last executing test programs: 8m46.210318116s ago: executing program 4 (id=1289): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket(0xa, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000200), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000700), 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=ANY=[]}, 0x50) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r6, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r8, 0x80044dfb, &(0x7f0000000100)) 8m42.417642517s ago: executing program 4 (id=1301): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@loopback, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x6, 0x2, 0x100000000000000], 0xeeef0000, 0x110200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m41.960305509s ago: executing program 4 (id=1303): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) fsopen(&(0x7f0000000000)='msdos\x00', 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd\x00') socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 8m40.144602229s ago: executing program 4 (id=1312): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket(0xa, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000200), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000700), 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=ANY=[]}, 0x50) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r6, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r8, 0x80044dfb, &(0x7f0000000100)) 8m36.167189538s ago: executing program 4 (id=1324): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r4, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x664, r4, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x648, 0x11d, 0x0, 0x1, [{0x254, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x11}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0x3b, 0xc, 0x48, 0xc, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x800, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {}, {0x6, 0x14}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x5385, 0x8001, 0xf0e7, 0xfffe, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x40, 0x2, 0x8, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x35c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x4, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x6, 0x2, 0x6c, 0x18, 0x6c, 0x60, 0x6, 0xc, 0x16, 0x5, 0x36]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x1b, 0x30, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0xb, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x2}, {0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x36, 0x0, 0x3ff, 0xe61, 0x0, 0x7f, 0x10]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x5}, {0x6, 0x5}, {}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0xdf, 0x6, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x9, 0x8, 0x1, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x48, 0x36, 0x18, 0x4, 0x5, 0x16, 0x16, 0x6c, 0x6, 0x1b, 0x0, 0x48, 0x6, 0x4, 0x3, 0x16, 0x4, 0x4d, 0x48, 0x12, 0x6, 0x6, 0x60, 0x6c, 0x6c, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x100, 0x100, 0x100, 0x9, 0xf, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xb, 0x48, 0x1b, 0x0, 0xc, 0x60, 0x5, 0xb, 0xe, 0x53, 0x24, 0x50, 0x1b, 0x6, 0x42acac960eb9f4a5, 0x48, 0x6, 0xb, 0xa, 0x1b, 0x6, 0x2, 0x16, 0x48, 0x4, 0x30, 0x36, 0x6]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x7, 0x5}, {0x5, 0x1}, {0x6}, {0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x2}, {0x0, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x4}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4000, 0x883e, 0x75, 0x0, @wg=@response={0x2, 0x0, 0x0, "018cf684687c2dc12327f770be1c584e0d3c9d4087873521d65bf3d86ee02011", "7bedef4e728067fa120094372df68c75", {"6eeb460c188d1d4caf89c6b0f382357f", "7e8973dec9e6b2a8b7ce38984ed92e1a"}}}}}}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000ec0)={0xf0, r11, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xd}, @ETHTOOL_A_RINGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x70}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x81}]}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0xd0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0409"], 0x3e) 8m35.771327208s ago: executing program 4 (id=1327): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x2, 0x20000800, 0x400, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) unshare(0x2c020400) r0 = msgget$private(0x0, 0x1a2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) rt_sigtimedwait(&(0x7f0000000440)={[0x40]}, 0x0, 0xfffffffffffffffe, 0x8) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x0, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff, 0x8000000}}, 0xe4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0xffffff7f00000000, 0x3800) 8m20.532624906s ago: executing program 32 (id=1327): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x2, 0x20000800, 0x400, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) unshare(0x2c020400) r0 = msgget$private(0x0, 0x1a2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) rt_sigtimedwait(&(0x7f0000000440)={[0x40]}, 0x0, 0xfffffffffffffffe, 0x8) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x0, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff, 0x8000000}}, 0xe4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0xffffff7f00000000, 0x3800) 7m24.00274869s ago: executing program 3 (id=1521): syz_open_dev$video4linux(0x0, 0x0, 0x0) unshare(0x22020600) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc04c5611, &(0x7f0000001e00)=@overlay={0x1, 0xa, 0x4, 0x800, 0x9, {0x77359400}, {0x1, 0xc, 0x6, 0x6, 0x4, 0x1, "6db7036d"}, 0x4, 0x3, {}, 0x2}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000480)={0x0, 0x9, 0x8f}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000640)=0x40) 7m23.697896911s ago: executing program 3 (id=1523): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r4, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x664, r4, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x648, 0x11d, 0x0, 0x1, [{0x254, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x11}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0x3b, 0xc, 0x48, 0xc, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x800, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {}, {0x6, 0x14}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x5385, 0x8001, 0xf0e7, 0xfffe, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x40, 0x2, 0x8, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x35c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x4, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x6, 0x2, 0x6c, 0x18, 0x6c, 0x60, 0x6, 0xc, 0x16, 0x5, 0x36]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x1b, 0x30, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0xb, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x2}, {0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x36, 0x0, 0x3ff, 0xe61, 0x0, 0x7f, 0x10]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x5}, {0x6, 0x5}, {}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0xdf, 0x6, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x9, 0x8, 0x1, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x48, 0x36, 0x18, 0x4, 0x5, 0x16, 0x16, 0x6c, 0x6, 0x1b, 0x0, 0x48, 0x6, 0x4, 0x3, 0x16, 0x4, 0x4d, 0x48, 0x12, 0x6, 0x6, 0x60, 0x6c, 0x6c, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x100, 0x100, 0x100, 0x9, 0xf, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xb, 0x48, 0x1b, 0x0, 0xc, 0x60, 0x5, 0xb, 0xe, 0x53, 0x24, 0x50, 0x1b, 0x6, 0x42acac960eb9f4a5, 0x48, 0x6, 0xb, 0xa, 0x1b, 0x6, 0x2, 0x16, 0x48, 0x4, 0x30, 0x36, 0x6]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x7, 0x5}, {0x5, 0x1}, {0x6}, {0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x2}, {0x0, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x4}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4000, 0x883e, 0x75, 0x0, @wg=@response={0x2, 0x0, 0x0, "018cf684687c2dc12327f770be1c584e0d3c9d4087873521d65bf3d86ee02011", "7bedef4e728067fa120094372df68c75", {"6eeb460c188d1d4caf89c6b0f382357f", "7e8973dec9e6b2a8b7ce38984ed92e1a"}}}}}}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m23.520252531s ago: executing program 3 (id=1525): syz_usb_connect(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x401, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x40800) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x40, 0x2, 0x0, 0x41) 7m19.022495661s ago: executing program 3 (id=1537): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x14, 0x0, &(0x7f0000000240)) mmap(&(0x7f00005d9000/0x4000)=nil, 0x4000, 0xb, 0x810, r2, 0xbc855000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xfff, 0x8, 0x200, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) 