0x2, 0x2}, {0x1, 0x5}, {0x4}, {0x3}, {0x4, 0x1}, {0x5, 0x9}, {0x4, 0x3}, {0x4, 0x9}, {0x2, 0x6}, {0x6, 0x3}, {0x0, 0x2}, {0x7, 0x3}, {0x3, 0x2}, {0x3, 0x5}, {0x3, 0xa}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x6, 0x6}, {0x3, 0x8}, {0x5, 0x8}, {0x3, 0x5}, {0x6, 0x5}, {0x4}, {0x0, 0x6}, {0x3, 0xa}, {0x7, 0x2}, {0x6, 0x4}, {0x3, 0x6}, {0x4, 0xa}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x6, 0x5}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0x4}, {0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x3, 0x7}, {0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {}, {0x4, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x8}, {0x7, 0x3}, {0x2, 0xa}, {0x5, 0x5}, {0x5}, {0x1, 0x8}, {}, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x7}, {0x4, 0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x4}, {0x4}, {0x7, 0x2}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x7}, {0x6, 0x9}, {0x3, 0xa}, {0x6, 0x1}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x6c, 0x1b, 0xb, 0xb, 0x16, 0x18, 0x5, 0x1, 0xc, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x6, 0x3, 0x401, 0x10, 0x3, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x6}, {0x6, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x4}, {}, {0x3, 0xa}, {0x3}, {0x4, 0x6}, {0x1, 0x6}, {}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x3}, {0x5}, {0x3, 0x4}, {0x5, 0x8}, {0x7, 0x9}, {0x4, 0x8}, {0x0, 0x1}, {0x2, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x6, 0x9}, {0x4, 0x7}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0xa}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x3}, {0x6, 0x6}, {0x2, 0x6}, {0x5, 0x5}, {0x2, 0x8}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x6, 0x1}, {0x3, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x1, 0x8}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1, 0x1b, 0x12, 0x6, 0x4, 0x24]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x1}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x5}, {0x7, 0x6}, {0x0, 0x7}, {}, {0x2, 0x4}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x7}, {0x0, 0x4}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x0, 0x4}, {0x6, 0x1}, {0x3, 0x3}, {}, {0x4, 0x8}, {0x4, 0x6}, {0x5, 0x3}, {0x3, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x5, 0x5}, {0x7, 0x1}, {0x2, 0x7}, {0x3}, {0x7, 0x2}, {0x5, 0x3}, {0x7, 0x4}, {0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x5}, {0x3, 0x5}, {0x5, 0x8}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0xffff, 0xcd, 0x5, 0xb, 0x1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x7}, {0x1, 0x8}, {0x4, 0x4}, {0x4, 0x1}, {0x7, 0x6}, {0x4, 0x2}, {0x5, 0x2}, {0x3, 0x6}]}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x0, 0x2, 0x48, 0x4, 0x24, 0x6, 0x3, 0xc, 0x6c, 0x30, 0x5f, 0x30]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0xb, 0x9]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3e, 0x4, 0xb, 0x4, 0x1b, 0x1, 0x24, 0x16, 0x18, 0x4, 0xc, 0xc, 0x72, 0x30, 0x24, 0x72, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x8}, {0x2, 0x2}, {0x1}, {0x1, 0x2}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x3, 0x9, 0x18, 0x5, 0x60, 0x2, 0x12, 0x24]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x8}, {0x3, 0x9}, {0x6}, {0x0, 0x8}, {0x0, 0xa}, {}, {0x2}, {0x0, 0x3}, {0x3, 0xa}, {0x4, 0x9}, {}, {0x0, 0x7}, {0x3, 0x8}, {0x1, 0x2}, {0x2, 0x5}, {0x6, 0x7}, {0x1, 0xf}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x6}, {0x4, 0x3}, {0x2, 0xa}, {0x6}, {0x5, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x5}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x4}, {0x4, 0x7}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x3, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x571599c8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}]}]}]}, 0xa54}, 0x1, 0x0, 0x0, 0x84}, 0x4004) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x4, "5660359c3245d1c43317afad0933ed513a7700"}) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 5m59.080443343s ago: executing program 1 (id=937): r0 = io_uring_setup(0x3c93, &(0x7f0000000100)={0x0, 0x56ca, 0x1000, 0x6, 0x3}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) accept(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m58.391636829s ago: executing program 1 (id=938): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x40040) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e", 0x48}], 0x2}, 0x0) 5m58.240976737s ago: executing program 32 (id=938): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x40040) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e", 0x48}], 0x2}, 0x0) 4m27.853466837s ago: executing program 3 (id=1240): socket$inet6(0xa, 0x3, 0x3c) fsopen(0x0, 0x1) clock_gettime(0x3, &(0x7f0000000040)) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x100000004]}, 0x23, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x18, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x5000) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r3, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x50, 0x5, 0xa, 0x6766}, {0x20, 0xfe, 0x20, 0xfffff038}, {0x6, 0xfc, 0x40, 0x2}]}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) 4m27.33135469s ago: executing program 3 (id=1241): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000009c0), 0x18400, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$vcsu(&(0x7f0000000640), 0x6, 0x800) ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0xfffffffffffffffd) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80c1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x817, 0x70bd25, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000002e00090027bc7000000000000400000004001979e10017"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) socket$igmp(0x2, 0x3, 0x2) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r3, 0x303, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000006}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000) r9 = dup3(0xffffffffffffffff, r1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@generic, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/175, 0xaf}], 0x1, &(0x7f00000003c0)=""/126, 0x7e}, 0x2062) setsockopt$inet6_int(r9, 0x29, 0x42, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r9, 0xc4c03d12, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) mknod(&(0x7f0000000680)='./file0\x00', 0x2a2, 0x1) connect$inet(r10, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r10, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000600)={0x2, 'bond_slave_0\x00', {0x7fff}, 0xff}) 4m26.983771219s ago: executing program 3 (id=1244): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000012001901000000000000000228"], 0x28}}, 0x10) 4m23.168692783s ago: executing program 3 (id=1257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffffaa519b89fb13370385245f265e7324f9658d1a6f1f617220010000001300000085000000050000009500000000000000266ac4a48c18"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x10010) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000180)=0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') capset(&(0x7f0000000380)={0x20071026, r3}, &(0x7f0000000680)={0x0, 0x4289c812, 0xbf, 0x3, 0x1}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={0x1f8, 0xa, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_EXPRESSIONS={0x190, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x128, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x118, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xed, 0x3, "3d82a4e6aa128c7c1e2099bd5e3f5155b5ef828c2629d1a681a74c0d70ccb40314cd06cb742f9015741c584bece3e1cb748534779d727fe3350f0f0647a5237fdbf732ffeb4125a8b89f15dfa6fa41d31d34ecf89e70212a53f016330545dee27f9aafd4181ae86acf00fa2f56382fb8c8a41daef888c4bc3ffc2223526844c90adccf83159ab56f41ad62b48fa4dc3cb996c6d74a1528bba643887f11c419ccdd286425119d9d1a787cdabb500a9506b2874f85bc37228962bf9b23574de65a9016bc36033ecb0a59a02ae29558f6318d0f74b6fb25b04642ea31de3e69d3a4702bb1826807026318"}, @NFTA_TARGET_INFO={0x21, 0x3, "44b3f27093cf0130e1433ce283e4093abb5458613ff68edd8052cd14b2"}]}}}, {0x38, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1b}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_USERDATA={0x1e, 0xd, 0x1, 0x0, "05690015f7bfee127c311bc98b621c6f0d9d23f55fede99dba5c"}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_USERDATA={0x20, 0xd, 0x1, 0x0, "cccb7a42921b9dca9672d38272f42e1142c4e2010d0094aebcc38c3c"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m22.227698312s ago: executing program 3 (id=1258): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x43) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$tcp_congestion(r1, &(0x7f00000004c0)='htcp\x00', 0x5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffffb, 0x0, &(0x7f0000000000)="0022f065861da5e122501e5711feed63c6ce709469555932ffb5bfcc9dc994a1658926fb3385696a4ceb021f3f749af7a10874511e5be85c9f0af49799c53e79db0ff680a862bf9492131ecda21be7888c4adeed91c8394232521d568e340c428a78e1dd9b30d821b78426555346a2e299370f", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x50) 4m21.51148014s ago: executing program 3 (id=1262): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x80000, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}], 0x1, 0x2090) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000100000004000000313af138583ef9d49f028eeb1b75283c459f51a37ec8e8721adfe334904da2cac782ec97b8c066b9cbd839e0e9aa8685b165ceffcee293b692119fbb12342c274cbe05"], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r2 = socket(0x10, 0x4, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="08b235e938a0a49e00000000000000000200000000000300000000b6ceac5a711e287e"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c81, 0xffffffffffffdffb) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000004380004803400018009000100686173680000000024000280080007400000000108000440fdfffff70800024000000010080006401a0000080900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 4m21.361338395s ago: executing program 33 (id=1262): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x80000, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}], 0x1, 0x2090) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000100000004000000313af138583ef9d49f028eeb1b75283c459f51a37ec8e8721adfe334904da2cac782ec97b8c066b9cbd839e0e9aa8685b165ceffcee293b692119fbb12342c274cbe05"], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r2 = socket(0x10, 0x4, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="08b235e938a0a49e00000000000000000200000000000300000000b6ceac5a711e287e"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c81, 0xffffffffffffdffb) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000004380004803400018009000100686173680000000024000280080007400000000108000440fdfffff70800024000000010080006401a0000080900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 44.576200558s ago: executing program 2 (id=2057): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0x5, 0x1, 0x2000000000009}}]}, 0x3c}}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r4, 0x2f, 0x8, 0x4, 0xc2a, 0x25, @loopback, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x7800, 0x1, 0x4}}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}}) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f00000001c0)={0x6}, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5000) 44.167175027s ago: executing program 0 (id=2059): read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) r0 = syz_io_uring_setup(0x5b5, &(0x7f0000000080)={0x0, 0x6847, 0x12000, 0x0, 0x25}, &(0x7f0000000180), &(0x7f0000000000), &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000f40)="ad5bb6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000005580)="b9c973acad96fc274d605b6ea5083e90f7854520a3d82c106c2af8caf9b5e405cc034349655ac1b02043573da783b7abbfb914c18faaa9f22793be794e48473a883838d23d387aa105d1935058122b84e197b38365433fb37bb8749ee0d3f510c764131b4218a46cd7c2d3c99ef99d5442a6472f74c677c431784c317607750b0f88b7575faf59a9f3d0cc346d0b5a7dd8949753cf51cb7b70eb86bd53a19b0661b0ec33ad3b24e8", 0xa8}], 0x1, 0x0, 0x0, 0x8011}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x160) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x4c080, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6e000e00) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000040)={'mangle\x00', 0x0, [0x7, 0x3, 0xd8, 0x80, 0x5]}, &(0x7f0000000000)=0x54) 42.787609937s ago: executing program 0 (id=2062): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0xa, 0x801, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x4, 0x1, 0x2, 0x0, 0xffff, 0x7}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, 0x0) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xfb) close(r5) fanotify_init(0x12, 0x1000) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x41) 41.912906084s ago: executing program 0 (id=2066): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000002b, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x2000006b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x4d, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500200100000000000000000000000000009197f7ef9993a72d1ee9dd619900000002320000000a000000fc01000000fd9570000000000000000000000000000000040000"], 0xfc}}, 0x44) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x20004f1c) 40.341115607s ago: executing program 5 (id=2070): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r2, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000300)={0x0, 0xead, 0xf1, '\x00', &(0x7f00000002c0)=0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x2, 0x0, 0xfffff03c}, {0x6}]}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004479bb10b10e07700002010203010902120001fd0090020904b80200ff00ff00"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfe, 0x60000000}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000070a010100000000000000000000000a0900010073797a30"], 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x10000000) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000011c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0x4, 0x7a}}}}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x200, 0x7f, 0x6, 0x20, 0x20, 0xfe}, 0x8, &(0x7f0000001240)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x97, &(0x7f0000001280)=@string={0x97, 0x3, "d754aac8fab1a04851c3c1ec44b8bedc5907ef9cc6ab96e08eb51261b7979c99155f7b28e72f108eb45164bcb76aebe1f2e40ac6f439010972acbbcd486aa54390dde6b17621f8e002cd7b185a6ed4d1372214584c00cbc12d04acf383d9a15f95488a870e82a93e1f002fad9a47ed40a8edcf5ae2d5df796de8d6262fd92657050c506a2f504ad1fb834ee09351578f4fe2da133f"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x58, &(0x7f0000001400)=@string={0x58, 0x3, "ac327350cb3534d5e43025906de9b40676f1ebe9eabbeb47766ed34393c883031bb7b6c530f279957f5ee940d15427d7c0e154fe54ece867589eb5ef1564a61b8d9d3dbc591bd6972ff398638750ba7afb9342d8b72d"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x812}}, {0x79, &(0x7f00000014c0)=@string={0x79, 0x3, "e547a90d11719dc2a14ee7f8d3226d0d608fef977ab40ec525b7e03c5c077d5254bba8f99cd1b81e6ab6a77abdb19f2b2659dec5815ccd323a7cab078db909eced6b168cd828d564e287918c2d14e1fb4a63fbda0d6bef2396ba9b410e79be00242936b040bf6cacebf097ef952bd2055cdd477b11c735"}}]}) 40.337224052s ago: executing program 4 (id=2071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000d80)=[@hopopts={{0x18, 0x29, 0x36, {0x3c}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x16}}}], 0x30}}], 0x2, 0x4040005) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0x7, 0xb, 0x3, 0x79, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0x2, 0x0, 0x1, '\x00', 0x4, 0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r8, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, r8}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x18, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r10}, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.850016084s ago: executing program 2 (id=2072): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) close(0x3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000280)=0xf9e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a80)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000980)="e8d8"}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000100)={0x1, 0x2, 0xf}) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x1e, 0x0, 0x0, 0x0}], 0x1}) 39.531631846s ago: executing program 5 (id=2075): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 39.487726797s ago: executing program 5 (id=2076): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7040fbdbdf25080000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0b0000000000000085dd00"], 0x34}, 0x1, 0x0, 0x0, 0x4807}, 0x8080) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x2, &(0x7f0000000500)=0x0) r4 = eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x4, 0x0, 0x0, 0x10000000004, 0x80000000, 0x200, 0x1ff}, 0x0, &(0x7f0000000040)={0x18, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x9, 0x2003ff, 0x80000001}, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a070089b4c45a10000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) shutdown(r2, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2000000000000000, &(0x7f00000003c0), 0x106, 0x5}}, 0xd) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffd, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, {0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, r9, 0x25f}}, 0x48) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r7) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x3c, r11, 0x400, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 39.43173643s ago: executing program 2 (id=2078): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4001af84, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 39.327893008s ago: executing program 4 (id=2079): syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) r1 = socket$unix(0x1, 0x4, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000001480)=ANY=[]) close(r1) mkdir(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000200)=ANY=[@ANYRES16=r1]) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000580)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', r4, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000902, 