last executing test programs: 8m16.693641019s ago: executing program 0 (id=3811): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x61]}}, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 8m16.692854053s ago: executing program 0 (id=3813): r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0245628, &(0x7f0000000180)={0x0, 0x8000, 0xb, '\x00', &(0x7f0000000140)=0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x8c, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_clone(0x1004000, &(0x7f0000000000)="fbbf5320d40f21df220061b6f302424cefb48e5830d26dc382d5c16048ebed3a97527218fde52c117127d23f905b57c7664837992958e7d91546be03da20afe5643dc75118b2a78dac0f03c2d07a3302a89578c2ecd24ac66ae28f612d4758876d4b3700bb02bd6f6981780624e290c6e471dd437bea4dcb2cbc5debf4dfce90021c80d1ce968a5a0a100e4310fc852f015c99562acf80c34834d36f20d2a8a1126dc8c35ed4289808d2fd80dbb19bcc94e6d66f4c9febe6a2aade42a5e9f2113a", 0xc1, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="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") openat$vicodec1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_G_EDID(r0, 0xc0245628, &(0x7f0000000180)={0x0, 0x8000, 0xb, '\x00', &(0x7f0000000140)=0x7}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) dup(r2) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001280), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x8c, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) syz_clone(0x1004000, &(0x7f0000000000)="fbbf5320d40f21df220061b6f302424cefb48e5830d26dc382d5c16048ebed3a97527218fde52c117127d23f905b57c7664837992958e7d91546be03da20afe5643dc75118b2a78dac0f03c2d07a3302a89578c2ecd24ac66ae28f612d4758876d4b3700bb02bd6f6981780624e290c6e471dd437bea4dcb2cbc5debf4dfce90021c80d1ce968a5a0a100e4310fc852f015c99562acf80c34834d36f20d2a8a1126dc8c35ed4289808d2fd80dbb19bcc94e6d66f4c9febe6a2aade42a5e9f2113a", 0xc1, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="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") (async) 8m16.566332918s ago: executing program 0 (id=3815): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'wg1\x00', 0x2000}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bind$llc(r2, &(0x7f0000000080), 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x4, 0x15, 0x20, 0x0, "c3fea293681a0fa1ff856aa471fe2617dfb4eb45d73158000000568e00"}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000400)="66e000b8010000000f01c1b94c0300000f32b9be0200000f32b9800000c00f3235000400000f307373baf80cb8185c2989b8dd6a00000f23c80f21f8350c0000000f23f86619820c252566baf80cb89fa7d981ef66bafc0cec0f01c566ba4200b00dee0f01cb", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000009"]) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x5, 0x4, 0xfffffff9, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4}) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m15.455383825s ago: executing program 0 (id=3834): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) (fail_nth: 2) 8m15.305260199s ago: executing program 0 (id=3838): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f00000014c0)={0x19, 0x5, 0xf1}) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800009602"]) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) r8 = fsopen(&(0x7f0000000240)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x8, 0x0, 0x0, 0x0) 8m15.167287904s ago: executing program 0 (id=3840): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$bind(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x80000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'pim6reg0\x00', {0x2, 0x0, @loopback}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) readv(r2, &(0x7f0000000900)=[{&(0x7f0000000400)=""/190, 0xbe}], 0x1) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 8m15.09593604s ago: executing program 32 (id=3840): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$bind(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x80000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'pim6reg0\x00', {0x2, 0x0, @loopback}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) readv(r2, &(0x7f0000000900)=[{&(0x7f0000000400)=""/190, 0xbe}], 0x1) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 5m39.706865552s ago: executing program 1 (id=5024): ptrace(0x4206, 0x0) ptrace(0x8, 0x0) ptrace$setsig(0x4207, 0x0, 0x57d, 0x0) 5m39.633458502s ago: executing program 1 (id=5025): syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588"], 0x0) 5m39.632992371s ago: executing program 1 (id=5026): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x6, &(0x7f0000000080)={0xc, "df1e970974a75196eeb58543bd9d2ba55aeacc9859bdc9f2472342370527626623"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x19, &(0x7f0000000500)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbc33}}, @call={0x85, 0x0, 0x0, 0x36}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) fspick(r5, &(0x7f0000000340)='./file0\x00', 0x1) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) (async) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)) mq_timedreceive(r7, 0x0, 0xffffffffffffffe7, 0x20004000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e24, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}, 0x0, 0x0, 0xb, 0x0, "0c9e089c01860b471037f43d223b3c1b324debec40e55a07f709417eb48821996aff1c7154e746be4d7686455261c425a7519cc269d04e6205abaabde24a2b12440b329ad5bd35f21907c7988d1300"}, 0xd8) 5m39.328613427s ago: executing program 1 (id=5027): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4d) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (fail_nth: 3) 5m39.280345978s ago: executing program 1 (id=5028): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x29, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x57840}, @ldst={0x1, 0x1, 0x0, 0xa, 0x7, 0x1, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x61, &(0x7f0000000380)=""/97, 0x40f00, 0xe, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x6, 0x80000001, 0xffff2a05}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, r1, r1, r1, r1], 0x0, 0x10, 0xb70, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000140)='mm_collapse_huge_page_swapin\x00', r5, 0x0, 0x3}, 0x18) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r7], 0x38}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_create(0x1, 0x80800) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) ioprio_set$pid(0x2, r9, 0x4007) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r8, &(0x7f0000000040)=""/172, 0xac, 0x0) 5m39.050894046s ago: executing program 1 (id=5031): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000001000040"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) 5m39.017477091s ago: executing program 33 (id=5031): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000001000040"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) 1m49.281412022s ago: executing program 2 (id=6511): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r7, @ANYRES32=r5], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m46.230934777s ago: executing program 2 (id=6533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) write$tun(r3, &(0x7f0000000380)={@void, @void, @x25={0x1, 0x3d, 0xf1, "7bbae297e101c7101b590d78f7b478dd969c06f2a48fce3dd608e4d7f3d3c697e7f6abafcb4810b0e4e05a408c470842da94cdbc361b7f5c9cde6d80a7ab93acdcf9c7f37e8a1a9b553e2d52e7404d12221215d941f1bbbf61712057fbb4dcf57adc68fb375e4518381c79c86a15f26a1c15c3251e9da6b299b72e8a8e16e9faadbf00f5625ef26ccc7e390549629fab681175cd968f252a89139441e64cb4d4158475ba4ffa57bdbb18f84dc18cfe118e2f68c249591f969006f69bc145f994891a69"}}, 0xc6) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0xe19, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x2c, 0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004800c}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000803fe03010009cd8d1f000200000009050502000658b8d8e77de1b083", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64=r4], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x5}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mremap(&(0x7f0000f1a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000e69000/0x2000)=nil) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$binderfs(0xffffff9c, &(0x7f0000000480)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0xb, 0x1}) ptrace(0x10, r7) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB='%'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43133, 0xffffffffffffffff, 0xfffffffff0000000) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r9, &(0x7f0000000180)='0', 0x1) 1m43.16931199s ago: executing program 2 (id=6551): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5f21, 0x0, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1e1, &(0x7f0000000900)={@broadcast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0xff801}, {0x1, 0x0, 0x1}, {0xffffb, 0x0, 0x1}], @ipv6=@tipc_packet={0x7, 0x6, "1c7409", 0x19b, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}, @loopback, {[@srh={0x2e, 0x4, 0x4, 0x2, 0x6, 0xd0, 0xc, [@empty, @private2]}, @srh={0x14, 0xa, 0x4, 0x5, 0x9, 0x0, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, @remote]}, @routing={0x51, 0x14, 0x0, 0xd, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @rand_addr=' \x01\x00', @private0, @mcast1, @private2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3b}, @loopback, @empty]}, @srh={0x87, 0x2, 0x4, 0x1, 0x9, 0x40, 0x5, [@empty]}, @fragment={0x81, 0x0, 0x4c, 0x0, 0x0, 0x4, 0x64}, @hopopts={0xd7, 0x2, '\x00', [@enc_lim, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x100, [0x7]}}]}], @payload_mcast={{{{{{0x33, 0x0, 0x0, 0x1, 0x1, 0xb, 0x0, 0x2, 0x4000, 0x0, 0x3, 0x5, 0x1, 0x1, 0x0, 0x6b, 0x0, 0x4e22, 0x4e24}, 0x1, 0x2}, 0x4, 0x3}}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0001000000000000000000020000000000c800000000004f20e31a472941a952fa4e703253bd46267c8fa17281a5f228954718da8b398f3f519ebcb107d920c0cca750540273ed160fd02453b3953abc0326ff05462628ad2ef75673ece5a3e9d5b3ee673d1cceebdcfc5d10b68e2149fcd224a9bd15ee2bc45717f9f34c7014887bcc6821"], 0x1c}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x3) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018000008000005"], 0x54}}, 0x0) creat(0x0, 0xc2) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x208, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x8c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffc}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x10}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x4}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0xa, 0xb8, 0x0, 0x8001, 0x8001, 0x6}}, {0x10, 0x2, [0x3, 0x4, 0xd, 0x681, 0x1, 0x8001]}}, {{0x1c, 0x1, {0x4, 0xc6, 0x5, 0xc, 0x2, 0x800, 0x5, 0x3}}, {0xa, 0x2, [0x8001, 0xff, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x2, 0x2, 0x1, 0xf, 0xffff, 0x2}}, {0x8, 0x2, [0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0x32, 0x56e, 0x2, 0x1, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x522]}}, {{0x1c, 0x1, {0x7, 0x0, 0x37b5, 0x1, 0x1, 0x8, 0x970, 0x3}}, {0xa, 0x2, [0x8, 0xf, 0x6]}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffc, 0xa, 0x1, 0x1, 0xfffffff0, 0x7}}, {0x12, 0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x800, 0xe]}}, {{0x1c, 0x1, {0x66, 0x0, 0x3, 0x6, 0x0, 0x7f, 0xda18, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x4, 0x2, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x2, 0xe4f, 0xcc, 0x6, 0x6]}}]}]}, 0x208}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000001000370400000000000000000000000092ddebe668ccdaa9144a2da11ad287d313a99dbdcd357f30ff0fd3a1ca8e7a92080c610759c453329204232ae2f5f56fa20f84050b5d742413db25a646b02aa3fae74188fdbd19713f1d3470dc2f50057c1a8b760bdaf34186f5cc1ddd412362e5e3b6cd2a2685f5adcf7cecca90b4a9b6915494631572e7db441328ff9e5eda23611caed496dc02da847b4e7b64baa710e8a83a3d7366ac5b1cf115c112e788d1bd3ecea17f2f36c0e5ae93d158db5d46bb64f07f23f126", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010065727370616e0000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00ae7d0306010400"/18], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003d0009000000000000000000011000000400000014000180100010800c000b0007000b3eaf190000080002"], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) 1m42.919749096s ago: executing program 2 (id=6553): r0 = io_uring_setup(0x177d, &(0x7f0000000080)={0x0, 0x572e, 0x8000, 0x2, 0xfffffffe}) r1 = socket(0x40000000015, 0x5, 0x0) iopl(0x3) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x48b}]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000380)="fc0693a0e3b769203ae3dfa457184509cd1963141f4833effe409ab3775849066aa1a24e698d3317583459d0238b5d1cf8537f365157295bfcb053565396b130047f026e38dbbf53b1a94e6b4bdba4a1f22950b5ddb3f5304373acb06ac50ab0be9392cdedb3f3f14b366121e844614b3bdd08046c0d61e4d0dc7cef6f24d6328fe7108937cc6047ae9b5ed13ea5bec96b5ea2ce7dd24fc4d78c7a3d4bbc", 0x9e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffde6, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140), 0x1000004, &(0x7f0000000600)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x7}}], [{@obj_user={'obj_user', 0x3d, '}^:[*'}}, {@dont_hash}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, '[,'}}]}}) 1m42.850832094s ago: executing program 2 (id=6554): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008000280040014"], 0x76}}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000140)=0x2, 0x4) listen(r5, 0xfff) syz_emit_ethernet(0x6d, &(0x7f0000000200)={@local, @dev, @void, {@generic={0x8, "8903725af3d1a69ce050dde0758351677be128e150158963c6cd8c7b09d3ea6093d03c241301653f16314be016ef331d584f121b33a9006a89970a7902ea69414c3be2f94d285b85b22a9b5ed7150e55e287e4a5ec39148d28179fb45446bb"}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f0000000b80)=ANY=[], 0xff2e) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000100)=0x7) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x208200) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30fc511fa83ceaf9}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x60}}, 0x0) openat$fuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x3b4, r9, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x21c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0x6, 0x2}, {0x1, 0x7}, {0x6, 0x1}, {0x6, 0x6}, {0x6}, {0x5, 0x1}, {0x7, 0x4}, {0x6, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x8}, {0x3, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x2}, {0x5, 0x6}, {0x7, 0x3}, {0x6, 0x5}, {0x7, 0x6}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x5, 0x6}, {0x7, 0x5}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {0x4, 0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x5, 0x1}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x1, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x7, 0x6}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x7}, {0x6, 0x9}, {0x6, 0x9}, {0x2, 0x6}, {0x2, 0x6}, {0x7, 0x8}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x5, 0x3}, {0x3, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x6}, {0x5, 0xa}, {0x7, 0x1}, {0x3, 0xa}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x16, 0x60, 0x1, 0xb, 0x36, 0x60, 0xb, 0x24, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x0, 0x7, 0x5fcf, 0x2, 0x132c, 0x3]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x2}, {0x1}, {}, {0x3, 0x6}, {0x3, 0xa}, {0x7, 0x6}, {0x6, 0x6}, {0x6, 0x4}, {0x7, 0x5}, {0x0, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x7}, {0x3, 0x1}, {0x4, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x5, 0x1}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0x5}, {0x7, 0x5}, {0x2, 0x7}, {0x3, 0x5}, {0x5, 0x9}, {0x7, 0x4}, {0x5, 0x7}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x2, 0xc, 0x2e, 0x12, 0x24, 0x4, 0x1, 0x16, 0x5, 0x6, 0xc10f43cc8ae4e3f0, 0x4, 0x30, 0x16, 0x24, 0x48, 0xc, 0x30, 0x9, 0x24, 0xc, 0x16, 0x12, 0x48, 0x2, 0x18, 0x12]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x2}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x5}, {0x3, 0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x1, 0x2, 0x51, 0x8, 0x6, 0x0, 0x6]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x5}, {0x0, 0x9}, {0x3, 0x7}, {0x6, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x7}, {0x7, 0x5}, {0x3}, {0x2, 0xa}, {0x3, 0x8}, {0x2}, {0x5}, {0x7, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x5, 0x12, 0x27, 0x5, 0x16, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x11, 0x6]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xac, 0x5, 0x3b5, 0x8, 0xfff, 0x401, 0xe055, 0x8001]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x4, 0x1, 0x2, 0x65, 0xc, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xffa3, 0x40, 0x60e, 0x1, 0x300, 0x7, 0x40]}}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfff}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2de, 0x7e, 0x7, 0xf58, 0x40, 0x7, 0x3, 0x2e6a]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x9}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x9}, {0x5, 0x8}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0xa}, {0x3, 0x8}, {0x6, 0x7}, {0x7, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x6}, {0x7, 0x4}, {0x7, 0x5}, {0x4, 0x8}, {0x4, 0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x7, 0x5}, {0x0, 0xa}, {0x1, 0x19}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x9, 0x1, 0x6, 0x8000, 0x3]}}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x3, 0xcb, 0xfc01, 0x8000, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x293, 0x8, 0x8a, 0x8, 0x5, 0x1fe, 0x2, 0xfffc]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x60, 0x4, 0x1b, 0x5, 0x30, 0x6, 0x30, 0xb, 0x1, 0x0, 0x48, 0xb, 0x36, 0x16, 0xb, 0x7c, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x7f5, 0x8, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x9, 0x0, 0x1b, 0x24, 0x5, 0x1b, 0x12, 0x50, 0x6, 0x16, 0x3, 0x9, 0x4, 0x24, 0x6, 0x12, 0x2]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x18, 0x2c, 0x3, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x9, 0x0, 0xffff, 0x1, 0x7, 0x8]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x44050}, 0x8090) 1m42.581508779s ago: executing program 2 (id=6558): open(&(0x7f0000000000)='./file0\x00', 0x42000, 0xb8) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x6, [{}, {0x6, 0x6}, {}, {0x1}, {}, {0xf747, 0x6}, {}, {0x4}], 0x0, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r0]) read$midi(r0, &(0x7f0000000000)=""/18, 0x12) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000180)={'ipvlan0\x00', {0x2, 0x4e21, @broadcast}}) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) sendfile(r6, r7, 0x0, 0x8000002b) syz_open_dev$video(&(0x7f00000009c0), 0x7, 0x0) 1m42.518052209s ago: executing program 34 (id=6558): open(&(0x7f0000000000)='./file0\x00', 0x42000, 0xb8) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x6, [{}, {0x6, 0x6}, {}, {0x1}, {}, {0xf747, 0x6}, {}, {0x4}], 0x0, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r0]) read$midi(r0, &(0x7f0000000000)=""/18, 0x12) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000180)={'ipvlan0\x00', {0x2, 0x4e21, @broadcast}}) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) sendfile(r6, r7, 0x0, 0x8000002b) syz_open_dev$video(&(0x7f00000009c0), 0x7, 0x0) 7.44638252s ago: executing program 3 (id=7011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) write$tun(r3, &(0x7f0000000380)={@void, @void, @x25={0x1, 0x3d, 0xf1, "7bbae297e101c7101b590d78f7b478dd969c06f2a48fce3dd608e4d7f3d3c697e7f6abafcb4810b0e4e05a408c470842da94cdbc361b7f5c9cde6d80a7ab93acdcf9c7f37e8a1a9b553e2d52e7404d12221215d941f1bbbf61712057fbb4dcf57adc68fb375e4518381c79c86a15f26a1c15c3251e9da6b299b72e8a8e16e9faadbf00f5625ef26ccc7e390549629fab681175cd968f252a89139441e64cb4d4158475ba4ffa57bdbb18f84dc18cfe118e2f68c249591f969006f69bc145f994891a69"}}, 0xc6) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0xe19, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x2c, 0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004800c}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000803fe03010009cd8d1f000200000009050502000658b8d8e77de1b083", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64=r4], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x5}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mremap(&(0x7f0000f1a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000e69000/0x2000)=nil) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$binderfs(0xffffff9c, &(0x7f0000000480)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0xb, 0x1}) ptrace(0x10, r7) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB='%'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43133, 0xffffffffffffffff, 0xfffffffff0000000) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r9, &(0x7f0000000180)='0', 0x1) 5.979812564s ago: executing program 5 (id=7021): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5f21, 0x0, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1e1, &(0x7f0000000900)={@broadcast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0xff801}, {0x1, 0x0, 0x1}, {0xffffb, 0x0, 0x1}], @ipv6=@tipc_packet={0x7, 0x6, "1c7409", 0x19b, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}, @loopback, {[@srh={0x2e, 0x4, 0x4, 0x2, 0x6, 0xd0, 0xc, [@empty, @private2]}, @srh={0x14, 0xa, 0x4, 0x5, 0x9, 0x0, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, @remote]}, @routing={0x51, 0x14, 0x0, 0xd, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @rand_addr=' \x01\x00', @private0, @mcast1, @private2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3b}, @loopback, @empty]}, @srh={0x87, 0x2, 0x4, 0x1, 0x9, 0x40, 0x5, [@empty]}, @fragment={0x81, 0x0, 0x4c, 0x0, 0x0, 0x4, 0x64}, @hopopts={0xd7, 0x2, '\x00', [@enc_lim, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x100, [0x7]}}]}], @payload_mcast={{{{{{0x33, 0x0, 0x0, 0x1, 0x1, 0xb, 0x0, 0x2, 0x4000, 0x0, 0x3, 0x5, 0x1, 0x1, 0x0, 0x6b, 0x0, 0x4e22, 0x4e24}, 0x1, 0x2}, 0x4, 0x3}}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0001000000000000000000020000000000c800000000004f20e31a472941a952fa4e703253bd46267c8fa17281a5f228954718da8b398f3f519ebcb107d920c0cca750540273ed160fd02453b3953abc0326ff05462628ad2ef75673ece5a3e9d5b3ee673d1cceebdcfc5d10b68e2149fcd224a9bd15ee2bc45717f9f34c7014887bcc6821"], 0x1c}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x3) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018000008000005"], 0x54}}, 0x0) creat(0x0, 0xc2) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x228, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x8c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffc}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x10}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0xa, 0xb8, 0x0, 0x8001, 0x8001, 0x6}}, {0x10, 0x2, [0x3, 0x4, 0xd, 0x681, 0x1, 0x8001]}}, {{0x1c, 0x1, {0x4, 0xc6, 0x5, 0xc, 0x2, 0x800, 0x5, 0x3}}, {0xa, 0x2, [0x8001, 0xff, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x2, 0x2, 0x1, 0xf, 0xffff, 0x2}}, {0x8, 0x2, [0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0x32, 0x56e, 0x2, 0x1, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x522]}}, {{0x1c, 0x1, {0x7, 0x0, 0x37b5, 0x1, 0x1, 0x8, 0x970, 0x3}}, {0xa, 0x2, [0x8, 0xf, 0x6]}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffc, 0xa, 0x1, 0x1, 0xfffffff0, 0x7}}, {0x12, 0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x800, 0xe]}}, {{0x1c, 0x1, {0x66, 0x0, 0x3, 0x6, 0x0, 0x7f, 0xda18, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x4, 0x2, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x2, 0xe4f, 0xcc, 0x6, 0x6]}}]}]}, 0x228}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000001000370400000000000000000000000092ddebe668ccdaa9144a2da11ad287d313a99dbdcd357f30ff0fd3a1ca8e7a92080c610759c453329204232ae2f5f56fa20f84050b5d742413db25a646b02aa3fae74188fdbd19713f1d3470dc2f50057c1a8b760bdaf34186f5cc1ddd412362e5e3b6cd2a2685f5adcf7cecca90b4a9b6915494631572e7db441328ff9e5eda23611caed496dc02da847b4e7b64baa710e8a83a3d7366ac5b1cf115c112e788d1bd3ecea17f2f36c0e5ae93d158db5d46bb64f07f23f126", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010065727370616e0000040002800a000100bbbbbb"], 