7m15.398008689s ago: executing program 3 (id=1546): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r4, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x664, r4, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x648, 0x11d, 0x0, 0x1, [{0x254, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x11}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0x3b, 0xc, 0x48, 0xc, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x800, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {}, {0x6, 0x14}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x5385, 0x8001, 0xf0e7, 0xfffe, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x40, 0x2, 0x8, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x35c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x4, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x6, 0x2, 0x6c, 0x18, 0x6c, 0x60, 0x6, 0xc, 0x16, 0x5, 0x36]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x1b, 0x30, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0xb, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x2}, {0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x36, 0x0, 0x3ff, 0xe61, 0x0, 0x7f, 0x10]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x5}, {0x6, 0x5}, {}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0xdf, 0x6, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x9, 0x8, 0x1, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x48, 0x36, 0x18, 0x4, 0x5, 0x16, 0x16, 0x6c, 0x6, 0x1b, 0x0, 0x48, 0x6, 0x4, 0x3, 0x16, 0x4, 0x4d, 0x48, 0x12, 0x6, 0x6, 0x60, 0x6c, 0x6c, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x100, 0x100, 0x100, 0x9, 0xf, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xb, 0x48, 0x1b, 0x0, 0xc, 0x60, 0x5, 0xb, 0xe, 0x53, 0x24, 0x50, 0x1b, 0x6, 0x42acac960eb9f4a5, 0x48, 0x6, 0xb, 0xa, 0x1b, 0x6, 0x2, 0x16, 0x48, 0x4, 0x30, 0x36, 0x6]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x7, 0x5}, {0x5, 0x1}, {0x6}, {0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x2}, {0x0, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x4}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4000, 0x883e, 0x75, 0x0, @wg=@response={0x2, 0x0, 0x0, "018cf684687c2dc12327f770be1c584e0d3c9d4087873521d65bf3d86ee02011", "7bedef4e728067fa120094372df68c75", {"6eeb460c188d1d4caf89c6b0f382357f", "7e8973dec9e6b2a8b7ce38984ed92e1a"}}}}}}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m14.706380431s ago: executing program 3 (id=1550): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8800"/20, @ANYRES32=0x0, @ANYBLOB="8a430100000000005400188050000180130002006261746164765f736c6176655f3000000800010009000000130002006261746164765f736c6176655f300000140004001448abe48c44ce75107e6b00bbc079a50800010007000000140003006261746164765f736c6176655f300000"], 0x88}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) openat$binfmt_format(0xffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xff, 0x6}, {0x6, 0x24, 0x1a, 0xc, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0x3, 0x7}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xe6, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902d40002010650000904000001020d00000524060001052400a9b30d240fedc6f9338fbe469aed7601077487f44f9801020000000300ff000606241a0c001407240a050905"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0xa00) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x4, 0x5, 0x2, 0x88, 0x5, "000064640000001503fe00", "037ec42b", "7d0a5782", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x9, 0x0, 0x0, 0x0, "fff8000000000000c5c6ff0017c3a86d", 0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0xff}) socket$inet6_tcp(0xa, 0x1, 0x0) 6m58.841097281s ago: executing program 33 (id=1550): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8800"/20, @ANYRES32=0x0, @ANYBLOB="8a430100000000005400188050000180130002006261746164765f736c6176655f3000000800010009000000130002006261746164765f736c6176655f300000140004001448abe48c44ce75107e6b00bbc079a50800010007000000140003006261746164765f736c6176655f300000"], 0x88}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) openat$binfmt_format(0xffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xff, 0x6}, {0x6, 0x24, 0x1a, 0xc, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0x3, 0x7}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xe6, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902d40002010650000904000001020d00000524060001052400a9b30d240fedc6f9338fbe469aed7601077487f44f9801020000000300ff000606241a0c001407240a050905"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0xa00) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x4, 0x5, 0x2, 0x88, 0x5, "000064640000001503fe00", "037ec42b", "7d0a5782", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x9, 0x0, 0x0, 0x0, "fff8000000000000c5c6ff0017c3a86d", 0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0xff}) socket$inet6_tcp(0xa, 0x1, 0x0) 2m25.206443579s ago: executing program 2 (id=2354): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(r2, 0x1) 2m21.542557397s ago: executing program 2 (id=2366): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x2, 0x48, &(0x7f00000000c0)={{0x12, 0x1, 0x141, 0x93, 0xb9, 0x5b, 0x20, 0x6cd, 0x112, 0xd05, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x77, 0x4, 0x7, 0xb8, 0x9e, 0x4, [], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x4, 0x0, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x4c, 0x2, 0x3}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x9, 0xa, 0x9}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x0, 0x7, 0x1}}]}}]}}]}}, 0x0) unshare(0x60480) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 2m19.297531279s ago: executing program 2 (id=2368): socket$packet(0x11, 0x3, 0x300) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000001cc0), 0x80000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) close(r3) 2m18.805745227s ago: executing program 2 (id=2372): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r3, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x664, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x648, 0x11d, 0x0, 0x1, [{0x254, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x11}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0x3b, 0xc, 0x48, 0xc, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x800, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {}, {0x6, 0x14}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x5385, 0x8001, 0xf0e7, 0xfffe, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x40, 0x2, 0x8, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x35c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x4, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x6, 0x2, 0x6c, 0x18, 0x6c, 0x60, 0x6, 0xc, 0x16, 0x5, 0x36]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x1b, 0x30, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0xb, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x2}, {0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x36, 0x0, 0x3ff, 0xe61, 0x0, 0x7f, 0x10]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x5}, {0x6, 0x5}, {}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0xdf, 0x6, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x9, 0x8, 0x1, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x48, 0x36, 0x18, 0x4, 0x5, 0x16, 0x16, 0x6c, 0x6, 0x1b, 0x0, 0x48, 0x6, 0x4, 0x3, 0x16, 0x4, 0x4d, 0x48, 0x12, 0x6, 0x6, 0x60, 0x6c, 0x6c, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x100, 0x100, 0x100, 0x9, 0xf, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xb, 0x48, 0x1b, 0x0, 0xc, 0x60, 0x5, 0xb, 0xe, 0x53, 0x24, 0x50, 0x1b, 0x6, 0x42acac960eb9f4a5, 0x48, 0x6, 0xb, 0xa, 0x1b, 0x6, 0x2, 0x16, 0x48, 0x4, 0x30, 0x36, 0x6]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x7, 0x5}, {0x5, 0x1}, {0x6}, {0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x2}, {0x0, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x4}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4000, 0x883e, 0x75, 0x0, @wg=@response={0x2, 0x0, 0x0, "018cf684687c2dc12327f770be1c584e0d3c9d4087873521d65bf3d86ee02011", "7bedef4e728067fa120094372df68c75", {"6eeb460c188d1d4caf89c6b0f382357f", "7e8973dec9e6b2a8b7ce38984ed92e1a"}}}}}}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000ec0)={0xf0, r11, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xd}, @ETHTOOL_A_RINGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x70}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x81}]}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0xd0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0409"], 0x3e) 2m18.540126536s ago: executing program 2 (id=2374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000020c0), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xcc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0x0, 