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$netlink(r5, &(0x7f0000000240), &(0x7f0000000280)=0xc) 38.991096314s ago: executing program 4 (id=2080): io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000440)=@can={0x1d, 0x0, 0xfff5}, 0x80, 0x0}}], 0x1, 0x881) 37.58784589s ago: executing program 2 (id=2081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0x18, 0xb}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 9) 37.586132559s ago: executing program 0 (id=2082): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x1ff, @remote, 0xdbe}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x1}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}], 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0x4, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000340)={0x0, 0x53, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4], 0x2c}, 0x1, 0x0, 0x0, 0x24000851}, 0x200c8090) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) clock_nanosleep(0x0, 0x1, 0x0, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_open_procfs$userns(0x0, &(0x7f0000000280)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4005888}, 0x4000010) 37.491056276s ago: executing program 4 (id=2083): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x1c, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x90, 0x0, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}, 0x1, 0x11}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8352", 0x2}], 0x1}, 0x49cf75490397e68f) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8905, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/111, 0x6f}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0xf000, 0x21}}], 0x48}, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = eventfd2(0x0, 0x80800) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r9, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r8, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r10, 0xaece) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000002700)=[{0x0, 0x0, 0x0, @broadcast}]}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) 37.082602665s ago: executing program 5 (id=2084): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000001340)=[{&(0x7f0000004940)="48224e001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 37.005674419s ago: executing program 2 (id=2085): r0 = syz_usb_connect(0x2, 0x64, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000000000000"]}, 0x0) 36.483847938s ago: executing program 4 (id=2086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'team_slave_1\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x8, 0x830, 0x5, 0xffffffff}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r13) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 36.315621728s ago: executing program 4 (id=2089): socket$packet(0x11, 0x2, 0x300) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYRES32=0x0], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002955a4f40f30c19e04ffb0102030109022d000180002002090494090274833180090507000000060800091162b367e12306af0905050310"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b16, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r10, 0xc080aebe, &(0x7f0000000500)=@svm={0x108, 0x1, 0x1080, {0x200000}, {"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"}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'pim6reg1\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) 36.312225475s ago: executing program 0 (id=2090): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61129000000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67100000000000560602000fff00006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc67357d81b2cc1a9e37d7b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}], 0x20}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x62201) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) write$P9_RVERSION(r2, &(0x7f00000009c0)=ANY=[], 0xfffffcd9) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x195, 0x195, 0x4, [@enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0xe, 0x9}, {0x0, 0x1}, {0x5, 0x7fff}, {0x9, 0xfff}]}, @union={0xa, 0x4, 0x0, 0x5, 0x1, 0x5, [{0x1, 0x0, 0x9}, {0x2, 0x5, 0x95a}, {0xc, 0x2, 0x5}, {0xa, 0x5, 0x8}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x2, 0xa}, @enum64={0x6, 0x9, 0x0, 0x13, 0x0, 0x9495fd30c7355fc7, [{0xf, 0x100, 0xa6c}, {0xd, 0x7daa, 0xd48c}, {0x1, 0x2, 0x2}, {0x5, 0x5, 0x80}, {0x4, 0x3}, {0x10, 0x800, 0x1}, {0xc, 0x7ff4, 0x10}, {0x10, 0x5, 0x7}, {0x6, 0x2, 0xcd61}]}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0x3}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x29, 0x1}, @datasec={0x6, 0x9, 0x0, 0xf, 0x1, [{0x2, 0x2, 0xc79}, {0x3, 0x4, 0x68ba}, {0x2, 0x538, 0xfff}, {0x4, 0x9, 0xa22}, {0x2, 0x3, 0xfffffffe}, {0x4, 0x4d1, 0x2}, {0x1, 0x1, 0xfffffffe}, {0x2, 0xfff, 0xd77}, {0x4, 0x9d, 0x9}], ','}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000400)=""/208, 0x1b4, 0xd0, 0x0, 0x8}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x4008, r9}, 0x18) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x55) r12 = dup(r0) r13 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000a40), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x17, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x1, 0x1, 0x9, 0x8, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0xfffffff7, 0x26, &(0x7f00000001c0)=""/38, 0x41100, 0x2e, '\x00', 0x0, @fallback=0xe, r7, 0x8, &(0x7f0000000540)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x7, 0x6, 0xcee}, 0x10, r8, r0, 0x2, &(0x7f0000000a80)=[0x1, r10, r12, r13], &(0x7f0000000ac0)=[{0x0, 0x5, 0x8, 0x1}, {0x0, 0x2, 0x5, 0xa}], 0x10, 0x9}, 0x94) 36.171271865s ago: executing program 5 (id=2092): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000002b, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x2000006b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x4d, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500200100000000000000000000000000009197f7ef9993a72d1ee9dd619900000002320000000a000000fc01000000fd9570000000000000000000000000000000040000"], 0xfc}}, 0x44) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x20004f1c) 35.348141105s ago: executing program 6 (id=2094): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x2, 0x2, 0x7}]}) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ec0)=@ipv4_newroute={0x50, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010101}, @RTA_SRC={0x8, 0x2, @empty}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x4, 0x4}}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_UID={0x8}, @RTA_NH_ID={0x8, 0x1e, 0x28052c7e}]}, 0x50}}, 0x60800) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async) write$UHID_INPUT2(r2, &(0x7f00000003c0), 0x6) (async) shutdown(r1, 0x1) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x24, &(0x7f0000000300)=@raw=[@alu={0x7, 0x0, 0x3, 0x7, 0x4, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @snprintf], &(0x7f0000000440)='syzkaller\x00', 0x3, 0x6a, &(0x7f0000000480)=""/106, 0x20980, 0x70, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x84, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x2, 0x5, 0xa, 0x5}, {0x1, 0x4, 0x8, 0xc}], 0x10, 0x1}, 0x94) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x111) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local}}}}}}, 0x0) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285628, &(0x7f0000000080)={0x0, @win={{0x1, 0x4, 0x9, 0x4}, 0x2, 0x4, &(0x7f0000000880)={{0xc, 0x2, 0x6, 0x2}}, 0xffffffff, 0x0, 0x3}}) (async) close(r6) (async) inotify_init1(0x800) 35.28007003s ago: executing program 6 (id=2095): r0 = socket(0x2b, 0x80801, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x24060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0xfffffffffffffee0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x3906, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000e80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0xfff}, 0x0}) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0xf, 0x6, "d3b6af", 0x0, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r2, 0x58, &(0x7f0000000080)}, 0xc) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff01000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cefe68332afaac1275d1888d1b3df1aa6bcb5b9590b5a5e77cee949b81a5629ece90893fadd6eb14a2d3563ea3f053061e306a62a0eb37a762bbe55259b1ab14c697e1e1a7a76ff7b5a08252c026725758c4ab08b494f1b6944881ba6eb2a826"], 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, r6, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40c11) futex_waitv(&(0x7f0000000480)=[{0x1, &(0x7f0000000140)=0x8, 0x2}, {0x7ff, &(0x7f0000000180)=0x40, 0x2}, {0x8000, &(0x7f0000000200)=0x8, 0x2}, {0x8, &(0x7f0000000240)=0x6, 0x2}, {0x7, &(0x7f0000000400)=0x8001, 0x82}, {0x1c000000000, &(0x7f0000000440), 0x2}], 0x6, 0x0, &(0x7f0000000540)={0x77359400}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}, 0x1, 0x0, 0x0, 0x4048094}, 0x20000080) 34.074393903s ago: executing program 6 (id=2096): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) close(0x3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000280)=0xf9e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a80)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000980)="e8d8"}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000100)={0x1, 0x2, 0xf}) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x1e, 0x0, 0x0, 0x0}], 0x1}) 33.711228838s ago: executing program 2 (id=2097): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) getpid() socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x206, 0x10b481) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x2386, 0x4) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 33.690235312s ago: executing program 6 (id=2098): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023810000fbdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="f3836719ec7bf7add4a3a803d6067b3885c30ff29697568f68f3f8739291553f0cfbaa22db81355218"], 0x1c}}, 0x0) read$nci(r2, &(0x7f0000000200)=""/100, 0x64) 33.292387579s ago: executing program 6 (id=2099): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8, 0x2}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000001080)}]) syz_open_dev$sndctrl(0x0, 0x0, 0x801) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0xfe, 0x0, 0x0) 33.218904587s ago: executing program 0 (id=2100): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x5, &(0x7f00000005c0)={0x0, 0xa, 0x4, @thr={&(0x7f0000000080)="0d5bc2e7bd52e8", &(0x7f00000004c0)="f12b39d13a3f86bd1476c450115a5870c5288d5a9303db461de6c8bf9d179e432b026adf08ab7e08f2831e70963631c6eb5a3433c99b94cf355ed6d7728ec40a7dea9ba7bcaa1c62638d4034eb53436e73e67d9793363c1dda68116e1b25e90862c0e4641a05c0021a466b5f8420d4a002ab2389f1a5bb4ba9d6e43fa5d4547d9f96ae2d64738c73932f89c67acb1aba63b3060f1f02bcd495a7713f8cec29f80ee63533db6a272ffe813a4e4d6bccc9cd3c3e6981da378fe902139180f27183e82b5fd5e74ee1"}}, &(0x7f0000000600)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000006c0)='\b', 0x1}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062", 0x79}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a233", 0xf}], 0x3}, 0x41) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x3) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 32.847906425s ago: executing program 5 (id=2101): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0xe2, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x2, 0x1, 0xe8, 0x0, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "b8c8c2"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x7, 0x6}, {0x6, 0x24, 0x1a, 0xfdcb, 0x8}, [@acm={0x4, 0x24, 0x2, 0xe}, @mdlm_detail={0x65, 0x24, 0x13, 0x0, "07967bacbf8bd132acc71a350bc3dda3150d651a0ac83f83551161b0e0c19ad6b728a22ca5861d71be15643aaf72fd9bbe6f63b4c19b8cde9daeba212ba133b583869503e55a151760a48c40900c7be0d6d1d78ad5aa7517809cfcdcf2233f66d9"}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xe, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0xf9, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x4, 0x2}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x8, 0x3, 0x4, 0x20, 0x61}, 0x0, 0x0, 0x9, [{0xc7, &(0x7f00000003c0)=@string={0xc7, 0x3, "c54d5f67f71d948c52fd67a824a7633dc318fb11f8115da63dc01b2c245c1d8f287bafb6fb15b29965a7fc3fbf9f0c879b13dee471370025a839af9ce3128b1ebbbbd9c93b7ec98675d0824219af8a8a8dc460c364ddd16efa560554fec1ea949f9857aaffd5f6ffcd557dda74146125625416264eb1ac949aee6cb96425b78614f8647ca010928feaed64b8fdba970e31b032dda18bc61e01f04960f6da2e181040d04ddb67f7ba3ea43b4f598aeb1e9ee1b594237ccfa7830cc5df9712a51bb8a6730896"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x410}}, {0xb6, &(0x7f0000000500)=@string={0xb6, 0x3, "4d3edc501f7a87d77d4d086b19a508c1be598dd50fc7be29a913e8acbfde7cf45c7ae7049b89edb2283a4f5959eeb6b005a014f18128b4c47810a77c79987d0a829fe0be3fccc6beb20bd799087191056f14e314188d9387b2b6bbdb258f2033665c893fdd5a6b2224fb171ece859e189e494aa59e76991812c9c44b9fe11bf4eeb39f708b8641f4d3237f246a109d5e3c2db47586b67ebfe55280fa5700dd7d6a15816ec8cb10c639683b21393fa974e256cb9d"}}, {0x69, &(0x7f00000005c0)=@string={0x69, 0x3, "2829e4e282c13c44f986f4f6766e9cc37ba6451baf1ee1d944f1757209e64f8f35132e712091997b34421d8298c4fe55a29cf7fa90a92b1d6a789d7d62e786c1749eac96961eadec976669ba7b884845bf67c2825ac717bc7a6a9c94a15e9c05ea962c509261eb"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x411}}, {0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "29565f3a561374f1a44871da4db0ed9d563b97024715a81d8d7fdb756b52981ac3adbd1004bd2f91b5c0f8d854b1baeacd2fcc942c23e16fea37b55809c1a5546eb6e6361794d5f42cd27a6a46cdf11475c803ab685cb8409cafedd7292392656aa469fde1424d1a978d1f1294f23bcba4cbce4d6177383fad87e45dbb80017fa557758f05f91acb7d837a64766d35a7fac146c64587c13a3d"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x827}}, {0x66, &(0x7f0000000780)=@string={0x66, 0x3, "7df71dc3c172c0fde46d46bebff4a639aba6390755524477e0a5958a11ef5bb53032d2df41f378989154d37d110c5cb60b7f3491c64e29f781752e2e02d14d1c33a6501306794c0a7235aa77657d1969f9c7ef580b275bc05f8c4f4a8c067faa722b640b"}}, {0x75, &(0x7f0000000800)=@string={0x75, 0x3, "ee513f44b4427ed838c809152018195e5976cc3469e0b3bbee88b1b311d5744678f11ad5c09f9b5d439a7fb13047d055a2b9260372388d5386b0b77eb1f6de011da952144d32db92917cda8fb6bf2d93811c4b6e637fb4b00870a9c1c563b25039ca0ede0221738080220c5a6354dec59fcad4"}}]}) syz_usb_control_io(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00164c000000e5", @ANYRESHEX=r0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 32.783495457s ago: executing program 6 (id=2102): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000f14010027bd7000fcdbdf251000450069625f6d756c746963617374000000000800010000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e25, 0x754, @private2, 0xffff}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)='\x00', 0x1}, {&(0x7f0000000240)="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", 0xfc}, {&(0x7f0000000340)="7adb59717849b745e689e25e2b8d15cbf29456863947a03d79380b597337c38822ce01f0b2da9c22610504fe497705ec8c4faaaef44719b6b01d7f7b1a19ae8866c93556ef06eeb627a64281cc48bde5ead8", 0x52}, {&(0x7f00000003c0)="f86a4a2ed6a973e243e6e383c0bcc5bbf22a534a89aa8dc35817fb4c0b61612c7182abf2f5715527fe", 0x29}], 0x4, 0x0, 0x0, 0xc801}, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'aio_aio12_8\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x7, 0x20000000, 0x8, 0xb, 0x10000, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x7, 0x8]}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x4d0, 0x0, 0x390, 0xfeffffff, 0x2d0, 0x228, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00', {}, {0xff}}, 0x0, 0x1f0, 0x228, 0x0, {}, [@common=@ttl={{0x28}, {0x82846f83166753ff, 0x96}}, @common=@inet=@hashlimit3={{0x158}, {'bridge_slave_0\x00', {0x0, 0xed74, 0x1, 0x6, 0x9, 0x8, 0x5, 0x1, 0x18, 0x80}, {0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffffff, 'veth0_to_bond\x00', 'geneve1\x00', {0xff}, {}, 0x5e, 0x2, 0xa}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast2}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) r5 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x2}}, 0x3a) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x4, 0x0, 0x2, 0x8}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000040)={@local, @remote, @void, {@generic={0x5, "c0e302"}}}, 0x0) sendmmsg$alg(r5, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000005c0)="5caecdeeccfa6bbed9d8d7f1157bf9da392c9801ef7ebf55d68de914f6d28b4df4f5391852249ff32a974fdc6433eb46c6db022947381020859388a6c6b3a1d1713ee8418ec44880e73fb2da49ccfcd43872223d8d2a37a4cdc3910dccdbba47b3e690166d6e2701959a34bd14f34d7c416303f8a5e2587364848aae77881ab19213464f09a728e1b01f9fd3612796836bbd6f0a8230075d783ae99eb2220d37f684d80abbb947ebd233ea04f7bbccda95194b8c5999a725980bc1b9b3ca05b372d70a797e43854fe7c73bb019f2509f", 0xd0}, {&(0x7f0000000740)="f480a9148e", 0x5}], 0x2, 0x0, 0x0, 0x4000045}], 0x1, 0x80) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x10000, @local, 0x9}}}, 0x30) 0s ago: executing program 34 (id=2100): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x5, &(0x7f00000005c0)={0x0, 0xa, 0x4, @thr={&(0x7f0000000080)="0d5bc2e7bd52e8", &(0x7f00000004c0)="f12b39d13a3f86bd1476c450115a5870c5288d5a9303db461de6c8bf9d179e432b026adf08ab7e08f2831e70963631c6eb5a3433c99b94cf355ed6d7728ec40a7dea9ba7bcaa1c62638d4034eb53436e73e67d9793363c1dda68116e1b25e90862c0e4641a05c0021a466b5f8420d4a002ab2389f1a5bb4ba9d6e43fa5d4547d9f96ae2d64738c73932f89c67acb1aba63b3060f1f02bcd495a7713f8cec29f80ee63533db6a272ffe813a4e4d6bccc9cd3c3e6981da378fe902139180f27183e82b5fd5e74ee1"}}, &(0x7f0000000600)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000006c0)='\b', 0x1}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062", 0x79}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a233", 0xf}], 0x3}, 0x41) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x3) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) kernel console output (not intermixed with test programs): sive=1 [ 562.996080][ T5725] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 563.038813][ T5725] usb 3-1: USB disconnect, device number 74 [ 563.046605][ T30] audit: type=1400 audit(1778124525.477:5954): avc: denied { write } for pid=12282 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.860696][ T30] audit: type=1400 audit(1778124526.277:5955): avc: denied { write } for pid=12293 comm="syz.6.