0x40}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00ae7d0306010400"/18], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003d0009000000000000000000011000000400000014000180100010800c000b0007000b3eaf190000080002"], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) 5.570513527s ago: executing program 5 (id=7022): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) (fail_nth: 4) 5.569483786s ago: executing program 5 (id=7023): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008000280040014"], 0x76}}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000140)=0x2, 0x4) listen(r5, 0xfff) syz_emit_ethernet(0x70, &(0x7f0000000200)={@local, @dev, @void, {@generic={0x8, "8903725af3d1a69ce050dde0758351677be128e150158963c6cd8c7b09d3ea6093d03c241301653f16314be016ef331d584f121b33a9006a89970a7902ea69414c3be2f94d285b85b22a9b5ed7150e55e287e4a5ec39148d28179fb45446bbbe3db5"}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f0000000b80)=ANY=[], 0xff2e) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000100)=0x7) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008"], 0x40}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x208200) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30fc511fa83ceaf9}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x60}}, 0x0) openat$fuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x3b4, r9, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x21c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0x6, 0x2}, {0x1, 0x7}, {0x6, 0x1}, {0x6, 0x6}, {0x6}, {0x5, 0x1}, {0x7, 0x4}, {0x6, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x8}, {0x3, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x2}, {0x5, 0x6}, {0x7, 0x3}, {0x6, 0x5}, {0x7, 0x6}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x5, 0x6}, {0x7, 0x5}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {0x4, 0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x5, 0x1}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x1, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x7, 0x6}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x7}, {0x6, 0x9}, {0x6, 0x9}, {0x2, 0x6}, {0x2, 0x6}, {0x7, 0x8}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x5, 0x3}, {0x3, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x6}, {0x5, 0xa}, {0x7, 0x1}, {0x3, 0xa}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x16, 0x60, 0x1, 0xb, 0x36, 0x60, 0xb, 0x24, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x0, 0x7, 0x5fcf, 0x2, 0x132c, 0x3]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x2}, {0x1}, {}, {0x3, 0x6}, {0x3, 0xa}, {0x7, 0x6}, {0x6, 0x6}, {0x6, 0x4}, {0x7, 0x5}, {0x0, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x7}, {0x3, 0x1}, {0x4, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x5, 0x1}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0x5}, {0x7, 0x5}, {0x2, 0x7}, {0x3, 0x5}, {0x5, 0x9}, {0x7, 0x4}, {0x5, 0x7}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x2, 0xc, 0x2e, 0x12, 0x24, 0x4, 0x1, 0x16, 0x5, 0x6, 0xc10f43cc8ae4e3f0, 0x4, 0x30, 0x16, 0x24, 0x48, 0xc, 0x30, 0x9, 0x24, 0xc, 0x16, 0x12, 0x48, 0x2, 0x18, 0x12]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x2}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x5}, {0x3, 0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x1, 0x2, 0x51, 0x8, 0x6, 0x0, 0x6]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x5}, {0x0, 0x9}, {0x3, 0x7}, {0x6, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x7}, {0x7, 0x5}, {0x3}, {0x2, 0xa}, {0x3, 0x8}, {0x2}, {0x5}, {0x7, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x5, 0x12, 0x27, 0x5, 0x16, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x11, 0x6]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xac, 0x5, 0x3b5, 0x8, 0xfff, 0x401, 0xe055, 0x8001]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x4, 0x1, 0x2, 0x65, 0xc, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xffa3, 0x40, 0x60e, 0x1, 0x300, 0x7, 0x40]}}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfff}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2de, 0x7e, 0x7, 0xf58, 0x40, 0x7, 0x3, 0x2e6a]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x9}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x9}, {0x5, 0x8}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0xa}, {0x3, 0x8}, {0x6, 0x7}, {0x7, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x6}, {0x7, 0x4}, {0x7, 0x5}, {0x4, 0x8}, {0x4, 0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x7, 0x5}, {0x0, 0xa}, {0x1, 0x19}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x9, 0x1, 0x6, 0x8000, 0x3]}}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x3, 0xcb, 0xfc01, 0x8000, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x293, 0x8, 0x8a, 0x8, 0x5, 0x1fe, 0x2, 0xfffc]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x60, 0x4, 0x1b, 0x5, 0x30, 0x6, 0x30, 0xb, 0x1, 0x0, 0x48, 0xb, 0x36, 0x16, 0xb, 0x7c, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x7f5, 0x8, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x9, 0x0, 0x1b, 0x24, 0x5, 0x1b, 0x12, 0x50, 0x6, 0x16, 0x3, 0x9, 0x4, 0x24, 0x6, 0x12, 0x2]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x18, 0x2c, 0x3, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x9, 0x0, 0xffff, 0x1, 0x7, 0x8]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x44050}, 0x8090) 4.650309171s ago: executing program 5 (id=7028): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x1ff, 0xa500) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x7fff, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x0, 0x5, 0x4cab, 0xe154, 0x1000, 0x0, 0x10, 0xf9, "fe1d0000b413000000000000000caa008449be9f1000"}}) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r7, &(0x7f0000000280)=[{&(0x7f0000000340)=""/186, 0xba}], 0x1, 0x0, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x11, r8, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b00000000001010400000000000000000a000000440001802c00018014000300fc01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000000600034000030000380002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0600034000010000060012400001"], 0xb0}}, 0x0) r10 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000001c0)=""/122, 0x7a}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x20, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.379705593s ago: executing program 3 (id=7029): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x2}, {0x5, 0x1, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x20004808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x56a, 0x5}}) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x24c}, {&(0x7f0000001e80)}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e", 0x2c}], 0x3}}], 0x1, 0x0) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 3.85025593s ago: executing program 6 (id=7033): socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x2, 0x0, 0x6}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@getchain={0x24, 0x66, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffec, 0x9}, {0xffff, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48080) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x363400, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x408b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000280), 0x45}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x6e45, 0x80, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000240)='net/wireless\x00') preadv(r5, &(0x7f0000000340), 0x0, 0x0, 0x0) 3.489810746s ago: executing program 3 (id=7034): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nmem0(0xffffff9c, 0x0, 0x12f801, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000180)={0x0, 0x0, {0x7, 0x4, 0x3, 0x8}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_setup(0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x102) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x16) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$ttyprintk(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) close(r5) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) (fail_nth: 4) socket$nl_rdma(0x10, 0x3, 0x14) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.310093848s ago: executing program 3 (id=7036): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008000280040014"], 0x76}}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000140)=0x2, 0x4) listen(r5, 0xfff) syz_emit_ethernet(0x70, &(0x7f0000000200)={@local, @dev, @void, {@generic={0x8, "8903725af3d1a69ce050dde0758351677be128e150158963c6cd8c7b09d3ea6093d03c241301653f16314be016ef331d584f121b33a9006a89970a7902ea69414c3be2f94d285b85b22a9b5ed7150e55e287e4a5ec39148d28179fb45446bbbe3db5"}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f0000000b80)=ANY=[], 0xff2e) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000100)=0x7) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a"], 0x40}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x208200) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30fc511fa83ceaf9}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x60}}, 0x0) openat$fuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x3b4, r9, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x21c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0x6, 0x2}, {0x1, 0x7}, {0x6, 0x1}, {0x6, 0x6}, {0x6}, {0x5, 0x1}, {0x7, 0x4}, {0x6, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x8}, {0x3, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x2}, {0x5, 0x6}, {0x7, 0x3}, {0x6, 0x5}, {0x7, 0x6}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x5, 0x6}, {0x7, 0x5}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {0x4, 0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x5, 0x1}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x1, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x7, 0x6}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x7}, {0x6, 0x9}, {0x6, 0x9}, {0x2, 0x6}, {0x2, 0x6}, {0x7, 0x8}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x5, 0x3}, {0x3, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x6}, {0x5, 0xa}, {0x7, 0x1}, {0x3, 0xa}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x16, 0x60, 0x1, 0xb, 0x36, 0x60, 0xb, 0x24, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x0, 0x7, 0x5fcf, 0x2, 0x132c, 0x3]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x2}, {0x1}, {}, {0x3, 0x6}, {0x3, 0xa}, {0x7, 0x6}, {0x6, 0x6}, {0x6, 0x4}, {0x7, 0x5}, {0x0, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x7}, {0x3, 0x1}, {0x4, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x5, 0x1}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0x5}, {0x7, 0x5}, {0x2, 0x7}, {0x3, 0x5}, {0x5, 0x9}, {0x7, 0x4}, {0x5, 0x7}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x2, 0xc, 0x2e, 0x12, 0x24, 0x4, 0x1, 0x16, 0x5, 0x6, 0xc10f43cc8ae4e3f0, 0x4, 0x30, 0x16, 0x24, 0x48, 0xc, 0x30, 0x9, 0x24, 0xc, 0x16, 0x12, 0x48, 0x2, 0x18, 0x12]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x2}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x5}, {0x3, 0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x1, 0x2, 0x51, 0x8, 0x6, 0x0, 0x6]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x5}, {0x0, 0x9}, {0x3, 0x7}, {0x6, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x7}, {0x7, 0x5}, {0x3}, {0x2, 0xa}, {0x3, 0x8}, {0x2}, {0x5}, {0x7, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x5, 0x12, 0x27, 0x5, 0x16, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x11, 0x6]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xac, 0x5, 0x3b5, 0x8, 0xfff, 0x401, 0xe055, 0x8001]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x4, 0x1, 0x2, 0x65, 0xc, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xffa3, 0x40, 0x60e, 0x1, 0x300, 0x7, 0x40]}}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfff}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2de, 0x7e, 0x7, 0xf58, 0x40, 0x7, 0x3, 0x2e6a]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x9}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x9}, {0x5, 0x8}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0xa}, {0x3, 0x8}, {0x6, 0x7}, {0x7, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x6}, {0x7, 0x4}, {0x7, 0x5}, {0x4, 0x8}, {0x4, 0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x7, 0x5}, {0x0, 0xa}, {0x1, 0x19}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x9, 0x1, 0x6, 0x8000, 0x3]}}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x3, 0xcb, 0xfc01, 0x8000, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x293, 0x8, 0x8a, 0x8, 0x5, 0x1fe, 0x2, 0xfffc]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x60, 0x4, 0x1b, 0x5, 0x30, 0x6, 0x30, 0xb, 0x1, 0x0, 0x48, 0xb, 0x36, 0x16, 0xb, 0x7c, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x7f5, 0x8, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x9, 0x0, 0x1b, 0x24, 0x5, 0x1b, 0x12, 0x50, 0x6, 0x16, 0x3, 0x9, 0x4, 0x24, 0x6, 0x12, 0x2]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x18, 0x2c, 0x3, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x9, 0x0, 0xffff, 0x1, 0x7, 0x8]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x44050}, 0x8090) 3.060675045s ago: executing program 5 (id=7037): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) write$tun(r3, &(0x7f0000000380)={@void, @void, @x25={0x1, 0x3d, 0xf1, "7bbae297e101c7101b590d78f7b478dd969c06f2a48fce3dd608e4d7f3d3c697e7f6abafcb4810b0e4e05a408c470842da94cdbc361b7f5c9cde6d80a7ab93acdcf9c7f37e8a1a9b553e2d52e7404d12221215d941f1bbbf61712057fbb4dcf57adc68fb375e4518381c79c86a15f26a1c15c3251e9da6b299b72e8a8e16e9faadbf00f5625ef26ccc7e390549629fab681175cd968f252a89139441e64cb4d4158475ba4ffa57bdbb18f84dc18cfe118e2f68c249591f969006f69bc145f994891a69"}}, 0xc6) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0xe19, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x2c, 0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004800c}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000803fe03010009cd8d1f000200000009050502000658b8d8e77de1b083", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64=r4], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x5}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mremap(&(0x7f0000f1a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000e69000/0x2000)=nil) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$binderfs(0xffffff9c, &(0x7f0000000480)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0xb, 0x1}) ptrace(0x10, r7) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB='%'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43133, 0xffffffffffffffff, 0xfffffffff0000000) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r9, &(0x7f0000000180)='0', 0x1) 2.87223609s ago: executing program 4 (id=7038): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000300)=ANY=[@ANYRESHEX], &(0x7f00000005c0)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x8, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002800000", 0x2c}, {&(0x7f0000000640)="9abe48978fc9d6d504d0c9f79768e69abc0d908c4b7714017340a5321e2091ace2f33de355e62b927a1ab681a738f2e4e6d33ce721479d3f68ea12ef5aeb17d903d95cddeb4e2754b78802e05f584c7ab407fc85efe9ab6d650e5eccd789e1e414ab7501f7fb6fd6404b0afab9d4c2078d1030121824daf273d8c33dae1bc50bf1d39fb4f04a10d235dd987de873824c5f97fc33c2e3fde23491dd6d53930ce1c914bc1cc17642dffa0933942972a97ea96b886ad243f6d5378f5d70d8379f5a316ec6c623a6a08674f92554652a32193775938997cb6b24d8355b79860057ea077f62b64ffbd9a886bf7ec98453e6a4792ea0882f8c1e1be8a4b699f4560545c55002fc6f2039736619ffb2c30f946ad7ca29bb4dc823c771b85d812e3f1bee51b20cd8e365a88fda649df477f1f3a1a7c60d0a4c875973658fe25ecb5d45e95dc7cb07f79b0dc0a78bff47ad5ccd5ab5dfc8ba2a8a48572c840fbc134628f698ac267d0eb5d52d37b1927ea10a15efbe12a926e22be39c4c6431b528fca59208b192939f1a4167d613d1fef58e30363112dcef611692353615a2bda0af0bdd5884045f748771b7c8ea5d82d31d048832995615bf68b51370d41a7e4db8cb3970066b6f9e9a55a7c8e41bff4a436ad7b0631250af307a0af8d0d72d7394421f4de5ac2918583f07d92c32d17098f20834ac2ba6bb39d504af6fe664be4e436ba30c885680d58a4ae70c680d553e15ac6c3d1f6b7a6ef99358c948a6c1b1db07c40d2a0b5c7b3c420ee63ee66117175b12ff259783f4cfa8bf5110b96e8417180cd8a413c23659033f8f1857e00df8de16041101a8166411c893af3f00b0596718fe76578301604d27f67ba625fae0e404293872f523b7496ddde4b09f33b7f7e3fcf6fe0d0ebe5eb603e5d8ed1ae18c654498b3db3c59aa51e8022ce90d6834108df0c73e886b49be39f60116ec2ac0e5540af3491ff4d6c526b6350bb5021933a79b4e102f3ff65f7bced45210bf5849a0188493798dc87f8b22ca1b104f5caa5018029bbf03afe7904dbfa0f5e1a2b74a196e0d153b7498b69986657c79bb1df1c9ed1dfe19d00de2040fd668ccedd62c775a9976aac1d9447d4045f499461a320443111bf56d8d7e1dadd1f4ca137c5796c2d7c8a015786a5fc5e7b9021eda74b575925d9d55683e1a940c55299046ac60d49fe05141a7f5280cade653bd2f19018121e18aca2ac846734e941b313242b9c41fa7c8d2058577aae640e8319710021cd89eb291ae0ad15ba292d45ebef0074386668123ed9961b13633043f54314c8f4fe8fc0036512fb088b6671e13d8481b5286e098cdcdf509473ee3c36c0cd218a81f4c2b8758a5573f21a5c12cdcce7e79f4cc8b5a9030f7d0f8a2c809db34b89ed5e063db518a18584c46806f863f7a192df439c5894eed6facd33927bbaa8df57ecd045ef6386ca46a05ab5573068955d21289a4286152c8a2a13df3429b16f4ee1d73a6f544c784b0cc49aa2c83b3738c25ee3d64ac9142131318f82981ae1a17d07941aa3bd05dd9c136cb061a71ae67614dc44ea2d9e350c0cd9dce03e0aa292b384e0f037e4bc392bffb4e847cf01b74e394736f08242a9ce03e5c4e163f5cead6b8446bd9c1fe9bfb31bca88511a74671e2bec33fe0b9aae1376303c979df69c0b305f042bf2e111b446533f4a6b3fac594e5903061e21e7f1c8a30cc1cb3d3078e48741a032723e7eda57fc83c6068ba086b08448af61988bd22dbdb8c3752828f40691e12b284080da18f0ff5f87f324cde7d7325c181560e5f4e7e028476b372bb8b64da996db88e31aef3acea54932b152b4422a6833853f0c217b895c8710473fcb36288faeadd0bc72f8f81b79cffc9c05fd8d30c769ac22f1e72773b0c7e8b234d8624b6cb6311978ec4568b692fda31a04cd795de2794f3376fc7376e30c85d7942b03d97f915289c5754eb057dcb504872e409acf1ff929698e5890161b12140fdef3d1838d41e25dfe0716241170a5392c31d766fe6313ae2aefdaeaffd53d0940949f18d9737a2aacb2111b6dc129e2812eb403446e655d5317e258eda59dfc57d1351c2d64e5074e485d98c06f35b5aec59baf8efc15866eef217c5dac6aad75f55d779c56662420d5b401bf0f19f5217f2d9395931def8f1f8b5847c8f052a8cdf942f567ba004e21c448067c5d2a3bd5cdac560495712f916dcebd06d6b65c767af15216e3c0b84212202356accac045004c612c4660470e593ed89e219ac1f547cfdda3c484b67b00096cd7993fa5a5ddd860d9e8d0c915aea5f6847d50a5283ea522e1d490a8151dc96911a261be4ed30da952b1d8b74c891fac193d5f83f2eb3d974b20523bdd3c7660e42635410073642b983393caf59b20d7ce8682c54fae87d8a57dfa243fcc2fd52d7372155d7e7bf9078e1ccd5046f21b95a5d61bbd1e78fb9c3d6704a141298fde37d09615d51ad10ec8eac5ebb3d1df8e0b559f6e88a77a074d2ffad60d4d58819a76482408c3a7c8edf41abce0f450c33b1cd6432363e6c4ed892f2b78d9b14acf0e8490cfb1f60229753d8eaab8df582c9fac7a54980442985b87bb41e47f415f8617e5025d2f1fdfa745e07b0626b547c7f310d5da65522b95e84a231716afc07da2d7562dc4b583fcdc21a22bc2132532c6713ec0e35004b78612585ff8bac697c8e8ad6da1545d6dfd2f3564f92457dae15cfcb3ca1c4ba9f4210c75bba216ca805b6c8760892257d5ec95252895bc9870adb6b47da48478fc718898c3e1d353fc233227d71c2c7a7dab22c8a5acb19e75eecd1fce82dcf36b7da813b7102cd426a67c3e721505bbcfa4c76c4b93ee06c477a9526cc36cb6e1ec0fc55284c7379766d5771a8db5781fd5b10d22959aeb1ae73ce24721f39aa62bc84ec58ab5cc3b9a5677c25c2240911184667f4f3726efb9aced16eb0967bd9b177b18050dcb554829d38419c8f74aa9279f90e9fec58b755c9ea38533f07d09e23a1540ba794710a46b7d7341aab573a26ad01702794b9c2a5b957ec5d22ea079b8a81f4d6108941d84c588c13458e3d10556df61231e43ea0f84851515b00f4f68cb95ff182fe1a95dd0007c92a84d5fe503dd3cd8bfd81b3a2b351de8d2d5f6020cb1d5523e5e76278e66755d9e9b278f1d4142887c3ac85509abbcc49f8b649bda581e6fdd58fc7662705b843fe49d543cf46fb0c701e41379927731890c1b284071d92f1747dbc4fa906727bc8d0ce783d9079c7735eebe2c9887d9b7ebf5862a9607a038895325f9c54ec0faed2dd3d46b50c1795a1342140fc326e1e24b0434b72fdd3cc4d48dfbefd5df53716cf709235a9d39ddff93ead149c3cd57f680212b5036e99439046791795ead6dfe330d405d90bc6a849b305b0c60d62e4d53b5af25870a0b5e105dcee40360d9594900c4aef9db5d2c11d76de448ff9ad85046a655890820a1092f643c5af63b05762e036df228f5cc0ea00b9664dcdb647684d45aefa01605dfffbf31ea1a7501b82521f49bd36d1f5977932e0b6fe6eb2039e3d91b6129a879b96719a9f3c4e05dc02222ffccca0cb682be2a4fb54c5a590653cef00c2399449cabfa4d2e2e3143ce0d0a49dcddfc59697f0953a93515d0c9672d03bfa96db5ca4902f584eaa4ab32ec348d9f059921b8d6c8ba3e9300e4f4014f8777f588856729bb82dbb95e96a812bde444d62731415896c7cb6336cf8bc05ae1f40f550a21905969a98e551925bc167b1e267670266b3c2f8a75acb3cdb30c993b02e246e7629bad825a84cca2fcc60540a6f8750b6736a19e8854715e0e900431f530b03ba0552ef2272a693a357bd0fe64bf549e5354b954d8651ab6d87cb512dd613981e1a65bd87f36448d974d967bda619b5ec581508a842db9c77292fd2fe0f1e4d248c786ef40fc41ffab06f75f4b293cfece7cd9a9433dabf3cf4a42e16617ecc70f40d28d15316e26433c7ed8276db489ba94cd2314203e05936f48a842f57acfeecc97fec0c433121bef994e780e6761771d9280e9868f03415c11d68b7c0ba2046b089ecbf73de963b206895c090227ee6b348ee6d1af087141c52c109b11c1a8805344c84aca98835cc227e2bd8192a97a11559f048fbf3d6c5ef4714c7045652c271ca859812f1e8485e34e550646aa898d8fcd6ec973c2ca02da1524f454d1468a130b7f6da4a8abc9e221991b9185742276e8a75b949a7c6565276926f617b20217531b626b1479392f9768a1848e528c7a25d2fbe3a32e47a1d9eabf5a32c8e239e3cd3e8e666c6e5a5c02c942b691b721b79142f855240f18005458913b297304beb95bbf61c17348ad74c7f86d642dadf18bc6328122ec84de076d73bb94af4224cc556ffa3f32b5c7ac7d0dedea3c8ee9f0fe16fb2740b2e6e1b7de8b210167614756b1264118dbe3420eb9cc541054f914fd91a853be3a12a0a5be123b8962b02aafac12cb1e931879f480cb0c29885aa91421c5971c7b85a887ca95aefefbfa3a476be3bafb549d92f5471e1f6aca1d9d4d826ea5fc7b7bc3cc20023d6536ee5406ec21b71ed8f146765cfba901ed59cafb2dff9aafd9373bbabbfaff1da0dbf1dd07ab058a8beba78f9222373c87b416d92567ada44c01de4004202bd4d70ee285e8b9b86efeaa5ef62680e4676a8e651b3d1e6aae639b1c4e79a7e583de5c10db7864261273d754e2abf5e47e4b79c970243c16d440a9e6f6b99eb94c9ce436195d7017aeb6f6695622f51c2f237fee93c7f2f76f13a7bc8eb5d574c97d7b2be0a91de2869bec13e0765b54ca44951d4b15fb79228ef3d0090e0aaee13586674b40ce272be597d72a5042ef5ead82fe20331b5b6361889339e35d62fafa4c9dbb20016ed58479fd0a0ee8382fe872894d98b7f59186d0994509a216be36b15b76a134752f58748debaa9b36bc4c188d5c782df6d32f6403082edd4eedd", 0xdc5}, {&(0x7f00000000c0)="26fc4bcf8b00c19cd0eed8a91f7c36de44eed2752c4d27ee2e10986d2b", 0x1d}, {&(0x7f0000000280)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d", 0x68}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b791e900ba3d654bb44d4402987f407bdbcefe93f53", 0x26}, {0x0}, {0x0}], 0x7}, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000ff0f000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/268], 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x5d) 2.867378616s ago: executing program 6 (id=7039): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001d00070f00020000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00g\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.449839015s ago: executing program 3 (id=7040): socket$netlink(0x10, 0x3, 0x7) getdents(0xffffffffffffff9c, &(0x7f0000000080)=""/106, 0x6a) syz_pidfd_open(0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r1], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "45d300"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xd, 0x8000, 0x17, 0x2, 0x4, 0x100000000, 0x6, 0xd5f}, &(0x7f00000000c0)={0xa15, 0x7, 0x8, 0x5, 0x7, 0xffffffff, 0xe9, 0x9}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) ioctl$HIDIOCGNAME(r6, 0x80404806, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000002140)={{}, {0x1, 0x4}, [{0x2, 0x0, r3}], {}, [{0x8, 0x4, r4}, {0x8, 0x5, r4}, {0x8, 0x1}, {0x8, 0x2, r4}, {0x8, 0x1, r4}, {0x8, 0x4, r4}, {0x8, 0x4, r4}, {}], {0x10, 0x3}, {0x20, 0x1}}, 0x6c, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000080)={0x10001, r7}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r9, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r10, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 1.977982767s ago: executing program 4 (id=7041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={0x0}) 1.977553719s ago: executing program 4 (id=7042): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x2}, {0x5, 0x1, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x20004808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x56a, 0x5}}) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x24c}, {&(0x7f0000001e80)}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e", 