0x7fff0200}]}) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r4, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r5 = syz_open_pts(r4, 0x40000) dup3(r5, r4, 0x0) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000001c0)) get_mempolicy(0xffffffffffffffff, 0x0, 0xfffe, &(0x7f0000ffd000/0x3000)=nil, 0x2) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x8001000}, 0xc) getsockname$packet(r2, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8=r1], 0x7c}}, 0x80) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) setsockopt$sock_timeval(r0, 0x1, 0x57, &(0x7f0000000000), 0x8) r6 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffd, 0x80000000, 0x0, 0xfa000, 0x3}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 2m15.246599097s ago: executing program 2 (id=2389): r0 = socket$kcm(0xa, 0x1, 0x106) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2c040400, 0x200}}, 0x50) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) mlock(&(0x7f0000bda000/0x4000)=nil, 0x4000) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') pread64(r2, &(0x7f0000001180)=""/4107, 0x100b, 0x200280) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x10005, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x8}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r6, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x2}, {0x36}, {0x4, 0x1}, {0x2, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000004) (async) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff}, 0x80, 0x0}, 0xe07e872420dfefca) (async) r8 = socket$kcm(0x10, 0xa, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f7ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m0.126382058s ago: executing program 34 (id=2389): r0 = socket$kcm(0xa, 0x1, 0x106) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2c040400, 0x200}}, 0x50) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) mlock(&(0x7f0000bda000/0x4000)=nil, 0x4000) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') pread64(r2, &(0x7f0000001180)=""/4107, 0x100b, 0x200280) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x10005, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x8}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r6, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x2}, {0x36}, {0x4, 0x1}, {0x2, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000004) (async) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff}, 0x80, 0x0}, 0xe07e872420dfefca) (async) r8 = socket$kcm(0x10, 0xa, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f7ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 28.195236103s ago: executing program 1 (id=2645): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_DST={0x14, 0x7, @loopback}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x38}}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(0xffffffffffffffff, 0x1) 26.943813826s ago: executing program 1 (id=2648): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffff9, @empty}, 0x80, 0x0}, 0x40081) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) r4 = syz_pidfd_open(0x0, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) r5 = dup(r4) semget$private(0x0, 0x4000000009, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed0102030109022200010000000009040000"], 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x7401) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000002280)='projid_map\x00') read$char_usb(r8, &(0x7f0000000040)=""/4109, 0x100d) 22.839370159s ago: executing program 1 (id=2658): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000080)={{0x2, @addr=0x49f8}, "deedbbf39de88fed3db13b368341f51a157474494fadcf2f93cc02dd3ab896a7", 0x2}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x8000203d}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000640)=[{0x1e, 0x10, 0x0, 0x0}, {0x3, 0x4001, 0x0, 0x0}], 0x2}) 21.930262874s ago: executing program 1 (id=2662): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)={0x660, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x644, 0x11d, 0x0, 0x1, [{0x254, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x11}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0x3b, 0xc, 0x48, 0xc, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x800, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {}, {0x6, 0x14}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x5385, 0x8001, 0xf0e7, 0xfffe, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x40, 0x2, 0x8, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x35c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x4, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x6, 0x2, 0x6c, 0x18, 0x6c, 0x60, 0x6, 0xc, 0x16, 0x5, 0x36]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x1b, 0x30, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0xb, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x2}, {0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x36, 0x0, 0x3ff, 0xe61, 0x0, 0x7f, 0x10]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x5}, {0x6, 0x5}, {}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0xdf, 0x6, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x9, 0x8, 0x1, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x48, 0x36, 0x18, 0x4, 0x5, 0x16, 0x16, 0x6c, 0x6, 0x1b, 0x0, 0x48, 0x6, 0x4, 0x3, 0x16, 0x4, 0x4d, 0x48, 0x12, 0x6, 0x6, 0x60, 0x6c, 0x6c, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x100, 0x100, 0x100, 0x9, 0xf, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xb, 0x48, 0x1b, 0x0, 0xc, 0x60, 0x5, 0xb, 0xe, 0x53, 0x24, 0x50, 0x1b, 0x6, 0x42acac960eb9f4a5, 0x48, 0x6, 0xb, 0xa, 0x1b, 0x6, 0x2, 0x16, 0x48, 0x4, 0x30, 0x36, 0x6]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x7, 0x5}, {0x5, 0x1}, {0x6}, {0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x2}, {0x0, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x4}]}]}, 0x660}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000ec0)={0xf0, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xd}, @ETHTOOL_A_RINGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x70}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x81}]}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0xd0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 21.510358738s ago: executing program 1 (id=2664): syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x8}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36bfe1c3e68f0426d10a1f863ced625e85d7f9f4af20682"}}, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) 19.302158352s ago: executing program 7 (id=2670): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(0xffffffffffffffff, 0x1) 16.931994282s ago: executing program 7 (id=2673): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000400)={'\x00', 0x0, 0x212, 0x100009, 0x2, 0xfff}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x908e, 0x0, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x5}, 0x0, 0x4, 0x1}, {{@in=@local, 0x0, 0x32}, 0x2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4}}, 0xe4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000225bd7000fcdbdf250f000000050030000100000005003300000000000800", @ANYRES32, @ANYBLOB="05002e0000000000080039000900000005002a0000000000080032000900000005002d000100000005002d0001000000d65766da3de72229dee85b600cc927c23335ccdf01eb212d7134bb8d6db8af76fca9333bbbd1986fd5fa3eeeb6d89c8e26b1ed88cf87922785feb0efd34465435f167d3b7dbae610954d0277a1c77d3d04000000d865d9892d953c481bf7fccb4f7f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000041}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) unshare(0x66000080) 13.555124931s ago: executing program 5 (id=2677): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x80, &(0x7f00000001c0)={0x1b, 0x5, 0xfffffffb}) eventfd2(0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000240)) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_setup(0x1, &(0x7f0000001240)=0x0) io_getevents(r5, 0x9, 0x4, &(0x7f0000001280)=[{}, {}, {}, {}], &(0x7f0000001300)) read$char_usb(r4, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r4, &(0x7f0000000100)=""/67, 0x43) syz_usb_disconnect(r2) io_setup(0x6, &(0x7f0000000040)) r6 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000000}) epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0x100, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) 13.236548105s ago: executing program 6 (id=2678): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket(0xa, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000200), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000700), 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=ANY=[]}, 0x50) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r6, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r10, 