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 564.732503][ T30] audit: type=1400 audit(1778124527.127:5956): avc: denied { create } for pid=12298 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 565.579295][ T30] audit: type=1400 audit(1778124527.227:5957): avc: denied { bind } for pid=12298 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 565.914432][ T5758] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5758 comm: kworker/0:7) [ 566.247468][T12322] Device name cannot be null; rc = [-22] [ 566.450487][ T805] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 566.780428][ T805] usb 6-1: Using ep0 maxpacket: 32 [ 566.809497][ T805] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.823973][ T805] usb 6-1: config 0 has no interface number 0 [ 566.880740][ T805] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 566.900524][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.912596][ T805] usb 6-1: Product: syz [ 566.934777][ T805] usb 6-1: Manufacturer: syz [ 567.031019][ T805] usb 6-1: SerialNumber: syz [ 567.086938][ T805] usb 6-1: config 0 descriptor?? [ 567.101517][ T30] audit: type=1400 audit(1778124529.237:5958): avc: denied { connect } for pid=12325 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 567.110266][T12330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1520'. [ 567.142913][ T805] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 567.172593][ T805] usb 6-1: selecting invalid altsetting 1 [ 567.192371][ T805] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 567.229623][ T805] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 567.362262][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 567.371415][T12332] openvswitch: netlink: Missing key (keys=40, expected=80) [ 567.557002][ T805] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 567.571063][ T805] usb 6-1: media controller created [ 567.576358][ T30] audit: type=1400 audit(1778124530.007:5959): avc: denied { watch watch_reads } for pid=12316 comm="syz.5.1517" path="pipe:[25637]" dev="pipefs" ino=25637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 567.643599][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 568.126780][T12345] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1522'. [ 568.222408][T12347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12347 comm=syz.0.1522 [ 568.272066][T12347] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1522'. [ 568.396357][ T805] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 568.430199][ T805] zl10353_read_register: readreg error (reg=127, ret==-71) [ 568.441909][ T30] audit: type=1400 audit(1778124530.867:5960): avc: denied { read } for pid=12348 comm="syz.4.1524" lport=50565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 568.487554][ T805] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 568.576478][T12336] ceph: No mds server is up or the cluster is laggy [ 568.580401][T12340] ceph: No mds server is up or the cluster is laggy [ 568.585606][ T805] usb 6-1: USB disconnect, device number 20 [ 568.950563][ T805] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 569.140750][ T805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.179831][ T805] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.226629][ T805] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 569.259787][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 569.303080][ T805] usb 6-1: SerialNumber: syz [ 570.765005][ T30] audit: type=1400 audit(1778124533.117:5961): avc: denied { egress } for pid=12298 comm="syz.2.1512" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 570.967379][ T805] usb 6-1: 0:2 : does not exist [ 570.990052][ T805] usb 6-1: unit 9 not found! [ 571.011650][ T30] audit: type=1400 audit(1778124533.117:5962): avc: denied { sendto } for pid=12298 comm="syz.2.1512" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 571.063649][ T5699] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 571.330392][ T5699] usb 7-1: Using ep0 maxpacket: 8 [ 571.398106][T12366] Device name cannot be null; rc = [-22] [ 571.537423][ T805] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 571.583373][ T5699] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 571.615293][ T5699] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 571.645980][ T5699] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 571.672094][ T5699] usb 7-1: Product: syz [ 571.680460][ T805] usb 6-1: 4:0: cannot get min/max values for control 2 (id 4) [ 571.710193][ T5699] usb 7-1: Manufacturer: syz [ 571.735307][ T5699] usb 7-1: SerialNumber: syz [ 572.115414][ T805] usb 6-1: USB disconnect, device number 21 [ 572.130691][ T5699] usb 7-1: palm_os_3_probe - error -110 getting connection information [ 572.139895][ T5699] visor 7-1:1.0: probe with driver visor failed with error -110 [ 572.201201][T12375] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1533'. [ 572.312260][T12378] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 572.334013][ T30] audit: type=1400 audit(1778124534.757:5963): avc: denied { relabelto } for pid=12368 comm="syz.4.1532" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 572.544371][ T30] audit: type=1400 audit(1778124534.757:5964): avc: denied { associate } for pid=12368 comm="syz.4.1532" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1765 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 572.697720][T12380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.772068][ T5758] usb 7-1: USB disconnect, device number 10 [ 572.860370][ T5725] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 573.011645][ T5725] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 573.030357][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 573.050404][ T5725] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.074449][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 573.100303][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 573.121183][ T5725] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 573.140318][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 573.151278][ T5725] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.163343][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 573.174691][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 573.186951][ T5725] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 573.194641][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 573.205493][ T5725] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.217329][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 573.228652][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 573.247735][ T5725] usb 6-1: string descriptor 0 read error: -22 [ 573.254290][ T5725] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 573.263799][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.281441][ T5725] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 573.430833][ T30] audit: type=1400 audit(1778124535.837:5965): avc: denied { unlink } for pid=5606 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 573.686991][T12390] binder: 12373:12390 ioctl c018620c 200000000000 returned -22 [ 575.626851][ T5725] usb 6-1: USB disconnect, device number 22 [ 575.732163][T12411] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1538'. [ 575.913681][T12420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12420 comm=syz.0.1538 [ 575.938317][T12420] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1538'. [ 576.942652][T12406] ceph: No mds server is up or the cluster is laggy [ 576.963035][T12400] ceph: No mds server is up or the cluster is laggy [ 577.096223][ T5725] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 577.196699][T12433] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1546'. [ 577.300648][ T5725] usb 6-1: Using ep0 maxpacket: 16 [ 577.368881][ T30] audit: type=1400 audit(1778124539.797:5966): avc: denied { wake_alarm } for pid=12435 comm="syz.2.1547" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 577.405413][ T5725] usb 6-1: config 253 has an invalid interface number: 184 but max is 0 [ 577.449439][ T5725] usb 6-1: config 253 has no interface number 0 [ 577.512164][ T5725] usb 6-1: config 253 interface 184 has no altsetting 0 [ 577.602547][ T5725] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 577.635060][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.674136][ T5725] usb 6-1: Product: syz [ 577.689496][ T5725] usb 6-1: Manufacturer: syz [ 577.703716][ T5725] usb 6-1: SerialNumber: syz [ 577.717680][ T5725] go7007 6-1:253.184: probe with driver go7007 failed with error -12 [ 577.978162][T12457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1552'. [ 577.989214][T12457] 9p: Bad value for 'rfdno' [ 578.000459][ T30] audit: type=1400 audit(1778124540.437:5967): avc: denied { setcurrent } for pid=12456 comm="syz.4.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 578.053128][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1540'. [ 578.122396][T12412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.133552][T12412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.348325][ T5805] usb 6-1: USB disconnect, device number 23 [ 580.937980][T12496] overlayfs: failed to resolve './file0/file1': -2 [ 580.951926][T12495] tipc: Started in network mode [ 580.977884][T12495] tipc: Node identity ae571b5ba28c, cluster identity 4711 [ 581.006837][T12495] tipc: Enabled bearer , priority 0 [ 581.171845][T12495] syzkaller0: entered promiscuous mode [ 581.177525][T12495] syzkaller0: entered allmulticast mode [ 581.184876][T12495] tipc: Resetting bearer [ 581.220443][T12492] tipc: Resetting bearer [ 581.230364][ T5703] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 581.422068][ T5703] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 581.433700][ T5703] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 581.456154][ T5703] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 581.469564][ T5703] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 581.479110][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.495292][ T5703] usb 7-1: Product: syz [ 581.503173][ T5703] usb 7-1: Manufacturer: syz [ 581.511386][ T5703] usb 7-1: SerialNumber: syz [ 581.530010][ T5703] usb 7-1: config 0 descriptor?? [ 581.539582][T12504] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 581.976721][T12517] Invalid option length (62363) for dns_resolver key [ 581.985644][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1563'. [ 583.923761][T12492] tipc: Disabling bearer [ 583.931851][T12511] tipc: Enabling of bearer rejected, failed to enable media [ 583.945947][T12517] macsec1: entered promiscuous mode [ 583.951424][T12517] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 583.960060][T12517] macsec1: entered allmulticast mode [ 583.965468][T12517] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 583.975106][T12517] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 583.985583][T12517] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 583.999502][ T5758] tipc: Node number set to 215685979 [ 584.046227][ T5710] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 584.185909][ T5805] usb 7-1: USB disconnect, device number 11 [ 584.379644][ T30] audit: type=1400 audit(1778124546.807:5968): avc: denied { create } for pid=12535 comm="syz.5.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 584.620325][ T5805] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 584.781849][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 584.800013][ T5805] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 584.821786][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 584.830911][ T5805] usb 7-1: Product: syz [ 584.842970][ T5805] usb 7-1: Manufacturer: syz [ 584.847902][ T5805] usb 7-1: SerialNumber: syz [ 584.873108][ T5805] usb 7-1: config 0 descriptor?? [ 584.879867][T12532] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 584.902530][ T5805] hub 7-1:0.0: bad descriptor, ignoring hub [ 584.915099][ T5805] hub 7-1:0.0: probe with driver hub failed with error -5 [ 585.163115][T12554] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1575'. [ 585.172307][T12554] veth0_to_bond: default FDB implementation only supports local addresses [ 585.184376][T12554] nfs4: Unknown parameter 'ra' [ 585.420939][ T5758] usb 7-1: USB disconnect, device number 12 [ 586.074671][T12570] usb usb2: usbfs: process 12570 (syz.6.1581) did not claim interface 0 before use [ 586.260322][ T5703] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 586.435471][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 586.458172][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 586.479643][ T5703] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 586.495761][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.526049][ T5703] usb 6-1: Product: syz [ 586.541223][ T5703] usb 6-1: Manufacturer: syz [ 586.548966][ T5703] usb 6-1: SerialNumber: syz [ 586.560878][ T5703] usb 6-1: config 0 descriptor?? [ 586.572820][T12568] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 586.589662][ C1] port100 6-1:0.0: NFC: Urb failure (status -71) [ 586.598160][ T5703] port100 6-1:0.0: NFC: Could not get supported command types [ 586.785554][ T5703] usb 6-1: USB disconnect, device number 24 [ 586.800705][ T5710] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 586.870788][ T5758] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 586.960383][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 586.967530][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 586.976097][ T5710] usb 5-1: config 3 has an invalid interface number: 171 but max is 0 [ 586.984336][ T5710] usb 5-1: config 3 has no interface number 0 [ 586.993110][ T5710] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 587.002394][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.010783][ T5710] usb 5-1: Product: syz [ 587.015015][ T5710] usb 5-1: Manufacturer: syz [ 587.019589][ T5710] usb 5-1: SerialNumber: syz [ 587.043434][ T5758] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 587.052668][ T5758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.060752][ T5758] usb 7-1: Product: syz [ 587.064986][ T5758] usb 7-1: Manufacturer: syz [ 587.069573][ T5758] usb 7-1: SerialNumber: syz [ 587.078368][ T5758] usb 7-1: config 0 descriptor?? [ 587.284621][T12577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.290575][ T5710] (null): radio-mr800 - initialization failed [ 587.315555][ T5710] radio-mr800 5-1:3.171: probe with driver radio-mr800 failed with error -22 [ 587.326450][ T5710] usbhid 5-1:3.171: couldn't find an input interrupt endpoint [ 587.338740][ T5710] usb 5-1: USB disconnect, device number 68 [ 587.453934][ T164] Bluetooth: hci5: Frame reassembly failed (-84) [ 587.533235][T12591] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20001 [ 587.541052][T12591] IPVS: lc: FWM 3 0x00000003 - no destination available [ 587.581885][T12594] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 588.340366][ T5805] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 588.480063][T12603] FAULT_INJECTION: forcing a failure. [ 588.480063][T12603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.512685][T12603] CPU: 1 UID: 0 PID: 12603 Comm: syz.0.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.512714][T12603] Tainted: [L]=SOFTLOCKUP [ 588.512720][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 588.512731][T12603] Call Trace: [ 588.512738][T12603] [ 588.512745][T12603] dump_stack_lvl+0x100/0x190 [ 588.512776][T12603] should_fail_ex.cold+0x5/0xa [ 588.512801][T12603] _copy_to_user+0x32/0xd0 [ 588.512830][T12603] simple_read_from_buffer+0xcb/0x170 [ 588.512855][T12603] proc_fail_nth_read+0x1af/0x230 [ 588.512875][T12603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 588.512897][T12603] ? rw_verify_area+0xce/0x6d0 [ 588.512914][T12603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 588.512932][T12603] vfs_read+0x1e4/0xb30 [ 588.512956][T12603] ? __pfx_vfs_read+0x10/0x10 [ 588.512974][T12603] ? __fget_files+0x215/0x3d0 [ 588.513001][T12603] ? __fget_files+0x21f/0x3d0 [ 588.513030][T12603] ksys_read+0x12a/0x250 [ 588.513049][T12603] ? __pfx_ksys_read+0x10/0x10 [ 588.513070][T12603] ? rcu_is_watching+0x12/0xc0 [ 588.513099][T12603] do_syscall_64+0x10b/0xf80 [ 588.513122][T12603] ? clear_bhb_loop+0x40/0x90 [ 588.513145][T12603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.513163][T12603] RIP: 0033:0x7f249555d60e [ 588.513179][T12603] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 588.513201][T12603] RSP: 002b:00007f24963ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 588.513219][T12603] RAX: ffffffffffffffda RBX: 00007f24963ed6c0 RCX: 00007f249555d60e [ 588.513231][T12603] RDX: 000000000000000f RSI: 00007f24963ed0a0 RDI: 0000000000000004 [ 588.513242][T12603] RBP: 00007f24963ed090 R08: 0000000000000000 R09: 0000000000000000 [ 588.513253][T12603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.513264][T12603] R13: 00007f2495816038 R14: 00007f2495815fa0 R15: 00007ffc8032aba8 [ 588.513289][T12603] [ 588.513611][ T5805] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 588.680934][ T5758] usb 7-1: Firmware version (0.0) predates our first public release. [ 588.801476][ T5805] usb 5-1: config 0 has no interface number 0 [ 588.807635][ T5805] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 43297, setting to 64 [ 588.859576][ T5758] usb 7-1: Please update to version 0.2 or newer [ 588.967729][ T5805] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 589.001082][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 589.028408][ T5805] usb 5-1: Product: syz [ 589.038544][ T5805] usb 5-1: SerialNumber: syz [ 589.117635][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 589.192929][ T5805] usb 5-1: config 0 descriptor?? [ 589.317673][T12601] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 589.472761][ T5612] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 589.526276][ T5805] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 589.897550][T12601] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1590'. [ 589.926015][ T5758] usb 7-1: USB disconnect, device number 13 [ 590.007608][ T5710] usb 5-1: USB disconnect, device number 69 [ 590.332982][ T5725] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 590.920338][ T5725] usb 6-1: device descriptor read/64, error -71 [ 591.752034][ T5725] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 592.040315][ T5725] usb 6-1: device descriptor read/64, error -71 [ 592.140469][ T5805] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 592.580109][ T5805] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 592.651311][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.742512][ T5805] usb 5-1: Product: syz [ 592.781119][ T5805] usb 5-1: Manufacturer: syz [ 592.813943][ T5805] usb 5-1: SerialNumber: syz [ 592.985760][ T5805] usb 5-1: config 0 descriptor?? [ 593.040859][ T5725] usb usb6-port1: attempt power cycle [ 593.106258][ T30] audit: type=1400 audit(1778124555.537:5969): avc: denied { getopt } for pid=12659 comm="syz.2.