0x2c}], 0x3}}], 0x1, 0x0) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1.37204392s ago: executing program 6 (id=7043): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5f21, 0x0, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1e1, &(0x7f0000000900)={@broadcast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0xff801}, {0x1, 0x0, 0x1}, {0xffffb, 0x0, 0x1}], @ipv6=@tipc_packet={0x7, 0x6, "1c7409", 0x19b, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}, @loopback, {[@srh={0x2e, 0x4, 0x4, 0x2, 0x6, 0xd0, 0xc, [@empty, @private2]}, @srh={0x14, 0xa, 0x4, 0x5, 0x9, 0x0, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, @remote]}, @routing={0x51, 0x14, 0x0, 0xd, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @rand_addr=' \x01\x00', @private0, @mcast1, @private2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3b}, @loopback, @empty]}, @srh={0x87, 0x2, 0x4, 0x1, 0x9, 0x40, 0x5, [@empty]}, @fragment={0x81, 0x0, 0x4c, 0x0, 0x0, 0x4, 0x64}, @hopopts={0xd7, 0x2, '\x00', [@enc_lim, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x100, [0x7]}}]}], @payload_mcast={{{{{{0x33, 0x0, 0x0, 0x1, 0x1, 0xb, 0x0, 0x2, 0x4000, 0x0, 0x3, 0x5, 0x1, 0x1, 0x0, 0x6b, 0x0, 0x4e22, 0x4e24}, 0x1, 0x2}, 0x4, 0x3}}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0001000000000000000000020000000000c800000000004f20e31a472941a952fa4e703253bd46267c8fa17281a5f228954718da8b398f3f519ebcb107d920c0cca750540273ed160fd02453b3953abc0326ff05462628ad2ef75673ece5a3e9d5b3ee673d1cceebdcfc5d10b68e2149fcd224a9bd15ee2bc45717f9f34c7014887bcc6821"], 0x1c}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x3) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018000008000005"], 0x54}}, 0x0) creat(0x0, 0xc2) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x228, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x8c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffc}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x10}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0xa, 0xb8, 0x0, 0x8001, 0x8001, 0x6}}, {0x10, 0x2, [0x3, 0x4, 0xd, 0x681, 0x1, 0x8001]}}, {{0x1c, 0x1, {0x4, 0xc6, 0x5, 0xc, 0x2, 0x800, 0x5, 0x3}}, {0xa, 0x2, [0x8001, 0xff, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x2, 0x2, 0x1, 0xf, 0xffff, 0x2}}, {0x8, 0x2, [0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0x32, 0x56e, 0x2, 0x1, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x522]}}, {{0x1c, 0x1, {0x7, 0x0, 0x37b5, 0x1, 0x1, 0x8, 0x970, 0x3}}, {0xa, 0x2, [0x8, 0xf, 0x6]}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffc, 0xa, 0x1, 0x1, 0xfffffff0, 0x7}}, {0x12, 0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x800, 0xe]}}, {{0x1c, 0x1, {0x66, 0x0, 0x3, 0x6, 0x0, 0x7f, 0xda18, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x4, 0x2, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x2, 0xe4f, 0xcc, 0x6, 0x6]}}]}]}, 0x228}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000001000370400000000000000000000000092ddebe668ccdaa9144a2da11ad287d313a99dbdcd357f30ff0fd3a1ca8e7a92080c610759c453329204232ae2f5f56fa20f84050b5d742413db25a646b02aa3fae74188fdbd19713f1d3470dc2f50057c1a8b760bdaf34186f5cc1ddd412362e5e3b6cd2a2685f5adcf7cecca90b4a9b6915494631572e7db441328ff9e5eda23611caed496dc02da847b4e7b64baa710e8a83a3d7366ac5b1cf115c112e788d1bd3ecea17f2f36c0e5ae93d158db5d46bb64f07f23f126", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010065727370616e0000040002800a000100bbbbbb"], 0x40}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00ae7d0306010400"/18], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003d0009000000000000000000011000000400000014000180100010800c000b0007000b3eaf190000080002"], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) 1.039419493s ago: executing program 4 (id=7044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x2}, {0x5, 0x1, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x20004808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x5) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000240), 0x40000, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x56a, 0x5}}) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="6b093db1947bc296cf697e335c7aa0e9afc07b5f0c819e3522eaad2a74224b7a5bed182fec91c96271033eec5d14ede20a6d1c36c3e7a445ccb5b158ffaec30b8b846de0d5b327a6b1d322a80d00b5c08428fb6ef0d6bdfef436fd9a0027a7cce11f65f633449199149e065a48b3f6bb51b5e305aa20ec347027ace732178271cb92f3e4bdda6732a10715efe7a7eae23413207a9cd1c24ea5ad8f333bfedf8e93e880fc51fb9051917d5488a13c22f1a575b1767424074c84444b29becb98de0e479ae50c12711cc5e26973d496458de4969e51dd5aee7ae9ca5da879f96737d626b447cdf675bc4af3e1ffec688c6945d0786b8ff146cab2e441e3438f3ddd2832b9ac4c9693141785b844f706c8137d0ebf12347ee82f9bd1968c51803a81998a149178952f712f57c09038a8f8a2e871a1f3b026ec617a77cb2163cea2164504b5ae989034b7ceb91545c2d968b9852181505afb7422606d1db2982240a7583260c32f5e3ea677edfeffc6cb30ef79c96938f7b571a3747042c4db17296ea799f65205b5cc2bf60f5921db65d28ae0a3ce76601fb0dfc04c7fa3900aff36af6c018df195fe6e97e6aa3a81c06130489c24b82c920681d3efb1fc33c73f8645ff0baa0be3a9a92b601f9602a2ef119e527c156bd8d8c91ec92baed92c43bc153fb5c7a5b08f8c8c03b0d266bcadbb061ae5e0f15eab9ba116923a27d961377383fae7b837a448e786371140ee20733f1fc82b565f4f1dc3859c49c5e9e18180e8511ddf854609ed7fcb50ca1c43934883488c9689e0de4f05ee35a254c900b2dee53673e959ae5adbc3f7", 0x24c}, {&(0x7f0000001e80)}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e", 0x2c}], 0x3}}], 0x1, 0x0) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1.038528015s ago: executing program 6 (id=7045): r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x600) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666e920db", 0x0, 0xfffffff6, 0x39, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf250800200004000180"], 0x18}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x14, r6, 0x303, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='ac']) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlinkprop={0x154, 0x6c, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x13008}, [@IFLA_NET_NS_PID={0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}, @IFLA_NET_NS_FD={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x576}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}, @IFLA_EVENT={0x8, 0x2c, 0x1}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}, @IFLA_AF_SPEC={0xfc, 0x1a, 0x0, 0x1, [@AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0xa, 0x0, 0x0, 0x4}, {0x8, 0xa, 0x0, 0x0, 0x7}, {0x8, 0x12, 0x0, 0x0, 0x3}, {0x8, 0x3}, {0x8, 0x1e, 0x0, 0x0, 0xffffffff}]}}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x13}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x4}, {0x8, 0xa, 0x0, 0x0, 0x8a8}, {0x8, 0x20, 0x0, 0x0, 0xa}, {0x8, 0x7, 0x0, 0x0, 0x1}]}}, @AF_BRIDGE={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0xffffffff}, {0x8, 0x1f, 0x0, 0x0, 0x7f}, {0x8, 0x1e, 0x0, 0x0, 0x9}, {0x8, 0xf, 0x0, 0x0, 0x3c30}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2c}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}]}, 0x154}}, 0x20008084) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 851.178717ms ago: executing program 4 (id=7046): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5f21, &(0x7f0000000380)={0x0, 0x7bda, 0x20, 0xfffffffd, 0x225, 0x0, r1}, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1c5, &(0x7f0000000900)={@broadcast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0xff801}, {0x1, 0x0, 0x1}, {0xffffd}, {0xffffb, 0x0, 0x1}], @ipv6=@tipc_packet={0x7, 0x6, "1c7409", 0x17b, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}, @loopback, {[@srh={0x2e, 0x4, 0x4, 0x2, 0x6, 0xd0, 0xc, [@empty, @private2]}, @srh={0x14, 0xa, 0x4, 0x5, 0x9, 0x0, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, @remote]}, @routing={0x51, 0x14, 0x0, 0xd, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @rand_addr=' \x01\x00', @private0, @mcast1, @private2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3b}, @loopback, @empty]}, @srh={0x87, 0x2, 0x4, 0x1, 0x9, 0x40, 0x5, [@empty]}, @fragment={0x81, 0x0, 0x4c, 0x0, 0x0, 0x4, 0x64}], @payload_mcast={{{{{{0x33, 0x0, 0x0, 0x1, 0x1, 0xb, 0x0, 0x2, 0x4000, 0x0, 0x3, 0x5, 0x1, 0x1, 0x0, 0x6b, 0x0, 0x4e22, 0x4e24}, 0x1, 0x2}, 0x4, 0x3}}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0001000000000000000000020000000000c800000000004f20e31a472941a952fa4e703253bd46267c8fa17281a5f228954718da8b398f3f519ebcb107d920c0cca750540273ed160fd02453b3953abc0326ff05462628ad2ef75673ece5a3e9d5b3ee673d1cceebdcfc5d10b68e2149fcd224a9bd15ee2bc45717f9f34c7014887bcc6821"], 0x1c}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x3) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018000008000005"], 0x54}}, 0x0) creat(0x0, 0xc2) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x210, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffc}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x10}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0xa, 0xb8, 0x0, 0x8001, 0x8001, 0x6}}, {0x10, 0x2, [0x3, 0x4, 0xd, 0x681, 0x1, 0x8001]}}, {{0x1c, 0x1, {0x4, 0xc6, 0x5, 0xc, 0x2, 0x800, 0x5, 0x3}}, {0xa, 0x2, [0x8001, 0xff, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x2, 0x2, 0x1, 0xf, 0xffff, 0x2}}, {0x8, 0x2, [0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0x32, 0x56e, 0x2, 0x1, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x522]}}, {{0x1c, 0x1, {0x7, 0x0, 0x37b5, 0x1, 0x1, 0x8, 0x970, 0x3}}, {0xa, 0x2, [0x8, 0xf, 0x6]}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffc, 0xa, 0x1, 0x1, 0xfffffff0, 0x7}}, {0x12, 0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x800, 0xe]}}, {{0x1c, 0x1, {0x66, 0x0, 0x3, 0x6, 0x0, 0x7f, 0xda18, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x4, 0x2, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x2, 0xe4f, 0xcc, 0x6, 0x6]}}]}]}, 0x210}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000001000370400000000000000000000000092ddebe668ccdaa9144a2da11ad287d313a99dbdcd357f30ff0fd3a1ca8e7a92080c610759c453329204232ae2f5f56fa20f84050b5d742413db25a646b02aa3fae74188fdbd19713f1d3470dc2f50057c1a8b760bdaf34186f5cc1ddd412362e5e3b6cd2a2685f5adcf7cecca90b4a9b6915494631572e7db441328ff9e5eda23611caed496dc02da847b4e7b64baa710e8a83a3d7366ac5b1cf115c112e788d1bd3ecea17f2f36c0e5ae93d158db5d46bb64f07f23f126", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010065727370616e0000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00ae7d0306010400"/18], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003d0009000000000000000000011000000400000014000180100010800c000b0007000b3eaf190000080002"], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) 684.884509ms ago: executing program 6 (id=7047): r0 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000240)='mounts\x00') write$hidraw(r0, &(0x7f0000000240)="21dd96a8d5e078f7d27f963d259653ec4b2a65033d7b5e5b90aa8b364159f28d810878382bddd5a08773e70b1117fb535f5f097f4792f95b63a96dae1430844fc3ebcdc0964fbec5cf2e08241fc4f2cdbd4850f6094c0b78fca4dd284c3d4d7bab38ea104f03b7b060ac0c51ea12e5884e1532552e3da845f04428a4608dd6f6d040a798fc87f99d00719a31b7a9ea6edb4ca671c8dd39564cb9fa5623d68a0159ac20e6634cb9bad7846631d756dd0ebd740a8045b774ed5a48a9f6d699063257e0c143ff7ff6d4ae1ef7c6ce4dd9aba84c477204f2cdd545b50baf7d5b006ff6c7b415b90282e17df75011fae795204bdbb542da669a660ace078083e6fe89a766e37ecd4b8125a7d493df13256235b3f7076fda1894b2cb98c9a9f4d8597c78547c406c5ddbbc04faed020473f6d65cc4bcce74469d091dff15bf1335595ce8eecc2582eff282b890a1d6d46ac7d16915a56c2bffce8f388edcbaac5461dd822aa5e8b0a088e5c5bd7bb1977b6cd4c96522df6bc16df2b049432fda3ddc77daca98e7119e1b62a35334a95aaa719901148e95c38ac2f7316760a999aa19c2ed212b41a049bdb8c66caf5f5c3ff3513fd928111091676aaea14d0351c60618c694183b807c9fc3dc0c31814d07e7e4b56cbcdba54a57f315638d2565caef774f0b349be04c51ea1f0e1fb231c6ce859b6629c6526328bcf4ffae00"/517, 0x205) 590.670415ms ago: executing program 3 (id=7048): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008000280040014"], 0x76}}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000140)=0x2, 0x4) listen(r5, 0xfff) syz_emit_ethernet(0x70, &(0x7f0000000200)={@local, @dev, @void, {@generic={0x8, "8903725af3d1a69ce050dde0758351677be128e150158963c6cd8c7b09d3ea6093d03c241301653f16314be016ef331d584f121b33a9006a89970a7902ea69414c3be2f94d285b85b22a9b5ed7150e55e287e4a5ec39148d28179fb45446bbbe3db5"}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f0000000b80)=ANY=[], 0xff2e) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000100)=0x7) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a"], 0x40}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000080bfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff0000000015040000000002000f040000000000002504000001ed0a0065040000170000801f340000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x208200) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30fc511fa83ceaf9}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x60}}, 0x0) openat$fuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x3b4, r9, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x21c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0x6, 0x2}, {0x1, 0x7}, {0x6, 0x1}, {0x6, 0x6}, {0x6}, {0x5, 0x1}, {0x7, 0x4}, {0x6, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x8}, {0x3, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x2}, {0x5, 0x6}, {0x7, 0x3}, {0x6, 0x5}, {0x7, 0x6}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x5, 0x6}, {0x7, 0x5}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {0x4, 0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x5, 0x1}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x1, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x7, 0x6}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x7}, {0x6, 0x9}, {0x6, 0x9}, {0x2, 0x6}, {0x2, 0x6}, {0x7, 0x8}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x5, 0x3}, {0x3, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x6}, {0x5, 0xa}, {0x7, 0x1}, {0x3, 0xa}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x16, 0x60, 0x1, 0xb, 0x36, 0x60, 0xb, 0x24, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x0, 0x7, 0x5fcf, 0x2, 0x132c, 0x3]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x2}, {0x1}, {}, {0x3, 0x6}, {0x3, 0xa}, {0x7, 0x6}, {0x6, 0x6}, {0x6, 0x4}, {0x7, 0x5}, {0x0, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x7}, {0x3, 0x1}, {0x4, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x5, 0x1}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0x5}, {0x7, 0x5}, {0x2, 0x7}, {0x3, 0x5}, {0x5, 0x9}, {0x7, 0x4}, {0x5, 0x7}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x2, 0xc, 0x2e, 0x12, 0x24, 0x4, 0x1, 0x16, 0x5, 0x6, 0xc10f43cc8ae4e3f0, 0x4, 0x30, 0x16, 0x24, 0x48, 0xc, 0x30, 0x9, 0x24, 0xc, 0x16, 0x12, 0x48, 0x2, 0x18, 0x12]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x2}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x5}, {0x3, 0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x1, 0x2, 0x51, 0x8, 0x6, 0x0, 0x6]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x5}, {0x0, 0x9}, {0x3, 0x7}, {0x6, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x7}, {0x7, 0x5}, {0x3}, {0x2, 0xa}, {0x3, 0x8}, {0x2}, {0x5}, {0x7, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x5, 0x12, 0x27, 0x5, 0x16, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x11, 0x6]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xac, 0x5, 0x3b5, 0x8, 0xfff, 0x401, 0xe055, 0x8001]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x4, 0x1, 0x2, 0x65, 0xc, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xffa3, 0x40, 0x60e, 0x1, 0x300, 0x7, 0x40]}}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfff}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2de, 0x7e, 0x7, 0xf58, 0x40, 0x7, 0x3, 0x2e6a]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x9}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x9}, {0x5, 0x8}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0xa}, {0x3, 0x8}, {0x6, 0x7}, {0x7, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x6}, {0x7, 0x4}, {0x7, 0x5}, {0x4, 0x8}, {0x4, 0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x7, 0x5}, {0x0, 0xa}, {0x1, 0x19}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x9, 0x1, 0x6, 0x8000, 0x3]}}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x3, 0xcb, 0xfc01, 0x8000, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x293, 0x8, 0x8a, 0x8, 0x5, 0x1fe, 0x2, 0xfffc]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x60, 0x4, 0x1b, 0x5, 0x30, 0x6, 0x30, 0xb, 0x1, 0x0, 0x48, 0xb, 0x36, 0x16, 0xb, 0x7c, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x7f5, 0x8, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x9, 0x0, 0x1b, 0x24, 0x5, 0x1b, 0x12, 0x50, 0x6, 0x16, 0x3, 0x9, 0x4, 0x24, 0x6, 0x12, 0x2]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x18, 0x2c, 0x3, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x9, 0x0, 0xffff, 0x1, 0x7, 0x8]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x44050}, 0x8090) 539.703915ms ago: executing program 6 (id=7049): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000300)=ANY=[@ANYRESHEX], &(0x7f00000005c0)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x8, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002800000", 0x2c}, {&(0x7f0000000640)="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", 0xdc5}, {&(0x7f00000000c0)="26fc4bcf8b00c19cd0eed8a91f7c36de44eed2752c4d27ee2e10986d2b", 0x1d}, {&(0x7f0000000280)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d", 0x68}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b791e900ba3d654bb44d4402987f407bdbcefe93f53", 0x26}, {0x0}, {0x0}], 0x7}, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000ff0f000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000005c000480580001800b000200746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea38149fccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a30000000001400058008000140000000320800024000000300140000001100010000000000000000000000000a00"/268], 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x5d) 539.347576ms ago: executing program 4 (id=7050): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x2}, {0x5, 0x1, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x20004808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080)=0x4, 0x4) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000001a00)=""/174, 0xe15d}) openat$ptmx(0xffffff9c, &(0x7f0000000240), 0x40000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x56a, 0x5}}) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x24c}, {&(0x7f0000001e80)}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e", 0x2c}], 0x3}}], 0x1, 0x0) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 0s ago: executing program 5 (id=7051): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x47) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0100000000000000", @ANYRES32, @ANYBLOB="7ea7672dfc75740a10dda5e7dca27fe1f6ebfaa824c14e788dd69ee096bd37789cec22f953670a6819ae03bd64ca7e21e673ef909a15a5d105087dc5bd1f330aa3547a5183", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x14) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): the problem. [ 1189.538766][T29090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.570642][T24435] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1189.596377][T29112] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6564'. [ 1189.597689][T29090] hsr_slave_0: entered promiscuous mode [ 1189.602962][T29090] hsr_slave_1: entered promiscuous mode [ 1189.605904][T29090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1189.608782][T29090] Cannot create hsr debugfs directory [ 1189.627242][T29112] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1189.732253][T24435] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1189.735261][T24435] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1189.738026][T24435] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1189.744099][ T73] hsr_slave_0: left promiscuous mode [ 1189.744604][T24435] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1189.748702][T24435] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.752098][T24435] usb 8-1: Product: syz [ 1189.752707][ T73] hsr_slave_1: left promiscuous mode [ 1189.753757][T24435] usb 8-1: Manufacturer: syz [ 1189.757446][T24435] usb 8-1: SerialNumber: syz [ 1189.759710][T24435] usb 8-1: config 0 descriptor?? [ 1189.761458][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1189.764074][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.767725][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1189.769900][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.799765][ T73] veth1_macvtap: left promiscuous mode [ 1189.801702][ T73] veth0_macvtap: left promiscuous mode [ 1189.803250][ T73] veth1_vlan: left promiscuous mode [ 1189.806139][ T73] veth0_vlan: left promiscuous mode [ 1189.965437][T24435] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1190.168091][T14409] usb 8-1: USB disconnect, device number 95 [ 1190.682279][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1190.760643][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1190.785146][ T5938] Bluetooth: hci0: command tx timeout [ 1191.657252][T29121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6566'. [ 1191.672899][T29107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6562'. [ 1191.723232][T29090] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1191.753933][T29090] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1191.762911][T29090] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1191.768116][T29143] input: syz0 as /devices/virtual/input/input694 [ 1191.788120][T29090] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1191.818552][T29143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6570'. [ 1191.845548][T29143] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1191.877716][T29090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.921993][T29090] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.928670][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.930788][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.942895][T21468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.944832][T21468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.073446][T29158] qnx6: unable to read the first superblock [ 1192.101345][T29090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.406771][T29090] veth0_vlan: entered promiscuous mode [ 1192.419245][T29090] veth1_vlan: entered promiscuous mode [ 1192.456132][T29090] veth0_macvtap: entered promiscuous mode [ 1192.469940][T29090] veth1_macvtap: entered promiscuous mode [ 1192.487234][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.490240][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.494983][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.499409][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.506059][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.509714][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.512888][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.517100][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.521481][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.525196][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.528525][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.531954][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.536531][T29090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.571229][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.574918][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.578488][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.583304][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.586945][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.599185][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.603329][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.607281][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.610979][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.614844][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.618460][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.622756][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.626455][T29090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.630484][T29090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.637927][T29090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.643467][T29090] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.645948][T29090] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.648445][T29090] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.651842][T29090] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.684825][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.687959][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.704326][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.706730][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.772731][T29182] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6580'. [ 