0x80044dfb, &(0x7f0000000100)) 12.242355098s ago: executing program 5 (id=2679): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, &(0x7f0000000240)) mmap(&(0x7f00005d9000/0x4000)=nil, 0x4000, 0xb, 0x810, r2, 0xbc855000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xfff, 0x8, 0x200, 0x4}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r5, 0x5459, 0x0) 10.98566173s ago: executing program 0 (id=2680): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, &(0x7f0000000240)) mmap(&(0x7f00005d9000/0x4000)=nil, 0x4000, 0xb, 0x810, r2, 0xbc855000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xfff, 0x8, 0x200, 0x4}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r5, 0x5459, 0x0) 10.435305239s ago: executing program 5 (id=2681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5bbc}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000a40)={'#! ', '', [], 0xa, "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"}, 0x117) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) cachestat(r1, 0x0, &(0x7f000009de80), 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x3c, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="945de2e0776a78b6b093976b2108ba3a91f35e62f0d8947315adad089d5da417755061", 0x23}, {&(0x7f0000000280)="dfffffff00", 0x5}, {&(0x7f00000002c0)="8d32cf5187003b418b1fac2866678587b6c9df30fef52522f748f821828798e72c3373df1ea9674b34c629110ae9d4f2620cc8a2f372c6bce448eb58764d0c930c8781ba6756b74a68f54332812cbe362ea7434051ab51de832757fe3e9c102024655f6a66f1fa5041226ea6eb73c6744e7aa2b6b6a071c40f671ea3b64c95899a578612213fe146f7fbcd6d5effadd5c94b0550686abd90f3294dfa5d8cedfc3af707db877d6ebb33fd9cfca62e76d0c355ecc8a1f5a370bc", 0xb9}], 0x3}, 0x20001815) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002680)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x1, 0x0, 0x16, 0x2001, 0x1, 0x4, {0x5, 0x7e, 0x2, 0x0, 0x3, 0x4000000000008, 0x4, 0x800, 0x6, 0xc000, 0x7fffffff, r5, r6, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'f'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe4) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x10008, &(0x7f0000000880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}], [{@fowner_gt={'fowner>', r8}}]}}, 0x1, 0x0, &(0x7f0000000940)="f5812495591a7b71f9b6427963a7bf7bb30650a0857f51472ac6e497a44458313f51bfbf10578a5aadb1c19c42b373ef516edfd6bd95377d7249d39e6db080ca0e926f761345c30057475bda256606f4fe8a3b2d47897e2b3f8a3ce770591abfe133f4984c7a0b8d93be75f22f62a866c6975e46a8aab45684cd8a65bac4f0fdc98dd40026827acde6572c55738c6785925143a25d03abf3ccf9a8a91c208bd4f57be5c5f183052f159fefa177806e0f6d24e8d59520aa45c7eed0608b5719ac49ac7d09fdd81fc3118afaf6366f6ee378f04960a2486ab7b34adc73d4f15b6f800dd9989e65e98c5b366b43e2a4ba6d7e8d5e64") r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r10, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 9.761993908s ago: executing program 6 (id=2682): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(0xffffffffffffffff, 0x1) 9.007606465s ago: executing program 0 (id=2683): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r3, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x664, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x648, 0x11d, 0x0, 0x1, [{0x254, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x11}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0x3b, 0xc, 0x48, 0xc, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x800, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {}, {0x6, 0x14}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x5385, 0x8001, 0xf0e7, 0xfffe, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x40, 0x2, 0x8, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x35c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x4, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x6, 0x2, 0x6c, 0x18, 0x6c, 0x60, 0x6, 0xc, 0x16, 0x5, 0x36]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x1b, 0x30, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0xb, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x2}, {0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x36, 0x0, 0x3ff, 0xe61, 0x0, 0x7f, 0x10]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x5}, {0x6, 0x5}, {}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0xdf, 0x6, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x9, 0x8, 0x1, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x48, 0x36, 0x18, 0x4, 0x5, 0x16, 0x16, 0x6c, 0x6, 0x1b, 0x0, 0x48, 0x6, 0x4, 0x3, 0x16, 0x4, 0x4d, 0x48, 0x12, 0x6, 0x6, 0x60, 0x6c, 0x6c, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x100, 0x100, 0x100, 0x9, 0xf, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xb, 0x48, 0x1b, 0x0, 0xc, 0x60, 0x5, 0xb, 0xe, 0x53, 0x24, 0x50, 0x1b, 0x6, 0x42acac960eb9f4a5, 0x48, 0x6, 0xb, 0xa, 0x1b, 0x6, 0x2, 0x16, 0x48, 0x4, 0x30, 0x36, 0x6]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x7, 0x5}, {0x5, 0x1}, {0x6}, {0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x2}, {0x0, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x4}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.40909111s ago: executing program 6 (id=2684): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffff9, @empty}, 0x80, 0x0}, 0x40081) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) r4 = syz_pidfd_open(0x0, 0x0) r5 = dup(r4) semget$private(0x0, 0x4000000009, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) read$FUSE(r5, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed0102030109022200010000000009040000"], 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1, 0x0, r7}) openat$mice(0xffffffffffffff9c, 0x0, 0x7401) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000002280)='projid_map\x00') read$char_usb(r9, &(0x7f0000000040)=""/4109, 0x100d) preadv(r9, &(0x7f0000002540)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x47fff, 0x6) 7.947071989s ago: executing program 5 (id=2685): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, &(0x7f0000000240)) mmap(&(0x7f00005d9000/0x4000)=nil, 0x4000, 0xb, 0x810, r1, 0xbc855000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xfff, 0x8, 0x200, 0x4}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r4, 0x5459, 0x0) 7.621818549s ago: executing program 0 (id=2686): r0 = userfaultfd(0x80801) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) r5 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b2010202019405240600"], 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@dev={0xfe, 0x80, '\x00', 0xa}, @remote, @local, 0x0, 0x104, 0x0, 0x0, 0x0, 0x80400016, r8}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0xfd}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r8}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r10, r10, 0x0, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r10, 0xc02054a5, &(0x7f0000000180)={0x40, r9, 'id0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r10, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r12, 0x11}}, 0x10) sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x40c0080) 7.558566885s ago: executing program 7 (id=2687): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0xa0031718561b10dc}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$unix(0x1, 0x3, 0x0) sendmmsg$unix(r3, &(0x7f0000005b00)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x100440d0}}], 0x1, 0x4c084) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x4, 0x7ea) syz_usb_ep_write(r0, 0x83, 0x3, &(0x7f0000000000)="1000a8") 5.439323784s ago: executing program 0 (id=2688): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x80, &(0x7f00000001c0)={0x1b, 0x5, 0xfffffffb}) r1 = eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000240)) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_setup(0x1, &(0x7f0000001240)=0x0) io_getevents(r6, 0x9, 0x4, &(0x7f0000001280)=[{}, {}, {}, {}], &(0x7f0000001300)) read$char_usb(r5, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r5, &(0x7f0000000100)=""/67, 0x43) syz_usb_disconnect(r3) io_setup(0x6, &(0x7f0000000040)=0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000000c0)={0x10000000}) epoll_pwait(r10, &(0x7f0000000040)=[{}], 0x1, 0x100, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) io_submit(r7, 0x2, &(0x7f0000002900)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3511, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) 5.082785217s ago: executing program 5 (id=2689): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x80, &(0x7f00000001c0)={0x1b, 0x5, 0xfffffffb}) eventfd2(0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000240)) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_setup(0x1, &(0x7f0000001240)=0x0) io_getevents(r5, 0x9, 