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 593.199023][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 594.841473][ T5805] usb 5-1: ATUSB: AT86RF231 version 17 [ 595.400667][T12641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.439039][T12685] infiniband syz1: set active [ 595.444315][T12685] infiniband syz1: added team_slave_0 [ 595.447285][T12641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.453351][T12685] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 595.462350][T12685] infiniband syz1: Couldn't open port 1 [ 595.478319][T12685] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 595.493890][T12685] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 595.511098][T12685] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 595.552809][T12685] RDS/IB: syz1: added [ 595.557357][T12685] smc: adding ib device syz1 with port count 1 [ 595.565146][T12685] smc: ib device syz1 port 1 has no pnetid [ 595.979994][ T5805] usb 5-1: Firmware: major: 168, minor: 239, hardware type: UNKNOWN (17) [ 597.092709][ T5805] usb 5-1: failed to fetch extended address, random address set [ 597.100488][ T5805] usb 5-1: atusb_probe: initialization failed, error = -524 [ 597.109145][ T5805] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 597.424308][ T5805] usb 5-1: USB disconnect, device number 70 [ 597.479137][T12717] FAULT_INJECTION: forcing a failure. [ 597.479137][T12717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.618142][T12717] CPU: 0 UID: 0 PID: 12717 Comm: syz.2.1620 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.618162][T12717] Tainted: [L]=SOFTLOCKUP [ 597.618166][T12717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 597.618172][T12717] Call Trace: [ 597.618176][T12717] [ 597.618180][T12717] dump_stack_lvl+0x100/0x190 [ 597.618198][T12717] should_fail_ex.cold+0x5/0xa [ 597.618213][T12717] _copy_from_user+0x2e/0xd0 [ 597.618230][T12717] ucma_write+0x128/0x330 [ 597.618243][T12717] ? __pfx_ucma_write+0x10/0x10 [ 597.618255][T12717] ? bpf_lsm_file_permission+0x9/0x10 [ 597.618271][T12717] ? security_file_permission+0x76/0x210 [ 597.618286][T12717] ? rw_verify_area+0xce/0x6d0 [ 597.618298][T12717] vfs_write+0x2aa/0x1070 [ 597.618310][T12717] ? __pfx_ucma_write+0x10/0x10 [ 597.618322][T12717] ? __pfx_vfs_write+0x10/0x10 [ 597.618332][T12717] ? find_held_lock+0x2b/0x80 [ 597.618343][T12717] ? __fget_files+0x215/0x3d0 [ 597.618356][T12717] ? __fget_files+0x215/0x3d0 [ 597.618371][T12717] ? __fget_files+0x21f/0x3d0 [ 597.618388][T12717] ksys_write+0x1f8/0x250 [ 597.618400][T12717] ? __pfx_ksys_write+0x10/0x10 [ 597.618412][T12717] ? rcu_is_watching+0x12/0xc0 [ 597.618430][T12717] do_syscall_64+0x10b/0xf80 [ 597.618443][T12717] ? clear_bhb_loop+0x40/0x90 [ 597.618456][T12717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.618467][T12717] RIP: 0033:0x7ff61579cdd9 [ 597.618477][T12717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.618487][T12717] RSP: 002b:00007ff6165cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 597.618498][T12717] RAX: ffffffffffffffda RBX: 00007ff615a15fa0 RCX: 00007ff61579cdd9 [ 597.618505][T12717] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 597.618511][T12717] RBP: 00007ff6165cf090 R08: 0000000000000000 R09: 0000000000000000 [ 597.618517][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.618523][T12717] R13: 00007ff615a16038 R14: 00007ff615a15fa0 R15: 00007ffc4e9f8ba8 [ 597.618537][T12717] [ 597.907794][T12721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12721 comm=syz.6.1619 [ 598.473484][ T30] audit: type=1326 audit(1778124560.837:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.2.1622" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff61579cdd9 code=0x0 [ 598.524734][T12735] openvswitch: netlink: Message has 1 unknown bytes. [ 598.532548][T12735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.542672][ T30] audit: type=1400 audit(1778124560.977:5971): avc: denied { map } for pid=12734 comm="syz.4.1625" path="socket:[39106]" dev="sockfs" ino=39106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 598.586526][ T30] audit: type=1400 audit(1778124560.977:5972): avc: denied { accept } for pid=12734 comm="syz.4.1625" path="socket:[39106]" dev="sockfs" ino=39106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 598.630314][ T5710] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 598.790571][ T5710] usb 7-1: Using ep0 maxpacket: 8 [ 598.809148][ T5710] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 598.821963][ T5710] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 598.850212][ T5710] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 598.863827][ T5710] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.877497][ T5710] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 598.890319][ T5710] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 598.903967][ T5710] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 598.918050][ T5710] usb 7-1: config 168 interface 0 has no altsetting 0 [ 598.932931][ T5710] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 598.942363][ T5710] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 598.956821][ T5710] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 598.972799][ T5710] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.986168][ T5710] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 598.999493][ T5710] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 599.020882][ T5710] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 599.036359][ T5710] usb 7-1: config 168 interface 0 has no altsetting 0 [ 599.052647][ T5710] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 599.061056][ T5710] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 599.074830][ T5710] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 599.088290][ T5710] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 599.102061][ T5710] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 599.115323][ T5710] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 599.128641][ T5710] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 599.144495][ T5710] usb 7-1: config 168 interface 0 has no altsetting 0 [ 599.224981][ T5710] usb 7-1: string descriptor 0 read error: -22 [ 599.261236][ T5710] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 599.301911][ T5710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.056194][T12729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.108254][ T5710] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 600.242869][T12729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.627538][T12729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.642322][T12729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.664626][T12729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.675107][T12729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.456045][T12773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12773 comm=syz.5.1634 [ 601.678207][T12777] overlayfs: missing 'lowerdir' [ 601.762470][T12778] trusted_key: syz.4.1635 sent an empty control message without MSG_MORE. [ 601.832474][T12729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.860635][T12729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.932218][ T30] audit: type=1400 audit(1778124564.317:5973): avc: denied { setopt } for pid=12779 comm="syz.0.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 602.053521][ T5710] usb 7-1: USB disconnect, device number 14 [ 602.264892][ T30] audit: type=1400 audit(1778124564.677:5974): avc: denied { cmd } for pid=12789 comm="syz.5.1641" path="socket:[38416]" dev="sockfs" ino=38416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 602.381453][T12797] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 602.538338][ T30] audit: type=1400 audit(1778124564.967:5975): avc: denied { read write } for pid=12792 comm="syz.5.1642" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 602.573742][ T30] audit: type=1400 audit(1778124564.997:5976): avc: denied { open } for pid=12792 comm="syz.5.1642" path="/137/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 605.370466][ T5710] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 605.550786][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 605.573886][ T5710] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 605.588927][ T5710] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 605.646922][ T5710] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 605.681836][ T5710] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 605.710479][ T5710] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 605.750123][ T5710] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 605.803235][ T5710] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 605.843695][ T5710] usb 5-1: config 168 interface 0 has no altsetting 0 [ 605.868975][ T5710] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 605.879582][ T5710] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 605.912048][ T5710] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 605.954172][ T5710] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 605.987835][ T5710] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 606.466036][ T5710] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 606.477683][ T5710] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 606.499827][ T5710] usb 5-1: config 168 interface 0 has no altsetting 0 [ 606.523410][ T5710] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 606.551002][ T5710] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 606.563980][T12850] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 606.579165][ T5710] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 606.592245][T12850] xt_hl: Unknown Hop Limit match mode: 206 [ 606.600410][ T5710] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.612820][ T5710] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 606.625042][ T5710] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 606.637981][ T5710] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 606.653337][ T5710] usb 5-1: config 168 interface 0 has no altsetting 0 [ 606.668876][ T5710] usb 5-1: string descriptor 0 read error: -22 [ 606.682163][ T5710] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 606.696337][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.764865][ T5710] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 606.986686][T12838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.107419][T12838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.677329][T12826] Process accounting resumed [ 607.757205][T12866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.769091][T12866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.782329][T12866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.803167][T12866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.098257][T12866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.267876][T12866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.640738][ T5805] usb 5-1: USB disconnect, device number 71 [ 608.931923][ T30] audit: type=1400 audit(1778124571.367:5977): avc: denied { ioctl } for pid=12882 comm="syz.6.1662" path="socket:[39354]" dev="sockfs" ino=39354 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 608.965786][T12883] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1662'. [ 609.372393][T12890] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96 [ 612.325212][T12920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1672'. [ 612.617557][T12926] netlink: 'syz.2.1673': attribute type 1 has an invalid length. [ 613.302965][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 613.361822][T12932] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 613.391867][T12932] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 613.547482][T12932] bond3: (slave vxcan3): making interface the new active one [ 613.579560][T12932] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 613.587371][T12942] nbd: must specify a size in bytes for the device [ 613.934793][T12926] bond3 (unregistering): (slave vxcan3): Releasing backup interface [ 613.966951][T12926] bond3 (unregistering): Released all slaves [ 614.220442][ T5805] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 614.517412][ T5805] usb 7-1: config 1 interface 0 has no altsetting 0 [ 614.594229][ T5805] usb 7-1: string descriptor 0 read error: -22 [ 614.605610][ T5805] usb 7-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 614.646079][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.896061][T12958] FAULT_INJECTION: forcing a failure. [ 614.896061][T12958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.912323][T12958] CPU: 0 UID: 0 PID: 12958 Comm: syz.0.1684 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.912348][T12958] Tainted: [L]=SOFTLOCKUP [ 614.912354][T12958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 614.912364][T12958] Call Trace: [ 614.912370][T12958] [ 614.912376][T12958] dump_stack_lvl+0x100/0x190 [ 614.912399][T12958] should_fail_ex.cold+0x5/0xa [ 614.912415][T12958] _copy_from_user+0x2e/0xd0 [ 614.912431][T12958] kstrtouint_from_user+0xd6/0x1d0 [ 614.912445][T12958] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 614.912462][T12958] ? __lock_acquire+0x4a5/0x2630 [ 614.912488][T12958] ? lock_acquire+0x1b1/0x370 [ 614.912513][T12958] proc_fail_nth_write+0x83/0x220 [ 614.912531][T12958] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 614.912547][T12958] vfs_write+0x2aa/0x1070 [ 614.912560][T12958] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 614.912573][T12958] ? __pfx_vfs_write+0x10/0x10 [ 614.912584][T12958] ? __fget_files+0x215/0x3d0 [ 614.912606][T12958] ? __fget_files+0x21f/0x3d0 [ 614.912634][T12958] ksys_write+0x12a/0x250 [ 614.912651][T12958] ? __pfx_ksys_write+0x10/0x10 [ 614.912671][T12958] ? rcu_is_watching+0x12/0xc0 [ 614.912691][T12958] do_syscall_64+0x10b/0xf80 [ 614.912704][T12958] ? clear_bhb_loop+0x40/0x90 [ 614.912717][T12958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.912729][T12958] RIP: 0033:0x7f249555d60e [ 614.912749][T12958] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 614.912766][T12958] RSP: 002b:00007f24963cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 614.912782][T12958] RAX: ffffffffffffffda RBX: 00007f24963cc6c0 RCX: 00007f249555d60e [ 614.912792][T12958] RDX: 0000000000000001 RSI: 00007f24963cc0a0 RDI: 0000000000000005 [ 614.912802][T12958] RBP: 00007f24963cc090 R08: 0000000000000000 R09: 0000000000000000 [ 614.912811][T12958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.912820][T12958] R13: 00007f2495816128 R14: 00007f2495816090 R15: 00007ffc8032aba8 [ 614.912835][T12958] [ 615.184754][ T5805] hid_mf 0003:0079:1801.0012: unknown main item tag 0x0 [ 615.199954][ T5805] hid_mf 0003:0079:1801.0012: unknown main item tag 0x0 [ 615.225063][ T5805] hid_mf 0003:0079:1801.0012: unknown main item tag 0x0 [ 615.317590][T12964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1689'. [ 615.323846][ T5805] hid_mf 0003:0079:1801.0012: unknown main item tag 0x0 [ 615.465220][ T5805] hid_mf 0003:0079:1801.0012: unknown main item tag 0x0 [ 615.473480][ T7749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.473578][ T5805] hid_mf 0003:0079:1801.0012: unknown main item tag 0x0 [ 615.483656][ T5805] hid_mf 0003:0079:1801.0012: unknown main item tag 0x0 [ 615.496120][T12968] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1689'. [ 615.505500][ T5805] hid_mf 0003:0079:1801.0012: unknown main item tag 0x0 [ 615.518410][ T30] audit: type=1400 audit(1778124577.947:5978): avc: denied { transfer } for pid=12963 comm="syz.0.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 615.537778][ T5805] hid_mf 0003:0079:1801.0012: unknown main item tag 0x0 [ 615.537804][ T5805] hid_mf 0003:0079:1801.0012: unknown main item tag 0x0 [ 615.615245][T12974] overlayfs: missing 'lowerdir' [ 615.710691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.902204][ T5805] hid_mf 0003:0079:1801.0012: unbalanced collection at end of report description [ 616.041912][ T5805] hid_mf 0003:0079:1801.0012: HID parse failed. [ 616.077409][ T5805] hid_mf 0003:0079:1801.0012: probe with driver hid_mf failed with error -22 [ 616.135698][ T5805] usb 7-1: USB disconnect, device number 15 [ 616.590859][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.751495][ T7749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.953350][T13000] netlink: 'syz.5.1700': attribute type 1 has an invalid length. [ 616.985665][T13000] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1700'. [ 617.033361][T12997] IPVS: persistence engine module ip_vs_pe_ not found [ 617.600459][T13007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.694388][ T5758] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 617.799005][ T30] audit: type=1400 audit(1778124580.227:5979): avc: denied { setopt } for pid=13008 comm="syz.2.