1192.775568][T29182] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1192.781571][T29187] netlink: 'syz.3.6581': attribute type 1 has an invalid length. [ 1192.783861][T29187] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.6581'. [ 1192.861732][ T5938] Bluetooth: hci0: command tx timeout [ 1193.041056][T23999] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 1193.202102][T23999] usb 11-1: Using ep0 maxpacket: 8 [ 1193.204929][T23999] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 1193.207951][T23999] usb 11-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1193.218340][T23999] usb 11-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1193.218393][T29214] input: syz0 as /devices/virtual/input/input695 [ 1193.225038][T23999] usb 11-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1193.227851][T23999] usb 11-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1193.233177][T23999] usb 11-1: config 16 interface 0 has no altsetting 0 [ 1193.254405][T23999] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1193.273842][T23999] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.292118][T23999] usbtmc 11-1:16.0: bulk endpoints not found [ 1193.312806][T29214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6573'. [ 1193.316939][T29214] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1193.381320][T29223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6577'. [ 1194.211443][T29243] kAFS: No cell specified [ 1194.618228][T29249] netlink: 'syz.5.6583': attribute type 1 has an invalid length. [ 1194.628387][T29249] netlink: 134728 bytes leftover after parsing attributes in process `syz.5.6583'. [ 1194.940413][ T5938] Bluetooth: hci0: command tx timeout [ 1195.789807][T15154] usb 11-1: USB disconnect, device number 2 [ 1195.966102][T29278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6589'. [ 1195.973136][T29279] input: syz0 as /devices/virtual/input/input696 [ 1196.049210][T29280] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6591'. [ 1196.111644][T29279] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1196.181421][T29285] netlink: 'syz.5.6593': attribute type 1 has an invalid length. [ 1196.215537][T29287] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1196.498527][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1196.509153][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1196.520495][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1196.531011][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1196.533567][ T5949] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1196.536944][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1196.615874][T29294] chnl_net:caif_netlink_parms(): no params data found [ 1196.919474][T29294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.922771][T29294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.925447][T29294] bridge_slave_0: entered allmulticast mode [ 1196.927931][T29294] bridge_slave_0: entered promiscuous mode [ 1196.931078][T29294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.933333][T29294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.935660][T29294] bridge_slave_1: entered allmulticast mode [ 1196.938874][T29294] bridge_slave_1: entered promiscuous mode [ 1196.983130][T29294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.987635][T29294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.021601][ T5949] Bluetooth: hci0: command tx timeout [ 1197.075974][T29294] team0: Port device team_slave_0 added [ 1197.108249][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1197.112159][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1197.123047][T29294] team0: Port device team_slave_1 added [ 1197.154245][T29294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.156270][T29294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.164237][T29294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.168097][T29294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.172278][T29294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.180224][T29294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.213491][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1197.216456][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1197.253494][T29294] hsr_slave_0: entered promiscuous mode [ 1197.256068][T29294] hsr_slave_1: entered promiscuous mode [ 1197.258061][T29294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1197.260258][T29294] Cannot create hsr debugfs directory [ 1197.289323][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1197.293598][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1197.410757][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 1197.418969][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1197.422328][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1197.602545][T15154] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1197.613892][T29314] __nla_validate_parse: 2 callbacks suppressed [ 1197.613908][T29314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6604'. [ 1197.755986][T15154] usb 8-1: Using ep0 maxpacket: 8 [ 1197.773167][T15154] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1197.776123][T15154] usb 8-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1197.779834][T15154] usb 8-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1197.793679][T15154] usb 8-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1197.797428][T15154] usb 8-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1197.807563][T15154] usb 8-1: config 16 interface 0 has no altsetting 0 [ 1197.810047][T15154] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1197.815277][T15154] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.827040][T15154] usbtmc 8-1:16.0: bulk endpoints not found [ 1198.142700][ T11] bond0 (unregistering): Released all slaves [ 1198.242329][ T11] bond1 (unregistering): Released all slaves [ 1198.630557][ T25] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 1198.630791][ T5949] Bluetooth: hci1: command tx timeout [ 1198.681651][ T11] hsr_slave_0: left promiscuous mode [ 1198.684859][ T11] hsr_slave_1: left promiscuous mode [ 1198.755404][T29336] kAFS: No cell specified [ 1198.790898][ T25] usb 11-1: Using ep0 maxpacket: 8 [ 1198.809973][ T25] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 1198.813376][ T25] usb 11-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1198.826659][ T25] usb 11-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1198.831630][ T25] usb 11-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1198.835519][ T25] usb 11-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1198.840731][ T25] usb 11-1: config 16 interface 0 has no altsetting 0 [ 1198.854073][ T25] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1198.857686][ T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.864542][ T25] usbtmc 11-1:16.0: bulk endpoints not found [ 1199.867476][T29339] kAFS: No cell specified [ 1200.399743][ T1452] usb 8-1: USB disconnect, device number 96 [ 1200.450776][ T40] audit: type=1326 audit(1736903935.055:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29344 comm="syz.4.6610" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 1200.504689][T29294] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1200.509112][T29294] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1200.510242][T29357] 9pnet_fd: Insufficient options for proto=fd [ 1200.533328][T29294] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1200.543770][T29294] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1200.599426][T29294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.619211][T29294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.624594][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.626698][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.639555][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.641707][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.711292][ T5949] Bluetooth: hci1: command tx timeout [ 1200.750639][T20038] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1200.801204][T29294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.919204][T29294] veth0_vlan: entered promiscuous mode [ 1200.920917][T20038] usb 9-1: Using ep0 maxpacket: 8 [ 1200.928149][T20038] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1200.932972][T20038] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1200.933024][T29294] veth1_vlan: entered promiscuous mode [ 1200.935815][T20038] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1200.943585][T20038] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1200.946677][T20038] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1200.950860][T20038] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1200.954401][T20038] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.954986][T29294] veth0_macvtap: entered promiscuous mode [ 1200.960741][T29294] veth1_macvtap: entered promiscuous mode [ 1200.967091][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1200.968554][T20038] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 1200.970049][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.970059][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1200.970067][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.970074][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1200.970081][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.970087][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1200.996241][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.999027][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.002330][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.005686][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.009082][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.011982][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.015225][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.019554][T29294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.024525][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.028747][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.031981][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.036008][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.039041][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.042066][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.045779][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.048873][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.051841][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.055421][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.058351][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.061556][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.064389][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.068241][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.072260][T29294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.076370][T29294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.080974][T29294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.094929][T29294] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.097836][T29294] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.100379][T29294] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.102832][T29294] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.133767][T21468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.136074][T21468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.148526][T21468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.151119][T21468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.266702][T29386] input: syz0 as /devices/virtual/input/input697 [ 1201.376802][T29387] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6596'. [ 1201.388083][T29386] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1201.391963][ T9] usb 11-1: USB disconnect, device number 3 [ 1201.432629][T29389] netlink: 'syz.6.6603': attribute type 1 has an invalid length. [ 1201.434888][T29389] netlink: 134728 bytes leftover after parsing attributes in process `syz.6.6603'. [ 1201.878758][T29408] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6607'. [ 1202.597353][T29417] input: syz0 as /devices/virtual/input/input698 [ 1202.624395][T29417] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6611'. [ 1202.627953][T29417] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1202.751809][T29425] input: syz0 as /devices/virtual/input/input699 [ 1202.777284][T29425] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1202.790461][ T5949] Bluetooth: hci1: command tx timeout [ 1203.406713][T14409] usb 9-1: USB disconnect, device number 42 [ 1204.096027][T29447] input: syz0 as /devices/virtual/input/input700 [ 1204.128569][T29447] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6618'. [ 1204.131724][T29447] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1204.396464][T29449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6619'. [ 1204.863159][ T5949] Bluetooth: hci1: command tx timeout [ 1205.021683][T29470] input: syz0 as /devices/virtual/input/input701 [ 1205.144194][T29484] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6622'. [ 1205.155347][T29470] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1205.594281][T29501] netlink: 'syz.6.6626': attribute type 1 has an invalid length. [ 1205.596713][T29501] netlink: 134728 bytes leftover after parsing attributes in process `syz.6.6626'. [ 1205.777629][T29506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6628'. [ 1205.952787][T29516] input: syz0 as /devices/virtual/input/input702 [ 1206.057734][T29519] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6630'. [ 1206.064982][T29519] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1207.093517][T29562] input: syz0 as /devices/virtual/input/input703 [ 1207.146798][T29562] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6634'. [ 1207.165790][T29562] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1207.560590][T29574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6637'. [ 1207.993101][T29577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6639'. [ 1208.150746][ T40] audit: type=1326 audit(1736903942.755:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29580 comm="syz.6.6640" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x0 [ 1208.252833][T29584] 9pnet_fd: Insufficient options for proto=fd [ 1208.321817][T29586] input: syz0 as /devices/virtual/input/input704 [ 1208.389738][T29590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6641'. [ 1208.393230][T29590] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1208.726012][ T25] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 1208.727241][T29593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6650'. [ 1208.880446][ T25] usb 11-1: Using ep0 maxpacket: 8 [ 1208.885439][ T25] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1208.889143][ T25] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1208.894255][ T25] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1208.897945][ T25] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1208.902895][ T25] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1208.906440][ T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.124071][ T25] usb 11-1: usb_control_msg returned -32 [ 1209.125734][ T25] usbtmc 11-1:16.0: can't read capabilities [ 1209.136112][ T25] usb 11-1: USB disconnect, device number 4 [ 1209.473226][T29603] vivid-001: disconnect [ 1209.475273][T29603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6645'. [ 1209.592401][T29602] vivid-001: reconnect [ 1210.618184][T29621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6648'. [ 1211.365290][T29635] input: syz0 as /devices/virtual/input/input705 [ 1211.430508][T29635] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6652'. [ 1211.434831][T29635] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1211.587449][T29637] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6653'. [ 1212.896159][T29662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6665'. [ 1213.487142][T29671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6659'. [ 1213.651976][ T40] audit: type=1326 audit(1736903948.255:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29676 comm="syz.3.6660" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 1213.753295][T29682] 9pnet_fd: Insufficient options for proto=fd [ 1213.768443][T29681] input: syz0 as /devices/virtual/input/input706 [ 1213.838458][T29681] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6662'. [ 1213.926382][T29681] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1213.990425][T14432] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1214.002740][T29685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1214.140511][T14432] usb 8-1: Using ep0 maxpacket: 8 [ 1214.143338][T14432] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1214.146185][T14432] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1214.149056][T14432] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1214.152039][T14432] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1214.156292][T14432] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1214.162236][T14432] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.399487][T14432] usb 8-1: usb_control_msg returned -32 [ 1214.401336][T14432] usbtmc 8-1:16.0: can't read capabilities [ 1214.404646][T14432] usb 8-1: USB disconnect, device number 97 [ 1215.298884][T29702] input: syz0 as /devices/virtual/input/input707 [ 1215.311919][T29702] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6675'. [ 1215.316367][T29702] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1215.329062][T29703] input: syz0 as /devices/virtual/input/input708 [ 1215.354332][T29703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6667'. [ 1215.361741][T29703] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1215.831587][T29715] input: syz0 as /devices/virtual/input/input709 [ 1215.892717][T29716] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6670'. [ 1215.950506][ T25] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1215.994633][T29715] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6671'. [ 1215.999517][T29715] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1216.138958][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1216.143438][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1216.146882][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1216.152621][ T25] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1216.155217][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.157454][ T25] usb 10-1: Product: syz [ 1216.159016][ T25] usb 10-1: Manufacturer: syz [ 1216.160541][ T25] usb 10-1: SerialNumber: syz [ 1216.162796][ T25] usb 10-1: config 0 descriptor?? [ 1216.374885][ T25] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1216.579866][ T9] usb 10-1: USB disconnect, device number 2 [ 1216.768937][T29724] input: syz0 as /devices/virtual/input/input710 [ 1216.930297][T29724] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6673'. [ 1216.941765][T29724] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1217.488779][T29734] futex_wake_op: syz.5.6678 tries to shift op by -1; fix this program [ 1217.548474][T29736] netlink: 'syz.5.6678': attribute type 10 has an invalid length. [ 1217.561438][T29738] input: syz0 as /devices/virtual/input/input711 [ 1217.565356][T29736] team0: Port device netdevsim0 added [ 1217.573238][T29736] netlink: 'syz.5.6678': attribute type 10 has an invalid length. [ 1217.591640][T29736] team0: Port device netdevsim0 removed [ 1217.599579][T29736] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1217.608419][T29738] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6679'. [ 1217.613302][T29738] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1217.618421][T29736] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6678'. [ 1218.171089][T15154] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1218.383143][T15154] usb 8-1: Using ep0 maxpacket: 8 [ 1218.476711][T15154] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1218.479431][T15154] usb 8-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1218.513665][T15154] usb 8-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1218.517647][T15154] usb 8-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1218.521883][T15154] usb 8-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1218.526220][T15154] usb 8-1: config 16 interface 0 has no altsetting 0 [ 1218.528103][T15154] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1218.530807][T15154] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.688996][T15154] usbtmc 8-1:16.0: bulk endpoints not found [ 1219.309991][ T40] audit: type=1326 audit(1736903953.905:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29759 comm="syz.6.6684" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x0 [ 1219.412405][T29765] 9pnet_fd: Insufficient options for proto=fd [ 1219.596688][T29769] kAFS: No cell specified [ 1219.652106][T14432] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 1219.800473][T14432] usb 11-1: Using ep0 maxpacket: 8 [ 1219.805234][T14432] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1219.808094][T14432] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1219.814097][T14432] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1219.816926][T14432] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.821038][T14432] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1219.823709][T14432] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.045526][T14432] usb 11-1: usb_control_msg returned -32 [ 1220.047515][T14432] usbtmc 11-1:16.0: can't read capabilities [ 1220.051879][T14432] usb 11-1: USB disconnect, device number 5 [ 1220.587818][T29778] input: syz0 as /devices/virtual/input/input712 [ 1220.637429][T29778] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6687'. [ 1220.642371][T29778] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1220.948158][T29786] input: syz0 as /devices/virtual/input/input713 [ 1220.976134][T29786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6697'. [ 1220.981125][T15154] usb 8-1: USB disconnect, device number 98 [ 1220.994766][T29786] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1222.091920][ T40] audit: type=1326 audit(1736903956.695:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29799 comm="syz.3.6693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1222.098312][ T40] audit: type=1326 audit(1736903956.695:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29799 comm="syz.3.6693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1222.105000][ T40] audit: type=1326 audit(1736903956.695:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29799 comm="syz.3.6693" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1222.115551][ T40] audit: type=1326 audit(1736903956.695:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29799 comm="syz.3.6693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1222.124517][ T40] audit: type=1326 audit(1736903956.695:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29799 comm="syz.3.6693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1222.131591][ T40] audit: type=1326 