last executing test programs: 24m4.813427743s ago: executing program 0 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigaction(0x6, &(0x7f0000000540)={&(0x7f0000000800)="8f49b893e8c4a2f99c9022000000c4a2f1002766430f78c63e7dbb4179700d322333333b38e7c44240f29a3b470000a5f6c4c4a14d590c9736fe0d094e486ff5bb559a00000f75bed5370b1c2665d2950e000000db342f", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xbc}, 0x1, 0x0, 0x0, 0x40804}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1}) syz_emit_ethernet(0x86, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r6 = open$dir(&(0x7f00000007c0)='./file0/file0\x00', 0x7e, 0x88) fcntl$setstatus(r6, 0x4, 0x42400) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) r7 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) fcntl$setstatus(r7, 0x4, 0x42400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x2, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00') fcntl$getownex(r8, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000140)={0x0, 0x8, {r9}, {}, 0x9, 0x100}) syz_emit_ethernet(0xf0, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @random="bf1df66f370a", @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x1, 0x1, 0x1}}, {@x25={0x805, {0x2, 0xfc, 0xe6, "0144b2008dc49ad6517bc661009769cde030382bca295a711acdce6ec8ad4e37dfa83e942d470e3232d9d9f4056dca0cb41aec9704922b9f96b114dd6fbfbf982ad775c4686a7b5cca0f1fd7b3e2b09016887bda399d2d3a7254b4bc290d79311cf68653832592fff0a5672bab216144635e507d41c6c0e6bf8ffe0a9a353d42a4bee4bf0807c4f4cc0524d276b77551d3d1a86e03a25fc891727335ebce061f637ca3fd7dd53c4cd0d50372f16526a001d0e6d6473e99bd154a5697431a2a3e61df9abe795c91bba16f6d14eaae4058291cd2d9c9465a"}}}}, &(0x7f0000000280)={0x0, 0x4, [0x2e, 0xe3d, 0x44, 0x4c2]}) ptrace$PTRACE_SETSIGMASK(0x420b, r10, 0x8, &(0x7f0000000100)={[0x5]}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 24m4.555750137s ago: executing program 0 (id=318): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0x1e0, 0x40, 0x4, 0x10000001, 0x40000000, 0x2, {}, {}, {0x0, 0x0, 0x3}, {0xfffffff8}, 0x2, 0x100, 0x5, 0x0, 0x0, 0xd, 0x2ab, 0x6, 0x0, 0x0, 0x0, 0x3, 0x26, 0x4}) 24m3.973060907s ago: executing program 0 (id=320): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0xb55cbc099b415d1, 0x34, &(0x7f00000003c0)=""/52}]}) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x48082, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000700)="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"}, {&(0x7f00000005c0)="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"}], 0x10000000000003e1, 0x400, 0x800, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1f7, 0xdd, 0x494, 0x139, 0x7, 0x8, 0x5, 0x7, 0x6, 0x9, 0x102, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x4, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x4, 0x5, 0x258d, 0xa, 0x9, 0x6, 0xf000, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0xbb], 0x80000000}}) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 24m3.821812746s ago: executing program 0 (id=322): r0 = syz_open_procfs(0x0, &(0x7f0000001840)='environ\x00') read$FUSE(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@bridge_newneigh={0x2c, 0x1c, 0x2, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x10, 0x91, 0x1}, [@NDA_MASTER={0x8, 0x9, 0xabdc}, @NDA_PROTOCOL={0x5, 0xc, 0x6}]}, 0x2c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000480)) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x24c3) recvmsg$qrtr(r0, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1, &(0x7f0000000240)=[{0x30, 0x0, 0x0, ""/26}, {0x80, 0x0, 0x0, ""/107}, {0xe0, 0x0, 0x0, ""/201}], 0x190, 0x2060}, 0x38, 0x140) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000100)) 24m3.520999855s ago: executing program 0 (id=323): syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) accept(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000002", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 24m0.333278789s ago: executing program 0 (id=332): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xe, 0x400005, 0x86}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23m45.14520832s ago: executing program 32 (id=332): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xe, 0x400005, 0x86}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m54.18793964s ago: executing program 2 (id=4211): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0xcd, &(0x7f0000000640)=""/205, 0x41100, 0x24, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000740)=@ethtool_perm_addr={0x24, 0x7d, "ecfa369133a22567c682f27110096442a81a839b7ebe840e8e17ac16a85f9e71b454b9e4ee9cb78c624d14ca537c4a8fa81897ca2de6856c3ca1160512686afb1bb528c74c3a395af1b471c12668f61d5a3afea32e6bd7a2e6ef28f1858c8ed8e1692e57a06f4fa2fbcea564e6ed24b887d9bc4e1f229b8ace05635ff6"}}) sendfile(r7, r6, &(0x7f00000000c0)=0x8b, 0x100000500) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000005000000", @ANYRES32=r6, @ANYBLOB="00000000001000000000000000f0ffff00000000", @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000001000080000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/18]) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100033060000000000000000ffffffff000000000000000000000000ac141400"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000032000000fe880000000000000000000000000001"], 0x138}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_io_uring_setup(0xd4, &(0x7f0000000480)={0x0, 0x0, 0x10000, 0x0, 0x3ce, 0x0, r6}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x4, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3m52.914821733s ago: executing program 2 (id=4214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000041c0)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000002c0)="ed0a8c3becce30b7523079f64d0ec073fcb04f0361d0d845c88a0701e0deefa8fb9917", 0x23}, {&(0x7f0000000300)}, {&(0x7f00000003c0)="dc37434a5a94b2d3ff2d9cf10dac5ffb8b025f3ab80340870bbf7a29338fe4f110bb77339275e707cdde6ed378b7e95b9abaefed", 0x34}, {&(0x7f0000000400)="181c189bb691601085a61a6b13356a76ce51e945e36eb4ad63b88b407ce6df7095402825a720a45aff007cac21af0323deeda1557b69a392df2acac8c0ec4dce804102c077788e46b7f6fef6ddd2c66440ae1d83b0fa570630a7dc6c3825b18587a3dc8725e192eb4b90e0896a7c83d142b5e600dce9a865617b789270478e20c0d439f91267a86944bcb3abdcf7e8609c7b0c1bbb6b96bba46eb908843a30784ef26ff656fdd7707a11c869521a8993ef1f05379c6bf38f0bcf96f366372cc90535673d2299f7b09d94f14193174563b98620c64a9e4b92c4a7e8ba6c1ebf2728bcbfc4", 0xe4}, {&(0x7f0000000500)="cfc5932cfd3c500e2b24ca5d9e8d1761dac296410ae31beadc61e9e492a87d19fc1a39169f7f3704010b0720b0bc3b7b2145b4f62c450d079bd8adc79db716619001f2dd79af0c507cbb51c57e7bbc390b6eef5928dc8a6d30b7e46bcd2a591bf3d16e3a8bb4d8104b137aa7601bae28f2543d", 0x73}, {&(0x7f0000000580)="50b74afd24194141a3468979b840a30fd4c48b8bf50dc842c5055ecd26458f984c2d5a2bbc41f4c9fb300459d8f161e94a62995e1e457e34", 0x38}, {&(0x7f00000005c0)="7318fb292cdb532482c26b7ce276bf82115ecca0b389e117eda558335872053842273eacc19ec3b240013bb07448f558e037cc06dbbe62", 0x37}, {&(0x7f0000000600)="131a77bb9354af1b851b00d88aa4e4e495938b34452f934d5dbb", 0x1a}], 0x8, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r4, r1, 0xffffffffffffffff, r1, r2, r1]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xe0, 0x2004004}}], 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000000000001701000002000000b8000000c0b7172ff043014be3af6b579b2f262272d16972ebc253364afb7bf72c817068feb2178acd4f656bb17c5875b64aa82540c38d1a63029bfac78547780f65192fbf2922f0bcd36e7d33b1cb7d4c75c96b4809f4b4fbf3b7bd16ab6f851446deedac72a509330d89e33be6d7374b2f3bb38e34848042e890cc04ff80c536db843ffbbea455489adab98aa079447405faed1ba0d1437622d9afca929fda5b2c94bc5decacf5082a02afcbe425a7fb20a0d7fc439507aac04a64000000001800000000000000170100000200"/232], 0xe8}, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 3m49.751752565s ago: executing program 2 (id=4222): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="78010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14140000000000000000000080000000000000000000000000000b23030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2200000000ac1414bb0000000000000000000000001c00040002004e21000000000000000000000000000000000000000008000b000700000001000000000000"], 0x178}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x1, @loopback, 0x55}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x8}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@v2={0x2000000, [{0x6, 0x3}, {0xffff, 0x7}]}, 0x14, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x309143, 0x0) userfaultfd(0x80001) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00220b0024e6580965039ef12d1992f7d2"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f00000000c0)={0x3, 0x200, 0x6, 0xd, 0x60000000, 0x80000000}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000100)="8448f0d7193f9abc9d630e3421fbcb5c321adf5162075849", 0x0, 0x18) r6 = socket$inet(0x2b, 0x801, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf5}, 0x1c) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0x8) close(r3) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000090) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004402400000f0800014000000000340005800c0001007061796c6f6164000e000280080004400000005608000340000000b9080001400000000a08000240000000040900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m49.566113007s ago: executing program 5 (id=4223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c000a0001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6], 0xb4}}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x10, 0xc, 0x8, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r9 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0xfffffffe, 0xb5}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000440)=r11, 0x4) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100009060300"/20, @ANYRES32=0x0, @ANYBLOB="adffa888f00306001c0012800e00010069703667726574617000000008000280040012"], 0x3c}, 0x1, 0x0, 0x10000000000}, 0x40050) syz_io_uring_submit(r10, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47fa, 0xfffffffe, 0x2, 0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000000640)=@IORING_OP_ASYNC_CANCEL) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f014, 0x2}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000000000000000000000000000001000004d3000032000c0015005a0735000080f3b698b59fe5d532481c49fcd46df31a4f04d67a6a6a60ba0d9caa9e8e89bc193a180cb9ddec505818cca516bed893be783c01404e96449bc61cc8f3edb054357b73fce45a06301e093db46f77316dc9ea80f8e65fb07c6f7efa63a44248393564b1b818bf005ce4b937fd6e83a1da4c64d27f583374c3ed7281c5391129c2cbd3c0960ba235e2091440e19d52096cddbd093fb4338b01814c8f73ef118f3aa5c020fba3ef019421e720d20d17549cab5a9bf7243f46505dde799da1091c35fcc0a19b22a27867"], 0x34}, 0x1, 0x0, 0x0, 0x4885c}, 0x24000800) 3m47.451003633s ago: executing program 2 (id=4225): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x107) 3m46.696821029s ago: executing program 2 (id=4227): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400ed001000010000000000000000000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074050111e00140000001100010000000000000000000000000a4e93c8df3cdbd5d1aa58e3f70de864ecb021ba1b13c72bbd5b56dd6c12c8306b27fe7b7677c7fdb2ec0e1d83bddaaf5186dabf71de5f130d914cdf6b73fbc137f15f6c08a6a4edca89a3af9f26a1d7e1d01a8b7d421a8eb53485773cdaae44e265e2663e4bcc1454e521"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x5}, {0x0, 0x2}, {0xe, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x16}, @TCA_U32_DIVISOR={0x8, 0x4, 0x63}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0x10003}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x16}, @TCA_U32_CLASSID={0x8, 0x1, {0x4, 0xa}}, @TCA_U32_LINK={0x8, 0x3, 0x8000}, @TCA_U32_DIVISOR={0x8, 0x4, 0x35}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x893}, 0x24040085) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_emit_ethernet(0x2b, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaa12f71ab7ec2344daf3b1c3e486bf3ceb682588a82ef91d3aeb60c99c9f28e5e727c358eac167"], &(0x7f00000003c0)={0x0, 0x3, [0xaf3, 0x6e, 0x3d0, 0x829]}) 3m45.233132465s ago: executing program 2 (id=4229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x2, 0x1000, 0x8000000000000001, 0x80, 0x3}}]}) 3m45.197004869s ago: executing program 5 (id=4230): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x64c842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x1, 0xb}, 0x0) epoll_create(0x101) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x8940, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000) ioctl$FIONCLEX(r0, 0x5450) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4400000002060500000000000090c200000000000c000300686173683a69700005000400000000000900020073797a3100e1860000000500050002000000150001000600"], 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000003060500000000000000000005000004050001000700000009ac750073797a31055f13711c6849d800000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) inotify_init1(0x0) unshare(0x2c040600) 3m44.1176881s ago: executing program 33 (id=4229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x2, 0x1000, 0x8000000000000001, 0x80, 0x3}}]}) 3m42.100292351s ago: executing program 5 (id=4236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0xa000000, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 3m41.817002769s ago: executing program 5 (id=4237): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x107) 3m40.791483678s ago: executing program 5 (id=4238): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x28, 0x2, 0x5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) syz_emit_ethernet(0xa5, &(0x7f0000000200)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@x25={0x805, {0x3, 0x7, 0x23, "371ba73a0ae3793bd22083a504ac871eb3f77a565255ef1fa17212c9c3dfe1e44760fabf219ce3ab380def72f1af8a31b401568e58f62f2e91e2d9c8b76b391da3a1024e7b32d30d6eab32959d76000c9c7e484986182f7cf661129cfe75100bcb08a7e37839d452c23063f03bc2e9fd9895a05268a6b06815ce487eb390daa27d6343ba1ffecf20709a4b81911561bc"}}}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) 3m40.307537798s ago: executing program 5 (id=4239): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xbb15}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010000000001010000000a800020000000000000000006001c004e24000097a6fe86cf856b3648a9b8301881f2992beff9769157e6c868860aad0345370033556efe0a8810f2e55a525eeb673ab77d43b4b73b4fb7809f99e0fd4c436f06b76d56537887fed94b2789063f0b7e4e630af5c993a1348b01020204366f360c9e550f60592a28d11833681fa93f521c55276c5116acf0"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r4 = socket$inet(0x2, 0x3, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, 0x0, 0x0) close(r5) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) socket$inet(0x2, 0x3, 0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r1}) 3m39.586265521s ago: executing program 34 (id=4239): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xbb15}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010000000001010000000a800020000000000000000006001c004e24000097a6fe86cf856b3648a9b8301881f2992beff9769157e6c868860aad0345370033556efe0a8810f2e55a525eeb673ab77d43b4b73b4fb7809f99e0fd4c436f06b76d56537887fed94b2789063f0b7e4e630af5c993a1348b01020204366f360c9e550f60592a28d11833681fa93f521c55276c5116acf0"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r4 = socket$inet(0x2, 0x3, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, 0x0, 0x0) close(r5) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) socket$inet(0x2, 0x3, 0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r1}) 3m38.420807961s ago: executing program 3 (id=4243): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x20000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e1100d6704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6ccb0e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f41c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111ff6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab43fa6104d5a99aa36b73ac3622ccae12252457cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd4132290b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc408a1258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a16d470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0300000007000000000000000400000000000000000003000000000008"], 0x0, 0x0, 0x0}) 3m38.184461205s ago: executing program 3 (id=4244): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x36) fcntl$notify(r1, 0x402, 0x2) close_range(r0, 0xffffffffffffffff, 0x18000186) 3m37.898028787s ago: executing program 3 (id=4245): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x64c842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x1, 0xb}, 0x0) epoll_create(0x101) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x8940, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000) ioctl$FIONCLEX(r0, 0x5450) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4400000002060500000000000090c200000000000c000300686173683a69700005000400000000000900020073797a3100e1860000000500050002000000150001000600"], 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000003060500000000000000000005000004050001000700000009ac750073797a31055f13711c6849d800000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) inotify_init1(0x0) unshare(0x2c040600) 3m36.227060711s ago: executing program 3 (id=4247): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x107) 3m35.190122042s ago: executing program 3 (id=4248): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000, @value}, 0x28) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async) close(0x4) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000003240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003200)={&(0x7f00000010c0)={0x2140, r3, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xef}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xdb47}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x80}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5c}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c4, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x72}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x11}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa2, 0x5, 0x6, 0x101, 0x1, 0xa70a, 0x91, 0x6e]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x30, 0x1b, 0x48, 0x1, 0xc, 0x4, 0x9, 0x6c, 0x16, 0x6c, 0xb, 0x16, 0x4, 0x30, 0x48, 0x4, 0x18, 0x1b, 0x18, 0x36]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x5}, {0x1, 0x1}, {0x6, 0x8}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x2, 0x7}, {0x5, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {0x3, 0x2}, {0x1, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x2}, {0x3, 0x6}, {0x7, 0xa}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0xb, 0x1b, 0x24, 0x0, 0x79, 0x30, 0x1, 0x1b, 0x2, 0x36, 0x6, 0x30, 0x9, 0x4, 0x5]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x6, 0xe, 0x40, 0xffff, 0x8000, 0x4, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2712, 0x6, 0x3e, 0x3, 0x3, 0x8, 0x4, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x9, 0x2, 0x4, 0xfff9, 0xf, 0x2]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x9, 0xc, 0x60, 0x0, 0x6c, 0xc, 0x6c, 0x6c, 0x4, 0xc, 0x9, 0x48, 0x5, 0x30, 0x37, 0x6f, 0xffbe50ed705dcd3f, 0x2ae5f3fb3afde9a3, 0x16, 0x625f981fda81de02, 0x6, 0x51, 0x48, 0x9, 0x9, 0x1b, 0x1c, 0x48, 0x5, 0x18]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3b, 0x60, 0xc, 0x36, 0x6c, 0x4, 0x60, 0x12, 0x4, 0x48, 0x5, 0x36, 0x12, 0x6c, 0x2, 0x6, 0x16, 0xc, 0x46, 0x36, 0x6c, 0x6c, 0x6c, 0xc, 0x2, 0x5, 0x4, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x5, 0x0, 0x0, 0xff80, 0xf9f, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x40, 0x7, 0x8, 0x3ff, 0xfc01, 0x5, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x9, 0x8, 0x2c2a, 0x2, 0x4, 0xf, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x6}, {0x0, 0x3}, {0x1, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x4, 0xa}, {0x2, 0x1}, {0x7, 0x7}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x2, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x4, 0x9}, {0x5, 0x3}, {0x6, 0x4}, {0x6, 0x8}, {0x1, 0x8}, {0x2, 0x3}, {0x6, 0x4}, {0x1, 0x3}, {0x3, 0x3}, {0x1}, {0x0, 0x5}, {0x3}, {0x2, 0x3}, {0x1}, {0x6, 0x2}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0x4}, {0x7}, {0x6, 0x1}, {0x7, 0x4}, {0x5, 0x1}, {0x0, 0x9}, {0x5, 0x3}, {0x3, 0x1}, {0x3, 0x6}, {0x6, 0x3}, {0x1}, {0x7, 0x3}, {0x3, 0x1}, {0x5, 0x9}, {0x5}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x1}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x1}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x1}, {0x6}, {0x1, 0x3}, {0x3, 0x6}, {0x1, 0x8}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x7, 0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0xa}, {0x5, 0x9}, {0x6, 0x8}, {0x1}, {0x5, 0x4}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x4, 0x7}, {0x7, 0x5}, {0x7, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x3}, {0x3}, {0x0, 0x8}, {0x2, 0xa}, {0x7, 0x5}, {0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x2}, {0x3, 0x7}, {0x2}, {0x5, 0xa}, {0x7, 0x6}, {0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x4, 0x3}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4e0, 0x11d, 0x0, 0x1, [{0x274, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x2, 0xe8eb, 0x10, 0x2, 0x6, 0x200, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x24, 0x2, 0x5, 0x4, 0xc, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x10, 0x7, 0x65cc, 0x3, 0xf858, 0x100, 0xfffe]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x80, 0x7, 0x2, 0x1, 0x40, 0xc, 0x1]}}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x12, 0x36, 0x48, 0x24, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x10, 0xfff9, 0x4, 0x4d70, 0x3, 0x9, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x5c4, 0x9, 0x81, 0x0, 0x5, 0x9870]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7e, 0x27, 0x0, 0x6, 0x4, 0x1, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x3}, {0x7, 0x4}, {0x0, 0x3}, {0x6}, {0x6, 0xa}, {0x1, 0xa}, {0x5, 0x1}, {0x4, 0x8}, {0x5, 0xa}, {0x7}, {0x7, 0x2}, {0x6, 0xa}, {0x5, 0x8}, {0x7, 0x9}, {0x2, 0x2}, {0x6, 0x9}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x4}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x4}, {0x0, 0x9}, {0x2, 0x5}, {0x4, 0x2}, {0x7}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x4}, {0x2, 0x9}, {0x0, 0xa}, {0x7, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x7, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x7, 0x8}, {0x5, 0x5}, {0x0, 0x4}, {}, {0x1, 0x7}, {0x5, 0xa}, {0x1, 0x1}, {0x5, 0x8}, {0x0, 0x6}, {0x3, 0x3}, {0x1, 0x4}, {0x5, 0xa}, {0x4, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {0x5}]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x2, 0x0, 0x3, 0x0, 0x1, 0x3, 0x8]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0xa}, {0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x1, 0x9}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x9}, {0x5, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x6}, {0x3, 0x4}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0xa}, {0x6, 0x3}, {0x7, 0x1}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x4}, {0x6, 0x4}, {0x5}, {0x5, 0xa}, {0x7}, {0x4, 0x8}, {0x1, 0x6}, {0x6, 0x9}, {0x7, 0x6}, {0x6, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x7, 0x4}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x7, 0x6}, {0x7, 0x8}, {0x3, 0x5}, {0x5, 0x6}, {0x6, 0x7}, {0x3, 0xa}, {0x0, 0x6}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x4, 0xa}, {0x1, 0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x2}, {0x5, 0xa}, {0x2, 0x3}, {0x1, 0x7}, {0x3, 0x1}, {0x1, 0xa}, {0x4, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x79, 0x3, 0x3, 0xb132, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x6c, 0x5, 0x36, 0x24, 0x1, 0x30, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x3c, 0x5, 0x1, 0x36]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x60, 0x16, 0x1, 0xc, 0x18, 0xc, 0x2, 0x3, 0x0, 0x18, 0x3, 0x6, 0x1, 0x7c94c6ad6aa5e5f9, 0xc, 0x16, 0x1b, 0xb, 0x1b, 0xb, 0x0, 0x6c]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x4, 0x9, 0x1, 0x0, 0x100, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x0, 0x8, 0x40, 0x100, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x65, 0x24, 0x24, 0x12, 0x30, 0x24, 0xb, 0x18, 0x18, 0x18, 0x1, 0x48, 0x36, 0x9, 0x5, 0xa]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x9, 0xfff8, 0x4, 0x2, 0x6, 0x3]}}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}]}, {0x238, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x210, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x6, 0x4, 0x0, 0xdd, 0xe, 0xa08]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x10, 0x6, 0x9, 0x4, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0xe66, 0x9, 0x0, 0x9, 0x59, 0x400]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xffbe, 0x6, 0x4, 0x100, 0x6, 0x4, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7f, 0xf, 0x5, 0xf, 0x0, 0x800, 0x100]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x8}, {0x4, 0x9}, {0x2, 0x4}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x5}, {0x3, 0x7}, {0x1}, {}, {0x7, 0x9}, {0x5, 0x2}, {0x5}, {0x6, 0x6}, {0x7, 0x7}, {0x5}, {0x2, 0x7}, {0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x2}, {0x5, 0x6}]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xa, 0x1, 0x5, 0x2, 0xb, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0x16, 0x30, 0x3, 0x60, 0xc, 0x1a, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0x48, 0x12, 0x2, 0x2, 0x1b, 0x48, 0x7f, 0x48, 0x1, 0x18, 0x16, 0x19]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8f6e, 0x9, 0x5, 0x7fff, 0x4, 0x8, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x16, 0x9, 0x1, 0x24, 0x30, 0x24, 0x1, 0x36, 0x9, 0x12, 0xb, 0x9, 0x36, 0x30, 0x3, 0x6]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0xff, 0x4, 0x8001, 0x6, 0x0, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x61, 0x30, 0x2, 0x6c, 0x60, 0x1b, 0x30, 0x0, 0x6c, 0x24, 0x48, 0x1b, 0x6, 0x24, 0x18, 0x5, 0x6c, 0x0, 0x36, 0x60, 0x783d764e77923a20, 0x6c, 0x1b, 0x12, 0x3, 0x1b, 0x30, 0x6, 0x5, 0x1, 0x5]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x6, 0x10, 0x6, 0x9, 0x4, 0x2, 0x200]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x7}, {0x5, 0x2}, {0x0, 0x9}, {0x6}, {0x2, 0xa}, {}, {0x5, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x6, 0x9}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x3}, {0x1, 0x2}, {0x2, 0x5}, {0x7}, {0x6, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x2}, {0x5, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x9}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x8}, {0x2, 0x1}, {0x4, 0x6}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x6, 0xa}, {0x5}, {0x1, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0x3}, {0x3, 0x4}, {0x3}, {0x7, 0x1}, {0x4, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0x7}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0x6}, {0x3}, {0x2, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x2}, {0x4, 0x6}, {0x6, 0x3}, {0x4, 0x9}, {0x4, 0x9}, {0x0, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0xc, 0x30, 0x2]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}]}]}, @NL80211_ATTR_TID_CONFIG={0x704, 0x11d, 0x0, 0x1, [{0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x37}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x110, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x8}, {0x7, 0x4}, {0x2, 0x6}, {0x7, 0xa}, {0x6, 0x4}, {0x4, 0x9}, {0x4}, {0x3, 0x2}, {0x1, 0xa}, {0x7, 0x9}, {0x6, 0xa}, {0x6, 0xa}, {0x1}, {0x1, 0x7}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0xa}, {0x7, 0x5}, {0x7, 0x9}, {0x5, 