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 617.857994][T13011] openvswitch: netlink: IPv4 tun info is not correct [ 617.873499][ T5758] usb 5-1: unable to get BOS descriptor or descriptor too short [ 617.882073][ T5758] usb 5-1: not running at top speed; connect to a high speed hub [ 617.891241][ T5758] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 617.902305][ T5758] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 617.924606][ T5758] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 617.936696][T13010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.944786][ T5758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.958706][ T5758] usb 5-1: Product: syz [ 617.966157][ T5758] usb 5-1: Manufacturer: syz [ 617.971576][ T5758] usb 5-1: SerialNumber: syz [ 618.276992][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1701'. [ 618.597650][ T5758] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.599449][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1704'. [ 618.614565][T13014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.623936][T13014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.639604][T13014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.671743][ T5758] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 618.681708][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.715873][ T5758] usb 5-1: USB disconnect, device number 72 [ 618.720898][T13014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.736425][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.633013][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.838416][T13028] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1708'. [ 620.147675][T13037] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1710'. [ 621.069195][T13043] comedi comedi0: Minor 4 could not be opened [ 621.240353][ T5725] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 621.240606][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.258238][ T5805] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 621.690370][ T5805] usb 6-1: device descriptor read/64, error -71 [ 621.810288][ T5725] usb 7-1: Using ep0 maxpacket: 16 [ 621.820124][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.838718][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.848649][ T5725] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 621.861549][ T5725] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 621.871163][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.883978][ T5725] usb 7-1: config 0 descriptor?? [ 621.940315][ T5805] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 622.070785][ T5805] usb 6-1: device descriptor read/64, error -71 [ 622.170502][T13060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13060 comm=syz.2.1717 [ 622.185767][ T5805] usb usb6-port1: attempt power cycle [ 622.197065][T13060] xt_l2tp: v2 doesn't support IP mode [ 622.210637][ T30] audit: type=1400 audit(1778124584.647:5980): avc: denied { mounton } for pid=13059 comm="syz.2.1717" path="/proc/1187/task" dev="proc" ino=39979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 622.217380][T13058] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 622.250296][T13058] Cannot find add_set index 0 as target [ 622.299954][T13062] tmpfs: Bad value for 'mpol' [ 622.309100][ T5725] hid_parser_main: 4002 callbacks suppressed [ 622.309113][ T5725] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 622.327083][ T5725] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 622.334550][ T5725] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 622.342468][ T5725] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 622.349715][ T5725] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 622.359831][ T5725] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 622.367969][ T5725] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 622.377544][ T5725] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 622.387630][ T5725] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 622.395006][ T5725] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 622.441454][ T5725] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0013/input/input27 [ 622.476681][ T5725] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 622.513108][T13036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.522128][T13036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.531453][ T5805] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 622.540615][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.561672][ T5805] usb 6-1: device descriptor read/8, error -71 [ 622.670498][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.800309][ T5805] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 622.821041][ T5805] usb 6-1: device descriptor read/8, error -71 [ 622.899571][ T30] audit: type=1400 audit(1778124585.327:5981): avc: denied { create } for pid=13065 comm="syz.0.1718" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 623.021042][ T5805] usb usb6-port1: unable to enumerate USB device [ 623.231475][T13071] overlay: Unknown parameter 'MÛĬZÈœIh©:tA [ 623.231475][T13071] ;|./file0' [ 623.464184][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1719'. [ 623.560465][ T5710] usb 7-1: USB disconnect, device number 16 [ 623.740046][ T30] audit: type=1400 audit(1778124586.167:5982): avc: denied { map } for pid=13079 comm="syz.6.1723" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 623.796034][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.850421][ T5725] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 623.876014][T13083] vlan1: entered allmulticast mode [ 623.881463][T13083] veth0_vlan: entered allmulticast mode [ 623.887280][T13083] vlan1: entered promiscuous mode [ 623.910352][ T5718] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 623.930322][ T5758] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 623.990324][ T5725] usb 3-1: device descriptor read/64, error -71 [ 624.041096][ T5718] usb 6-1: device descriptor read/64, error -71 [ 624.065059][T13087] lo speed is unknown, defaulting to 1000 [ 624.091620][ T5758] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.103299][ T5758] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.113435][ T5758] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 624.122657][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 624.130753][ T5758] usb 5-1: SerialNumber: syz [ 624.240579][ T5725] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 624.360418][ T5758] usb 5-1: 0:2 : does not exist [ 624.380468][ T5725] usb 3-1: device descriptor read/64, error -71 [ 624.412710][ T5758] usb 5-1: USB disconnect, device number 73 [ 624.506562][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.532377][ T5725] usb usb3-port1: attempt power cycle [ 624.890421][ T5725] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 624.912520][ T5725] usb 3-1: device descriptor read/8, error -71 [ 625.020316][ T5718] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 625.150549][ T5725] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 625.194464][ T5718] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 625.205772][ T5725] usb 3-1: device descriptor read/8, error -71 [ 625.213499][ T5718] usb 6-1: config 0 has no interface number 0 [ 625.234939][ T5718] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 625.244647][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.253941][ T5718] usb 6-1: Product: syz [ 625.259770][ T5718] usb 6-1: Manufacturer: syz [ 625.267271][ T5718] usb 6-1: SerialNumber: syz [ 625.321034][ T5725] usb usb3-port1: unable to enumerate USB device [ 625.368455][ T5718] usb 6-1: config 0 descriptor?? [ 625.583839][ T5718] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 625.593912][ T5718] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 625.604404][ T5718] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 625.612459][ T5718] usb 6-1: media controller created [ 625.625959][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 625.666683][T13103] netlink: 'syz.4.1731': attribute type 10 has an invalid length. [ 625.685860][T13103] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1731'. [ 626.008497][ T5718] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 626.374090][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.896720][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.118754][ T5718] usb 6-1: USB disconnect, device number 33 [ 627.206509][T13083] vlan1: left promiscuous mode [ 627.265336][T13083] vlan1: left allmulticast mode [ 627.271770][T13083] veth0_vlan: left allmulticast mode [ 627.442342][T13114] lo speed is unknown, defaulting to 1000 [ 627.605832][T13125] netlink: 'syz.0.1736': attribute type 1 has an invalid length. [ 627.658643][T13125] bond7: (slave geneve2): making interface the new active one [ 627.671207][T13125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.681420][T13125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.690782][T13125] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 627.710778][ T158] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 627.740360][ T805] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 627.740936][ T158] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 627.797320][ T158] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 627.820349][ T158] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 627.941879][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.956512][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.968422][ T805] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 627.977849][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.996279][ T805] usb 3-1: config 0 descriptor?? [ 629.025571][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.601015][ T30] audit: type=1400 audit(1778124592.027:5983): avc: denied { audit_control } for pid=13145 comm="syz.0.1742" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 629.892949][T13155] No such timeout policy "syz0" [ 629.972920][T13156] CUSE: info not properly terminated [ 630.006956][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.052236][ T30] audit: type=1400 audit(1778124592.317:5984): avc: denied { map } for pid=13150 comm="syz.6.1743" path="socket:[41157]" dev="sockfs" ino=41157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 630.566141][ T805] usbhid 3-1:0.0: can't add hid device: -71 [ 630.627302][ T805] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 630.631441][ T30] audit: type=1400 audit(1778124592.317:5985): avc: denied { accept } for pid=13150 comm="syz.6.1743" path="socket:[41157]" dev="sockfs" ino=41157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 630.812952][ T805] usb 3-1: USB disconnect, device number 80 [ 631.495404][ T7749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.716603][ T5718] libceph: connect (1)[c::]:6789 error -101 [ 631.724421][ T5718] libceph: mon0 (1)[c::]:6789 connect error [ 631.756558][ T5718] libceph: connect (1)[c::]:6789 error -101 [ 631.763165][ T5718] libceph: mon0 (1)[c::]:6789 connect error [ 631.787269][T13192] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1750'. [ 631.999617][ T5718] libceph: connect (1)[c::]:6789 error -101 [ 632.010568][ T5718] libceph: mon0 (1)[c::]:6789 connect error [ 632.028791][ T5718] libceph: connect (1)[c::]:6789 error -101 [ 632.476368][ T5718] libceph: mon0 (1)[c::]:6789 connect error [ 632.711626][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 632.774759][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 632.824286][T13198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13198 comm=syz.2.1750 [ 632.859873][T13198] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1750'. [ 632.996082][T13183] ceph: No mds server is up or the cluster is laggy [ 633.010445][T13186] ceph: No mds server is up or the cluster is laggy [ 633.156584][T13205] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1754'. [ 633.480815][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.489362][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 633.495744][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 633.605349][T13212] SQUASHFS error: Failed to read block 0x0: -5 [ 633.615666][T13212] unable to read squashfs_super_block [ 633.746321][T13215] mmap: syz.6.1757 (13215): VmData 37593088 exceed data ulimit 65544. Update limits or use boot option ignore_rlimit_data. [ 634.678224][ T7749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.050302][T13081] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 635.221669][T13081] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 635.251436][T13236] netlink: 'syz.4.1756': attribute type 3 has an invalid length. [ 635.512967][T13081] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 635.533666][T13081] usb 7-1: config 0 interface 0 has no altsetting 0 [ 635.552214][T13081] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 635.661013][T13081] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 635.675818][T13081] usb 7-1: Product: syz [ 635.682155][T13081] usb 7-1: Manufacturer: syz [ 635.687456][T13081] usb 7-1: SerialNumber: syz [ 635.814895][T13081] usb 7-1: config 0 descriptor?? [ 635.837182][T13218] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 635.860602][T13081] usb 7-1: selecting invalid altsetting 0 [ 636.510430][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.586457][T13218] vcan0: tx address claim with different name [ 636.605905][T13218] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 636.617955][T13218] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 636.627333][T13218] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 636.647400][T13218] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 636.660059][T13218] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 636.661304][ T805] usb 7-1: USB disconnect, device number 17 [ 636.668516][T13218] usb 7-1: cannot submit urb 0, error -19: no device [ 636.690129][T13218] usb 7-1: cannot submit urb 0, error -19: no device [ 636.700082][T13218] usb 7-1: cannot submit urb 0, error -19: no device [ 636.707565][T13218] usb 7-1: cannot submit urb 0, error -19: no device [ 636.718027][T13218] usb 7-1: cannot submit urb 0, error -19: no device [ 636.727925][T13218] usb 7-1: cannot submit urb 0, error -19: no device [ 636.737016][T13218] usb 7-1: cannot submit urb 0, error -19: no device [ 636.744387][T13218] usb 7-1: cannot submit urb 0, error -19: no device [ 636.949559][T13257] overlayfs: missing 'lowerdir' [ 637.231531][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.377213][T13261] tipc: Enabled bearer , priority 0 [ 637.386520][T13261] syzkaller0: entered promiscuous mode [ 637.392333][T13261] syzkaller0: entered allmulticast mode [ 637.420656][T13261] tipc: Resetting bearer [ 637.423297][T13259] 9p: Bad value for 'rfdno' [ 637.426724][T13261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.441054][T13261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.454335][T13260] tipc: Resetting bearer [ 637.475952][T13260] tipc: Disabling bearer [ 637.633730][T13271] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1769'. [ 637.695550][T13271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13271 comm=syz.0.1769 [ 637.711809][T13271] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1769'. [ 637.739350][T13279] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 637.996086][T13285] comedi comedi1: 8255: I/O base address not correctly aligned [ 638.343964][T13263] ceph: No mds server is up or the cluster is laggy [ 638.350775][T13266] ceph: No mds server is up or the cluster is laggy [ 639.756793][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.039574][T13311] No such timeout policy "syz0" [ 640.443559][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.460667][ T5703] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 640.590541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.599257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.790365][ T5703] usb 7-1: Using ep0 maxpacket: 32 [ 640.798876][T13317] input: syz0 as /devices/virtual/input/input28 [ 640.816668][ T5703] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.849926][ T5703] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 640.897870][ T5703] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 640.918092][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.940499][ T5703] usb 7-1: Product: syz [ 640.958001][ T5703] usb 7-1: Manufacturer: syz [ 640.974014][ T5703] usb 7-1: SerialNumber: syz [ 641.008725][ T5703] usb 7-1: config 0 descriptor?? [ 641.877983][T13329] can0: slcan on ptm0. [ 642.240782][T13328] can0 (unregistered): slcan off ptm0. [ 642.522759][T13354] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1788'. [ 642.982434][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.000842][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.632600][T13354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13354 comm=syz.0.1788 [ 643.713462][T13354] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1788'. [ 643.726531][ T5725] usb 7-1: USB disconnect, device number 18 [ 643.826464][ T30] audit: type=1400 audit(1778124606.257:5986): avc: denied { write } for pid=13339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.986128][T13343] ceph: No mds server is up or the cluster is laggy [ 644.020478][T13349] ceph: No mds server is up or the cluster is laggy [ 644.764377][T13382] netlink: 'syz.4.1792': attribute type 21 has an invalid length. [ 644.772468][T13382] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1792'. [ 645.187212][ T30] audit: type=1400 audit(1778124607.607:5987): avc: denied { write } for pid=13380 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.630651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.639166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.874614][ T164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.031377][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.447752][ T30] audit: type=1400 audit(1778124608.877:5988): avc: denied { bind } for pid=13406 comm="syz.0.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 646.505049][ T30] audit: type=1400 audit(1778124608.907:5989): avc: denied { write } for pid=13394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.543680][ T30] audit: type=1400 audit(1778124608.907:5990): avc: denied { setopt } for pid=13406 comm="syz.0.