audit(1736903956.715:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29799 comm="syz.3.6693" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1222.138072][T29800] netlink: 'syz.3.6693': attribute type 1 has an invalid length. [ 1222.140987][T29800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1222.143037][T29800] IPv6: NLM_F_CREATE should be set when creating new route [ 1222.145388][ T40] audit: type=1326 audit(1736903956.715:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29799 comm="syz.3.6693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1222.151557][ T40] audit: type=1326 audit(1736903956.715:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29799 comm="syz.3.6693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1222.158060][ T40] audit: type=1326 audit(1736903956.725:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29799 comm="syz.3.6693" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1223.409744][T29825] input: syz0 as /devices/virtual/input/input714 [ 1223.422727][T29825] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6700'. [ 1223.425818][T29825] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1223.468231][T29827] input: syz0 as /devices/virtual/input/input715 [ 1223.505497][T29827] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6701'. [ 1223.513663][T29827] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1223.590421][T29664] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1223.684270][T29829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6703'. [ 1223.750546][T29664] usb 10-1: Using ep0 maxpacket: 8 [ 1223.753931][T29664] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 1223.756800][T29664] usb 10-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1223.760656][T29664] usb 10-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1223.764127][T29664] usb 10-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1223.774466][T29664] usb 10-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1223.782398][T29664] usb 10-1: config 16 interface 0 has no altsetting 0 [ 1223.784468][T29664] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1223.790497][T29664] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.803160][T29664] usbtmc 10-1:16.0: bulk endpoints not found [ 1224.547577][T29835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6712'. [ 1224.549153][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 1224.549167][ T40] audit: type=1326 audit(1736903959.145:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.6.6704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 1224.555981][T29838] netlink: 'syz.6.6704': attribute type 1 has an invalid length. [ 1224.560891][ T40] audit: type=1326 audit(1736903959.145:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.6.6704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 1224.570633][T29838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1224.573477][T29838] IPv6: NLM_F_CREATE should be set when creating new route [ 1224.573648][ T40] audit: type=1326 audit(1736903959.145:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.6.6704" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 1224.582169][ T40] audit: type=1326 audit(1736903959.145:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.6.6704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 1224.588265][ T40] audit: type=1326 audit(1736903959.145:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.6.6704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 1224.594313][ T40] audit: type=1326 audit(1736903959.145:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.6.6704" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 1224.600613][ T40] audit: type=1326 audit(1736903959.145:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.6.6704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 1224.606846][ T40] audit: type=1326 audit(1736903959.145:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.6.6704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 1224.613545][ T40] audit: type=1326 audit(1736903959.155:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.6.6704" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 1224.619504][ T40] audit: type=1326 audit(1736903959.155:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29837 comm="syz.6.6704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 1224.737850][T29844] kAFS: No cell specified [ 1226.317012][T14432] usb 10-1: USB disconnect, device number 3 [ 1226.577560][T29870] input: syz0 as /devices/virtual/input/input716 [ 1226.652101][T29870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6711'. [ 1226.655646][T29870] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1226.885463][T29876] input: syz0 as /devices/virtual/input/input717 [ 1226.953979][T14409] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1226.957927][T29876] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6714'. [ 1226.962198][T29876] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1227.101575][T14409] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1227.105408][T14409] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1227.108183][T14409] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1227.116720][T14409] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1227.119336][T14409] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.123358][T14409] usb 8-1: Product: syz [ 1227.124782][T14409] usb 8-1: Manufacturer: syz [ 1227.126123][T14409] usb 8-1: SerialNumber: syz [ 1227.132447][T14409] usb 8-1: config 0 descriptor?? [ 1227.136283][T14409] adutux 8-1:0.0: interrupt endpoints not found [ 1227.232789][T29886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6717'. [ 1227.320900][T29888] 9pnet_fd: Insufficient options for proto=fd [ 1227.560620][T14409] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1227.710496][T14409] usb 10-1: Using ep0 maxpacket: 8 [ 1227.713204][T14409] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1227.715998][T14409] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1227.718792][T14409] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1227.721889][T14409] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.725575][T14409] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1227.728140][T14409] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.940748][T14409] usb 10-1: usb_control_msg returned -32 [ 1227.942512][T14409] usbtmc 10-1:16.0: can't read capabilities [ 1227.947652][T14409] usb 10-1: USB disconnect, device number 4 [ 1227.992024][T29892] input: syz0 as /devices/virtual/input/input718 [ 1228.026710][T29892] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6718'. [ 1228.035529][T29892] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1228.270141][T29896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6720'. [ 1228.330779][T14432] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 1228.480767][T14432] usb 11-1: Using ep0 maxpacket: 8 [ 1228.484009][T14432] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 1228.486651][T14432] usb 11-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1228.490094][T14432] usb 11-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1228.493446][T14432] usb 11-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1228.496308][T14432] usb 11-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1228.499966][T14432] usb 11-1: config 16 interface 0 has no altsetting 0 [ 1228.502032][T14432] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1228.504748][T14432] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.509400][T14432] usbtmc 11-1:16.0: bulk endpoints not found [ 1229.439526][T29907] kAFS: No cell specified [ 1229.657709][ T1452] usb 8-1: USB disconnect, device number 99 [ 1230.305548][T29916] input: syz0 as /devices/virtual/input/input719 [ 1230.333630][T29916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6723'. [ 1230.337207][T29916] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1230.480461][ T1452] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1230.631549][ T1452] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1230.634799][ T1452] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1230.637705][ T1452] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1230.642480][ T1452] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1230.645325][ T1452] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.647782][ T1452] usb 9-1: Product: syz [ 1230.649079][ T1452] usb 9-1: Manufacturer: syz [ 1230.650864][ T1452] usb 9-1: SerialNumber: syz [ 1230.653779][ T1452] usb 9-1: config 0 descriptor?? [ 1230.862638][ T1452] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1231.064013][ T8] usb 9-1: USB disconnect, device number 43 [ 1231.125627][T14432] usb 11-1: USB disconnect, device number 6 [ 1231.127246][T29929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6727'. [ 1231.797193][T29941] input: syz0 as /devices/virtual/input/input720 [ 1231.881108][T29941] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6729'. [ 1231.888506][T29941] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1232.072174][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 1232.072184][ T40] audit: type=1326 audit(1736903966.675:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29942 comm="syz.6.6731" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x0 [ 1232.174411][T29944] 9pnet_fd: Insufficient options for proto=fd [ 1232.341624][T29949] input: syz0 as /devices/virtual/input/input721 [ 1232.400211][T29949] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6733'. [ 1232.403609][T29949] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1232.460791][ T8] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 1232.690627][ T8] usb 11-1: Using ep0 maxpacket: 8 [ 1232.705563][ T8] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1232.708505][ T8] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1232.718737][ T8] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1232.725019][ T8] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1232.729224][ T8] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1232.736701][ T8] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.682395][ T8] usb 11-1: usb_control_msg returned -32 [ 1233.684131][ T8] usbtmc 11-1:16.0: can't read capabilities [ 1233.688973][ T8] usb 11-1: USB disconnect, device number 7 [ 1234.130501][ T1452] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1234.251998][T29974] input: syz0 as /devices/virtual/input/input722 [ 1234.272380][ T6294] udevd[6294]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1234.284942][T29974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6738'. [ 1234.289679][T29974] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1234.290562][ T1452] usb 10-1: Using ep0 maxpacket: 8 [ 1234.296246][ T1452] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 1234.298641][ T1452] usb 10-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1234.301966][ T1452] usb 10-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1234.305204][ T1452] usb 10-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1234.308074][ T1452] usb 10-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1234.312740][ T1452] usb 10-1: config 16 interface 0 has no altsetting 0 [ 1234.314732][ T1452] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1234.317475][ T1452] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.325255][ T1452] usbtmc 10-1:16.0: bulk endpoints not found [ 1234.474021][T29977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6739'. [ 1235.288206][T29989] kAFS: No cell specified [ 1236.073051][T30002] input: syz0 as /devices/virtual/input/input723 [ 1236.096071][T30002] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6744'. [ 1236.100773][T30002] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1236.821623][T30014] input: syz0 as /devices/virtual/input/input724 [ 1236.860118][ T8] usb 10-1: USB disconnect, device number 5 [ 1236.969364][T30014] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6746'. [ 1236.977800][T30014] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1237.102790][T30021] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6747'. [ 1237.406919][T30027] input: syz0 as /devices/virtual/input/input725 [ 1237.463414][T30027] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6749'. [ 1237.467946][T30027] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1237.743024][T30031] input: syz0 as /devices/virtual/input/input726 [ 1237.790802][T30031] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6750'. [ 1237.797567][T30031] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1237.959693][T30034] input: syz0 as /devices/virtual/input/input727 [ 1238.006740][T30034] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6751'. [ 1238.014144][T30034] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1238.147303][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.149283][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.335463][T30040] netlink: 'syz.3.6761': attribute type 1 has an invalid length. [ 1238.337710][T30040] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.6761'. [ 1238.530476][ T1452] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 1238.684591][ T1452] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1238.687895][ T1452] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1238.696289][ T1452] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1238.702829][ T1452] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1238.705697][ T1452] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.708274][ T1452] usb 11-1: Product: syz [ 1238.709569][ T1452] usb 11-1: Manufacturer: syz [ 1238.713693][ T1452] usb 11-1: SerialNumber: syz [ 1238.722195][ T1452] usb 11-1: config 0 descriptor?? [ 1238.730446][T14432] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1238.880479][T14432] usb 8-1: Using ep0 maxpacket: 8 [ 1238.885871][T14432] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1238.888344][T14432] usb 8-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1238.893830][T14432] usb 8-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1238.897082][T14432] usb 8-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1238.900063][T14432] usb 8-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1238.904226][T14432] usb 8-1: config 16 interface 0 has no altsetting 0 [ 1238.906269][T14432] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1238.908977][T14432] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.916588][T14432] usbtmc 8-1:16.0: bulk endpoints not found [ 1238.971313][ T1452] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1239.316986][T14432] usb 11-1: USB disconnect, device number 8 [ 1239.854581][T30067] kAFS: No cell specified [ 1240.540472][T30080] input: syz0 as /devices/virtual/input/input728 [ 1240.570269][T30080] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6762'. [ 1240.575707][T30080] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1240.819526][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6764'. [ 1241.509886][ T71] usb 8-1: USB disconnect, device number 100 [ 1241.691826][T30097] futex_wake_op: syz.4.6768 tries to shift op by -1; fix this program [ 1241.692555][ T40] audit: type=1326 audit(1736903976.285:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30100 comm="syz.6.6769" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x0 [ 1241.788820][T30103] 9pnet_fd: Insufficient options for proto=fd [ 1242.040592][ T25] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 1242.066013][T30109] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6771'. [ 1242.090437][ T9] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1242.200484][ T25] usb 11-1: Using ep0 maxpacket: 8 [ 1242.204216][ T25] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1242.208776][ T25] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1242.213172][ T25] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1242.216832][ T25] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1242.224150][ T25] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1242.226746][ T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.251923][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1242.255067][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1242.258719][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1242.265555][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1242.269282][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.272557][ T9] usb 8-1: Product: syz [ 1242.274265][ T9] usb 8-1: Manufacturer: syz [ 1242.276155][ T9] usb 8-1: SerialNumber: syz [ 1242.278753][ T9] usb 8-1: config 0 descriptor?? [ 1242.336534][T30111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6772'. [ 1242.435804][T30114] input: syz0 as /devices/virtual/input/input729 [ 1242.440629][ T25] usb 11-1: usb_control_msg returned -32 [ 1242.442642][ T25] usbtmc 11-1:16.0: can't read capabilities [ 1242.455015][ T25] usb 11-1: USB disconnect, device number 9 [ 1242.477783][T30114] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6773'. [ 1242.482535][T30114] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1242.493518][ T9] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1242.696518][ T9] usb 8-1: USB disconnect, device number 101 [ 1242.723329][T30105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6770'. [ 1242.736959][T30117] input: syz0 as /devices/virtual/input/input730 [ 1242.777984][T30117] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1242.972004][T30124] input: syz0 as /devices/virtual/input/input731 [ 1243.004906][T30124] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6776'. [ 1243.011755][T30124] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1243.430412][ T1452] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1243.592224][ T1452] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1243.595437][ T1452] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1243.598216][ T1452] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1243.604085][ T1452] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1243.607760][ T1452] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.611109][ T1452] usb 9-1: Product: syz [ 1243.613100][ T1452] usb 9-1: Manufacturer: syz [ 1243.615145][ T1452] usb 9-1: SerialNumber: syz [ 1243.621553][ T1452] usb 9-1: config 0 descriptor?? [ 1243.836867][ T1452] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1244.039991][ T9] usb 9-1: USB disconnect, device number 44 [ 1244.069203][T30128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6777'. [ 1244.483025][T30146] input: syz0 as /devices/virtual/input/input732 [ 1244.503558][T30146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6782'. [ 1244.506838][T30146] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1244.698501][T30155] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6783'. [ 1244.763811][T30158] input: syz0 as /devices/virtual/input/input733 [ 1244.794607][T30158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6785'. [ 1244.798222][T30158] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1245.172839][T30164] input: syz0 as /devices/virtual/input/input734 [ 1245.349333][ T71] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 1245.360307][T30164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6786'. [ 1245.365588][T30164] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1245.511932][ T71] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1245.515587][ T71] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1245.531819][ T71] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1245.538327][ T71] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1245.542879][ T71] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.546029][ T71] usb 11-1: Product: syz [ 1245.547786][ T71] usb 11-1: Manufacturer: syz [ 1245.549691][ T71] usb 11-1: SerialNumber: syz [ 1245.559363][ T71] usb 11-1: config 0 descriptor?? [ 1245.835999][ T71] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1245.978581][ T8] usb 11-1: USB disconnect, device number 10 [ 1246.240410][ T71] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1246.390476][ T71] usb 9-1: Using ep0 maxpacket: 8 [ 1246.393461][ T71] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1246.395889][ T71] usb 9-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1246.398833][ T71] usb 9-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1246.402060][ T71] usb 9-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1246.404943][ T71] usb 9-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1246.408603][ T71] usb 9-1: config 16 interface 0 has no altsetting 0 [ 1246.410759][ T71] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1246.413372][ T71] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.417486][ T71] usbtmc 9-1:16.0: bulk endpoints not found [ 1247.000509][ T8] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 1247.151710][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1247.154885][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1247.157679][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1247.162938][ T8] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1247.166606][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.169522][ T8] usb 8-1: Product: syz [ 1247.171041][ T8] usb 8-1: Manufacturer: syz [ 1247.172405][ T8] usb 8-1: SerialNumber: syz [ 1247.174750][ T8] usb 8-1: config 0 descriptor?? [ 1247.370303][T30191] kAFS: No cell specified [ 1247.385009][ T8] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1247.439958][T30194] __nla_validate_parse: 2 callbacks suppressed [ 1247.439969][T30194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6795'. [ 1247.602504][ T1452] usb 8-1: USB disconnect, device number 102 [ 1247.624412][T30188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6794'. [ 1247.857559][T30202] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6796'. [ 1249.013762][T14409] usb 9-1: USB disconnect, device number 45 [ 1249.130587][T30220] input: syz0 as /devices/virtual/input/input735 [ 1249.187582][T30220] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1249.690448][T14409] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1249.851373][T14409] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1249.854514][T14409] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1249.857228][T14409] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1249.864922][T14409] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1249.867526][T14409] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.869797][T14409] usb 9-1: Product: syz [ 1249.872397][T14409] usb 9-1: Manufacturer: syz [ 1249.873854][T14409] usb 9-1: SerialNumber: syz [ 1249.880256][T14409] usb 9-1: config 0 descriptor?? [ 1250.099458][T14409] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1250.301707][T14409] usb 9-1: USB disconnect, device number 46 [ 1250.325371][T30226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6803'. [ 1251.051160][T30247] input: syz0 as /devices/virtual/input/input736 [ 1251.088907][T30247] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6808'. [ 1251.094299][T30247] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1251.686648][T30259] input: syz0 as /devices/virtual/input/input737 [ 1251.724099][T30259] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6812'. [ 1251.727399][T30259] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1251.860486][T23999] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 1252.010743][T23999] usb 11-1: Using ep0 maxpacket: 8 [ 1252.013617][T23999] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 1252.017001][T23999] usb 11-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1252.022104][T23999] usb 11-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1252.026505][T23999] usb 11-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1252.030701][T23999] usb 11-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1252.035536][T23999] usb 11-1: config 16 interface 