0x2}, {0x1, 0x9}, {0x1}, {0x6, 0x5}, {0x3, 0x2}, {0x3, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x4}, {0x5, 0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0x8}, {0x3, 0x6}, {0x1, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x5, 0x7}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x6}, {0x5, 0x9}, {0x3, 0x6}, {}, {0x3, 0x6}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x3, 0x9}, {0x7}, {0x6, 0x6}, {0x5, 0x6}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0xa}, {0x6, 0x9}, {0x5, 0x9}, {0x3}, {0x5, 0x1}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x8}, {0x4, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x5, 0x9}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x6}, {0x2, 0xa}, {0x4, 0x9}, {0x1}, {0x4, 0x5}, {0x4, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x6}, {0x0, 0x5}, {}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x9}, {0x7, 0x3}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x5, 0x5}, {}, {0x1, 0x4}, {0x0, 0x5}, {0x4, 0x5}, {0x3, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x2, 0x24, 0x24, 0x5, 0x16, 0x3, 0x12, 0x48, 0x2, 0x48, 0x60, 0xd, 0x5, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x5}, {0x0, 0x9}, {0x6}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x6, 0x9}, {0x6, 0x4}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x3, 0x4}, {0x1, 0x7}, {0x5, 0x9}, {0x3, 0x8}, {0x7, 0x1}, {0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x6}, {0x2, 0x1}, {0x2}, {0x4, 0x3}, {0x3, 0x9}, {0x6, 0x5}, {0x3, 0x7}, {0x3, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x1, 0x7}, {0x3}, {0x6, 0x3}, {0x3, 0x7}, {0x6, 0x6}, {0x2, 0x5}, {0x6, 0x4}, {0x0, 0x4}, {0x6}, {0x0, 0x2}, {0x6, 0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x6}, {0x2, 0x5}, {0x6, 0x7}, {0x5, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x5}, {0x7, 0x7}, {0x6, 0x7}, {0x0, 0x8}, {0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x1, 0x6}, {0x4, 0xa}, {0x5}, {0x0, 0x2}, {}, {0x4}, {0x5, 0x6}, {0x5, 0x6}, {0x4, 0x4}, {0x4, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x9, 0x0, 0xb, 0x1, 0x0, 0x1, 0x1, 0x24, 0x5, 0x4c]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9b}]}, {0x210, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x6, 0xfff1, 0x7, 0x2, 0x8, 0x0, 0x7fff]}}]}, @NL80211_BAND_6GHZ={0x104, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x0, 0x60, 0x1, 0x2, 0x1b, 0x5c, 0xb, 0xc, 0x48, 0x12, 0x24, 0x5, 0xb, 0x60, 0x1b, 0xa, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x0, 0x6, 0x81, 0x7fff, 0x0, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0xa}, {0x6}, {0x5, 0xa}, {0x1, 0x2}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x1}, {0x6, 0xa}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x3, 0x7}, {0x5, 0x1}, {0x5, 0x5}, {0x7, 0x6}, {0x0, 0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0xa}, {0x7, 0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0xa}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x2}, {0x3, 0x9}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x7, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x3, 0x5}, {0x5, 0x5}, {0x6, 0x2}, {0x3, 0x4}, {0x5, 0x1}, {0x2, 0x7}, {0x4, 0xa}, {0x6, 0x2}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xa}, {0x7}, {0x6, 0xa}, {0x6, 0x9}, {0x4, 0x2}, {0x5, 0x5}, {0x7}, {0x2, 0x6}, {0x3, 0x7}, {0x7, 0xa}, {0x7, 0x1}, {0x7, 0x2}, {0x7, 0x2}, {0x3, 0x1}, {0x0, 0x8}, {0x6}, {0x4, 0x5}, {0x5}, {0x2, 0x2}, {0x4, 0x3}, {0x1, 0x5}, {0x3}, {}, {0x5, 0x4}, {0x2}, {0x0, 0x4}, {0x5, 0x8}, {}, {0x0, 0x9}, {0x1, 0x6}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x4, 0x8}, {0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x3}, {0x3}, {0x7, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {0x7, 0x8}, {0x7, 0x1}, {0x5}, {0x0, 0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3d7e0317c9c32d21}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x9, 0x24, 0x36, 0x30, 0x24, 0x18, 0x60, 0xc, 0x1b, 0x54, 0x7c, 0x9, 0x1b, 0x18, 0x24, 0x30, 0x60, 0x5, 0xc, 0x5]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x60, 0x36, 0x0, 0x65, 0x12, 0x1b, 0x0, 0x5, 0xf, 0x4, 0x6c, 0x30, 0x2, 0x48, 0x1, 0x1b, 0x1, 0x18, 0xc, 0x6c, 0x30, 0x4, 0x18, 0x3, 0x12, 0x9, 0x94d06db59ae41cac, 0x1b, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x6, 0x5, 0x4, 0x2ac, 0x3, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x4, 0x9, 0x101, 0x5, 0x462, 0x5, 0x72ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x62b, 0x1, 0x3, 0x52, 0x40, 0xdceb, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x4, 0x9, 0x5, 0x1, 0x7, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7f, 0x2, 0x1, 0x9857, 0x8001, 0x101, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x1ff, 0x5, 0x8, 0x5, 0x2367, 0x1, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf168, 0x16ee, 0x5, 0x3, 0x10, 0x0, 0x9, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x16}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x112}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5bcf}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x31c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x450}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x400, 0x7, 0x8000, 0x1ff, 0xdb, 0x4, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x2cfa, 0x18, 0x3, 0x6, 0x5, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xb0f3, 0xfffb, 0xff, 0x9, 0xc, 0x5d8]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x4, 0x3}, {0x2, 0x3}, {0x3, 0x8}, {0x4, 0x7}, {0x2}, {0x2, 0x2}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{}, {0x6, 0x2}, {0x2, 0x1}, {0x4, 0x5}, {0x1}, {0x6, 0x3}, {0x2, 0x5}, {0x5, 0x8}, {0x5, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x4}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x4}, {0x6, 0x9}, {0x3, 0xa}, {0x5, 0xa}, {0x6, 0x6}, {0x2, 0x5}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0xa}, {0x4, 0x4}, {0x3, 0x8}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x2}, {0x5, 0x4}, {0x3, 0x8}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x1c00, 0x3, 0x6f7c, 0x1, 0x3, 0xfff8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0x8, 0x1, 0xb, 0x1ff, 0x1ff]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x4, 0x2}, {0x3}, {0x1, 0x2}, {0x7, 0x7}, {0x1, 0x2}, {0x3}, {0x6, 0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x4}, {0x1, 0x5}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0x1}, {0x2}, {0x6, 0x4}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x2, 0x2}, {0x2, 0x7}, {0x4, 0x5}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0xa}, {0x1, 0x9}, {0x4, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x3}, {0x6, 0x8}, {0x5, 0x2}, {0x2, 0x6}, {0x4, 0x3}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x7, 0x2}, {}, {0x1, 0x7}, {0x2, 0x4}, {0x6, 0x2}, {0x5, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x6}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x5}, {0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x6}, {0x2, 0x2}, {0x1}, {0x6, 0x7}, {0x3, 0x5}, {0x5, 0x4}, {0x2, 0x4}, {0x3, 0x2}, {0x7, 0x9}, {0x6, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x2}, {0x7, 0x4}, {0x7, 0x3}, {0x4, 0x9}, {0x4, 0x8}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0xa}, {0x4, 0x1}, {0x7, 0x5}, {0x0, 0x1}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x10}, {0x2, 0x2}, {0x5}, {0x6, 0x2}, {}, {0x6, 0x7}, {0x4, 0x7}, {0x6, 0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x30, 0x18, 0x12, 0x60, 0x6c, 0x4, 0x12, 0xb, 0x6c, 0x6c, 0x1, 0x2, 0x2, 0x36, 0x4, 0x36, 0x6, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0xf6da, 0xc21, 0x2, 0x1, 0x44, 0x824]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x400, 0xe37b, 0x8, 0xfff9, 0x80, 0x7f, 0x9487]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x9, 0x48, 0x0, 0x1, 0x3, 0x6c, 0x48, 0x24, 0x9, 0x30, 0x9, 0x18, 0x2, 0xb, 0x18, 0xb, 0xb, 0x6, 0x36, 0x3, 0x30, 0xb, 0xb, 0x12, 0x6, 0x5, 0x9, 0x9, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x7e, 0x2, 0x8, 0x6, 0xd, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x8, 0x4, 0x4, 0x5, 0x9, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x7fff, 0x2, 0x2, 0xae, 0xfff8, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x6}, {0x2, 0x7}, {0x1, 0xa}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x7}, {0x4, 0x5}, {0x1}, {0x2, 0x2}, {0x0, 0x9}, {0x2, 0x2}, {0x6, 0x1}, {0x3, 0x2}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x9}, {0x6, 0x8}, {0x2, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x7, 0x8}, {0x6}, {0x4, 0x8}, {0x6, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x1}, {0x0, 0x2}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x2, 0x6}, {0x7}, {0x5, 0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0xa}, {0x1, 0xa}, {0x7, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x4, 0x8}, {0x3, 0xa}, {0x5, 0x6}, {0x4, 0x9}, {0x2, 0x1}, {0x0, 0x6}, {}, {0x5}, {0x7}, {0x0, 0x2}, {0x4, 0x7}, {0x3, 0x1c}, {0x1, 0x3}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x3, 0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x72d, 0x4, 0x9f, 0x66, 0x3, 0x6, 0x401, 0x101]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x12, 0x16, 0x0, 0x3, 0x36, 0x6, 0x24, 0x36, 0x9, 0x12, 0x2, 0x3, 0x9, 0x48, 0xb, 0x48, 0x1, 0x48, 0x1, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x9, 0x1, 0x3, 0x1, 0xf800, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x456, 0xba2, 0x7, 0x7, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x108, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6419}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x46}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x62}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xaf5}]}]}, @NL80211_ATTR_TID_CONFIG={0xbc8, 0x11d, 0x0, 0x1, [{0x7d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x450, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x5, 0x2, 0xa, 0x81, 0x1d, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x99, 0xadf4, 0x6, 0x8, 0xfff, 0x6, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x7}, {0x7, 0x6}, {0x4, 0xa}, {0x7, 0x5}, {0x1, 0x18}, {0x0, 0x3}, {0x3}, {0x3, 0x1}, {0x4, 0x6}, {0x6}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x2}, {0x5, 0x7}, {0x0, 0x5}, {0x5, 0x5}, {0x4, 0x2}, {0x6, 0x7}, {0x4, 0x1}, {0x4, 0x7}, {0x5, 0x1}, {0x5, 0x5}, {0x6, 0x3}, {0x6, 0x7}, {0x0, 0x1}, {0x1}, {0x5}, {0x1, 0x7}, {0x3, 0x9}, {0x1, 0x4}, {0x1, 0x5}, {0x6, 0x1}, {0x5, 0x7}, {0x3, 0x8}, {0x5, 0x2}, {0x5, 0x9}, {0x5, 0x9}, {0x4, 0xa}, {0x5, 0x3}, {0x7, 0x4}, {0x3, 0x3}, {0x5, 0x9}, {0x6, 0x9}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x7, 0x2}, {}, {0x6, 0x4}, {0x3, 0xa}, {0x7, 0x3}, {0x5, 0x9}, {0x1, 0x5}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x2}, {0x5}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x1}, {0x6, 0x2}, {0x0, 0x2}, {0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x5, 0x7}, {0x7, 0x6}, {0x1, 0xa}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xfffc, 0x9, 0x4, 0x0, 0x8c, 0x8, 0x9]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x60, 0x60, 0x9, 0xc, 0x5, 0x9, 0x12, 0xb, 0x9, 0x4, 0x4, 0x18, 0x36, 0x6, 0x4, 0x9, 0x3, 0x30, 0x18, 0x3, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x72, 0x361, 0x7, 0x7, 0x8, 0xb4, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xcaa8, 0x0, 0x1, 0x3, 0x101, 0x6a6, 0x8]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x7, 0x7}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x2, 0x3070, 0x0, 0x8000, 0xa, 0x53c9]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x28, 0x4, 0x675d, 0x2, 0xc, 0x1, 0x1200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x6, 0x2}, {0x5}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x1}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x8}, {0x3, 0x5}, {0x5, 0x4}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {}, {0x2, 0x5}, {0x5, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x7, 0x5}, {0x5, 0x2}, {0x7, 0x2}, {0x1, 0x7}, {0x5, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x1, 0x4}, {0x4, 0x5}, {0x1, 0x5}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x12, 0x30, 0x3, 0xb, 0x2, 0x2, 0x16, 0x0, 0x4, 0x30, 0xc, 0x30, 0x1b, 0x3, 0x1, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0x6, 0x16, 0x60, 0xb, 0x6, 0xc, 0xc, 0x60, 0x1b, 0x35, 0x6c, 0x79, 0x1, 0x24, 0x4]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x5}, {0x4, 0x7}, {0x5, 0x6}, {0x4, 0x3}, {0x6}, {0x5, 0x3}, {0x6, 0x5}, {0x0, 0x7}, {0x3, 0x9}, {0x3, 0x4}, {0x4, 0x8}, {0x2, 0x6}, {0x6, 0x7}, {0x0, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x3, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x2, 0x6}, {0x5, 0x8}, {0x7}, {0x7, 0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x5}, {}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x9}, {0x5, 0x3}, {0x6, 0x7}, {0x0, 0x3}, {0x3, 0x7}, {0x4, 0x9}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x6}, {0x4, 0x7}, {0x5, 0x5}, {}, {0x0, 0x3}, {0x5, 0xa}, {0x5}, {0x3, 0x8}, {0x1}, {0x1, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xfff5, 0xa, 0x5, 0x47, 0x3, 0x3ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x13a, 0x2, 0x8, 0x7, 0x7f, 0x7f, 0x6, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x4, 0xe, 0x2, 0x7, 0xce, 0x3, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0x16, 0xb, 0x3, 0x18, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8001, 0x7ff, 0x8, 0x8aa, 0x2, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x2}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x2, 0x1}, {0x5, 0x8}, {0x7, 0x9}, {0x7}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x2}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x1}, {0x1}, {0x2, 0x9}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x6, 0x3}, {0x5, 0x3}, {0x6, 0x8}, {0x4, 0x8}, {0x4, 0x8}, {}, {0x7, 0x9}, {0x6, 0x6}, {0x7, 0xa}, {0x3, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x4, 0x2}, {0x4, 0x6}, {0x6, 0x3}, {0x2, 0x8}, {0x3, 0x6}, {0x6, 0xa}, {0x6, 0x7}, {0x1}, {0x1, 0x6}, {0x3}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x7, 0x8}, {0x4, 0x6}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x4}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x5, 0x6}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1dc, 0x7, 0xda, 0x100, 0x401, 0x7, 0x81, 0x1]}}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x6c, 0x5, 0x24, 0x6, 0x6, 0x91c57fb0f8ce4b06, 0x48, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff00, 0x0, 0x6, 0x7, 0x800, 0x7, 0x300c, 0x7fff]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x6}, {0x6, 0x6}, {0x2, 0x3}, {0x1, 0x6}, {0x3, 0x2}, {0x3, 0x9}, {0x7}, {0x7, 0x7}, {0x1}, {0x3, 0x3}, {0x3, 0xa}, {0x6, 0x6}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x0, 0xa}, {0x1, 0xa}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x9}, {0x0, 0x5}, {0x2, 0x4}, {0x3}, {0x1, 0x4}, {0x2, 0x3}, {0x3, 0x6}, {0x4, 0xa}, {0x4, 0x3}, {0x3, 0x5}, {0x6, 0x2}, {0x0, 0x3}, {0x5, 0x8}, {0x4}, {0x4, 0x2}, {0x4, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x7, 0x9}, {0x7, 0x6}, {0x7, 0x5}, {0x6, 0x7}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xb, 0x2f, 0x1ff, 0xddea, 0xffff, 0x1000, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x6, 0x5, 0x3, 0xdf8, 0x1, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0xc, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x3, 0x5, 0x9, 0x7, 0x7, 0xe]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x401, 0x0, 0x9, 0x9, 0x2, 0xc]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x5}, {0x2, 0x3}, {0x2, 0x7}, {0x5, 0x3}, {0x4, 0x9}, {0x1, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x9}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x3}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x13a415bc0b0be35f, 0x12, 0xc, 0x9, 0x6c, 0x16, 0x3, 0x3, 0x16, 0x1, 0x6b, 0x6c, 0x18, 0x1b, 0x4, 0x24, 0x30, 0x36, 0x9, 0x6, 0x16, 0x1b, 0x1, 0x4, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x368, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xff80, 0xfffe, 0x5, 0x57, 0x8000, 0x4, 0x7]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x24, 0x60, 0x30, 0x6c, 0x24, 0xc, 0x6c, 0x3, 0x16, 0x48, 0x1f, 0x9]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x12, 0x18, 0x4, 0x18, 0x2, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x6, 0x2, 0x4, 0x5, 0x3, 0x10, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0xfffa, 0x6, 0x0, 0xf800, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xfffe, 0x3, 0x8, 0x5, 0xe1, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfffa, 0x1, 0x200, 0x8, 0xc, 0x3, 0x400]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x2, 0xc, 0x6, 0x1, 0x12, 0xb, 0x60, 0x1, 0x5, 0x9, 0x4, 0x1, 0x6c, 0x6c, 0xc, 0x36, 0x12, 0xb, 0x1b, 0x18, 0x6c, 0x0]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xa6, 0x0, 0x6, 0x8001, 0x0, 0x8a2a, 0x3]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x3, 0x2, 0xfff9, 0xa16a, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x12, 0x30, 0x9, 0xb, 0x9, 0x1e, 0x3, 0x4, 0x2, 0x4, 0x12]}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x6, 0x7, 0x5, 0x1ff, 0x1, 0x81, 0x1]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x9}, {0x1, 0x6}, {0x3, 0x2}, {0x1, 0x9}, {0x5, 0x3}, {0x7, 0x4}, {0x1}, {0x1}, {0x1}, {0x5, 0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x9}, {0x5, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x4, 0x4}, {0x1, 0x6}, {0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0x1}, {0x5, 0x8}, {0x1, 0x4}, {0x2, 0x2}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x3}, {}, {0x6, 0x1}, {0x2, 0x6}, {0x3, 0x5}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x2, 0xa}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x1, 0x7}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x2, 0x9}, {0x4, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0xa}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x4}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0x1}, {0x1, 0x6}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x11}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x8}, {0x0, 0x5}, {0x3}, {0x5, 0x4}, {0x0, 0x7}, {0x3, 0x6}, {0x4, 0x5}, {0x0, 0x1}, {0x3, 0x4}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0x1}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0x3}, {0x7, 0x8}, {0x3, 0xa}, {0x2, 0x2}, {0x4, 0x8}, {0x2, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0x2}, {0x3, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x6, 0x7}, {0x2, 0x8}, {0x3, 0x4}, {0x2, 0x2}, {0x0, 0x8}, {0x7, 0xa}, {0x3, 0x2}, {}, {0x6, 0x2}, {0x3}, {0x6, 0x7}, {0x6, 0x5}, {0x7, 0x7}, {0x5, 0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x3, 0x9, 0x3, 0x40, 0xe1, 0x5, 0xff8c]}}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x8}, {0x7}, {0x5, 0x4}, {0x3, 0x7}, {0x5, 0x8}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x4, 0xa}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x6}, {0x5, 0x1}, {0x0, 0xa}, {0x5}, {0x0, 0x9}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x6, 0x9}, {0x7, 0x2}, {0x1, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x5}, {0x7, 0x8}, {0x1}, {0x6}, {0x2, 0xa}, {0x7, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x0, 0x2}, {0x6, 0xa}, {0x2, 0x8}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x4}, {0x2}, {0x2, 0x7}, {0x3, 0xa}, {0x2, 0xa}, {0x0, 0x5}, {0x3, 0xa}, {0x7, 0x8}, {0x4, 0x5}, {0x4, 0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0xbb, 0x1b5b, 0x9, 0x8, 0x7463, 0x6]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x1b, 0x3, 0x36, 0x24, 0x2, 0x36]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x6}, {0x7, 0x9}, {0x7, 0x9}, {}, {0x1, 0x9}, {0x7, 0x1}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x8}, {0x2}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x4}, {0x3, 0x6}, {0x7, 0x8}, {0x4, 0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x23, 0x7, 0x1, 0x5, 0x8, 0x81, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x72dd, 0x1, 0x0, 0x10, 0x3000, 0x8, 0x2, 0x5]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd675, 0x1, 0xf38, 0xc, 0x1, 0x4, 0x5, 0xb]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x60, 0x0, 0x6c, 0xb, 0x24, 0x5, 0x18, 0x6c, 0x3, 0xe41fe9946029ae73, 0x9, 0xb, 0x6, 0x1b, 0x48, 0xb, 0xc, 0x9, 0x24, 0x2, 0x2, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe97, 0x0, 0x3, 0x6, 0x9, 0x2, 0x6, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x6c, 0x3d, 0x2, 0x4, 0x1a, 0xc, 0x28, 0x30, 0xb, 0x1b, 0x12, 0x24, 0x6, 0x1b, 0x60, 0x18, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x3, 0x4, 0x200, 0x3, 0x1, 0xb, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x36, 0x24, 0x1, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x248, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x114, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x6}, {0x0, 0x5}, {0x2, 0x2}, {0x4, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x5, 0x6}, {}, {}, {0x7}, {0x1, 0x8}, {0x6, 0x3}, {0x0, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x6, 0x8}, {0x2, 0x4}, {0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x4}, {0x0, 0x1}, {}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x4}, {0x6, 0x2}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x6}, {0x3, 0x1}, {0x7, 0x4}, {0x6, 0x1}, {0x4, 0x2}, {0x6, 0x5}, {0x0, 0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x6, 0x3}, {0x1, 0xa}, {0x6, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x0, 0x6}, {0x7, 0x2}, {0x6, 0x7}, {0x0, 0x8}, {0x3, 0x2}, {0x4, 0x2}, {0x4}, {0x4, 0x8}, {0x3, 0x3}, {0x4, 0x8}, {0x6, 0x4}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x6}, {0x3, 0x5}, {0x3, 0xa}, {0x7, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0xa}, {0x2, 0x7}, {0x6, 0x2}, {}, {0x6}, {0x3, 0x3}, {0x7}, {0x6, 0xa}, {0x4, 0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x4}, {0x3, 0x1}, {0x1, 0xa}, {0x1, 0x5}, {0x5}, {0x1}, {0x7, 0x1}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0xa}, {0x7, 0x1}, {0x2, 0x5}, {0x7}, {}, {0x7}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x2, 0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x1}, {0x6, 0x7}, {0x5, 0x2}, {0x3, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x7, 0x5}, {0x5, 0x2}, {0x5, 0x2}, {0x2, 0x2}, {0x4, 0x4}, {0x4, 0x7}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x7}, {0x4, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x2, 0x4}, {0x1}, {0x0, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {0x1}, {0x7, 0x9}, {0x1, 0x4}, {0x3, 0x2}, {0x6, 0x9}, {0x5, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x3, 0x9}, {0x3, 0x9}, {0x3, 0x2}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x401, 0x81, 0x4, 0x1, 0x4, 0x923, 0x7ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x2, 0x9, 0x4bf2, 0x8, 0x8, 0x7fff]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x2}, {0x6}, {0x1, 0x3}, {0x7}, {0x1}, {0x3, 0x3}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x8}, {0x1, 0x8}, {0x0, 0x1}, {0x7}, {0x7, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x5}, {0x7, 0xa}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x5, 0x1}, {0x2, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0xa}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x5}, {0x2, 0x6}, {0x6, 0x7}, {0x3, 0x7}, {}, {0x2, 0x6}, {0x3, 0x3}, {0x5, 0x2}, {0x4, 0x5}, {0x7, 0x4}, {0x5, 0x4}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0xa}, {0x2, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x8}, {0x6, 0xa}, {0x5, 0x2}, {0x6, 0x8}, {0x1, 0x7}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x0, 0x0, 0x6, 0x4339, 0x7ff, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x4, 0x18, 0x30, 0x6c, 0x30, 0x24, 0x4, 0x16, 0x1, 0x0, 0x41, 0x18, 0x3, 0x36, 0x12, 0x30, 0x5, 0x0, 0x18, 0x48, 0x36, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x1, 0x9, 0x4, 0x8, 0xf26, 0x6, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x9, 0x2, 0x6, 0x6, 0x1, 0x6, 0x48, 0xc, 0x48, 0x1, 0x3, 0xb, 0x36, 0x4, 0x16, 0x1b, 0x6, 0x9, 0x9, 0x6, 0x4, 0x9, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x6, 0x8}, {0x2, 0x1}, {0x6, 0x4}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x1}, {0x2}, {0x0, 0x9}, {0x0, 0x7}, {0x4, 0x5}, {0x1}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6}, {0x7, 0x4}, {0x1}, {0x5, 0x7}, {0x7, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x2}, {0x3, 0x5}, {0x7}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x0, 0x3}, {0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x3}, {0x2, 0x9}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x6}, {0x5, 0x2}, {}, {0x2, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x4}, {0x6, 0x1}, {0x4, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x4, 0x1}, {0x5, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x3, 0x6}, {0x1, 0x9}, {0x5, 0x8}, {0x2, 0xa}, {0x7, 0x1}, {0x7, 0x9}, {}, {0x3}, {0x3, 0xa}, {0x0, 0x3}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2b}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x5, 0x6, 0x10, 0x8, 0x4, 0x9, 0x2]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x3}, {0x6, 0x1}, {0x6, 0x9}, {0x3, 0x2}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xdf, 0x4ac9, 0xb, 0xcf6, 0x400, 0x3, 0xf800, 0x9a56]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x5, 0x1000, 0x7ff, 0x7, 0xf42, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x8, 0x81, 0x9, 0x8000, 0x8, 0xfff8, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x60, 0x6, 0x4, 0x60, 0x48, 0x6c, 0x6, 0x48, 0x6, 0x2, 0x71, 0x5, 0x60, 0x0, 0x16, 0x1, 0x9, 0x5, 0x12, 0x36, 0x12, 0x16, 0x24, 0xb, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xa00, 0x6, 0x8, 0xfff5, 0x1ff, 0xfff7, 0x4]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x3}, {0x6, 0x3}, {0x2, 0x1}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x9}, {0x7, 0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x2}, {0x6}, {0x5, 0x2}, {0x7, 0x1}, {0x4, 0x7}, {0x6, 0x8}, {}, {0x5, 0x1}, {0x4, 0x3}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x3}, {0x2, 0x9}, {0x7}, {0x1}, {0x0, 0x8}, {0x2, 0x6}, {0x2, 0x1}, {0x3, 0x7}, {0x7, 0x5}, {0x2, 0x9}, {0x1, 0x9}, {0x2, 0x5}, {0x5, 0x7}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x2}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0xa}, {0x3, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x2, 0x6}, {0x6}, {0x7}, {0x1, 0x4}, {0x2, 0x9}, {0x2, 0x6}, {0x6, 0x9}, {0x3, 0x8}, {0x2, 0x7}, {0x1}, {0x3, 0x1}, {0x7, 0x7}, {0x6, 0xa}, {0x2, 0x8}, {0x2, 0xa}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x9}, {0x7, 0x1}, {0x5, 0x3}, {0x6, 0x9}, {0x4, 0x4}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x8}, {0x5, 0x8}, {0x7, 0x5}, {0x7, 0x6}]}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcf}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x500, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x37}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x9}, {0x1, 0x9}, {0x7, 0xa}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x4}, {0x5, 0x7}, {0x5, 0x2}, {0x5, 0x1}, {0x7, 0x3}, {0x2, 0x8}, {0x3, 0xa}, {0x2}, {0x0, 0x3}, {0x1, 0x5}, {0x4, 0x1}, {0x7, 0x1}, {0x2, 0x7}, {0x3, 0xa}, {0x5, 0x5}, {0x4, 0x7}, {0x6, 0x2}, {0x6, 0x7}, {0x3}, {0x6}, {0x5, 0x9}, {0x5, 0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x3}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x3}, {0x4, 0x5}, {0x5}, {0x1, 0x7}, {0x5, 0x4}, {0x7, 0x4}, {0x3, 0x3}, {}, {0x1, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x1}, {0x3, 0x2}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x1}, {0x7, 0x8}, {0x3, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x6, 0x9}, {0x3, 0xa}, {0x4, 0x1}, {0x6, 0x3}, {0x6, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x4, 0x2, 0x5, 0x2, 0x1ff, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x3, 0x2, 0x1, 0x800, 0x3, 0x5]}}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x18, 0x36, 0x18, 0x6, 0x1b, 0x2d, 0xb, 0x3, 0xc, 0x4, 0xb, 0x4, 0x6c, 0x6c, 0x4, 0x6c, 0x0, 0x6c, 0x69, 0x24da80826641415, 0x5b, 0x1b, 0x9, 0x30, 0x1]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x8}, {0x7, 0x6}, {0x2, 0x5}, {0x6}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x8}, {0x2}, {0x1, 0xa}, {0x2, 0xa}, {0x4, 0x6}, {0x5, 0xa}, {0x7, 0x8}, {0x5, 0x2}, {0x6, 0x9}, {0x5, 0x9}, {0x3, 0x5}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x3, 0x1}, {0x6, 0x5}, {0x4, 0x2}, {0x6, 0x9}, {0x2, 0x9}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0x8}, {0x4, 0x3}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0x3}, {0x4, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x24, 0x9, 0x24, 0x5, 0x18, 0x4, 0x16, 0x16, 0x2, 0xecaec101f64fb50, 0x60, 0x6c, 0x30, 0x4, 0x18, 0xb, 0x1, 0xc, 0x2b, 0x4, 0x1, 0x5, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x99b, 0xff, 0xe, 0x2, 0x94, 0x9, 0x80, 0x9da9]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x8}, {0x1, 0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x3, 0x5}, {0x1}, {0x1, 0x9}, {0x7, 0x4}, {0x2}, {0x5}, {0x3, 0x1}, {0x5, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0x2}, {0x2, 0x3}, {0x7, 0xa}, {0x5, 0x6}, {}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x5, 0x8}, {0x1, 0x3}, {0x2, 0x8}, {0x1, 0x4}, {0x4, 0x4}, {0x1, 0x5}, {0x5}, {0x4, 0x2}, {0x1, 0x1}, {0x2, 0x8}, {0x4}, {0x4}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x7}, {0x4, 0xa}, {0x4, 0x9}]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x6}, {0x1, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0x2}, {0x3, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x1}, {0x3, 0x5}, {0x3}, {0x1, 0x2}, {0x3}, {0x5, 0xa}, {0x5, 0x9}, {0x4, 0x1}, {0x6, 0xa}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x7, 0xa}, {0x4, 0x6}, {0x4, 0x6}, {0x3, 0x6}, {0x1, 0x3}, {}, {0x6, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x3, 0x1}, {0x5, 0x9}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0xa}, {0x3, 0x7}, {0x0, 0x4}, {0x3}, {0x1, 0xa}, {0x3}, {0x3, 0x1}, {0x7, 0x4}, {0x6, 0x9}, {0x7, 0x5}, {0x5, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x7, 0xa}, {0x6, 0xa}, {0x7, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x1}, {0x2, 0x2}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x65}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x13c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1000, 0xff, 0x7, 0x9, 0x9, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0xcc0, 0x5, 0x7, 0x5, 0x10, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x5, 0x8751, 0x1, 0x7e54, 0x800, 0x64e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0xe, 0xff50, 0x2, 0x0, 0xfffa, 0x7]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfff, 0x41d7, 0x1, 0xb14, 0x3, 0x3, 0x81]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0x4, 0x12, 0x2, 0x48, 0x3, 0x48, 0x6c, 0xc, 0x3, 0x48, 0x18, 0x2, 0x24]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x5}, {0x0, 0x1}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0x9}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0xa}, {0x2}, {0x7, 0x5}, {0x5}, {0x2, 0xa}, {0x2}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x9, 0x18, 0x18, 0x4, 0x64, 0x4, 0x16, 0x3, 0x9, 0x48, 0x36, 0xc, 0x28, 0x18, 0x12, 0xc, 0x9, 0x2fe3c1ae37ec62ec, 0x1, 0x4, 0x16, 0x14, 0x1b, 0x48, 0x4, 0x36]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x60, 0x24, 0x51, 0x1, 0x4, 0x18, 0x60, 0x12, 0x9, 0xc, 0x6a]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x49f9, 0x0, 0x1, 0x7fff, 0x2, 0x1, 0x3]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x4, 0xb, 0x16, 0x24, 0x5a, 0x2, 0xb, 0x18, 0x1b, 0x60, 0x24, 0x1b, 0x3, 0x1, 0x48, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x17d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x8, 0x2, 0x5, 0x7, 0x6, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xf, 0x7b, 0x8, 0x6, 0x1, 0xbe5, 0x2]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x4, 0x2, 0x7, 0x7, 0x10, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x5}, {0x2}, {0x7, 0x5}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0xfffa, 0x2, 0x80, 0x6bc, 0x3ff, 0xfffa]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x7ff, 0x29a, 0x6, 0x9, 0x7, 0x80, 0x9d76]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}]}]}, 0x2140}, 0x1, 0x0, 0x0, 0x20004811}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x4b, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ad}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='memory.events.local\x00', 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r8) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r7) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00022f92374a3bbcce99dc6628bd7000ffdbdf250de7000008000400800000000c000380080005007f0000010800040002000000080004000e00"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x8804) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x50, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_usb_connect(0x4, 0xe3c, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xe7, 0xc1, 0xac, 0x40, 0x403, 0xda71, 0x7fdd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2a, 0x2, 0x9, 0x7, 0xb0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0xf, 0xbd, 0xd1, 0x92, 0xd, [], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x1, 0x3, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xc, 0x30, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x9}]}}, {{0x9, 0x5, 0x6, 0x3, 0x5f7, 0xd, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xe}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xb1, 0x6, 0x4}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x0, 0x9, 0x1}}, {{0x9, 0x5, 0x80, 0x1, 0xb87, 0x3, 0x80, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xab, 0x8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x10, 0x5, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xff}, @generic={0xea, 0x30, "0c4518260931a1dadb37a4f66dd175fe7e14b1948df3305d46ba87100c1a247ff34b20aaf8945a9b48efcb5330add70fc759946128318266188e99aa9974ade8d80bf9e8376004331442a8537277c83060d93bb9433f2ea46bf5845b0cb09406473bbb7023de15e0ff8b5cb1c5bb618fe6a6b5a7dea81b29cbeca556295452aa7d651de9f3eb38ed6cfeb066251ff90b35ca7b8f9862d7f3c701720e41cb932d22d6106c38cae46cbaf025e99e33dd961287bca25cd5d3475fb4c791ad091551d9f394fecb67d88a21653fd8278eed189c87ae1ae692b8bcfe430f6e755c40ccd02c8028b83aed71"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0x4, 0x6, 0x49, [@generic={0xa3, 0x1, "c34514cc4dbba8ac518efe45e5aff373b0f5d2383a54c8ad97a0affc30724ca8466cb90c78e3ca1eee880327b18e4cb88adc67c0d669eff1a19b51b12ce88e07dc8ad1422ab77ab7116872cd4fa217a03fbbc3865f6955d6b404021a9abec4bbbb39eeffc394f51ebfdf2affec1e34808aefbb6f5b30fd6b3c8f9cb07cba86b2b89e4c4ffa736a2fdcab7ad9d946289d23a2d651f97c283e18cf8f98084530184e"}, @generic={0x8b, 0x3, "ffafad5324afd3f984ea298a21275587d3ad7c4de24402acc80a2e13e7a7551273636b9fedc449f150097c93367e3544a82cb6d0d7ee1804a10b3625578119ed3c142e4ccc540ac42839bb4f04377b556f49366cd4b2ed6145f841d74b25bbf462e52265d66e76955e40292ce8ed9354481a2528865ca6b5a9e50ab0a2d6e7464d43bf12620e74f300"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x9, 0x1, 0x3, [@generic={0x101, 0x8, "1ac43a8157a4b51087460fca1f884e235f3ea0d00c9e1e8690bea9bfe0ffd8b6b35fbec144274c300bb974083e835311059981733fb7c8827c1e7a2a48c601f655895822f325f04156dba07e351b284f12e9f4415ac2a773c277a501c9b9dd4393ea21f786b27294aa148ebf0cd89cee54a99d5e209d08ba80be58e012a7b928c7c8126c255600763b6449325ca28cee916eeaa83e3f0ef25991df03792139c41639618e06cbc78f4a3e7bae665c03d3d0ea055c58ed67f1a478b64bddfd80f244da0c5f60be417467881f8506da3827d2521a42bdfb2209d0637f71deb7d0c70994ff276954cba08bd6b60af2eef365ca275361616bc35e2c7015f78fa949"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x6, 0x2, 0x2}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x1, 0x3, 0xb0}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x73, 0xf0, 0x3, [@generic={0x100, 0xb, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x180, 0x0, 0x2}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0xc, 0x2, 0x7, [@generic={0xd8, 0x21, "9e897e613fac43a3511771bb6b78b9d73b1aedeaefff4709863fb56f625f6fa40c2a9ae581360c079810af4045e0bcc8e102c0da58b10cf9cfb4a538da166f5ab968638e0a470e4c57a4542a7d627e109fb247136485e92cbfc2e1e2295e4b0b6f6a6dddf4252afd6da90efd56b270f2fb7d0d63175985b0891029abba146a1dd18d96b9d39d2b12c7c29c7ebc7b249723fbbaa2439742a0a7b2ce368f589d606193041d27969f812765572fcbba0107ec82b25612bcdc0bc412a94027c7de4781863532ee95c729fa1911c00cc534e6f0a440315dff"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x4, 0x3, 0x3, [@generic={0xc2, 0x11, "1b25a3c00d52ee0b2ef02675571c20667acd635e8e4f2923e1693f848cfd7e8c3fdd42de71e3390708c1171b032116165336f924be85c18d1b9956f67da0e21a526f6bb2862bf6d0a4c115ca86d3b4691f559d57801c2872823bec88fde671a8dac02f95f8e502435372d85c7ee7c58687ac9ca9506ea840267ebcd84c1924ff692ad9d5df3bfe009bca0a4c9aeec7ac4b9e48bbb067a8459d5dd512210a763084f61fc9e15c0386a01039842986d4bacc090d3a135d56d20b559383c366c108"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x3e, 0xff, 0x1, [@generic={0xce, 0x31, "9a22dca405805e1f30673aa08f166e674b58b4b8094836330bb98a28d0089c73a6fa2ef36df0c883deb9b2a80567bb42695d11f2e421f37af289d6330228417f19836ca8f69e74836f68ec18506ebf2485a6a8137b8cb8c93c34c5752eb23b5dc8b67c6b54babea82ca1f67f2f8fd5c270f8a9543f1e8a3c43ee1749e55608e1d791fc58b19b70ef0a196d723949fd74febfea9134ba02b27077ace4b2d6ae5eaf89dd2c7d5844bee4eb61e6dd774bad41e0aac7147cf08886a35054b58e1b4e7e7773456dda73dabf8e3e2e"}, @generic={0x91, 0x7, "95c9391cce318ff766d32037b435b3df8e32d12fe657f8f00984b58af2c6f0bba5ebd4e9f861612af77a8f15e419fe627508b47bb3553e68bd8f723e53579e003b287c18c174ff7d4036c83d9ddbb051196bdc3b5132502aa9f76ef3a271b430fb5a727bdaf1768fb3ca7a65829125f03a65a842b2477e271d7c6bbfa69dfa4f8d9db82c6902a499d2a75345978403"}]}}]}}, {{0x9, 0x4, 0xf, 0x4, 0xa, 0x66, 0x77, 0xa, 0x0, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'E'}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x2, 0xb, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x9}]}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x6, 0x4, 0xc9, [@generic={0xca, 0x6, "9bee243613187c54ca887af19f5a4fc0c96bdadf650f1346b5710e00f9b3313b59bf2cd82b07845054fd128aaa6d981f88401d1191a0bf2c72ba2c1f6cec393971d31f20c5c015124e8cdbc88710e34922cfae12da9609d492315e73b8db733f0e173e663725ecde31ee25a587d7efbd837f39660d9f02d94e7ae95d171f5f2be3f0f246d8bf5105e1824100cfebbde994a3a333b0410e9e9d4b3d0c5060cf2c3615f3f4be99a545d8c71c98db0da590938078676b8d600461c48a522264da778fdfda4fcfdb8f94"}, @generic={0xfe, 0x7, "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"}]}}, {{0x9, 0x5, 0x0, 0x12, 0x8, 0x1, 0x94, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x48}, @generic={0xa7, 0xa, "c15532eb6caa389ded77c2d90bbe36dc317eeee30b0d00ba701dcb34bf415d7fe4cce417f68a7db155dfb71c407bb77367d63967c98ac03dee0479fe3ff87a98bb35b4c1c81fb4cba42276a2035b3171433bc39b57f756e70293304c164b0cdaaa3b80244cb8eeac9a6be17f36cfc0af5236e396cb63553fa734ce68a9c39fba461e380e8884a30a9eff5ed3485edb382303f4f36a0cc43791199e7251503dc8c78183f617"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x0, 0x4, 0x9, [@generic={0xb8, 0x4, "e3484193bb1017cda39e4811eeeb1fbfcc2fab05366e03a1dfb3ef2e483e21be0e95e8c0de6e0da0b966291397cdbde7d59ce588b28e0d76a9d9cab9be0fd916228cf648315756eec567df3c4402b240e6d86371b8b0e0e0a7c2daafcb2af1aaeb51b97f1bb38e3ade4998802a77acd7602b2ab5c19cfb3aef90223ee7261ee221587df7aaba4617ef336250e127a5f468904f03eabbe72989368a4d1cd90166133379232fabd2c19e610727b10bc6f5a566a67bb567"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x0, 0x7, 0x2}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x4, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x9}]}}, {{0x9, 0x5, 0xf, 0x10, 0x11a6a5b14e9927c2, 0x16, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xd4b5}, @generic={0x102, 0x11, "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"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xda, 0x0, 0x7, [@generic={0x9c, 0x6, "1d92c11f3c7f0f79374740240f34931bb4757ccf7dd0f1b45d8c60ad3e806b4bf7ed8bdb59c9160f697e1c0e355cc73f4c5551d4e4fd225e76586f4c5e63d1ac59ab6ccf9c220ba1023fdc8228e5c04cc77fc33d5d84ecf4c80a002603a3755e071d47ff124583f2a6ca2ec0744c078156c4672ae740ce68288c621c13dbaae656936a7a60287c2499998201fed1fc5186d3dcf92ef8eda7891a"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x0, 0x7, 0x5}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x5, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xa0}]}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0xc, 0x9a, 0x6, [@generic={0xe4, 0x31, "893266d25aad3717e2bf12c090e67933b202b758051728bd4404b4ff25eff511fddcc3ca51d0c3f3d559e4382caa8f9cd70cb15e91fb6ebeaff1ffc1973ecde2b57011b8742e3720c8d721db2733ad3cb5c00441bfee4c35e9c491b38d4efeed5e8713385835eb46cc77d9823a46346033f5f0c8617195ae80eb0df46f7ac2bed4d52149143d42129c9758ee90c309b145339485185e179d2d973f176948be977a5d0d31ec849e4a753da5f66ba48e8cc8701a2b84a37c6e9895d072ee12a41a02cba1685cd2875a51f7d36a6d79e1718648739f355e50675aad96be38cb018f3cb8"}]}}]}}]}}]}}, 0x0) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r10, 0x0, 0x24, &(0x7f0000000e80)={@broadcast, @remote}, &(0x7f0000000ec0)=0xc) 3m34.797084831s ago: executing program 3 (id=4251): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/140, 0x8c}], 0x1}, 0x2000) sendmmsg$alg(r2, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 3m34.121245225s ago: executing program 35 (id=4251): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/140, 0x8c}], 0x1}, 0x2000) sendmmsg$alg(r2, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 12.658874404s ago: executing program 6 (id=4812): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) r2 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) wait4(0x0, 0x0, 0x40000000, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r4}) r5 = syz_pidfd_open(r2, 0x0) ioctl$VIDIOC_QBUF(r5, 0xff01, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0x8, {"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", 0x101c}}, 0x20002046) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r6, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) sendmmsg$sock(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) 11.220865538s ago: executing program 7 (id=4816): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYRESDEC], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x124, 0x0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x22}}}}, [@NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "1b4085dda87c795ab29e1bcaee5b346b3a06059f9f4d7af0f33422a01f2ab3bf6952c8638dcda969c7882acd67416b64d391f1ba1a49745e9f6ac5f7eb0c196bc39e33eb6c2c4de7fde502efbc6450c5acd8bcea9e13066d74d54abe755948005536b0c1356f16ee9f16ba31d27fdf7426e0f1b7ba160cf6143ce464b904500179322ad3a222dded70c3224dcef14df83d6769f9d6abd7e34907d3267c37a2de6e2c5ee101c1fd1c4162e13ff55f527ca62fab0baa89a7021b70565b652397136ceb1d331396355a3f4fff3d2bf1bcf2c32794f0f9adef6a7987ff5267321373e41d211243a638f30872aac6bbc4dc0ce6dee0301af697c7"}]}, 0x124}}, 0x81) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1ff, 0xa}}}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x30}}, 0x4000000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmmsg$inet6(r12, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000802) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000500012800e0001006970366772657461700000003c000280080014000e000000060003000700000008000d0005000000060002001ef7000005000b000f00000006000200030000000800010026"], 0x70}}, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r13}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x1e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000059c39b470000aaaaaaaaaa2c000c01000040020200005ef42005faf3ee39"], 0x0) 10.803132659s ago: executing program 6 (id=4817): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x2, 0x9, 0x100000000000008, 0xfffffffe, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000500)={0xa, 0xffff, 0x0, @loopback, 0x9}, 0x1c) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4609035208070000000000000003003e00810000002701000038000000b00100c69280f2ea967f060007000000468320000100000400017f000000000000000070070000000000000058970000070000000b00000000040000000000805d5d93bd9aed8150be245eb57c20275df23dd4c0a790d184cb0fd06fc61360db201ff5e3b747d53373a968d5dff14ccac501f02fe320a27d63cbc8abbc8bee8130a4849dd5bf877e733c6917ea5757bda54eba462981a44f0e8100"/380], 0x1b2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000002c0)={0x0, 0x9, 0x10001, 0x3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r5 = inotify_init1(0x80000) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000200)={0xfffffff8, [[0x5, 0x80000001, 0x40020, 0x0, 0x7fff, 0x3, 0xfffffffe, 0x206], [0x4, 0xfffffffe, 0x0, 0x0, 0x2, 0x940f, 0x0, 0x7], [0x0, 0x2, 0x5, 0x3, 0x100, 0x0, 0x1, 0x4571]], '\x00', [{0x0, 0x1, 0x1}, {0x2, 0x1}, {0x80, 0x80000}, {0x9, 0x4}, {0x2, 0xb}, {0x38}, {0xa5, 0x230d}, {}, {0x0, 0x1}, {0x4000000}, {0x80000000, 0x4}, {0x0, 0x1}], '\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5000000}) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0xc0000484) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xee2cf000) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x32) 10.233777329s ago: executing program 4 (id=4818): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x1, @loopback, 0x55}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x8}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@v2={0x2000000, [{0x6, 0x3}, {0xffff, 0x7}]}, 0x14, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x309143, 0x0) userfaultfd(0x80001) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00220b0024e6580965039ef12d1992f7d2"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f00000000c0)={0x3, 0x200, 0x6, 0xd, 0x60000000, 0x80000000}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000100)="8448f0d7193f9abc9d630e3421fbcb5c321adf5162075849", 0x0, 0x18) r7 = socket$inet(0x2b, 0x801, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf5}, 0x1c) ioctl$int_in(r7, 0x5452, &(0x7f0000000280)=0x8) close(r4) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000090) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004402400000f0800014000000000340005800c0001007061796c6f6164000e000280080004400000005608000340000000b9080001400000000a08000240000000040900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.388913339s ago: executing program 8 (id=4819): ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r1) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@hyper}, {@host, 0x81}, 0x400, "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"}, 0x418, 0x6}) r3 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688f54c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x4, 0x1, 0x1, 0x0, 0xfffffffd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4800) io_uring_enter(r3, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9.360880054s ago: executing program 4 (id=4820): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x109800, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r1) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x8) lseek(r4, 0x2, 0x0) getdents64(r4, 0x0, 0x22) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') getdents64(r4, &(0x7f0000000d00)=""/72, 0x48) read$FUSE(r1, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0xfffffffffffffff5, 0x7fffffffffffffff, {0x800, 0xffffffff, 0x0, {0x1, 0x80001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x80000001, 0xa000, 0x0, r5, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x1, r1}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x315300, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000bc0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 8.495852803s ago: executing program 7 (id=4821): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x14, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) rt_sigpending(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x8}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x48}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000051}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0xfffe, 0x8000002, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x6b9c, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK'}, 0xe) sendfile(r4, r5, &(0x7f00000000c0), 0x4) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000240)=""/210) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYBLOB], 0x50) r6 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x1b, 0x1, 0x0, "093d4a3b5b7bc69a21cfb7f5eaac46dbe89b13471a0488a6679f9a2102249341", 0x34524742}) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 8.317165873s ago: executing program 6 (id=4822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x46, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.039775909s ago: executing program 6 (id=4823): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) unshare(0x400) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000021, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) unshare(0x40000000) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_settime(r5, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x6}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}}, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb3}, {0x6, 0x9, 0x3, 0x2}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) sendmsg$xdp(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x2c, 0x8, r4, 0x19}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000280)="3350052b188051d494291fdd17b23a8e27d084e795a92133586468ca7f108ab5cf16a43ceb085237c00fbc914648a3c79d6436a879f91dd361da20b57c9081b5c3f39fcc945891e5175f05dd238c551307b496086b15cd9f6a51d37b221bafa667eab52a", 0x64}, {&(0x7f00000004c0)="f83d91be1e5ff59a7f5b17dcac9492bdc46cdb4b05d261801ec728f965c592073152d64aab1155c05edc923409f0f88d63430866166c7d80b769ef3e7abd9f4f69a0f22dd589ca41e5e201f9e7d355957c2d8ed4323674fb957b3c05a98263190916bc7529c70cae9ef15989b776351fcb8a23ec7294e2f3a4b5786eb2a0d26bc6238a82f755949051d17e5f8ddf07f5", 0x90}, {&(0x7f00000001c0)="d82e373c9f45cba16e813cd6ff41c17e54602d0e0193f1c064e92aff0cb0bfc1a0109f5788fbee34726a3872e8875ec88fb161278684f021aa28f6d084a4", 0x3e}, {&(0x7f0000000340)="d0792cc76dcd82bc5f8daa31dad27d92efd212c144", 0x15}], 0x4, 0x0, 0x0, 0x28000004}, 0x841) 7.730601411s ago: executing program 4 (id=4824): socket$inet_icmp_raw(0x2, 0x3, 0x1) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x9c00, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @loopback, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x12, "8475be675de6a70a05a0dc91e57ac4c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x10, "c8f46976e79ea788f03d9d320592"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 7.052920686s ago: executing program 4 (id=4825): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c0002000100000006"], 0x2c}}, 0x4000) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) fanotify_init(0x200, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x800) syz_usb_connect(0x1, 0x3f, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x200000, {{@in=@multicast1=0xe0000002, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0x800000000000}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x50881}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000002000c00e00000020000000000000000000000000000000063650000000000000000000100000000000000000a"], 0xb8}}, 0x0) 6.595643867s ago: executing program 1 (id=4827): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x9c, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x2, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "a15722"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x3, 0x1}, {0x6, 0x24, 0x1a, 0x7fff, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x1, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @acm={0x4, 0x24, 0x2, 0x9}, @obex={0x5, 0x24, 0x15, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xd}, @country_functional={0x10, 0x24, 0x7, 0x7, 0x1, [0x7, 0x200, 0x0, 0x2, 0x9]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x1, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x3, 0xff}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x6, 0x95, 0xff, 0x5}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x9, 0x15, 0x3, 0x40}]}, 0x1, [{0xd9, &(0x7f00000003c0)=@string={0xd9, 0x3, "a0ab43c26c6ef1200f6aa04bb21d6847580bbc60550c6e90a7c013d999605adf3facd876b470b694bdb4b87fd20da4cd9d1df42483a7a0670390652ac55e7ece2b3d4d90d7be0559c55cb97c387d35e059bdfa3b0c3cb1e5346359c9545f5d74105c98f95823ea2114cd64d7a9c4bb2b46b5cea153606d18481d96e35c8ced66261e0800f7c6240cde3c89dbeab95af830d81206c7c7207b7edc8b1cf1c45f7340d3b453a3517dfeec683d92769a164c54ab968ebc2779e7ae272592f2a7bb342b94065197e8e50b60794ed7c13fa9847b883d65394eea"}}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000800)={{0x9, 0x4, 0x344, 0x4d, 'syz1\x00', 0x8}, 0x0, [0xff, 0x5, 0x80000000, 0x52cc, 0x4, 0x5, 0x7, 0x401, 0xfffffffffffffffb, 0x8, 0x7, 0xc8c5, 0x0, 0x5, 0x8, 0x2, 0x7fff, 0x3, 0x8000000000000000, 0x0, 0xb6, 0x5, 0x2, 0xffffffff00000000, 0x400, 0x0, 0x3, 0x5, 0x7, 0x6, 0x4, 0x9, 0x7, 0x30e, 0x2, 0x38000000000, 0xd2e2, 0x80000001, 0x2, 0xd, 0xbfe9, 0xfffffffffffff176, 0x7fffffffffffffff, 0x1, 0x5, 0xb3, 0x6, 0x5, 0x80000000, 0x5, 0x2, 0xfffffffffffffff7, 0x9, 0x8, 0x1, 0x1, 0x1, 0x101, 0x1, 0x93, 0x200, 0x9, 0x9, 0xc0d, 0x0, 0x1, 0x6, 0x1, 0xffffffff00000000, 0x8000000000000000, 0x200, 0x7, 0x670afca2, 0xffffffff, 0x8000, 0x8, 0x7, 0x8, 0x80, 0x1, 0x6, 0x4309f4ea, 0x10001, 0x2, 0x5, 0x100, 0x3, 0x1, 0x6, 0x9, 0x5, 0x0, 0x5, 0x3, 0xe09, 0x9, 0x9, 0x0, 0x6, 0x1000, 0x6, 0x6, 0x8f1, 0x23c8, 0xfffffffffffffff3, 0x800, 0x80, 0x304, 0x1, 0x4, 0xfffffffffffffffa, 0x8, 0x2, 0x1149, 0x2, 0xe, 0x5, 0x9, 0xbd, 0xffffffffffffffff, 0x1, 0x8, 0xffffffff, 0x8a, 0xd, 0x7, 0x6, 0x1]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f00000004c0)={0x14, &(0x7f0000000280)={0x20, 0x2, 0xf, {0xf, 0x6, "11ad4470dd96ef8359b51d282d"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x0, 0xf, 0x8a, "ce2116f89e691a771fcb27c298e0d8df1fde3b3e8abd8eec9d45a833fdb23c14e2ba7dc510b9f4d7348b5ceb389ddcef3795a3543730d270a23b8cda47745ce6b96d9441be26482de95d89014489477fd56f9c8ccf53792204d5ee7339bd7fe54aefe66533affae6dae829473d9c1b180e828cc76d07b65378b2364a19c375fece391834fd0dbdf0df41"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x8516, 0x5d, 0x80000001, 0x2, 0x400, 0xbd2, 0x23b5, 0x6, 0x7, 0x663, 0x4, 0x4}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0xb}, &(0x7f0000000740)={0x20, 0x89, 0x2}}) r5 = epoll_create(0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x2000001d}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 6.436969638s ago: executing program 7 (id=4828): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xde0f}}, 0xb8}}, 0x4004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000140)={0x3, 'dummy0\x00', {0xfffffeff}, 0x6}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000ff000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a00010071"], 0xb0}}, 0x0) ioctl$FITHAW(r3, 0xc0045878) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0xd, 0x0, 0x9]}, {0x0, [0x2, 0x188, 0x0, 0x2], 0x3}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x24}}, 0x48010) r7 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x8080) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xd8, 0x57, 0xe0, 0x40, 0xdfc, 0x1, 0xc19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0xe5, 0x0, 0x0, 0x25, 0x7d, 0x27}}]}}]}}, 0x0) keyctl$get_security(0x11, r7, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x3, 0x401, {0xffffffffffffffff}, {0xee01}, 0x401, 0x3ff}) 6.335416788s ago: executing program 8 (id=4829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x200000000000000, 0x0, 0x20004000}, 0x0) 5.447350302s ago: executing program 8 (id=4830): r0 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000290000003200110000000000000000001c"], 0x38}, 0x0) 4.865125067s ago: executing program 1 (id=4831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x100, 0x4, 0x80288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x2000c000}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@dev}, 0x14) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x40086602, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 4.744892905s ago: executing program 8 (id=4832): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x900, 0x2, 0x3, 0x5, 0x4, 0x2}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000bc0)={0x6, 0x400d, 0x400, 0x97aa, 0x1a, "5ef863f1a0973cf65a7917895c30acd61b3d2b"}) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000100)={0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2, 'none\x00', 0x10, 0x8, 0x2f}, 0x2c) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00)\x00'], 0x68}}], 0x1, 0x4000000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x19bb, &(0x7f00000001c0)={0x0, 0xa975, 0x35f2c1b03753ecda, 0x3, 0x37c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x40042, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0xc8000) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xc0, 0x84) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x400002, 0x1c1) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x4800, 0x0, 0x6}, 0x18) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000003, 0x30, r3, 0x0) syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x6c, 0x0, r7, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='./file0\x00', r6}) 4.601764106s ago: executing program 6 (id=4833): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cd42d820a61b0100884901020301090212"], 0x0) r0 = creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) open(0x0, 0x147842, 0x49) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x2}}]}}]}, 0x40}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 12) 4.440759427s ago: executing program 1 (id=4834): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r7, &(0x7f0000000940)=[{&(0x7f0000000280)="9b1bc2e4224feafc05a4656f3ff0f00308dcb21eb5a6dc18ea88ee24f81386b6ae3e9ebd647088e6718b1cbe81da034d34c1e4a085b359cc29659cd28e7ce6f47ac7cec3f4a82a675799f72988e9", 0x4e}, {&(0x7f0000000a40)="19ec8299312e8201a48fa47322adc5411d1874860d131008b6eb57215944e9a763c2a1fa3b2d1df4f2d1fb9323de283dc693b46ca642f6f1d85742310ab7453d3c2e7b4dd968be675631f93e154dabd178e4b26de7ff5d49d02c990755bcd848f3f0d593b081", 0x66}, {&(0x7f0000000300)="7bd9a4c05ab5ea367a275ebe0ff68bbf53498084232cf24826c7d8548f23415a9338ebcae5fc2bd7a9da89124e2e31c7180fad3a8c92f31b612c7733104e386cd5601f26a3a54e4100809e13773297b22975a5554b7ec6bb", 0x58}, {&(0x7f0000000000)="4bebf628ae79c6", 0x7}, {&(0x7f0000000840)="ce827518f8c45ecf391368d20c797d3555eb1504e0cb8f13f63d8bd6289d4cbbfa123a299dcabbed4c056d60b91aaa316cf1cf69491528a188b04f5540c74fde2d6d535fcc0eb3b3714d7286473ef89e4fb8b4d6baff09259745db9663ae370064", 0x61}], 0x5) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000e80)={0x1c0, r9, 0x210, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6d8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5f306ebc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7143}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20000000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xaf}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x985}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x80}, 0x881) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 4.121949626s ago: executing program 8 (id=4835): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYRESDEC], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x124, 0x0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x22}}}}, [@NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "1b4085dda87c795ab29e1bcaee5b346b3a06059f9f4d7af0f33422a01f2ab3bf6952c8638dcda969c7882acd67416b64d391f1ba1a49745e9f6ac5f7eb0c196bc39e33eb6c2c4de7fde502efbc6450c5acd8bcea9e13066d74d54abe755948005536b0c1356f16ee9f16ba31d27fdf7426e0f1b7ba160cf6143ce464b904500179322ad3a222dded70c3224dcef14df83d6769f9d6abd7e34907d3267c37a2de6e2c5ee101c1fd1c4162e13ff55f527ca62fab0baa89a7021b70565b652397136ceb1d331396355a3f4fff3d2bf1bcf2c32794f0f9adef6a7987ff5267321373e41d211243a638f30872aac6bbc4dc0ce6dee0301af697c7"}]}, 0x124}}, 0x81) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1ff, 0xa}}}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x30}}, 0x4000000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmmsg$inet6(r12, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000802) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000500012800e0001006970366772657461700000003c000280080014000e000000060003000700000008000d0005000000060002001ef7000005000b000f00000006000200030000000800010026"], 0x70}}, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r13}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x1e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000059c39b470000aaaaaaaaaa2c000c01000040020200005ef42005faf3ee39"], 0x0) 3.308114597s ago: executing program 4 (id=4836): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc52) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80), 0x2, 0x2001, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x200000000000000, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r4, 0x3516, 0x0, 0x20, 0x0, 0x0) 3.010346739s ago: executing program 1 (id=4837): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000240)={0x7c, 0xd000, 0x8, r1}) 2.628857126s ago: executing program 1 (id=4838): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) fsopen(&(0x7f0000000100)='adfs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xf0, 0x0, 0xb49, 0x9, 0x0, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d479", 0xf5) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x2) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xd, 0x42, 0x44, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r5}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x18, 0x24, 0x301, 0x70bd29, 0x25dfdbf7, {0x1}, [@generic="0d75f3"]}, 0x18}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="f000000010001304000000000000000864010100000000000000000000000000e0000001000000000000000000000000000000004e23080000000000730000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB], 0xf0}}, 0x4c8f4) 2.298087908s ago: executing program 4 (id=4839): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000240), 0x3, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x20, 0x700, 0xe, 0x889c, {{0x5, 0x4, 0x1, 0x1f, 0x14, 0x68, 0x0, 0xfa, 0x29, 0x0, @multicast1, @broadcast}}}}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x8, r1, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$loop(0x0, 0xf01c, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000940)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00\xd2D\xb2K\x94\xad\x14\xdf\\\t\x9d#\xefEY\x86\x97\x01\xa3\xa6>\xd38/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?g\x8d\xe05\xcd\x0e_\xf3\x03\x84`W\x85\x00\x10\xab\xd1W\xf0\x92\x86\x86\x8e\xd2\xeb\x12\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0ea\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x97\x9fy\x81\xe7\x90\x9c\x06\xbe[\xdbt\xb3\x84\x98\x87$\xbc\xf8?R\xdae\xa0\x10E\"U\x99\x9f\x92\r\x94&i\x13'}, {0x20, '[\'+!!\\'}, {0x20, '\xb9,\xec\x89]\xab\xc9\xf3\xe5\xda\xb7El O\xeb,\xc9\xae\xcc[N\xd0o\xe7\x03\x1f\x84\xc4\xb6T\x18\xac\f\x10\x18c\xb8g\xb1\x97\xa9{\xd4A]\x1d\xeb\xeb\xdaO}\xd6\xbd$\xac\xfa\xae\xb3\x8f\xe0\xf7\xac\xb7\x12\xce\f\x83\x02G\xc7\xe9\xe1\xea\xfd\xcf\xaf\\\xea\xdd\x91\xc6\r\x00\x00\xd8\xa9\xaa\xd66R\x94\x05\x8e\xc9\xe7;\xeb\x87\xeb^~\xf9dY\x8cl\x01\xcd\xc9\xfd\x0e\xfeI\xe9\x16\xc5_<\xff ]}Y\x85\f\xcb4'}, {0x20, '#! '}, {0x20, '{@Y\xf4\xe4lC\n\x00\xc7t\xe9\xf2\xa1?77g\xa3\xb2t\x1c\x02`\x98\x1e\x0f\xcd\xb928|\x82\xb2WF\xd1;t\x85\xd1mI\xb26\x9b\\/\x7f\xc5\x01\x7f+\xa8D\x10RkY\xcc\xd4L]qN\xdfL\xccA\xa9\x90R|\x9a7\x88\xe8\xeen\a\xff\x00\xa1\x95\xcbW\xb9x\xd0\xae\xd5ny\xe87e-\xd0\x80\xe3BE<\x14\xceN?\xc4\x88\xd1T\r\xfa\xaer\xd8hg\xfb\xce\x03[N\xc5\x9e\x83\xb8\xb1O%\x13\xd8\xb1\xb1\xcan\xd82\x93R,\xab\xden\x83Xv\x8e\xc5[Y^V\x00%\xcfl\x9a_\xce\xf0%\xaf\xdf\x9f\xec3\xe4\x19\xf7\xde\xf5\v\x96KH\xfa\x89\x82\xda\xf4X\xa6=\x01\x8f\x11\xff\xb2=\x962k\bm<\xeb\xf7a\x160\x1a\xe8\xaa\xcay\xb2\xb4\xfb5\xfb~\r\xe1\x16\xd8%{M\xe8u~QEn\xea\xc4 ~\x00\x00\x00\x81\x0e\xfb\x98\xb7\xe4\\ \v\xde!bU\xed`(\xaf\xe2\xdc\xa1\x91h\r\xf5\xee\xd1\xd9?\xe9K\xbb\xdb5s\a\xab\xb9\xd5\x06u\xff\xd4Bb\xdfw7\xb5i\xdd \x903\xd60\x04\x01\xb5\xf5}\x16\xb4W\xf9kh\x83\xba2\xa7\xe1\xef\rdEf\xc3\x8a\x86\xbb\x13\xa7X\xc1\xd9\x1e\xd0aeO\xf2w\xd8\x12\xcbXNI\xcd$\x84Tg\xf4v\x87\x97R\xe9\xb4f?o\xd2\x98\x9b\xc9F#\'I\xff}C[\x10n\xa8\\\xfd\xb4\xc2\xd0\x13\x94Q\xc1\x1d<\t\xb3\x18X\x9f\x1e\xaa\xfe}\xd7]A\x03\xf7]\x95\x7f\x11\xfd7\xa6\xcc\xbd;\x9b\xc7!\x8e\x04\x98e\xf2\x98\x00Yc\x9e\xa3\x0f{\x81Z\x80]d7\x97_&(\xff\xbd0\xc6\xad\xd2P$\xcdB\xab\xe5~\xd6E\x8a\xcb'}]}, 0x361) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x8000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x44008) r6 = socket$inet6(0xa, 0x80002, 0x0) futex(&(0x7f0000000140)=0xfffffffc, 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xfffdffff) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast2, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) 1.353502928s ago: executing program 6 (id=4840): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x23, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x2, 0x0, 0x1b8, 0x2e0, 0xd0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[0x0]) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_freeze_timeout', 0x149a82, 0x80) write$cgroup_int(r3, &(0x7f0000000600)=0x9, 0x12) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000300)=0x7) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x3, 0x8ba, 0x4, {0x4, @win={{0x6417, 0x69f20258, 0x8, 0x1}, 0x3, 0x1, &(0x7f0000000440)={{0x0, 0x8001, 0x859, 0xfffffffc}}, 0x8, 0x0, 0xc4}}, 0x9592}) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={0x0, 0x0, 0x18}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) ioctl$VIDIOC_G_FMT(r4, 0x40045612, &(0x7f00000016c0)={0xc, @sliced={0x6, [0x9, 0x0, 0x9, 0x1, 0x8000, 0x9, 0xdb, 0xffff, 0xa8de, 0xb, 0x1f, 0x5, 0x3aa, 0x6, 0x3, 0x7d, 0xaf, 0xfffb, 0x3, 0x8, 0x4, 0x4, 0x1, 0x7, 0xfffe, 0x9, 0x8000, 0x35, 0x4, 0x9, 0x5, 0xb8ec, 0x5, 0x4, 0x8, 0x1, 0x100, 0x6, 0x88, 0x6, 0x611, 0x10, 0x80, 0x3, 0x8, 0x26, 0x6, 0x3], 0x9}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, &(0x7f0000000080)='\x00') 1.169855353s ago: executing program 7 (id=4841): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffff1, 0x900, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 681.09837ms ago: executing program 7 (id=4842): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x1100000000000000) 588.418057ms ago: executing program 8 (id=4843): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000dc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) landlock_restrict_self(0xffffffffffffffff, 0x0) listen(r0, 0xa) listen(r0, 0x0) syz_usb_connect(0x2, 0x10e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000e40)={0x12bc, 0x9, 0x4, 0x101, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x5}, [@typed={0xb4, 0x66, 0x0, 0x0, @binary="4d415b686c6df8f3493015073ad2ed8e5ddda93d22b74976a0a845fbb4371c8581fd29537c1fd063d60b054feaabb3b237beba2d1d9e7eb87413ee5d425b68b6a4b590b59e6c6310c9a70e4cd67c76b8f9994642527d5ecccbf811fc46aff8fe257cafffb6403b891c67b81cc48dcb555f33d9aea17c319a01e681cc80d03ffd1305f6348a1ef18a3f2b1743c92ac3a343cf6ecf055f6801695fd2aa78556f8e5456176d36449a7a65333bf4a918294d"}, @generic='d', @typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="5136c9471c31e397855817549f46004149e90afdb9f724bdf4573d34db29f18bcd068ce0f9c1b70c01ac16acc3ec15e02345735016e9b6fbe1c2ea5483c13020b1c9", @nested={0xc, 0x73, 0x0, 0x1, [@typed={0x8, 0xa2, 0x0, 0x0, @ipv4=@remote}]}, @generic="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", @nested={0x145, 0x92, 0x0, 0x1, [@generic="22d47ef0e1d9fe554f4ce02402e719b4a07679585b41e394364412031388af6c9780b6617e9656132129a05fc60bd59b29778002a6e3329c3cfa28cc4c0d0025b170c67be68b36eb51a5c6ae3bb4e5fb42c377e39a3109ae78cfc2c1392f47353d7af4970421b5261c82a674c4af8035ce0a890a2b23db206f27eede17fe48b2c9ab4d9de7028e6a2da62935c8d933ad1097b4b6c7cd08d9ee45b7b5ac1a1476c0b840b195", @typed={0x9b, 0x3, 0x0, 0x0, @binary="79131c4d97bbb010782e536ccf10f5ef2eb513f36df3fbeb2fafec021ee6c15767b1a4ad50526f167b6d794970c628dff56d8ff0499c89e30c807d77e0844885352724a1d2632c161e5d59f25ee5755d86eb37919ab6417fa1cee42513162106e3633f1e6938ad72e7cd0d7487bb5ce4181ca2eb5b27db4565609c86584a94d3ed3e0d5efcc6bbec4850e5f0727d274746a21116507443"}]}, @typed={0x8, 0x121, 0x0, 0x0, @fd}, @generic="747069e4531d21baf22fc5b833db0ba577e086a35b564db3540ffc30f06ad5cb694ff9be46a914ac5e39990227d011670e3e7b8307a46a8bf0a62af18c7f5104b7"]}, 0x12bc}, 0x1, 0x0, 0x0, 0x10}, 0x40080) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000082c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x23066040}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x400, 0x40) getdents64(r5, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="b0000000000000000000000000000000040000000020000000000000000000000100000000000000020000000000000000004000000000000000000000000000ffffffffffffffff000000000000000002000000000000000000000000000000000000000000400000000000000000000200000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0600000000000000000000000600000000000000000000000000000001"], 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000580)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7ffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0xd, 0x1, 0x1, 0x0, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000005c0)={0xfffffffd, 0x4005, 0x3, {0x1, @win={{0x0, 0x4}, 0x0, 0x11000, 0x0, 0x800, 0x0}}}) 197.612641ms ago: executing program 7 (id=4844): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0xa888, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 0s ago: executing program 1 (id=4845): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x6, 0x0, 0x0, "12848098"}, 0x3}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) (async) unshare(0xc040400) (async, rerun: 32) r1 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) (async) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): _hcd [ 1503.801899][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 1503.908057][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1504.031301][ T5936] usb 2-1: config 7 has an invalid interface number: 79 but max is 0 [ 1504.070465][ T5936] usb 2-1: config 7 has no interface number 0 [ 1504.111673][ T5936] usb 2-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1504.134700][ T5936] usb 2-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 1504.240222][ T10] usb 9-1: USB disconnect, device number 10 [ 1504.287237][ T5936] usb 2-1: config 7 interface 79 has no altsetting 0 [ 1504.322816][ T5936] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 1504.341950][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.390490][ T5936] usb 2-1: Product: syz [ 1504.402670][ T5936] usb 2-1: Manufacturer: syz [ 1504.416617][ T5936] usb 2-1: SerialNumber: syz [ 1504.657713][ T10] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1504.793101][T27073] usb 7-1: USB disconnect, device number 13 [ 1504.884176][T14422] Cannot find add_set index 0 as target [ 1504.890618][T14422] netlink: 'syz.8.4482': attribute type 8 has an invalid length. [ 1505.003772][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1505.043540][ T10] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1505.065592][ T10] usb 9-1: can't read configurations, error -71 [ 1505.506014][T14420] vivid-007: ================= START STATUS ================= [ 1505.513953][T14420] vivid-007: Enable Output Cropping: true [ 1505.519928][T14420] vivid-007: Enable Output Composing: true [ 1505.526031][T14420] vivid-007: Enable Output Scaler: true [ 1505.531933][T14420] vivid-007: Tx RGB Quantization Range: Automatic [ 1505.538510][T14420] vivid-007: Transmit Mode: HDMI [ 1505.543598][T14420] vivid-007: Hotplug Present: 0x00000000 [ 1505.549587][T14420] vivid-007: RxSense Present: 0x00000000 [ 1505.555356][T14420] vivid-007: EDID Present: 0x00000000 [ 1505.561124][T14420] vivid-007: ================== END STATUS ================== [ 1505.987077][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1506.247687][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1506.271414][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.303548][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1506.322118][ T24] usb 7-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 1506.334273][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.389271][ T24] usb 7-1: config 0 descriptor?? [ 1506.622373][T14426] loop6: detected capacity change from 0 to 63 [ 1506.631935][T14426] buffer_io_error: 18 callbacks suppressed [ 1506.631953][T14426] Buffer I/O error on dev loop6, logical block 0, async page read [ 1506.651561][T14426] Buffer I/O error on dev loop6, logical block 0, async page read [ 1506.659915][T14426] Buffer I/O error on dev loop6, logical block 0, async page read [ 1506.672645][T14435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1506.689251][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4486'. [ 1506.714289][T14426] Buffer I/O error on dev loop6, logical block 0, async page read [ 1506.723580][T14426] Buffer I/O error on dev loop6, logical block 0, async page read [ 1506.741557][T14437] netlink: 'syz.7.4486': attribute type 10 has an invalid length. [ 1506.765497][T14426] Buffer I/O error on dev loop6, logical block 0, async page read [ 1506.801235][T14426] Buffer I/O error on dev loop6, logical block 0, async page read [ 1506.822476][T14426] Buffer I/O error on dev loop6, logical block 0, async page read [ 1506.848940][T14426] ldm_validate_partition_table(): Disk read failed. [ 1506.856296][T14426] Buffer I/O error on dev loop6, logical block 0, async page read [ 1506.864910][T14426] Buffer I/O error on dev loop6, logical block 0, async page read [ 1506.881715][T14426] Dev loop6: unable to read RDB block 0 [ 1506.888775][T14426] loop6: unable to read partition table [ 1506.935751][T14426] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1506.986099][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 1506.999153][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1507.039325][ T24] usb 7-1: USB disconnect, device number 14 [ 1507.516392][ T5936] usb 2-1: USB disconnect, device number 89 [ 1507.773607][T14396] FAULT_INJECTION: forcing a failure. [ 1507.773607][T14396] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.794669][T14396] CPU: 1 UID: 0 PID: 14396 Comm: syz.4.4479 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1507.794698][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1507.794712][T14396] Call Trace: [ 1507.794720][T14396] [ 1507.794730][T14396] dump_stack_lvl+0x189/0x250 [ 1507.794768][T14396] ? __pfx____ratelimit+0x10/0x10 [ 1507.794799][T14396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1507.794831][T14396] ? __pfx__printk+0x10/0x10 [ 1507.794860][T14396] ? __pfx___might_resched+0x10/0x10 [ 1507.794896][T14396] should_fail_ex+0x414/0x560 [ 1507.794926][T14396] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 1507.794955][T14396] should_failslab+0xa8/0x100 [ 1507.794978][T14396] __kvmalloc_node_noprof+0x161/0x5f0 [ 1507.795012][T14396] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 1507.795037][T14396] ? alloc_netdev_mqs+0xc36/0x11e0 [ 1507.795068][T14396] alloc_netdev_mqs+0xc9e/0x11e0 [ 1507.795105][T14396] ppp_ioctl+0x634/0x19a0 [ 1507.795145][T14396] ? __pfx_ppp_ioctl+0x10/0x10 [ 1507.795176][T14396] ? __fget_files+0x2a/0x420 [ 1507.795196][T14396] ? __fget_files+0x3a0/0x420 [ 1507.795216][T14396] ? __fget_files+0x2a/0x420 [ 1507.795240][T14396] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1507.795266][T14396] ? __pfx_ppp_ioctl+0x10/0x10 [ 1507.795293][T14396] __se_sys_ioctl+0xf9/0x170 [ 1507.795323][T14396] do_syscall_64+0xfa/0x3b0 [ 1507.795341][T14396] ? lockdep_hardirqs_on+0x9c/0x150 [ 1507.795371][T14396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.795389][T14396] ? clear_bhb_loop+0x60/0xb0 [ 1507.795414][T14396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.795432][T14396] RIP: 0033:0x7efd84f8e929 [ 1507.795450][T14396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1507.795466][T14396] RSP: 002b:00007efd85da8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1507.795486][T14396] RAX: ffffffffffffffda RBX: 00007efd851b6080 RCX: 00007efd84f8e929 [ 1507.795502][T14396] RDX: 0000200000000100 RSI: 00000000c004743e RDI: 0000000000000004 [ 1507.795515][T14396] RBP: 00007efd85da8090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.795527][T14396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.795538][T14396] R13: 0000000000000000 R14: 00007efd851b6080 R15: 00007efd852dfa28 [ 1507.795567][T14396] [ 1508.101311][T14437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.109935][T14437] team0: Port device bond0 added [ 1508.174945][ T5969] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1508.184562][ T5936] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1508.378830][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.391299][ T5969] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.404899][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1508.415292][ T5969] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1508.422494][ T5969] usb 7-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1508.432213][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1508.479718][ T5969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.488557][ T5936] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1508.489313][ T24] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1508.504040][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.514785][ T5969] usb 7-1: config 0 descriptor?? [ 1508.563455][ T5936] usb 2-1: config 0 descriptor?? [ 1508.607969][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1508.739451][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1508.796352][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1508.807781][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1508.824518][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1508.835125][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 58417, setting to 1024 [ 1508.836652][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1508.847065][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1508.884233][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1508.902590][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.914795][T14453] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1508.931819][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1508.941442][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.951055][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1508.954049][ T10] usb 9-1: Product: syz [ 1508.972341][ T10] usb 9-1: Manufacturer: syz [ 1508.984623][T14444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.002215][T14444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.015787][ T10] usb 9-1: SerialNumber: syz [ 1509.038841][T14451] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1509.046811][T14451] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1509.063460][ T5936] plantronics 0003:047F:FFFF.001F: ignoring exceeding usage max [ 1509.086246][ T5969] usbhid 7-1:0.0: can't add hid device: -71 [ 1509.092729][ T5969] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1509.116262][ T5936] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 1509.164080][ T5969] usb 7-1: USB disconnect, device number 15 [ 1509.195327][ T24] usb 5-1: USB disconnect, device number 82 [ 1509.232466][ T5936] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1509.265901][T14451] loop2: detected capacity change from 0 to 7 [ 1509.285851][ T10] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 1509.378338][ T10] usbtest 9-1:1.0: Linux user mode ISO test driver [ 1509.527974][ T10] usbtest 9-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1509.568816][ T10] usb 9-1: USB disconnect, device number 13 [ 1509.980824][ T5969] usb 2-1: USB disconnect, device number 90 [ 1510.760534][T14484] ptrace attach of "./syz-executor exec"[4812] was attempted by "./syz-executor exec"[14484] [ 1511.238189][ T7702] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1511.253289][T14490] libceph: resolve '4..' (ret=-3): failed [ 1512.009766][ T7702] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1512.025919][ T7702] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1512.110715][ T7702] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1512.152689][ T7702] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1512.310403][ T7702] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1512.350310][ T7702] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.422185][ T7702] usb 7-1: config 0 descriptor?? [ 1513.203571][ T7702] usbhid 7-1:0.0: can't add hid device: -71 [ 1513.257896][ T7702] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1513.312023][ T7702] usb 7-1: USB disconnect, device number 16 [ 1513.696017][T14520] FAULT_INJECTION: forcing a failure. [ 1513.696017][T14520] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.815735][T14520] CPU: 0 UID: 0 PID: 14520 Comm: syz.4.4502 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1513.815761][T14520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1513.815770][T14520] Call Trace: [ 1513.815776][T14520] [ 1513.815782][T14520] dump_stack_lvl+0x189/0x250 [ 1513.815807][T14520] ? __pfx____ratelimit+0x10/0x10 [ 1513.815830][T14520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1513.815850][T14520] ? __pfx__printk+0x10/0x10 [ 1513.815868][T14520] ? __pfx___might_resched+0x10/0x10 [ 1513.815889][T14520] ? fs_reclaim_acquire+0x7d/0x100 [ 1513.815907][T14520] should_fail_ex+0x414/0x560 [ 1513.815928][T14520] should_failslab+0xa8/0x100 [ 1513.815943][T14520] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1513.815963][T14520] ? __kernfs_new_node+0xd7/0x7e0 [ 1513.815978][T14520] ? kasan_save_track+0x4f/0x80 [ 1513.815999][T14520] __kernfs_new_node+0xd7/0x7e0 [ 1513.816015][T14520] ? __lock_acquire+0xab9/0xd20 [ 1513.816038][T14520] ? __pfx___kernfs_new_node+0x10/0x10 [ 1513.816054][T14520] ? kernfs_root+0x1c/0x230 [ 1513.816081][T14520] ? kernfs_root+0x1c/0x230 [ 1513.816095][T14520] ? kernfs_root+0x1c/0x230 [ 1513.816109][T14520] ? kernfs_root+0x1c/0x230 [ 1513.816127][T14520] kernfs_new_node+0x102/0x210 [ 1513.816147][T14520] __kernfs_create_file+0x4b/0x2e0 [ 1513.816169][T14520] sysfs_add_file_mode_ns+0x238/0x300 [ 1513.816187][T14520] internal_create_group+0x66d/0x1110 [ 1513.816214][T14520] ? __pfx_internal_create_group+0x10/0x10 [ 1513.816231][T14520] ? kernfs_add_one+0xf0/0x520 [ 1513.816251][T14520] sysfs_create_groups+0x59/0x120 [ 1513.816269][T14520] device_add_attrs+0x13f/0x5a0 [ 1513.816288][T14520] ? __pfx_device_add_attrs+0x10/0x10 [ 1513.816305][T14520] ? device_add_class_symlinks+0x21f/0x240 [ 1513.816321][T14520] device_add+0x496/0xb50 [ 1513.816337][T14520] input_register_device+0x9ca/0x10b0 [ 1513.816359][T14520] uinput_create_device+0x422/0x670 [ 1513.816377][T14520] ? __lock_acquire+0xab9/0xd20 [ 1513.816398][T14520] uinput_ioctl_handler+0x3f0/0x1570 [ 1513.816419][T14520] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1513.816446][T14520] ? __fget_files+0x2a/0x420 [ 1513.816460][T14520] ? __fget_files+0x3a0/0x420 [ 1513.816478][T14520] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1513.816497][T14520] ? __pfx_uinput_ioctl+0x10/0x10 [ 1513.816515][T14520] __se_sys_ioctl+0xf9/0x170 [ 1513.816536][T14520] do_syscall_64+0xfa/0x3b0 [ 1513.816548][T14520] ? lockdep_hardirqs_on+0x9c/0x150 [ 1513.816568][T14520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.816581][T14520] ? clear_bhb_loop+0x60/0xb0 [ 1513.816596][T14520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.816609][T14520] RIP: 0033:0x7efd84f8e929 [ 1513.816621][T14520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1513.816632][T14520] RSP: 002b:00007efd85dc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1513.816646][T14520] RAX: ffffffffffffffda RBX: 00007efd851b5fa0 RCX: 00007efd84f8e929 [ 1513.816656][T14520] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1513.816664][T14520] RBP: 00007efd85dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1513.816672][T14520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1513.816680][T14520] R13: 0000000000000000 R14: 00007efd851b5fa0 R15: 00007efd852dfa28 [ 1513.816699][T14520] [ 1516.106415][ T13] ip6gretap0 (unregistering): left allmulticast mode [ 1516.155073][ T5936] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1516.358263][ T5936] usb 7-1: config 0 has no interfaces? [ 1516.369231][ T5936] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1516.394118][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.432568][ T5936] usb 7-1: Product: syz [ 1516.447365][ T5936] usb 7-1: Manufacturer: syz [ 1516.473880][ T5936] usb 7-1: SerialNumber: syz [ 1516.521056][ T5936] usb 7-1: config 0 descriptor?? [ 1516.842842][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4508'. [ 1518.341672][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1518.352620][ T13] bond_slave_0: left promiscuous mode [ 1518.386277][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.398479][ T13] bond_slave_1: left promiscuous mode [ 1518.407768][ T13] bond0 (unregistering): Released all slaves [ 1518.647519][ T13] tipc: Disabling bearer [ 1518.673628][ T13] tipc: Left network mode [ 1518.723663][ T13] IPVS: stopping master sync thread 13637 ... [ 1518.809353][T14573] [U] [ 1518.886721][T14578] input: syz0 as /devices/virtual/input/input94 [ 1518.977463][T14573] syzkaller0: entered promiscuous mode [ 1519.014475][T14573] syzkaller0: entered allmulticast mode [ 1519.065570][T14584] fuse: Unknown parameter 'group_il' [ 1519.237227][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4519'. [ 1519.384417][T14597] netlink: 'syz.8.4520': attribute type 10 has an invalid length. [ 1519.625320][ T24] usb 7-1: USB disconnect, device number 17 [ 1519.736935][T14609] FAULT_INJECTION: forcing a failure. [ 1519.736935][T14609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1519.811887][T14609] CPU: 0 UID: 0 PID: 14609 Comm: syz.7.4525 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1519.811916][T14609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1519.811929][T14609] Call Trace: [ 1519.811937][T14609] [ 1519.811946][T14609] dump_stack_lvl+0x189/0x250 [ 1519.811982][T14609] ? __pfx____ratelimit+0x10/0x10 [ 1519.812013][T14609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1519.812043][T14609] ? __pfx__printk+0x10/0x10 [ 1519.812066][T14609] ? __might_fault+0xb0/0x130 [ 1519.812095][T14609] should_fail_ex+0x414/0x560 [ 1519.812126][T14609] _copy_from_user+0x2d/0xb0 [ 1519.812141][T14609] ___sys_recvmsg+0x12e/0x510 [ 1519.812164][T14609] ? __pfx____sys_recvmsg+0x10/0x10 [ 1519.812204][T14609] ? __might_fault+0xb0/0x130 [ 1519.812219][T14609] do_recvmmsg+0x307/0x770 [ 1519.812244][T14609] ? __pfx_do_recvmmsg+0x10/0x10 [ 1519.812272][T14609] ? do_sys_openat2+0x154/0x1c0 [ 1519.812289][T14609] ? kmem_cache_free+0x18f/0x400 [ 1519.812311][T14609] __x64_sys_recvmmsg+0x190/0x240 [ 1519.812332][T14609] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1519.812350][T14609] ? rcu_is_watching+0x15/0xb0 [ 1519.812375][T14609] ? do_syscall_64+0xbe/0x3b0 [ 1519.812401][T14609] do_syscall_64+0xfa/0x3b0 [ 1519.812412][T14609] ? lockdep_hardirqs_on+0x9c/0x150 [ 1519.812431][T14609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.812443][T14609] ? clear_bhb_loop+0x60/0xb0 [ 1519.812459][T14609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.812471][T14609] RIP: 0033:0x7f337bf8e929 [ 1519.812485][T14609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1519.812496][T14609] RSP: 002b:00007f337cd62038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1519.812510][T14609] RAX: ffffffffffffffda RBX: 00007f337c1b5fa0 RCX: 00007f337bf8e929 [ 1519.812520][T14609] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 1519.812529][T14609] RBP: 00007f337cd62090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.812537][T14609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1519.812545][T14609] R13: 0000000000000000 R14: 00007f337c1b5fa0 R15: 00007f337c2dfa28 [ 1519.812563][T14609] [ 1520.580934][T14629] fuse: Bad value for 'fd' [ 1521.564297][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4529'. [ 1521.610284][T14642] fuse: Bad value for 'fd' [ 1521.785556][ T13] hsr_slave_0: left promiscuous mode [ 1521.809411][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4534'. [ 1521.839355][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1521.938028][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.982511][ T303] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1521.991661][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1522.030251][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.162210][ T13] veth1_macvtap: left promiscuous mode [ 1522.189492][ T13] veth0_macvtap: left promiscuous mode [ 1522.212479][ T303] usb 9-1: Using ep0 maxpacket: 8 [ 1522.213130][ T13] veth1_vlan: left promiscuous mode [ 1522.256093][ T13] veth0_vlan: left promiscuous mode [ 1522.257914][ T303] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1522.317721][ T303] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1522.367307][ T303] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1522.514308][ T303] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1522.647719][ T303] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1522.666008][ T303] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.714114][T14658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1522.982012][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4533'. [ 1524.075270][ T13] team_slave_1 (unregistering): left promiscuous mode [ 1524.093767][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1524.146803][ T13] team_slave_0 (unregistering): left promiscuous mode [ 1524.156687][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1524.681984][ T303] usb 9-1: usb_control_msg returned -71 [ 1524.715366][ T303] usbtmc 9-1:16.0: can't read capabilities [ 1524.747327][ T303] usb 9-1: USB disconnect, device number 14 [ 1524.844161][T14636] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1524.853487][T14636] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1524.862681][T14636] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1524.871821][T14636] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1524.910186][T14636] vxlan0: entered promiscuous mode [ 1524.916192][T14636] vxlan0: entered allmulticast mode [ 1525.532731][T14661] bond0: (slave bridge0): Releasing backup interface [ 1525.575135][T14661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.582660][T14661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.879035][T14661] team0: Port device bond0 removed [ 1525.959517][T14683] Cannot find set identified by id 0 to match [ 1525.989311][T14661] bridge_slave_0: left allmulticast mode [ 1526.013994][T14661] bridge_slave_0: left promiscuous mode [ 1526.043006][T14661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.093452][T14661] bridge_slave_1: left allmulticast mode [ 1526.102524][T14661] bridge_slave_1: left promiscuous mode [ 1526.110314][T14661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.144168][T14661] bond0: (slave bond_slave_0): Releasing backup interface [ 1526.191587][T14661] bond0: (slave bond_slave_1): Releasing backup interface [ 1526.214182][T14661] team0: Port device team_slave_0 removed [ 1526.272880][T14688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4542'. [ 1526.292259][T14661] team0: Port device team_slave_1 removed [ 1526.338941][T14661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1526.352099][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4542'. [ 1526.378861][T14661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1526.501960][T14661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1526.515285][T14661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1526.588930][T14670] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1526.595782][T14675] kthread_run failed with err -4 [ 1526.827157][T14690] input: syz1 as /devices/virtual/input/input95 [ 1526.836488][T14697] FAULT_INJECTION: forcing a failure. [ 1526.836488][T14697] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1527.045522][T14697] CPU: 0 UID: 0 PID: 14697 Comm: syz.4.4545 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1527.045550][T14697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1527.045562][T14697] Call Trace: [ 1527.045569][T14697] [ 1527.045578][T14697] dump_stack_lvl+0x189/0x250 [ 1527.045612][T14697] ? __pfx____ratelimit+0x10/0x10 [ 1527.045639][T14697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1527.045667][T14697] ? __pfx__printk+0x10/0x10 [ 1527.045689][T14697] ? fs_reclaim_acquire+0x7d/0x100 [ 1527.045719][T14697] should_fail_ex+0x414/0x560 [ 1527.045748][T14697] prepare_alloc_pages+0x213/0x610 [ 1527.045776][T14697] __alloc_frozen_pages_noprof+0x123/0x370 [ 1527.045803][T14697] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1527.045830][T14697] ? __pfx_mas_wr_store_entry+0x10/0x10 [ 1527.045854][T14697] ? unwind_get_return_address+0x4d/0x90 [ 1527.045883][T14697] ? policy_nodemask+0x27c/0x720 [ 1527.045907][T14697] alloc_pages_mpol+0x232/0x4a0 [ 1527.045932][T14697] alloc_pages_noprof+0xa9/0x190 [ 1527.045953][T14697] __pud_alloc+0x3a/0x260 [ 1527.045986][T14697] __handle_mm_fault+0x3573/0x5620 [ 1527.046020][T14697] ? mt_find+0x15c/0x5f0 [ 1527.046039][T14697] ? mt_find+0x46f/0x5f0 [ 1527.046058][T14697] ? __pfx___handle_mm_fault+0x10/0x10 [ 1527.046104][T14697] ? __pfx___might_resched+0x10/0x10 [ 1527.046137][T14697] handle_mm_fault+0x40a/0x8e0 [ 1527.046175][T14697] __get_user_pages+0x1af4/0x30b0 [ 1527.046252][T14697] ? __pfx___get_user_pages+0x10/0x10 [ 1527.046290][T14697] get_user_pages_remote+0x2f9/0xaa0 [ 1527.046329][T14697] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1527.046363][T14697] ? down_read+0x1ad/0x2e0 [ 1527.046388][T14697] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 1527.046415][T14697] get_arg_page+0x104/0x330 [ 1527.046446][T14697] ? __pfx_get_arg_page+0x10/0x10 [ 1527.046477][T14697] ? create_init_stack_vma+0x523/0x680 [ 1527.046513][T14697] copy_string_kernel+0x191/0x2a0 [ 1527.046547][T14697] do_execveat_common+0x3c5/0x6a0 [ 1527.046577][T14697] __x64_sys_execveat+0xc4/0xe0 [ 1527.046612][T14697] do_syscall_64+0xfa/0x3b0 [ 1527.046630][T14697] ? lockdep_hardirqs_on+0x9c/0x150 [ 1527.046659][T14697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.046678][T14697] ? clear_bhb_loop+0x60/0xb0 [ 1527.046702][T14697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.046721][T14697] RIP: 0033:0x7efd84f8e929 [ 1527.046738][T14697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1527.046754][T14697] RSP: 002b:00007efd85dc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1527.046785][T14697] RAX: ffffffffffffffda RBX: 00007efd851b5fa0 RCX: 00007efd84f8e929 [ 1527.046799][T14697] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1527.046810][T14697] RBP: 00007efd85dc9090 R08: 0000000000001000 R09: 0000000000000000 [ 1527.046822][T14697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1527.046832][T14697] R13: 0000000000000000 R14: 00007efd851b5fa0 R15: 00007efd852dfa28 [ 1527.046878][T14697] [ 1527.054898][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4544'. [ 1527.367790][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4544'. [ 1527.445819][T14693] bond1: entered promiscuous mode [ 1527.451484][T14693] bond1: entered allmulticast mode [ 1527.457435][T14693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1527.468068][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.476671][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.669604][ T7702] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1527.819980][ T7702] usb 7-1: device descriptor read/64, error -71 [ 1528.033738][T14693] bond1 (unregistering): Released all slaves [ 1528.077910][ T7702] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1528.247755][ T7702] usb 7-1: device descriptor read/64, error -71 [ 1528.359764][ T7702] usb usb7-port1: attempt power cycle [ 1528.421181][T14722] netlink: 'syz.8.4550': attribute type 4 has an invalid length. [ 1528.740282][ T7702] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1528.798429][ T7702] usb 7-1: device descriptor read/8, error -71 [ 1529.057683][ T7702] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1529.092889][ T7702] usb 7-1: device descriptor read/8, error -71 [ 1529.147778][ T5841] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1529.218892][ T7702] usb usb7-port1: unable to enumerate USB device [ 1529.351962][ T5841] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1529.454634][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.526391][ T5841] usb 2-1: config 0 descriptor?? [ 1529.556095][ T5841] cp210x 2-1:0.0: cp210x converter detected [ 1530.045200][ T5841] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1530.208963][ T5936] usb 2-1: USB disconnect, device number 91 [ 1530.334839][ T5936] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1530.370825][ T5936] cp210x 2-1:0.0: device disconnected [ 1530.385544][T14731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4551'. [ 1530.401089][T14731] 8021q: VLANs not supported on gre0 [ 1530.994825][T14764] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4555'. [ 1531.147860][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4555'. [ 1532.100457][T14785] vivid-000: disconnect [ 1532.588021][T14780] vivid-000: reconnect [ 1533.077692][ T7702] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1533.268901][ T7702] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1533.316421][ T7702] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1533.362167][ T7702] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1533.382577][ T7702] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1533.438244][ T7702] usb 9-1: SerialNumber: syz [ 1533.475182][ T7702] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1533.635433][ T7702] usb-storage 9-1:1.0: USB Mass Storage device detected [ 1533.653655][ T7702] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1533.654148][ T7702] scsi host1: usb-storage 9-1:1.0 [ 1534.121016][T14809] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1534.838029][ T7702] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1535.000010][ T7702] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 1535.000039][ T7702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.000057][ T7702] usb 2-1: config 0 has no interface number 0 [ 1535.000091][ T7702] usb 2-1: config 0 interface 126 has no altsetting 0 [ 1535.002265][ T7702] usb 2-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 1535.002291][ T7702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.002310][ T7702] usb 2-1: Product: syz [ 1535.002324][ T7702] usb 2-1: Manufacturer: syz [ 1535.002338][ T7702] usb 2-1: SerialNumber: syz [ 1535.005804][ T7702] usb 2-1: config 0 descriptor?? [ 1535.011083][ T7702] zaurus 2-1:0.126: More than one union descriptor, skipping ... [ 1535.011103][ T7702] zaurus 2-1:0.126: skipping garbage [ 1535.011118][ T7702] usb 2-1: bad CDC descriptors [ 1536.159493][T14843] fuse: Unknown parameter 'grou00000000000000000000' [ 1536.291599][ T5936] usb 9-1: USB disconnect, device number 15 [ 1536.416344][T14846] kernel read not supported for file /eth0 (pid: 14846 comm: syz.4.4571) [ 1536.427912][T14848] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4572'. [ 1536.482480][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1536.482498][ T30] audit: type=1800 audit(1749627524.738:3191): pid=14846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4571" name="eth0" dev="mqueue" ino=68475 res=0 errno=0 [ 1537.419942][ T24] usb 2-1: USB disconnect, device number 92 [ 1537.633164][T14873] vivid-000: disconnect [ 1538.189630][T14879] loop8: detected capacity change from 0 to 1 [ 1538.196774][T14879] buffer_io_error: 13 callbacks suppressed [ 1538.196791][T14879] Buffer I/O error on dev loop8, logical block 0, async page read [ 1538.211579][T14879] Buffer I/O error on dev loop8, logical block 0, async page read [ 1538.219686][T14879] Buffer I/O error on dev loop8, logical block 0, async page read [ 1538.227720][T14879] Buffer I/O error on dev loop8, logical block 0, async page read [ 1538.235779][T14879] Buffer I/O error on dev loop8, logical block 0, async page read [ 1538.243857][T14879] ldm_validate_partition_table(): Disk read failed. [ 1538.250637][T14879] Buffer I/O error on dev loop8, logical block 0, async page read [ 1538.258704][T14879] Buffer I/O error on dev loop8, logical block 0, async page read [ 1538.266763][T14879] Buffer I/O error on dev loop8, logical block 0, async page read [ 1538.274841][T14879] Buffer I/O error on dev loop8, logical block 0, async page read [ 1538.283061][T14879] Dev loop8: unable to read RDB block 0 [ 1538.288857][T14879] Buffer I/O error on dev loop8, logical block 0, async page read [ 1538.297421][T14879] loop8: unable to read partition table [ 1538.303403][T14879] loop8: partition table beyond EOD, truncated [ 1538.309744][T14879] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1538.387231][T14862] vivid-000: reconnect [ 1540.977235][T14911] netlink: 'syz.8.4583': attribute type 12 has an invalid length. [ 1541.005840][T14911] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4583'. [ 1541.107713][ T5969] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1541.268721][ T5969] usb 2-1: Using ep0 maxpacket: 8 [ 1541.282806][ T5969] usb 2-1: config 1 has an invalid descriptor of length 20, skipping remainder of the config [ 1541.294518][ T5969] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 832 [ 1541.344201][ T5969] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1541.365538][ T5969] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1541.375499][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.386140][ T5969] usb 2-1: Product: syz [ 1541.390553][ T5969] usb 2-1: Manufacturer: syz [ 1541.473246][ T5969] usb 2-1: SerialNumber: syz [ 1541.506419][T14914] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1541.516532][ T5969] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1541.590835][ T5969] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1541.629250][ T5969] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1541.741818][T14937] FAULT_INJECTION: forcing a failure. [ 1541.741818][T14937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1541.805929][T14912] loop2: detected capacity change from 0 to 7 [ 1541.824236][ T5969] usb 2-1: USB disconnect, device number 93 [ 1542.056490][T14937] CPU: 0 UID: 0 PID: 14937 Comm: syz.4.4589 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1542.056518][T14937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1542.056533][T14937] Call Trace: [ 1542.056541][T14937] [ 1542.056550][T14937] dump_stack_lvl+0x189/0x250 [ 1542.056582][T14937] ? __pfx____ratelimit+0x10/0x10 [ 1542.056611][T14937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1542.056639][T14937] ? __pfx__printk+0x10/0x10 [ 1542.056660][T14937] ? __might_fault+0xb0/0x130 [ 1542.056688][T14937] should_fail_ex+0x414/0x560 [ 1542.056718][T14937] _copy_to_iter+0x3f5/0x16f0 [ 1542.056757][T14937] ? __pfx__copy_to_iter+0x10/0x10 [ 1542.056800][T14937] seq_read_iter+0xbeb/0xe10 [ 1542.056846][T14937] seq_read+0x2e2/0x3d0 [ 1542.056882][T14937] ? __pfx_seq_read+0x10/0x10 [ 1542.056906][T14937] ? __mutex_trylock_common+0x153/0x260 [ 1542.056943][T14937] ? __pfx_seq_read+0x10/0x10 [ 1542.056967][T14937] proc_reg_read+0x1e9/0x2e0 [ 1542.056993][T14937] ? __pfx_proc_reg_read+0x10/0x10 [ 1542.057016][T14937] vfs_read+0x200/0x980 [ 1542.057045][T14937] ? __pfx___mutex_lock+0x10/0x10 [ 1542.057064][T14937] ? __pfx_vfs_read+0x10/0x10 [ 1542.057093][T14937] ? __fget_files+0x2a/0x420 [ 1542.057118][T14937] ? __fget_files+0x3a0/0x420 [ 1542.057137][T14937] ? __fget_files+0x2a/0x420 [ 1542.057166][T14937] ksys_read+0x145/0x250 [ 1542.057185][T14937] ? __pfx_ksys_read+0x10/0x10 [ 1542.057211][T14937] ? rcu_is_watching+0x15/0xb0 [ 1542.057244][T14937] ? do_syscall_64+0xbe/0x3b0 [ 1542.057273][T14937] do_syscall_64+0xfa/0x3b0 [ 1542.057290][T14937] ? lockdep_hardirqs_on+0x9c/0x150 [ 1542.057317][T14937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.057335][T14937] ? clear_bhb_loop+0x60/0xb0 [ 1542.057359][T14937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.057377][T14937] RIP: 0033:0x7efd84f8e929 [ 1542.057394][T14937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1542.057410][T14937] RSP: 002b:00007efd85dc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1542.057429][T14937] RAX: ffffffffffffffda RBX: 00007efd851b5fa0 RCX: 00007efd84f8e929 [ 1542.057444][T14937] RDX: 000000000000100f RSI: 0000200000001540 RDI: 0000000000000004 [ 1542.057456][T14937] RBP: 00007efd85dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.057468][T14937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.057479][T14937] R13: 0000000000000000 R14: 00007efd851b5fa0 R15: 00007efd852dfa28 [ 1542.057507][T14937] [ 1542.305471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1542.606770][T14945] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4592'. [ 1542.610862][T14946] vivid-000: disconnect [ 1542.929796][T14932] vivid-000: reconnect [ 1543.497715][ T5841] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1543.707840][ T5841] usb 9-1: Using ep0 maxpacket: 16 [ 1543.721987][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4594'. [ 1543.783980][T14957] macvlan3: entered promiscuous mode [ 1543.837082][T14957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.848287][T14957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.865230][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4594'. [ 1544.330623][T14978] FAULT_INJECTION: forcing a failure. [ 1544.330623][T14978] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.359485][T14986] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4598'. [ 1544.397453][T14978] CPU: 1 UID: 0 PID: 14978 Comm: syz.4.4599 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1544.397482][T14978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1544.397495][T14978] Call Trace: [ 1544.397503][T14978] [ 1544.397512][T14978] dump_stack_lvl+0x189/0x250 [ 1544.397550][T14978] ? __pfx____ratelimit+0x10/0x10 [ 1544.397581][T14978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1544.397612][T14978] ? __pfx__printk+0x10/0x10 [ 1544.397639][T14978] ? __pfx___might_resched+0x10/0x10 [ 1544.397668][T14978] ? fs_reclaim_acquire+0x7d/0x100 [ 1544.397707][T14978] should_fail_ex+0x414/0x560 [ 1544.397734][T14978] should_failslab+0xa8/0x100 [ 1544.397756][T14978] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1544.397775][T14978] ? __alloc_skb+0x112/0x2d0 [ 1544.397800][T14978] __alloc_skb+0x112/0x2d0 [ 1544.397825][T14978] netlink_ack+0x146/0xa50 [ 1544.397845][T14978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1544.397863][T14978] ? ref_tracker_free+0x63a/0x7d0 [ 1544.397886][T14978] ? __copy_skb_header+0xa7/0x550 [ 1544.397912][T14978] ? __pfx_ref_tracker_free+0x10/0x10 [ 1544.397937][T14978] ? __skb_clone+0x63/0x7a0 [ 1544.397968][T14978] netlink_rcv_skb+0x28c/0x470 [ 1544.397991][T14978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1544.398012][T14978] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1544.398046][T14978] ? netlink_deliver_tap+0x2e/0x1b0 [ 1544.398067][T14978] ? netlink_deliver_tap+0x2e/0x1b0 [ 1544.398094][T14978] netlink_unicast+0x75b/0x8d0 [ 1544.398124][T14978] netlink_sendmsg+0x805/0xb30 [ 1544.398156][T14978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1544.398182][T14978] ? aa_sock_msg_perm+0x94/0x160 [ 1544.398206][T14978] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1544.398230][T14978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1544.398253][T14978] __sock_sendmsg+0x219/0x270 [ 1544.398285][T14978] ____sys_sendmsg+0x505/0x830 [ 1544.398314][T14978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1544.398346][T14978] ? import_iovec+0x74/0xa0 [ 1544.398369][T14978] ___sys_sendmsg+0x21f/0x2a0 [ 1544.398401][T14978] ? __pfx____sys_sendmsg+0x10/0x10 [ 1544.398457][T14978] ? __fget_files+0x2a/0x420 [ 1544.398477][T14978] ? __fget_files+0x3a0/0x420 [ 1544.398507][T14978] __x64_sys_sendmsg+0x19b/0x260 [ 1544.398533][T14978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1544.398566][T14978] ? __pfx_ksys_write+0x10/0x10 [ 1544.398581][T14978] ? rcu_is_watching+0x15/0xb0 [ 1544.398613][T14978] ? do_syscall_64+0xbe/0x3b0 [ 1544.398634][T14978] do_syscall_64+0xfa/0x3b0 [ 1544.398650][T14978] ? lockdep_hardirqs_on+0x9c/0x150 [ 1544.398695][T14978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.398716][T14978] ? clear_bhb_loop+0x60/0xb0 [ 1544.398742][T14978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.398763][T14978] RIP: 0033:0x7efd84f8e929 [ 1544.398783][T14978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1544.398802][T14978] RSP: 002b:00007efd85dc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1544.398824][T14978] RAX: ffffffffffffffda RBX: 00007efd851b5fa0 RCX: 00007efd84f8e929 [ 1544.398841][T14978] RDX: 0000000020000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 1544.398856][T14978] RBP: 00007efd85dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.398869][T14978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1544.398882][T14978] R13: 0000000000000000 R14: 00007efd851b5fa0 R15: 00007efd852dfa28 [ 1544.398915][T14978] [ 1544.875073][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4598'. [ 1545.486029][T14999] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1545.492708][T14999] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1545.545509][T14999] vhci_hcd vhci_hcd.0: Device attached [ 1545.563424][T15002] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 1545.563424][T15002] program syz.4.4600 not setting count and/or reply_len properly [ 1545.727742][ T7702] vhci_hcd: vhci_device speed not set [ 1545.819188][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.830252][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.860260][ T7702] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1546.202725][T15000] vhci_hcd: connection reset by peer [ 1546.220330][ T801] vhci_hcd: stop threads [ 1546.231672][ T801] vhci_hcd: release socket [ 1546.246159][ T801] vhci_hcd: disconnect device [ 1546.355628][ T5841] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1546.427960][T15010] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4602'. [ 1546.500035][ T5841] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1546.513168][ T5841] usb 9-1: can't read configurations, error -71 [ 1546.785326][T15022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4605'. [ 1547.254627][T15036] usb usb8: usbfs: process 15036 (syz.6.4607) did not claim interface 0 before use [ 1547.437853][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1547.654259][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1547.661584][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.673103][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.684035][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1547.696708][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1547.999771][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.115355][ T24] usb 2-1: config 0 descriptor?? [ 1548.296488][T15048] netlink: 'syz.7.4612': attribute type 10 has an invalid length. [ 1548.322317][T15048] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4612'. [ 1548.341487][T15050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.360242][T15050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.370044][T15048] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1548.399868][T15048] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1548.432977][T15055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1548.468240][T15048] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1548.567708][ T5936] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1548.582089][T15028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.619394][T15028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.672613][ T24] hid (null): bogus close delimiter [ 1548.685869][ T24] hid (null): report_id 0 is invalid [ 1548.691567][ T24] hid (null): invalid report_size 4076 [ 1548.712393][ T24] hid (null): unknown global tag 0xc [ 1548.722528][ T24] hid (null): invalid report_size 59118 [ 1548.732892][ T24] hid (null): unknown global tag 0xd [ 1548.748767][ T24] hid (null): unknown global tag 0x55 [ 1548.764303][ T5936] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1548.789843][ T5936] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1548.792237][ T24] hid (null): unknown global tag 0xe [ 1548.815803][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.832897][ T5936] usb 7-1: Product: syz [ 1548.837715][T15069] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4616'. [ 1548.848284][ T24] hid (null): unknown global tag 0xd [ 1548.857247][ T5936] usb 7-1: Manufacturer: syz [ 1548.863067][ T24] hid (null): invalid report_size 460700670 [ 1548.864818][ T5936] usb 7-1: SerialNumber: syz [ 1548.886155][ T24] hid (null): report_id 0 is invalid [ 1548.887301][ T5936] usb 7-1: config 0 descriptor?? [ 1548.935105][ T5936] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1548.958595][T15076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4608'. [ 1548.988285][T15028] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4608'. [ 1548.998611][ T24] hid (null): unknown global tag 0x56 [ 1549.172441][ T5936] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1549.196473][ T5936] sq905c 7-1:0.0: Get version command failed [ 1549.204534][ T24] usb 2-1: USB disconnect, device number 94 [ 1549.264529][ T5936] sq905c 7-1:0.0: probe with driver sq905c failed with error -71 [ 1549.297715][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1549.346319][ T5936] usb 7-1: USB disconnect, device number 22 [ 1549.484080][ T10] usb 9-1: config 0 has no interfaces? [ 1549.490946][T15087] FAULT_INJECTION: forcing a failure. [ 1549.490946][T15087] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.522148][ T10] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1549.540192][T15087] CPU: 1 UID: 0 PID: 15087 Comm: syz.4.4621 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1549.540213][T15087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1549.540221][T15087] Call Trace: [ 1549.540244][T15087] [ 1549.540251][T15087] dump_stack_lvl+0x189/0x250 [ 1549.540284][T15087] ? __pfx____ratelimit+0x10/0x10 [ 1549.540314][T15087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1549.540345][T15087] ? __pfx__printk+0x10/0x10 [ 1549.540362][T15087] ? __pfx___might_resched+0x10/0x10 [ 1549.540384][T15087] ? fs_reclaim_acquire+0x7d/0x100 [ 1549.540404][T15087] should_fail_ex+0x414/0x560 [ 1549.540425][T15087] should_failslab+0xa8/0x100 [ 1549.540442][T15087] __kmalloc_noprof+0xcb/0x4f0 [ 1549.540453][T15087] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1549.540474][T15087] ? sock_kmalloc+0xd6/0x160 [ 1549.540496][T15087] sock_kmalloc+0xd6/0x160 [ 1549.540516][T15087] hash_recvmsg+0x1d4/0x840 [ 1549.540539][T15087] ? __pfx_hash_recvmsg+0x10/0x10 [ 1549.540557][T15087] sock_recvmsg_nosec+0x186/0x1c0 [ 1549.540584][T15087] ____sys_recvmsg+0x3aa/0x460 [ 1549.540608][T15087] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1549.540635][T15087] ? import_iovec+0x74/0xa0 [ 1549.540651][T15087] ___sys_recvmsg+0x1b5/0x510 [ 1549.540672][T15087] ? __pfx____sys_recvmsg+0x10/0x10 [ 1549.540709][T15087] ? __might_fault+0xb0/0x130 [ 1549.540724][T15087] do_recvmmsg+0x307/0x770 [ 1549.540746][T15087] ? __pfx_do_recvmmsg+0x10/0x10 [ 1549.540772][T15087] ? do_sys_openat2+0x154/0x1c0 [ 1549.540788][T15087] ? kmem_cache_free+0x18f/0x400 [ 1549.540809][T15087] __x64_sys_recvmmsg+0x190/0x240 [ 1549.540829][T15087] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1549.540845][T15087] ? rcu_is_watching+0x15/0xb0 [ 1549.540872][T15087] ? do_syscall_64+0xbe/0x3b0 [ 1549.540887][T15087] do_syscall_64+0xfa/0x3b0 [ 1549.540899][T15087] ? lockdep_hardirqs_on+0x9c/0x150 [ 1549.540918][T15087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.540931][T15087] ? clear_bhb_loop+0x60/0xb0 [ 1549.540947][T15087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.540960][T15087] RIP: 0033:0x7efd84f8e929 [ 1549.540972][T15087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1549.540983][T15087] RSP: 002b:00007efd85dc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1549.540997][T15087] RAX: ffffffffffffffda RBX: 00007efd851b5fa0 RCX: 00007efd84f8e929 [ 1549.541007][T15087] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 1549.541015][T15087] RBP: 00007efd85dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.541023][T15087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.541031][T15087] R13: 0000000000000000 R14: 00007efd851b5fa0 R15: 00007efd852dfa28 [ 1549.541050][T15087] [ 1549.819150][ C1] vkms_vblank_simulate: vblank timer overrun [ 1549.825322][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.833532][ T10] usb 9-1: Product: syz [ 1549.837767][ T10] usb 9-1: Manufacturer: syz [ 1549.842399][ T10] usb 9-1: SerialNumber: syz [ 1549.849859][ T10] usb 9-1: config 0 descriptor?? [ 1550.403203][T15075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.569121][T15103] FAULT_INJECTION: forcing a failure. [ 1550.569121][T15103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1550.765858][T15103] CPU: 1 UID: 0 PID: 15103 Comm: syz.1.4623 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1550.765888][T15103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1550.765901][T15103] Call Trace: [ 1550.765908][T15103] [ 1550.765917][T15103] dump_stack_lvl+0x189/0x250 [ 1550.765951][T15103] ? __pfx____ratelimit+0x10/0x10 [ 1550.765980][T15103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1550.766010][T15103] ? __pfx__printk+0x10/0x10 [ 1550.766030][T15103] ? __might_fault+0xb0/0x130 [ 1550.766059][T15103] should_fail_ex+0x414/0x560 [ 1550.766088][T15103] _copy_from_user+0x2d/0xb0 [ 1550.766108][T15103] snd_seq_oss_write+0x515/0x930 [ 1550.766142][T15103] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1550.766173][T15103] ? common_file_perm+0x199/0x200 [ 1550.766205][T15103] ? security_file_permission+0x75/0x290 [ 1550.766237][T15103] odev_write+0x5a/0x80 [ 1550.766260][T15103] ? __pfx_odev_write+0x10/0x10 [ 1550.766286][T15103] vfs_write+0x27e/0xa90 [ 1550.766323][T15103] ? __pfx_vfs_write+0x10/0x10 [ 1550.766353][T15103] ? __fget_files+0x2a/0x420 [ 1550.766377][T15103] ? __fget_files+0x2a/0x420 [ 1550.766396][T15103] ? __fget_files+0x3a0/0x420 [ 1550.766415][T15103] ? __fget_files+0x2a/0x420 [ 1550.766444][T15103] ksys_write+0x145/0x250 [ 1550.766464][T15103] ? __pfx_ksys_write+0x10/0x10 [ 1550.766486][T15103] ? do_syscall_64+0xbe/0x3b0 [ 1550.766507][T15103] do_syscall_64+0xfa/0x3b0 [ 1550.766524][T15103] ? lockdep_hardirqs_on+0x9c/0x150 [ 1550.766552][T15103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.766571][T15103] ? clear_bhb_loop+0x60/0xb0 [ 1550.766593][T15103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.766611][T15103] RIP: 0033:0x7f5ee018e929 [ 1550.766627][T15103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1550.766643][T15103] RSP: 002b:00007f5ee10a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1550.766662][T15103] RAX: ffffffffffffffda RBX: 00007f5ee03b6080 RCX: 00007f5ee018e929 [ 1550.766676][T15103] RDX: 0000000000000232 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1550.766687][T15103] RBP: 00007f5ee10a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.766699][T15103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.766710][T15103] R13: 0000000000000001 R14: 00007f5ee03b6080 R15: 00007f5ee04dfa28 [ 1550.766737][T15103] [ 1551.002327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.023357][T15075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.087696][ T7702] vhci_hcd: vhci_device speed not set [ 1551.365394][T15073] xt_CT: No such helper "syz0" [ 1551.422352][T15120] FAULT_INJECTION: forcing a failure. [ 1551.422352][T15120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1551.464608][T15120] CPU: 1 UID: 0 PID: 15120 Comm: syz.1.4630 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1551.464640][T15120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1551.464655][T15120] Call Trace: [ 1551.464664][T15120] [ 1551.464674][T15120] dump_stack_lvl+0x189/0x250 [ 1551.464713][T15120] ? __pfx____ratelimit+0x10/0x10 [ 1551.464746][T15120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1551.464781][T15120] ? __pfx__printk+0x10/0x10 [ 1551.464804][T15120] ? __might_fault+0xb0/0x130 [ 1551.464836][T15120] should_fail_ex+0x414/0x560 [ 1551.464870][T15120] _copy_from_user+0x2d/0xb0 [ 1551.464894][T15120] kstrtouint_from_user+0xc4/0x170 [ 1551.464929][T15120] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1551.464980][T15120] proc_fail_nth_write+0x88/0x240 [ 1551.465014][T15120] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1551.465048][T15120] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1551.465076][T15120] vfs_write+0x27e/0xa90 [ 1551.465118][T15120] ? __pfx_vfs_write+0x10/0x10 [ 1551.465153][T15120] ? __fget_files+0x2a/0x420 [ 1551.465183][T15120] ? __fget_files+0x3a0/0x420 [ 1551.465206][T15120] ? __fget_files+0x2a/0x420 [ 1551.465240][T15120] ksys_write+0x145/0x250 [ 1551.465262][T15120] ? __pfx_ksys_write+0x10/0x10 [ 1551.465295][T15120] ? do_syscall_64+0xbe/0x3b0 [ 1551.465321][T15120] do_syscall_64+0xfa/0x3b0 [ 1551.465341][T15120] ? lockdep_hardirqs_on+0x9c/0x150 [ 1551.465378][T15120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.465399][T15120] ? clear_bhb_loop+0x60/0xb0 [ 1551.465426][T15120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.465447][T15120] RIP: 0033:0x7f5ee018d3df [ 1551.465465][T15120] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1551.465484][T15120] RSP: 002b:00007f5ee10c5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1551.465507][T15120] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ee018d3df [ 1551.465522][T15120] RDX: 0000000000000001 RSI: 00007f5ee10c50a0 RDI: 0000000000000003 [ 1551.465536][T15120] RBP: 00007f5ee10c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.465549][T15120] R10: 000000000000007a R11: 0000000000000293 R12: 0000000000000001 [ 1551.465563][T15120] R13: 0000000000000001 R14: 00007f5ee03b5fa0 R15: 00007f5ee04dfa28 [ 1551.465597][T15120] [ 1551.694684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.997837][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1552.149305][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1552.174484][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1552.186739][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1552.216223][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1552.225490][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1552.235317][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1552.260135][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1552.279323][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1552.292834][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1552.318617][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1552.335142][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1552.344559][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1552.367873][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1552.376965][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1552.386554][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1552.409873][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1552.426384][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1552.438991][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1552.495173][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1552.528552][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1552.554004][ T5936] usb 9-1: USB disconnect, device number 18 [ 1552.560212][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1552.572153][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1552.588496][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1552.601127][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1552.618559][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1552.628078][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1552.659839][ T24] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1552.675438][ T24] usb 7-1: Product: syz [ 1552.689635][ T24] usb 7-1: Manufacturer: syz [ 1552.694810][ T24] usb 7-1: SerialNumber: syz [ 1552.709193][ T24] usb 7-1: config 0 descriptor?? [ 1552.725376][ T24] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 1552.931242][T15121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.948474][T15121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.995692][ T24] usb 7-1: USB disconnect, device number 23 [ 1553.007017][ T24] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 1553.591408][T15156] loop8: detected capacity change from 0 to 1 [ 1553.642159][T15156] buffer_io_error: 18 callbacks suppressed [ 1553.642175][T15156] Buffer I/O error on dev loop8, logical block 0, async page read [ 1553.705109][T15156] Buffer I/O error on dev loop8, logical block 0, async page read [ 1553.753616][T15156] Buffer I/O error on dev loop8, logical block 0, async page read [ 1553.776804][T15156] Buffer I/O error on dev loop8, logical block 0, async page read [ 1553.799214][T15156] Buffer I/O error on dev loop8, logical block 0, async page read [ 1553.819781][T15156] ldm_validate_partition_table(): Disk read failed. [ 1553.845652][T15156] Buffer I/O error on dev loop8, logical block 0, async page read [ 1553.869072][T15156] Buffer I/O error on dev loop8, logical block 0, async page read [ 1553.904010][T15156] Buffer I/O error on dev loop8, logical block 0, async page read [ 1553.927863][T15156] Buffer I/O error on dev loop8, logical block 0, async page read [ 1554.030945][T15156] Dev loop8: unable to read RDB block 0 [ 1554.030996][T15156] Buffer I/O error on dev loop8, logical block 0, async page read [ 1554.031140][T15156] loop8: unable to read partition table [ 1554.031271][T15156] loop8: partition table beyond EOD, truncated [ 1554.031297][T15156] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1554.257845][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1554.312387][T15176] bridge_slave_0: left promiscuous mode [ 1554.377900][T15176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.423684][T15176] bridge_slave_1: left allmulticast mode [ 1554.443304][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1554.484392][ T24] usb 7-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 1554.514946][T15176] bridge_slave_1: left promiscuous mode [ 1554.532194][T15176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.562800][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.586093][T15182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1554.593529][ T24] usb 7-1: Product: syz [ 1554.598319][T15176] bond0: (slave bond_slave_0): Releasing backup interface [ 1554.602726][ T24] usb 7-1: Manufacturer: syz [ 1554.615714][ T24] usb 7-1: SerialNumber: syz [ 1554.636622][ T24] usb 7-1: config 0 descriptor?? [ 1554.645397][T15176] bond_slave_0: left promiscuous mode [ 1554.687235][T15176] bond0: (slave bond_slave_1): Releasing backup interface [ 1554.711372][T15176] bond_slave_1: left promiscuous mode [ 1554.813002][T15176] team0: Port device team_slave_0 removed [ 1554.847876][T15176] team0: Port device team_slave_1 removed [ 1554.875584][T15176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.944222][T15176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.970740][T15176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1555.027745][T15176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.072398][T15176] batman_adv: batadv0: Removing interface: gretap1 [ 1555.160076][ T24] usb 7-1: USB disconnect, device number 24 [ 1555.263051][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.390938][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1555.507831][ T5936] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1555.731514][ T5936] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1555.864237][ T5936] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1555.891746][ T5936] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1555.954298][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1556.020696][ T5936] usb 5-1: SerialNumber: syz [ 1556.075738][ T5936] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1556.118067][ T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1556.151001][ T5936] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1556.170081][ T5936] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1556.200876][ T5936] scsi host1: usb-storage 5-1:1.0 [ 1556.209501][T15214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1556.331187][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1556.388440][ T24] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 1556.396723][ T24] usb 7-1: config 4 has no interface number 0 [ 1556.529529][ T24] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.569232][ T24] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.596819][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1556.701904][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.865839][ T24] hub 7-1:4.128: USB hub found [ 1557.183486][ T24] hub 7-1:4.128: 2 ports detected [ 1557.190734][ T24] hub 7-1:4.128: Using single TT (err -22) [ 1557.353734][T15250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1557.361086][T15250] IPv6: NLM_F_CREATE should be set when creating new route [ 1557.368452][T15250] IPv6: NLM_F_CREATE should be set when creating new route [ 1557.509572][T15207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.536234][T15207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1557.818862][ T24] hub 7-1:4.128: hub_hub_status failed (err = -71) [ 1557.924534][ T24] hub 7-1:4.128: config failed, can't get hub status (err -71) [ 1558.208355][ T24] usb 7-1: USB disconnect, device number 25 [ 1559.679432][T15270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1559.745956][T15270] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4656'. [ 1559.858857][ T24] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1560.087787][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1560.107322][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.132034][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1560.156758][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1560.172774][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.193766][ T24] usb 9-1: config 0 descriptor?? [ 1560.653709][ T24] logitech 0003:046D:C623.0021: unknown main item tag 0x6 [ 1560.688264][ T5841] usb 5-1: USB disconnect, device number 83 [ 1560.761282][ T24] logitech 0003:046D:C623.0021: unknown main item tag 0x0 [ 1560.773343][ T24] logitech 0003:046D:C623.0021: unknown main item tag 0x0 [ 1560.785563][ T24] logitech 0003:046D:C623.0021: unknown main item tag 0x0 [ 1560.797706][ T24] logitech 0003:046D:C623.0021: unknown main item tag 0x0 [ 1560.812340][ T24] logitech 0003:046D:C623.0021: unknown main item tag 0x0 [ 1560.836766][ T24] logitech 0003:046D:C623.0021: unknown main item tag 0x0 [ 1560.873079][ T24] logitech 0003:046D:C623.0021: collection stack underflow [ 1560.902426][ T24] logitech 0003:046D:C623.0021: item 0 4 0 12 parsing failed [ 1560.926037][ T24] logitech 0003:046D:C623.0021: parse failed [ 1561.020758][ T24] logitech 0003:046D:C623.0021: probe with driver logitech failed with error -22 [ 1561.103696][ T24] usb 9-1: USB disconnect, device number 19 [ 1562.192400][T15312] cgroup: fork rejected by pids controller in /syz6 [ 1562.857745][T16044] FAULT_INJECTION: forcing a failure. [ 1562.857745][T16044] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.871854][T16044] CPU: 1 UID: 0 PID: 16044 Comm: syz.7.4663 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1562.871880][T16044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1562.871891][T16044] Call Trace: [ 1562.871899][T16044] [ 1562.871907][T16044] dump_stack_lvl+0x189/0x250 [ 1562.871940][T16044] ? __pfx____ratelimit+0x10/0x10 [ 1562.871969][T16044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1562.871998][T16044] ? __pfx__printk+0x10/0x10 [ 1562.872025][T16044] ? __pfx___might_resched+0x10/0x10 [ 1562.872052][T16044] ? fs_reclaim_acquire+0x7d/0x100 [ 1562.872079][T16044] should_fail_ex+0x414/0x560 [ 1562.872107][T16044] should_failslab+0xa8/0x100 [ 1562.872130][T16044] __kmalloc_noprof+0xcb/0x4f0 [ 1562.872147][T16044] ? ethnl_default_notify+0x1cd/0x990 [ 1562.872175][T16044] ethnl_default_notify+0x1cd/0x990 [ 1562.872206][T16044] ? __pfx_ethnl_default_notify+0x10/0x10 [ 1562.872246][T16044] ? mutex_is_locked+0x17/0x50 [ 1562.872263][T16044] ? rtnl_is_locked+0x15/0x20 [ 1562.872292][T16044] ethnl_default_set_doit+0x64e/0xa20 [ 1562.872327][T16044] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1562.872357][T16044] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1562.872401][T16044] genl_family_rcv_msg_doit+0x215/0x300 [ 1562.872437][T16044] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1562.872479][T16044] ? bpf_lsm_capable+0x9/0x20 [ 1562.872496][T16044] ? security_capable+0x7e/0x2e0 [ 1562.872526][T16044] genl_rcv_msg+0x60e/0x790 [ 1562.872561][T16044] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1562.872586][T16044] ? ref_tracker_free+0x63a/0x7d0 [ 1562.872611][T16044] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1562.872637][T16044] ? __pfx_ref_tracker_free+0x10/0x10 [ 1562.872673][T16044] netlink_rcv_skb+0x208/0x470 [ 1562.872697][T16044] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1562.872726][T16044] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1562.872765][T16044] ? down_read+0x1ad/0x2e0 [ 1562.872787][T16044] genl_rcv+0x28/0x40 [ 1562.872812][T16044] netlink_unicast+0x75b/0x8d0 [ 1562.872842][T16044] netlink_sendmsg+0x805/0xb30 [ 1562.872874][T16044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1562.872901][T16044] ? aa_sock_msg_perm+0x94/0x160 [ 1562.872927][T16044] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1562.872951][T16044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1562.872974][T16044] __sock_sendmsg+0x219/0x270 [ 1562.873007][T16044] ____sys_sendmsg+0x505/0x830 [ 1562.873037][T16044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1562.873070][T16044] ? import_iovec+0x74/0xa0 [ 1562.873093][T16044] ___sys_sendmsg+0x21f/0x2a0 [ 1562.873120][T16044] ? __pfx____sys_sendmsg+0x10/0x10 [ 1562.873181][T16044] ? __fget_files+0x2a/0x420 [ 1562.873201][T16044] ? __fget_files+0x3a0/0x420 [ 1562.873233][T16044] __x64_sys_sendmsg+0x19b/0x260 [ 1562.873260][T16044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1562.873295][T16044] ? __pfx_ksys_write+0x10/0x10 [ 1562.873311][T16044] ? rcu_is_watching+0x15/0xb0 [ 1562.873344][T16044] ? do_syscall_64+0xbe/0x3b0 [ 1562.873367][T16044] do_syscall_64+0xfa/0x3b0 [ 1562.873389][T16044] ? lockdep_hardirqs_on+0x9c/0x150 [ 1562.873417][T16044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.873453][T16044] ? clear_bhb_loop+0x60/0xb0 [ 1562.873478][T16044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.873498][T16044] RIP: 0033:0x7f337bf8e929 [ 1562.873516][T16044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.873534][T16044] RSP: 002b:00007f337cd62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1562.873556][T16044] RAX: ffffffffffffffda RBX: 00007f337c1b5fa0 RCX: 00007f337bf8e929 [ 1562.873571][T16044] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000f [ 1562.873583][T16044] RBP: 00007f337cd62090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.873596][T16044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1562.873608][T16044] R13: 0000000000000000 R14: 00007f337c1b5fa0 R15: 00007f337c2dfa28 [ 1562.873639][T16044] [ 1564.062339][T16082] FAULT_INJECTION: forcing a failure. [ 1564.062339][T16082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1564.257416][T16082] CPU: 0 UID: 0 PID: 16082 Comm: syz.7.4665 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1564.257446][T16082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1564.257458][T16082] Call Trace: [ 1564.257465][T16082] [ 1564.257474][T16082] dump_stack_lvl+0x189/0x250 [ 1564.257509][T16082] ? __pfx____ratelimit+0x10/0x10 [ 1564.257545][T16082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1564.257575][T16082] ? __pfx__printk+0x10/0x10 [ 1564.257597][T16082] ? __might_fault+0xb0/0x130 [ 1564.257625][T16082] should_fail_ex+0x414/0x560 [ 1564.257656][T16082] _copy_from_user+0x2d/0xb0 [ 1564.257677][T16082] ___sys_recvmsg+0x12e/0x510 [ 1564.257709][T16082] ? __pfx____sys_recvmsg+0x10/0x10 [ 1564.257763][T16082] ? __might_fault+0xb0/0x130 [ 1564.257784][T16082] do_recvmmsg+0x307/0x770 [ 1564.257820][T16082] ? __pfx_do_recvmmsg+0x10/0x10 [ 1564.257859][T16082] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1564.257894][T16082] __x64_sys_recvmmsg+0x190/0x240 [ 1564.257924][T16082] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1564.257957][T16082] ? do_syscall_64+0xbe/0x3b0 [ 1564.257980][T16082] do_syscall_64+0xfa/0x3b0 [ 1564.257997][T16082] ? lockdep_hardirqs_on+0x9c/0x150 [ 1564.258025][T16082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.258044][T16082] ? clear_bhb_loop+0x60/0xb0 [ 1564.258078][T16082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.258096][T16082] RIP: 0033:0x7f337bf8e929 [ 1564.258113][T16082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1564.258131][T16082] RSP: 002b:00007f337cd41038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1564.258152][T16082] RAX: ffffffffffffffda RBX: 00007f337c1b6080 RCX: 00007f337bf8e929 [ 1564.258166][T16082] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1564.258179][T16082] RBP: 00007f337cd41090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.258191][T16082] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1564.258203][T16082] R13: 0000000000000001 R14: 00007f337c1b6080 R15: 00007f337c2dfa28 [ 1564.258231][T16082] [ 1564.538304][ T5841] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1564.679132][ T24] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1564.838064][ T5936] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1564.942267][ T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1564.951538][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.971651][ T24] usb 2-1: Product: syz [ 1565.056472][ T5936] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1565.067932][ T24] usb 2-1: Manufacturer: syz [ 1565.072579][ T24] usb 2-1: SerialNumber: syz [ 1565.148435][ T24] usb 2-1: config 0 descriptor?? [ 1565.187124][T16095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.208860][ T5936] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1565.299720][T16095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.323547][ T5936] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1565.397530][ T5936] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1565.461949][ T5936] usb 9-1: SerialNumber: syz [ 1565.604095][ T5936] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1565.616660][ T24] airspy 2-1:0.0: Board ID: 00 [ 1565.621595][ T24] airspy 2-1:0.0: Firmware version: [ 1565.763276][ T5936] usb-storage 9-1:1.0: USB Mass Storage device detected [ 1565.830606][ T5936] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1565.877838][ T5936] scsi host1: usb-storage 9-1:1.0 [ 1567.063338][ T5841] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1567.082695][ T5841] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1567.090630][ T5841] usb 7-1: can't read configurations, error -71 [ 1567.487945][ T24] airspy 2-1:0.0: usb_control_msg() failed -110 request 10 [ 1567.497355][ T24] airspy 2-1:0.0: Registered as swradio24 [ 1567.503936][ T24] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1567.918981][ T30] audit: type=1326 audit(1749627556.168:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16121 comm="syz.6.4673" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f716098e929 code=0x0 [ 1568.494372][ T5936] usb 2-1: USB disconnect, device number 96 [ 1568.912699][ T5841] usb 9-1: USB disconnect, device number 20 [ 1569.347641][ T7702] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1569.377929][ T24] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1569.537664][ T24] usb 2-1: device descriptor read/64, error -71 [ 1569.618971][ T7702] usb 5-1: config 3 has an invalid interface number: 139 but max is 1 [ 1569.673292][ T7702] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 1569.694350][ T7702] usb 5-1: config 3 has an invalid descriptor of length 81, skipping remainder of the config [ 1569.715267][ T7702] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 1569.726478][T16153] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4680'. [ 1569.745901][ T7702] usb 5-1: config 3 has no interface number 0 [ 1569.772069][ T7702] usb 5-1: config 3 interface 139 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1569.808206][ T7702] usb 5-1: config 3 interface 139 has no altsetting 0 [ 1569.817726][ T24] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1569.836361][ T7702] usb 5-1: New USB device found, idVendor=1a8d, idProduct=1011, bcdDevice=f0.24 [ 1569.846173][ T7702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.854869][ T7702] usb 5-1: Product: syz [ 1569.860576][ T7702] usb 5-1: Manufacturer: syz [ 1569.865376][ T7702] usb 5-1: SerialNumber: syz [ 1569.950453][ T24] usb 2-1: device descriptor read/64, error -71 [ 1570.037749][ T5969] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1570.070252][ T24] usb usb2-port1: attempt power cycle [ 1570.229811][ T5969] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1570.243577][ T5969] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1570.296078][ T5969] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1570.312672][ T5969] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1570.327349][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.339739][ T5969] usb 7-1: Product:   [ 1570.344053][ T5969] usb 7-1: Manufacturer: Н [ 1570.347970][ T5841] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1570.350659][ T5969] usb 7-1: SerialNumber: ᵜꀬ⋕萄휍覿鲁懋羺뇺政￲ꕛ퀾̚淋江淪㘣칍螼ಉ洗澈뼦끆闶鼴낤靴സ蘶쭵㆏ᒽ僔㓺䐄趣⎷爦䎣㽈赔 [ 1570.457693][ T24] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1570.480387][ T24] usb 2-1: device descriptor read/8, error -71 [ 1570.685513][ T5969] usb 7-1: 0:2 : does not exist [ 1570.717726][ T24] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1570.749419][ T24] usb 2-1: device descriptor read/8, error -71 [ 1570.802642][ T5969] usb 7-1: USB disconnect, device number 28 [ 1570.866516][ T24] usb usb2-port1: unable to enumerate USB device [ 1570.956550][ T2139] udevd[2139]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1571.607666][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1571.768001][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1571.777142][ T24] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1571.785808][ T24] usb 7-1: config 0 has no interface number 0 [ 1571.792444][ T24] usb 7-1: config 0 interface 132 has no altsetting 0 [ 1571.805711][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 1571.815514][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.824057][ T24] usb 7-1: Product: syz [ 1571.828822][ T24] usb 7-1: Manufacturer: syz [ 1571.833815][ T24] usb 7-1: SerialNumber: syz [ 1571.906186][ T7702] option 5-1:3.139: GSM modem (1-port) converter detected [ 1571.953785][ T24] usb 7-1: config 0 descriptor?? [ 1571.960482][ T7702] usb 5-1: USB disconnect, device number 84 [ 1571.989170][ T7702] option 5-1:3.139: device disconnected [ 1572.230867][ T24] cdc_subset 7-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.6-1, Belkin, eTEK, or compatible, 6a:78:cb:c0:a1:d6 [ 1572.999010][ T5969] usb 7-1: USB disconnect, device number 29 [ 1573.035848][ T5969] cdc_subset 7-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.6-1, Belkin, eTEK, or compatible [ 1573.296729][ T5841] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1573.327721][ T5841] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1573.335386][ T5841] usb 9-1: can't read configurations, error -71 [ 1573.399524][T16198] netlink: 'syz.6.4690': attribute type 10 has an invalid length. [ 1573.423058][T16198] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4690'. [ 1573.459094][T16198] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1573.521840][T16198] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1573.558955][T16198] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1573.681606][T16212] vivid-000: disconnect [ 1573.844265][T16211] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4693'. [ 1573.868109][T16211] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4693'. [ 1573.901751][T16210] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4693'. [ 1573.918539][T16210] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4693'. [ 1574.561129][T16201] vivid-000: reconnect [ 1574.638984][T16225] FAULT_INJECTION: forcing a failure. [ 1574.638984][T16225] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.651669][T16225] CPU: 0 UID: 0 PID: 16225 Comm: syz.1.4695 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1574.651688][T16225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1574.651696][T16225] Call Trace: [ 1574.651703][T16225] [ 1574.651709][T16225] dump_stack_lvl+0x189/0x250 [ 1574.651734][T16225] ? __pfx____ratelimit+0x10/0x10 [ 1574.651755][T16225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1574.651776][T16225] ? __pfx__printk+0x10/0x10 [ 1574.651792][T16225] ? __lock_acquire+0xab9/0xd20 [ 1574.651817][T16225] should_fail_ex+0x414/0x560 [ 1574.651838][T16225] should_failslab+0xa8/0x100 [ 1574.651854][T16225] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1574.651875][T16225] ? sctp_get_port_local+0x6bb/0x1610 [ 1574.651896][T16225] sctp_get_port_local+0x6bb/0x1610 [ 1574.651922][T16225] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1574.651941][T16225] ? sctp_bind_addr_match+0x28b/0x2b0 [ 1574.651959][T16225] sctp_do_bind+0x4ea/0x940 [ 1574.651983][T16225] sctp_connect_new_asoc+0x25c/0x690 [ 1574.652003][T16225] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1574.652023][T16225] ? sctp_get_af_specific+0x29/0x80 [ 1574.652037][T16225] ? sctp_inet6_send_verify+0x80/0x300 [ 1574.652050][T16225] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1574.652070][T16225] __sctp_connect+0x5ba/0xd50 [ 1574.652094][T16225] ? __pfx___sctp_connect+0x10/0x10 [ 1574.652109][T16225] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1574.652130][T16225] ? lockdep_hardirqs_on+0x9c/0x150 [ 1574.652151][T16225] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1574.652169][T16225] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1574.652188][T16225] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1574.652204][T16225] sctp_setsockopt_connectx+0x100/0x1b0 [ 1574.652226][T16225] sctp_setsockopt+0x6d9/0x1200 [ 1574.652242][T16225] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1574.652258][T16225] do_sock_setsockopt+0x257/0x3e0 [ 1574.652277][T16225] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1574.652296][T16225] ? __fget_files+0x2a/0x420 [ 1574.652316][T16225] __x64_sys_setsockopt+0x18b/0x220 [ 1574.652336][T16225] do_syscall_64+0xfa/0x3b0 [ 1574.652348][T16225] ? lockdep_hardirqs_on+0x9c/0x150 [ 1574.652367][T16225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.652380][T16225] ? clear_bhb_loop+0x60/0xb0 [ 1574.652396][T16225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.652408][T16225] RIP: 0033:0x7f5ee018e929 [ 1574.652420][T16225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1574.652432][T16225] RSP: 002b:00007f5ee10c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1574.652446][T16225] RAX: ffffffffffffffda RBX: 00007f5ee03b5fa0 RCX: 00007f5ee018e929 [ 1574.652456][T16225] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 1574.652464][T16225] RBP: 00007f5ee10c5090 R08: 000000000000003c R09: 0000000000000000 [ 1574.652472][T16225] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000001 [ 1574.652480][T16225] R13: 0000000000000000 R14: 00007f5ee03b5fa0 R15: 00007f5ee04dfa28 [ 1574.652504][T16225] [ 1575.765926][T16243] libceph: resolve '4..' (ret=-3): failed [ 1575.798312][T16208] fuse: Bad value for 'group_id' [ 1575.803315][T16208] fuse: Bad value for 'group_id' [ 1575.960140][T16247] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4699'. [ 1576.428132][T16254] FAULT_INJECTION: forcing a failure. [ 1576.428132][T16254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1576.484907][T16254] CPU: 1 UID: 0 PID: 16254 Comm: syz.7.4701 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1576.484929][T16254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1576.484938][T16254] Call Trace: [ 1576.484944][T16254] [ 1576.484951][T16254] dump_stack_lvl+0x189/0x250 [ 1576.484977][T16254] ? __pfx____ratelimit+0x10/0x10 [ 1576.484998][T16254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1576.485020][T16254] ? __pfx__printk+0x10/0x10 [ 1576.485049][T16254] ? fs_reclaim_acquire+0x7d/0x100 [ 1576.485070][T16254] should_fail_ex+0x414/0x560 [ 1576.485091][T16254] prepare_alloc_pages+0x213/0x610 [ 1576.485112][T16254] __alloc_frozen_pages_noprof+0x123/0x370 [ 1576.485132][T16254] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1576.485150][T16254] ? __lock_acquire+0xab9/0xd20 [ 1576.485175][T16254] alloc_pages_mpol+0x232/0x4a0 [ 1576.485192][T16254] alloc_pages_noprof+0xa9/0x190 [ 1576.485207][T16254] pte_alloc_one+0x21/0x170 [ 1576.485227][T16254] __pte_alloc+0x25/0x1a0 [ 1576.485245][T16254] __handle_mm_fault+0x4b8a/0x5620 [ 1576.485277][T16254] ? __pfx___handle_mm_fault+0x10/0x10 [ 1576.485309][T16254] ? __pfx___might_resched+0x10/0x10 [ 1576.485331][T16254] handle_mm_fault+0x40a/0x8e0 [ 1576.485358][T16254] __get_user_pages+0x1af4/0x30b0 [ 1576.485398][T16254] ? __pfx___get_user_pages+0x10/0x10 [ 1576.485422][T16254] get_user_pages_remote+0x2f9/0xaa0 [ 1576.485447][T16254] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1576.485465][T16254] ? down_read+0x1ad/0x2e0 [ 1576.485480][T16254] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 1576.485498][T16254] get_arg_page+0x104/0x330 [ 1576.485518][T16254] ? __pfx_get_arg_page+0x10/0x10 [ 1576.485538][T16254] ? create_init_stack_vma+0x523/0x680 [ 1576.485562][T16254] copy_string_kernel+0x191/0x2a0 [ 1576.485584][T16254] do_execveat_common+0x3c5/0x6a0 [ 1576.485604][T16254] __x64_sys_execveat+0xc4/0xe0 [ 1576.485626][T16254] do_syscall_64+0xfa/0x3b0 [ 1576.485638][T16254] ? lockdep_hardirqs_on+0x9c/0x150 [ 1576.485657][T16254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.485669][T16254] ? clear_bhb_loop+0x60/0xb0 [ 1576.485685][T16254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.485702][T16254] RIP: 0033:0x7f337bf8e929 [ 1576.485715][T16254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1576.485726][T16254] RSP: 002b:00007f337cd62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1576.485740][T16254] RAX: ffffffffffffffda RBX: 00007f337c1b5fa0 RCX: 00007f337bf8e929 [ 1576.485750][T16254] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1576.485758][T16254] RBP: 00007f337cd62090 R08: 0000000000001000 R09: 0000000000000000 [ 1576.485767][T16254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1576.485774][T16254] R13: 0000000000000000 R14: 00007f337c1b5fa0 R15: 00007f337c2dfa28 [ 1576.485794][T16254] [ 1576.769278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.169000][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4704'. [ 1577.282166][T16267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1577.497487][T16276] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4708'. [ 1577.507682][ T5841] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1577.670506][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 1577.688537][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1577.718825][ T5841] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1577.747368][ T5841] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1577.763331][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.777790][ T5841] usb 5-1: Product: syz [ 1577.788039][ T5841] usb 5-1: Manufacturer: syz [ 1577.802949][ T5841] usb 5-1: SerialNumber: syz [ 1577.858099][ T5841] usb 5-1: config 0 descriptor?? [ 1578.390079][T16300] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1578.403712][ T5841] usb 5-1: USB disconnect, device number 85 [ 1578.678777][ T918] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1578.817635][ T918] usb 2-1: device descriptor read/64, error -71 [ 1579.177680][ T918] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1579.327668][ T918] usb 2-1: device descriptor read/64, error -71 [ 1579.337986][T16304] netlink: 'syz.4.4716': attribute type 21 has an invalid length. [ 1579.358218][T16304] netlink: 'syz.4.4716': attribute type 1 has an invalid length. [ 1579.458140][ T918] usb usb2-port1: attempt power cycle [ 1580.167644][ T918] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1580.192588][ T918] usb 2-1: device descriptor read/8, error -71 [ 1580.244122][T16314] netlink: 'syz.8.4719': attribute type 4 has an invalid length. [ 1580.400274][T16319] vivid-000: disconnect [ 1580.457645][ T918] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1580.512366][ T918] usb 2-1: device descriptor read/8, error -71 [ 1580.628718][ T918] usb usb2-port1: unable to enumerate USB device [ 1580.762118][T16321] bridge_slave_0: left allmulticast mode [ 1580.773373][T16321] bridge_slave_0: left promiscuous mode [ 1580.783280][T16321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.804091][T16321] bridge_slave_1: left allmulticast mode [ 1580.810270][T16321] bridge_slave_1: left promiscuous mode [ 1580.816660][T16321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.833646][T16321] bond0: (slave bond_slave_0): Releasing backup interface [ 1580.851832][T16321] bond0: (slave bond_slave_1): Releasing backup interface [ 1580.882685][T16321] team0: Port device team_slave_0 removed [ 1580.897409][T16321] team0: Port device team_slave_1 removed [ 1580.908134][T16321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1580.916436][T16321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.928059][T16321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1580.935611][T16321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1581.186967][T16312] vivid-000: reconnect [ 1581.723944][ T30] audit: type=1400 audit(1749627569.978:3193): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=16337 comm="syz.1.4726" [ 1581.902679][T16345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1582.381095][T16348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4729'. [ 1582.407940][T16348] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1582.769137][T16336] loop8: detected capacity change from 0 to 1 [ 1582.786707][ T5889] buffer_io_error: 2 callbacks suppressed [ 1582.786723][ T5889] Buffer I/O error on dev loop8, logical block 0, async page read [ 1582.804834][ T5889] Buffer I/O error on dev loop8, logical block 0, async page read [ 1582.813460][ T5889] Buffer I/O error on dev loop8, logical block 0, async page read [ 1582.826060][T16357] futex_wake_op: syz.8.4725 tries to shift op by -33; fix this program [ 1582.826665][ T5889] Buffer I/O error on dev loop8, logical block 0, async page read [ 1582.896241][T16357] netdevsim netdevsim8: Direct firmware load for . [ 1582.896241][T16357] failed with error -2 [ 1582.927936][T16357] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1582.927936][T16357] [ 1582.948858][ T5889] Buffer I/O error on dev loop8, logical block 0, async page read [ 1582.956816][ T5889] ldm_validate_partition_table(): Disk read failed. [ 1582.972678][ T5889] Buffer I/O error on dev loop8, logical block 0, async page read [ 1582.985568][ T5889] Buffer I/O error on dev loop8, logical block 0, async page read [ 1583.014469][ T5889] Buffer I/O error on dev loop8, logical block 0, async page read [ 1583.027085][ T5889] Buffer I/O error on dev loop8, logical block 0, async page read [ 1583.043805][ T5889] Dev loop8: unable to read RDB block 0 [ 1583.053132][ T5889] Buffer I/O error on dev loop8, logical block 0, async page read [ 1583.064142][ T5889] loop8: unable to read partition table [ 1583.075824][ T5889] loop8: partition table beyond EOD, truncated [ 1583.588111][T16376] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1583.636249][T16379] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1583.684566][T16381] FAULT_INJECTION: forcing a failure. [ 1583.684566][T16381] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.707749][ T5841] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1583.717072][T16381] CPU: 0 UID: 0 PID: 16381 Comm: syz.1.4742 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1583.717101][T16381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1583.717114][T16381] Call Trace: [ 1583.717123][T16381] [ 1583.717132][T16381] dump_stack_lvl+0x189/0x250 [ 1583.717166][T16381] ? __pfx____ratelimit+0x10/0x10 [ 1583.717197][T16381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1583.717226][T16381] ? __pfx__printk+0x10/0x10 [ 1583.717261][T16381] should_fail_ex+0x414/0x560 [ 1583.717292][T16381] should_failslab+0xa8/0x100 [ 1583.717315][T16381] __kmalloc_cache_noprof+0x70/0x3d0 [ 1583.717336][T16381] ? sctp_add_bind_addr+0x8c/0x370 [ 1583.717362][T16381] sctp_add_bind_addr+0x8c/0x370 [ 1583.717387][T16381] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1583.717412][T16381] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1583.717433][T16381] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1583.717456][T16381] ? sctp_v6_is_any+0x64/0x80 [ 1583.717481][T16381] ? sctp_copy_one_addr+0x93/0x360 [ 1583.717505][T16381] sctp_bind_addr_copy+0xb3/0x3c0 [ 1583.717527][T16381] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1583.717564][T16381] sctp_connect_new_asoc+0x2e0/0x690 [ 1583.717594][T16381] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1583.717618][T16381] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1583.717654][T16381] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1583.717681][T16381] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1583.717707][T16381] sctp_sendmsg+0x155c/0x2810 [ 1583.717743][T16381] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1583.717772][T16381] ? aa_sk_perm+0x81e/0x950 [ 1583.717800][T16381] ? __pfx_aa_sk_perm+0x10/0x10 [ 1583.717825][T16381] ? sock_rps_record_flow+0x19/0x410 [ 1583.717848][T16381] ? inet_sendmsg+0x2f4/0x370 [ 1583.717872][T16381] __sock_sendmsg+0x19c/0x270 [ 1583.717906][T16381] ____sys_sendmsg+0x52d/0x830 [ 1583.717938][T16381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1583.717983][T16381] ? import_iovec+0x74/0xa0 [ 1583.718013][T16381] ___sys_sendmsg+0x21f/0x2a0 [ 1583.718039][T16381] ? __pfx____sys_sendmsg+0x10/0x10 [ 1583.718094][T16381] ? __fget_files+0x2a/0x420 [ 1583.718113][T16381] ? __fget_files+0x3a0/0x420 [ 1583.718142][T16381] __sys_sendmmsg+0x227/0x430 [ 1583.718170][T16381] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1583.718192][T16381] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1583.718233][T16381] ? ksys_write+0x22a/0x250 [ 1583.718252][T16381] ? __pfx_ksys_write+0x10/0x10 [ 1583.718276][T16381] __x64_sys_sendmmsg+0xa0/0xc0 [ 1583.718301][T16381] do_syscall_64+0xfa/0x3b0 [ 1583.718317][T16381] ? lockdep_hardirqs_on+0x9c/0x150 [ 1583.718343][T16381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.718361][T16381] ? clear_bhb_loop+0x60/0xb0 [ 1583.718383][T16381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.718400][T16381] RIP: 0033:0x7f5ee018e929 [ 1583.718416][T16381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.718433][T16381] RSP: 002b:00007f5ee10c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1583.718452][T16381] RAX: ffffffffffffffda RBX: 00007f5ee03b5fa0 RCX: 00007f5ee018e929 [ 1583.718466][T16381] RDX: 0000000000000002 RSI: 0000200000000780 RDI: 0000000000000003 [ 1583.718477][T16381] RBP: 00007f5ee10c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.718488][T16381] R10: 000000003404c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 1583.718500][T16381] R13: 0000000000000000 R14: 00007f5ee03b5fa0 R15: 00007f5ee04dfa28 [ 1583.718528][T16381] [ 1584.083374][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 1584.488751][ T5841] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1584.501668][ T5841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1584.545246][ T5841] usb 5-1: language id specifier not provided by device, defaulting to English [ 1584.567132][ T5841] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1584.577472][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.585629][ T5841] usb 5-1: Product: syz [ 1584.597925][ T5841] usb 5-1: Manufacturer: syz [ 1584.602596][ T5841] usb 5-1: SerialNumber: syz [ 1584.707691][T13059] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1584.868146][T13059] usb 7-1: Using ep0 maxpacket: 16 [ 1585.028689][T16400] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4746'. [ 1585.029507][T16400] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4746'. [ 1585.037853][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1585.189612][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1585.212129][ T5841] usb 5-1: 0:2 : does not exist [ 1585.225422][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1585.260045][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1585.276400][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1585.280798][ T5841] usb 5-1: USB disconnect, device number 86 [ 1585.307767][ T918] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1585.307824][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1585.348367][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.387100][ T24] usb 2-1: config 0 descriptor?? [ 1585.458144][ T918] usb 9-1: Using ep0 maxpacket: 32 [ 1585.471466][ T918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1585.483203][ T918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1585.493518][ T918] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1585.505651][ T918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 1585.517102][ T918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 1585.532790][ T918] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1585.542134][ T918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.551640][ T918] usb 9-1: Product: syz [ 1585.556037][ T918] usb 9-1: Manufacturer: syz [ 1585.568757][ T918] usb 9-1: SerialNumber: syz [ 1585.576758][ T918] usb 9-1: config 0 descriptor?? [ 1585.583120][T16400] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 1585.596761][ T918] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input97 [ 1585.613208][ T5191] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1585.636378][ T5191] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1585.662374][ T5191] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1585.681756][ T5191] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1585.793434][T11623] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1585.832485][T16400] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1585.844615][ T5191] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1585.865617][ C0] xpad 9-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 1585.876625][ T5191] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1585.904716][ T5191] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1585.962320][ T10] usb 9-1: USB disconnect, device number 23 [ 1586.201483][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1586.210170][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1586.235468][ T24] usb 2-1: USB disconnect, device number 105 [ 1586.888982][T13059] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1586.925003][T13059] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1586.954339][T13059] usb 7-1: can't read configurations, error -71 [ 1586.964207][T16416] fuse: Unknown parameter 'N' [ 1587.108321][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4751'. [ 1587.693422][ T30] audit: type=1326 audit(1749627575.948:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16427 comm="syz.1.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee018e929 code=0x7ffc0000 [ 1588.167869][ T30] audit: type=1326 audit(1749627575.948:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16427 comm="syz.1.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee018e929 code=0x7ffc0000 [ 1588.234557][ T30] audit: type=1326 audit(1749627575.978:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16427 comm="syz.1.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f5ee018e929 code=0x7ffc0000 [ 1588.308290][ T30] audit: type=1326 audit(1749627575.978:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16427 comm="syz.1.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee018e929 code=0x7ffc0000 [ 1588.568403][ T30] audit: type=1326 audit(1749627575.978:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16427 comm="syz.1.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee018e929 code=0x7ffc0000 [ 1588.649031][ T30] audit: type=1326 audit(1749627575.978:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16427 comm="syz.1.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f5ee018e929 code=0x7ffc0000 [ 1588.727623][ T30] audit: type=1326 audit(1749627575.978:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16427 comm="syz.1.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee018e929 code=0x7ffc0000 [ 1588.820755][ T30] audit: type=1326 audit(1749627575.978:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16427 comm="syz.1.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee018e929 code=0x7ffc0000 [ 1588.903086][ T30] audit: type=1326 audit(1749627575.978:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16427 comm="syz.1.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee018e929 code=0x7ffc0000 [ 1589.198656][ T30] audit: type=1326 audit(1749627575.978:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16427 comm="syz.1.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee018e929 code=0x7ffc0000 [ 1589.377800][ T5841] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1589.539683][ T5841] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1589.553139][ T5841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1589.560858][ T5841] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1589.587623][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.607775][T13059] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1589.617505][ T5841] usb 5-1: config 0 descriptor?? [ 1589.648073][T16447] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1589.757615][T13059] usb 2-1: Using ep0 maxpacket: 32 [ 1589.765430][T13059] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.781036][T13059] usb 2-1: config 0 has no interfaces? [ 1589.789004][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1589.802322][T13059] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 1589.816491][T13059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.831941][T13059] usb 2-1: Product: syz [ 1589.836264][T13059] usb 2-1: Manufacturer: syz [ 1589.841128][T13059] usb 2-1: SerialNumber: syz [ 1589.857481][T13059] usb 2-1: config 0 descriptor?? [ 1589.947802][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1589.962941][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.974628][ T24] usb 7-1: config 0 has no interfaces? [ 1589.985547][ T24] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 1590.005027][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.015603][ T24] usb 7-1: Product: syz [ 1590.047245][ T24] usb 7-1: Manufacturer: syz [ 1590.063347][ T24] usb 7-1: SerialNumber: syz [ 1590.072022][ T5841] konepure 0003:1E7D:2DBE.0022: unknown main item tag 0x0 [ 1590.082448][ T5841] konepure 0003:1E7D:2DBE.0022: unknown main item tag 0x0 [ 1590.097011][ T24] usb 7-1: config 0 descriptor?? [ 1590.102040][ T5969] usb 2-1: USB disconnect, device number 106 [ 1590.128604][ T5841] konepure 0003:1E7D:2DBE.0022: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.4-1/input0 [ 1590.302976][ T918] usb 5-1: USB disconnect, device number 87 [ 1590.332222][T16457] FAULT_INJECTION: forcing a failure. [ 1590.332222][T16457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.351701][T16457] CPU: 0 UID: 0 PID: 16457 Comm: syz.6.4762 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1590.351723][T16457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1590.351733][T16457] Call Trace: [ 1590.351739][T16457] [ 1590.351745][T16457] dump_stack_lvl+0x189/0x250 [ 1590.351792][T16457] ? __pfx____ratelimit+0x10/0x10 [ 1590.351817][T16457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1590.351840][T16457] ? __pfx__printk+0x10/0x10 [ 1590.351857][T16457] ? __might_fault+0xb0/0x130 [ 1590.351892][T16457] should_fail_ex+0x414/0x560 [ 1590.351916][T16457] _copy_from_user+0x2d/0xb0 [ 1590.351932][T16457] ___sys_sendmsg+0x158/0x2a0 [ 1590.351955][T16457] ? __pfx____sys_sendmsg+0x10/0x10 [ 1590.351999][T16457] ? __fget_files+0x2a/0x420 [ 1590.352015][T16457] ? __fget_files+0x3a0/0x420 [ 1590.352038][T16457] __sys_sendmmsg+0x227/0x430 [ 1590.352062][T16457] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1590.352080][T16457] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1590.352113][T16457] ? ksys_write+0x22a/0x250 [ 1590.352128][T16457] ? __pfx_ksys_write+0x10/0x10 [ 1590.352139][T16457] ? rcu_is_watching+0x15/0xb0 [ 1590.352167][T16457] __x64_sys_sendmmsg+0xa0/0xc0 [ 1590.352188][T16457] do_syscall_64+0xfa/0x3b0 [ 1590.352202][T16457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.352216][T16457] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1590.352231][T16457] ? clear_bhb_loop+0x60/0xb0 [ 1590.352248][T16457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.352262][T16457] RIP: 0033:0x7f716098e929 [ 1590.352275][T16457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.352288][T16457] RSP: 002b:00007f71617f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1590.352302][T16457] RAX: ffffffffffffffda RBX: 00007f7160bb5fa0 RCX: 00007f716098e929 [ 1590.352313][T16457] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 1590.352323][T16457] RBP: 00007f71617f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1590.352332][T16457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1590.352341][T16457] R13: 0000000000000000 R14: 00007f7160bb5fa0 R15: 00007f7160cdfa28 [ 1590.352362][T16457] [ 1590.355807][ T10] usb 7-1: USB disconnect, device number 32 [ 1590.730997][T16466] fido_id[16466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1591.314461][T16487] binder: BINDER_SET_CONTEXT_MGR already set [ 1591.321566][T16487] binder: 16486:16487 ioctl 4018620d 200000000040 returned -16 [ 1591.329967][T16487] binder: 16486:16487 ioctl c0306201 200000000700 returned -22 [ 1591.338119][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4769'. [ 1591.523237][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4770'. [ 1591.777675][ T5841] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1591.953088][ T5841] usb 7-1: Using ep0 maxpacket: 8 [ 1591.988812][ T5841] usb 7-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 1592.148292][T16498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1592.219396][ T5841] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 54592, setting to 1024 [ 1592.555342][ T5841] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1592.890845][ T5841] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1592.958242][ T5841] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1592.967747][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.975763][ T5841] usb 7-1: Product: syz [ 1593.001022][ T5841] usb 7-1: Manufacturer: syz [ 1593.005683][ T5841] usb 7-1: SerialNumber: syz [ 1593.082994][T16491] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1593.093887][ T5841] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1593.140857][ T5841] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1593.288336][ T5841] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1593.310378][T16489] loop2: detected capacity change from 0 to 7 [ 1593.467199][ T5841] usb 7-1: USB disconnect, device number 33 [ 1593.847784][ T24] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1594.007755][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1594.024951][ T24] usb 9-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 1594.061585][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1594.154798][ T24] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1594.164415][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.191683][ T24] usb 9-1: Product: syz [ 1594.200550][ T24] usb 9-1: Manufacturer: syz [ 1594.210347][ T24] usb 9-1: SerialNumber: syz [ 1594.440191][ T24] usb 9-1: 0:2 : does not exist [ 1594.458509][ T24] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1594.488982][ T24] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1594.502067][ T24] usb 9-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1594.510097][ T5841] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1594.524218][ T24] usb 9-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1594.574104][ T24] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1594.601427][ T24] usb 9-1: USB disconnect, device number 24 [ 1594.653879][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1594.674404][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 1594.701530][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.730203][ T5841] usb 2-1: config 0 has no interfaces? [ 1594.759657][ T5841] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 1594.799606][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.832919][ T5841] usb 2-1: Product: syz [ 1594.849291][ T5841] usb 2-1: Manufacturer: syz [ 1594.880484][ T5841] usb 2-1: SerialNumber: syz [ 1594.916293][ T5841] usb 2-1: config 0 descriptor?? [ 1595.145938][ T10] usb 2-1: USB disconnect, device number 107 [ 1595.212881][T16521] netlink: 'syz.8.4782': attribute type 1 has an invalid length. [ 1595.373234][T16526] ptrace attach of "./syz-executor exec"[4812] was attempted by "./syz-executor exec"[16526] [ 1595.931025][T16535] xt_CT: No such helper "pptp" [ 1596.437745][T27073] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1596.550568][ T5841] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1596.597692][T27073] usb 2-1: Using ep0 maxpacket: 16 [ 1596.635611][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4788'. [ 1596.675704][T16547] macvlan4: entered promiscuous mode [ 1596.687604][T16547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.696523][T16547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.737712][ T5841] usb 9-1: Using ep0 maxpacket: 16 [ 1596.753277][ T5841] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1596.772301][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4788'. [ 1596.783649][ T5841] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1596.804215][ T5841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.842381][ T5841] usb 9-1: config 0 descriptor?? [ 1596.911632][ T5841] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input98 [ 1598.376137][T16551] loop8: detected capacity change from 0 to 1 [ 1598.409825][T16551] buffer_io_error: 18 callbacks suppressed [ 1598.409854][T16551] Buffer I/O error on dev loop8, logical block 0, async page read [ 1598.450943][T16551] Buffer I/O error on dev loop8, logical block 0, async page read [ 1598.472117][T16551] Buffer I/O error on dev loop8, logical block 0, async page read [ 1598.484489][T16551] Buffer I/O error on dev loop8, logical block 0, async page read [ 1598.495345][T16551] Buffer I/O error on dev loop8, logical block 0, async page read [ 1598.504436][T16551] ldm_validate_partition_table(): Disk read failed. [ 1598.511720][T16551] Buffer I/O error on dev loop8, logical block 0, async page read [ 1598.524261][T16553] libceph: resolve '4..' (ret=-3): failed [ 1598.531239][T16551] Buffer I/O error on dev loop8, logical block 0, async page read [ 1598.544693][T16551] Buffer I/O error on dev loop8, logical block 0, async page read [ 1598.553851][T16551] Buffer I/O error on dev loop8, logical block 0, async page read [ 1598.569700][T16551] Dev loop8: unable to read RDB block 0 [ 1598.575778][T16551] Buffer I/O error on dev loop8, logical block 0, async page read [ 1598.588068][T16551] loop8: unable to read partition table [ 1598.595435][T16551] loop8: partition table beyond EOD, truncated [ 1598.602933][T16551] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1599.107860][ T5191] bcm5974 9-1:0.0: could not read from device [ 1599.185588][ T5841] usb 9-1: USB disconnect, device number 25 [ 1599.207339][ T5191] bcm5974 9-1:0.0: could not read from device [ 1599.764717][T27073] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1599.815690][T27073] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1599.829699][T27073] usb 2-1: can't read configurations, error -71 [ 1600.399470][T16578] fuse: Unknown parameter '0x000000000000000a' [ 1600.409191][T16578] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1600.495834][T16583] FAULT_INJECTION: forcing a failure. [ 1600.495834][T16583] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.597900][T16583] CPU: 0 UID: 0 PID: 16583 Comm: syz.7.4799 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1600.597931][T16583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1600.597944][T16583] Call Trace: [ 1600.597952][T16583] [ 1600.597960][T16583] dump_stack_lvl+0x189/0x250 [ 1600.597998][T16583] ? __pfx____ratelimit+0x10/0x10 [ 1600.598029][T16583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1600.598059][T16583] ? __pfx__printk+0x10/0x10 [ 1600.598097][T16583] ? __pfx___might_resched+0x10/0x10 [ 1600.598128][T16583] ? fs_reclaim_acquire+0x7d/0x100 [ 1600.598156][T16583] should_fail_ex+0x414/0x560 [ 1600.598188][T16583] should_failslab+0xa8/0x100 [ 1600.598211][T16583] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1600.598242][T16583] ? __kernfs_new_node+0xd7/0x7e0 [ 1600.598271][T16583] __kernfs_new_node+0xd7/0x7e0 [ 1600.598295][T16583] ? __lock_acquire+0xab9/0xd20 [ 1600.598331][T16583] ? __pfx___kernfs_new_node+0x10/0x10 [ 1600.598357][T16583] ? kernfs_root+0x1c/0x230 [ 1600.598386][T16583] ? kernfs_root+0x1c/0x230 [ 1600.598409][T16583] ? kernfs_root+0x1c/0x230 [ 1600.598430][T16583] ? kernfs_root+0x1c/0x230 [ 1600.598457][T16583] kernfs_new_node+0x102/0x210 [ 1600.598487][T16583] __kernfs_create_file+0x4b/0x2e0 [ 1600.598521][T16583] sysfs_add_file_mode_ns+0x238/0x300 [ 1600.598550][T16583] internal_create_group+0x66d/0x1110 [ 1600.598590][T16583] ? __pfx_internal_create_group+0x10/0x10 [ 1600.598616][T16583] ? kernfs_add_one+0xf0/0x520 [ 1600.598646][T16583] sysfs_create_groups+0x59/0x120 [ 1600.598678][T16583] device_add_attrs+0x13f/0x5a0 [ 1600.598724][T16583] ? __pfx_device_add_attrs+0x10/0x10 [ 1600.598755][T16583] ? device_add_class_symlinks+0x21f/0x240 [ 1600.598783][T16583] device_add+0x496/0xb50 [ 1600.598811][T16583] input_register_device+0x9ca/0x10b0 [ 1600.598847][T16583] uinput_create_device+0x422/0x670 [ 1600.598878][T16583] ? __lock_acquire+0xab9/0xd20 [ 1600.598915][T16583] uinput_ioctl_handler+0x3f0/0x1570 [ 1600.598951][T16583] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1600.598994][T16583] ? __fget_files+0x2a/0x420 [ 1600.599017][T16583] ? __fget_files+0x3a0/0x420 [ 1600.599047][T16583] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1600.599079][T16583] ? __pfx_uinput_ioctl+0x10/0x10 [ 1600.599115][T16583] __se_sys_ioctl+0xf9/0x170 [ 1600.599150][T16583] do_syscall_64+0xfa/0x3b0 [ 1600.599169][T16583] ? lockdep_hardirqs_on+0x9c/0x150 [ 1600.599201][T16583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.599223][T16583] ? clear_bhb_loop+0x60/0xb0 [ 1600.599249][T16583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.599270][T16583] RIP: 0033:0x7f337bf8e929 [ 1600.599289][T16583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1600.599309][T16583] RSP: 002b:00007f337cd62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1600.599334][T16583] RAX: ffffffffffffffda RBX: 00007f337c1b5fa0 RCX: 00007f337bf8e929 [ 1600.599351][T16583] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1600.599365][T16583] RBP: 00007f337cd62090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.599379][T16583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1600.599392][T16583] R13: 0000000000000000 R14: 00007f337c1b5fa0 R15: 00007f337c2dfa28 [ 1600.599426][T16583] [ 1601.213093][T16594] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4801'. [ 1601.263159][T16594] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4801'. [ 1601.362028][T16593] vivid-000: disconnect [ 1601.505060][T16574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4795'. [ 1601.651476][T16585] vivid-000: reconnect [ 1602.198720][ T5841] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1602.437833][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 1602.454084][ T5841] usb 2-1: config 1 has an invalid descriptor of length 178, skipping remainder of the config [ 1602.467193][ T5841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57152, setting to 1024 [ 1602.535873][ T5841] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1602.555880][ T5841] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1602.608644][ T5841] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1602.619332][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.627378][ T5841] usb 2-1: Product: syz [ 1602.654295][ T5841] usb 2-1: Manufacturer: syz [ 1602.667070][ T5841] usb 2-1: SerialNumber: syz [ 1602.685388][T16601] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1602.699873][ T5841] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1602.723988][ T5841] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1602.740915][ T5841] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1602.926056][T16600] loop2: detected capacity change from 0 to 7 [ 1602.943867][T27073] usb 2-1: USB disconnect, device number 110 [ 1603.945525][T16635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4811'. [ 1604.349239][T16643] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1606.044349][T16665] libceph: resolve '4..' (ret=-3): failed [ 1607.253803][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.263620][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.547939][ T918] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1607.710176][ T918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1607.724078][ T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1607.782704][ T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1607.817417][ T918] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1607.827284][ T918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.837435][ T918] usb 5-1: Product: syz [ 1607.847243][ T918] usb 5-1: Manufacturer: syz [ 1607.859789][ T918] usb 5-1: SerialNumber: syz [ 1607.887099][ T918] usb 5-1: config 0 descriptor?? [ 1609.556896][T16674] netlink: 'syz.8.4819': attribute type 1 has an invalid length. [ 1609.685682][T16709] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4825'. [ 1610.390256][ T5841] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1610.400671][T16719] Cannot find del_set index 0 as target [ 1610.505691][T16713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.514937][T16713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.541903][T16734] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1612.551168][T16734] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1614.298448][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1616.156777][T16775] futex_wake_op: syz.4.4839 tries to shift op by -33; fix this program [ 1616.169875][T16775] netdevsim netdevsim4: Direct firmware load for . [ 1616.169875][T16775] failed with error -2 [ 1616.180602][T16775] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1616.180602][T16775] [ 1616.307669][ T5841] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 1616.501568][T16781] ================================================================== [ 1616.509702][T16781] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1616.518362][T16781] Write of size 2560 at addr ffffc9000c1177e2 by task vivid-000-vid-c/16781 [ 1616.527072][T16781] [ 1616.529427][T16781] CPU: 0 UID: 0 PID: 16781 Comm: vivid-000-vid-c Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1616.529462][T16781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1616.529476][T16781] Call Trace: [ 1616.529486][T16781] [ 1616.529497][T16781] dump_stack_lvl+0x189/0x250 [ 1616.529538][T16781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1616.529573][T16781] ? __pfx__printk+0x10/0x10 [ 1616.529599][T16781] ? __pfx__printk+0x10/0x10 [ 1616.529621][T16781] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1616.529654][T16781] ? __virt_addr_valid+0xdc/0x5c0 [ 1616.529679][T16781] print_report+0xd2/0x2b0 [ 1616.529709][T16781] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1616.529743][T16781] kasan_report+0x118/0x150 [ 1616.529767][T16781] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1616.529806][T16781] kasan_check_range+0x2b0/0x2c0 [ 1616.529830][T16781] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1616.529864][T16781] __asan_memcpy+0x40/0x70 [ 1616.529896][T16781] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1616.529970][T16781] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1616.530008][T16781] ? __lock_acquire+0xab9/0xd20 [ 1616.530045][T16781] ? __free_object+0x4d4/0x6c0 [ 1616.530075][T16781] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1616.530119][T16781] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1616.530168][T16781] vivid_thread_vid_cap+0x8da/0x10d0 [ 1616.530216][T16781] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1616.530255][T16781] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1616.530282][T16781] ? __kthread_parkme+0x7b/0x200 [ 1616.530304][T16781] ? __kthread_parkme+0x1a1/0x200 [ 1616.530329][T16781] kthread+0x70e/0x8a0 [ 1616.530355][T16781] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1616.530387][T16781] ? __pfx_kthread+0x10/0x10 [ 1616.530412][T16781] ? _raw_spin_unlock_irq+0x23/0x50 [ 1616.530449][T16781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1616.530485][T16781] ? __pfx_kthread+0x10/0x10 [ 1616.530510][T16781] ret_from_fork+0x3fc/0x770 [ 1616.530542][T16781] ? __pfx_ret_from_fork+0x10/0x10 [ 1616.530576][T16781] ? __switch_to_asm+0x39/0x70 [ 1616.530599][T16781] ? __switch_to_asm+0x33/0x70 [ 1616.530622][T16781] ? __pfx_kthread+0x10/0x10 [ 1616.530646][T16781] ret_from_fork_asm+0x1a/0x30 [ 1616.530678][T16781] [ 1616.530687][T16781] [ 1616.747136][T16781] The buggy address belongs to the virtual mapping at [ 1616.747136][T16781] [ffffc9000c110000, ffffc9000c119000) created by: [ 1616.747136][T16781] vb2_vmalloc_alloc+0xef/0x340 [ 1616.765043][T16781] [ 1616.767384][T16781] The buggy address belongs to the physical page: [ 1616.773805][T16781] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4fc69 [ 1616.783879][T16781] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1616.791025][T16781] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1616.799641][T16781] raw: ffffffffffffffff 0000000000000000 00000001ffffffff 0000000000000000 [ 1616.808236][T16781] page dumped because: kasan: bad access detected [ 1616.814642][T16781] page_owner tracks the page as allocated [ 1616.820387][T16781] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 16780, tgid 16779 (syz.1.4845), ts 1616450665238, free_ts 1455292516866 [ 1616.839938][T16781] post_alloc_hook+0x240/0x2a0 [ 1616.844702][T16781] get_page_from_freelist+0x21e4/0x22c0 [ 1616.850267][T16781] __alloc_frozen_pages_noprof+0x181/0x370 [ 1616.856121][T16781] alloc_pages_mpol+0x232/0x4a0 [ 1616.860969][T16781] alloc_pages_noprof+0xa9/0x190 [ 1616.865902][T16781] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 1616.871791][T16781] vmalloc_user_noprof+0xad/0xf0 [ 1616.876721][T16781] vb2_vmalloc_alloc+0xef/0x340 [ 1616.881566][T16781] __vb2_queue_alloc+0x9bf/0x15a0 [ 1616.886582][T16781] vb2_core_reqbufs+0xc31/0x1420 [ 1616.891524][T16781] vb2_ioctl_reqbufs+0x4c0/0x830 [ 1616.896468][T16781] __video_do_ioctl+0xc9b/0xdb0 [ 1616.901320][T16781] video_usercopy+0x86e/0x14f0 [ 1616.906086][T16781] v4l2_ioctl+0x18a/0x1e0 [ 1616.910445][T16781] __se_sys_ioctl+0xf9/0x170 [ 1616.915035][T16781] do_syscall_64+0xfa/0x3b0 [ 1616.919540][T16781] page last free pid 12805 tgid 12805 stack trace: [ 1616.926035][T16781] __free_frozen_pages+0xc71/0xe70 [ 1616.931141][T16781] __put_partials+0x161/0x1c0 [ 1616.935871][T16781] put_cpu_partial+0x17c/0x250 [ 1616.940662][T16781] __slab_free+0x2f7/0x400 [ 1616.945078][T16781] qlist_free_all+0x97/0x140 [ 1616.949671][T16781] kasan_quarantine_reduce+0x148/0x160 [ 1616.955142][T16781] __kasan_slab_alloc+0x22/0x80 [ 1616.959985][T16781] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1616.965446][T16781] getname_flags+0xb8/0x540 [ 1616.969945][T16781] user_path_at+0x24/0x60 [ 1616.974269][T16781] __x64_sys_umount+0xee/0x160 [ 1616.979029][T16781] do_syscall_64+0xfa/0x3b0 [ 1616.983537][T16781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.989425][T16781] [ 1616.991759][T16781] Memory state around the buggy address: [ 1616.997375][T16781] ffffc9000c117f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1617.005430][T16781] ffffc9000c117f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1617.013482][T16781] >ffffc9000c118000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1617.021526][T16781] ^ [ 1617.025582][T16781] ffffc9000c118080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1617.033654][T16781] ffffc9000c118100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1617.041707][T16781] ================================================================== [ 1617.052720][T16781] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1617.059983][T16781] CPU: 1 UID: 0 PID: 16781 Comm: vivid-000-vid-c Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1617.072502][T16781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1617.082575][T16781] Call Trace: [ 1617.085866][T16781] [ 1617.088814][T16781] dump_stack_lvl+0x99/0x250 [ 1617.093432][T16781] ? __asan_memcpy+0x40/0x70 [ 1617.098034][T16781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1617.103251][T16781] ? __pfx__printk+0x10/0x10 [ 1617.107892][T16781] panic+0x2db/0x790 [ 1617.111809][T16781] ? __pfx_panic+0x10/0x10 [ 1617.116242][T16781] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1617.122154][T16781] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1617.128502][T16781] ? print_memory_metadata+0x314/0x400 [ 1617.133972][T16781] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1617.139622][T16781] check_panic_on_warn+0x89/0xb0 [ 1617.144579][T16781] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1617.150224][T16781] end_report+0x78/0x160 [ 1617.154478][T16781] kasan_report+0x129/0x150 [ 1617.158993][T16781] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1617.164660][T16781] kasan_check_range+0x2b0/0x2c0 [ 1617.169613][T16781] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1617.175280][T16781] __asan_memcpy+0x40/0x70 [ 1617.179745][T16781] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1617.185272][T16781] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1617.191022][T16781] ? __lock_acquire+0xab9/0xd20 [ 1617.195889][T16781] ? __free_object+0x4d4/0x6c0 [ 1617.200659][T16781] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1617.206578][T16781] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1617.212768][T16781] vivid_thread_vid_cap+0x8da/0x10d0 [ 1617.218099][T16781] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1617.223854][T16781] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1617.229944][T16781] ? __kthread_parkme+0x7b/0x200 [ 1617.234935][T16781] ? __kthread_parkme+0x1a1/0x200 [ 1617.239979][T16781] kthread+0x70e/0x8a0 [ 1617.244068][T16781] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1617.249812][T16781] ? __pfx_kthread+0x10/0x10 [ 1617.254429][T16781] ? _raw_spin_unlock_irq+0x23/0x50 [ 1617.259669][T16781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1617.264904][T16781] ? __pfx_kthread+0x10/0x10 [ 1617.269518][T16781] ret_from_fork+0x3fc/0x770 [ 1617.274142][T16781] ? __pfx_ret_from_fork+0x10/0x10 [ 1617.279278][T16781] ? __switch_to_asm+0x39/0x70 [ 1617.284055][T16781] ? __switch_to_asm+0x33/0x70 [ 1617.288828][T16781] ? __pfx_kthread+0x10/0x10 [ 1617.293450][T16781] ret_from_fork_asm+0x1a/0x30 [ 1617.298231][T16781] [ 1617.301657][T16781] Kernel Offset: disabled [ 1617.305998][T16781] Rebooting in 86400 seconds..