0x4, &(0x7f0000001280)=[{}, {}, {}, {}], &(0x7f0000001300)) read$char_usb(r4, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r4, &(0x7f0000000100)=""/67, 0x43) syz_usb_disconnect(r2) io_setup(0x6, &(0x7f0000000040)) r6 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000000}) epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0x100, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) 4.910969685s ago: executing program 6 (id=2690): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x10002b, 0x4, 0x4}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x6068, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.201797731s ago: executing program 7 (id=2691): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x664, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x648, 0x11d, 0x0, 0x1, [{0x254, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x11}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0x3b, 0xc, 0x48, 0xc, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x800, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {}, {0x6, 0x14}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x5385, 0x8001, 0xf0e7, 0xfffe, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x40, 0x2, 0x8, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x35c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x4, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x6, 0x2, 0x6c, 0x18, 0x6c, 0x60, 0x6, 0xc, 0x16, 0x5, 0x36]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x1b, 0x30, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0xb, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x2}, {0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x36, 0x0, 0x3ff, 0xe61, 0x0, 0x7f, 0x10]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x5}, {0x6, 0x5}, {}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0xdf, 0x6, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x9, 0x8, 0x1, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x48, 0x36, 0x18, 0x4, 0x5, 0x16, 0x16, 0x6c, 0x6, 0x1b, 0x0, 0x48, 0x6, 0x4, 0x3, 0x16, 0x4, 0x4d, 0x48, 0x12, 0x6, 0x6, 0x60, 0x6c, 0x6c, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x100, 0x100, 0x100, 0x9, 0xf, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xb, 0x48, 0x1b, 0x0, 0xc, 0x60, 0x5, 0xb, 0xe, 0x53, 0x24, 0x50, 0x1b, 0x6, 0x42acac960eb9f4a5, 0x48, 0x6, 0xb, 0xa, 0x1b, 0x6, 0x2, 0x16, 0x48, 0x4, 0x30, 0x36, 0x6]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x7, 0x5}, {0x5, 0x1}, {0x6}, {0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x2}, {0x0, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x4}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4000, 0x883e, 0x75, 0x0, @wg=@response={0x2, 0x0, 0x0, "018cf684687c2dc12327f770be1c584e0d3c9d4087873521d65bf3d86ee02011", "7bedef4e728067fa120094372df68c75", {"6eeb460c188d1d4caf89c6b0f382357f", "7e8973dec9e6b2a8b7ce38984ed92e1a"}}}}}}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000ec0)={0xf0, r10, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xd}, @ETHTOOL_A_RINGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x70}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x81}]}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0xd0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0409"], 0x3e) 3.592573415s ago: executing program 7 (id=2692): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) socket$inet(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7730, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.100517627s ago: executing program 7 (id=2693): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000440)="5cdd30", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) sync_file_range(0xffffffffffffffff, 0x4, 0x4, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, 0x1b) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2c}, {}, {0x0, 0x0, 0x100000000, 0xfffffffffffffff3}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in6=@empty}}, 0xe4) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2d01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x25, 0x80002, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_emit_ethernet(0x83, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f0000000100)=[{0x3, 0x6, 0x0, 0x6}, {0x4, 0x7, 0x1, 0xb}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.029107436s ago: executing program 6 (id=2694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5bbc}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000a40)={'#! ', '', [], 0xa, "c5378f3f354a505ecce0bd1166612e0785f5b72ce0b3d3f4a34215df31116fe57fb69768d136ed32861a23512a5dfd580eb5a90abc6c8b3fe192dfb28f948d307d1d3af22d0c5576d2193b210ddce073f0c22286fd6a01c4a5b90a79b0ec0f41836067c6a7b81e8f901699b7c643f46d40f43ef52290f39d527730f80a672defb8c8ad010a120ed7144a76517c3c966ee29990b174b21c78aef99dc732bc41194439f102b1ae1377184f8e4763077f3a8914c666e73910f110455a32c25b82d3aea3d80cf2871cca4d3cfc24d5b97086f542a577bea50a6436097ea80d292c3acc9fbfe3dbe158b8418da65e5121049d9ab40bf87ed7b54de5c2ade2cee698f4bdb6267e70d11ac3ef972c6b2637e116fd399c"}, 0x117) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) cachestat(r1, 0x0, &(0x7f000009de80), 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x3c, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="945de2e0776a78b6b093976b2108ba3a91f35e62f0d8947315adad089d5da417755061", 0x23}, {&(0x7f0000000280)="dfffffff00", 0x5}, {&(0x7f00000002c0)="8d32cf5187003b418b1fac2866678587b6c9df30fef52522f748f821828798e72c3373df1ea9674b34c629110ae9d4f2620cc8a2f372c6bce448eb58764d0c930c8781ba6756b74a68f54332812cbe362ea7434051ab51de832757fe3e9c102024655f6a66f1fa5041226ea6eb73c6744e7aa2b6b6a071c40f671ea3b64c95899a578612213fe146f7fbcd6d5effadd5c94b0550686abd90f3294dfa5d8cedfc3af707db877d6ebb33fd9cfca62e76d0c355ecc8a1f5a370bc", 0xb9}], 0x3}, 0x20001815) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002680)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x1, 0x0, 0x16, 0x2001, 0x1, 0x4, {0x5, 0x7e, 0x2, 0x0, 0x3, 0x4000000000008, 0x4, 0x800, 0x6, 0xc000, 0x7fffffff, r5, r6, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'f'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe4) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x10008, &(0x7f0000000880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}], [{@fowner_gt={'fowner>', r8}}]}}, 0x1, 0x0, &(0x7f0000000940)="f5812495591a7b71f9b6427963a7bf7bb30650a0857f51472ac6e497a44458313f51bfbf10578a5aadb1c19c42b373ef516edfd6bd95377d7249d39e6db080ca0e926f761345c30057475bda256606f4fe8a3b2d47897e2b3f8a3ce770591abfe133f4984c7a0b8d93be75f22f62a866c6975e46a8aab45684cd8a65bac4f0fdc98dd40026827acde6572c55738c6785925143a25d03abf3ccf9a8a91c208bd4f57be5c5f183052f159fefa177806e0f6d24e8d59520aa45c7eed0608b5719ac49ac7d09fdd81fc3118afaf6366f6ee378f04960a2486ab7b34adc73d4f15b6f800dd9989e65e98c5b366b43e2a4ba6d7e8d5e64") r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r10, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.20836008s ago: executing program 0 (id=2695): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r3, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x664, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x648, 0x11d, 0x0, 0x1, [{0x254, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x11}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0x3b, 0xc, 0x48, 0xc, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x800, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {}, {0x6, 0x14}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x5385, 0x8001, 0xf0e7, 0xfffe, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x40, 0x2, 0x8, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x35c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x4, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x6, 0x2, 0x6c, 0x18, 0x6c, 0x60, 0x6, 0xc, 0x16, 0x5, 0x36]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x1b, 0x30, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0xb, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x2}, {0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x36, 0x0, 0x3ff, 0xe61, 0x0, 0x7f, 0x10]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x5}, {0x6, 0x5}, {}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0xdf, 0x6, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x9, 0x8, 0x1, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x48, 0x36, 0x18, 0x4, 0x5, 0x16, 0x16, 0x6c, 0x6, 0x1b, 0x0, 0x48, 0x6, 0x4, 0x3, 0x16, 0x4, 0x4d, 0x48, 0x12, 0x6, 0x6, 0x60, 0x6c, 0x6c, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x100, 0x100, 0x100, 0x9, 0xf, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xb, 0x48, 0x1b, 0x0, 0xc, 0x60, 0x5, 0xb, 0xe, 0x53, 0x24, 0x50, 0x1b, 0x6, 0x42acac960eb9f4a5, 0x48, 0x6, 0xb, 0xa, 0x1b, 0x6, 0x2, 0x16, 0x48, 0x4, 0x30, 0x36, 0x6]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x7, 0x5}, {0x5, 0x1}, {0x6}, {0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x2}, {0x0, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x4}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.958714038s ago: executing program 0 (id=2696): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000400)={'\x00', 0x0, 0x212, 0x100009, 0x2, 0xfff}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x908e, 0x0, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x5}, 0x0, 0x4, 0x1}, {{@in=@local, 0x0, 0x32}, 0x2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4}}, 0xe4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000225bd7000fcdbdf250f000000050030000100000005003300000000000800", @ANYRES32, @ANYBLOB="05002e0000000000080039000900000005002a0000000000080032000900000005002d000100000005002d0001000000d65766da3de72229dee85b600cc927c23335ccdf01eb212d7134bb8d6db8af76fca9333bbbd1986fd5fa3eeeb6d89c8e26b1ed88cf87922785feb0efd34465435f167d3b7dbae610954d0277a1c77d3d04000000d865d9892d953c481bf7fccb4f7f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000041}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) unshare(0x66000080) 1.695684464s ago: executing program 5 (id=2697): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffff9, @empty}, 0x80, 0x0}, 0x40081) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) r4 = syz_pidfd_open(0x0, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) r5 = dup(r4) semget$private(0x0, 0x4000000009, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed0102030109022200010000000009040000"], 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x7401) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000002280)='projid_map\x00') read$char_usb(r8, &(0x7f0000000040)=""/4109, 0x100d) 808.396625ms ago: executing program 1 (id=2669): r0 = openat$proc_mixer(0xffffff9c, &(0x7f0000000140)='/proc/asound/card0/oss_mixer\x00', 0x444001, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000440)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x100, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x44040}, 0x40805) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x2, 0x0, &(0x7f0000000000)) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000009740)=[{{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="3c3aa03ebad4133aa6cb924e94b5c697a65fceb6aeff69cd2854f44105e66ffbff14e34363c868810c8cf31014409fc95bcbd6c056af963a2475c0b805336f873735aa974ee341d0e5637078dbc552d9d6073f3ab00453bd6177162a02a47cb0b0ea2479c9b3af8f60f91cab92f380eb08eb6983ccf213d90a81927448a262cec44b7bc61bea9a448e7a98d6fc75ca541239bffcbda66b9023866bc119378b88326cdb440f63b7aa3f875662a2b98e8d1d08e0ba3db2", 0xb6}], 0x2, &(0x7f0000000c80)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x54, 0x4000}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000000d80)="8f724589b93653ee28809cba4e9db1824d456b95b033ea84538de6aeae25dda99f97fd824c6e5cc996892cc3554fbe1e22d76895262f7cf4ea06247b8a8760fcba74bfc39e114fbb38c9bb681bbe1342d56a785dc92a71a2195492394b5b558c29fa6ff6ac", 0x65}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="0c1eec46a1ca8c20a32557310d1f5c7ad62cf8b650c9289eb792b9901265e511b9c06702bda49d0f48306d2876730fb6bcb4e18dcf4b0fddb72f8078a52663aa2ada6134dcd8fedd61ea8d6b9d0968e3aee7decee2f0d256225b580f6a662f2ed47e14764ca2e900167b0e40695e22670936e1c0e5169c681bd9739dc874e9cfd4586bd2a4c07447baa9cfc2d73c8089f6332341f61888fd9a1b56086f78469f9ad56ea7b247680cced7c926d111b7e269fbd767f8c7da3775130fda673b35e525f2ac55dce5baedd60106cc50180b9fb0af62c8a0", 0xd5}, {&(0x7f0000001f00)="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", 0xfc}], 0x4, &(0x7f0000005940)=[@rights={{0x20, 0x1, 0x1, [r6, r2, r6, 0xffffffffffffffff, r2]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [r6, r4, r5, r0, r4, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xd4, 0x4000001}}, {{&(0x7f0000005a40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005bc0)=[{&(0x7f0000005ac0)="6d935fbeef58e2bfa9dad81242ba4c595f698f7906f3f04bef34af4bb0c9b5648b17b2a2604834d31142b06c71d3ab89ca3e5544dd9e2e6a6aa457c2abd372c71a84be72577415b27e6ba30c1a9fb08e48aa582bf31c6ff9a74fa14db13f0898476be4c6b92ba72c2a3ccb9d586a8cb79d992cc3a32af7747bb582223f6e0d4bc494a47a4f6e7c", 0x87}, {&(0x7f0000005b80)="86974e7cf614ea1c860891c758596deaef28fa5b2d6670704dfbbd847f6f99adeb834a19e1891a3ad848dbef796b5b440049337c10e149", 0x37}, {&(0x7f0000008680)="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", 0x1000}], 0x3, &(0x7f0000005c00)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60, 0x14}}, {{&(0x7f0000005c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006040)=[{&(0x7f0000005d00)="5ee4df893fed77523322750c565d", 0xe}, {&(0x7f0000005d40)="f70253cc63c00c78a9ba151e754359d6f7d42f70b57fa47efeaea57c523cfe247e56a024b491feeea86c6ffad1edf7e0063b1384e992b5c7bf0a290e0d62b65a828706a13a376541c1ad66ef49611681731a7f3fb747c0e2692d16f1a6ee5303dcca674ceb75c71e655ad3060dc77563c8109133e2", 0x75}, {&(0x7f000000c440)="4b25512762d6ef54bba7ba588a462cd70b4e06b375c11e7b92ccc0337c68a7db42cd763ae8bd5550714e75950374e6c0aadf92acf2994e9329723fbf900d15ebb5ba94474bd644d44219841fb952fadb241e7015342a0bfa2787da0efa71cb12a480b46d2ff87908dbae6520597a8503c7462783f32b617596d34fd7a7db7ad22501a4873ac4eb0fe6e4e153aa7a7562e4e8ac41eafd4c1c792122311db35ef1bc95d78f82f5b1d73f8fbf849fb1e99eda8bd5c84a22c020d0d69b7a6cd00e4981d5f7d9560eb6848d81dcbed6eea94f20953b6a48cd7c5aa13a1de96208b7233ae881f57ccbb401d5592c2665d60c6f7c536351cf48455c2c6f3c69f915ef7f2d11aef5d4bd8bd877e4d74eb02ed714ed0715f71138679e78fa7bc05d69f9eef750e100e4db33a21141bf07f02bccf77a184f935382f4e0b3b56a3d4083a7e055a105c534ec839d551f58f6e4a776f527963bcad8e23c82ac23eba7270a795cf07cdfa8c1ac33113ee3f8495c16feffca8d6576b145a591ce02609c22edc82996eefebf6992935be11bc64f1e180344101366689ce4e13dfe637ad58c3af3307287d5ec59ff3ca2fa3c72af5452e82575f9441d5626d8b610f64f648489873972121483d8d4459e30f392abb6f4ed068579e3ef0a646c9a6417c1c9352822ccc42deb985e4f43735df50781a96e8060dd4f07f739d6a1abd605cae2a609550a1d21d0b58dce6dc4b2cc94f0faf70498ec9d0c7fe2cc9d92138a69c1e165f5971f1716225ac893ea257f9bb6f8c3aabb9b5e3f2b62fb5ca6bd9181774fb00d36259109f582a685d0aa1a0255b208a20d3b28a7138ca94f4baee6533ad47017c21a78bd9ea0c836f82a667c75ed54e285aaf730546ae028c6defe1774b203f241cc40c84e33079617df4498631109ad7309299bf159b725bcce21db565d3303b8ffa45bb23fe0b82357828334278715184ee29c091764fa632ad54a6c2020658da52a667415d02fb3657617a8df0a8d4e80999608af3a49db727fca398730c712072a011db4f574537e456b6b43ab8b06b5716fd696aa6cbc957f272534085f3df5b5df89eceaade03a958969938fa82f96f3e91ad84eef3d9b4e4701c10941866ee377628d99512b13f0493fb08ab4162c5a825ef0d62335254368fdbfafe6e4a31d54bcf616fd31ffe9b7e64e5b20898988e2d93ec803b240e783fc6ba187d01ee91e7cd11882c73085350369ac8504ca3070cfd70866aff2a627dadfe743dad58bf715309d823a089e0607a07efb6c591bd41bd028e749cc4a81d8e7b9ea02140eeecfdddc557adc2618bffdd3282b4f3b6f34947c636547422aab3fa1e306952e8b5eb64b763847221ea7831e1f2f1a0aa017b9bb61feb6c6123996a733233d7e59ff9b42952bf738cee8518a75d7266e929d01953372b6f91af7a637dbfd8d8a5dc9d6d24d66f8072e7b771d2dd5363ad235b0c4a1bed78afa0df31bc91a42ab77c2ef1dec1f302dfafdf5ae10c60051d281c7fa34b542d4ba7e68d257794318f3e0ae334a802a2cc4126c4010c434ab148d9297c1d336cacc5df0a3653daa593e6fa7ab8db67ed4d77ef3703a746d2b6900496faa95519a4616695e43a41ce053ca976af38c2e8d5c1f9d89a2df3815b759108c433fcb891555b8adb420fd631156c156f99263cfa033e089c6252bbc227b792d2803613061ec30149543a40cda10fccb748dccc3b717ff21268dfdc682f53ede1154375e97d0aa7660eb6fe258d41f4fd241424e2a2443431a3c4cd86fb3b7c1ff644dd28e2b1b5543757b8220d27eb9b98af5392d427ebc502ae02a94752ed035773b43744f9bdcaad3ff9dafe806e0780734ee32d918806a49b4d8b426fc39f95e9efa67812ebdc117f0026e86773c4db3fbae40fe29f4d80ceab2ef898a1af0df005151f91acc7d0679133501774078fc69c03460ed98d3fc30947416bd96e82804c5d5998835f7a857e48ef79a9a9abe869adaf7a11d7470ff9e3e44a0ba9f18cf978b1ccf846e46fc8cd1ad6f0dbe4329827064b1d8373ea9e03c4f1fc5083979e7cb0cd5685ae50e4939f493fbf459899634ca98b519607414dbb119637a6634f39d96fe43fcfc19f5dbb293c0181af23e66374fa5e2b90744fd29fc06989f8cc32712dd2e462f4b3ba84d900d3cdb8b65928bff448192b1ebb7b44ee21e00cc1fe46ce462c2e5586b884ac1a4097d9a5aeaf76ebb0cc4dea0b569a367de2fcd4728c8814ba4a7c80ed84f689264f0966ce3b80ba494e785839f701cabae03ac15a5e63505f16697487cc55cd781e9e72fcdc91648a2b4414c49e5c619fe4f8664ce277bb6b315a7a7566334aab51956fec3cb4798fbf8fa296656f1ce50dd93401942c9f897b888f37eed78ea3bc94494a9f85ce048a3f21119634531e1f50ef5e061081715e198e84fe3fbac7b870e5165bf7c0fdcc711784a83633e9046f3d0ac9d29db5a3540c7df731c0cf0a9f490133a20a1223411d04eec3fd700e4a308941ee504c6e01c189abf7ff599fc6f2cf7089ca45372ec6eb6217ab8119d0bed52c2a09588259f8bfbb480c270eac38437e48e0befc0abdb61c728d3f841dc322b956dcea67ba73674d4b976a9207ef86b6b0c9c88f18038c1901068f7b2c22598ff0d4f19106aa6551e2ad535a43dd95824a28630d1912bbeaa96924fbc2c5b7e69a6c01ca252f0344fc53f20323db83de6a8e60067ee5bcd539d2e095314bd7ff28808b0ecfa68b0de923e814b8bd43f4336a204816b777d090868ca3c1b968dc4c4d9e6c2b7271391a4bd2d4ab54256cdfadb1346760dff0d7ae4d57f4de4eaeef474b833ac9f6fe41dfdfd17e0cdc74dbb9d4b5ad47f0b802ebb24bf407face3be8fe71fc1e37ebefafe1b2966146d45f71c4270c05968ba85872f12e33a38cc71f68962bc26624a1c6e129a333fb7eb77b9f5fc3a7b3d1417fa29a4de601b36278a0709b5868ef48741edeb7f42697a3b5088aebfa55f70db511635e4a50a499953cbd42c2885519d4d43821855b098448fe2cbfb215ba30049d502c421463c86656b893d1a757f4e9f0fea171753ed24b285fa42075ad8b7a46eee7a6581bf324c8dc975c6ab36e5011e9fc0f7768b961df0366f9ad9cc8941422d6131ba754828089bcae73dd9e08952b26be95fa30c668e280e000ddaaba30cb3af8369d184adf1baeecc7034b830fd2c7e10b03287f06cb25d13f661b26edb9058fa1090465255d44d536c836b6a856854ea7809c30732da31db47c3efdbf3291f4775755c0dfedb59103d6366000f3e6449fab5dc4dbd9bda06a9c588adb4066ae0dde0c7d2ef35c419ef592008a41d34f19b3bd74abe19da0472cecc872691f413614e7e0231a4c65a65df66744e8562dbaea6eeedc5b843e34a000aafea4f6f6a17512dccb48156f7d5db6670349986fb06d447762617649fe19e5247e1ec1c42acc1bbcb2e2d31b6dc134f61c4ede6e5d18d5bba3d0e013657bc9edcb4e1c459f684dab02d5bdcc5b804a2bfe57f07b9555dfb79fa9ac68891d36b30467f0dea5206642808e0194250d219cbd54a6cec6a11b88414e016bc200d62c18311e9fe02383b37dc671b0df188a033b96665973d47324ad4c04ccb5c74ec35a6a1ffe1ae3ce3aac9e901456deb811c26a96b75146f516f5374e8581eb7473b805c224e38ee299481693b4aebc7c386c495d3322e987e132cc4b4cf991d1545c7e59de1d559cabf6980fc59c36dcce7b18da56259586bc172f1fe2e14ea67968632c09aa71f9c774f82dea52d666e1c491e8f27568f0a23c9eefd940bedd68f1412f9a1322d5e4f80dc9df39368e03f32612e86bce7124379eed29127b7656597a893f02f6ae0268f69378788f409e25fcc3675f13a13bd7b297c3869b94d77c1aaa14df6dcc3660237b43c07df737b1a5d9661d777b8ea234be8731b087688ba50afedac9c5e454d8aa6c2f3050f806144085f8999562c6d4c01f4da7acae2611a981f0c866f3be69ea889a53dfd3ee7118a5e85baa371d2d7ea0e1f188e8ed0d52dd547981c432a4241598cd6e74567fe6cd281bfdf9647df7d31ab9d359e161d90e4c274ead4e77a17215304879bad1ccf15eb9861fd999b5b431db248bf10d0d41bd7b566699ccc023b917bea76d4ea7cba50846d59122988886bb6132322b4fe6c081d61fa598d08ecee2cf57aad490494dd09781d695be010c160f006d1277590d53be943e8404937708d2bb3eaf98341961e57a6dfd24d818792a4f431ce374dc61f07c73ed2205213cf29811048a5a7213e53ea7d66d695db5a265467369f43239243e7175401c4866a6a3b75a036807b07579b544fc1fd7f91e1c461269effe4644a84874a12baf87c39b06268d4ed7d08ff69d6ad27395d116d44bdf5fcdd64eae3ac52eb1a3be139e364d83dc297e7ff1d312341fe6167ef976b5651fc6f0bbcf6bcfe62ed6eba4cd1ee057bb4cd2bf5bfbf95344573953f3a2e3cacfe7d52ce422ae79be0c92f9ecf6f697b46e88a2925badd852420f3d9b76bd2f639b4a97918eec34e74744f2e3cd8b9f6e72d0486308dbe0d5ca20a0371bd5f4b2bd9eea8c9e29d65b4a47d8d47a1937689cee840fd5c35e66e5d22d823b2e6aa942b603295a728bd787be7f6afee12c0f68dddd143d0b63b662b3fe95f3e940aead7d57f8dd3c61b5a6afebb9a59b696bc5c2b35d6bdd5eae5287bebcf01e3099165eb5c2ee6058bd749f289744190989c8f3af721c5ad04827b7346f4fb5a03b5caca416f01a18aea2f18d08c87a15357d3551dd407f73a5e354358c29eb4882b6e3345456bbcca04f166776ff8af5fb1860961e86409ff57c7e9842e33099d9bc1549a31a65d3dbeebb1937d223fc70b8338f63f1501d2a900e1bd2ca04496518d81a76d4ffc1fdeb1f6db1e1f693fc8ba74881060ce407f201284cd53f649daaaa2ef5a1708d62fafa7929f1fd92e6116724fa6637df9a9d156c64d5772679161844fa99a28372200d90d4ef79d6265e4afce8ca8d1b145e432fb19d1a3112cfeaa3ecc9c5ebf28545835640d87999fc7e14d9cf62ea72c1bcaefc16b802c2691981578befd1e2256b6a69ebafb674a278343030db9520c5edc967da60fc7e663af41be6098cd56964b9dc80543ffaad6081d2bec687720c5893f25f4be41977a669805ec5bf9ffe59fad93383eea08a6758be199ba7dc88383483bd11f4e5f95ea53e570af1bba50442334919bdd8a19c95304075385761bfc1ed83a173ca5706e1ba292001b0d8b3ac52205dd072e388c9ed99091fa8045a08e46747066afd4766a440ec2bbaf396ce373d2cfaa17059f62aeef4c4d4ac5efe2c0dbccd7acb3e4b57a8dfe5ec2d86f2635b6d3b8501c8aa909871f4d5815d9907821eed6170e5ec8bd50f6452595136ed4d3c88a3f3184dacc8baaba613258c9f2c458b3738e70ab2f3a5ce34baaa9119155e20afa0fd19672aea56b7c442eda5985658f93ab5a19ea2bcb32cef4548b858f660654c334f212759cfef99680aadb5d0f2dd77f5696f1f108c2e21f802498db8a7a9ec2af3d55dad741217ad06faf7741d050f403a472e62491c7bb0cf789cb69bbdd998c0c19937432962e96381e8e9451a8555b3955a5923db48feb89a67a8e6e0ffa8e43239acd5f5151e3fc63d68d0875627ed10a955b95ece7bc1087f6d422ecb8355fcf4d0e1a8398be9b177c6f6b6c6ca0d1080b2d0a39fb596c0400a3d75be4a924ca7b60a85fa3969cc67a4d2545d1c4f7f905a6fd", 0x1000}, {&(0x7f0000005dc0)="f7afe261b7918b976f288b9076653719e0c2ca1da234e120dff2d462d96a09c4f7e8ccf3b9c9e6de160eac3306b4a271f66903bd746b7e5e7b309be5c76b55517cd2f6e7ca744279e6c2bcdd111600ef6e5d28a19304ff01018e7035c45352cce4b763f6aef5b9cdf38d1f9935dead0e428f1907b10c36d728fc52f9f997d8216f29aadf8bf7d43706b12b3931f0a3528a9d9993501e8ddb4b6cb161cbc8e2cb5f3d628e3f27b1728625bd1db2033dce117e65bb25e97693932f7e93cc44f0ff7734a2c195afebed5f6bc41323196f30f7e2a64433b7d70c1bcf7f69c96ac8bcf32cb25afa8536c0a5d85c90a326351a", 0xf0}, {&(0x7f0000005ec0)="3c4948c9004cb6cb976e339968b9a1a4817b5dd2709e888a002743a0", 0x1c}, {&(0x7f0000005f00)="2048108b08f6db7eeb4640b0d21b8cb2927534a8d443cecf3e22ac9e59eb84d3b4a49f6cae9b58a40d0bf6df24c9a6ad3dbc0d91f62867024fe83edc45e6ca9ec0cdfed8d20b3636b90103a6296fc44125b2e0c589d9ce8d382b96f7ac1bbea90600000000000000ea03e4df", 0x6c}, {&(0x7f0000005f80)="97722402c0decc4ad6a1be753ec5b27af48f3a723752ed22327d5e0725452fd71a049fe8135380edc108b05a62488ca7bc4d9066bf7e4863782e8000d2836167ec09df5ae899b3e96e07bfb5461560afef7572118ab28f5f469056dadf2667bac34c6122cd44e325ae44b100f70100da82c103034fe06f154a6a9a453212bfc0ab358b4c43d70c23e6832be8bf1795cc902eadf7dddca47a33e320ec0f00b064", 0xa0}], 0x7, &(0x7f00000008c0)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r4, r4, r4, r2]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}], 0xec, 0x800}}, {{&(0x7f00000062c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006380)=[{&(0x7f0000006340)="c1e3e248898dc4b0c8edd755211e38ea85889fc086f643e66c815d64a5f77bca5d0a9851fadd3f1d3fe3781994", 0x2d}, {&(0x7f0000009680)="d4e4eabee987e78cad08ca09f43fafd230965158866a71c26f691d8ccd78c0aafc26dfc35468ef20e4680f4605c1430d76c0d844612e9684396e7e40e0634e0e732a82a09621e760c4fabcde6c94413ff0fb8b7bf6934d72936fe45be9676c62877639e843b0d2824f83d4a2970d04acd6a8490d5c5432029acfbf91e19b549c78ca275acc5ae09138ce31eaf82adac4ce45754c24d3e04fa78a56dec1e535ba60528e35541f43a8b67cc5ee452fc14d61524623381ef2469edf1927", 0xbc}], 0x2, &(0x7f00000063c0)=[@cred={{0x18}}], 0x18, 0x1}}], 0x5, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2eb7, &(0x7f00000001c0)={0x0, 0x48a7, 0x8005, 0x2, 0xa6}, &(0x7f00000000c0), &(0x7f0000000480)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x59, 0x2007, @fd=r2, 0x6, 0x0, 0x2, 0x16, 0x0, {0x2}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) openat$drirender128(0xffffff9c, &(0x7f00000002c0), 0x404000, 0x0) geteuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000094000000160a01000000000000000000010000010900010073797a30000000000900020073797a300000000068000380080054000380140001006d6163766c616e3100000000000000001400010067656e65766531000000000000000000140001006772653000000000000000000000000014000100776c616e3100000000000000000000000800024000000006140000001000010000000000000000000200000a000000000000"], 0xdc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(r9, 0x40d, &(0x7f00000003c0)) 0s ago: executing program 6 (id=2698): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0x5c8, 0x4) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x501000) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000200)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000740)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x6}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0xfffffff8, {{0x2, 0x4e20, @loopback}}}, 0x84) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40100001000010700000000000000000a000000b0018880970161800400b5800500250000000000af16a9709de7c47a23551d699ebceb8cfb097b308434b039a018e2a9b2b820f906c697d3a28289e39cbffc5a39f9aecc6adf593fac33dc8b034e79a145ec95a380b4410b1cf3f06dbd984247c3828b3bbd796a009a3efe357837e2490077b3730b9d43b71e6cb704dfba1f277806397a88237792f2393f038c6a03a255d73f3a77963764c7b74761ecbea376871d8e8392551169842101bcd5d94699491640984f2d3a9392cec656fcb773638b0ff7ca2c8dd16513673a1ab30800a100", @ANYRES32=r3, @ANYBLOB="190011002f6465762f6275732f7573622f3030232f3030230000000004004d80060048002d00000094cc202de6ab06ca6975efa3d2b30584e7d61bdee00bf66f0697610bace089fe2a7256ebb1bb2d5f4f04004d80b53686bf994e25d53471fd33d377e51487a9294bcd84ad3e8e4b3ba886a0bbf8f5ae75e16028b381803c785f5882683a0029eb32ca6bb6bb8c8eb0a700db13bf5cef9fe9ad7cc2909f23159f41ce041e11938a3fa93c1a659dcb7de668f3a19d260fb4b2470f828bf878ff161c270e71f2001400bf00fc0200"/219], 