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 646.595709][ T30] audit: type=1400 audit(1778124609.007:5991): avc: denied { write } for pid=13415 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.845439][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1801'. [ 646.870462][T13422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.879371][T13422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.891034][ T5758] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 646.900182][T13422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.906880][T13424] netlink: 'syz.4.1798': attribute type 3 has an invalid length. [ 646.909771][T13422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.052567][ T5758] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.083992][ T5758] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 647.106406][ T5758] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 647.126191][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 647.146784][ T5758] usb 3-1: SerialNumber: syz [ 647.376730][ T5758] usb 3-1: 0:2 : does not exist [ 647.390338][ T5758] usb 3-1: unit 5 not found! [ 647.889767][ T5758] usb 3-1: USB disconnect, device number 81 [ 647.958948][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.095615][T13433] FAT-fs (nullb0): bogus number of reserved sectors [ 648.111075][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.143948][T13433] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 648.155828][T13435] netlink: 'syz.5.1806': attribute type 21 has an invalid length. [ 648.164040][T13435] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1806'. [ 648.178805][T13435] netlink: 'syz.5.1806': attribute type 4 has an invalid length. [ 648.187109][T13435] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1806'. [ 648.372172][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 648.378377][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 648.429674][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 648.443298][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 648.453245][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 648.459312][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 648.472801][T13451] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1805'. [ 648.500118][T13451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.523877][T13451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.541055][T13451] bond0 (unregistering): Released all slaves [ 648.596976][T13452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13452 comm=syz.6.1805 [ 648.612249][T13452] netlink: 276 bytes leftover after parsing attributes in process `syz.6.1805'. [ 648.642052][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 648.650167][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 648.730743][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 648.738741][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 648.757098][T13459] futex_wake_op: syz.4.1809 tries to shift op by 144; fix this program [ 649.070558][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.180522][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 649.194497][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 649.220924][T13447] ceph: No mds server is up or the cluster is laggy [ 649.256617][T13442] ceph: No mds server is up or the cluster is laggy [ 649.270746][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 649.285226][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 649.539618][ T30] audit: type=1400 audit(1778124611.967:5992): avc: denied { accept } for pid=13466 comm="syz.6.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 649.820487][ T5758] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 649.960435][ T5758] usb 7-1: device descriptor read/64, error -71 [ 650.210281][ T5758] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 650.350434][ T5758] usb 7-1: device descriptor read/64, error -71 [ 650.576210][ T5758] usb usb7-port1: attempt power cycle [ 650.589268][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1816'. [ 650.977230][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.980624][ T5725] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 651.866389][T13493] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü' [ 651.875218][T13493] CPU: 1 UID: 0 PID: 13493 Comm: syz.4.1818 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.875249][T13493] Tainted: [L]=SOFTLOCKUP [ 651.875256][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 651.875269][T13493] Call Trace: [ 651.875277][T13493] [ 651.875285][T13493] dump_stack_lvl+0x100/0x190 [ 651.875314][T13493] sysfs_warn_dup.cold+0x1c/0x28 [ 651.875342][T13493] sysfs_do_create_link_sd+0x113/0x140 [ 651.875372][T13493] sysfs_create_link+0x61/0xc0 [ 651.875396][T13493] device_add+0x675/0x1950 [ 651.875422][T13493] ? __pfx_device_add+0x10/0x10 [ 651.875447][T13493] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 651.875472][T13493] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 651.875505][T13493] wiphy_register+0x1edd/0x2d90 [ 651.875525][T13493] ? __rtnl_unlock+0xb9/0xf0 [ 651.875554][T13493] ? __pfx_wiphy_register+0x10/0x10 [ 651.875575][T13493] ? __asan_memset+0x23/0x50 [ 651.875603][T13493] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 651.875642][T13493] ieee80211_register_hw+0x3055/0x4570 [ 651.875682][T13493] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 651.875715][T13493] ? write_comp_data+0x10/0x90 [ 651.875737][T13493] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 651.875762][T13493] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 651.875786][T13493] ? __hrtimer_setup+0x208/0x330 [ 651.875818][T13493] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 651.875872][T13493] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 651.875905][T13493] ? __asan_memcpy+0x3c/0x60 [ 651.875935][T13493] hwsim_new_radio_nl+0xc5f/0x1370 [ 651.875965][T13493] ? rcu_is_watching+0x12/0xc0 [ 651.875999][T13493] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 651.876038][T13493] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 651.876068][T13493] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 651.876102][T13493] genl_family_rcv_msg_doit+0x214/0x300 [ 651.876131][T13493] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 651.876168][T13493] ? bpf_lsm_capable+0x9/0x10 [ 651.876188][T13493] ? security_capable+0x80/0x260 [ 651.876211][T13493] ? ns_capable+0xd2/0xf0 [ 651.876241][T13493] genl_rcv_msg+0x560/0x800 [ 651.876272][T13493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.876300][T13493] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 651.876340][T13493] netlink_rcv_skb+0x159/0x420 [ 651.876364][T13493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.876393][T13493] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.876428][T13493] ? rcu_is_watching+0x12/0xc0 [ 651.876464][T13493] genl_rcv+0x28/0x40 [ 651.876487][T13493] netlink_unicast+0x585/0x850 [ 651.876516][T13493] ? __pfx_netlink_unicast+0x10/0x10 [ 651.876548][T13493] netlink_sendmsg+0x8b0/0xda0 [ 651.876580][T13493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.876603][T13493] ? __might_fault+0x90/0x140 [ 651.876642][T13493] ____sys_sendmsg+0x9e1/0xb70 [ 651.876665][T13493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.876692][T13493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.876721][T13493] ? __pfx_futex_wake_mark+0x10/0x10 [ 651.876747][T13493] ___sys_sendmsg+0x190/0x1e0 [ 651.876774][T13493] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.876838][T13493] __sys_sendmsg+0x170/0x220 [ 651.876870][T13493] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.876900][T13493] ? __x64_sys_futex+0x34f/0x4d0 [ 651.876940][T13493] ? rcu_is_watching+0x12/0xc0 [ 651.876974][T13493] do_syscall_64+0x10b/0xf80 [ 651.876999][T13493] ? clear_bhb_loop+0x40/0x90 [ 651.877024][T13493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.877044][T13493] RIP: 0033:0x7fc03759cdd9 [ 651.877063][T13493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.877082][T13493] RSP: 002b:00007fc038492028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.877101][T13493] RAX: ffffffffffffffda RBX: 00007fc037816180 RCX: 00007fc03759cdd9 [ 651.877114][T13493] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000a [ 651.877125][T13493] RBP: 00007fc037632d69 R08: 0000000000000000 R09: 0000000000000000 [ 651.877137][T13493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.877149][T13493] R13: 00007fc037816218 R14: 00007fc037816180 R15: 00007ffee7d945c8 [ 651.877177][T13493] [ 651.947249][ T5758] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 652.023194][T13498] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1820'. [ 652.315398][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.358591][ T5725] usb 3-1: Using ep0 maxpacket: 32 [ 652.547611][ T5725] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.557790][ T5725] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 652.568450][ T5758] usb 7-1: device descriptor read/8, error -71 [ 652.610071][ T5725] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 652.619373][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.627611][ T5725] usb 3-1: Product: syz [ 652.632461][ T5725] usb 3-1: Manufacturer: syz [ 652.637085][ T5725] usb 3-1: SerialNumber: syz [ 652.678533][ T5725] usb 3-1: config 0 descriptor?? [ 652.724812][T13511] tipc: Started in network mode [ 652.742711][T13511] tipc: Node identity 2007ff, cluster identity 4711 [ 652.759142][T13513] 9pnet_virtio: no channels available for device ./file0 [ 652.759310][T13511] tipc: Node number set to 2099199 [ 652.774421][ T30] audit: type=1400 audit(1778124615.207:5993): avc: denied { create } for pid=13501 comm="syz.0.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 653.128871][T13523] overlayfs: missing 'lowerdir' [ 653.134264][ T5699] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 653.242697][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.294966][ T5699] usb 5-1: Using ep0 maxpacket: 8 [ 653.312455][ T5699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.325121][ T5699] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.347148][ T5699] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 653.403941][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.415099][ T5699] usb 5-1: Product: syz [ 653.419321][ T5699] usb 5-1: Manufacturer: syz [ 653.419368][T13525] overlayfs: unescaped trailing colons in lowerdir mount option. [ 653.424373][ T5699] usb 5-1: SerialNumber: syz [ 653.446573][ T5699] usb 5-1: config 0 descriptor?? [ 654.254768][ T5758] usb 5-1: USB disconnect, device number 74 [ 654.393899][T13541] binder_alloc: 13535: binder_alloc_buf, no vma [ 654.419783][T13543] fuse: Unknown parameter 'user_id00000000000000000000' [ 655.391169][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.887542][ T5758] usb 3-1: USB disconnect, device number 82 [ 656.170418][ T30] audit: type=1400 audit(1778124618.597:5994): avc: denied { mounton } for pid=13574 comm="syz.6.1844" path="/94/file1" dev="autofs" ino=42003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 656.432199][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.616199][ T30] audit: type=1400 audit(1778124618.607:5995): avc: denied { ioctl } for pid=13574 comm="syz.6.1844" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 657.870350][ T5699] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 657.955435][T13583] netlink: 'syz.6.1846': attribute type 3 has an invalid length. [ 658.067202][ T5699] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 658.135953][ T5699] usb 3-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 658.171097][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.188299][ T5699] usb 3-1: config 0 descriptor?? [ 658.430690][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.667836][ T5699] hid_parser_main: 12 callbacks suppressed [ 658.667857][ T5699] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 658.681629][ T30] audit: type=1400 audit(1778124621.117:5996): avc: denied { recv } for pid=5703 comm="kworker/1:4" saddr=10.128.0.169 src=36398 daddr=10.128.1.69 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 659.675960][ T5699] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 659.973279][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.035690][ T5699] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 660.057694][T13665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=13665 comm=syz.4.1859 [ 660.098828][ T5699] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 660.106132][T13665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=13665 comm=syz.4.1859 [ 660.512455][ T5699] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 660.536436][ T5699] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 660.537049][T13665] netlink: 4936 bytes leftover after parsing attributes in process `syz.4.1859'. [ 660.543850][ T5699] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 660.560000][ T5699] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 660.567408][ T5699] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 660.574603][ T5699] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 661.061431][ T5699] lenovo 0003:04B3:3108.0014: hidraw0: USB HID v0.24 Device [HID 04b3:3108] on usb-dummy_hcd.2-1/input0 [ 661.553822][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.646773][ T5699] usb 3-1: USB disconnect, device number 83 [ 661.719191][T13680] fido_id[13680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 661.769299][ T30] audit: type=1400 audit(1778124624.197:5997): avc: denied { block_suspend } for pid=13679 comm="syz.5.1863" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 662.195130][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.555722][T13697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.565065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.803080][T13707] overlayfs: missing 'lowerdir' [ 664.590811][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.310329][ T5612] Bluetooth: hci4: command 0x0405 tx timeout [ 665.394111][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.730638][ T5758] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 665.904177][ T5758] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 665.938126][ T5758] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 665.975032][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0 [ 665.996218][ T5758] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 666.019605][ T5758] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 666.042138][ T5758] usb 5-1: Product: syz [ 666.055330][ T5758] usb 5-1: Manufacturer: syz [ 666.069522][ T5758] usb 5-1: SerialNumber: syz [ 666.109616][ T5758] usb 5-1: config 0 descriptor?? [ 666.127058][T13745] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 666.163386][ T5758] usb 5-1: selecting invalid altsetting 0 [ 667.132492][T13751] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 667.164609][T13751] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 667.229103][T13751] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 667.283179][ T5758] usb 5-1: USB disconnect, device number 75 [ 667.298646][T13751] usb 5-1: cannot submit urb 0, error -19: no device [ 667.393895][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.630740][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.840297][ T5725] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 668.008955][ T5725] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 668.048852][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.074027][ T5725] usb 7-1: Product: syz [ 668.078292][ T5725] usb 7-1: Manufacturer: syz [ 668.349402][ T5725] usb 7-1: SerialNumber: syz [ 668.364182][ T5725] usb 7-1: config 0 descriptor?? [ 668.730392][ T5758] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 669.040941][T13789] overlayfs: missing 'lowerdir' [ 669.501818][ T5758] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 669.510069][ T5758] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.521323][ T5758] usb 5-1: config 0 has no interface number 0 [ 669.552603][ T5725] usb 7-1: Firmware: major: 229, minor: 48, hardware type: UNKNOWN (120) [ 669.579362][ T5758] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 669.680308][ T5758] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 669.692051][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.703744][ T5758] usb 5-1: config 0 descriptor?? [ 669.716762][ T5758] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 669.862005][ T5703] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 670.050409][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 670.066465][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.088186][T13803] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1896'. [ 670.102709][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.127511][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 670.143542][ T5703] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 670.157813][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.179176][ T5703] usb 3-1: config 0 descriptor?? [ 670.551793][T13811] 9pnet_fd: Insufficient options for proto=fd [ 670.700635][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.709490][ T5725] usb 7-1: failed to fetch extended address, random address set [ 670.727302][ T5725] usb 7-1: atusb_probe: initialization failed, error = -524 [ 670.736901][ T5725] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 670.769969][ T5703] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0015/input/input29 [ 670.826554][ T5710] usb 5-1: USB disconnect, device number 76 [ 670.827780][ T805] usb 7-1: USB disconnect, device number 23 [ 670.878974][ T5703] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 670.942431][T13813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.950366][ T5703] usb 3-1: USB disconnect, device number 84 [ 671.058468][T13814] fido_id[13814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 671.180666][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.312490][T13822] overlayfs: missing 'lowerdir' [ 671.955410][T13829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1903'. [ 672.533564][ T30] audit: type=1400 audit(1778124634.967:5998): avc: denied { execute_no_trans } for pid=13843 comm="syz.5.1906" path=2F6D656D66643A2D45D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=43249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 672.628066][T13849] vcan0: tx address claim with different name [ 672.698443][ T5699] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 672.718082][ T30] audit: type=1400 audit(1778124635.147:5999): avc: denied { map } for pid=13812 comm="syz.6.1898" path="socket:[42431]" dev="sockfs" ino=42431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 672.959702][ T30] audit: type=1400 audit(1778124635.147:6000): avc: denied { read } for pid=13812 comm="syz.6.1898" path="socket:[42431]" dev="sockfs" ino=42431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 672.993399][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.004165][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.071891][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.272177][ T5699] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 673.286268][ T5699] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 673.304370][ T5699] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 673.320769][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.336973][T13840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 673.352419][ T5699] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 673.595666][T13858] netlink: 'syz.5.1910': attribute type 1 has an invalid length. [ 673.675717][T13861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1910'. [ 673.712179][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.750650][T13858] bond1: entered promiscuous mode [ 673.865979][T13858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 674.016446][T13867] lo speed is unknown, defaulting to 1000 [ 674.128681][T13861] bond1: entered allmulticast mode [ 674.270983][T13858] bond1: (slave bridge0): making interface the new active one [ 674.346075][T13858] bridge0: entered promiscuous mode [ 674.370518][T13858] bridge0: entered allmulticast mode [ 674.397492][T13858] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 674.561607][ T5703] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 674.581539][T13867] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 674.742637][ T5703] usb 3-1: config 0 has no interfaces? [ 674.758558][ T5703] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 674.835852][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.887567][ T5703] usb 3-1: config 0 descriptor?? [ 675.143931][T13875] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1914'. [ 676.291640][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.574750][ T5703] usb 5-1: USB disconnect, device number 77 [ 676.752232][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.021695][ T5703] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 677.210893][ T5703] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 677.441980][ T5703] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 677.461717][ T5703] usb 5-1: config 0 interface 0 has no altsetting 0 [ 677.473512][ T5703] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 677.490156][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 677.507891][ T5703] usb 5-1: Product: syz [ 677.520126][ T5703] usb 5-1: Manufacturer: syz [ 677.535458][ T5703] usb 5-1: SerialNumber: syz [ 677.558990][ T5703] usb 5-1: config 0 descriptor?? [ 677.571237][T13894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 677.584291][ T5703] usb 5-1: selecting invalid altsetting 0 [ 678.178464][ T30] audit: type=1400 audit(1778124640.247:6001): avc: denied { setattr } for pid=13911 comm="syz.6.1925" name="dsp" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 678.314642][T13918] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 678.334641][T13918] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 678.356080][T13918] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 678.384906][T13918] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 678.406116][ T5703] usb 5-1: USB disconnect, device number 78 [ 678.417928][T13918] usb 5-1: cannot submit urb 0, error -19: no device [ 678.420389][ T5725] usb 3-1: USB disconnect, device number 85 [ 678.831198][T12396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.950101][T13930] netlink: 'syz.5.1928': attribute type 3 has an invalid length. [ 679.437376][T13938] lo speed is unknown, defaulting to 1000 [ 680.122528][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.350804][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.170119][T13957] netlink: 'syz.6.1935': attribute type 3 has an invalid length. [ 681.216213][T13972] netlink: 'syz.2.1937': attribute type 3 has an invalid length. [ 681.424529][T13975] netlink: 'syz.5.1938': attribute type 3 has an invalid length. [ 681.696442][T13983] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1940'. [ 681.797070][T13987] overlayfs: missing 'lowerdir' [ 681.805641][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 681.816130][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 682.048033][ T7413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.083224][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 682.161993][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 682.174674][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 682.185991][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 682.224894][T13988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13988 comm=syz.4.1940 [ 682.279832][T13983] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1940'. [ 682.415724][T13979] ceph: No mds server is up or the cluster is laggy [ 682.446951][T13981] ceph: No mds server is up or the cluster is laggy [ 682.463810][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 682.469996][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 683.016356][T14006] macsec1: entered promiscuous mode [ 683.021648][T14006] macsec1: entered allmulticast mode [ 683.391648][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.730322][ T5718] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 683.914771][ T5718] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 683.931200][ T5718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.950893][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.975518][ T5718] usb 5-1: config 0 has no interface number 0 [ 683.999236][ T5718] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 684.044620][ T5718] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 684.074562][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.111912][ T5718] usb 5-1: config 0 descriptor?? [ 684.132047][ T5718] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 684.937061][T14031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.948205][T14031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.960782][T14031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.972058][T14031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.022976][T14032] 9pnet_fd: Insufficient options for proto=fd [ 685.050991][T14031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.126845][T14030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.203144][ T30] audit: type=1400 audit(1778124647.637:6002): avc: denied { listen } for pid=14033 comm="syz.6.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 685.225621][ T30] audit: type=1400 audit(1778124647.657:6003): avc: denied { connect } for pid=14033 comm="syz.6.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 685.247344][ T30] audit: type=1400 audit(1778124647.657:6004): avc: denied { accept } for pid=14033 comm="syz.6.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 685.250824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.495716][ T5699] usb 5-1: USB disconnect, device number 79 [ 686.613793][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 686.635948][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 687.035991][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 687.042306][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 687.056562][T14066] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1956'. [ 687.261477][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 687.276922][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 687.360890][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 687.369151][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 687.445875][T14075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14075 comm=syz.2.1956 [ 687.576041][T14075] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1956'. [ 687.800685][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 687.807327][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 687.812191][T14053] ceph: No mds server is up or the cluster is laggy [ 687.827526][T14050] ceph: No mds server is up or the cluster is laggy [ 688.330475][ T5718] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 688.536644][T14107] Option ' scÐ' to dns_resolver key: bad/missing value [ 688.573298][ T5718] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 688.585349][ T5718] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 688.598704][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 688.612642][ T5718] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 688.621905][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 688.630431][ T5718] usb 5-1: Product: syz [ 688.635244][ T5718] usb 5-1: Manufacturer: syz [ 688.644403][ T5718] usb 5-1: SerialNumber: syz [ 688.660264][ T5718] usb 5-1: config 0 descriptor?? [ 688.665987][T14089] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 688.677232][ T5718] usb 5-1: selecting invalid altsetting 0 [ 689.009633][T14110] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 689.029370][T14110] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 689.044032][T14110] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 689.054565][T14110] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 689.065802][ T5718] usb 5-1: USB disconnect, device number 80 [ 689.092128][T14110] usb 5-1: cannot submit urb 0, error -19: no device [ 689.197731][T14116] netlink: 'syz.2.1971': attribute type 4 has an invalid length. [ 689.320356][ T5725] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 689.497220][ T5710] net_ratelimit: 1 callbacks suppressed [ 689.497594][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.546622][ T5725] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 689.556298][ T5725] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.574736][ T5725] usb 7-1: config 0 has no interface number 0 [ 689.583703][ T5725] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 689.597855][ T5725] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 689.607748][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.711306][ T7413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.717539][ T5725] usb 7-1: config 0 descriptor?? [ 689.824398][ T5725] usbhid 7-1:0.1: couldn't find an input interrupt endpoint [ 690.543122][ T5703] hid_parser_main: 27 callbacks suppressed [ 690.543142][ T5703] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 690.567364][ T5703] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 690.662254][T14155] 9pnet_fd: Insufficient options for proto=fd [ 690.920289][ T5725] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 690.953310][ T5805] usb 7-1: USB disconnect, device number 24 [ 691.070529][ T5725] usb 5-1: Using ep0 maxpacket: 8 [ 691.135700][ T5725] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 691.184924][ T5710] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 691.525287][ T5725] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 691.539444][ T5725] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 691.549274][ T5725] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 691.560465][ T5725] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.578396][ T5725] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 691.598663][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.685227][ T5710] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 691.697001][ T5710] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 691.708121][ T5710] usb 3-1: config 0 interface 0 has no altsetting 0 [ 691.719044][ T5710] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 691.729265][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 691.737543][ T5710] usb 3-1: Product: syz [ 691.741998][ T5710] usb 3-1: Manufacturer: syz [ 691.746650][ T5710] usb 3-1: SerialNumber: syz [ 691.754256][ T5710] usb 3-1: config 0 descriptor?? [ 691.850283][ T5718] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 691.871097][T14159] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 691.939434][ T5710] usb 3-1: selecting invalid altsetting 0 [ 692.006182][ T5725] usb 5-1: usb_control_msg returned -32 [ 692.023725][ T5725] usbtmc 5-1:16.0: can't read capabilities [ 692.037750][ T5718] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 692.081336][ T5718] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 692.125677][ T5718] usb 7-1: config 0 interface 0 has no altsetting 0 [ 692.151957][ T5718] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 692.174238][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 692.198363][ T5718] usb 7-1: Product: syz [ 692.210420][ T5718] usb 7-1: Manufacturer: syz [ 692.220285][ T5718] usb 7-1: SerialNumber: syz [ 692.233523][ T5718] usb 7-1: config 0 descriptor?? [ 692.249324][T14178] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 692.268065][ T5718] usb 7-1: selecting invalid altsetting 0 [ 692.269481][T14159] vcan0: tx address claim with different name [ 692.301011][T14159] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 692.310873][T14159] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 692.319338][T14159] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 692.328721][T14159] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 692.337007][T14159] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 692.351211][ T5805] usb 3-1: USB disconnect, device number 86 [ 692.487281][T14178] vcan0: tx address claim with different name [ 692.507419][ T5718] usb 7-1: USB disconnect, device number 25 [ 692.527966][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.595142][ T5725] usb 5-1: USB disconnect, device number 81 [ 692.596287][T14186] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -71 [ 694.729690][T14208] 9pnet_fd: Insufficient options for proto=fd [ 696.030577][T14227] overlayfs: missing 'lowerdir' [ 696.131293][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.142897][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.547813][T14232] binder: 14231:14232 ioctl c0306201 2000000003c0 returned -14 [ 697.502201][T14251] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2008'. [ 698.256174][T14251] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 698.276823][T14246] pim6reg: left allmulticast mode [ 698.702612][ T5805] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 698.820380][T13081] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 698.864191][ T30] audit: type=1400 audit(1778124661.297:6005): avc: denied { create } for pid=14262 comm="syz.0.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 698.890509][ T5805] usb 5-1: device descriptor read/64, error -71 [ 698.981085][T13081] usb 7-1: Using ep0 maxpacket: 8 [ 699.150793][ T5805] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 699.191655][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.203701][T13081] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 699.211517][T13081] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 699.223797][T13081] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 699.248837][T13081] usb 7-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 699.291622][T13081] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 699.320051][ T5805] usb 5-1: device descriptor read/64, error -71 [ 699.329204][T13081] usb 7-1: config 168 interface 0 has no altsetting 0 [ 699.337345][T13081] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 699.345085][T13081] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 699.357614][T13081] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 699.370995][T13081] usb 7-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 699.384124][T13081] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 699.404735][T13081] usb 7-1: config 168 interface 0 has no altsetting 0 [ 699.413400][T13081] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 699.421889][T13081] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 699.435125][T13081] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 699.441631][ T5805] usb usb5-port1: attempt power cycle [ 699.449181][T13081] usb 7-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 699.466187][T13081] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 699.483730][T13081] usb 7-1: config 168 interface 0 has no altsetting 0 [ 699.494437][T13081] usb 7-1: string descriptor 0 read error: -22 [ 699.501857][T13081] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 699.512634][T13081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.527452][T13081] adutux 7-1:168.0: interrupt endpoints not found [ 699.534629][T14269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2013'. [ 699.830369][ T5805] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 699.932228][T14256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.964375][T14256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.994055][T14256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.021574][T14256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.072313][ T5805] usb 5-1: device not accepting address 84, error -71 [ 700.237701][T14256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.251260][T14256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.264813][ T805] usb 7-1: USB disconnect, device number 26 [ 700.420301][ T5805] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 700.442230][ T5805] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.450505][ T5805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.467289][ T5805] usb 5-1: config 0 has no interface number 0 [ 700.475417][ T5805] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 700.491378][ T5805] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 700.500670][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.515872][ T5805] usb 5-1: config 0 descriptor?? [ 700.528921][ T5805] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 701.025238][T14307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.049567][T14307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.083139][T14308] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 701.093972][T14308] SELinux: failed to load policy [ 701.232165][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.338992][T14313] 9pnet_fd: Insufficient options for proto=fd [ 701.472558][ T5725] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 701.545046][ T805] usb 5-1: USB disconnect, device number 85 [ 701.610286][ T5725] usb 7-1: device descriptor read/64, error -71 [ 701.870588][ T5725] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 701.878403][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.990299][ T805] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 702.030615][ T5725] usb 7-1: device descriptor read/64, error -71 [ 703.081636][ T5725] usb usb7-port1: attempt power cycle [ 703.099426][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.099859][ T805] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 703.122799][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.150648][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.156736][ T805] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 703.170587][ T805] usb 5-1: config 0 interface 0 has no altsetting 0 [ 703.171151][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.179204][ T805] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 703.194696][ T805] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 703.203123][ T805] usb 5-1: Product: syz [ 703.207337][ T805] usb 5-1: Manufacturer: syz [ 703.212679][ T805] usb 5-1: SerialNumber: syz [ 703.219631][ T805] usb 5-1: config 0 descriptor?? [ 703.225509][T14317] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 703.237028][ T805] usb 5-1: selecting invalid altsetting 0 [ 703.385015][T14329] netlink: 'syz.5.2022': attribute type 3 has an invalid length. [ 703.460541][ T5725] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 703.481115][ T5725] usb 7-1: device descriptor read/8, error -71 [ 703.548355][T14331] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 703.576658][T14331] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 703.601459][ T5758] usb 5-1: USB disconnect, device number 86 [ 703.610611][T14331] usb 5-1: cannot submit urb 0, error -19: no device [ 703.730316][ T5725] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 703.772302][ T5725] usb 7-1: device descriptor read/8, error -71 [ 703.902525][ T5725] usb usb7-port1: unable to enumerate USB device [ 704.965755][T14346] xt_recent: Unsupported userspace flags (000000de) [ 705.341347][ T30] audit: type=1400 audit(1778124667.747:6006): avc: denied { bind } for pid=14345 comm="syz.4.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 705.342531][T14354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2030'. [ 705.392402][ T30] audit: type=1400 audit(1778124667.757:6007): avc: denied { listen } for pid=14345 comm="syz.4.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 706.190782][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.235076][ T30] audit: type=1400 audit(1778124668.667:6008): avc: denied { ioctl } for pid=14370 comm="syz.0.2032" path="socket:[44553]" dev="sockfs" ino=44553 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 706.514814][T14384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2040'. [ 706.552129][T14384] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2040'. [ 706.596653][T14384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14384 comm=syz.4.2040 [ 706.634792][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2041'. [ 707.778868][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.787331][T14298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.113485][T14406] netlink: 'syz.2.2048': attribute type 4 has an invalid length. [ 709.563937][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.404881][T14431] IPv6: NLM_F_CREATE should be specified when creating new route [ 710.412823][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 711.336289][T14445] lo speed is unknown, defaulting to 1000 [ 711.830869][ T30] audit: type=1400 audit(1778124674.257:6009): avc: denied { getopt } for pid=14441 comm="syz.0.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 712.676586][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.752829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.915133][ T5612] Bluetooth: hci4: command 0x0405 tx timeout [ 713.877906][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.887104][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.388648][T14482] fuse: fd is not a fuse device [ 714.396188][T14480] netlink: 'syz.4.2068': attribute type 4 has an invalid length. [ 714.718158][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2070'. [ 715.355378][T14503] bridge_slave_0: default FDB implementation only supports local addresses [ 715.660751][ T5805] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 715.715537][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.831248][ T5805] usb 7-1: device descriptor read/64, error -71 [ 716.250748][T14516] lo speed is unknown, defaulting to 1000 [ 717.191968][ T5805] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 717.296101][T14520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14520 comm=syz.5.2076 [ 717.333891][T14523] tipc: Enabled bearer , priority 0 [ 717.345677][T14523] tipc: Resetting bearer [ 717.357209][T14523] FAULT_INJECTION: forcing a failure. [ 717.357209][T14523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.370581][T14523] CPU: 1 UID: 0 PID: 14523 Comm: syz.2.2081 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.370608][T14523] Tainted: [L]=SOFTLOCKUP [ 717.370615][T14523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 717.370626][T14523] Call Trace: [ 717.370632][T14523] [ 717.370639][T14523] dump_stack_lvl+0x100/0x190 [ 717.370666][T14523] should_fail_ex.cold+0x5/0xa [ 717.370692][T14523] _copy_to_user+0x32/0xd0 [ 717.370720][T14523] simple_read_from_buffer+0xcb/0x170 [ 717.370746][T14523] proc_fail_nth_read+0x1af/0x230 [ 717.370768][T14523] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 717.370789][T14523] ? rw_verify_area+0xce/0x6d0 [ 717.370808][T14523] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 717.370827][T14523] vfs_read+0x1e4/0xb30 [ 717.370850][T14523] ? __pfx_vfs_read+0x10/0x10 [ 717.370869][T14523] ? __fget_files+0x215/0x3d0 [ 717.370897][T14523] ? __fget_files+0x21f/0x3d0 [ 717.370927][T14523] ksys_read+0x12a/0x250 [ 717.370947][T14523] ? __pfx_ksys_read+0x10/0x10 [ 717.370969][T14523] ? rcu_is_watching+0x12/0xc0 [ 717.371000][T14523] do_syscall_64+0x10b/0xf80 [ 717.371022][T14523] ? clear_bhb_loop+0x40/0x90 [ 717.371045][T14523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.371064][T14523] RIP: 0033:0x7ff61575d60e [ 717.371080][T14523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.371097][T14523] RSP: 002b:00007ff6165cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 717.371114][T14523] RAX: ffffffffffffffda RBX: 00007ff6165cf6c0 RCX: 00007ff61575d60e [ 717.371126][T14523] RDX: 000000000000000f RSI: 00007ff6165cf0a0 RDI: 0000000000000009 [ 717.371137][T14523] RBP: 00007ff6165cf090 R08: 0000000000000000 R09: 0000000000000000 [ 717.371154][T14523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.371165][T14523] R13: 00007ff615a16038 R14: 00007ff615a15fa0 R15: 00007ffc4e9f8ba8 [ 717.371190][T14523] [ 717.580073][ T5805] usb 7-1: device descriptor read/64, error -71 [ 717.725484][ T5805] usb usb7-port1: attempt power cycle [ 717.749723][T14523] tipc: Disabling bearer [ 718.090308][ T5805] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 718.110972][ T5805] usb 7-1: device descriptor read/8, error -71 [ 718.290323][T13081] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 718.350324][ T5805] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 718.388925][T14538] tipc: Enabled bearer , priority 0 [ 718.398521][ T5805] usb 7-1: device descriptor read/8, error -71 [ 718.428414][T14537] tipc: Disabling bearer [ 718.442496][T13081] usb 3-1: device descriptor read/64, error -71 [ 718.511003][ T5805] usb usb7-port1: unable to enumerate USB device [ 718.573033][T14542] tipc: Enabling of bearer rejected, failed to enable media [ 718.615597][ T30] audit: type=1400 audit(1778124681.047:6010): avc: denied { setopt } for pid=14549 comm="syz.6.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 719.390446][T13081] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 719.418440][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.432298][T14557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=14557 comm=syz.6.2093 [ 719.450356][ T5699] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 719.550320][T13081] usb 3-1: device descriptor read/64, error -71 [ 719.602384][ T5699] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 719.610891][ T5699] usb 5-1: config 128 has no interface number 0 [ 719.617150][ T5699] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 719.628518][ T5699] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 719.639915][ T5699] usb 5-1: config 128 interface 148 has no altsetting 0 [ 719.648461][ T5699] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 719.657598][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.660430][T13081] usb usb3-port1: attempt power cycle [ 719.666181][ T5699] usb 5-1: Product: syz [ 719.675327][ T5699] usb 5-1: Manufacturer: syz [ 719.679905][ T5699] usb 5-1: SerialNumber: syz [ 719.790582][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.800083][ T7749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.810258][ T805] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 719.898169][ T5699] usb 5-1: USB disconnect, device number 87 [ 719.973049][ T805] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 719.982212][ T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.990181][ T805] usb 7-1: Product: syz [ 719.994355][ T805] usb 7-1: Manufacturer: syz [ 719.998919][ T805] usb 7-1: SerialNumber: syz [ 720.010308][T13081] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 720.030748][T13081] usb 3-1: device descriptor read/8, error -71 [ 720.218428][ T805] cdc_ncm 7-1:1.0: bind() failure [ 720.226480][ T805] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 720.233446][ T805] cdc_ncm 7-1:1.1: bind() failure [ 720.242027][ T805] usb 7-1: USB disconnect, device number 35 [ 720.270519][T13081] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 720.291558][T13081] usb 3-1: device descriptor read/8, error -71 [ 720.330276][ T5758] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 720.401080][T13081] usb usb3-port1: unable to enumerate USB device [ 720.480258][ T5758] usb 5-1: Using ep0 maxpacket: 8 [ 720.486591][ T5758] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 720.495033][ T5758] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 720.505329][ T5758] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 720.515255][ T5758] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 720.525229][ T5758] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.538312][ T5758] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 720.547417][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.794942][ T5758] usb 5-1: GET_CAPABILITIES returned 0 [ 720.811962][ T5758] usbtmc 5-1:16.0: can't read capabilities [ 721.007497][T14545] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 721.202413][ T5758] usb 5-1: USB disconnect, device number 88 [ 722.562027][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.827246][ T5699] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 726.144379][ T7413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.450218][ C0] sched: DL replenish lagged too much [ 730.502016][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.957047][ T5699] usb 7-1: device descriptor read/all, error -110 [ 741.744242][ T7749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.931860][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.053684][T14295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.355562][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.384534][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.110751][ T7749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.492792][T14295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.273617][T14288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.826822][T14296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.200505][T14288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.612922][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.822429][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.250352][T14296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.667533][T12396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.113703][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.217072][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.373994][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.236958][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.445006][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.733685][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.812497][T13662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.625881][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.392121][T14288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.894898][T14295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.430164][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 829.437121][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14577/1:b..l [ 829.445543][ C1] rcu: (detected by 1, t=10503 jiffies, g=84825, q=2405 ncpus=2) [ 829.453314][ C1] task:syz.2.2097 state:R running task stack:25144 pid:14577 tgid:14571 ppid:5614 task_flags:0x400040 flags:0x00080002 [ 829.467545][ C1] Call Trace: [ 829.470804][ C1] [ 829.473711][ C1] __schedule+0x10e9/0x6820 [ 829.478196][ C1] ? __pfx___schedule+0x10/0x10 [ 829.483018][ C1] ? mark_held_locks+0x40/0x70 [ 829.487757][ C1] preempt_schedule_irq+0x50/0x90 [ 829.492756][ C1] irqentry_exit+0x1fe/0x790 [ 829.497330][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 829.503280][ C1] RIP: 0010:rcu_is_watching+0x0/0xc0 [ 829.508552][ C1] Code: 3a ff ff ff 48 89 df e8 fe 72 89 00 eb 81 e8 27 73 89 00 e9 49 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 65 ff 05 f3 d7 1d 12 e8 6e 50 9d 09 48 c7 c3 a8 [ 829.528140][ C1] RSP: 0018:ffffc9000369f290 EFLAGS: 00000297 [ 829.534180][ C1] RAX: 0000000000000001 RBX: ffffffff8e7e54e0 RCX: ffffffff91763f01 [ 829.542123][ C1] RDX: 0000000000000000 RSI: ffffffff81b7c1ae RDI: ffffffff8e7e54e0 [ 829.550069][ C1] RBP: ffffffff81b7c1ae R08: 0000000000000001 R09: 0000000000000007 [ 829.558012][ C1] R10: 0000000000000200 R11: 000000000000b7e1 R12: ffffc9000369f3f0 [ 829.565953][ C1] R13: ffffc9000369f3a0 R14: ffffc9000369f3a0 R15: ffffc9000369f3d4 [ 829.573897][ C1] ? unwind_next_frame+0x3be/0x2090 [ 829.579073][ C1] ? unwind_next_frame+0x3be/0x2090 [ 829.584246][ C1] lock_release+0x245/0x310 [ 829.588732][ C1] unwind_next_frame+0x3c3/0x2090 [ 829.593729][ C1] ? __unwind_start+0x2fb/0x7f0 [ 829.598556][ C1] __unwind_start+0x3d1/0x7f0 [ 829.603214][ C1] ? kernel_text_address+0x8d/0x100 [ 829.608393][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 829.614533][ C1] arch_stack_walk+0x73/0xf0 [ 829.619103][ C1] ? arch_stack_walk+0x73/0xf0 [ 829.623844][ C1] ? skb_free_head+0xb9/0x160 [ 829.628498][ C1] stack_trace_save+0x8e/0xc0 [ 829.633153][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 829.638502][ C1] ? __lock_acquire+0x4a5/0x2630 [ 829.643415][ C1] kasan_save_stack+0x30/0x50 [ 829.648083][ C1] kasan_save_track+0x14/0x30 [ 829.652729][ C1] kasan_save_free_info+0x3b/0x70 [ 829.657727][ C1] __kasan_slab_free+0x5f/0x80 [ 829.662465][ C1] ? skb_free_head+0xb0/0x160 [ 829.667117][ C1] kfree+0x223/0x6c0 [ 829.670981][ C1] ? kmem_cache_free+0x127/0x6c0 [ 829.675894][ C1] ? sock_wfree+0x423/0x830 [ 829.680383][ C1] skb_free_head+0xb9/0x160 [ 829.684867][ C1] skb_release_data+0x6c5/0x8e0 [ 829.689693][ C1] sk_skb_reason_drop+0x102/0x1b0 [ 829.694694][ C1] j1939_session_destroy+0x15e/0x470 [ 829.699963][ C1] j1939_session_put+0x5b/0x90 [ 829.704703][ C1] j1939_sk_sendmsg+0xd50/0x1440 [ 829.709625][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 829.714980][ C1] ____sys_sendmsg+0x9e1/0xb70 [ 829.719718][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 829.725062][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 829.730326][ C1] ? rcu_is_watching+0x12/0xc0 [ 829.735073][ C1] ? ___sys_sendmsg+0x19d/0x1e0 [ 829.739895][ C1] ? kfree+0x1dd/0x6c0 [ 829.743938][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 829.750335][ C1] ___sys_sendmsg+0x190/0x1e0 [ 829.755003][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.760183][ C1] ? do_user_addr_fault+0x7de/0x12f0 [ 829.765460][ C1] ? irqentry_exit+0x246/0x790 [ 829.770208][ C1] ? __pfx___might_resched+0x10/0x10 [ 829.775477][ C1] __sys_sendmmsg+0x205/0x430 [ 829.780136][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 829.785320][ C1] ? preempt_schedule_irq+0x7b/0x90 [ 829.790505][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 829.795423][ C1] do_syscall_64+0x10b/0xf80 [ 829.799994][ C1] ? clear_bhb_loop+0x40/0x90 [ 829.804660][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.810535][ C1] RIP: 0033:0x7ff61579cdd9 [ 829.814926][ C1] RSP: 002b:00007ff61658d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 829.823305][ C1] RAX: ffffffffffffffda RBX: 00007ff615a16180 RCX: 00007ff61579cdd9 [ 829.831247][ C1] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000007 [ 829.839189][ C1] RBP: 00007ff615832d69 R08: 0000000000000000 R09: 0000000000000000 [ 829.847131][ C1] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000000 [ 829.855074][ C1] R13: 00007ff615a16218 R14: 00007ff615a16180 R15: 00007ffc4e9f8ba8 [ 829.863034][ C1] [ 831.401411][ T164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.272856][T14293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.506408][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog