last executing test programs: 7m17.316410157s ago: executing program 0 (id=172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r4 = socket(0x11, 0x800000003, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESHEX], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000fc00000000000000000000000000000000000400000000000a0060003b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000009"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x20008004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x24000081) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x9, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r9, @ANYRESHEX=r4, @ANYRESDEC, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) 7m14.017144306s ago: executing program 0 (id=181): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0xfffffffd, 0x4, 0x214f, 0xfffffe0000000001, 0xfa11, 0x7ffffffd}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) (async, rerun: 32) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (rerun: 32) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x842, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) (async, rerun: 64) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) (rerun: 64) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0xfffffffffffffdd5, r1, {0xdaf}}, './file1\x00'}) (async) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) (rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x4a) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 64) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20002000000040) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20000, 0x0, 0x2}, 0x18) (async) sendfile(r8, r8, 0x0, 0x200000) 7m13.871021949s ago: executing program 0 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fchdir(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) (async) rmdir(&(0x7f0000000000)='./file0\x00') (async) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) 7m13.701073579s ago: executing program 0 (id=183): sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)='X', 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) (rerun: 32) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000100)=r1) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e39"], 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x800) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) (async, rerun: 64) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x100, 0x0}) (rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)}, 0x0) (async, rerun: 32) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async, rerun: 64) r11 = socket$inet6(0xa, 0x802, 0x88) (rerun: 64) setsockopt$inet6_udp_int(r11, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r11, 0x0, 0x0, 0x4000840, &(0x7f0000000240)={0xa, 0x4e23, 0x8be6, @loopback}, 0x1c) (async) getpid() (async) keyctl$dh_compute(0x17, &(0x7f0000000800)={r10, r10, r10}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}, 0x0, 0x28}) 7m13.437068949s ago: executing program 0 (id=184): sendmmsg(0xffffffffffffffff, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="89cccd", 0x3}], 0x1, &(0x7f0000001580)=[{0x10, 0x0, 0x4}, {0x10, 0x1, 0x2}], 0x20}}], 0x1, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netfilter\x00') fchdir(r0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x90, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x8}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004880) syz_usb_connect(0x0, 0x2ec, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xdc, 0x47, 0xa3, 0x10, 0x1f38, 0x1, 0x29ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2da, 0x2, 0x1, 0x2, 0xa0, 0x1, [{{0x9, 0x4, 0x1a, 0xd5, 0x6, 0x75, 0x90, 0x7d, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xe, 0x6}, [@extension_unit={0x7, 0x24, 0x8, 0x3, 0x2, 0x4}]}], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0x7f, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x4, 0x1, 0x8, [@generic={0x9c, 0x6, "908fc75fdae81f85dfd3f6a9231db34ddfadf5e32bdf8e452647187afec36d35e1088fe9384845cb61b6502205ccec0e10f7a3e2a8005a99a74208f052a9dcd832e4df827353916e71fab21f017e9aa51370501ae59db6686d1418eceabb8c72a745483c90f46e494de2392fa04dd59522112ca8a38e41870053ef09fb859ab48e042ddc6d393d3dd2b92171131fd28cc657f2cab9bb54666751"}, @generic={0x10, 0x21, "8fdb437917743e50353c8130e0a9"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0xe1, 0x7, 0xf, [@generic={0xdf, 0x22, "8240baa88005f0dc574dd9037677f30cca12524c5ba6e99982a9a084aefff24a49abe17176eca7630e012341b2b6e74b7651af4b73c1a48d3a0d15594c438445162951bec0cd847bc70357c725b85390c57b8b17d133085b470ab0e95097af5f3c542f720acfaf3cf6bfd383d6c4664c9b29dcf921429a37f8f297e34865f8a1402a40127d530df459e35b6fd6c7d53d29670509aeeb1e980cfe058df3229cd341480beaf1220cf2737a7e6dc28409ec18cdda7f5d4a1c5dc96a573b2a53cc7b7a4d3ad8dac4b7fa9093199a9c6bd4fd8e0e77fa7fdd1215db1c612ee2"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x6, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6d, 0x74a6}, @generic={0xc0, 0x11, "4cce9ae331eed7ad83db92115f1a7b445b88453117c87e82824181326d25788b45f2baa01b73030a5a49adb5802772929cefdba2e1ee5c39124b8c72829ee15eb651131a64c6aa0b4032304d7b21b50ec63fef04b3095b2a558e0fec68f6a08a1145f9900d08d9af87c17e116d95a6b69ad9aacf14785ac21e6eaaaa05603cc2d6e634cc4aae090984c5db15ee5836cffbcfb721ca7f3e82917eed26997feb5c2a1c5d69e7bf1d13b38972e25642f7b6c674c0c38acacc480e05ddc9c3ba"}]}}, {{0x9, 0x5, 0xd, 0x2a, 0x8, 0x6, 0x7f, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9a, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0xf8, 0x1f}}]}}, {{0x9, 0x4, 0x59, 0x2, 0x1, 0x96, 0x2d, 0x13, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x5}}], [{{0x9, 0x5, 0x80, 0x4, 0x40, 0xb, 0x9, 0x9}}]}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000102505a1a47f0fee704000010203010902520001320000000904000903020600070924060000175ca8d70524f2e53658240f01ada10000080050000204240206072414ff037bb408240701b99ca60009058202ff030708060905230200"], &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x7f, 0x0, 0xfc, 0x10, 0x5}, 0x38, &(0x7f00000000c0)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "b06c52284381815281d54d9b19c1b26f"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x38, 0x8, 0x7, 0x7, 0x1e}, @ss_container_id={0x14, 0x10, 0x4, 0xe6, "85ad55214f9b33911936554071288937"}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x6c6c}}]}) 7m10.75898984s ago: executing program 0 (id=194): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 6m55.644164961s ago: executing program 32 (id=194): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 13.791577099s ago: executing program 4 (id=1815): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$getflags(r1, 0x401) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x84}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xffffffffffffffd9, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x0, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x4050) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) fdatasync(r4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x3) close(0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 12.712903645s ago: executing program 4 (id=1819): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) (async, rerun: 32) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x0, 0xfd}]}, 0x10) (async, rerun: 32) syz_open_dev$mouse(&(0x7f0000000140), 0x7fffffffffffffff, 0x40) (async) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045000030000030"], 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x201e, 0x221e, 0xffffffd6, 0xc251, 0x7ffffffe, 0x1}) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) setpriority(0x2, 0xffffffffffffffff, 0x4d) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) (async) capset(0x0, 0x0) (async) r5 = memfd_secret(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) futimesat(r5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x88500, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) (async, rerun: 32) syz_emit_ethernet(0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbba1bbbbbbbb0000000000008100430000e84f76b1e38f9b8835e64de63ad615ef6565c42862828aa306925a922ea3b92eb0b17e3b51ee2b0a928e70ca8c40bf40f2f4a065a182"], 0x0) (async, rerun: 32) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000b00)={{@any, 0xffffffff}, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000003, 0x804}) (async, rerun: 32) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (rerun: 32) 11.55403044s ago: executing program 4 (id=1829): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000a00)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)="b6dfbabef5c6236520e67a7599a821ebbae8a3c3cc256499", 0x18}, {&(0x7f0000000380)="d72936bfdd3c2b964fc4e7d631da86b2f70a29acf2223ab4ba32f96511adbc5f7ca847be135b8261dae90dccfbfa9b3fa7671fe2db2e7f54e65d70f93ca64df9977123d66ac25b33f05e85ad33f9c43183fc908251a591ed4b00"/104, 0x68}, {&(0x7f0000000340)="d45f98474e05618400abc4b5", 0xc}, {0x0}, {&(0x7f00000004c0)="0a1f6058f2940e57bf7d17373739558a984daa8b3fa06dcc42caf7693577dc5312ace9369989c3373f4c22b29d72e348841083ca9377fbc80cb3fc0b551fbc55f42abb5375fdc6157609289356f03129fb959dcc29ed980e5579083d31ab4f466576b2fd92949db9faaa5097c13001630c027c2a8fbc95a0867a7f1495089b13448649203f090c73be68e733f313dcc9d3e9c84a3da8d50a7f56c399a6315b0f52908d1ace5d6d97b0d284bf933fba07b5ab41adb420625cedf190238937", 0xbe}, {&(0x7f0000000580)}, {&(0x7f0000000640)="84b69967ec6906b97ea51b7210ea1c96d6a8ee3883ede75d7bc6494c520c042b650674606426de486e6ba909678213ef79e2bb7a04604babd6b262025ec316940f8d38a999e39d0a0b6feb78ece3ee328233efebe358401f095b0bb94fcb78cb9f175c99f0a2613c4b6980cb32b8689449b581f0a578b44ccb9712f37d466260e8b5b4537cc173ed42aa413a2c8d94d306c21e6b4ef0c4b1e67ebc5bc36529652b9a01752352b0cefd974455", 0xac}], 0x7, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r0, @ANYRESDEC=r2, @ANYRESHEX=r3], 0x30}, 0x1) (async) io_uring_enter(r2, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x14, 0xe, &(0x7f00000010c0)=ANY=[@ANYRESHEX=r4], 0x0}, 0x94) (async) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000280), 0xff, 0x40) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f00000005c0)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="acdce39960f3115533a0320f1340d436fa911839391f667f0343f7e4ec78c033d0cc89198a5bbd96d142ea7c90ba156ebab65ccf58a0b11040fe879ad7ddb2c55e7b90f8779ff5ae010c592aaf958a2514ba85fc822979e0d2cce4e91103a5ea94c0605470ef34d4498d5df95c29c74d6054bf3aa37b4a97", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0xffffffff, 0xbb46, 0x34324241}}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f0000000700)=[{{&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000580)}, 0x6}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000840)=""/163, 0xa3}, {&(0x7f0000000900)=""/132, 0x84}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f00000009c0)=""/164, 0xa4}, {&(0x7f0000000e80)=""/160, 0xa0}, {&(0x7f0000000b40)=""/156, 0x9c}, {&(0x7f0000002880)=""/4112, 0x1010}, {&(0x7f0000000c00)=""/109, 0x6d}, {&(0x7f0000000c80)=""/121, 0x79}], 0x9, &(0x7f0000000d00)=""/207, 0xcf}, 0x101}, {{&(0x7f0000000100)=@pppoe, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f0000000580)=""/28, 0x1c}], 0x3, &(0x7f0000000a80)=""/112, 0x70}, 0x1}], 0x3, 0x10000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) 8.461051699s ago: executing program 4 (id=1841): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = memfd_create(0x0, 0x3) ftruncate(r3, 0xffff) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r3, 0x1, 0xfffffffffffff000, 0x100000000}) syz_io_uring_submit(0x0, 0x0, 0x0) epoll_create(0x7fffffff) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000240)={0x52, 0x1, 0x1, {0x1, 0x1}, {0x45, 0x2}, @const={0x3, {0x400, 0x5, 0x9, 0x3}}}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000064f1f440cf1065807991010203010902240001000000000904ff000220473800090506020002000000090582020000000000234903adbb4a38e0a0c29b5f02276bce"], 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES16=r7], 0x9) fsetxattr$security_capability(r1, &(0x7f0000000140), &(0x7f0000000280)=@v2={0x2000000, [{0x6, 0x220}, {0x1000, 0x40}]}, 0x14, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000029000b0027bd700000000000050000000c00018008", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) 7.204584255s ago: executing program 3 (id=1847): pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x50, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "f758046a9d10ee42ddd506a543c2bd69"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}, @NL80211_ATTR_PMKID={0x14, 0x55, "891004828f5e11f9b3eff81944f9883d"}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r7, 0x0, 0x201f00) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9efa}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x700000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x43c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xf7, 0x6, "6c65e7b81acff5ef5f12934ecf02e6b373af721019983d00cc805989824976a84717038118860a75ed20b17e63b418e06b67df8be2c7a2b68c89067b10d6bfb546b4711d80608680f8d1dac51d766b6994054c7fbc3e97925fa311f1b8cc24abfb5d5c0d32f96961b2153a80c646038a5dd8f12d9ddd42ea7a76cb8d3f7257c89fec730023057088d8658b30a341e79a53604693ddd8e2defbb25b0b7a20a5b31d5b46aa964bcdebb1596b07c2cd460653650d5274e5752ea5cafbebafcf55a07e1e36c4c468a9e302ff2a443a5214aa437a85edffd0801b952ac354e1075338039f40ad43ac26a1f3bd755dbb1d8a3fe416ec"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xd5, 0x6, "0e25a12f1184111a26accc1c279a6bf83d06ab74c526f083bc436ef830eb9bb4d3f60f7c33d04269c30b08b4625387d0b21a66a30c56a044f62ece33074b7786edb318d3041fa12dc3d1d887abad85db586fa1bf60aeeda31e42986de7030c7cc3d1036c37b81d6259259d2bc37d61ae490a865e42f79a4bdfb0b208b279e640603a33cd369366e99bde4393ced18ff24c2b96ed0e92440eaad8711262ce5ce6a70422cfe0769b65c8ca91f268dbb93f7aaec671479b3c2bd0045ae9c18d61993739f0b930f5f2de95992b2d8a5e15df86"}, @NFTA_TABLE_USERDATA={0xba, 0x6, "f9d8be6825cc2d4b991f6b3e27e1f4685a304e91b7d6a4e96b381975b9ed7e0ba3bd5dbb63a1de805269104b664345f33226287e96abfe18bb5fd191bfd0c9655aae481cbadb477626ffc1011ffca10773847af9dd2c4b25a569132828842ecb9e2f5fa84d7f6a12ffa85bf6f58763a60d1bd09e811a4c2f1c66b7a6fda1db40d5cbe841f8871aebc3118970b44f0e00376d129a549a76bcefd4ea9caa37849dbbe2a7e6a26cc478b1ca230d68b7e5bbfd5e14662092"}, @NFTA_TABLE_USERDATA={0x100, 0x6, "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"}, @NFTA_TABLE_USERDATA={0x82, 0x6, "e9cb911cb29718d20038bf201a111ae3c0c99d9ac7d86071b304290ba66133a95881dddceb8b4827333694f81983d52f6314e646da78c2202122e623b776f42e0317597d1ad38c4b74be310c6162050a47edb6a76f15454b2de975e42036265c21493cdeceaca5c793b5fbddbabc6ba6715558134af0aa6eaef68716007f"}]}], {0x14}}, 0x464}, 0x1, 0x0, 0x0, 0xc810}, 0x48050) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) socket(0x10, 0x2, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) read(r9, 0x0, 0x1b00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) 6.521170412s ago: executing program 2 (id=1849): r0 = socket(0x10, 0x803, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async, rerun: 32) r2 = fsopen(&(0x7f0000000040)='vfat\x00', 0x0) (async, rerun: 32) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000600)=0x90000) close(0x3) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='\x84Re%', &(0x7f00000000c0)='ceph\x00', 0x0) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 64) setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000000000)=0x7, 0x4) (async, rerun: 32) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0xa1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000008000000000000000080000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001500b703000000d5810a1ebc840663000000bf09000000000000550901000000000095000000000000000000000000000000b7020000008000008500000084000000b700000000000000955a321395fd7f67e76dd04701c5dc13fc40ae544d409140bd944fe8d81a70e873e6345ea42d0dc0245f70fd2b3ca5b41545404a92ad0c3b547ad50f9e346e11cdb6d9fd9aa1b49b0ee91cef5cb45fbd164476c74d28526b6dd4decb9514cccd75ce8622b829caea5e8c28517c77c7b9cccc5a6e5c6cbadbf134417c1582bdec1a532df4dc4134dc89224bf523b0130abe4256c4cc4e5faebfd0580cbd"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x0) read(r6, &(0x7f00000003c0)=""/118, 0x76) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000000100000000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="6785040000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r8 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1000, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f00000005c0)=0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x2, 0x2}, 0x10) (async) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001340), 0x101200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r11, 0xc01064c1, &(0x7f00000013c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote, 0x4}, 0x1c) (async) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001e00010d040000000000000007000000", @ANYRES32=0x0, @ANYRESHEX=r11], 0x30}}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) io_uring_enter(r8, 0x6ef4, 0x3903, 0x3, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PBUF_STATUS(r8, 0x1a, &(0x7f0000000000)={0x5}, 0x1) (async) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, &(0x7f0000000300)) 6.469305919s ago: executing program 2 (id=1851): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x18, 0x8, 0x0, 0x9, 0x100000000000000, 0x800, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) r5 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r8, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) syz_emit_ethernet(0x4e, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) 5.787213065s ago: executing program 3 (id=1852): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) (async, rerun: 64) r1 = socket(0xa, 0x3, 0x3a) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) (async) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) (async) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wlan0\x00', @broadcast}) (async) write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300080001000000000014000000450000161400e89fcfd12a0000000190780a010100ac1414aa0400907800001400450000000000000000110000"], 0xfdef) (async, rerun: 32) fanotify_mark(r5, 0x80, 0x40000009, r6, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) (async, rerun: 64) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) bind$can_j1939(r9, 0x0, 0x0) (async, rerun: 64) sendmmsg$sock(r9, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, 0x0) 5.408865147s ago: executing program 5 (id=1853): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x88080000, 0x1, 0xff, 0x0, 0xfffd, 0x9}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) fstat(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000006000)={0x2890, 0x6, 0x3, 0x101, 0x70bd2a, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@generic="16b4fa22c28b3d9a48893cbf8027b2c14d5a9c1fa229c22072b4b0481943a9ba40500b0165ea6c2fefe73fc47e96db9a0f4e2c1eea548b4d94dace0000000000002b312c13f5f02fa7554996db6d350a648d0790b8dc97058adafad5c0e2302bbc07078862c1aa2843f54a7b3ad9ac3d4fc83496aa3747704b96f0e435c0f07c847e8672efd7b810399c19394e88d910e5459644fb4cebbc6d4f279d58e6", @generic="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", @nested={0x1714, 0xcc, 0x0, 0x1, [@typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x16f2, 0xea, 0x0, 0x1, [@nested={0x160a, 0x30, 0x0, 0x1, [@nested={0x4, 0x122}, @typed={0x8, 0x140, 0x0, 0x0, @uid=r3}, @nested={0x1534, 0x60, 0x0, 0x1, [@generic="c54acf2ba037291542e41da16821b057a5fbf7f250648574c8f1f1edf07e595f05996f053da9e028d7129744ef94b09a1cfd87bf1dc9586922569fba4082acd5febd44e9b1ca1ff672269720de", @generic="7097e1759fb5259576d8cde1ddd4bfe10770a9e56a54483fcdec93e1df6cea0b90eaf9754d59a486644f88580620e3d07d2211c9023b7a259340902a5780cb47e069c1a863f30ba170901f788674921d1c2799b91f4c0e0d499c7502d03d495fd051ba88212aa6de9f7a09de403f3fe7408414765fb7e1c47bcdb1b831e4558673d263f50c38597925e86f9bf170438bf81d3ab6e2952542d2c9b55505810c1f", @nested={0x54, 0x79, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @pid=r2}, @typed={0xd, 0x122, 0x0, 0x0, @binary="3299be4828e5a5551d"}, @typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x4, 0xd4}, @typed={0x8, 0xda, 0x0, 0x0, @pid=r2}, @typed={0x14, 0x5d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x4, 0xd3}]}, @nested={0x20, 0x9a, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x14e, 0x0, 0x0, @ipv6=@private2}]}, @nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@multicast1}]}, @generic="690503bd3fb883517e643be15dcc16d327ad083aab1b050980550a48143892db53b46ac8155548d8dd618e40a7eb1fd9eba694007ecfffb1464b7af7139ccd4c400601d683add784794a7df2e5643297d89f0303f2929893fa864ecbd0bf81fe797da8017eb0d82d5f00aaccffed1fb5898d344129dc8d35ba27ad49ee24c644f026067980b6547ae89772420a7cda879ec9bc5ba13c2c8542407bb5e35af0b0f9bf66c721e71e5a9c3e7f5038056e84bb2765b0eb5ab78ec2649e863e4cc9a23881f9", @typed={0x8, 0x104, 0x0, 0x0, @uid=r3}, @nested={0x12ec, 0x47, 0x0, 0x1, [@nested={0x4, 0x132}, @nested={0x2c5, 0xd, 0x0, 0x1, [@generic="42f41eeb8f3a1b3b097a479a16c08b5eb28ec521702e58a99394f00ceb622486b952fe5be007449338de51d4133c47fa9e61e793b88786fbc21fa19f48719d5a808a8bf5b7bc99fbbf127b5603959bb8d82873dab9c572bcc5b201c0d638d15f16ee8c9b5b5933d4777aa5dc87668280fcb0b609f76fc8d07a216b004ecc128cf9395eac4fd80c83d0a28fe1115d44f2ea1864907b251c80868bb1754d7d08f9a909ad377bc9aecb058edd5a16ef95e0e90a93881abefbc5333d997534d16f52d78e72bb592409116727a132a88ccf03509575656ea779efb13d717c8ccff7079d93b514666dbccde4fe14b8f585f4c2eb817859e5312c3c96", @nested={0x1b1, 0x102, 0x0, 0x1, [@generic="c6637dd7c0d2ddca6a7f67814a622cb76ed717c5be0f764cb8114c969422410dd51e1b88198840926244ff6fc06d6370f19faf141fac122fbad6d3db1502b388582e032ce57c217c5628a981a926d9edad9ae484fa99b10043b22dba71ea9fff1d3ce351787d7ea7bfe84221ee4b2d1f5943cf708f0af40d856e21e7adea2a9e191dc1481f3137604b136aa315fae2cefdff1acee6cbf9bb8c01875147277c87092a36f982b420541910d46f56b64122ce570757fd20ef25e4a88c946236e5694c58f1", @generic="9b9b756c9ef5c72b2bb9a175b3798c2b49fc2f7ea7ac15c899710c3657c2e373d607c3d769f0e2193afe", @nested={0x4, 0x104}, @typed={0x8, 0xbe, 0x0, 0x0, @uid=r3}, @generic="0b5b01eed38c81386503ea0877db2176abee0940170570a0a5ad259327429d01f63806d3274cbeffd0861aad6cb3127c12e2108e0ef02336ee5b46b7517f613f9177a379e2a4935122eb76c7116928c9d5eefe4134c7c1ce11df49360c0f2e76e677e568896909e46efc74eda60e279ed6084ee0df074acd69bf49947de325a0188468c1d180d1e86dea2ea1ef9a8b96fbdae06121fc5127ba5f79bb01364c7be7fcab8475f68deb6fea5de3529c7b02", @nested={0x4, 0x41}]}, @generic="286bc56a2ae96787f8982f26d87a91aef9831b1c"]}, @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@private0}, @typed={0x1004, 0x47, 0x0, 