0 has no altsetting 0 [ 1252.037504][T23999] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1252.040133][T23999] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.044604][T23999] usbtmc 11-1:16.0: bulk endpoints not found [ 1252.140487][T14409] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1252.481699][T30268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6815'. [ 1252.495977][T14409] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1252.500765][T14409] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1252.504686][T14409] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1252.516771][T14409] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1252.520785][T14409] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.524078][T14409] usb 10-1: Product: syz [ 1252.525829][T14409] usb 10-1: Manufacturer: syz [ 1252.527797][T14409] usb 10-1: SerialNumber: syz [ 1252.536870][T14409] usb 10-1: config 0 descriptor?? [ 1252.743228][T14409] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1252.947006][T23999] usb 10-1: USB disconnect, device number 6 [ 1253.005344][T30278] kAFS: No cell specified [ 1253.308107][T30288] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6821'. [ 1253.568686][T30291] input: syz0 as /devices/virtual/input/input738 [ 1253.579548][T30291] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6822'. [ 1253.583537][T30291] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1254.660928][T14798] usb 11-1: USB disconnect, device number 11 [ 1254.720850][T30307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6827'. [ 1255.170493][ T8] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1255.337152][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1255.340242][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1255.343111][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1255.347755][ T8] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1255.350418][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.352717][ T8] usb 10-1: Product: syz [ 1255.354094][ T8] usb 10-1: Manufacturer: syz [ 1255.355464][ T8] usb 10-1: SerialNumber: syz [ 1255.357736][ T8] usb 10-1: config 0 descriptor?? [ 1255.562424][ T8] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1255.763821][ T8] usb 10-1: USB disconnect, device number 7 [ 1255.823146][ T40] audit: type=1326 audit(1736903990.425:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30328 comm="syz.4.6833" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 1255.924869][T30330] 9pnet_fd: Insufficient options for proto=fd [ 1256.160490][T23999] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1256.310531][T23999] usb 9-1: Using ep0 maxpacket: 8 [ 1256.313402][T23999] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1256.316947][T23999] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1256.326986][T23999] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1256.329826][T23999] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1256.336412][T23999] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1256.339086][T23999] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.359430][T30339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6836'. [ 1256.548567][T23999] usb 9-1: usb_control_msg returned -32 [ 1256.550702][T23999] usbtmc 9-1:16.0: can't read capabilities [ 1256.556553][T23999] usb 9-1: USB disconnect, device number 47 [ 1257.450381][T14798] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 1257.460914][T14409] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1257.610562][T14409] usb 10-1: Using ep0 maxpacket: 8 [ 1257.612020][T14798] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1257.613547][T14409] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 1257.615437][T14798] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1257.615454][T14798] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1257.617439][T14798] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1257.618541][T14409] usb 10-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1257.621569][T14798] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.621616][T14798] usb 11-1: Product: syz [ 1257.621626][T14798] usb 11-1: Manufacturer: syz [ 1257.621634][T14798] usb 11-1: SerialNumber: syz [ 1257.625631][T14409] usb 10-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1257.629177][T14798] usb 11-1: config 0 descriptor?? [ 1257.632193][T14409] usb 10-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1257.647656][T14409] usb 10-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1257.651500][T14409] usb 10-1: config 16 interface 0 has no altsetting 0 [ 1257.653445][T14409] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1257.656073][T14409] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.660606][T14409] usbtmc 10-1:16.0: bulk endpoints not found [ 1257.840707][T14798] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1258.042075][T14798] usb 11-1: USB disconnect, device number 12 [ 1258.047072][T30359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6842'. [ 1258.054509][T30359] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:00, vlan:0) [ 1258.110087][T30360] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6842'. [ 1258.592120][T30362] kAFS: No cell specified [ 1259.150413][ T62] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1259.312696][ T62] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1259.317867][ T62] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1259.320791][ T62] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1259.325588][ T62] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1259.328574][ T62] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.332488][ T62] usb 9-1: Product: syz [ 1259.333877][ T62] usb 9-1: Manufacturer: syz [ 1259.336012][ T62] usb 9-1: SerialNumber: syz [ 1259.339394][ T62] usb 9-1: config 0 descriptor?? [ 1259.547150][ T62] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1259.748165][T14432] usb 9-1: USB disconnect, device number 48 [ 1260.234398][ T1452] usb 10-1: USB disconnect, device number 8 [ 1260.529981][T30396] input: syz0 as /devices/virtual/input/input739 [ 1260.613715][T30398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6853'. [ 1260.619766][T30394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6852'. [ 1260.623947][T30394] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1260.650422][ T1452] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1260.680842][T30399] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6853'. [ 1260.800551][ T1452] usb 10-1: Using ep0 maxpacket: 8 [ 1260.804735][ T1452] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 1260.807113][ T1452] usb 10-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1260.810210][ T1452] usb 10-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1260.815968][ T1452] usb 10-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1260.824625][ T1452] usb 10-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1260.834773][ T1452] usb 10-1: config 16 interface 0 has no altsetting 0 [ 1260.840092][ T1452] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1260.843821][ T1452] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.851597][ T1452] usbtmc 10-1:16.0: bulk endpoints not found [ 1261.817935][T30416] kAFS: No cell specified [ 1262.086652][T30430] input: syz0 as /devices/virtual/input/input740 [ 1262.115391][T30430] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1262.915009][T30441] input: syz0 as /devices/virtual/input/input741 [ 1262.944848][T30441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6863'. [ 1262.949121][T30441] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1263.313152][ T62] usb 10-1: USB disconnect, device number 9 [ 1264.075897][T30467] input: syz0 as /devices/virtual/input/input742 [ 1264.138393][T30467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6870'. [ 1264.143472][T30467] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1264.239745][T30470] input: syz0 as /devices/virtual/input/input743 [ 1264.269767][T30470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6871'. [ 1264.282754][T30470] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1264.437508][T30476] input: syz0 as /devices/virtual/input/input744 [ 1264.453332][T30476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6872'. [ 1264.453538][T30475] input: syz0 as /devices/virtual/input/input745 [ 1264.457404][T30476] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1264.546213][T30475] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6873'. [ 1264.553500][T30475] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1265.653526][T30496] overlayfs: failed to resolve './file1': -2 [ 1265.744060][T30503] input: syz0 as /devices/virtual/input/input746 [ 1265.772668][T30503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6881'. [ 1265.776710][T30503] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1265.901353][T30505] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6879'. [ 1266.206035][T30510] input: syz0 as /devices/virtual/input/input747 [ 1266.240796][T30510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6883'. [ 1266.251259][T30510] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1266.283280][T14409] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 1266.445548][T14409] usb 11-1: Using ep0 maxpacket: 8 [ 1266.448602][T14409] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 1266.452025][T14409] usb 11-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1266.455557][T14409] usb 11-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1266.458922][T14409] usb 11-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1266.462073][T14409] usb 11-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1266.465648][T14409] usb 11-1: config 16 interface 0 has no altsetting 0 [ 1266.467525][T14409] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1266.470068][T14409] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.474744][T14409] usbtmc 11-1:16.0: bulk endpoints not found [ 1266.531307][ T9] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1266.682577][ T9] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 1266.685045][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1266.688292][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1266.691821][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1266.694946][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1266.698486][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1266.701446][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.705510][ T9] usb 8-1: config 0 descriptor?? [ 1266.707826][T30514] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1266.810547][ T62] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1266.936322][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 1266.938066][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1266.944211][ T9] usb 8-1: USB disconnect, device number 103 [ 1266.985496][ T62] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1266.988173][ T62] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1266.991934][ T62] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1266.995039][ T62] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1266.998203][ T62] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1267.002305][ T62] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1267.005523][ T62] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.010261][ T62] usb 10-1: config 0 descriptor?? [ 1267.012862][T30523] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1267.393459][T30533] kAFS: No cell specified [ 1267.423208][ T62] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 1267.426527][ T62] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 1267.429764][ T62] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1267.485421][T30537] FAULT_INJECTION: forcing a failure. [ 1267.485421][T30537] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.489904][T30537] CPU: 3 UID: 0 PID: 30537 Comm: syz.3.6891 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1267.492972][T30537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1267.495920][T30537] Call Trace: [ 1267.496890][T30537] [ 1267.497743][T30537] dump_stack_lvl+0x16c/0x1f0 [ 1267.499282][T30537] should_fail_ex+0x497/0x5b0 [ 1267.500687][T30537] ? fs_reclaim_acquire+0xae/0x150 [ 1267.502205][T30537] should_failslab+0xc2/0x120 [ 1267.503558][T30537] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1267.505045][T30537] ? security_file_alloc+0x34/0x2b0 [ 1267.506506][T30537] security_file_alloc+0x34/0x2b0 [ 1267.507937][T30537] init_file+0x93/0x480 [ 1267.509131][T30537] alloc_empty_file+0x91/0x1e0 [ 1267.510559][T30537] path_openat+0xe1/0x2d60 [ 1267.511851][T30537] ? hlock_class+0x4e/0x130 [ 1267.513162][T30537] ? __lock_acquire+0x15a9/0x3c40 [ 1267.514579][T30537] ? __pfx_path_openat+0x10/0x10 [ 1267.516002][T30537] ? __pfx___lock_acquire+0x10/0x10 [ 1267.517462][T30537] ? lock_acquire.part.0+0x11b/0x380 [ 1267.518961][T30537] ? find_held_lock+0x2d/0x110 [ 1267.520335][T30537] do_filp_open+0x20c/0x470 [ 1267.521825][T30537] ? __pfx_do_filp_open+0x10/0x10 [ 1267.523585][T30537] ? find_held_lock+0x2d/0x110 [ 1267.524968][T30537] ? alloc_fd+0x41f/0x760 [ 1267.526228][T30537] do_sys_openat2+0x17a/0x1e0 [ 1267.527570][T30537] ? __pfx_do_sys_openat2+0x10/0x10 [ 1267.529054][T30537] ? __fget_files+0x206/0x3a0 [ 1267.530398][T30537] __ia32_compat_sys_openat+0x16e/0x210 [ 1267.531971][T30537] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1267.533755][T30537] ? ksys_write+0x1ba/0x250 [ 1267.535037][T30537] __do_fast_syscall_32+0x73/0x120 [ 1267.536443][T30537] do_fast_syscall_32+0x32/0x80 [ 1267.537785][T30537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1267.539630][T30537] RIP: 0023:0xf711e579 [ 1267.540853][T30537] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1267.546275][T30537] RSP: 002b:00000000f511055c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1267.548642][T30537] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020002180 [ 1267.550863][T30537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1267.553131][T30537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1267.555358][T30537] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1267.557568][T30537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1267.559791][T30537] [ 1267.626489][ T62] usb 10-1: USB disconnect, device number 10 [ 1268.176617][T30543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6893'. [ 1269.014324][ T8] usb 11-1: USB disconnect, device number 13 [ 1269.129030][T30566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6900'. [ 1269.243486][T30575] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6900'. [ 1269.456276][T30576] input: syz0 as /devices/virtual/input/input749 [ 1269.528237][T30580] Invalid source name [ 1269.529562][T30580] UBIFS error (pid: 30580): cannot open "./file0", error -22 [ 1269.571752][T30582] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6903'. [ 1269.577235][T30582] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1270.657884][T30587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6905'. [ 1270.784350][T30597] hub 5-0:1.0: USB hub found [ 1270.785967][T30597] hub 5-0:1.0: 1 port detected [ 1271.022056][T30606] FAULT_INJECTION: forcing a failure. [ 1271.022056][T30606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1271.027137][T30606] CPU: 0 UID: 0 PID: 30606 Comm: syz.5.6911 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1271.030982][T30606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1271.034884][T30606] Call Trace: [ 1271.036031][T30606] [ 1271.037148][T30606] dump_stack_lvl+0x16c/0x1f0 [ 1271.038662][T30606] should_fail_ex+0x497/0x5b0 [ 1271.040118][T30606] _copy_from_user+0x2e/0xd0 [ 1271.041444][T30606] dev_set_hwtstamp+0x148/0x5c0 [ 1271.042888][T30606] ? __pfx_dev_set_hwtstamp+0x10/0x10 [ 1271.045040][T30606] ? __schedule+0x3d6c/0x5ad0 [ 1271.046919][T30606] ? lock_acquire.part.0+0x11b/0x380 [ 1271.049136][T30606] ? dev_ioctl+0x213/0x10c0 [ 1271.050409][T30606] ? full_name_hash+0xbc/0x110 [ 1271.051759][T30606] ? netdev_name_node_lookup+0xf0/0x140 [ 1271.053458][T30606] ? trace_contention_end+0xee/0x140 [ 1271.055040][T30606] dev_ifsioc+0x642/0x10b0 [ 1271.056301][T30606] ? __pfx_dev_ifsioc+0x10/0x10 [ 1271.057653][T30606] ? __pfx___mutex_lock+0x10/0x10 [ 1271.059043][T30606] ? __pfx_lock_release+0x10/0x10 [ 1271.060508][T30606] ? netdev_name_node_lookup_rcu+0xf0/0x140 [ 1271.062154][T30606] dev_ioctl+0x224/0x10c0 [ 1271.063639][T30606] compat_sock_ioctl+0x44c/0x7e0 [ 1271.065623][T30606] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1271.067856][T30606] ? lockdep_hardirqs_on+0x7c/0x110 [ 1271.069702][T30606] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1271.071181][T30606] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 1271.072686][T30606] __do_fast_syscall_32+0x73/0x120 [ 1271.074188][T30606] do_fast_syscall_32+0x32/0x80 [ 1271.075606][T30606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1271.077421][T30606] RIP: 0023:0xf70ee579 [ 1271.078595][T30606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1271.084512][T30606] RSP: 002b:00000000f50bf55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1271.087801][T30606] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000089b0 [ 1271.090737][T30606] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1271.093002][T30606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1271.095152][T30606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1271.097341][T30606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1271.099558][T30606] [ 1271.216497][T30612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6910'. [ 1271.350691][ C2] hpet: Lost 6 RTC interrupts [ 1271.430620][ C2] hpet: Lost 4 RTC interrupts [ 1271.495469][ C2] hpet: Lost 3 RTC interrupts [ 1271.670861][ C2] hpet: Lost 10 RTC interrupts [ 1271.957054][ C2] hpet: Lost 18 RTC interrupts [ 1271.961146][T30606] Invalid source name [ 1271.962513][T30606] UBIFS error (pid: 30606): cannot open "./file0", error -22 [ 1271.986516][T30610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.993641][T30610] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1271.996102][T30620] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1272.059013][T30623] input: syz0 as /devices/virtual/input/input750 [ 1272.140589][T30625] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6914'. [ 1272.148454][T30625] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1272.374437][T30631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6916'. [ 1272.605752][T30633] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6916'. [ 1273.047035][T30652] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6917'. [ 1273.439489][T30668] Invalid source name [ 1273.441324][T30668] UBIFS error (pid: 30668): cannot open "./file0", error -22 [ 1273.915679][ T40] audit: type=1326 audit(1736904008.515:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30673 comm="syz.4.6925" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 1274.315565][T30681] Invalid source name [ 1274.317182][T30681] UBIFS error (pid: 30681): cannot open "./file0", error -22 [ 1274.859733][T30695] input: syz0 as /devices/virtual/input/input751 [ 1274.920436][T30696] FAULT_INJECTION: forcing a failure. [ 1274.920436][T30696] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.924210][T30696] CPU: 1 UID: 0 PID: 30696 Comm: syz.3.6929 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1274.927297][T30696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1274.930347][T30696] Call Trace: [ 1274.931337][T30696] [ 1274.932205][T30696] dump_stack_lvl+0x16c/0x1f0 [ 1274.933636][T30696] should_fail_ex+0x497/0x5b0 [ 1274.935003][T30696] ? fs_reclaim_acquire+0xae/0x150 [ 1274.936506][T30696] should_failslab+0xc2/0x120 [ 1274.937870][T30696] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1274.939470][T30696] ? security_file_alloc+0x34/0x2b0 [ 1274.940980][T30696] security_file_alloc+0x34/0x2b0 [ 1274.942424][T30696] init_file+0x93/0x480 [ 1274.943654][T30696] alloc_empty_file+0x91/0x1e0 [ 1274.945026][T30696] path_openat+0xe1/0x2d60 [ 1274.946319][T30696] ? hlock_class+0x4e/0x130 [ 1274.947628][T30696] ? __lock_acquire+0x15a9/0x3c40 [ 1274.949066][T30696] ? __pfx_path_openat+0x10/0x10 [ 1274.950493][T30696] ? __pfx___lock_acquire+0x10/0x10 [ 1274.952428][T30696] ? lock_acquire.part.0+0x11b/0x380 [ 1274.954408][T30696] ? find_held_lock+0x2d/0x110 [ 1274.956219][T30696] do_filp_open+0x20c/0x470 [ 1274.957765][T30696] ? __pfx_do_filp_open+0x10/0x10 [ 1274.959240][T30696] ? find_held_lock+0x2d/0x110 [ 1274.960638][T30696] ? alloc_fd+0x41f/0x760 [ 1274.961900][T30696] do_sys_openat2+0x17a/0x1e0 [ 1274.963308][T30696] ? __pfx_do_sys_openat2+0x10/0x10 [ 1274.964819][T30696] ? __fget_files+0x206/0x3a0 [ 1274.966160][T30696] __ia32_compat_sys_openat+0x16e/0x210 [ 1274.967768][T30696] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1274.969535][T30696] ? ksys_write+0x1ba/0x250 [ 1274.970903][T30696] __do_fast_syscall_32+0x73/0x120 [ 1274.972398][T30696] do_fast_syscall_32+0x32/0x80 [ 1274.973813][T30696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1274.975682][T30696] RIP: 0023:0xf711e579 [ 1274.976860][T30696] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1274.982335][T30696] RSP: 002b:00000000f50ce4f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 1274.984715][T30696] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72fce8c [ 1274.986978][T30696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7453ff4 [ 1274.989236][T30696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1274.991490][T30696] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1274.993733][T30696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1274.995989][T30696] [ 1275.058019][T30695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6931'. [ 1275.061953][T30695] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1275.508827][T30705] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6932'. [ 1276.357395][T30719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6937'. [ 1276.419036][T30724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6939'. [ 1276.546536][T30729] input: syz0 as /devices/virtual/input/input752 [ 1276.565554][T30731] FAULT_INJECTION: forcing a failure. [ 1276.565554][T30731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1276.570543][T30731] CPU: 3 UID: 0 PID: 30731 Comm: syz.6.6942 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1276.573637][T30731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1276.576707][T30731] Call Trace: [ 1276.577671][T30731] [ 1276.578529][T30731] dump_stack_lvl+0x16c/0x1f0 [ 1276.579969][T30731] should_fail_ex+0x497/0x5b0 [ 1276.581336][T30731] _copy_from_iter+0x29b/0x1400 [ 1276.582742][T30731] ? trace_lock_acquire+0x14e/0x1f0 [ 1276.584256][T30731] ? __alloc_skb+0x200/0x380 [ 1276.585589][T30731] ? __pfx__copy_from_iter+0x10/0x10 [ 1276.587117][T30731] ? __virt_addr_valid+0x1a4/0x590 [ 1276.588602][T30731] ? __virt_addr_valid+0x5e/0x590 [ 1276.590061][T30731] ? __phys_addr_symbol+0x30/0x80 [ 1276.591536][T30731] ? __check_object_size+0x488/0x710 [ 1276.593067][T30731] netlink_sendmsg+0x813/0xd70 [ 1276.594450][T30731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.596025][T30731] ____sys_sendmsg+0x9ae/0xb40 [ 1276.597416][T30731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1276.598937][T30731] ? get_compat_msghdr+0x11b/0x170 [ 1276.600434][T30731] ___sys_sendmsg+0x135/0x1e0 [ 1276.601978][T30731] ? __pfx____sys_sendmsg+0x10/0x10 [ 1276.603509][T30731] ? __pfx_lock_release+0x10/0x10 [ 1276.604962][T30731] ? trace_lock_acquire+0x14e/0x1f0 [ 1276.606478][T30731] ? __fget_files+0x206/0x3a0 [ 1276.607853][T30731] __sys_sendmsg+0x16e/0x220 [ 1276.609226][T30731] ? __pfx___sys_sendmsg+0x10/0x10 [ 1276.610703][T30731] __do_fast_syscall_32+0x73/0x120 [ 1276.612299][T30731] do_fast_syscall_32+0x32/0x80 [ 