0x0, @binary="93e77eafe7514abfd23ce6952a9dc0e534a09504dabbbc75132b0960ea486d8106c61c7d3cf613404e1fcade0dfbe3c17dc851e52c1d92c189f7ae54b623f4535c3325a31ad75cb47963a9745d0ec83706fdb51407724be19e0db60a5252486f45be7030abaea7c7eb24bf01d00884dd034e7031e6c817e00b4693fa06a6b84edd460b67465444192d948f01baa34fe1568df567618b984ddfd15381dda2c42324a65590a559e7dccee24089def7f5340755d0a9e80b4e5f51302d740e670fadffd073ba6c54594246fa2e4b6c9d5ef60db2b13e469b369d903b4d269f7d3a660dd3de1528b85f8d5023a6236c741c3bebc33a120cbb2ae6f9ab7354071a98b75b2571f6798fdae3cd982ce9a1ac19dc74b9161a0e83aea1c1f861fe05bb93943f9649c65e5237a9e9e75d167639ba888c6b16ead7e5975be89f2645df6dfce3227c72154f32214f01427affd31a5fd5b12849f9cbc8e0975f9569b3f4b318114c3e909067bbdc14f6f3568fe7b4e0881730dd491c5143a746bb2371481c837bf09f1bbc71eccaed64b91e17745023ab334179a340e658480bbf2d22fb40f11bb2160ff3e0de339acb90a980e0dd4d912311c60b19328d2805aa70764305a53f222c1c15990f11c8e00784a85ca5d952b87babfb583511b5e38326b38ead1813da67a262380502fdbe775aa8c2defd8b9e124262d1501e0f79abdb35e6d112a37a388cdd4a8eb4843f49b15d8288862b7057179d3a05f11f916410b65b3df037297f8b1cb42b63f4ab8e3e7d8a9ce5a9463e93946950ad283612e1259a64570d806b8f47c0a2391e0de5396c8ecc61dfc4f0662969a4319a5a9b9e84b5a207f3bd2fd7304a1587b2d3452a9351b5984db1e1426a4c2331f040ff5440d85535e74f33ae193f2f9292c7119a306c2bdd0043418448da04ae53e5130dd53a68a47fde59e4947a9c9ad2acb4338a31c378f818672a16652cbfd2a7829bfcd3284d924f934171bac0fa794dc5ab407ec7e2a88d925d02deb1f01d0f73028b4e15f4b698c4e3f24f9d4e3e497284e156dd8f6fa1d0cf04edd052e2ce11f9374b87022132f4a2e7bbb82cecf1ba34b92cdc051af84be174e899ed06b56dbebfc5923685fce41184f29348381abfb07d53ba34fde9dabed2b8ebc8f32ff9b4defbc402f27d2454bb4dc8defe4bdd364e99b69f43d0bb7e9c02ea8832c9803941862684bc0435e6dfb94488ff3386844031ce7e7cacd449e6b4f8b749aa3544304fe44ad8e3fba8a1bd83cd1bd79e16cb7a92dec152651e86ffd78b7b32ed57799d690fff7cb557d47bfb54af956012e1ef9a3e55a82852af5c5b33fa671568283d4ad5c537a9f892d24241b6c6fe1283b0b4b164c32ddd5dc3fe6841347036f45d0142d247a94fcfefa89e55d62d8a76db72c027f8126723d8a8e65afe7695802248f94285b0c4b0e3216a1e737892d91598182632f9ffbc1a49e13297623078bed11b284614607b84fa62ce0d3a151a659ee4ee00a7df6aba03492bbb41723e2a6ccd0e648c3df6d7bae8866b89a177bcf850a004bf87260c6cd858a926121c1fac591a7b5c99c92ab76fc77c7bdebcca0d52f5141cd321e5aa631963433de07e2105a8fb38f0fe1217ec62d8e9b2cecc348d9017768f11f26bab042eb9c3b02fd2a05f2de1adde2838f598606c5ae646fe49d3f0e3dfc078ac95ae4b34e4c883f78dfc8480599cc5e40d074091a8b9ddd69786a67a1344b6043281b61a3fead9e69b009871471d8d55902f52cfa1a31f3a018514ccf129d39dfc8468e302c5df7ff29f80dda6e1c0737a920e3101c6449b4011a9b0c72adca3f312a00e756601622a68b9746bba7c15c32ef742a2af40a079a8baa3163f2c741771410fc5632f59557cb2e3992f080942929d4022c81cbadb6fdf33902ac72a9db79864c1ecfebf198394a7a743df3859ca12dedf3ff924c752655dd1816218bd25343a3aa34e00924ed925a1c5b52de27dd813c0919ab31eef83ba0aa8e9da0b1c5b8cc7ae93ce260bb46c32dddad069f7e164075d66cf15701aab7eafc9b16bbf199aade10dcbbb4e09d7c3980400abc835cf75159601743ad0ce660d947c2db83d84c2f89d28af7a814f1bd1c8841f0a1fcce5ba7db7a7ed66b6f746f418d0c21daa483f0d2e3a7e3b6ba06c25274d92e47bc5f25f1dd59ac7d38d033cf46de2a877593f10196078bba2439a6c1d59b910b292251ab2c7ed9596d22eb8e556f89f2e3600b18373c1510a7206e7cbc9ed9ecc86a1d6ef814e8f190672d7ee63400933c0451015fc611fa3e3744b324910302b3ed78416e54c7c9463c28dc16bf02c43579e10144c0e66c6d9567cc4e6ca5f4a55a04232ee92f6b8905bc9fe599ebe4a52ebfd68c1827bc0b0e263d26176a6fc0384a6e46e2bca3c933e49b329121ef481270ac0e990cdb374a9663879e83af75778ee5fc0cf6bdcf8a94268190f0b72b0f4369ca97072c1cc782481de06a1ef538e2c2bb8c6f011600d3c74884dc3e37d148c1d16d5cf1395207feab1312e78908f3e56022b611a2c1919bbd698c7c84348eaec1a5a1a216f52e74afbad7451303715a89f07f2cfe6f99e9f9f10d4509d6b0cb5b35f5fddb45f844914a9c740d2563ab308888d433446a3e45032d1a1916520c88f022b35fbc7e5528172720bfa05e05127a612e6cdc0173e44e91ea5913f39af7f9ec0e74ee0d850f06332cff2973f8abd07b17d0506ca933628da25ae84fa98afa17690e799640c91f6dfe1136ea5d9d7a1b60cea780d008af9db68e90243c06703d2727f7277a27d3bf1fe337a4cd1124eed9f35d7c1235dae23759aa57880ad99f50ca2add625e6f223cc034aa7548b2c2a7c6ab653309e3993699ee75c53366d3322ee3bdea56b6ab2cb40e3e3a18e31814dc35ed1eba9caccdc599d5af9a40b0224b2311ac5830b683dddd9495e26ea28812e04ce150338323649cd60c52221560ea0af7ebda9bfdcb90a1b23b4a219165723a878550b3253107fdf85753144f42eb0596df07634ad9693f183f66257d5b83838bb52352ae9cc4a0b1e41c9e24855803ade70f8559cb1cbabf2019d1535931607c52f488f9169cfa31ab24b0f122483edd19380d4f560c684747ce63eba7d02bf88c74c9b2aa0262384a23af6449a8135aa5610ba25193f6d19280ce49736350d34e293aa7e489c448e98df7915c7f5b19ca8eebdf87816dcd86613a35186676bab30c4a53c75b701b369d607ecdb5fcd88b4a6453697ed44cccb7e01a9c66137ee07b8895e33f24ba4cd325be5f6f629964bd3e4c1235448fc1ac90fe7fbcdf59a34d58f7e18311376f3ce99acf5fa5386ac1ba42886c476f8188b1232b71bdd23070b6da259ce96393a89722dac77a39229873aaae49fbd3687a0935f2048c91444893efcf0de7dde9d507d78450a2082b600a97b190460b3be48bbb12f4f1ed97e80cca63a1dd761a660fcf2eaf29b50dad80fd064c00a56233bd952476b27d221c5527586c5e74c037e1174b544e7110a39bea624a50775ab494ddd115a9874ef402f60b659791d98c7cdcce6160d5d2445c67971dfdbce4ba091f61bcdbf45d2d1c8e2a6fc107587078933391fcc773d26a3864fe45dda8a0a8d14d7536cce12ae82ad2099300433ce51732938d8da6c43a98792ad3e1cb61c20fb1acdb84df4f9f7595cc9ccc9aab4be1c89a8a41b8026f85c8263d967021ff91616ab4e8325e6ae0dc66d21c92e85be3520f3fa828f71bd38e23db238c76b0ac0f00a498e3cf354160481fab7db92a3b71252628f984ff17bdaca28dc058878ffa74ad93685ef32dfc4e66425d5df9eca52decedc833d5d86b055408b04bf775316926af15c0d2c1f4f43458088682f0803a0d918495673e8097848ddaf5a54caacedff3a4634228af02fc4483e8e91a35e4b39096c45dde02c624c7abaaefd60e3eedc3ca5b4d72f4914fa8e1a5bb3b67a099f53c5a7c629a92b718c5bc6c20636f8a794c4d85043ad73690015814e27950cfec3dfcdd49ced8db25911186587a9366dba6d16c2f224d63cd7fc2f31e7f0cc6a613bb1f16f6f39a133dc4e064484f554d4df25636e138316423e0a0cd475e434032a6a1d45fb0b39ec47302f849658e1023b19d0f02b2ee17f6b235101b619a1946220b5776b4d7e1580eb7a9e8508ec966428ce0aaced411bab9e346efafbd186512a18b8a43adf7cb0e81256e62f02d5e7f0dfb754478e7b1576ec23cbb925947896b710bf0d7acc201bc75050ccb51da1875263c78756e62d2dd39ad5cd70b53af0af3c8e50e28290fa40c1f37c25b78a39eb17fe03c3f2dbb6a0e7537e3fb615b5843bf0536b1dc9f4adfa22a1dbc019181d4def9078750b6d3a784a1d0ab1ce837e75e9b4e91549625e60822e81ed030f2e8bf566aa4a20dee44c9eb69491ff338f33d100a488788e264cb4b0113d330494986c80ae293b66813f64506d91fb82acb253715ea14dcc1fe328e2b247b2ad183ddf2b0f6dba99a358bd6e334d46e5a1629e6a4a989b8b1e6ccf6f67968d597a1241381628c93e0703462a236dbc5c84506d8655433ba4b44a1a487ef66d0038df26c5040e016f1d3249e0b29146a429c2f4078056e72036dd2e14486187cdadbc91bac4555fc4d3daa2b25c4e6c92022d2ef0645b6ea62d7ae4ae03f5a56cd07422f275b8622fc5929fc159a8f4e7bf9c6d3e8fc8b2530ab77abd709bc341d5d47f35d3f385f8fcb09bfbb924178c0027c5386e27cf5f37e765495851e5f00d6ea4adfd28a3db05bcacbb37ee33e0f05aed42e165f91e3ec83a7af33a45d663d948cc8ebfe32b45a0565304d7e4f92d3ec4dd0d0aeffe6db8380be531694cc65a26bc7273229cf4b5f026a59215864905cb9184208620204d8f2a29a06408d7c538da4147c7cd730f3839d1a2487fc9e94be26cf376d0838bf99bfe02931fcb98d484c8944d48782a2f4e4ba9608a4633ea5fb24c3e31f4b48b2be3edaa169555f0d686eb793821edf7d0a9ab823d44190910cf4440d96258e28f48c0763b9daf1a6f0c0ff9a2152775b5345520bd2574af026f26a07486abc2a2964199d49e13e3fbb9a53e9f77d5719f52e8327b5294e1f902f40f4d484c7d50185aac6af0c8ae1b1e9c55a3fa0db4d6ff9241952d9cbf87308e23e39cf939d173c1271ef8ee5eb135bc1b9a0591477a3108efca12532cb4e958b39126674131141def02471dcf3c5218772976b8d543bdb3b4e7c1af0f10d1bbd581fc76e37214a8a143113f6b76dca5ff6b6dbf0324bc29d4f43ca9c5dd63bad6ed1927bf4a7704a7dc18356afa0ca85af810e7dc662cfa843fd21e0a322615616c2ca10ce296fd5778c8255ffacd6de5e289b223be7929d24b7933bf3b6f227698a4f05d5e673705fc4f86512038998348dda98205fc051dfb8c0b3570b348b3aeed2f6ff4aba155589c4b3ab3107196bea7cf8b7433dde6c297931b6352a1c5757ca5eab901dab6e038e44fa64e61b8e227ebfed99f85edaf971fb812768c43821edebbb7cba5ff1109508f353f93bee8763cba937968a8e6ba652dee79e70f25517f4fb715f54ac59e918900a86f50af42c162fb562baaf0290c553d642278af11dc022e94a3a4c256665c0c387597db3da8321a604889919dff814cdbd5c33e33a739f75e02ff38cd8575549c47e61b8e707bc3215bfdd51adc127704fba6c7b048f3c29896474a9af9db7ca648b255221cc8b174ab83a07d93b7e31b538d062f19dc4c5fdd32a911b10e008336efe9a7"}, @nested={0x4, 0x1b}]}, @typed={0xc, 0x7af, 0x0, 0x0, @u64}]}, @generic="76af3155d651f6947274524c4699b87ad7f9e73a9d152860fa0e69d2221703cd8683352ef836b96979a5965da32ae9f4ef149e4da81ea02fe8131980f20115b57798a87920dd04952c7e8dfa64e15f42534fc5a7dfad117755909e02dede0dbc753de1e293373639b59ceada8067f2202bf8c046fc1188ae85cff5faa45cd73821ec21f2ca9c7692424bb1181e7a61d65e47317cb5dd", @typed={0x2a, 0x36, 0x0, 0x0, @binary="fb618ae97fa235a51e0f2d4eb123f0c5dab16e20e25fb782a20c1e1eb666a33ede2bb8e4a8f8"}, @nested={0x4, 0x7e}]}, @generic="593bc260c150fb6f21b7eea836d867e2beab1c16419f034f63ca1505828c72e9663898a2446ea1c9df1640da709963eef74289ad8ef06864ac2fbe1ac014e293cfe390bc031cdcc06051ab3f431610b54194525f75ad0e", @generic="4279097dd9c2d3942f2bbe4adb634ebf09b0da1b02fac75dce20e053e7d318aea81d604945b0579ffa40297b81ee310aca5342e1d575243e7703bba0ccf6fbe93a4b004ba4d47f40a1ff9bdb1e4be6e96b93b16d42ab65cf0d370e2f3c41efb37e7f1d3c07f6f12d7a6c5aa3e00297051dd30b7160fed42d45718d1e1146b9aa97df3f", @typed={0x8, 0xf3, 0x0, 0x0, @pid=r2}]}, @typed={0x8, 0x40, 0x0, 0x0, @uid=r3}]}, @generic="743b8ccba42a465121628613e63189e37655ff82b777773741535ce4283bfc35175b480d7bdb6de6d370c80e02003ca8e33b4f735f8442dc568a394bca77c05844b2461b61e9e8574d48fc621e8840a9c10f6dca657197b9e01deb2c2c96db65a2d15de05489db645b9122fafbe97744d6f0b73180a93da7a372f7696e28d1f6767e0aacfb502cc0000000000002dad8e6f5c16f0f3637cefac5130ed3e04569dc469f698bc863e8a1baa55d247aa1b071268c0c03c553fffe67150fb32063c19214a4b3daf962ace808"]}, 0x2890}, 0x1, 0x0, 0x0, 0x400c944}, 0x8000) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160009000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) write$binfmt_elf32(r6, &(0x7f0000000f80)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x62, 0x81, 0x0, 0x2, 0x2, 0x3e, 0x40, 0x21d, 0x38, 0x346, 0x0, 0x3, 0x20, 0x4, 0x0, 0x6, 0x81}, [{0x474e555, 0x200, 0x3ff, 0x7e49, 0x9, 0x1, 0x1, 0x800}, {0x5, 0xc72, 0x9, 0x80, 0x7fffffff, 0x8, 0xc271, 0x300000}, {0x60000000, 0xfffffff9, 0x4, 0x1, 0x8, 0x4, 0x1, 0x3}, {0x6, 0x0, 0x7, 0x6, 0xd, 0x8000, 0x557be49d, 0x7}], "", ['\x00', '\x00', '\x00']}, 0x3b8) r7 = socket$packet(0x11, 0x2, 0x300) write$dsp(r6, &(0x7f0000001480)="635128d192b2676a6ee534860c2976a22302cdfec500ddf1026d18197e55720f887d148cd943a9de91619532e50088b4b56a867c86b8703f04caa0f36ade77e0a2dec5081043e8d0967a2854091afbf9ca29c98ef8b75df563ea9da9ca032ad922b2c7c09cc26b0b928e3a6b3da94b9c4e7190cd4c0314bc7a444d162275008e655e28a94daafc3e5702259481ddd460b1baa3cdf4a4d4aad3f5a01dfebdffcd287b7bcbdf34f05d23ddf66c6193c93752b08e319b84b22bce190aad0189ececc959c88c84200e98e72ef152b764ebfcd98520a6326b842f6226d8859c6653edd593e8c5c8b696a5a5529e908e7b62", 0xef) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000462f00fc000000000000000000000000000000ff020000000000000000000000000001242022eb00000088be00000001108700000100000000000000080022eb00000000200000000200000000000000000400000800655800"/132], 0x0) 5.247269457s ago: executing program 5 (id=1854): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) exit(0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '/dev/fuse\x00'}) r4 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x401, 0x1a, 0x3}, 0x8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0x16, 0x4, 0x1, 0x9, 0x58, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x36, 0x0, [{0x5, 0x11, "61853379342bf9bc837101084905ae"}, {0x2, 0x6, "9b2f6985"}, {0x7, 0x6, "29d6b434"}, {0x2, 0x9, "4107220cb4ea41"}, {0x1, 0xa, "434c36e509a5c106"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x94, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x14) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000300)='posixacl\x00', 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000400)) 4.871590747s ago: executing program 2 (id=1856): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000300)='rpc_pipefs\x00', 0x0) (async, rerun: 32) r1 = memfd_create(&(0x7f0000000000)='rpc_pipefs\x00', 0x7) (rerun: 32) close_range(r0, r1, 0x2) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async, rerun: 32) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async, rerun: 32) syz_open_dev$midi(&(0x7f0000000040), 0x1, 0x206ac2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xad, 0xf4, 0x9d, 0x20, 0x789, 0x160, 0xfd08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc3, 0x0, 0x1, 0xdd, 0x54, 0xf5, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) (async, rerun: 64) io_setup(0x10200401, &(0x7f0000000800)) (async, rerun: 64) io_setup(0x9, &(0x7f0000002e40)) close(r2) 4.600437329s ago: executing program 4 (id=1857): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000580)={0x0, 0x16, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="0f23c70f21ed66b809000f00d0b94a090000b8faffffffbaff7f00000f30c4e109f99f2b0000000f01cbf3ac66ba430066ed67800e416704660f38817e30", 0x3e}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x2001}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@deltaction={0x58, 0x31, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x0, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 3.965337362s ago: executing program 3 (id=1858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (fail_nth: 2) 3.87183636s ago: executing program 1 (id=1859): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800d1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xcdf, &(0x7f00000005c0)={0x0, 0x5883, 0x0, 0x0, 0x85}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CLOSE) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x802) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 3.456369848s ago: executing program 5 (id=1860): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x1e, 0xa01, 0x0, 0xfffffffd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800d1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xcdf, &(0x7f00000005c0)={0x0, 0x5883, 0x0, 0x0, 0x85}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CLOSE) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x802) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 3.405239392s ago: executing program 3 (id=1861): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = epoll_create(0x7ff40000) epoll_wait(r1, 0x0, 0x14e, 0xfffffffd) r2 = eventfd(0xeac) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x1}) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.238882882s ago: executing program 2 (id=1862): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0xffffffffffffffff) inotify_init() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x5}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, r2, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x6, 0x6, 0x4, 0x1000, 0x4, {}, {0x2, 0x2, 0x4, 0x1, 0x5a, 0x40, "9e343869"}, 0x10001, 0x1, {&(0x7f0000000180)=[{0x4, 0x0, {0x3ff}, 0x8}, {0x5, 0xb, {0x1}, 0x8}]}, 0xd0000000, 0x0, r3}) unshare(0xa020480) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8024}, {0xffffffffffffffff, 0x1904a}], 0x2, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) 3.023975874s ago: executing program 4 (id=1863): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x80000, 0x2f0c07f996e5ffc, 0xc, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x41, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x80000003, 0x1, 0xffffffc0, 0xffff, 0x2, "83843c556dec3a9a90800124b904cfc27929a3", 0xf57, 0x1c680}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.343622234s ago: executing program 1 (id=1864): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x88080000, 0x1, 0xff, 0x0, 0xfffd, 0x9}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) fstat(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000006000)={0x2890, 0x6, 0x3, 0x101, 0x70bd2a, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@generic="16b4fa22c28b3d9a48893cbf8027b2c14d5a9c1fa229c22072b4b0481943a9ba40500b0165ea6c2fefe73fc47e96db9a0f4e2c1eea548b4d94dace0000000000002b312c13f5f02fa7554996db6d350a648d0790b8dc97058adafad5c0e2302bbc07078862c1aa2843f54a7b3ad9ac3d4fc83496aa3747704b96f0e435c0f07c847e8672efd7b810399c19394e88d910e5459644fb4cebbc6d4f279d58e6", @generic="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", @nested={0x1714, 0xcc, 0x0, 0x1, [@typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x16f2, 0xea, 0x0, 0x1, [@nested={0x160a, 0x30, 0x0, 0x1, [@nested={0x4, 0x122}, @typed={0x8, 0x140, 0x0, 0x0, @uid=r3}, @nested={0x1534, 0x60, 0x0, 0x1, [@generic="c54acf2ba037291542e41da16821b057a5fbf7f250648574c8f1f1edf07e595f05996f053da9e028d7129744ef94b09a1cfd87bf1dc9586922569fba4082acd5febd44e9b1ca1ff672269720de", @generic="7097e1759fb5259576d8cde1ddd4bfe10770a9e56a54483fcdec93e1df6cea0b90eaf9754d59a486644f88580620e3d07d2211c9023b7a259340902a5780cb47e069c1a863f30ba170901f788674921d1c2799b91f4c0e0d499c7502d03d495fd051ba88212aa6de9f7a09de403f3fe7408414765fb7e1c47bcdb1b831e4558673d263f50c38597925e86f9bf170438bf81d3ab6e2952542d2c9b55505810c1f", @nested={0x54, 0x79, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @pid=r2}, @typed={0xd, 0x122, 0x0, 0x0, @binary="3299be4828e5a5551d"}, @typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x4, 0xd4}, @typed={0x8, 0xda, 0x0, 0x0, @pid=r2}, @typed={0x14, 0x5d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x4, 0xd3}]}, @nested={0x20, 0x9a, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x14e, 0x0, 0x0, @ipv6=@private2}]}, @nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@multicast1}]}, @generic="690503bd3fb883517e643be15dcc16d327ad083aab1b050980550a48143892db53b46ac8155548d8dd618e40a7eb1fd9eba694007ecfffb1464b7af7139ccd4c400601d683add784794a7df2e5643297d89f0303f2929893fa864ecbd0bf81fe797da8017eb0d82d5f00aaccffed1fb5898d344129dc8d35ba27ad49ee24c644f026067980b6547ae89772420a7cda879ec9bc5ba13c2c8542407bb5e35af0b0f9bf66c721e71e5a9c3e7f5038056e84bb2765b0eb5ab78ec2649e863e4cc9a23881f9", @typed={0x8, 0x104, 0x0, 0x0, @uid=r3}, @nested={0x12ec, 0x47, 0x0, 0x1, [@nested={0x4, 0x132}, @nested={0x2c5, 0xd, 0x0, 0x1, [@generic="42f41eeb8f3a1b3b097a479a16c08b5eb28ec521702e58a99394f00ceb622486b952fe5be007449338de51d4133c47fa9e61e793b88786fbc21fa19f48719d5a808a8bf5b7bc99fbbf127b5603959bb8d82873dab9c572bcc5b201c0d638d15f16ee8c9b5b5933d4777aa5dc87668280fcb0b609f76fc8d07a216b004ecc128cf9395eac4fd80c83d0a28fe1115d44f2ea1864907b251c80868bb1754d7d08f9a909ad377bc9aecb058edd5a16ef95e0e90a93881abefbc5333d997534d16f52d78e72bb592409116727a132a88ccf03509575656ea779efb13d717c8ccff7079d93b514666dbccde4fe14b8f585f4c2eb817859e5312c3c96", @nested={0x1b1, 0x102, 0x0, 0x1, [@generic="c6637dd7c0d2ddca6a7f67814a622cb76ed717c5be0f764cb8114c969422410dd51e1b88198840926244ff6fc06d6370f19faf141fac122fbad6d3db1502b388582e032ce57c217c5628a981a926d9edad9ae484fa99b10043b22dba71ea9fff1d3ce351787d7ea7bfe84221ee4b2d1f5943cf708f0af40d856e21e7adea2a9e191dc1481f3137604b136aa315fae2cefdff1acee6cbf9bb8c01875147277c87092a36f982b420541910d46f56b64122ce570757fd20ef25e4a88c946236e5694c58f1", @generic="9b9b756c9ef5c72b2bb9a175b3798c2b49fc2f7ea7ac15c899710c3657c2e373d607c3d769f0e2193afe", @nested={0x4, 0x104}, @typed={0x8, 0xbe, 0x0, 0x0, @uid=r3}, @generic="0b5b01eed38c81386503ea0877db2176abee0940170570a0a5ad259327429d01f63806d3274cbeffd0861aad6cb3127c12e2108e0ef02336ee5b46b7517f613f9177a379e2a4935122eb76c7116928c9d5eefe4134c7c1ce11df49360c0f2e76e677e568896909e46efc74eda60e279ed6084ee0df074acd69bf49947de325a0188468c1d180d1e86dea2ea1ef9a8b96fbdae06121fc5127ba5f79bb01364c7be7fcab8475f68deb6fea5de3529c7b02", @nested={0x4, 0x41}]}, @generic="286bc56a2ae96787f8982f26d87a91aef9831b1c"]}, @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@private0}, @typed={0x1004, 0x47, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x1b}]}, @typed={0xc, 0x7af, 0x0, 0x0, @u64}]}, @generic="76af3155d651f6947274524c4699b87ad7f9e73a9d152860fa0e69d2221703cd8683352ef836b96979a5965da32ae9f4ef149e4da81ea02fe8131980f20115b57798a87920dd04952c7e8dfa64e15f42534fc5a7dfad117755909e02dede0dbc753de1e293373639b59ceada8067f2202bf8c046fc1188ae85cff5faa45cd73821ec21f2ca9c7692424bb1181e7a61d65e47317cb5dd", @typed={0x2a, 0x36, 0x0, 0x0, @binary="fb618ae97fa235a51e0f2d4eb123f0c5dab16e20e25fb782a20c1e1eb666a33ede2bb8e4a8f8"}, @nested={0x4, 0x7e}]}, @generic="593bc260c150fb6f21b7eea836d867e2beab1c16419f034f63ca1505828c72e9663898a2446ea1c9df1640da709963eef74289ad8ef06864ac2fbe1ac014e293cfe390bc031cdcc06051ab3f431610b54194525f75ad0e", @generic="4279097dd9c2d3942f2bbe4adb634ebf09b0da1b02fac75dce20e053e7d318aea81d604945b0579ffa40297b81ee310aca5342e1d575243e7703bba0ccf6fbe93a4b004ba4d47f40a1ff9bdb1e4be6e96b93b16d42ab65cf0d370e2f3c41efb37e7f1d3c07f6f12d7a6c5aa3e00297051dd30b7160fed42d45718d1e1146b9aa97df3f", @typed={0x8, 0xf3, 0x0, 0x0, @pid=r2}]}, @typed={0x8, 0x40, 0x0, 0x0, @uid=r3}]}, @generic="743b8ccba42a465121628613e63189e37655ff82b777773741535ce4283bfc35175b480d7bdb6de6d370c80e02003ca8e33b4f735f8442dc568a394bca77c05844b2461b61e9e8574d48fc621e8840a9c10f6dca657197b9e01deb2c2c96db65a2d15de05489db645b9122fafbe97744d6f0b73180a93da7a372f7696e28d1f6767e0aacfb502cc0000000000002dad8e6f5c16f0f3637cefac5130ed3e04569dc469f698bc863e8a1baa55d247aa1b071268c0c03c553fffe67150fb32063c19214a4b3daf962ace808"]}, 0x2890}, 0x1, 0x0, 0x0, 0x400c944}, 0x8000) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160009000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) write$binfmt_elf32(r6, &(0x7f0000000f80)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x62, 0x81, 0x0, 0x2, 0x2, 0x3e, 0x40, 0x21d, 0x38, 0x346, 0x0, 0x3, 0x20, 0x4, 0x0, 0x6, 0x81}, [{0x474e555, 0x200, 0x3ff, 0x7e49, 0x9, 0x1, 0x1, 0x800}, {0x5, 0xc72, 0x9, 0x80, 0x7fffffff, 0x8, 0xc271, 0x300000}, {0x60000000, 0xfffffff9, 0x4, 0x1, 0x8, 0x4, 0x1, 0x3}, {0x6, 0x0, 0x7, 0x6, 0xd, 0x8000, 0x557be49d, 0x7}], "", ['\x00', '\x00', '\x00']}, 0x3b8) r7 = socket$packet(0x11, 0x2, 0x300) write$dsp(r6, &(0x7f0000001480)="635128d192b2676a6ee534860c2976a22302cdfec500ddf1026d18197e55720f887d148cd943a9de91619532e50088b4b56a867c86b8703f04caa0f36ade77e0a2dec5081043e8d0967a2854091afbf9ca29c98ef8b75df563ea9da9ca032ad922b2c7c09cc26b0b928e3a6b3da94b9c4e7190cd4c0314bc7a444d162275008e655e28a94daafc3e5702259481ddd460b1baa3cdf4a4d4aad3f5a01dfebdffcd287b7bcbdf34f05d23ddf66c6193c93752b08e319b84b22bce190aad0189ececc959c88c84200e98e72ef152b764ebfcd98520a6326b842f6226d8859c6653edd593e8c5c8b696a5a5529e908e7b62", 0xef) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000462f00fc000000000000000000000000000000ff020000000000000000000000000001242022eb00000088be00000001108700000100000000000000080022eb00000000200000000200000000000000000400000800655800"/132], 0x0) 1.82573396s ago: executing program 1 (id=1865): ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x80800) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000180)=@delchain={0x1a38, 0x65, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x10023}, {0x3}, {0x7, 0x3}}, [@f_rsvp={{0x9}, {0x1a08, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x400, 0x2, 0x401}, {0x7, 0x7fff, 0x4}, 0x1d, 0x4, 0x7}}, @TCA_RSVP_ACT={0x4d8, 0x6, [@m_ctinfo={0x8c, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0x58, 0x6, "afb0de10b965456b425f649f2ffe7ae55e536fb8ee4e69f5affd4da31f590992af310f253016132629993c38e63f5f21cf7492c99924adddcbb8139dcd495a23831b64d4ea1f8ff0cdc225c0b8c4ecbb1edcc85c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x140, 0xf, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xc40c, 0x1, 0x3ff, 0xff}, 0x84}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x1, 0x1, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfd89, 0x6, 0x10000000, 0xfffffff7, 0x1}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0xa, 0xffffffffe7fffffe, 0xf1, 0xe00}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x20000000, 0x9, 0x3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x20000000, 0x7, 0xfffffffb}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x0, 0xfffffff7, 0x8}, 0x7ac7}}]}, {0x4c, 0x6, "f6b483a03ed43757a32839954ad0d08317fb025ec1349660a178f359b029a379299e1f0f5a4eec596459d38d1fe2d0711eb71af2a3a122b531b82e625d9bc03b2baef04fbdb6a679"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x100, 0x3, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}]}, {0xa7, 0x6, "7c2037d0393b2bed52e0f380a07bb79a3fd8b064d896fd749cb59b6bd8b4b476b801bf2d6faa847ae9cdb51f272ed5b2dd0eb8dfc343b47e25f2655f67f0d69f94b01e572afcb548f55b618cf8086965518aef533987ef61e232ec6adf9ef507cc35f1d2b9f7ae9c3b2b98d0a71b58197c054cdd793f19703b4f5fd7d446090b352db5c66c652b48b614a255400fb0fbf467f04e0d741fc4c8bb3e884f0363f72770fc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x108, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x121, 0x35, 0x4, 0xfffff801, 0x3}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x5, 0xfffffffe, 0x8}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x3, 0x1, 0x5, 0x4}, 0x6a}}]}, {0x88, 0x6, "13ebad9f4aa9eca678efdc34dc65f17626ffbab4869595cf77e1b341579aa5860acbffbdbfff571ad7d4182ac3c07953820e8780da62caa9f5bbeac3aea65d4f454f53b6ec52aa4988c1a1624b27b506a6366bb8d6c814874b719d084886055d390624b3a12bf62f2bc6178a641845bc15784c5b7d5d875b071f600546c4be89bf52a890"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x100, 0x13, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffffb}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xf18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x92, 0x6, "0d3f2d94e1c10ef5b2647c45ec495c900711b2475a0bbe98b40fd6591ab66039a74e7d9265d5c7c8384b9719847b92c592d9eabe7f5d3bb6f159b0847c0359bdeef038aaf3588f174161f77a1733592ad738130472de1a285d26967980258edc342c999cca1fc69eb41bfb8ff533443b4e529467b0aba9955c81b6b66bc4eb08a69e4864b63b1b538f283c1133bf"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0xc}}, @TCA_RSVP_ACT={0x1504, 0x6, [@m_skbedit={0xe4, 0xb, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x4, 0x8, 0x8, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xb}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x8f, 0x6, "0f41844233c6264fe97721e77b0aaf3b06859474c0f30b168647e88470701d00d0ec530f88fa4ef212b35558c7a908868494c3006b6ac781b9ab37987707e5ab0b6766d3e06057134acff8a001e106062e49f89e83dd3dc3e6b24f1bcac1a04c03ca56e617050233e64e2260b4951695cf3de78fd8ca461a515126af03c46d3199e0792b3e3e8ab426c83f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_nat={0x1f4, 0xa, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0xfffffffa, 0x20000000, 0x3, 0x800}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x100, 0x3, 0x80, 0x9}, @rand_addr=0x64010101, @rand_addr=0x64010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x9bd, 0x0, 0xab, 0x6}, @multicast1, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfffffe2e, 0x7, 0xdf, 0xdf2}, @private=0xa010100, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0xa, 0x3, 0x4, 0x1}, @empty, @loopback, 0xffffff00, 0x1}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x10bc, 0x19, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="fb5a499a1648"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100, 0x80, 0xffffffffffffffff, 0xbc2, 0x6}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x80, 0x0, 0xfff, 0x7}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x14c0}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x7f, 0x10000002, 0x0, 0x2}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x7, 0x1}}}}, @m_connmark={0xe4, 0x1c, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x3, 0x3fe, 0xbe}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x8, 0x0, 0xfffffffe}, 0xa4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6f, 0x10001, 0x2, 0xfffffff7, 0x1}, 0x4}}]}, {0x5e, 0x6, "704e8f76e15370d4ae1969dc69b0e5a63e803d8f5b201f8192f324a11b84e944fbe8490d3adf03c36362dfc8b8da0d14aa4de8c8db87e3e27a3a24bd99185702c7ba1dffe81e4da628d86674a16d43ce2abffb607e17cb402047"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x88, 0x2, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x54, 0x6, "7071ebd0eb46c748662fef2b1651a65354dd4c6373586c1cf549ce6fdb335274c406d6d060d52ba7c774697aacaeea3b079053fd1ae873afa51d1c1b9b2b60f09320a3a4533978a7f1a250bf235f5e79"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1a38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) recvmsg$can_bcm(r1, &(0x7f0000002d40)={&(0x7f0000001c40)=@alg, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001cc0)=""/52, 0x34}, {&(0x7f0000001d00)=""/4096, 0x1000}], 0x2}, 0xe70ce295c7668610) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x2c, r5, 0x604, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002f00), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x1c, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8900}, 0x4004000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003040), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000031c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003180)={&(0x7f0000003080)={0xd0, r7, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8c}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x65}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x741}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6d}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x87}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x14, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x3e725663469b0fec}, 0xc0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000003300)={0x9cb, 0x100000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendfile(r1, r0, &(0x7f0000011e40)=0x8, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000011e80)={0xfffffffb, {{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, {{0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000012080)={&(0x7f0000011fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000012040)={&(0x7f0000012000)={0x20, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x6a}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48004) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000120c0)={r0, 0x800, {0x0, 0x0, 0x0, 0x8000, 0x6, 0x0, 0xa, 0x1f, 0x9, "dc2458ef2632e9fba8f2b9fac2f1773619a5beef9d3e5321aa1bdb8195a1a2cadf8076a0b9eef4ff10bf31df33c48ee62a26b711d2488015f39e1d8c5346d82b", "c51fe3b33e254283c4ba8f852c2aea12a59e473c59776532088c977c3cd94c6334f666d4d0cb2a4e65f6c20b268514093b8be04f981bc7e4c4b834f0eedc4c9e", "3f23e595b764e3154a0b2a80cb925b3e8e82db1ece29e18b519c8abc5f670157", [0x4, 0xd915]}}) write$binfmt_script(r0, &(0x7f0000012200)={'#! ', './file0', [{0x20, '\x00'}], 0xa, "6a2dc9f3dc1337f432a833551f26bfd877334dcd2a457cd24b29034d56de6a56f7604182131f687e7b2433e29ed5360c0359f0918d2dea09bc2ff02b7b2ff3b15f2731054ebfb8796ebce4e3beefb9eff3fb89cc71b6e38ce19cdd629998557d3204b375efeb5cdbff877324a17cd9dab51144244e2a5d698efa80914293732e6f1b83036f66ef54cd23e7d04c161f53b4c290eea7305549efe5685ebfd681a4b9777c6f33bd8aa40f79b7ac02094846db681b9d910814440cfa889def40acb5e5d16e2e"}, 0xd1) mknod(&(0x7f0000012300)='./file0\x00', 0x20, 0x7) read$eventfd(r0, &(0x7f0000012340), 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000123c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000012400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000013200)={&(0x7f0000012380), 0xc, &(0x7f00000131c0)={&(0x7f0000012440)={0xd50, r8, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x4e}}}}, [@NL80211_ATTR_TID_CONFIG={0x490, 0x11d, 0x0, 0x1, [{0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x24}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x100, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x3}, {0x3, 0x4}, {0x4, 0x3}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0x7}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x6}, {}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x2}, {0x7}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x4, 0x8}, {0x6, 0x4}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x3}, {0x4, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x2}, {0x3, 0x5}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0x1}, {0x4, 0x8}, {0x2, 0x7}, {0x3, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x2, 0xa}, {0x1, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x5, 0x6}, {0x3, 0x1}, {0x5, 0x7}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x3}, {0x6, 0xa}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x18, 0x18, 0x30, 0x24, 0x1, 0x9, 0xc, 0x4, 0x16, 0x12, 0x4, 0x3, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0xb9, 0xca, 0x2, 0xab7, 0x6, 0xa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0xff, 0x8, 0x7c66, 0x6, 0x9, 0x3]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x3, 0x6}, {0x1, 0x5}, {0x7, 0xa}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x7}, {0x6}, {0x5, 0x7}, {0x7, 0x3}, {0x3, 0x5}, {0x4, 0x7}, {0x7, 0x1}, {0x7, 0x9}, {0x1, 0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {}, {0x5, 0xa}, {0x2, 0x7}, {0x5}, {0x3}, {0x1, 0x1}, {0x2, 0x6}, {0x0, 0x8}, {0x3, 0xa}, {0x0, 0x5}, {0x2, 0x3}, {0x2, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0x5}, {0x3, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x9}, {0x3}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x9}, {0x3, 0xa}, {0x4, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x6, 0x1}, {0x1, 0x3}, {0x0, 0xa}, {0x7}, {0x7, 0xa}, {0x1, 0x6}, {0x2, 0x4}, {0x4, 0x7}, {0x2, 0x7}, {0x5, 0xa}, {0x3, 0x7}, {0x1, 0x1}, {0x2, 0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xca}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa3}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x48}]}, {0x4}, {0x2a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0xa}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x6, 0x2}, {0x6, 0x6}, {0x7}, {0x5, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x7}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x6, 0x200, 0x400, 0x8, 0x7, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x5, 0x7, 0x5, 0x9, 0x11, 0x5]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x12, 0x2, 0x16, 0x4, 0x12, 0x1, 0xb2, 0x60, 0x1, 0x12, 0x60, 0xb, 0x60, 0x6c, 0x4, 0x1b]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x4, 0x1}, {0x1, 0x5}, {0x6, 0x8}, {0x5}, {0x3, 0x6}, {0x1}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x2, 0x4}, {0x4, 0x6}, {0x2, 0x2}, {0x7, 0x9}, {0x6, 0x5}, {0x4, 0x8}, {0x4}, {0x6, 0x3}, {0x2, 0x7}, {0x3, 0x8}, {0x5, 0x1}, {0x6, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0x1}, {0x5, 0x9}, {0x6, 0x9}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0xa}, {0x1, 0x9}, {0x5, 0x3}, {0x7, 0x6}, {0x5, 0x4}, {0x3, 0x9}, {0x6, 0x6}, {0x3, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0xa}, {0x1, 0x8}, {0x5, 0x6}, {0x5, 0x6}, {0x5}, {0x0, 0x8}, {0x1, 0x8}, {}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x2}, {0x4, 0x6}, {0x2, 0x9}, {0x1}, {0x2, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x4}, {0x4}, {0x5, 0x3}, {0x1, 0xa}, {}, {0x5, 0x7}, {0x0, 0x3}, {0x4, 0x1}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x9, 0xac9, 0x5, 0xffff, 0x5, 0x11, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x16, 0x18, 0x36, 0x36, 0x9, 0x0, 0x18, 0x30, 0xc, 0x3a]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x9, 0x70, 0x6, 0x4, 0x3, 0x3, 0xfffa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7a8, 0xec, 0x5, 0xca1, 0x6, 0x9, 0x6, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x9, 0x5, 0x0, 0x401, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb9, 0x8, 0xe, 0xff, 0x23, 0x7a4, 0xffff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x1}, {0x7, 0x6}, {0x3, 0x4}, {0x6, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x6, 0x8}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x1}, {0x7, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x7, 0x2}, {0x0, 0x1}, {0x1, 0x9}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x7}, {0x2}, {0x1, 0x8}, {0x6}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x2}, {}, {0x4, 0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x2}, {}, {0x0, 0x1}, {0x5}, {0x4, 0x4}, {0x2, 0x3}, {0x1}, {0x0, 0x5}, {0x7, 0xa}, {0x0, 0x1}, {0x4}, {0x0, 0x2}, {0x7}, {0x6, 0x8}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1, 0x18, 0x4, 0xb, 0x5, 0x24, 0x16, 0x1, 0x1, 0x60, 0x6c, 0x18, 0x6c, 0x2, 0x60, 0x4, 0x9, 0x37, 0x5, 0x1, 0x3a, 0x8cdeb004dd01e55c, 0x4, 0x1b, 0x16, 0x1, 0xb, 0x6c, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x4}, {0x5, 0x7}, {0x0, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0x7}, {0x7, 0x8}, {0x7, 0x9}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0x3}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0xa}, {0x2, 0xa}, {0x5, 0xa}, {0x7, 0x1}, {0x2, 0x9}, {0x0, 0xa}, {0x1, 0x4}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0x5}, {0x2, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x5, 0x8}, {0x3, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x8}, {0x6, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x400, 0xff, 0x6, 0x81b, 0x3194, 0xb]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x30, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x8b, 0x7, 0x0, 0x5, 0x6, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x9, 0x4, 0x8001, 0x6bc, 0x1, 0x3e]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x7e0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x404, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x12c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x2, 0x4}, {0x6, 0x7}, {0x4, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x5}, {0x1, 0x3}, {0x5}, {0x5, 0xa}, {0x0, 0x4}, {0x2, 0x8}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x9, 0x1, 0x6, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x6, 0x4, 0xc466, 0x4, 0x97b, 0x4]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x2}, {0x1, 0x9}, {0x1, 0x3}, {0x1}, {0x3, 0x4}, {0x2, 0x5}, {0x3, 0x9}, {0x5, 0xa}, {0x6, 0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {0x0, 0x2}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0xa}, {0x3, 0x4}, {0x3, 0x9}, {0x6, 0x8}, {0x6, 0x7}, {0x2, 0x3}, {0x0, 0x5}, {0x7, 0x7}, {0x3, 0x7}, {0x6, 0x9}, {0x2, 0x1}, {0x5, 0xa}, {0x6, 0xa}, {0x6, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x1, 0xa}, {0x2, 0x6}, {0x0, 0x6}, {0x7, 0x3}, {0x4, 0x4}, {0x4, 0x1}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x6, 0x18, 0x16, 0x1b, 0x6, 0x30, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x87, 0xd, 0x1, 0x100, 0x0, 0x4, 0xfffa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x1, 0x90, 0x2, 0xaae, 0x200, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x401, 0x6, 0x1000, 0x200, 0x9, 0x5]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x60, 0xc, 0x9, 0x18, 0x6c, 0x6]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x18, 0xb, 0xc]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x8}, {0x7, 0x9}, {0x1, 0x7}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x5}, {0x5, 0x2}, {0x3}, {0x7}, {}, {0x7, 0x1}, {0x2}, {0x3, 0x5}, {0x7, 0xa}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x6}, {0x6}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0xa}, {0x2}, {0x6, 0x8}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x2}, {0x1}, {0x5, 0xa}, {0x4, 0xa}, {0x6, 0x3}, {0x5, 0x1}, {0x7, 0x4}, {0x3, 0x8}, {0x7, 0x5}, {0x0, 0xa}, {0x7, 0x5}, {}, {0x5, 0x2}, {0x6, 0x8}, {0x6, 0x5}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0xa, 0x5, 0x9, 0xc5f, 0x3, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdf1, 0x3, 0x4000, 0x95, 0x2, 0x8, 0xfff9, 0xee8a]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xde, 0xdd8d, 0x54, 0x2, 0x3, 0x8, 0x5000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xb7, 0x1, 0x2, 0x0, 0x1, 0xf, 0x5]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x200, 0x1, 0xc7d, 0x1, 0xa23, 0xcacf, 0x101]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a, 0x37, 0x3, 0xffff, 0x1, 0x100, 0x8, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xc8b3a471e4800bdc, 0x6, 0xb, 0x48, 0x5, 0x5, 0x2, 0x36, 0x0, 0x36, 0x3, 0x16, 0xc, 0x3, 0x44, 0x24, 0x24, 0xb, 0x1b, 0x6, 0x1, 0x1c, 0x12, 0x6]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x6}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x5}, {0x1, 0x5}, {0x3, 0x5}, {0x1}, {}, {0x1}, {0x6, 0x1}, {}, {0x5, 0x4}, {0x7, 0x6}, {0x6, 0xa}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x4, 0x2, 0x8, 0x5, 0x3, 0xfffc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x1b, 0x0, 0x5, 0x0, 0x6, 0x3, 0x3, 0xc, 0x4, 0xc, 0x18, 0x6, 0x1, 0x24, 0x3, 0x1b, 0x48, 0x9, 0x5, 0x49, 0x36, 0x7f, 0x18, 0x6, 0x48, 0x4, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0xc, 0x3, 0xdb, 0x3, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x3, 0x5, 0x7, 0x5, 0xffff, 0x86ff, 0x10]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x5}, {0x4}, {0x6, 0x2}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x9}, {0x5, 0x4}, {0x2, 0x4}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x1}, {0x2, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x4}, {0x0, 0x2}, {0x3}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x200, 0x4, 0xa, 0x1, 0xfbbf, 0x2]}}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x8}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x2}, {0x3, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x6, 0x8}, {0x2, 0x7}, {0x2, 0x9}, {0x6, 0x9}, {0x3, 0x9}, {0x6, 0x3}, {0x1, 0x3}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x4}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x2}, {0x0, 0x4}, {0x7, 0x5}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x1, 0x7}, {0x0, 0xa}, {0x2, 0x4}, {0x3}, {0x6, 0x3}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x9, 0xd, 0x8f5, 0x9, 0x1000, 0x5, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x2, 0x0, 0x3, 0x9, 0x400, 0x8]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x9, 0x0, 0x3, 0x5, 0x6, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x82, 0x80, 0x5, 0x9, 0x9, 0xfffc, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xda}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x29}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}]}, {0x278, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1fc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x3b, 0x6, 0x24, 0x2, 0x4, 0x12, 0xc, 0x0, 0x6, 0xc, 0x1b, 0x60, 0x5, 0x9, 0xc, 0x63c59ad40f25713c, 0x5, 0x4, 0x6c, 0x24, 0x36, 0x7, 0x1b, 0x48, 0xc, 0x24, 0x6]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0xb5, 0xe, 0x99, 0x400, 0x6, 0x4]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x55e6, 0x2, 0x1, 0xf0ca, 0x3, 0x8, 0x7ff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4b56, 0x4, 0x0, 0x8, 0x8, 0x8, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x6c, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x2}, {0x7, 0x3}, {0x0, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0xa}, {}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x5}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1af3b2f31e218fc2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x64, 0x3, 0x4, 0xb1, 0x81, 0xecde, 0xb1, 0xe55e]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x6, 0x12, 0x1, 0x33, 0x5, 0x5, 0xb, 0x6c, 0x36, 0x16, 0x0, 0x24, 0x6c, 0x6, 0x30, 0x0, 0x5, 0x12, 0x48, 0x48, 0x4, 0xb, 0x48, 0x5, 0x4, 0x9, 0x1b, 0x1b, 0x0, 0x1, 0x2]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x1b, 0xc, 0x1, 0x18, 0x18, 0xd, 0xc, 0x3]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x8b, 0xffff, 0x3, 0xf, 0x0, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x0, 0x4, 0x11a2, 0x4, 0x9]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1, 0x10, 0x844e, 0x4, 0x7, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x69d, 0x8, 0x8, 0xf, 0x8, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x9}, {0x0, 0x6}, {0x1, 0x8}, {}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0xa}, {0x2}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x9}, {0x5}, {0x4, 0x6}, {0x4, 0x8}, {0x6, 0x4}, {0x1, 0x4}, {0x5, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x6, 0x3}, {0x5, 0x7}, {0x6}, {0x6, 0xa}, {0x1, 0x5}, {0x1, 0x5}, {0x4, 0x4}, {0x4, 0x3}, {0x6, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x6, 0xfffa, 0x3, 0x6, 0x80, 0xa]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x5}, {0x6, 0x8}, {0x3, 0x2}, {}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x4}, {0x6, 0x7}, {0x6}, {0x3}, {0x3, 0x6}, {0x1, 0x9}, {0x2, 0x8}, {0x0, 0x2}, {0x7, 0x1}, {0x1, 0x4}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x5, 0x6c, 0x6, 0x33, 0x48, 0x1b, 0x3, 0xb, 0x1b, 0x0, 0x9, 0x1, 0xb, 0x48, 0x6, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x28}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf801, 0x3d, 0x9, 0x7, 0xa9, 0x0, 0x3, 0x7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x8, 0x3, 0x101, 0x5, 0xe2f, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4c85, 0x100, 0x6, 0x4d5, 0x29b, 0x5, 0xe]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}]}]}, @NL80211_ATTR_TID_CONFIG={0xa8, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff00000001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x30}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x2, 0xc, 0x5, 0x60]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0xd50}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000013240)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000013280)={@mcast1, 0x68, r10}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 1.645846663s ago: executing program 5 (id=1866): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x4000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x1, 0x7c6, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x3, &(0x7f0000000280)=[{0x25, 0x0, 0x2, 0xfffffffe}, {}, {0xffff}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) write(r4, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) connect$unix(r5, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r3, 0x4068aea3, &(0x7f0000000140)={0xdb, 0x0, 0x2}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket(0x2, 0x1, 0xf72e) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r9, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, 0x0, &(0x7f0000000040)) 1.549237297s ago: executing program 1 (id=1867): socket$packet(0x11, 0x3, 0x300) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000180)=0x1f00) r1 = socket$packet(0x11, 0xa, 0x300) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x80047441, 0x3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) memfd_secret(0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) (async) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 1.185212908s ago: executing program 3 (id=1868): r0 = syz_create_resource$binfmt(&(0x7f0000000140)='./file1\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80000, 0x68) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) socket(0x22, 0x80000, 0x7) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0xfffffffa) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f0000000180)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001"], 0x118}}, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r7) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000100)={[&(0x7f0000000080)='\x8e\xa7\xb2?=\x00'/17]}, 0x1000) 869.348481ms ago: executing program 2 (id=1869): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3d0, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x33c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xca, 0x3, "395fe437b4f8590f487f9115ea4e33bc21756345b7aa138b15ac1a3cef362370684ea12bd2e660f381bb9ef23e6d6e78e04b00c72d34b181b9866ca50600637d2abd2329989c7606c4db816d2997d89a19fda29c52b7532110b1e58f4907dd70ff6b6252ab6e886a1c52547249f29598394f3c084cae2ffe4e6218099ee82a784f3bb208f2fc9c60feb3b3a9ea84f310f9f86111f6bce88b3fd70c1ccc44ce454596ecb0ef921fb9dd3ae615f84395d73efdc1b11781a647a27f038f1e3f9f6105f671c92d90"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ID={0xed, 0x3, "0ff49b8c9140187a6ddd53694bedf5d9a664e654f2b5cee63fca1a7b95321178f03d182c6d3ba73a853fdc81a44736005c5ccac4448ee33554b705cadb39d22e6de9fe4573a8add8f2cf056bab0ab3d6e169a1a43342c9f5208cbbd685307cdcbe13dd8605c50ef5464424e38f619f70d46fdb2f46bf2ecf10f4fbfead01bfdf890b041a62cbba898e607590dc2d1fd4973f752ef2cded5c8888f13dc02e33fc8550717d97ddd0a185d315a29c59e5efc0ac57402e0bb9ba185189057db055ea741c2a7c0196c61bd17327bf78cf1b9fb9029f7556603c4993bd2cdbd463af5361ea34322849d3ecac"}, @TIPC_NLA_NODE_ID={0xea, 0x3, "cc7b9842bad10a8ce2d6e3f7ca86c8207408d7ff17598144ebdc19159b514a5020a29240dc37de432ef140f56f6e13cf2ef1d1bff649076f0bdccd52b6f0735a53100ef1492d8d2545168be6231256d5024b91be5ff4f0f642422f681c0f21af338783f8d3bee01907e9da6fa8692af91d90f79719cbfef4e21c9a3acad16b8b9812ef20928f01aabb2db458572918dcf5f1e94b4392690a27964954df3561fa18eed18b95304d19ee45b0d6d8d693d8325fadeb906be10410ccf0d69268921594f0070b0f6fd64b3e1a661f1569ca8d96717a33c4e5340b1c38430fac2e154cccf139f8abea"}, @TIPC_NLA_NODE_ID={0x74, 0x3, "ca5cca876fc0cab48505a0681ab993288f2e7fd237be7e3c89a4713c6885e6bb41d8a4f415cbc9fa5bc470f2b75a251eaad279c5bcd4078bb2c0430637fbd51277ac470638abe16a4cf90322117437d6e21f5ea5efe7ce0ca50c414b04e31bcb136707f4019ab38ef5d84bcdc4a61c81"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x50}, 0x84) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000580), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x700, 0x0, 0x4, 0x1, {{0x8, 0x4, 0x2, 0x30, 0x20, 0x67, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @multicast1, {[@rr={0x7, 0xb, 0x41, [@loopback, @local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x3, 0x5e, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, 0x1, 0x7800, 0xefb0}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x3, 0x5e, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, 0x1, 0x7800, 0xefb0}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x1, 0x75, {{0xc, 0x4, 0x2, 0x0, 0x30, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast2, @local, {[@timestamp={0x44, 0x1c, 0x84, 0x0, 0x3, [0x3, 0x2, 0x9ca7, 0x5, 0x6, 0x2]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000900)={@rand_addr, 0x0}, &(0x7f0000000940)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000980)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000980)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x9, 0x7, 0x8, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x4f, 0xdd}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b80)={'gre0\x00', &(0x7f0000000ac0)={'gretap0\x00', 0x0, 0x7, 0x1, 0x5, 0x8000, {{0x21, 0x4, 0x1, 0x8, 0x84, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x44, 0x9f, 0x3, 0x8, [{@loopback, 0x5}, {@multicast2, 0x5}, {@broadcast, 0x5}, {@broadcast, 0x11f8}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x7}, {@broadcast, 0x4}, {@empty, 0x4}, {@empty, 0xc}]}, @generic={0x94, 0xc, "aa06f5e84e8a242fd64a"}, @rr={0x7, 0x1b, 0x4c, [@loopback, @loopback, @private=0xa010102, @loopback, @loopback, @local]}, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001040)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000bc0)={0x404, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r5}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x938b}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r14}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x404}, 0x1, 0x0, 0x0, 0x40000}, 0x40) open$dir(&(0x7f0000001080)='./file0\x00', 0x60900, 0x83) (async) r15 = open$dir(&(0x7f0000001080)='./file0\x00', 0x60900, 0x83) fchmodat(r15, &(0x7f00000010c0)='./file1\x00', 0x9) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) (async) r16 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) unshare(0x20000) (async) unshare(0x20000) ioctl$LOOP_CLR_FD(r0, 0x4c01) (async) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001140), 0x284000, 0x0) r17 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r17, 0x7b0, &(0x7f00000011c0)={@my=0x0, 0x1}) close_range(r16, r16, 0x0) ftruncate(r15, 0xd) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001200), 0x80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001240)={0x10001, 0x1, 0x100000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001240)={0x10001, 0x1, 0x100000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001300)={0x8, 0x0, &(0x7f0000001280)=[@acquire={0x40046305, 0x3}], 0x6, 0x0, &(0x7f00000012c0)="7432b60c8c13"}) 749.088595ms ago: executing program 3 (id=1870): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x9}}, {{0x9, 0x5, 0x85, 0x1, 0x40}}]}}]}}]}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x881}, 0x48090) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x380000, @private1}, 0x1c) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_usb_connect$uac1(0x5, 0xb2, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x8, 0x30, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x4, 0x1, 0x5, 0x28, 0x5}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x6, 0xc2, "2cc4"}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0x7, "210f"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x0, 0x5, 0x9, 0xd, 0x6, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x2, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xc, 0x1, 0x4, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x3df, 0x2, 0x1, 0x7, {0x7, 0x25, 0x1, 0x6, 0xa, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x8, '`', 'P'}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2f, 0x8, 0x2, {0x7, 0x25, 0x1, 0x2, 0x3, 0x4}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x1, 0x8, 0x7, 0x10, 0x81}, 0x107, &(0x7f00000004c0)={0x5, 0xf, 0x107, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x8, 0xf00f, 0x200, [0x3fee, 0xff0000, 0x7, 0xc000, 0xffc000, 0xff00]}, @generic={0xbf, 0x10, 0xa, "2e19b371978f22ff80ba689d99474b7228f3154f1cfe9ee82f933c18e7d5a3f5dcddd2016f885d0903a7dae1cfb92329d444e8562dff0f7c7defec00c5d8151bb338b80f5d3d0bb39d57a15a0c2a1fa02b9555da32cdee044de8067523ff1c7fc0d1435a2c67e50100fdae7e8ac305717d85f97e113292fbc8f34a04ceabfc24da490b566b059a707b02a34c3de5662ecaacb43dd477e78a922a7c79a7d5903385e40b6b1896384421dad79866140599000ec44510f920c9d3b8b58c"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xe, 0x4, 0x8, 0x0, 0x4, [0x3f30, 0x7e00, 0xc0, 0xff00c0]}]}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x35e5003d8afc1562}}, {0x41, &(0x7f0000000600)=@string={0x41, 0x3, "e2258b25fea838d986a25f5d2c3955b7d159ee1d4eb8840cfdfe53725b735fbec80718f56a7b55306f45e02221f3abf3ce2c2a607497ae070f86cdadcd2cce"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x72, &(0x7f0000000680)=@string={0x72, 0x3, "6347112589d908c4186b009e3697e2c1d64db11c7c5787df67bd697617a7d6cbe3deba2c64d58e5126d36351c7655ee542d6c4ca67fa898c7eb5f7bb265c57d70ef85d93361145ca9af020e0a8eb9bbbf1c914821f3e3b0bf3eac079f8a59fbd3e9f69eb8e4a34b69a482c8dea433cde"}}, {0x7f, &(0x7f0000000700)=@string={0x7f, 0x3, "6e41d8ea95e3711f3fa7a364556351a141c2d4a689fd1209b4b0d3474db847e80fe9a7f9ac1c1fd25304d7ed94ea5191d834f5d8b94168dc868e3a722ac7a227192dca307af68fd84ac6d59d54bf0fdc10b28342ffc2f8317b1f9bbd25936271aa010d382c7b4109f4dfe9b05b64b0d311bcb29f3646f0797d95c31095"}}]}) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x3, 0x14002}, 0x0, 0x0) 699.175842ms ago: executing program 2 (id=1871): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) exit(0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '/dev/fuse\x00'}) r4 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x401, 0x1a, 0x3}, 0x8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0x16, 0x4, 0x1, 0x9, 0x58, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x36, 0x0, [{0x5, 0x11, "61853379342bf9bc837101084905ae"}, {0x2, 0x6, "9b2f6985"}, {0x7, 0x6, "29d6b434"}, {0x2, 0x9, "4107220cb4ea41"}, {0x1, 0xa, "434c36e509a5c106"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x94, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x14) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000300)='posixacl\x00', 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000400)) 356.426966ms ago: executing program 5 (id=1872): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x300, {0x2a00, 0x80010000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 108.565447ms ago: executing program 5 (id=1873): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @generic={0x5, 0x6, "0c311500"}]}}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x2, 0xfff, 0x1, 0x6, 0x8, 0x4e06, 0x7acd}, {0x6, 0x10000, 0x3, 0x9, 0x5bc8000, 0xf81b, 0x80000000}]}) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0x0, 0x0, 0x44, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x7fffffffffffffe}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000002c0)={0x800000000000156}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) 108.214867ms ago: executing program 1 (id=1874): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006c40), 0x2, 0x0) setreuid(0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0x1, [0x100]}, &(0x7f0000000140)=0x6) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grotp_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x21}, 0x18) 0s ago: executing program 1 (id=1875): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x10}}], 0x30, 0x200400c1}}], 0x2, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000780)=""/185, 0xb9, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000000500d8f52cb68585265c318f15000100000011000300686173683a"], 0x60}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x14) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000640)={0x81, 0x0, 'client0\x00', 0x0, "1e1dc136d6f4bdda", "a973ee4846d9504bc69a10238bcd150b0e95547bd679f139106e78e15913759d"}) kernel console output (not intermixed with test programs): switching to perfect channel medium [ 437.561089][T11492] loop6: detected capacity change from 0 to 7 [ 437.605015][T11492] Dev loop6: unable to read RDB block 7 [ 437.614794][T11492] loop6: unable to read partition table [ 437.636552][ T3542] net_ratelimit: 3 callbacks suppressed [ 437.636566][ T3542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.650471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.660223][T11492] loop6: partition table beyond EOD, truncated [ 437.686934][T11494] netlink: 'syz.2.1349': attribute type 3 has an invalid length. [ 437.694760][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'. [ 437.719223][T11492] loop_reread_partitions: partition scan of loop6 (x鼦熝鄸 ) failed (rc=-5) [ 437.843582][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.994689][T11502] tipc: Enabled bearer , priority 0 [ 438.004293][T11502] syzkaller0: entered promiscuous mode [ 438.010113][T11502] syzkaller0: entered allmulticast mode [ 438.147700][T11505] tipc: Resetting bearer [ 438.278512][T11509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.413303][T11509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.461315][T11509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.518300][T11509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.715339][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.802989][T11501] tipc: Resetting bearer [ 438.819439][T11501] tipc: Disabling bearer [ 438.836386][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.844759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.874807][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.882993][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.951317][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.964293][T11503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.085955][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.104240][T11518] pim6reg1: entered promiscuous mode [ 439.110561][T11518] pim6reg1: entered allmulticast mode [ 439.284010][T11520] FAULT_INJECTION: forcing a failure. [ 439.284010][T11520] name failslab, interval 1, probability 0, space 0, times 0 [ 439.334665][T11520] CPU: 1 UID: 0 PID: 11520 Comm: syz.3.1356 Not tainted syzkaller #0 PREEMPT(full) [ 439.334690][T11520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.334701][T11520] Call Trace: [ 439.334707][T11520] [ 439.334715][T11520] dump_stack_lvl+0x189/0x250 [ 439.334739][T11520] ? __pfx____ratelimit+0x10/0x10 [ 439.334766][T11520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.334785][T11520] ? __pfx__printk+0x10/0x10 [ 439.334813][T11520] ? __pfx___might_resched+0x10/0x10 [ 439.334828][T11520] ? fs_reclaim_acquire+0x7d/0x100 [ 439.334849][T11520] should_fail_ex+0x414/0x560 [ 439.334876][T11520] should_failslab+0xa8/0x100 [ 439.334898][T11520] __kmalloc_cache_noprof+0x70/0x3d0 [ 439.334918][T11520] ? nfnetlink_rcv+0xeff/0x2520 [ 439.334945][T11520] nfnetlink_rcv+0xeff/0x2520 [ 439.334998][T11520] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 439.335034][T11520] ? ref_tracker_free+0x63a/0x7d0 [ 439.335080][T11520] ? __netlink_deliver_tap+0x807/0x850 [ 439.335098][T11520] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.335131][T11520] netlink_unicast+0x82c/0x9e0 [ 439.335162][T11520] ? __pfx_netlink_unicast+0x10/0x10 [ 439.335188][T11520] ? netlink_sendmsg+0x642/0xb30 [ 439.335203][T11520] ? skb_put+0x11b/0x210 [ 439.335226][T11520] netlink_sendmsg+0x805/0xb30 [ 439.335253][T11520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.335274][T11520] ? aa_sock_msg_perm+0xf1/0x1d0 [ 439.335293][T11520] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 439.335311][T11520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.335330][T11520] __sock_sendmsg+0x219/0x270 [ 439.335357][T11520] ____sys_sendmsg+0x505/0x830 [ 439.335383][T11520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.335413][T11520] ? import_iovec+0x74/0xa0 [ 439.335437][T11520] ___sys_sendmsg+0x21f/0x2a0 [ 439.335458][T11520] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.335516][T11520] ? __fget_files+0x2a/0x420 [ 439.335530][T11520] ? __fget_files+0x3a0/0x420 [ 439.335557][T11520] __x64_sys_sendmsg+0x19b/0x260 [ 439.335580][T11520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.335620][T11520] ? do_syscall_64+0xbe/0x3b0 [ 439.335642][T11520] do_syscall_64+0xfa/0x3b0 [ 439.335661][T11520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.335677][T11520] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 439.335692][T11520] ? clear_bhb_loop+0x60/0xb0 [ 439.335713][T11520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.335729][T11520] RIP: 0033:0x7f96b4d8eba9 [ 439.335744][T11520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.335766][T11520] RSP: 002b:00007f96b5b54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.335784][T11520] RAX: ffffffffffffffda RBX: 00007f96b4fd5fa0 RCX: 00007f96b4d8eba9 [ 439.335796][T11520] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 439.335807][T11520] RBP: 00007f96b5b54090 R08: 0000000000000000 R09: 0000000000000000 [ 439.335817][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.335828][T11520] R13: 00007f96b4fd6038 R14: 00007f96b4fd5fa0 R15: 00007f96b50ffa28 [ 439.335857][T11520] [ 439.915080][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.999758][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.006416][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.305002][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.979693][T11543] FAULT_INJECTION: forcing a failure. [ 440.979693][T11543] name failslab, interval 1, probability 0, space 0, times 0 [ 441.036304][T11543] CPU: 1 UID: 0 PID: 11543 Comm: syz.3.1360 Not tainted syzkaller #0 PREEMPT(full) [ 441.036320][T11543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 441.036326][T11543] Call Trace: [ 441.036331][T11543] [ 441.036336][T11543] dump_stack_lvl+0x189/0x250 [ 441.036351][T11543] ? __pfx____ratelimit+0x10/0x10 [ 441.036361][T11543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.036372][T11543] ? __pfx__printk+0x10/0x10 [ 441.036388][T11543] ? __pfx___might_resched+0x10/0x10 [ 441.036399][T11543] should_fail_ex+0x414/0x560 [ 441.036416][T11543] should_failslab+0xa8/0x100 [ 441.036431][T11543] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 441.036444][T11543] ? __alloc_skb+0x112/0x2d0 [ 441.036457][T11543] __alloc_skb+0x112/0x2d0 [ 441.036469][T11543] netlink_sendmsg+0x5c6/0xb30 [ 441.036484][T11543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.036496][T11543] ? aa_sock_msg_perm+0xf1/0x1d0 [ 441.036507][T11543] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.036517][T11543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.036527][T11543] __sock_sendmsg+0x219/0x270 [ 441.036543][T11543] ____sys_sendmsg+0x505/0x830 [ 441.036560][T11543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.036575][T11543] ? import_iovec+0x74/0xa0 [ 441.036590][T11543] ___sys_sendmsg+0x21f/0x2a0 [ 441.036602][T11543] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.036632][T11543] ? __fget_files+0x2a/0x420 [ 441.036639][T11543] ? __fget_files+0x3a0/0x420 [ 441.036652][T11543] __x64_sys_sendmsg+0x19b/0x260 [ 441.036666][T11543] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.036682][T11543] ? __pfx_ksys_write+0x10/0x10 [ 441.036694][T11543] ? rcu_is_watching+0x15/0xb0 [ 441.036706][T11543] ? do_syscall_64+0xbe/0x3b0 [ 441.036718][T11543] do_syscall_64+0xfa/0x3b0 [ 441.036727][T11543] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.036736][T11543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.036745][T11543] ? clear_bhb_loop+0x60/0xb0 [ 441.036757][T11543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.036765][T11543] RIP: 0033:0x7f96b4d8eba9 [ 441.036775][T11543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.036783][T11543] RSP: 002b:00007f96b5b33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.036794][T11543] RAX: ffffffffffffffda RBX: 00007f96b4fd6090 RCX: 00007f96b4d8eba9 [ 441.036808][T11543] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 441.036814][T11543] RBP: 00007f96b5b33090 R08: 0000000000000000 R09: 0000000000000000 [ 441.036819][T11543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.036825][T11543] R13: 00007f96b4fd6128 R14: 00007f96b4fd6090 R15: 00007f96b50ffa28 [ 441.036839][T11543] [ 442.192199][T11554] tipc: Enabled bearer , priority 10 [ 442.482979][T11563] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1367'. [ 442.532526][T11563] FAULT_INJECTION: forcing a failure. [ 442.532526][T11563] name failslab, interval 1, probability 0, space 0, times 0 [ 442.545881][T11563] CPU: 1 UID: 0 PID: 11563 Comm: syz.5.1367 Not tainted syzkaller #0 PREEMPT(full) [ 442.545903][T11563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 442.545914][T11563] Call Trace: [ 442.545921][T11563] [ 442.545929][T11563] dump_stack_lvl+0x189/0x250 [ 442.545954][T11563] ? __pfx____ratelimit+0x10/0x10 [ 442.545971][T11563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.545990][T11563] ? __pfx__printk+0x10/0x10 [ 442.546019][T11563] ? __pfx___might_resched+0x10/0x10 [ 442.546035][T11563] ? fs_reclaim_acquire+0x7d/0x100 [ 442.546056][T11563] should_fail_ex+0x414/0x560 [ 442.546084][T11563] should_failslab+0xa8/0x100 [ 442.546108][T11563] __kmalloc_cache_noprof+0x70/0x3d0 [ 442.546129][T11563] ? nf_tables_updchain+0x82d/0x1f60 [ 442.546157][T11563] nf_tables_updchain+0x82d/0x1f60 [ 442.546205][T11563] ? __pfx_nf_tables_updchain+0x10/0x10 [ 442.546228][T11563] ? nft_pernet+0x23/0x240 [ 442.546257][T11563] nf_tables_newchain+0xd5a/0x2900 [ 442.546292][T11563] ? __pfx_nf_tables_newchain+0x10/0x10 [ 442.546326][T11563] ? __pfx___nla_validate_parse+0x10/0x10 [ 442.546350][T11563] ? __lock_acquire+0xab9/0xd20 [ 442.546384][T11563] ? nfnl_pernet+0x23/0x240 [ 442.546417][T11563] ? __nla_parse+0x40/0x60 [ 442.546460][T11563] nfnetlink_rcv+0x112f/0x2520 [ 442.546516][T11563] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 442.546556][T11563] ? ref_tracker_free+0x63a/0x7d0 [ 442.546601][T11563] ? __netlink_deliver_tap+0x807/0x850 [ 442.546619][T11563] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.546654][T11563] netlink_unicast+0x82c/0x9e0 [ 442.546687][T11563] ? __pfx_netlink_unicast+0x10/0x10 [ 442.546712][T11563] ? netlink_sendmsg+0x642/0xb30 [ 442.546727][T11563] ? skb_put+0x11b/0x210 [ 442.546749][T11563] netlink_sendmsg+0x805/0xb30 [ 442.546777][T11563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.546797][T11563] ? aa_sock_msg_perm+0xf1/0x1d0 [ 442.546816][T11563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.546834][T11563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.546851][T11563] __sock_sendmsg+0x219/0x270 [ 442.546885][T11563] ____sys_sendmsg+0x505/0x830 [ 442.546911][T11563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.546941][T11563] ? import_iovec+0x74/0xa0 [ 442.546966][T11563] ___sys_sendmsg+0x21f/0x2a0 [ 442.546989][T11563] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.547046][T11563] ? __fget_files+0x2a/0x420 [ 442.547060][T11563] ? __fget_files+0x3a0/0x420 [ 442.547087][T11563] __x64_sys_sendmsg+0x19b/0x260 [ 442.547110][T11563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.547141][T11563] ? __pfx_ksys_write+0x10/0x10 [ 442.547159][T11563] ? rcu_is_watching+0x15/0xb0 [ 442.547182][T11563] ? do_syscall_64+0xbe/0x3b0 [ 442.547204][T11563] do_syscall_64+0xfa/0x3b0 [ 442.547220][T11563] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.547237][T11563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.547253][T11563] ? clear_bhb_loop+0x60/0xb0 [ 442.547274][T11563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.547290][T11563] RIP: 0033:0x7fb0db98eba9 [ 442.547306][T11563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.547321][T11563] RSP: 002b:00007fb0dc789038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.547339][T11563] RAX: ffffffffffffffda RBX: 00007fb0dbbd5fa0 RCX: 00007fb0db98eba9 [ 442.547352][T11563] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 442.547362][T11563] RBP: 00007fb0dc789090 R08: 0000000000000000 R09: 0000000000000000 [ 442.547373][T11563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.547383][T11563] R13: 00007fb0dbbd6038 R14: 00007fb0dbbd5fa0 R15: 00007fb0dbcffa28 [ 442.547412][T11563] [ 443.034951][ T24] net_ratelimit: 7 callbacks suppressed [ 443.034968][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.185585][ T5958] tipc: Node number set to 3018947982 [ 443.347042][T11600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.502755][T11602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.511870][T11602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.520683][T11602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.773484][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.781955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.791484][T11605] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1376'. [ 443.903381][T11606] tipc: Enabled bearer , priority 0 [ 443.970522][T11607] syzkaller0: entered promiscuous mode [ 444.213860][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.228637][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.314889][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.318863][T11607] syzkaller0: entered allmulticast mode [ 444.461315][T11609] tipc: Enabled bearer , priority 0 [ 444.468630][T11609] syzkaller0: entered promiscuous mode [ 444.474101][T11609] syzkaller0: entered allmulticast mode [ 444.627276][T11604] tipc: Resetting bearer [ 444.868145][T11604] tipc: Disabling bearer [ 444.954630][ T24] tipc: Node number set to 3323274483 [ 444.984442][ T5956] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 445.146584][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.193486][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.213787][ T5956] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 445.223908][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.249710][ T5956] usb 4-1: config 0 descriptor?? [ 445.331390][T11620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1381'. [ 445.361342][T11620] FAULT_INJECTION: forcing a failure. [ 445.361342][T11620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.376618][T11620] CPU: 0 UID: 0 PID: 11620 Comm: syz.2.1381 Not tainted syzkaller #0 PREEMPT(full) [ 445.376641][T11620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.376654][T11620] Call Trace: [ 445.376661][T11620] [ 445.376668][T11620] dump_stack_lvl+0x189/0x250 [ 445.376693][T11620] ? __pfx____ratelimit+0x10/0x10 [ 445.376712][T11620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.376731][T11620] ? __pfx__printk+0x10/0x10 [ 445.376766][T11620] should_fail_ex+0x414/0x560 [ 445.376794][T11620] _copy_to_user+0x31/0xb0 [ 445.376817][T11620] simple_read_from_buffer+0xe1/0x170 [ 445.376846][T11620] proc_fail_nth_read+0x1b3/0x220 [ 445.376869][T11620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.376890][T11620] ? rw_verify_area+0x2a6/0x4d0 [ 445.376909][T11620] ? __lock_acquire+0xab9/0xd20 [ 445.376930][T11620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.376950][T11620] vfs_read+0x1fd/0xa30 [ 445.376969][T11620] ? fdget_pos+0x247/0x320 [ 445.376989][T11620] ? __pfx___mutex_lock+0x10/0x10 [ 445.377008][T11620] ? __pfx_vfs_read+0x10/0x10 [ 445.377030][T11620] ? __fget_files+0x2a/0x420 [ 445.377049][T11620] ? __fget_files+0x3a0/0x420 [ 445.377062][T11620] ? __fget_files+0x2a/0x420 [ 445.377086][T11620] ksys_read+0x145/0x250 [ 445.377109][T11620] ? __pfx_ksys_read+0x10/0x10 [ 445.377127][T11620] ? rcu_is_watching+0x15/0xb0 [ 445.377149][T11620] ? do_syscall_64+0xbe/0x3b0 [ 445.377171][T11620] do_syscall_64+0xfa/0x3b0 [ 445.377187][T11620] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.377204][T11620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.377220][T11620] ? clear_bhb_loop+0x60/0xb0 [ 445.377240][T11620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.377256][T11620] RIP: 0033:0x7f14bb18d5bc [ 445.377271][T11620] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 445.377286][T11620] RSP: 002b:00007f14bc021030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 445.377304][T11620] RAX: ffffffffffffffda RBX: 00007f14bb3d5fa0 RCX: 00007f14bb18d5bc [ 445.377317][T11620] RDX: 000000000000000f RSI: 00007f14bc0210a0 RDI: 0000000000000004 [ 445.377327][T11620] RBP: 00007f14bc021090 R08: 0000000000000000 R09: 0000000000000000 [ 445.377338][T11620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.377348][T11620] R13: 00007f14bb3d6038 R14: 00007f14bb3d5fa0 R15: 00007f14bb4ffa28 [ 445.377377][T11620] [ 445.594969][ T24] tipc: Node number set to 1655287190 [ 445.602493][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.632893][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.638896][ C0] hrtimer: interrupt took 254587703 ns [ 445.738957][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.894086][T11622] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 445.900630][T11622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.949977][ T5956] cypress 0003:04B4:DE61.0018: unknown main item tag 0x0 [ 445.957202][ T5956] cypress 0003:04B4:DE61.0018: unknown main item tag 0x0 [ 445.964257][ T5956] cypress 0003:04B4:DE61.0018: unknown main item tag 0x0 [ 445.977682][ T5956] cypress 0003:04B4:DE61.0018: unknown main item tag 0x0 [ 445.988185][T11622] vhci_hcd vhci_hcd.0: Device attached [ 445.995643][T11630] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 446.002166][T11630] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 446.009925][ T5956] cypress 0003:04B4:DE61.0018: unknown main item tag 0x0 [ 446.042193][ T5956] cypress 0003:04B4:DE61.0018: unknown main item tag 0x0 [ 446.053394][T11630] vhci_hcd vhci_hcd.0: Device attached [ 446.059039][ T5956] cypress 0003:04B4:DE61.0018: unknown main item tag 0x0 [ 446.067834][T11622] netlink: 'syz.2.1383': attribute type 1 has an invalid length. [ 446.122873][T11630] sctp: [Deprecated]: syz.2.1383 (pid 11630) Use of int in max_burst socket option deprecated. [ 446.122873][T11630] Use struct sctp_assoc_value instead [ 446.154147][ T5956] cypress 0003:04B4:DE61.0018: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 446.202727][T11630] input: syz0 as /devices/virtual/input/input28 [ 446.244636][ T5942] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 446.344884][ T9] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 446.378266][T11622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.445685][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 446.477189][ T5957] usb 4-1: USB disconnect, device number 64 [ 446.512766][ T9] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 446.544415][ T9] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 446.553435][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d58, bcdDevice= 0.00 [ 446.596482][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.648229][T11628] vhci_hcd: connection reset by peer [ 446.653590][T11631] vhci_hcd: connection closed [ 446.657160][ T12] vhci_hcd: stop threads [ 446.678950][ T12] vhci_hcd: release socket [ 446.684052][ T12] vhci_hcd: disconnect device [ 446.694208][ T12] vhci_hcd: stop threads [ 446.698629][ T12] vhci_hcd: release socket [ 446.703244][ T12] vhci_hcd: disconnect device [ 447.207897][ T30] audit: type=1326 audit(1758021115.978:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b4d8eba9 code=0x7ffc0000 [ 447.264498][ T30] audit: type=1326 audit(1758021115.978:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b4d8eba9 code=0x7ffc0000 [ 447.311164][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'. [ 447.315321][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.326329][ T30] audit: type=1326 audit(1758021115.978:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96b4d8eba9 code=0x7ffc0000 [ 447.339194][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.361324][ T30] audit: type=1326 audit(1758021115.978:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b4d8eba9 code=0x7ffc0000 [ 447.415600][T11661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1392'. [ 447.425201][ T30] audit: type=1326 audit(1758021115.978:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b4d8eba9 code=0x7ffc0000 [ 447.452577][ T30] audit: type=1326 audit(1758021115.978:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f96b4d8eba9 code=0x7ffc0000 [ 447.489149][ T30] audit: type=1326 audit(1758021115.978:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b4d8eba9 code=0x7ffc0000 [ 447.520921][ T30] audit: type=1326 audit(1758021115.978:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b4d8eba9 code=0x7ffc0000 [ 447.547769][ T30] audit: type=1326 audit(1758021115.978:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96b4d90ac7 code=0x7ffc0000 [ 447.590372][ T30] audit: type=1326 audit(1758021115.978:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.3.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f96b4d90a3c code=0x7ffc0000 [ 447.790546][T11680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.818786][T11680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.956182][T11683] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1384'. [ 447.987980][T11683] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1384'. [ 448.320565][ T9] net_ratelimit: 11 callbacks suppressed [ 448.320584][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.491225][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.815544][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.824107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.036418][T11693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.085980][T11693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.112197][ T24] usb 6-1: USB disconnect, device number 70 [ 449.515402][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.790321][T11704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.826672][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.826934][T11704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.841530][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.888207][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1405'. [ 449.912114][T11708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.948853][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.982677][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.055256][ T5957] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 450.066875][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.074911][T11716] loop2: detected capacity change from 0 to 7 [ 450.075622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.217629][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 450.249275][ T5957] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.295095][ T5957] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.322109][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1410'. [ 450.326263][ T5957] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 450.356210][ T5957] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 450.378816][ T5957] usb 4-1: Product: syz [ 450.383029][ T5957] usb 4-1: Manufacturer: syz [ 450.418243][ T5957] hub 4-1:4.0: USB hub found [ 450.564630][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.617779][ T5957] hub 4-1:4.0: 2 ports detected [ 451.035354][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.215214][T11736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1414'. [ 451.243235][T11736] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1414'. [ 451.434830][ T5942] vhci_hcd: vhci_device speed not set [ 451.451540][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1417'. [ 451.839750][ T5957] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 451.873609][ T5957] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 451.935950][ T5957] usb 4-1: USB disconnect, device number 65 [ 453.726477][ T5958] net_ratelimit: 12 callbacks suppressed [ 453.726497][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.924135][ T5873] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 453.974086][T11777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.984731][ T3542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.993009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.465930][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.561033][T11777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.833402][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 455.169795][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.428232][ T24] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 455.437522][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.445723][ T24] usb 4-1: Product: syz [ 455.449898][ T24] usb 4-1: Manufacturer: syz [ 455.482334][ T24] usb 4-1: SerialNumber: syz [ 455.491923][T11781] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1425'. [ 455.503999][ T24] usb 4-1: config 0 descriptor?? [ 455.823679][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1427'. [ 455.849803][T11789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.874665][T11789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.900341][T11789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.948867][T11788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.971868][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.043848][ T5942] usb 4-1: USB disconnect, device number 66 [ 456.434413][ T24] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 456.541668][T11799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.561625][T11799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.596307][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 456.612838][ T24] usb 6-1: config 0 has no interface number 0 [ 456.620079][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 456.633566][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 456.653581][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 456.662804][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.680835][ T24] usb 6-1: config 0 descriptor?? [ 456.687921][T11796] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 456.702197][ T24] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 456.962939][ T24] usb 6-1: USB disconnect, device number 71 [ 457.763438][T11810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.821882][T11810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.948143][T11810] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1433'. [ 459.364711][ T7772] net_ratelimit: 11 callbacks suppressed [ 459.364727][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.379455][T11841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.442308][T11841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.645058][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.653557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.397017][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.557365][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.876188][ T3542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.884666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.410207][T11853] bond2: entered allmulticast mode [ 461.426431][T11853] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.433492][T11853] bridge0: port 3(bond2) entered blocking state [ 461.440777][T11853] bridge0: port 3(bond2) entered disabled state [ 461.442093][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.471859][T11853] bond2: entered promiscuous mode [ 461.585797][T11859] netlink: 'syz.5.1446': attribute type 4 has an invalid length. [ 461.634715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.651440][T11861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.681828][T11861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.751924][T11862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.797063][T11865] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 461.827552][T11862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.872330][T11859] block nbd0: Attempted send on invalid socket [ 461.925576][T11859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 462.107664][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.286023][T11871] netlink: 'syz.3.1449': attribute type 4 has an invalid length. [ 462.402554][T11875] netlink: 'syz.3.1449': attribute type 4 has an invalid length. [ 462.700221][T11889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.741017][T11889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.891925][T11896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.900860][ T24] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 462.908261][T11896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.084553][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 463.101575][ T24] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 463.115020][ T24] usb 6-1: config 0 has no interface number 0 [ 463.121987][ T24] usb 6-1: config 0 interface 184 has no altsetting 0 [ 463.137126][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 463.147993][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.157088][ T24] usb 6-1: Product: syz [ 463.161382][ T24] usb 6-1: Manufacturer: syz [ 463.167327][ T24] usb 6-1: SerialNumber: syz [ 463.182878][ T24] usb 6-1: config 0 descriptor?? [ 463.194814][ T24] smsc75xx v1.0.0 [ 463.447522][T11907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.616096][T11886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.639824][T11886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.084472][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 464.126337][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 464.136442][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 464.149597][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 464.159550][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 464.170110][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 464.181225][ T24] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 464.196827][ T24] usb 6-1: USB disconnect, device number 72 [ 464.201886][T11917] loop6: detected capacity change from 0 to 7 [ 464.231788][T11917] Dev loop6: unable to read RDB block 7 [ 464.237981][T11917] loop6: unable to read partition table [ 464.243836][T11917] loop6: partition table beyond EOD, truncated [ 464.254051][T11917] loop_reread_partitions: partition scan of loop6 (x鼦熝鄸 ) failed (rc=-5) [ 464.266681][T11920] usb usb8: usbfs: process 11920 (syz.4.1464) did not claim interface 0 before use [ 464.300135][T11920] usb usb8: selecting invalid altsetting 45915 [ 464.338822][T11920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.351146][T11920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.494707][ T59] net_ratelimit: 9 callbacks suppressed [ 464.494727][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.508873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.594408][ T5942] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 464.626290][T11925] xt_bpf: check failed: parse error [ 464.646801][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.754608][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 464.763124][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.775078][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.789956][ T5942] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 464.800406][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.823941][ T5942] usb 4-1: config 0 descriptor?? [ 464.861276][T11927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.871060][T11927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.904647][ T24] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 465.075976][T11923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.091547][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 465.094904][T11923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.122564][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 465.143708][ T24] usb 6-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 465.183822][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.223981][ T24] usb 6-1: string descriptor 0 read error: -22 [ 465.233680][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.262450][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.399993][ T5942] uclogic 0003:5543:0004.0019: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 465.516950][ T24] usb 6-1: USB disconnect, device number 73 [ 465.538501][ T5942] usb 4-1: USB disconnect, device number 67 [ 465.646113][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.654534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.674522][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.357655][T11952] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 466.664768][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.726235][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.105967][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.114438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.765021][ T7772] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 467.935140][ T7772] usb 6-1: Using ep0 maxpacket: 16 [ 467.942671][ T7772] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 467.951015][ T7772] usb 6-1: can't read configurations, error -61 [ 468.105505][ T7772] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 468.274890][ T7772] usb 6-1: Using ep0 maxpacket: 16 [ 468.289715][ T7772] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 468.326930][ T7772] usb 6-1: can't read configurations, error -61 [ 468.344938][ T7772] usb usb6-port1: attempt power cycle [ 468.724931][ T7772] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 468.817064][ T7772] usb 6-1: Using ep0 maxpacket: 16 [ 468.840838][ T7772] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 468.853780][ T7772] usb 6-1: can't read configurations, error -61 [ 469.043488][ T7772] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 469.108127][ T7772] usb 6-1: Using ep0 maxpacket: 16 [ 469.141297][ T7772] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 469.149290][ T7772] usb 6-1: can't read configurations, error -61 [ 469.176845][ T7772] usb usb6-port1: unable to enumerate USB device [ 469.565809][ T1167] net_ratelimit: 5 callbacks suppressed [ 469.565825][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.579833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.674735][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.853788][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.765163][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.773443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.875634][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.998817][T12003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.077072][T12003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.122376][T12003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.864566][ T5958] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 471.994739][ T5958] usb 6-1: device descriptor read/64, error -71 [ 472.457859][T12025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.564584][ T5958] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 472.704432][ T5958] usb 6-1: device descriptor read/64, error -71 [ 472.817821][ T5958] usb usb6-port1: attempt power cycle [ 473.096576][T12034] tls_set_device_offload_rx: netdev not found [ 473.194422][ T5958] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 473.237119][ T5958] usb 6-1: device descriptor read/8, error -71 [ 473.494486][ T5958] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 473.535163][ T5958] usb 6-1: device descriptor read/8, error -71 [ 473.664831][ T5958] usb usb6-port1: unable to enumerate USB device [ 473.729131][T12046] loop6: detected capacity change from 0 to 7 [ 473.779503][T12046] Dev loop6: unable to read RDB block 7 [ 473.787101][T12046] loop6: unable to read partition table [ 473.800280][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.815383][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.823460][T12046] loop6: partition table beyond EOD, truncated [ 473.830279][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 473.838594][T12046] loop_reread_partitions: partition scan of loop6 (x鼦熝鄸 ) failed (rc=-5) [ 473.855263][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 473.876110][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 473.994994][ T5942] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 474.109486][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.156377][ T5942] usb 4-1: device descriptor read/64, error -71 [ 474.260079][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.377657][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.437195][ T5942] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 474.604670][ T5942] usb 4-1: device descriptor read/64, error -71 [ 474.731118][ T5942] usb usb4-port1: attempt power cycle [ 474.860087][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.935989][ T12] net_ratelimit: 9 callbacks suppressed [ 474.936009][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.950201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.044797][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.194622][ T5942] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 475.494531][ T5942] usb 4-1: device descriptor read/8, error -71 [ 475.739670][T12062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.814554][ T5942] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 475.918798][ T5873] Bluetooth: hci1: command tx timeout [ 475.929327][ T5942] usb 4-1: device descriptor read/8, error -71 [ 476.116324][ T5942] usb usb4-port1: unable to enumerate USB device [ 476.682139][T12056] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.689492][T12056] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.840460][T12056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.966280][T12056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.994484][ T5873] Bluetooth: hci1: command tx timeout [ 479.021999][T12060] geneve2: entered promiscuous mode [ 479.035764][T12060] geneve2: entered allmulticast mode [ 479.119774][T12087] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1504'. [ 479.140329][ T1167] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.214539][ T1167] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 479.254400][ T1167] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.275236][ T1167] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 479.294420][ T1167] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.304188][ T1167] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 479.325696][ T1167] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.382851][ T1167] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 479.394087][T12101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.403042][T12101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.537945][T12051] chnl_net:caif_netlink_parms(): no params data found [ 479.647330][T12104] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.1508'. [ 479.943573][T12114] loop6: detected capacity change from 0 to 7 [ 479.972785][ T6013] Dev loop6: unable to read RDB block 7 [ 479.982597][ T36] bridge_slave_1: left allmulticast mode [ 480.035734][ T6013] loop6: unable to read partition table [ 480.051566][ T36] bridge_slave_1: left promiscuous mode [ 480.062215][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.075079][ T5873] Bluetooth: hci1: command tx timeout [ 480.200426][ T6013] loop6: partition table beyond EOD, truncated [ 480.250224][ T36] bridge_slave_0: left allmulticast mode [ 480.262428][ T36] bridge_slave_0: left promiscuous mode [ 480.269519][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.298089][T12114] Dev loop6: unable to read RDB block 7 [ 480.306158][T12114] loop6: unable to read partition table [ 480.314126][T12114] loop6: partition table beyond EOD, truncated [ 480.360339][T12114] loop_reread_partitions: partition scan of loop6 (x鼦熝鄸 ) failed (rc=-5) [ 480.554637][ T5933] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 480.718668][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 480.725693][ T5933] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 480.756589][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.824997][ T5933] usb 4-1: config 0 descriptor?? [ 481.183570][ T5867] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 481.371889][ T5867] usb 6-1: config 2 has an invalid interface number: 190 but max is 0 [ 481.397708][ T5867] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 481.462018][ T5933] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 481.482063][ T5933] asix 4-1:0.0: probe with driver asix failed with error -61 [ 481.489993][ T5867] usb 6-1: config 2 has no interface number 0 [ 481.509478][ T5867] usb 6-1: config 2 interface 190 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 481.560275][ T5867] usb 6-1: string descriptor 0 read error: -22 [ 481.580431][ T5867] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 481.596448][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.672883][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.698000][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.722946][ T36] bond0 (unregistering): Released all slaves [ 481.831670][T12051] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.844732][ T5867] (null): keene_cmd_main failed (-71) [ 481.853500][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.863642][ T5867] video4linux radio48: keene_cmd_main failed (-71) [ 481.871016][ T5867] radio-keene 6-1:2.190: V4L2 device registered as radio48 [ 481.878664][T12051] bridge_slave_0: entered allmulticast mode [ 481.887645][T12051] bridge_slave_0: entered promiscuous mode [ 481.897256][ T5867] usb 6-1: USB disconnect, device number 82 [ 481.909652][T12051] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.924698][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.934197][T12051] bridge_slave_1: entered allmulticast mode [ 481.948468][T12051] bridge_slave_1: entered promiscuous mode [ 482.121251][T12051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.155780][ T5873] Bluetooth: hci1: command tx timeout [ 482.193441][T12051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.345586][ T36] hsr_slave_0: left promiscuous mode [ 482.366932][ T36] hsr_slave_1: left promiscuous mode [ 482.373509][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.398466][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.410132][T12143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.424957][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.443413][ T5867] usb 4-1: USB disconnect, device number 72 [ 482.453219][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.498310][T12143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.608863][ T36] veth1_macvtap: left promiscuous mode [ 482.621663][ T36] veth0_macvtap: left promiscuous mode [ 482.643577][ T36] veth1_vlan: left promiscuous mode [ 482.653370][ T36] veth0_vlan: left promiscuous mode [ 482.902291][T12170] fuse: Bad value for 'fd' [ 483.149520][T12173] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1520'. [ 483.784821][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1525'. [ 484.845791][T12205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.874945][T12205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.137229][T12211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1529'. [ 485.157681][T12208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.204913][T12208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.305767][ T36] team0 (unregistering): Port device team_slave_1 removed [ 485.374719][ T5933] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 485.376703][ T36] team0 (unregistering): Port device team_slave_0 removed [ 485.430433][T12216] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1531'. [ 485.547999][ T5933] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 485.557329][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.574482][ T5933] usb 6-1: config 0 descriptor?? [ 485.801246][ T5933] kaweth 6-1:0.0: Firmware present in device. [ 485.929817][T12051] team0: Port device team_slave_0 added [ 485.999709][T12051] team0: Port device team_slave_1 added [ 486.000020][ T5933] kaweth 6-1:0.0: Statistics collection: 0 [ 486.044466][ T5933] kaweth 6-1:0.0: Multicast filter limit: 0 [ 486.057719][ T5933] kaweth 6-1:0.0: MTU: 0 [ 486.071396][ T5933] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 486.134282][T12051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.167735][T12219] netlink: 'syz.3.1532': attribute type 1 has an invalid length. [ 486.179817][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.191371][T12219] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1532'. [ 486.217306][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.254977][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.258725][T12222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.288020][T12051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.311507][T12224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.321419][T12222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.355737][T12051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.362703][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.405308][T12222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1534'. [ 486.420558][T12222] program syz.4.1534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.445430][T12222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.474955][T12222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.489712][T12229] CIFS: VFS: Malformed UNC in devname [ 486.520731][T12051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.763037][ T5933] kaweth 6-1:0.0: kaweth interface created at eth9 [ 486.907694][T12051] hsr_slave_0: entered promiscuous mode [ 486.930124][T12051] hsr_slave_1: entered promiscuous mode [ 486.953662][T12051] debugfs: 'hsr0' already exists in 'hsr' [ 486.957458][ T5956] usb 6-1: USB disconnect, device number 83 [ 486.969956][T12051] Cannot create hsr debugfs directory [ 487.224206][T12241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.270261][T12241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.926352][T12259] loop2: detected capacity change from 0 to 7 [ 487.942060][ T6013] Dev loop2: unable to read RDB block 7 [ 488.002776][ T6013] loop2: unable to read partition table [ 488.026679][ T6013] loop2: partition table beyond EOD, truncated [ 488.167982][T12262] netlink: 'syz.5.1541': attribute type 4 has an invalid length. [ 488.186260][T12262] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1541'. [ 488.993662][ T5234] Dev loop2: unable to read RDB block 7 [ 489.105892][ T5234] loop2: unable to read partition table [ 489.172075][ T5234] loop2: partition table beyond EOD, truncated [ 489.309374][T12051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 489.369645][ T5234] Dev loop2: unable to read RDB block 7 [ 489.380360][ T5234] loop2: unable to read partition table [ 489.398149][T12051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 489.408798][ T5234] loop2: partition table beyond EOD, truncated [ 489.440362][T12051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 489.477066][ T5234] Dev loop2: unable to read RDB block 7 [ 489.495842][T12051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 489.511722][ T5234] loop2: unable to read partition table [ 489.532346][ T5234] loop2: partition table beyond EOD, truncated [ 489.685734][T12308] binder: 12307:12308 ioctl c0306201 2000000001c0 returned -22 [ 489.805920][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 489.863898][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 489.894952][T12051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.947855][T12051] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.037333][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.044500][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.119568][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.126771][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.295624][ T5873] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 490.305495][ T5873] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 490.369743][T12051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.453756][T12331] netlink: 'syz.4.1553': attribute type 4 has an invalid length. [ 490.487397][T12051] veth0_vlan: entered promiscuous mode [ 490.493141][T12331] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1553'. [ 490.513721][T12051] veth1_vlan: entered promiscuous mode [ 490.622594][T12051] veth0_macvtap: entered promiscuous mode [ 490.660666][T12051] veth1_macvtap: entered promiscuous mode [ 490.752442][ T5234] Dev loop2: unable to read RDB block 7 [ 490.763836][T12051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.782471][ T5234] loop2: unable to read partition table [ 490.811963][ T5234] loop2: partition table beyond EOD, truncated [ 490.830415][T12342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.886264][T12051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.934226][T12342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.948477][ T1167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.991465][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.178816][ T1167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.258163][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.333446][ T5234] Dev loop2: unable to read RDB block 7 [ 491.361548][ T5234] loop2: unable to read partition table [ 491.389165][ T5234] loop2: partition table beyond EOD, truncated [ 491.471628][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.502728][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.748158][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.800307][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.388678][T12365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.056609][T12372] tipc: Started in network mode [ 493.084739][T12372] tipc: Node identity 927fa60b0a63, cluster identity 4711 [ 493.092109][T12372] tipc: Enabled bearer , priority 0 [ 493.261612][T12374] syzkaller0: entered promiscuous mode [ 493.291716][T12374] syzkaller0: entered allmulticast mode [ 493.342804][T12372] tipc: Resetting bearer [ 493.403274][T12371] tipc: Resetting bearer [ 493.464050][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 493.563402][T12371] tipc: Disabling bearer [ 493.714937][ T3542] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.751825][ T3542] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.801855][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.892753][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.097511][T12386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.117224][T12405] netlink: 4164 bytes leftover after parsing attributes in process `syz.1.1563'. [ 494.128831][T12405] netlink: 12596 bytes leftover after parsing attributes in process `syz.1.1563'. [ 494.139676][T12406] vlan0: entered promiscuous mode [ 494.337400][T12401] vlan0: left promiscuous mode [ 494.348389][ T5873] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 494.357000][ T5873] Bluetooth: hci4: Injecting HCI hardware error event [ 494.370311][T12386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.378190][ T5873] Bluetooth: hci4: hardware error 0x00 [ 494.551384][T12411] netlink: 'syz.3.1565': attribute type 4 has an invalid length. [ 494.621868][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 494.621885][ T30] audit: type=1326 audit(1758021163.388:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.1.1563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ceff8eba9 code=0x80000000 [ 494.621977][T12411] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1565'. [ 494.650475][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.671610][T12383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.705532][T12383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.873366][T12418] block nbd0: Attempted send on invalid socket [ 494.880267][T12418] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 495.901106][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1570'. [ 496.014681][T12091] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 496.167867][T12091] usb 4-1: device descriptor read/64, error -71 [ 496.480696][ T5873] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 496.487593][T12091] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 496.637834][T12091] usb 4-1: device descriptor read/64, error -71 [ 496.754741][T12091] usb usb4-port1: attempt power cycle [ 497.104502][T12091] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 497.128250][T12091] usb 4-1: device descriptor read/8, error -71 [ 497.282889][T12466] loop6: detected capacity change from 0 to 7 [ 497.298647][ T6013] Dev loop6: unable to read RDB block 7 [ 497.309337][ T6013] loop6: unable to read partition table [ 497.317146][ T6013] loop6: partition table beyond EOD, truncated [ 497.336759][T12466] Dev loop6: unable to read RDB block 7 [ 497.349527][T12466] loop6: unable to read partition table [ 497.357514][T12466] loop6: partition table beyond EOD, truncated [ 497.368486][T12466] loop_reread_partitions: partition scan of loop6 (x鼦熝鄸 ) failed (rc=-5) [ 497.385012][T12091] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 497.415365][T12091] usb 4-1: device descriptor read/8, error -71 [ 497.453465][T12470] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1575'. [ 497.627981][T12091] usb usb4-port1: unable to enumerate USB device [ 497.700154][T12475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1576'. [ 497.761619][T12482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1576'. [ 497.773209][T12482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1576'. [ 497.810653][T12482] openvswitch: netlink: Flow actions attr not present in new flow. [ 497.896668][T12483] gretap2: entered promiscuous mode [ 498.042976][T12487] netlink: 'syz.1.1577': attribute type 4 has an invalid length. [ 498.068396][T12487] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1577'. [ 498.485633][T12493] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.1579'. [ 498.509117][T12494] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.1579'. [ 498.530162][T12493] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 498.540292][T12494] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 498.553990][T12493] openvswitch: netlink: Key 0 has unexpected len 5 expected 0 [ 498.562409][T12494] openvswitch: netlink: Key 0 has unexpected len 5 expected 0 [ 498.610974][T12500] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1581'. [ 498.648387][T12502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.722539][T12502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.787903][T12502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.819379][T12502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.855308][T12508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.866649][T12508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.891443][T12512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.922708][T12512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.949758][T12508] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 498.957147][T12514] input: syz1 as /devices/virtual/input/input29 [ 498.975551][T12508] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 499.739615][T12541] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1592'. [ 500.686517][ T5958] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 500.940223][ T5958] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 501.201639][ T5958] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 501.284005][ T5958] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 501.348815][ T5958] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 501.395230][ T5933] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 501.441940][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.448429][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.474118][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.577260][T12583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.594490][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 501.601471][ T5933] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 501.610926][T12583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.721662][ T5958] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 501.742869][ T5933] usb 2-1: config 179 has no interface number 0 [ 501.752849][ T5933] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 501.768323][ T5933] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 501.782031][ T5933] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 501.800245][ T5933] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 501.892837][ T5933] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 501.932921][ T5933] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 501.958072][ T5958] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 501.981712][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.039228][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.061974][T12576] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 502.479385][ T5956] usb 2-1: USB disconnect, device number 80 [ 502.479508][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 502.504444][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 503.410942][ T5933] usb 6-1: USB disconnect, device number 84 [ 503.556701][T12610] __nla_validate_parse: 2 callbacks suppressed [ 503.556713][T12610] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1610'. [ 503.577036][T12612] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1610'. [ 504.222369][T12627] trusted_key: encrypted_key: insufficient parameters specified [ 504.470179][ T5956] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 504.664729][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 504.707990][ T5956] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 504.741987][ T5956] usb 4-1: config 0 has no interface number 0 [ 504.782062][ T5956] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 504.858659][ T5956] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 504.907047][ T5956] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 504.930741][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.948014][ T5956] usb 4-1: Product: syz [ 504.952361][ T5956] usb 4-1: Manufacturer: syz [ 504.957425][ T5956] usb 4-1: SerialNumber: syz [ 504.972017][ T5956] usb 4-1: config 0 descriptor?? [ 504.979078][T12629] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 504.988576][T12629] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 505.054503][ T5933] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 505.202938][T12629] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 505.204463][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 505.228985][T12629] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 505.236199][ T5933] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 505.255750][ T5933] usb 2-1: config 0 has no interface number 0 [ 505.286943][ T5933] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 505.322154][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.354479][ T5933] usb 2-1: Product: syz [ 505.360359][ T5933] usb 2-1: Manufacturer: syz [ 505.366443][ T5933] usb 2-1: SerialNumber: syz [ 505.374082][ T5933] usb 2-1: config 0 descriptor?? [ 505.387600][ T5933] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 505.399084][T12646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.412659][T12646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.457141][ T5956] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 505.458721][T12646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.478609][T12646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.486007][ T5956] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 505.502909][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'. [ 505.512461][ T5956] asix 4-1:0.251: probe with driver asix failed with error -5 [ 505.610168][T12638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.626575][T12650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.644937][T12638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.652866][T12650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.681396][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'. [ 505.695029][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'. [ 505.793471][ T5933] usb 2-1: qt2_attach - failed to power on unit: -71 [ 505.806922][ T5933] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 505.833794][ T5933] usb 2-1: USB disconnect, device number 81 [ 505.962720][T12663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.979629][T12656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.987155][T12663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.006568][T12663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.025168][T12663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.250503][T12671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1627'. [ 506.276163][T12091] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 506.326555][T12091] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 507.214643][ T5933] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 507.254052][ T7772] usb 4-1: USB disconnect, device number 77 [ 507.385614][ T5933] usb 6-1: Using ep0 maxpacket: 16 [ 507.393270][ T5933] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.393873][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.418386][ T5933] usb 6-1: config 0 interface 0 has no altsetting 0 [ 507.436416][ T5933] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 507.467591][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.486441][ T5933] usb 6-1: config 0 descriptor?? [ 507.504960][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.774505][ T5957] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 507.940954][ T5933] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 507.978206][ T5957] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 507.996808][ T5957] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 508.027122][ T5957] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 508.057620][ T5957] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 508.111024][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.187781][ T5957] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 508.495429][ T5956] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 508.512558][T12710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.521470][T12710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.735919][T12712] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 508.741921][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 508.759752][T12712] syzkaller0: owner set to 0 [ 508.783909][ T5956] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 508.799526][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.833816][ T5956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.846160][ T5957] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 508.871854][ T5956] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.921067][ T5956] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.997939][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.033728][ T5956] usb 2-1: Product: syz [ 509.103320][ T5956] usb 2-1: Manufacturer: syz [ 509.121849][ T5956] usb 2-1: SerialNumber: syz [ 509.301124][T12717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1639'. [ 509.337661][T12717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1639'. [ 509.588505][T12705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.603142][ T5957] usb 6-1: USB disconnect, device number 85 [ 509.646546][T12705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.709826][T12705] syzkaller0: entered promiscuous mode [ 509.764851][T12705] syzkaller0: entered allmulticast mode [ 510.000141][ T5956] usb 2-1: 0:2 : does not exist [ 510.010256][ T5956] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 510.066360][ T5956] usb 2-1: USB disconnect, device number 82 [ 510.153299][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.384425][ T5957] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 511.242245][T12745] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1644'. [ 511.863066][ T5933] usb 4-1: USB disconnect, device number 78 [ 511.922754][T12748] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1644'. [ 512.130220][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.184996][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.335831][T12762] netlink: 408 bytes leftover after parsing attributes in process `syz.3.1650'. [ 512.387487][T12765] netlink: 408 bytes leftover after parsing attributes in process `syz.3.1650'. [ 512.774583][T12776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.807715][T12776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.424636][ T5956] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 513.584540][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 513.592218][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 513.611908][ T5956] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 513.666903][ T5956] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 513.676283][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 513.686640][ T5956] usb 2-1: Product: syz [ 513.691026][ T5956] usb 2-1: Manufacturer: syz [ 513.696221][ T5956] usb 2-1: SerialNumber: syz [ 513.702910][ T5956] usb 2-1: config 0 descriptor?? [ 513.715490][ T5956] hub 2-1:0.0: bad descriptor, ignoring hub [ 513.721803][ T5956] hub 2-1:0.0: probe with driver hub failed with error -5 [ 513.930474][T12809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1666'. [ 513.993248][T12809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.009417][T12809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.062616][T12811] kvm: user requested TSC rate below hardware speed [ 514.075105][ T5956] usb 2-1: USB disconnect, device number 83 [ 514.271913][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'. [ 514.786256][T12839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.834437][ T5956] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 514.942120][T12839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.020806][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 515.041292][ T5956] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 515.055526][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 515.083309][ T5956] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 515.095571][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.112456][ T5956] usb 2-1: Product: syz [ 515.128544][ T5956] usb 2-1: Manufacturer: syz [ 515.167786][ T5956] usb 2-1: SerialNumber: syz [ 515.214061][ T5956] usb 2-1: config 0 descriptor?? [ 515.258545][ T5956] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 515.294198][ T5956] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 515.559551][T12851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.559951][T12853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1679'. [ 515.579712][T12851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.654209][ T1154] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 515.680165][ T5867] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 515.697522][ T1154] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 515.848703][ T5956] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 515.864265][T12834] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 515.870890][ T5867] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 515.888034][ T5956] em28xx 2-1:0.0: Config register raw data: 0x41 [ 515.904634][ T5957] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 516.084647][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 516.094004][ T5957] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 516.108681][ T5957] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.122568][ T5957] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 516.139787][ T5957] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 516.152471][ T5957] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.163472][ T7772] usb 2-1: USB disconnect, device number 84 [ 516.173563][ T5957] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 516.182960][ T5956] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.184123][ T7772] em28xx 2-1:0.0: Disconnecting em28xx [ 516.196003][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.265881][ T7772] em28xx 2-1:0.0: Freeing device [ 516.303994][ T30] audit: type=1326 audit(1758021185.068:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.4.1681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5daf8eba9 code=0x0 [ 516.475333][ T5957] usb 4-1: usb_control_msg returned -32 [ 516.480999][ T5957] usbtmc 4-1:16.0: can't read capabilities [ 516.652937][T12864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.824936][T12864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.940589][T12869] loop6: detected capacity change from 0 to 7 [ 516.949627][T12869] Dev loop6: unable to read RDB block 7 [ 516.972786][T12869] loop6: unable to read partition table [ 516.980201][T12869] loop6: partition table beyond EOD, truncated [ 517.003790][T12869] loop_reread_partitions: partition scan of loop6 (x鼦熝鄸 ) failed (rc=-5) [ 517.177857][T12876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.231496][T12876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.305246][T12866] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 517.354524][ T7772] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 517.506555][ T5957] usb 4-1: USB disconnect, device number 79 [ 517.615923][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'. [ 517.667041][ T7772] usb 2-1: unable to get BOS descriptor or descriptor too short [ 517.676324][ T7772] usb 2-1: no configurations [ 517.681651][ T7772] usb 2-1: can't read configurations, error -22 [ 517.878287][T12889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.889992][T12889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.923644][T12889] block device autoloading is deprecated and will be removed. [ 518.344408][ T1212] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 518.797755][ T1212] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 518.841724][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.285025][ T1212] usb 4-1: config 0 descriptor?? [ 519.348661][ T1212] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 519.544125][ T1212] gspca_sunplus: reg_w_riv err -71 [ 519.549434][ T1212] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 519.584054][ T1212] usb 4-1: USB disconnect, device number 80 [ 519.914518][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.125710][T12920] vlan2: entered promiscuous mode [ 520.160212][T12920] vlan2: entered allmulticast mode [ 520.203416][T12920] hsr_slave_1: entered allmulticast mode [ 520.712981][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1697'. [ 520.725437][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'. [ 520.868666][T12936] syz_tun: entered allmulticast mode [ 521.021014][T12944] netlink: 'syz.5.1701': attribute type 4 has an invalid length. [ 521.028874][T12944] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1701'. [ 521.079106][T12941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.098435][T12941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.655825][ T5867] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 521.710588][T12954] pim6reg1: entered promiscuous mode [ 521.716143][T12954] pim6reg1: entered allmulticast mode [ 521.740973][ T5958] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 521.814709][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 521.822514][ T5867] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 521.832074][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.889467][ T5867] pvrusb2: Hardware description: Terratec Grabster AV400 [ 521.902339][ T5867] pvrusb2: ********** [ 521.907023][ T5867] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 521.950637][ T5867] pvrusb2: Important functionality might not be entirely working. [ 522.022257][ T5867] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 522.040347][ T5958] usb 6-1: Using ep0 maxpacket: 32 [ 522.054010][T12959] netlink: 'syz.1.1706': attribute type 4 has an invalid length. [ 522.076984][ T5867] pvrusb2: ********** [ 522.086101][ T5958] usb 6-1: config 0 has an invalid interface number: 184 but max is 11 [ 522.097340][T12959] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1706'. [ 522.139067][ T2346] pvrusb2: Invalid write control endpoint [ 522.158875][ T5958] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 522.217813][ T5958] usb 6-1: config 0 has no interface number 0 [ 522.258874][ T5958] usb 6-1: config 0 interface 184 has no altsetting 0 [ 522.338656][T12962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.365186][T12962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.429419][ T5958] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 522.453766][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.469849][ T1212] usb 4-1: USB disconnect, device number 81 [ 522.504415][ T5958] usb 6-1: Product: syz [ 522.514820][ T5958] usb 6-1: Manufacturer: syz [ 522.534678][ T5958] usb 6-1: SerialNumber: syz [ 522.547978][ T2346] pvrusb2: Invalid write control endpoint [ 522.629144][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 522.630079][ T5958] usb 6-1: config 0 descriptor?? [ 522.673347][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 522.703345][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 522.705025][ T5958] smsc75xx v1.0.0 [ 522.729410][ T2346] pvrusb2: Device being rendered inoperable [ 522.821672][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 522.854841][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 523.122171][ T2346] pvrusb2: Attached sub-driver cx25840 [ 523.131803][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 523.152755][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 523.365179][ T5958] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 523.477333][ T5958] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 523.845668][T12986] program syz.1.1709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.339386][ T5958] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 524.350364][ T5958] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 524.414584][ T5958] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 524.464808][ T5958] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 524.517368][T12993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.528669][T12993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.117306][T13005] binder: 13004:13005 ioctl c0306201 0 returned -14 [ 525.137092][T13005] binder: 13004:13005 ioctl c0306201 0 returned -14 [ 525.371572][T13015] netlink: 4388 bytes leftover after parsing attributes in process `syz.5.1704'. [ 525.784877][ T5956] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 525.948620][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 525.956877][ T5956] usb 2-1: unable to get BOS descriptor or descriptor too short [ 525.968491][ T5956] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 525.977315][ T5956] usb 2-1: config 0 has no interface number 0 [ 525.983485][ T5956] usb 2-1: config 0 interface 63 has no altsetting 0 [ 526.006291][ T5956] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=d5.e8 [ 526.015705][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.023767][ T5956] usb 2-1: Product: syz [ 526.029334][ T5956] usb 2-1: Manufacturer: syz [ 526.034051][ T5956] usb 2-1: SerialNumber: syz [ 526.043130][ T5956] usb 2-1: config 0 descriptor?? [ 526.305566][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.315312][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.453835][ T7772] usb 6-1: USB disconnect, device number 87 [ 526.523149][ T5956] kvaser_usb 2-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 526.552895][ T5956] usb 2-1: USB disconnect, device number 87 [ 526.565416][T13029] netlink: 4344 bytes leftover after parsing attributes in process `syz.2.1720'. [ 526.717612][T13033] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1720'. [ 527.024768][ T5956] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 527.184577][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 527.197070][ T5956] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 527.210499][ T5956] usb 4-1: config 0 has no interface number 0 [ 527.237308][ T5956] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 527.300939][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.310301][ T5956] usb 4-1: Product: syz [ 527.314933][ T5956] usb 4-1: Manufacturer: syz [ 527.314951][ T5956] usb 4-1: SerialNumber: syz [ 527.343069][ T5956] usb 4-1: config 0 descriptor?? [ 527.399718][ T5956] smsc95xx v2.0.0 [ 527.584721][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.654536][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.690700][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.728356][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.757037][ T5956] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 527.783843][ T5956] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 528.417520][T13071] syz.4.1732 (13071): drop_caches: 2 [ 528.508320][T13076] fuse: Unknown parameter '700000000000000000000003' [ 528.731538][T13078] netlink: 'syz.1.1734': attribute type 4 has an invalid length. [ 528.740133][T13078] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1734'. [ 528.903311][T13082] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1736'. [ 528.954559][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.023925][ T5956] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 529.039269][ T5956] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 529.061426][ T5956] usb 4-1: USB disconnect, device number 82 [ 529.118804][ T5867] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 529.217419][T13085] netlink: 'syz.4.1737': attribute type 1 has an invalid length. [ 529.225444][ T5958] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 529.263285][T13085] bond3: (slave bridge1): making interface the new active one [ 529.272103][T13085] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 529.286651][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.307111][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 529.320224][ T5867] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 529.330263][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.341709][ T5867] usb 6-1: config 0 descriptor?? [ 529.388780][ T5958] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.424032][ T5958] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.447033][ T5958] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 529.471489][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 529.489422][ T5958] usb 2-1: SerialNumber: syz [ 529.536303][T13093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1741'. [ 529.630390][T13098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.642313][T13098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.781464][ T5867] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.001C/input/input30 [ 529.867471][ T5867] sony 0003:054C:03D5.001C: input,hidraw0: USB HID v40.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 529.964178][T13080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.977557][T13080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.998887][ T5957] usb 6-1: USB disconnect, device number 88 [ 530.122590][T13109] fido_id[13109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 530.235101][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1745'. [ 530.303216][T13113] macsec1: entered allmulticast mode [ 530.319750][T13113] gretap0: entered allmulticast mode [ 530.338440][T13113] gretap0: left allmulticast mode [ 530.542694][T13116] loop6: detected capacity change from 0 to 6 [ 530.583189][T13116] Dev loop6: unable to read RDB block 6 [ 530.598316][T13116] loop6: unable to read partition table [ 530.604773][ T5873] Bluetooth: hci0: unexpected event for opcode 0x080e [ 530.607946][T13118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.623509][T13116] loop6: partition table beyond EOD, truncated [ 530.642770][T13116] loop_reread_partitions: partition scan of loop6 (x鼦熝鄸 ) failed (rc=-5) [ 530.653352][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.662718][T13118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.672206][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.536370][T13121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.277123][ T5958] usb 2-1: 0:2 : does not exist [ 532.337687][ T5958] usb 2-1: unit 5: unexpected type 0x0c [ 532.414934][ T5957] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 532.485902][ T5958] usb 2-1: USB disconnect, device number 88 [ 532.586388][ T5957] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 532.608889][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 532.612437][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.717161][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 532.749784][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 532.770352][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 532.770403][ T5957] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 532.770426][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.780151][ T5957] usb 4-1: config 0 descriptor?? [ 532.780883][T13138] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 532.914601][ T5958] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 532.948031][T13160] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1757'. [ 532.969492][T13161] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1756'. [ 533.084399][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 533.095081][ T5958] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 533.110933][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.210929][ T5958] usb 2-1: Product: syz [ 533.216791][ T5957] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 533.236810][ T5958] usb 2-1: Manufacturer: syz [ 533.244017][ T5958] usb 2-1: SerialNumber: syz [ 533.246234][ T5957] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 533.534763][ T5958] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 533.619368][ T5958] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 533.666580][ T5958] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 533.700983][ T5958] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 533.713317][ T5958] usb 2-1: USB disconnect, device number 89 [ 533.902643][ T5958] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 533.933033][ T5958] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 533.943983][ T5958] visor 2-1:1.0: device disconnected [ 534.574551][ T5867] usb 4-1: reset high-speed USB device number 83 using dummy_hcd [ 535.076162][T13187] netlink: 'syz.2.1764': attribute type 1 has an invalid length. [ 535.154584][ T5956] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 535.204780][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1764'. [ 535.322711][ T5956] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 535.333054][ T5956] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 535.427097][ T5956] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 535.459790][ T5956] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 535.578062][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 535.691503][ T5956] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 535.745670][ T5956] usb 6-1: string descriptor 0 read error: -22 [ 535.971590][ T5956] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 536.001181][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.138553][ T5957] usb 4-1: USB disconnect, device number 83 [ 536.162471][ T5956] usb 6-1: config 0 descriptor?? [ 536.215355][T13183] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 536.241677][ T5956] hub 6-1:0.0: bad descriptor, ignoring hub [ 536.281279][ T5956] hub 6-1:0.0: probe with driver hub failed with error -5 [ 536.321292][ T5956] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input32 [ 536.654269][T13210] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1769'. [ 536.953672][ C1] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.5-1/input0, status -1 [ 537.678710][T13215] netlink: 'syz.1.1771': attribute type 4 has an invalid length. [ 537.689430][T13215] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1771'. [ 537.784712][T13213] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 537.791053][T13213] syzkaller1: linktype set to 6 [ 537.984182][T13220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.054810][ T5956] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 538.065614][T13220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.204500][ T5956] usb 4-1: device descriptor read/64, error -71 [ 538.464458][ T5956] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 538.614982][ T5956] usb 4-1: device descriptor read/64, error -71 [ 538.780635][ T5956] usb usb4-port1: attempt power cycle [ 539.091308][ T7772] usb 6-1: USB disconnect, device number 89 [ 539.145694][ T5956] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 539.235523][ T5956] usb 4-1: device descriptor read/8, error -71 [ 539.307662][T13247] program syz.1.1779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.637855][ T5956] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 540.047900][ T5956] usb 4-1: device descriptor read/8, error -71 [ 540.155103][ T5956] usb usb4-port1: unable to enumerate USB device [ 540.442029][T13265] Attempt to restore checkpoint with obsolete wellknown handles [ 540.474052][T13265] [U] 股M侪樟Q&捹 K4 [ 540.481996][T13265] [U] [)蜺皚竵菙挖J犀}N癝EF* 窟臢Z屠F[F_H'獎W"覺舿段馅;VA)^坄1C':Z罗髅泌轋OB *?蹮C媄楽<8ZN逊悮犙樉訣Y T漈<$C蠷茤/VG啃 {Y珇Y5\;苾Z栍DX牊僘諥"XI瓼偱`A$铆55?勺S獳肕⑴O墹突*K [ 540.513098][T13265] [U] 設4 [ 540.521906][T13265] [U] 湚U珐B+ '~GI迌RQ^量,(-|⒇跓喫-<6&蹬H.Z9晌/赗J惟皺乘埮+)汁K桅.NH誂#LW#RF7朠侏弁MAX]尋汱N"K孧 +,G禨B碒J偣薠咸C屋Q [ 541.164549][ T5958] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 541.318402][ T5958] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 541.327894][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.336432][ T5958] usb 4-1: Product: syz [ 541.340839][ T5958] usb 4-1: Manufacturer: syz [ 541.345852][ T5958] usb 4-1: SerialNumber: syz [ 541.401975][ T5958] usb 4-1: config 0 descriptor?? [ 541.838976][T13270] @: renamed from bond_slave_0 [ 541.872307][ T5958] usb 4-1: Firmware version (0.0) predates our first public release. [ 541.884473][ T5958] usb 4-1: Please update to version 0.2 or newer [ 541.936274][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 541.979647][ T5958] usb 4-1: USB disconnect, device number 88 [ 542.063384][T13291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.100500][T13291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.159543][T13293] netlink: 'syz.1.1791': attribute type 4 has an invalid length. [ 542.167842][T13293] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1791'. [ 542.839608][T13307] input: syz1 as /devices/virtual/input/input33 [ 542.850533][T13307] program syz.4.1790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 543.104449][ T5957] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 543.254578][T13314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1796'. [ 543.263725][ T5957] usb 4-1: device descriptor read/64, error -71 [ 543.477416][T13316] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1798'. [ 543.524601][ T5957] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 543.647618][T13316] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1798'. [ 543.662320][T13316] ucma_write: process 1009 (syz.5.1798) changed security contexts after opening file descriptor, this is not allowed. [ 543.724634][ T5957] usb 4-1: device descriptor read/64, error -71 [ 543.845380][T12091] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 543.853455][ T5957] usb usb4-port1: attempt power cycle [ 544.014774][T12091] usb 2-1: Using ep0 maxpacket: 8 [ 544.068441][T12091] usb 2-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 544.077708][T12091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.086174][T12091] usb 2-1: Product: syz [ 544.093678][T12091] usb 2-1: Manufacturer: syz [ 544.099340][T12091] usb 2-1: SerialNumber: syz [ 544.167943][T12091] usb 2-1: config 0 descriptor?? [ 544.176108][T12091] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 544.214536][ T5957] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 544.235691][ T5957] usb 4-1: device descriptor read/8, error -71 [ 544.485183][ T5957] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 544.508445][ T5957] usb 4-1: device descriptor read/8, error -71 [ 544.624968][ T5957] usb usb4-port1: unable to enumerate USB device [ 546.244499][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.164692][ T5867] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 547.325215][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 547.337428][ T5867] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.351390][ T5867] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 547.383814][ T5867] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.393555][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.401761][ T5867] usb 4-1: Product: syz [ 547.406953][ T5867] usb 4-1: Manufacturer: syz [ 547.411674][ T5867] usb 4-1: SerialNumber: syz [ 547.611717][T12091] pwc: send_video_command error -71 [ 547.626854][T13352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.630458][T12091] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 547.647118][T13352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.667190][T13352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.699483][T12091] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 547.732057][T13352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.750381][T12091] usb 2-1: USB disconnect, device number 90 [ 547.963799][T13367] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1810'. [ 547.977580][ T5867] cdc_ncm 4-1:1.0: bind() failure [ 548.012522][ T30] audit: type=1326 audit(1758021216.778:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bb18eba9 code=0x7ffc0000 [ 548.025912][ T5867] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 548.062828][ T30] audit: type=1326 audit(1758021216.778:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f14bb18eba9 code=0x7ffc0000 [ 548.101035][ T5867] cdc_ncm 4-1:1.1: bind() failure [ 548.151749][ T30] audit: type=1326 audit(1758021216.778:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bb18eba9 code=0x7ffc0000 [ 548.154044][ T5867] usb 4-1: USB disconnect, device number 93 [ 548.174153][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.279355][ T30] audit: type=1326 audit(1758021216.778:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f14bb18eba9 code=0x7ffc0000 [ 548.310700][ T30] audit: type=1326 audit(1758021216.778:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bb18eba9 code=0x7ffc0000 [ 548.338690][ T30] audit: type=1326 audit(1758021216.778:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f14bb18eba9 code=0x7ffc0000 [ 548.360848][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.480940][ T30] audit: type=1326 audit(1758021216.778:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bb18eba9 code=0x7ffc0000 [ 548.520182][ T30] audit: type=1326 audit(1758021216.778:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f14bb18eba9 code=0x7ffc0000 [ 548.542796][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.553730][ T30] audit: type=1326 audit(1758021216.778:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bb18eba9 code=0x7ffc0000 [ 548.576182][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.628399][ T30] audit: type=1326 audit(1758021216.778:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f14bb18eba9 code=0x7ffc0000 [ 548.716158][ T5958] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 549.014449][ T5958] usb 6-1: Using ep0 maxpacket: 8 [ 549.021603][ T5958] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 549.033183][ T5958] usb 6-1: config 179 has no interface number 0 [ 549.040262][ T5958] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 549.054838][ T5958] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 549.136865][ T5958] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 549.237435][ T5958] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 549.269709][ T5958] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 549.300641][ T5958] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 549.322269][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.487971][T13373] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 549.721601][ T5958] usb 6-1: USB disconnect, device number 90 [ 549.721639][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 549.735834][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 549.744497][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.861956][T13388] lo: entered promiscuous mode [ 549.871317][T13388] tunl0: entered promiscuous mode [ 549.877865][T13388] gre0: entered promiscuous mode [ 549.884163][T13388] gretap0: entered promiscuous mode [ 549.893054][T13388] erspan0: entered promiscuous mode [ 549.899086][T13388] ip_vti0: entered promiscuous mode [ 549.905732][T13388] ip6_vti0: entered promiscuous mode [ 549.912285][T13388] sit0: entered promiscuous mode [ 549.918446][T13388] ip6tnl0: entered promiscuous mode [ 549.924760][T13388] ip6gre0: entered promiscuous mode [ 549.930983][T13388] syz_tun: entered promiscuous mode [ 549.937446][T13388] ip6gretap0: entered promiscuous mode [ 549.943841][T13388] vcan0: entered promiscuous mode [ 549.949783][T13388] bond0: entered promiscuous mode [ 549.954925][T13388] @: entered promiscuous mode [ 549.960190][T13388] bond_slave_1: entered promiscuous mode [ 549.967409][T13388] team0: entered promiscuous mode [ 549.972935][T13388] team_slave_0: entered promiscuous mode [ 549.979057][T13388] team_slave_1: entered promiscuous mode [ 549.986389][T13388] dummy0: entered promiscuous mode [ 549.992437][T13388] nlmon0: entered promiscuous mode [ 550.047556][T13388] caif0: entered promiscuous mode [ 550.058589][T13388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.637180][T13407] netlink: 'syz.5.1821': attribute type 4 has an invalid length. [ 550.669882][T13407] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1821'. [ 550.710964][T13409] netlink: 'syz.2.1822': attribute type 4 has an invalid length. [ 550.742298][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 550.751840][T13409] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1822'. [ 550.771775][T13412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1820'. [ 551.443003][ T5867] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 551.637600][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.660055][ T5867] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 551.711353][T13441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.722481][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.744527][ T5867] usb 4-1: config 0 descriptor?? [ 551.751704][T13441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.956561][T13413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.083215][T13446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.205638][T13446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.891977][T13460] netlink: 'syz.5.1833': attribute type 4 has an invalid length. [ 552.909615][T13460] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1833'. [ 553.384615][ T7772] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 553.690948][ T7772] usb 6-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 553.904382][ T7772] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.985618][ T7772] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 554.021653][ T7772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 554.150247][ T7772] usb 6-1: SerialNumber: syz [ 554.291511][ T5867] usbhid 4-1:0.0: can't add hid device: -71 [ 554.326646][ T5867] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 554.362290][ T5867] usb 4-1: USB disconnect, device number 94 [ 554.465186][ T7772] usb 6-1: 0:2 : does not exist [ 554.531554][ T7772] usb 6-1: USB disconnect, device number 91 [ 554.587568][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.008509][T13491] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1842'. [ 555.099902][T13495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.109831][T13495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.126865][T13495] netlink: 'syz.4.1841': attribute type 1 has an invalid length. [ 556.025779][T13509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.057428][T13509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.254408][ T5956] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 556.404663][ T5956] usb 6-1: Using ep0 maxpacket: 16 [ 556.415096][ T5956] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 556.429153][ T5956] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 556.447992][ T5956] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 556.475780][ T5956] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 556.505252][ T5956] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 556.533982][ T5956] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 556.578363][ T5956] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.641402][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 556.657040][ T5956] usb 6-1: SerialNumber: syz [ 556.742226][T13507] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 556.753008][T13507] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 556.894553][T13525] netlink: 'syz.2.1851': attribute type 6 has an invalid length. [ 557.159941][ T1212] usb 6-1: USB disconnect, device number 92 [ 557.765746][T13532] netlink: 'syz.5.1853': attribute type 4 has an invalid length. [ 557.783007][T13532] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1853'. [ 558.404701][T13545] usb usb8: usbfs: process 13545 (syz.1.1855) did not claim interface 0 before use [ 558.526110][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.536953][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.551846][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.580388][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.617622][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.630774][T13549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.632066][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.651635][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.661267][T13549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.673950][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.690434][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.701555][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.729744][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.752956][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.904344][T13550] tipc: Enabled bearer , priority 0 [ 558.911835][T13550] syzkaller0: entered promiscuous mode [ 558.917366][T13550] syzkaller0: entered allmulticast mode [ 558.955783][T13548] tipc: Resetting bearer [ 558.976768][T13548] tipc: Disabling bearer [ 559.240677][T13553] FAULT_INJECTION: forcing a failure. [ 559.240677][T13553] name failslab, interval 1, probability 0, space 0, times 0 [ 559.319963][T13553] CPU: 1 UID: 0 PID: 13553 Comm: syz.3.1858 Not tainted syzkaller #0 PREEMPT(full) [ 559.319990][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 559.320002][T13553] Call Trace: [ 559.320010][T13553] [ 559.320019][T13553] dump_stack_lvl+0x189/0x250 [ 559.320043][T13553] ? __pfx____ratelimit+0x10/0x10 [ 559.320062][T13553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.320082][T13553] ? __pfx__printk+0x10/0x10 [ 559.320110][T13553] ? __pfx___might_resched+0x10/0x10 [ 559.320131][T13553] should_fail_ex+0x414/0x560 [ 559.320159][T13553] should_failslab+0xa8/0x100 [ 559.320183][T13553] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 559.320207][T13553] ? __alloc_skb+0x112/0x2d0 [ 559.320229][T13553] __alloc_skb+0x112/0x2d0 [ 559.320252][T13553] netlink_sendmsg+0x5c6/0xb30 [ 559.320277][T13553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.320294][T13553] ? aa_sock_msg_perm+0xf1/0x1d0 [ 559.320309][T13553] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 559.320324][T13553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.320339][T13553] __sock_sendmsg+0x219/0x270 [ 559.320360][T13553] ____sys_sendmsg+0x505/0x830 [ 559.320380][T13553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.320403][T13553] ? import_iovec+0x74/0xa0 [ 559.320423][T13553] ___sys_sendmsg+0x21f/0x2a0 [ 559.320441][T13553] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.320483][T13553] ? __fget_files+0x2a/0x420 [ 559.320494][T13553] ? __fget_files+0x3a0/0x420 [ 559.320514][T13553] __x64_sys_sendmsg+0x19b/0x260 [ 559.320532][T13553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.320555][T13553] ? __pfx_ksys_write+0x10/0x10 [ 559.320570][T13553] ? rcu_is_watching+0x15/0xb0 [ 559.320588][T13553] ? do_syscall_64+0xbe/0x3b0 [ 559.320606][T13553] do_syscall_64+0xfa/0x3b0 [ 559.320618][T13553] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.320631][T13553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.320650][T13553] ? clear_bhb_loop+0x60/0xb0 [ 559.320667][T13553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.320679][T13553] RIP: 0033:0x7f96b4d8eba9 [ 559.320693][T13553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.320706][T13553] RSP: 002b:00007f96b5b54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.320721][T13553] RAX: ffffffffffffffda RBX: 00007f96b4fd5fa0 RCX: 00007f96b4d8eba9 [ 559.320731][T13553] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 559.320740][T13553] RBP: 00007f96b5b54090 R08: 0000000000000000 R09: 0000000000000000 [ 559.320749][T13553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.320757][T13553] R13: 00007f96b4fd6038 R14: 00007f96b4fd5fa0 R15: 00007f96b50ffa28 [ 559.320779][T13553] [ 560.205134][ T1212] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 560.396578][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.414083][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.466855][ T1212] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 560.576602][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.689626][ T1212] usb 4-1: config 0 descriptor?? [ 561.032209][T13575] netlink: 'syz.1.1864': attribute type 4 has an invalid length. [ 561.070121][T13575] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1864'. [ 561.174858][ T1212] hid-retrode 0003:0403:97C1.001E: unknown main item tag 0x0 [ 561.210197][ T1212] hid-retrode 0003:0403:97C1.001E: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.3-1/input0 [ 561.382074][ T1212] usb 4-1: USB disconnect, device number 95 [ 561.476912][T13578] fido_id[13578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 561.742133][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 561.742145][ T30] audit: type=1326 audit(1758021230.508:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.5.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0db98eba9 code=0x7ffc0000 [ 561.819921][T13572] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 561.826743][T13572] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 561.854067][T13572] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 561.860434][T13572] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 561.891738][ T30] audit: type=1326 audit(1758021230.508:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.5.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fb0db98eba9 code=0x7ffc0000 [ 561.928643][T13572] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 561.994729][ T30] audit: type=1326 audit(1758021230.508:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.5.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0db98eba9 code=0x7ffc0000 [ 562.017827][T13572] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 562.027211][ T30] audit: type=1326 audit(1758021230.508:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.5.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fb0db98eba9 code=0x7ffc0000 [ 562.062998][T13572] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 562.074227][T13572] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 562.113202][ T30] audit: type=1326 audit(1758021230.508:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.5.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0db98eba9 code=0x7ffc0000 [ 562.229715][ T30] audit: type=1326 audit(1758021230.508:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.5.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb0db98eba9 code=0x7ffc0000 [ 562.316176][ T30] audit: type=1326 audit(1758021230.508:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.5.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0db98eba9 code=0x7ffc0000 [ 562.383389][ T30] audit: type=1326 audit(1758021230.508:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.5.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0db98eba9 code=0x7ffc0000 [ 562.872167][T13607] Invalid logical block size (768) [ 562.878686][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.885095][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.100075][T13612] fuse: Unknown parameter 'grotp_id' [ 563.114854][ T5956] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 563.241292][T13616] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 563.265757][T13616] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 563.278510][T13620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1875'. [ 563.291903][T13616] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 563.306180][T13616] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 563.322521][T13616] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 563.418334][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 563.429298][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 563.447668][ T5956] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 563.471911][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.520785][ T31] INFO: task kworker/1:3:5864 blocked for more than 143 seconds. [ 563.533022][ T31] Not tainted syzkaller #0 [ 563.549611][ T5956] usb 4-1: config 0 descriptor?? [ 563.570561][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.608277][ T31] task:kworker/1:3 state:D stack:20808 pid:5864 tgid:5864 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 563.623623][ T31] Workqueue: usb_hub_wq hub_event [ 563.630839][ T31] Call Trace: [ 563.634623][ T31] [ 563.637710][ T31] __schedule+0x1798/0x4cc0 [ 563.642538][ T31] ? __pfx___schedule+0x10/0x10 [ 563.650925][ T31] ? schedule+0x91/0x360 [ 563.655565][ T31] schedule+0x165/0x360 [ 563.660308][ T31] schedule_timeout+0x9a/0x270 [ 563.665483][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 563.672356][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 563.681758][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.688310][ T31] ? wait_for_completion+0x267/0x5d0 [ 563.693795][ T31] wait_for_completion+0x2bf/0x5d0 [ 563.703870][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 563.710406][ T31] i2c_del_adapter+0x581/0x6e0 [ 563.717989][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.723396][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 563.729626][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 563.760071][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 563.772123][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 563.783152][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 563.789890][ T31] usb_probe_interface+0x668/0xc30 [ 563.795476][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 563.801956][ T31] really_probe+0x26a/0x9e0 [ 563.807577][T13598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.819695][T13598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.831939][ T31] __driver_probe_device+0x18c/0x2f0 [ 563.838516][ T31] driver_probe_device+0x4f/0x430 [ 563.845209][ T31] __device_attach_driver+0x2ce/0x530 [ 563.846975][ T1212] usb 4-1: USB disconnect, device number 96 [ 563.858099][ T31] bus_for_each_drv+0x251/0x2e0 [ 563.866061][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 563.875493][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 563.895119][ T31] __device_attach+0x2b8/0x400 [ 563.901132][ T31] ? __pfx___device_attach+0x10/0x10 [ 563.907088][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 563.919655][ T31] bus_probe_device+0x185/0x260 [ 563.924913][ T31] device_add+0x7b6/0xb50 [ 563.938405][ T31] usb_set_configuration+0x1a87/0x20e0 [ 563.947581][ T31] usb_generic_driver_probe+0x8d/0x150 [ 563.963087][ T31] usb_probe_device+0x1c4/0x390 [ 563.976248][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 563.981857][ T31] really_probe+0x26a/0x9e0 [ 563.988698][ T31] __driver_probe_device+0x18c/0x2f0 [ 564.001341][ T31] driver_probe_device+0x4f/0x430 [ 564.012497][ T31] __device_attach_driver+0x2ce/0x530 [ 564.023408][ T31] bus_for_each_drv+0x251/0x2e0 [ 564.036516][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 564.054287][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 564.093261][ T31] __device_attach+0x2b8/0x400 [ 564.104241][ T31] ? __pfx___device_attach+0x10/0x10 [ 564.110097][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 564.116983][ T31] bus_probe_device+0x185/0x260 [ 564.127212][ T31] device_add+0x7b6/0xb50 [ 564.133991][ T31] usb_new_device+0xa39/0x16f0 [ 564.146032][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 564.151408][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 564.161317][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.167096][ T31] hub_event+0x2958/0x4a20 [ 564.172077][ T31] ? __pfx_hub_event+0x10/0x10 [ 564.177532][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 564.193130][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 564.204025][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 564.217421][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 564.224487][ T31] process_scheduled_works+0xae1/0x17b0 [ 564.230244][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 564.267071][ T31] worker_thread+0x8a0/0xda0 [ 564.271712][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 564.281046][ T31] ? __kthread_parkme+0x7b/0x200 [ 564.288679][ T31] kthread+0x70e/0x8a0 [ 564.293028][ T31] ? __pfx_worker_thread+0x10/0x10 [ 564.300344][ T31] ? __pfx_kthread+0x10/0x10 [ 564.308974][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 564.318191][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.323662][ T31] ? __pfx_kthread+0x10/0x10 [ 564.333334][ T31] ret_from_fork+0x436/0x7d0 [ 564.338852][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 564.344189][ T31] ? __switch_to_asm+0x39/0x70 [ 564.353752][ T31] ? __switch_to_asm+0x33/0x70 [ 564.359073][ T31] ? __pfx_kthread+0x10/0x10 [ 564.363898][ T31] ret_from_fork_asm+0x1a/0x30 [ 564.407736][ T31] [ 564.426903][ T31] [ 564.426903][ T31] Showing all locks held in the system: [ 564.489876][ T31] 1 lock held by khungtaskd/31: [ 564.496913][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 564.510133][ T31] 3 locks held by kworker/u8:2/36: [ 564.518474][ T31] 3 locks held by kworker/u8:4/59: [ 564.568966][ T31] #0: ffff8881456de948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 564.608248][ T31] #1: ffffc9000210fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 564.623497][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 564.639979][ T31] 2 locks held by getty/5624: [ 564.673726][ T31] #0: ffff88814cea50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 564.687741][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 564.699200][ T31] 5 locks held by kworker/1:3/5864: [ 564.708160][ T31] #0: ffff888144afe548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 564.719866][ T31] #1: ffffc900040afbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 564.732323][ T31] #2: ffff888027e09198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 564.741348][ T31] #3: ffff8880524b4198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 564.750947][ T31] #4: ffff88805624b160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 564.760269][ T31] 1 lock held by ipvs-e:3:0/7148: [ 564.765399][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 564.775420][ T31] 1 lock held by syz.5.1873/13609: [ 564.780536][ T31] #0: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 564.790923][ T31] [ 564.793281][ T31] ============================================= [ 564.793281][ T31] [ 564.802942][ T31] NMI backtrace for cpu 1 [ 564.802958][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 564.802977][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 564.802988][ T31] Call Trace: [ 564.802995][ T31] [ 564.803002][ T31] dump_stack_lvl+0x189/0x250 [ 564.803027][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.803047][ T31] ? __pfx__printk+0x10/0x10 [ 564.803089][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 564.803114][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 564.803139][ T31] ? __pfx__printk+0x10/0x10 [ 564.803163][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 564.803189][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 564.803212][ T31] watchdog+0xf93/0xfe0 [ 564.803235][ T31] ? watchdog+0x1de/0xfe0 [ 564.803259][ T31] kthread+0x70e/0x8a0 [ 564.803282][ T31] ? __pfx_watchdog+0x10/0x10 [ 564.803301][ T31] ? __pfx_kthread+0x10/0x10 [ 564.803322][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 564.803346][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.803362][ T31] ? __pfx_kthread+0x10/0x10 [ 564.803383][ T31] ret_from_fork+0x436/0x7d0 [ 564.803404][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 564.803427][ T31] ? __switch_to_asm+0x39/0x70 [ 564.803447][ T31] ? __switch_to_asm+0x33/0x70 [ 564.803467][ T31] ? __pfx_kthread+0x10/0x10 [ 564.803488][ T31] ret_from_fork_asm+0x1a/0x30 [ 564.803523][ T31] [ 564.803530][ T31] Sending NMI from CPU 1 to CPUs 0: [ 564.953024][ C0] NMI backtrace for cpu 0 [ 564.953042][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 564.953061][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 564.953072][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 564.953094][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 d9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 564.953109][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 564.953125][ C0] RAX: bd580bf88d6fa200 RBX: ffffffff819693f8 RCX: bd580bf88d6fa200 [ 564.953138][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b9e62 RDI: ffffffff8be33e80 [ 564.953151][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 564.953163][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a530 [ 564.953176][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 564.953187][ C0] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 564.953202][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.953214][ C0] CR2: 0000200000404000 CR3: 00000000247d4000 CR4: 00000000003526f0 [ 564.953232][ C0] Call Trace: [ 564.953240][ C0] [ 564.953247][ C0] default_idle+0x13/0x20 [ 564.953266][ C0] default_idle_call+0x74/0xb0 [ 564.953286][ C0] do_idle+0x1e8/0x510 [ 564.953305][ C0] ? __pfx_do_idle+0x10/0x10 [ 564.953334][ C0] cpu_startup_entry+0x44/0x60 [ 564.953350][ C0] rest_init+0x2de/0x300 [ 564.953370][ C0] start_kernel+0x3a9/0x410 [ 564.953390][ C0] x86_64_start_reservations+0x24/0x30 [ 564.953411][ C0] x86_64_start_kernel+0x143/0x1c0 [ 564.953431][ C0] common_startup_64+0x13e/0x147 [ 564.953460][ C0] [ 564.954065][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 565.134172][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 565.143258][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 565.153290][ T31] Call Trace: [ 565.156555][ T31] [ 565.159489][ T31] dump_stack_lvl+0x99/0x250 [ 565.164058][ T31] ? __asan_memcpy+0x40/0x70 [ 565.168629][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.173805][ T31] ? __pfx__printk+0x10/0x10 [ 565.178380][ T31] vpanic+0x281/0x750 [ 565.182342][ T31] ? __pfx_vpanic+0x10/0x10 [ 565.186821][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 565.192346][ T31] ? preempt_schedule+0xae/0xc0 [ 565.197178][ T31] ? preempt_schedule_common+0x83/0xd0 [ 565.202618][ T31] panic+0xb9/0xc0 [ 565.206318][ T31] ? __pfx_panic+0x10/0x10 [ 565.210725][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 565.216098][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 565.222247][ T31] watchdog+0xfd2/0xfe0 [ 565.226399][ T31] ? watchdog+0x1de/0xfe0 [ 565.230729][ T31] kthread+0x70e/0x8a0 [ 565.234802][ T31] ? __pfx_watchdog+0x10/0x10 [ 565.239463][ T31] ? __pfx_kthread+0x10/0x10 [ 565.244038][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.249221][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.254399][ T31] ? __pfx_kthread+0x10/0x10 [ 565.258974][ T31] ret_from_fork+0x436/0x7d0 [ 565.263544][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 565.268648][ T31] ? __switch_to_asm+0x39/0x70 [ 565.273393][ T31] ? __switch_to_asm+0x33/0x70 [ 565.278149][ T31] ? __pfx_kthread+0x10/0x10 [ 565.282738][ T31] ret_from_fork_asm+0x1a/0x30 [ 565.287493][ T31] [ 565.290797][ T31] Kernel Offset: disabled [ 565.295111][ T31] Rebooting in 86400 seconds..