1276.613730][T30731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1276.615563][T30731] RIP: 0023:0xf7fe1579 [ 1276.616744][T30731] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1276.622280][T30731] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1276.624786][T30731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 1276.627070][T30731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1276.629480][T30731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1276.631833][T30731] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1276.634101][T30731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1276.636445][T30731] [ 1276.670816][T30729] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6941'. [ 1276.674113][T30729] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1276.858325][T30746] FAULT_INJECTION: forcing a failure. [ 1276.858325][T30746] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.863490][T30746] CPU: 1 UID: 0 PID: 30746 Comm: syz.6.6944 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1276.867491][T30746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1276.871498][T30746] Call Trace: [ 1276.872768][T30746] [ 1276.873881][T30746] dump_stack_lvl+0x16c/0x1f0 [ 1276.875659][T30746] should_fail_ex+0x497/0x5b0 [ 1276.877477][T30746] ? fs_reclaim_acquire+0xae/0x150 [ 1276.878963][T30746] should_failslab+0xc2/0x120 [ 1276.880734][T30746] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1276.882740][T30746] ? vm_area_dup+0x21/0x300 [ 1276.884452][T30746] vm_area_dup+0x21/0x300 [ 1276.886083][T30746] __split_vma+0x181/0x1210 [ 1276.887436][T30746] ? __pfx___split_vma+0x10/0x10 [ 1276.888901][T30746] ? __pfx_mark_lock+0x10/0x10 [ 1276.890313][T30746] vms_gather_munmap_vmas+0x38b/0x1730 [ 1276.891912][T30746] ? mark_lock+0xb5/0xc60 [ 1276.893222][T30746] ? mark_lock+0xb5/0xc60 [ 1276.894483][T30746] ? __lock_acquire+0xcc5/0x3c40 [ 1276.895932][T30746] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1276.897640][T30746] ? hlock_class+0x4e/0x130 [ 1276.898966][T30746] ? mark_lock+0xb5/0xc60 [ 1276.900244][T30746] ? irqentry_exit+0x3b/0x90 [ 1276.901595][T30746] ? __pfx_mark_lock+0x10/0x10 [ 1276.903002][T30746] do_vmi_align_munmap+0x27f/0x890 [ 1276.904507][T30746] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1276.906185][T30746] do_vmi_munmap+0x20b/0x3e0 [ 1276.907558][T30746] do_munmap+0xbe/0x100 [ 1276.908809][T30746] ? __pfx_do_munmap+0x10/0x10 [ 1276.910205][T30746] ? __do_sys_mremap+0x21c/0x15e0 [ 1276.911679][T30746] ? __pfx_down_write_killable+0x10/0x10 [ 1276.913303][T30746] ? __schedule+0xe60/0x5ad0 [ 1276.914658][T30746] __do_sys_mremap+0x1099/0x15e0 [ 1276.916119][T30746] ? __pfx___do_sys_mremap+0x10/0x10 [ 1276.917649][T30746] ? __pfx___schedule+0x10/0x10 [ 1276.919074][T30746] ? __fget_files+0x206/0x3a0 [ 1276.920483][T30746] ? fput+0x67/0x440 [ 1276.921814][T30746] ? ksys_write+0x1ba/0x250 [ 1276.923159][T30746] __do_fast_syscall_32+0x73/0x120 [ 1276.924674][T30746] do_fast_syscall_32+0x32/0x80 [ 1276.926106][T30746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1276.927941][T30746] RIP: 0023:0xf7fe1579 [ 1276.929127][T30746] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1276.934692][T30746] RSP: 002b:00000000f50f455c EFLAGS: 00000296 ORIG_RAX: 00000000000000a3 [ 1276.937091][T30746] RAX: ffffffffffffffda RBX: 000000002054e000 RCX: 0000000000001000 [ 1276.939404][T30746] RDX: 0000000000003000 RSI: 0000000000000003 RDI: 000000002022c000 [ 1276.941674][T30746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1276.943951][T30746] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1276.946230][T30746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1276.948456][T30746] [ 1276.968541][T30755] netfs: Couldn't get user pages (rc=-14) [ 1277.043034][T30759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6948'. [ 1277.156055][T30768] FAULT_INJECTION: forcing a failure. [ 1277.156055][T30768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1277.159963][T30768] CPU: 0 UID: 0 PID: 30768 Comm: syz.4.6952 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1277.163065][T30768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1277.166481][T30768] Call Trace: [ 1277.167474][T30768] [ 1277.168344][T30768] dump_stack_lvl+0x16c/0x1f0 [ 1277.169723][T30768] should_fail_ex+0x497/0x5b0 [ 1277.171124][T30768] _copy_from_iter+0x29b/0x1400 [ 1277.172561][T30768] ? trace_lock_acquire+0x14e/0x1f0 [ 1277.174109][T30768] ? __alloc_skb+0x200/0x380 [ 1277.175652][T30768] ? __pfx__copy_from_iter+0x10/0x10 [ 1277.177274][T30768] ? __virt_addr_valid+0x1a4/0x590 [ 1277.178756][T30768] ? __virt_addr_valid+0x5e/0x590 [ 1277.180240][T30768] ? __phys_addr_symbol+0x30/0x80 [ 1277.181710][T30768] ? __check_object_size+0x488/0x710 [ 1277.183261][T30768] netlink_sendmsg+0x813/0xd70 [ 1277.184664][T30768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1277.186354][T30768] ____sys_sendmsg+0x9ae/0xb40 [ 1277.187764][T30768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1277.189318][T30768] ? get_compat_msghdr+0x11b/0x170 [ 1277.190810][T30768] ___sys_sendmsg+0x135/0x1e0 [ 1277.192190][T30768] ? __pfx____sys_sendmsg+0x10/0x10 [ 1277.193700][T30768] ? __pfx_lock_release+0x10/0x10 [ 1277.195248][T30768] ? trace_lock_acquire+0x14e/0x1f0 [ 1277.196914][T30768] ? __fget_files+0x206/0x3a0 [ 1277.198292][T30768] __sys_sendmsg+0x16e/0x220 [ 1277.199657][T30768] ? __pfx___sys_sendmsg+0x10/0x10 [ 1277.201227][T30768] __do_fast_syscall_32+0x73/0x120 [ 1277.202722][T30768] do_fast_syscall_32+0x32/0x80 [ 1277.204158][T30768] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1277.206016][T30768] RIP: 0023:0xf70ee579 [ 1277.207221][T30768] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1277.212739][T30768] RSP: 002b:00000000f50e055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1277.215162][T30768] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 1277.217468][T30768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1277.219754][T30768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1277.222050][T30768] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1277.224328][T30768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1277.226669][T30768] [ 1277.341237][T30774] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6951'. [ 1277.348613][T30773] input: syz0 as /devices/virtual/input/input753 [ 1277.402463][T30773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6953'. [ 1277.411018][T30773] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1277.627059][T30776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6954'. [ 1277.687976][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6954'. [ 1277.971333][ T1452] hid-generic 0000:0000:0003.0012: unknown main item tag 0x6 [ 1277.973527][ T1452] hid-generic 0000:0000:0003.0012: unknown main item tag 0x2 [ 1277.975758][ T1452] hid-generic 0000:0000:0003.0012: unknown main item tag 0x3 [ 1277.977903][ T1452] hid-generic 0000:0000:0003.0012: unknown main item tag 0x2 [ 1277.980015][ T1452] hid-generic 0000:0000:0003.0012: unknown main item tag 0x7 [ 1277.982467][ T1452] hid-generic 0000:0000:0003.0012: unknown main item tag 0x2 [ 1277.984600][ T1452] hid-generic 0000:0000:0003.0012: unknown main item tag 0x3 [ 1277.987431][ T1452] hid-generic 0000:0000:0003.0012: unknown main item tag 0x2 [ 1277.989555][ T1452] hid-generic 0000:0000:0003.0012: unknown main item tag 0x7 [ 1277.991980][ T1452] hid-generic 0000:0000:0003.0012: unknown main item tag 0x7 [ 1277.994100][ T1452] hid-generic 0000:0000:0003.0012: unknown main item tag 0x2 [ 1277.996209][ T1452] hid-generic 0000:0000:0003.0012: unknown main item tag 0x3 [ 1277.999215][ T1452] hid-generic 0000:0000:0003.0012: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1278.125597][T30794] netlink: 'syz.3.6961': attribute type 12 has an invalid length. [ 1278.128059][T30794] netlink: 'syz.3.6961': attribute type 29 has an invalid length. [ 1278.131261][T30794] netlink: 'syz.3.6961': attribute type 2 has an invalid length. [ 1278.134295][T30794] netlink: 'syz.3.6961': attribute type 2 has an invalid length. [ 1278.136919][T30794] netlink: 'syz.3.6961': attribute type 1 has an invalid length. [ 1278.139392][T30794] netlink: 'syz.3.6961': attribute type 37 has an invalid length. [ 1278.142178][T30794] netlink: 'syz.3.6961': attribute type 2 has an invalid length. [ 1278.144925][T30794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.170280][T30797] FAULT_INJECTION: forcing a failure. [ 1278.170280][T30797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1278.174278][T30797] CPU: 0 UID: 0 PID: 30797 Comm: syz.3.6962 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1278.177363][T30797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1278.180444][T30797] Call Trace: [ 1278.181424][T30797] [ 1278.182301][T30797] dump_stack_lvl+0x16c/0x1f0 [ 1278.183699][T30797] should_fail_ex+0x497/0x5b0 [ 1278.185076][T30797] _copy_from_iter+0x29b/0x1400 [ 1278.186524][T30797] ? trace_lock_acquire+0x14e/0x1f0 [ 1278.188055][T30797] ? __alloc_skb+0x200/0x380 [ 1278.189439][T30797] ? __pfx__copy_from_iter+0x10/0x10 [ 1278.190975][T30797] ? __virt_addr_valid+0x1a4/0x590 [ 1278.192492][T30797] ? __virt_addr_valid+0x5e/0x590 [ 1278.193958][T30797] ? __phys_addr_symbol+0x30/0x80 [ 1278.195431][T30797] ? __check_object_size+0x488/0x710 [ 1278.196974][T30797] netlink_sendmsg+0x813/0xd70 [ 1278.198370][T30797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1278.199948][T30797] ____sys_sendmsg+0x9ae/0xb40 [ 1278.201348][T30797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1278.202892][T30797] ? get_compat_msghdr+0x11b/0x170 [ 1278.204401][T30797] ___sys_sendmsg+0x135/0x1e0 [ 1278.205803][T30797] ? __pfx____sys_sendmsg+0x10/0x10 [ 1278.207332][T30797] ? __pfx_lock_release+0x10/0x10 [ 1278.208796][T30797] ? trace_lock_acquire+0x14e/0x1f0 [ 1278.210314][T30797] ? __fget_files+0x206/0x3a0 [ 1278.211732][T30797] __sys_sendmsg+0x16e/0x220 [ 1278.213101][T30797] ? __pfx___sys_sendmsg+0x10/0x10 [ 1278.214597][T30797] __do_fast_syscall_32+0x73/0x120 [ 1278.216107][T30797] do_fast_syscall_32+0x32/0x80 [ 1278.217529][T30797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1278.219374][T30797] RIP: 0023:0xf711e579 [ 1278.220590][T30797] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1278.226110][T30797] RSP: 002b:00000000f511055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1278.228515][T30797] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 1278.230514][T14798] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1278.230808][T30797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1278.235402][T30797] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1278.237719][T30797] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1278.240009][T30797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1278.242301][T30797] [ 1278.401757][T14798] usb 10-1: config index 0 descriptor too short (expected 28009, got 36) [ 1278.404178][T14798] usb 10-1: config 116 has too many interfaces: 105, using maximum allowed: 32 [ 1278.406772][T14798] usb 10-1: config 116 has an invalid descriptor of length 48, skipping remainder of the config [ 1278.409734][T14798] usb 10-1: config 116 has 0 interfaces, different from the descriptor's value: 105 [ 1278.412518][T14798] usb 10-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1278.415169][T14798] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.688460][T30784] netlink: 'syz.5.6956': attribute type 4 has an invalid length. [ 1278.694031][T30784] netlink: 'syz.5.6956': attribute type 4 has an invalid length. [ 1278.701754][T14798] usb 10-1: string descriptor 0 read error: -71 [ 1278.713615][T14798] usb 10-1: USB disconnect, device number 11 [ 1279.238758][T30820] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1279.281465][T30827] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:00, vlan:0) [ 1279.299951][T30817] hub 9-0:1.0: USB hub found [ 1279.302351][T30817] hub 9-0:1.0: 1 port detected [ 1279.446179][T30841] : renamed from ipvlan1 [ 1279.451016][T30841] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1279.682508][T30848] input: syz0 as /devices/virtual/input/input754 [ 1279.711600][T30848] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1280.067944][T30854] __nla_validate_parse: 8 callbacks suppressed [ 1280.067954][T30854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6983'. [ 1280.397767][T30864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6985'. [ 1280.763271][T30875] binder: 30874:30875 ioctl c0306201 20000080 returned -11 [ 1280.938945][T30880] input: syz0 as /devices/virtual/input/input755 [ 1280.969177][T30880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6991'. [ 1280.978906][T30880] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1281.024150][T30884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6993'. [ 1281.076738][T30886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6994'. [ 1281.527520][T30901] FAULT_INJECTION: forcing a failure. [ 1281.527520][T30901] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.527586][T30901] CPU: 2 UID: 0 PID: 30901 Comm: syz.6.6999 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1281.527599][T30901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1281.527607][T30901] Call Trace: [ 1281.527610][T30901] [ 1281.527615][T30901] dump_stack_lvl+0x16c/0x1f0 [ 1281.527633][T30901] should_fail_ex+0x497/0x5b0 [ 1281.527647][T30901] ? fs_reclaim_acquire+0xae/0x150 [ 1281.527662][T30901] should_failslab+0xc2/0x120 [ 1281.527678][T30901] __kmalloc_cache_noprof+0x68/0x420 [ 1281.527695][T30901] drm_atomic_state_alloc+0xb8/0x120 [ 1281.527720][T30901] drm_client_modeset_commit_atomic+0xd1/0x7f0 [ 1281.527735][T30901] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 1281.527750][T30901] ? rcu_is_watching+0x12/0xc0 [ 1281.527764][T30901] ? trace_contention_end+0xee/0x140 [ 1281.527776][T30901] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1281.527789][T30901] ? __mutex_lock+0x1cc/0xa60 [ 1281.527818][T30901] drm_client_modeset_commit_locked+0x14d/0x580 [ 1281.527834][T30901] drm_client_modeset_commit+0x4f/0x80 [ 1281.527848][T30901] __drm_fb_helper_restore_fbdev_mode_unlocked+0x130/0x180 [ 1281.527863][T30901] drm_fb_helper_set_par+0xd8/0x120 [ 1281.527873][T30901] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1281.527885][T30901] fb_set_var+0x7af/0x1130 [ 1281.527903][T30901] ? __pfx_fb_set_var+0x10/0x10 [ 1281.527924][T30901] ? lock_acquire.part.0+0x11b/0x380 [ 1281.527938][T30901] ? __mutex_trylock_common+0xea/0x250 [ 1281.527950][T30901] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1281.527961][T30901] ? do_fb_ioctl+0x2cc/0x7d0 [ 1281.527974][T30901] ? rcu_is_watching+0x12/0xc0 [ 1281.527987][T30901] ? trace_contention_end+0xee/0x140 [ 1281.527999][T30901] ? __mutex_lock+0x1cc/0xa60 [ 1281.528020][T30901] ? lock_acquire+0x2f/0xb0 [ 1281.528029][T30901] ? down+0x2a/0xa0 [ 1281.528042][T30901] ? do_fb_ioctl+0x2c2/0x7d0 [ 1281.528070][T30901] ? is_console_locked+0x9/0x20 [ 1281.528087][T30901] ? fbcon_modechange_possible+0x334/0x440 [ 1281.528106][T30901] do_fb_ioctl+0x73f/0x7d0 [ 1281.528119][T30901] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1281.528131][T30901] ? tomoyo_path_number_perm+0x298/0x5b0 [ 1281.528159][T30901] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1281.528185][T30901] fb_compat_ioctl+0x55f/0x670 [ 1281.528197][T30901] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 1281.528214][T30901] ? __fget_files+0x206/0x3a0 [ 1281.528230][T30901] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 1281.528244][T30901] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 1281.528257][T30901] __do_fast_syscall_32+0x73/0x120 [ 1281.528272][T30901] do_fast_syscall_32+0x32/0x80 [ 1281.528286][T30901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1281.528304][T30901] RIP: 0023:0xf7fe1579 [ 1281.528313][T30901] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1281.528323][T30901] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1281.528335][T30901] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 1281.528343][T30901] RDX: 0000000020000940 RSI: 0000000000000000 RDI: 0000000000000000 [ 1281.528350][T30901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1281.528356][T30901] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1281.528363][T30901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1281.528377][T30901] [ 1282.057269][T30915] input: syz0 as /devices/virtual/input/input756 [ 1282.102018][T30916] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7002'. [ 1282.102046][T30915] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1282.276017][T30918] FAULT_INJECTION: forcing a failure. [ 1282.276017][T30918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1282.279823][T30918] CPU: 0 UID: 0 PID: 30918 Comm: syz.3.7004 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1282.282913][T30918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1282.285976][T30918] Call Trace: [ 1282.286939][T30918] [ 1282.287858][T30918] dump_stack_lvl+0x16c/0x1f0 [ 1282.289212][T30918] should_fail_ex+0x497/0x5b0 [ 1282.290574][T30918] _copy_from_user+0x2e/0xd0 [ 1282.292216][T30918] br_ioctl_stub+0x375/0x8b0 [ 1282.293632][T30918] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1282.295066][T30918] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 1282.296665][T30918] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1282.298127][T30918] br_ioctl_call+0x62/0xb0 [ 1282.299474][T30918] sock_ioctl+0x36a/0x6c0 [ 1282.300729][T30918] ? __pfx_sock_ioctl+0x10/0x10 [ 1282.302566][T30918] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1282.304405][T30918] ? unix_ioctl+0x2c6/0x5c0 [ 1282.305739][T30918] ? __pfx_unix_ioctl+0x10/0x10 [ 1282.307156][T30918] compat_sock_ioctl+0x505/0x7e0 [ 1282.308554][T30918] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1282.310100][T30918] ? __fget_files+0x206/0x3a0 [ 1282.311647][T30918] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1282.313219][T30918] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 1282.314739][T30918] __do_fast_syscall_32+0x73/0x120 [ 1282.316229][T30918] do_fast_syscall_32+0x32/0x80 [ 1282.317621][T30918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1282.319566][T30918] RIP: 0023:0xf711e579 [ 1282.320738][T30918] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1282.326189][T30918] RSP: 002b:00000000f511055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1282.328589][T30918] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089a1 [ 1282.330864][T30918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1282.333114][T30918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1282.335363][T30918] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1282.337609][T30918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1282.339912][T30918] [ 1282.423397][T30922] Invalid source name [ 1282.424976][T30922] UBIFS error (pid: 30922): cannot open "./file0", error -22 [ 1282.516442][T30925] syz.3.7006[30925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1282.519038][T30925] syz.3.7006[30925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1282.522406][T30925] syz.3.7006[30925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1282.765079][T30932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7008'. [ 1282.794182][T30932] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:00, vlan:0) [ 1282.916026][T30935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7008'. [ 1282.918630][T30935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7008'. [ 1283.110499][T14432] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1283.272365][T14432] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1283.276621][T14432] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1283.279903][T14432] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1283.285853][T14432] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1283.288432][T14432] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.291292][T14432] usb 9-1: Product: syz [ 1283.292633][T14432] usb 9-1: Manufacturer: syz [ 1283.294071][T14432] usb 9-1: SerialNumber: syz [ 1283.297171][T14432] usb 9-1: config 0 descriptor?? [ 1283.317955][T30939] input: syz0 as /devices/virtual/input/input757 [ 1283.340042][T30939] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7010'. [ 1283.344042][T30939] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1283.504156][T14432] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1283.704324][ T8] usb 9-1: USB disconnect, device number 49 [ 1283.791323][T30945] netlink: 'syz.5.7013': attribute type 1 has an invalid length. [ 1283.891377][T14432] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 1283.954818][T30953] input: syz0 as /devices/virtual/input/input758 [ 1283.976067][T30953] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1284.070650][T14432] usb 8-1: Using ep0 maxpacket: 8 [ 1284.073437][T14432] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1284.076374][T14432] usb 8-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1284.080152][T14432] usb 8-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1284.089535][T14432] usb 8-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1284.093610][T14432] usb 8-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1284.097272][T14432] usb 8-1: config 16 interface 0 has no altsetting 0 [ 1284.099161][T14432] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1284.107051][T14432] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.114590][T14432] usbtmc 8-1:16.0: bulk endpoints not found [ 1285.122783][T30985] input: syz0 as /devices/virtual/input/input759 [ 1285.137012][T30984] kAFS: No cell specified [ 1285.208112][T30985] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7021'. [ 1285.213524][T30985] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1285.527197][T30998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7023'. [ 1286.275448][T31010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7026'. [ 1286.621074][T14409] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1286.644170][ T9] usb 8-1: USB disconnect, device number 104 [ 1286.770463][T14409] usb 10-1: Using ep0 maxpacket: 32 [ 1286.773540][T14409] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1286.776462][T14409] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1286.779490][T14409] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1286.782462][T14409] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1286.785252][T14409] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1286.787916][T14409] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1286.794869][T14409] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1286.797599][T14409] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.801402][T14409] usb 10-1: config 0 descriptor?? [ 1287.011715][T14409] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1287.118473][T31024] input: syz0 as /devices/virtual/input/input760 [ 1287.142031][T31024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7030'. [ 1287.147118][T31024] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1287.302032][T31034] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7028'. [ 1287.387083][ C3] usblp0: nonzero read bulk status received: -71 [ 1287.392857][T31015] usblp0: error -71 reading from printer [ 1287.395868][ C0] usblp0: nonzero read bulk status received: -71 [ 1287.401385][T14409] usb 10-1: USB disconnect, device number 12 [ 1287.404656][T14409] usblp0: removed [ 1287.615896][T31041] FAULT_INJECTION: forcing a failure. [ 1287.615896][T31041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.621007][T31041] CPU: 3 UID: 0 PID: 31041 Comm: syz.3.7034 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1287.625048][T31041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1287.629127][T31041] Call Trace: [ 1287.630389][T31041] [ 1287.631526][T31041] dump_stack_lvl+0x16c/0x1f0 [ 1287.633305][T31041] should_fail_ex+0x497/0x5b0 [ 1287.635123][T31041] _copy_to_user+0x32/0xd0 [ 1287.636819][T31041] simple_read_from_buffer+0xd0/0x160 [ 1287.638788][T31041] proc_fail_nth_read+0x198/0x270 [ 1287.640678][T31041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1287.642339][T31041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1287.643942][T31041] vfs_read+0x1df/0xbe0 [ 1287.645192][T31041] ? __fget_files+0x1fc/0x3a0 [ 1287.646551][T31041] ? __pfx___mutex_lock+0x10/0x10 [ 1287.648034][T31041] ? __pfx_vfs_read+0x10/0x10 [ 1287.649417][T31041] ? __fget_files+0x206/0x3a0 [ 1287.650794][T31041] ksys_read+0x12b/0x250 [ 1287.652030][T31041] ? __pfx_ksys_read+0x10/0x10 [ 1287.653427][T31041] __do_fast_syscall_32+0x73/0x120 [ 1287.654897][T31041] do_fast_syscall_32+0x32/0x80 [ 1287.656309][T31041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1287.658116][T31041] RIP: 0023:0xf711e579 [ 1287.659300][T31041] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1287.664767][T31041] RSP: 002b:00000000f50ef590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1287.667150][T31041] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f50ef620 [ 1287.669383][T31041] RDX: 000000000000000f RSI: 00000000f7453ff4 RDI: 0000000000000000 [ 1287.671643][T31041] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1287.673911][T31041] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1287.676174][T31041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1287.678428][T31041] [ 1287.713614][T31046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7036'. [ 1287.716648][T31046] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:00, vlan:0) [ 1287.741882][T31042] input: syz0 as /devices/virtual/input/input761 [ 1287.797363][T31042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7035'. [ 1287.804173][T31042] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1288.250456][T14432] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1288.400429][T14432] usb 10-1: Using ep0 maxpacket: 8 [ 1288.403166][T14432] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 1288.403166][T31057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7038'. [ 1288.410474][T14432] usb 10-1: config 16 has an invalid descriptor of length 231, skipping remainder of the config [ 1288.418187][T14432] usb 10-1: config 16 interface 0 altsetting 8 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1288.421373][T14432] usb 10-1: config 16 interface 0 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1288.424266][T14432] usb 10-1: config 16 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1288.427922][T14432] usb 10-1: config 16 interface 0 has no altsetting 0 [ 1288.430222][T14432] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1288.432763][T14432] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.441837][T14432] usbtmc 10-1:16.0: bulk endpoints not found [ 1288.504706][ T1452] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 1288.656217][ T1452] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1288.659396][ T1452] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1288.662907][ T1452] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1288.667577][ T1452] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1288.670551][ T1452] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.672918][ T1452] usb 11-1: Product: syz [ 1288.674172][ T1452] usb 11-1: Manufacturer: syz [ 1288.675491][ T1452] usb 11-1: SerialNumber: syz [ 1288.678170][ T1452] usb 11-1: config 0 descriptor?? [ 1288.889754][ T1452] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1288.910969][T14432] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 1289.062244][T14432] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.066580][T14432] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.069936][T14432] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1289.073904][T14432] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1289.076796][T14432] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.082544][T14432] usb 8-1: config 0 descriptor?? [ 1289.107323][T14409] usb 11-1: USB disconnect, device number 14 [ 1289.398049][T31069] kAFS: No cell specified [ 1289.528394][T14432] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1289.532621][T14432] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 1289.536325][T14432] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1289.765267][T31073] input: syz0 as /devices/virtual/input/input762 [ 1289.792189][T31073] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7043'. [ 1289.795824][T31073] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1289.904580][ T25] usb 8-1: USB disconnect, device number 105 [ 1290.280870][T31083] input: syz0 as /devices/virtual/input/input763 [ 1290.319068][T31083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7046'. [ 1290.331695][T31083] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 1290.510118][T31090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1290.513885][T31090] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:00, vlan:0) [ 1290.704498][T31097] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7049'. [ 1291.023810][T24435] usb 10-1: USB disconnect, device number 13 [ 1291.105395][ T3226] [ 1291.106405][ T3226] ====================================================== [ 1291.108971][ T3226] WARNING: possible circular locking dependency detected [ 1291.112066][ T3226] 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 Not tainted [ 1291.116614][ T3226] ------------------------------------------------------ [ 1291.119257][ T3226] kworker/0:2/3226 is trying to acquire lock: [ 1291.121531][ T3226] ffff888021a200e0 (&q->q_usage_counter(queue)#51){++++}-{0:0}, at: blk_mq_alloc_request+0x59b/0x950 [ 1291.125488][ T3226] [ 1291.125488][ T3226] but task is already holding lock: [ 1291.128190][ T3226] ffff888021a206f8 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 1291.131923][ T3226] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1291.131923][ T3226] which lock already depends on the new lock. [ 1291.131923][ T3226] [ 1291.135798][ T3226] [ 1291.135798][ T3226] the existing dependency chain (in reverse order) is: [ 1291.138368][ T3226] [ 1291.138368][ T3226] -> #5 (&q->limits_lock){+.+.}-{4:4}: [ 1291.141395][ T3226] __mutex_lock+0x19b/0xa60 [ 1291.143513][ T3226] __blk_mq_update_nr_hw_queues+0xba4/0x1460 [ 1291.145578][ T3226] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 1291.147289][ T3226] nbd_start_device+0x15b/0xd70 [ 1291.148817][ T3226] nbd_ioctl+0x21a/0xfd0 [ 1291.150191][ T3226] compat_blkdev_ioctl+0x2f7/0x750 [ 1291.151755][ T3226] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 1291.153350][ T3226] __do_fast_syscall_32+0x73/0x120 [ 1291.154946][ T3226] do_fast_syscall_32+0x32/0x80 [ 1291.156458][ T3226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1291.158380][ T3226] [ 1291.158380][ T3226] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1291.160680][ T3226] blk_mq_submit_bio+0x1fb6/0x24c0 [ 1291.162191][ T3226] __submit_bio+0x384/0x540 [ 1291.163589][ T3226] submit_bio_noacct_nocheck+0x698/0xd70 [ 1291.165329][ T3226] submit_bio_noacct+0x93a/0x1e20 [ 1291.166891][ T3226] block_read_full_folio+0x812/0xa50 [ 1291.168677][ T3226] filemap_read_folio+0xc6/0x2a0 [ 1291.170859][ T3226] filemap_get_pages+0x155f/0x1be0 [ 1291.173113][ T3226] filemap_read+0x3ca/0xd70 [ 1291.174786][ T3226] blkdev_read_iter+0x187/0x480 [ 1291.176313][ T3226] vfs_read+0x87f/0xbe0 [ 1291.177659][ T3226] ksys_read+0x12b/0x250 [ 1291.179161][ T3226] do_syscall_64+0xcd/0x250 [ 1291.180535][ T3226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.182292][ T3226] [ 1291.182292][ T3226] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 1291.184868][ T3226] down_read+0x9a/0x330 [ 1291.186347][ T3226] filemap_fault+0x2e0/0x2820 [ 1291.187791][ T3226] __do_fault+0x10a/0x490 [ 1291.189478][ T3226] do_pte_missing+0x99f/0x3e00 [ 1291.191184][ T3226] __handle_mm_fault+0x103c/0x2a40 [ 1291.192762][ T3226] handle_mm_fault+0x3fa/0xaa0 [ 1291.194205][ T3226] __get_user_pages+0x8d9/0x3b50 [ 1291.195765][ T3226] faultin_page_range+0x24a/0x980 [ 1291.197284][ T3226] do_madvise+0x504/0x770 [ 1291.198763][ T3226] __ia32_sys_madvise+0xa7/0x110 [ 1291.200530][ T3226] __do_fast_syscall_32+0x73/0x120 [ 1291.202588][ T3226] do_fast_syscall_32+0x32/0x80 [ 1291.204445][ T3226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1291.206784][ T3226] [ 1291.206784][ T3226] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 1291.209682][ T3226] __might_fault+0x11b/0x190 [ 1291.211691][ T3226] _copy_from_user+0x29/0xd0 [ 1291.213709][ T3226] __blk_trace_setup+0xa8/0x180 [ 1291.215673][ T3226] blk_trace_setup+0x47/0x70 [ 1291.217485][ T3226] sg_ioctl+0x7a3/0x26b0 [ 1291.219270][ T3226] compat_ptr_ioctl+0x6b/0xa0 [ 1291.220832][ T3226] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 1291.222412][ T3226] __do_fast_syscall_32+0x73/0x120 [ 1291.224001][ T3226] do_fast_syscall_32+0x32/0x80 [ 1291.225471][ T3226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1291.227415][ T3226] [ 1291.227415][ T3226] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1291.230108][ T3226] __mutex_lock+0x19b/0xa60 [ 1291.232117][ T3226] blk_mq_init_sched+0x42b/0x640 [ 1291.234239][ T3226] elevator_init_mq+0x2cd/0x420 [ 1291.235729][ T3226] add_disk_fwnode+0x113/0x1300 [ 1291.237224][ T3226] sd_probe+0xa66/0xfa0 [ 1291.238632][ T3226] really_probe+0x23e/0xa90 [ 1291.240574][ T3226] __driver_probe_device+0x1de/0x440 [ 1291.242838][ T3226] driver_probe_device+0x4c/0x1b0 [ 1291.244539][ T3226] __device_attach_driver+0x1df/0x310 [ 1291.246148][ T3226] bus_for_each_drv+0x157/0x1e0 [ 1291.247658][ T3226] __device_attach_async_helper+0x1d3/0x290 [ 1291.249951][ T3226] async_run_entry_fn+0x9c/0x530 [ 1291.252152][ T3226] process_one_work+0x958/0x1b30 [ 1291.254307][ T3226] worker_thread+0x6c8/0xf00 [ 1291.256198][ T3226] kthread+0x2c1/0x3a0 [ 1291.257972][ T3226] ret_from_fork+0x45/0x80 [ 1291.259846][ T3226] ret_from_fork_asm+0x1a/0x30 [ 1291.262009][ T3226] [ 1291.262009][ T3226] -> #0 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 1291.265644][ T3226] __lock_acquire+0x249e/0x3c40 [ 1291.267707][ T3226] lock_acquire.part.0+0x11b/0x380 [ 1291.269854][ T3226] blk_queue_enter+0x50f/0x640 [ 1291.271983][ T3226] blk_mq_alloc_request+0x59b/0x950 [ 1291.274161][ T3226] scsi_execute_cmd+0x20a/0xf30 [ 1291.276214][ T3226] read_capacity_16+0x21a/0xe20 [ 1291.278282][ T3226] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 1291.280728][ T3226] scsi_rescan_device+0x243/0x340 [ 1291.282856][ T3226] ata_scsi_dev_rescan+0x1cb/0x470 [ 1291.285005][ T3226] process_one_work+0x958/0x1b30 [ 1291.287104][ T3226] worker_thread+0x6c8/0xf00 [ 1291.289024][ T3226] kthread+0x2c1/0x3a0 [ 1291.290358][ T3226] ret_from_fork+0x45/0x80 [ 1291.291862][ T3226] ret_from_fork_asm+0x1a/0x30 [ 1291.293906][ T3226] [ 1291.293906][ T3226] other info that might help us debug this: [ 1291.293906][ T3226] [ 1291.297784][ T3226] Chain exists of: [ 1291.297784][ T3226] &q->q_usage_counter(queue)#51 --> &q->q_usage_counter(io)#51 --> &q->limits_lock [ 1291.297784][ T3226] [ 1291.303439][ T3226] Possible unsafe locking scenario: [ 1291.303439][ T3226] [ 1291.306175][ T3226] CPU0 CPU1 [ 1291.308187][ T3226] ---- ---- [ 1291.310196][ T3226] lock(&q->limits_lock); [ 1291.311906][ T3226] lock(&q->q_usage_counter(io)#51); [ 1291.314861][ T3226] lock(&q->limits_lock); [ 1291.317448][ T3226] rlock(&q->q_usage_counter(queue)#51); [ 1291.319662][ T3226] [ 1291.319662][ T3226] *** DEADLOCK *** [ 1291.319662][ T3226] [ 1291.322721][ T3226] 5 locks held by kworker/0:2/3226: [ 1291.324359][ T3226] #0: ffff88801ac88948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 1291.327328][ T3226] #1: ffffc90025ebfd80 ((work_completion)(&(&ap->scsi_rescan_task)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 1291.331643][ T3226] #2: ffff888024e84358 (&ap->scsi_scan_mutex){+.+.}-{4:4}, at: ata_scsi_dev_rescan+0x3e/0x470 [ 1291.334539][ T3226] #3: ffff888043fe8378 (&dev->mutex){....}-{4:4}, at: scsi_rescan_device+0x27/0x340 [ 1291.337142][ T3226] #4: ffff888021a206f8 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 1291.340191][ T3226] [ 1291.340191][ T3226] stack backtrace: [ 1291.341862][ T3226] CPU: 0 UID: 0 PID: 3226 Comm: kworker/0:2 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1291.344794][ T3226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1291.347665][ T3226] Workqueue: events ata_scsi_dev_rescan [ 1291.349201][ T3226] Call Trace: [ 1291.350121][ T3226] [ 1291.350958][ T3226] dump_stack_lvl+0x116/0x1f0 [ 1291.352315][ T3226] print_circular_bug+0x41c/0x610 [ 1291.353744][ T3226] check_noncircular+0x31a/0x400 [ 1291.355144][ T3226] ? __pfx_check_noncircular+0x10/0x10 [ 1291.356671][ T3226] ? __pfx_try_to_wake_up+0x10/0x10 [ 1291.358129][ T3226] ? lockdep_lock+0xc6/0x200 [ 1291.359468][ T3226] ? __pfx_lockdep_lock+0x10/0x10 [ 1291.360895][ T3226] __lock_acquire+0x249e/0x3c40 [ 1291.362377][ T3226] ? __pfx___lock_acquire+0x10/0x10 [ 1291.363997][ T3226] lock_acquire.part.0+0x11b/0x380 [ 1291.365409][ T3226] ? blk_mq_alloc_request+0x59b/0x950 [ 1291.367036][ T3226] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1291.368581][ T3226] ? rcu_is_watching+0x12/0xc0 [ 1291.369915][ T3226] ? trace_lock_acquire+0x14e/0x1f0 [ 1291.371385][ T3226] ? blk_mq_alloc_request+0x59b/0x950 [ 1291.372874][ T3226] ? lock_acquire+0x2f/0xb0 [ 1291.374166][ T3226] ? blk_mq_alloc_request+0x59b/0x950 [ 1291.375666][ T3226] blk_queue_enter+0x50f/0x640 [ 1291.377029][ T3226] ? blk_mq_alloc_request+0x59b/0x950 [ 1291.378524][ T3226] ? __pfx_blk_queue_enter+0x10/0x10 [ 1291.379994][ T3226] ? save_trace+0x42/0xa10 [ 1291.381281][ T3226] ? add_lock_to_list+0x17d/0x390 [ 1291.382781][ T3226] ? lockdep_unlock+0x11a/0x290 [ 1291.384280][ T3226] blk_mq_alloc_request+0x59b/0x950 [ 1291.385752][ T3226] ? __pfx_blk_mq_alloc_request+0x10/0x10 [ 1291.387334][ T3226] ? __pfx___lock_acquire+0x10/0x10 [ 1291.388784][ T3226] scsi_execute_cmd+0x20a/0xf30 [ 1291.390129][ T3226] ? lock_acquire.part.0+0x11b/0x380 [ 1291.391588][ T3226] ? __mutex_trylock_common+0xea/0x250 [ 1291.393142][ T3226] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 1291.394630][ T3226] ? sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 1291.396285][ T3226] ? rcu_is_watching+0x12/0xc0 [ 1291.397613][ T3226] read_capacity_16+0x21a/0xe20 [ 1291.398971][ T3226] ? __pfx_read_capacity_16+0x10/0x10 [ 1291.400468][ T3226] ? __pfx___mutex_lock+0x10/0x10 [ 1291.401901][ T3226] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 1291.403414][ T3226] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 1291.405061][ T3226] ? find_held_lock+0x2d/0x110 [ 1291.406738][ T3226] ? mark_held_locks+0x9f/0xe0 [ 1291.408547][ T3226] ? __pfx_sd_revalidate_disk.isra.0+0x10/0x10 [ 1291.410474][ T3226] ? kasan_save_stack+0x42/0x60 [ 1291.412081][ T3226] ? kasan_save_stack+0x33/0x60 [ 1291.413942][ T3226] ? kasan_save_track+0x14/0x30 [ 1291.415781][ T3226] ? kasan_save_free_info+0x3b/0x60 [ 1291.417528][ T3226] ? __kasan_slab_free+0x51/0x70 [ 1291.419402][ T3226] ? kfree+0x14f/0x4b0 [ 1291.420946][ T3226] ? scsi_attach_vpd+0x4dc/0x580 [ 1291.422632][ T3226] ? scsi_rescan_device+0xf5/0x340 [ 1291.424528][ T3226] ? ata_scsi_dev_rescan+0x1cb/0x470 [ 1291.426294][ T3226] ? process_one_work+0x958/0x1b30 [ 1291.427730][ T3226] ? worker_thread+0x6c8/0xf00 [ 1291.429050][ T3226] ? hlock_class+0x4e/0x130 [ 1291.430322][ T3226] ? mark_lock+0xb5/0xc60 [ 1291.431569][ T3226] ? mark_held_locks+0x9f/0xe0 [ 1291.432926][ T3226] ? kasan_quarantine_put+0x10a/0x240 [ 1291.434423][ T3226] ? lockdep_hardirqs_on+0x7c/0x110 [ 1291.435885][ T3226] ? kfree+0x14f/0x4b0 [ 1291.437019][ T3226] ? lockdep_hardirqs_on+0x7c/0x110 [ 1291.438448][ T3226] ? scsi_attach_vpd+0x4dc/0x580 [ 1291.439853][ T3226] ? scsi_attach_vpd+0x4dc/0x580 [ 1291.441220][ T3226] ? __pfx_sd_rescan+0x10/0x10 [ 1291.442530][ T3226] scsi_rescan_device+0x243/0x340 [ 1291.443978][ T3226] ata_scsi_dev_rescan+0x1cb/0x470 [ 1291.445426][ T3226] process_one_work+0x958/0x1b30 [ 1291.446782][ T3226] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1291.448333][ T3226] ? __pfx_process_one_work+0x10/0x10 [ 1291.449808][ T3226] ? rcu_is_watching+0x12/0xc0 [ 1291.451198][ T3226] ? assign_work+0x1a0/0x250 [ 1291.452507][ T3226] worker_thread+0x6c8/0xf00 [ 1291.453811][ T3226] ? __pfx_worker_thread+0x10/0x10 [ 1291.455258][ T3226] kthread+0x2c1/0x3a0 [ 1291.456398][ T3226] ? _raw_spin_unlock_irq+0x23/0x50 [ 1291.457835][ T3226] ? __pfx_kthread+0x10/0x10 [ 1291.459137][ T3226] ret_from_fork+0x45/0x80 [ 1291.460544][ T3226] ? __pfx_kthread+0x10/0x10 [ 1291.461874][ T3226] ret_from_fork_asm+0x1a/0x30 [ 1291.463250][ T3226] [ 1291.587667][T31093] bridge0: port 3(syz_tun) entered disabled state [ 1291.592934][T31093] syz_tun (unregistering): left allmulticast mode [ 1291.595256][T31093] syz_tun (unregistering): left promiscuous mode [ 1291.597777][T31093] bridge0: port 3(syz_tun) entered disabled state [ 1291.854462][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.922473][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.002754][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.055054][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.129195][ T68] bridge_slave_1: left allmulticast mode [ 1292.131210][ T68] bridge_slave_1: left promiscuous mode [ 1292.132801][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.136842][ T68] bridge_slave_0: left allmulticast mode [ 1292.138594][ T68] bridge_slave_0: left promiscuous mode [ 1292.140762][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.414742][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.418032][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.421460][ T68] bond0 (unregistering): Released all slaves [ 1292.653919][ T68] hsr_slave_0: left promiscuous mode [ 1292.655866][ T68] hsr_slave_1: left promiscuous mode [ 1292.658156][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.660190][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.663122][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.665145][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.668527][ T68] veth1_macvtap: left promiscuous mode [ 1292.670818][ T68] veth0_macvtap: left promiscuous mode [ 1292.672998][ T68] veth1_vlan: left promiscuous mode [ 1292.675067][ T68] veth0_vlan: left promiscuous mode [ 1292.919072][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1292.924388][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1293.536140][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.573382][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.633136][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.674940][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.755888][ T68] bridge_slave_1: left allmulticast mode [ 1293.757544][ T68] bridge_slave_1: left promiscuous mode [ 1293.759120][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.761865][ T68] bridge_slave_0: left allmulticast mode [ 1293.763429][ T68] bridge_slave_0: left promiscuous mode [ 1293.764979][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.864498][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1293.867751][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1293.870909][ T68] bond0 (unregistering): Released all slaves [ 1294.115952][ T68] hsr_slave_0: left promiscuous mode [ 1294.117855][ T68] hsr_slave_1: left promiscuous mode [ 1294.119781][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.122215][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.124518][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.126764][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.130257][ T68] veth1_macvtap: left promiscuous mode [ 1294.132449][ T68] veth0_macvtap: left promiscuous mode [ 1294.134047][ T68] veth1_vlan: left promiscuous mode [ 1294.135517][ T68] veth0_vlan: left promiscuous mode [ 1294.315245][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1294.320927][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1299.582433][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.584960][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 01:20:25 Registers: info registers vcpu 0 CPU#0 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145da5 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc90025ebea60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=000000000000007a R14=ffffffff85145d40 R15=0000000000000000 RIP=ffffffff85145dcf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71f0360 CR3=0000000061950000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f011b3936ee7561c 6af748bd55c157c1 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 46c03361a33e6561 97a3636bfd107733 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 17ee2ac104e6f2f1 c2cf44a1f2a19bc8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d71e307a436b1ee 91c5e1621e161125 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005840 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000030e0000030e 008001000000030e ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c0f565a2c158ba2a 00800100c178bcb0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00800100c0fdac80 0000030e00800100 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000030e 008255e2bb96c4f6 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 919c22b953157410 cf5f44fa6f2f90db ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 03fd1df359cc9c38 e16613e097bb3908 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81e1a839 RDX=ffff888022848000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffea0001df9e00 RSP=ffffc9000ca9f6e8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=00000000000a201e R12=ffffea0001df9e00 R13=0000000000077e78 R14=00000000000132fc R15=dffffc0000000000 RIP=ffffffff81994e40 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f855c0 CR3=000000004bcb4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff8b118dc6 RDX=ffff8880223d8000 RSI=0000000000000002 RDI=0000000000000005 RBP=ffffffff8cab5420 RSP=ffffc9000400fc50 R8 =0000000000000005 R9 =0000000000000002 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000005 R14=0000000000000004 R15=00007fb13c75efff RIP=ffffffff819947c2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb13ca94d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb13c4cd000 CR3=000000004f226000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=81d5495681d54956 81d5495681d54956 81d5495681d54956 81d5495681d54956 81d5495681d54956 81d5495681d54956 81d5495681d54956 81d5495681d54956 ZMM22=1c80fe761c80fe76 1c80fe761c80fe76 1c80fe761c80fe76 1c80fe761c80fe76 1c80fe761c80fe76 1c80fe761c80fe76 1c80fe761c80fe76 1c80fe761c80fe76 ZMM23=3fc7c3c43fc7c3c4 3fc7c3c43fc7c3c4 3fc7c3c43fc7c3c4 3fc7c3c43fc7c3c4 3fc7c3c43fc7c3c4 3fc7c3c43fc7c3c4 3fc7c3c43fc7c3c4 3fc7c3c43fc7c3c4 ZMM24=1954cdf41954cdf4 1954cdf41954cdf4 1954cdf41954cdf4 1954cdf41954cdf4 1954cdf41954cdf4 1954cdf41954cdf4 1954cdf41954cdf4 1954cdf41954cdf4 ZMM25=98a81c4f98a81c4f 98a81c4f98a81c4f 98a81c4f98a81c4f 98a81c4f98a81c4f 98a81c4f98a81c4f 98a81c4f98a81c4f 98a81c4f98a81c4f 98a81c4f98a81c4f ZMM26=c348a797c348a797 c348a797c348a797 c348a797c348a797 c348a797c348a797 c348a797c348a797 c348a797c348a797 c348a797c348a797 c348a797c348a797 ZMM27=182bae28182bae28 182bae28182bae28 182bae28182bae28 182bae28182bae28 182bae28182bae28 182bae28182bae28 182bae28182bae28 182bae28182bae28 ZMM28=000001800000017f 0000017e0000017d 0000017c0000017b 0000017a00000179 0000017800000177 0000017600000175 0000017400000173 0000017200000171 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=525a0000525a0000 525a0000525a0000 525a0000525a0000 525a0000525a0000 525a0000525a0000 525a0000525a0000 525a0000525a0000 525a0000525a0000 info registers vcpu 3 CPU#3 RAX=0000000000f4a2e4 RBX=0000000000000003 RCX=ffffffff8b1a8889 RDX=ffffed10056e6fee RSI=ffffffff8bb17240 RDI=ffffffff81703079 RBP=ffffed1003a58488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d2c2440 R14=ffffffff901cf6d0 R15=0000000000000000 RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f51d349c CR3=000000005a9b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000