0x1c4}}, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000007) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000500), &(0x7f0000000540)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x1a8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x178, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x14c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc4, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929efd0a8118d6d90"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147ba"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T5935] usb usb7-port1: unable to enumerate USB device [ 925.466616][T15134] syz_tun: tun_net_xmit 42 [ 925.484465][T15134] syz_tun: tun_net_xmit 42 [ 925.490458][T15134] syz_tun: tun_net_xmit 42 [ 925.510177][T15134] syz_tun: tun_net_xmit 42 [ 925.515469][T15134] syz_tun: tun_net_xmit 42 [ 925.522828][T15134] syz_tun: tun_net_xmit 42 [ 925.528754][T15134] syz_tun: tun_net_xmit 42 [ 925.537387][T15134] syz_tun: tun_net_xmit 42 [ 925.542172][T15134] syz_tun: tun_net_xmit 42 [ 925.548340][T15134] syz_tun: tun_net_xmit 42 [ 925.553341][T15231] netlink: 'syz.1.2419': attribute type 1 has an invalid length. [ 925.567445][T15134] syz_tun: tun_net_xmit 42 [ 925.587246][T15134] syz_tun: tun_net_xmit 42 [ 925.602647][T15134] syz_tun: tun_net_xmit 42 [ 925.608603][T15134] syz_tun: tun_net_xmit 42 [ 925.613518][T15134] syz_tun: tun_net_xmit 42 [ 925.619805][T15134] syz_tun: tun_net_xmit 42 [ 925.624638][T15134] syz_tun: tun_net_xmit 42 [ 925.634771][T15134] syz_tun: tun_net_xmit 42 [ 925.640886][T15134] syz_tun: tun_net_xmit 42 [ 925.642268][T15231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.646408][T15134] syz_tun: tun_net_xmit 42 [ 925.700469][T15134] syz_tun: tun_net_xmit 42 [ 925.705268][T15134] syz_tun: tun_net_xmit 42 [ 925.731589][T15134] syz_tun: tun_net_xmit 42 [ 925.740970][T15134] syz_tun: tun_net_xmit 42 [ 925.747040][T15134] syz_tun: tun_net_xmit 42 [ 925.751952][T15134] syz_tun: tun_net_xmit 42 [ 925.757925][T15134] syz_tun: tun_net_xmit 42 [ 925.762813][T15134] syz_tun: tun_net_xmit 42 [ 925.773017][T15134] syz_tun: tun_net_xmit 42 [ 925.783088][T15134] syz_tun: tun_net_xmit 42 [ 925.791058][T15134] syz_tun: tun_net_xmit 42 [ 925.796679][T15134] syz_tun: tun_net_xmit 42 [ 925.801851][T15134] syz_tun: tun_net_xmit 42 [ 925.812175][ T5868] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 925.827491][T15134] syz_tun: tun_net_xmit 42 [ 925.838047][T15134] syz_tun: tun_net_xmit 42 [ 925.848183][T15134] syz_tun: tun_net_xmit 42 [ 925.858041][T15134] syz_tun: tun_net_xmit 42 [ 925.862725][T15134] syz_tun: tun_net_xmit 42 [ 925.868830][T15134] syz_tun: tun_net_xmit 42 [ 925.873807][T15134] syz_tun: tun_net_xmit 42 [ 925.879990][T15134] syz_tun: tun_net_xmit 42 [ 925.887395][T15134] syz_tun: tun_net_xmit 42 [ 925.892457][T15134] syz_tun: tun_net_xmit 42 [ 925.906686][T15134] syz_tun: tun_net_xmit 42 [ 925.911380][T15134] syz_tun: tun_net_xmit 42 [ 925.920099][T15134] syz_tun: tun_net_xmit 42 [ 925.925286][T15134] syz_tun: tun_net_xmit 42 [ 925.937083][T15134] syz_tun: tun_net_xmit 42 [ 925.943880][T15134] syz_tun: tun_net_xmit 42 [ 925.958049][T15134] syz_tun: tun_net_xmit 42 [ 925.962920][T15134] syz_tun: tun_net_xmit 42 [ 925.977867][T15134] syz_tun: tun_net_xmit 42 [ 925.982851][T15134] syz_tun: tun_net_xmit 42 [ 925.995351][T15134] syz_tun: tun_net_xmit 42 [ 926.002283][T15134] syz_tun: tun_net_xmit 42 [ 926.009958][T15134] syz_tun: tun_net_xmit 42 [ 926.015503][T15239] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2421'. [ 926.028571][T15134] syz_tun: tun_net_xmit 42 [ 926.033233][T15134] syz_tun: tun_net_xmit 42 [ 926.039148][T15134] syz_tun: tun_net_xmit 42 [ 926.048565][T15134] syz_tun: tun_net_xmit 42 [ 926.054260][T15134] syz_tun: tun_net_xmit 42 [ 926.061028][T15134] syz_tun: tun_net_xmit 42 [ 926.080633][ T5868] Bluetooth: hci7: unexpected event 0x09 length: 59 > 3 [ 926.084575][T15134] syz_tun: tun_net_xmit 42 [ 926.098304][T15134] syz_tun: tun_net_xmit 42 [ 926.103060][T15134] syz_tun: tun_net_xmit 42 [ 926.108549][T15134] syz_tun: tun_net_xmit 42 [ 926.113334][T15134] syz_tun: tun_net_xmit 42 [ 926.118956][T15134] syz_tun: tun_net_xmit 42 [ 926.123965][T15134] syz_tun: tun_net_xmit 42 [ 926.132471][T15134] syz_tun: tun_net_xmit 42 [ 926.137898][T15134] syz_tun: tun_net_xmit 42 [ 926.142638][T15134] syz_tun: tun_net_xmit 42 [ 926.152414][T15134] syz_tun: tun_net_xmit 42 [ 926.158288][T15134] syz_tun: tun_net_xmit 42 [ 926.163100][T15134] syz_tun: tun_net_xmit 42 [ 926.169316][T15134] syz_tun: tun_net_xmit 42 [ 926.173991][T15134] syz_tun: tun_net_xmit 42 [ 926.180226][T15134] syz_tun: tun_net_xmit 42 [ 926.184861][T15134] syz_tun: tun_net_xmit 42 [ 926.197374][T15134] syz_tun: tun_net_xmit 42 [ 926.202250][T15134] syz_tun: tun_net_xmit 42 [ 926.212896][T15134] syz_tun: tun_net_xmit 42 [ 926.251489][T15134] syz_tun: tun_net_xmit 42 [ 926.271930][T15134] syz_tun: tun_net_xmit 42 [ 926.297093][T15134] syz_tun: tun_net_xmit 42 [ 926.312152][T15134] syz_tun: tun_net_xmit 42 [ 926.319668][T15134] syz_tun: tun_net_xmit 42 [ 926.334073][T15134] syz_tun: tun_net_xmit 42 [ 926.342727][T15134] syz_tun: tun_net_xmit 42 [ 926.357261][T15134] syz_tun: tun_net_xmit 42 [ 926.362008][T15134] syz_tun: tun_net_xmit 42 [ 926.395662][T15134] syz_tun: tun_net_xmit 42 [ 926.420986][T15134] syz_tun: tun_net_xmit 42 [ 926.429540][T15134] syz_tun: tun_net_xmit 42 [ 926.434601][T15134] syz_tun: tun_net_xmit 42 [ 926.443938][T15134] syz_tun: tun_net_xmit 42 [ 926.450135][T15134] syz_tun: tun_net_xmit 42 [ 926.455027][T15134] syz_tun: tun_net_xmit 42 [ 926.463375][T15134] syz_tun: tun_net_xmit 42 [ 926.475048][T15250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.479785][T15134] syz_tun: tun_net_xmit 42 [ 926.490714][T15134] syz_tun: tun_net_xmit 42 [ 926.495468][T15134] syz_tun: tun_net_xmit 42 [ 926.502705][T15250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.515094][T15134] syz_tun: tun_net_xmit 42 [ 926.521350][T15134] syz_tun: tun_net_xmit 42 [ 926.530134][T15134] syz_tun: tun_net_xmit 42 [ 926.534912][T15134] syz_tun: tun_net_xmit 42 [ 926.541541][T15134] syz_tun: tun_net_xmit 42 [ 926.549827][T15134] syz_tun: tun_net_xmit 42 [ 926.557930][T15134] syz_tun: tun_net_xmit 42 [ 926.562701][T15134] syz_tun: tun_net_xmit 42 [ 926.572393][T15134] syz_tun: tun_net_xmit 42 [ 926.639946][T15134] syz_tun: tun_net_xmit 42 [ 926.644638][T15134] syz_tun: tun_net_xmit 42 [ 926.650924][ T5942] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 926.651064][T15134] syz_tun: tun_net_xmit 42 [ 926.665046][T15134] syz_tun: tun_net_xmit 42 [ 926.680113][T15134] syz_tun: tun_net_xmit 42 [ 926.685807][T15134] syz_tun: tun_net_xmit 42 [ 926.691024][T15134] syz_tun: tun_net_xmit 42 [ 926.700499][T15134] syz_tun: tun_net_xmit 42 [ 926.705498][T15134] syz_tun: tun_net_xmit 42 [ 926.718766][T15134] syz_tun: tun_net_xmit 42 [ 926.733614][T15134] syz_tun: tun_net_xmit 42 [ 926.740106][T15134] syz_tun: tun_net_xmit 42 [ 926.745068][T15134] syz_tun: tun_net_xmit 42 [ 926.754370][T15134] syz_tun: tun_net_xmit 42 [ 926.761076][T15134] syz_tun: tun_net_xmit 42 [ 926.772994][T15134] syz_tun: tun_net_xmit 42 [ 926.783735][T15134] syz_tun: tun_net_xmit 42 [ 926.791925][T15134] syz_tun: tun_net_xmit 42 [ 926.803696][T15134] syz_tun: tun_net_xmit 42 [ 926.811643][T15134] syz_tun: tun_net_xmit 42 [ 926.820969][ T5942] usb 1-1: Using ep0 maxpacket: 16 [ 926.843693][T15134] syz_tun: tun_net_xmit 42 [ 926.852614][T15134] syz_tun: tun_net_xmit 42 [ 926.858250][ T5942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.869174][ T5942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 926.897079][T15134] syz_tun: tun_net_xmit 42 [ 926.932530][T15134] syz_tun: tun_net_xmit 42 [ 926.938805][T15134] syz_tun: tun_net_xmit 42 [ 926.945040][ T5942] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 926.955585][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.957235][ T5935] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 926.964744][ T5942] usb 1-1: Product: syz [ 926.964766][ T5942] usb 1-1: Manufacturer: syz [ 926.964784][ T5942] usb 1-1: SerialNumber: syz [ 926.968441][T15134] syz_tun: tun_net_xmit 42 [ 926.997410][T15134] syz_tun: tun_net_xmit 42 [ 927.003040][T15134] syz_tun: tun_net_xmit 42 [ 927.009983][T15134] syz_tun: tun_net_xmit 42 [ 927.014823][T15134] syz_tun: tun_net_xmit 42 [ 927.021810][T15134] syz_tun: tun_net_xmit 42 [ 927.027903][T15134] syz_tun: tun_net_xmit 42 [ 927.033943][T15134] syz_tun: tun_net_xmit 42 [ 927.039884][T15134] syz_tun: tun_net_xmit 42 [ 927.045358][T15134] syz_tun: tun_net_xmit 42 [ 927.052035][T15134] syz_tun: tun_net_xmit 42 [ 927.057922][T15134] syz_tun: tun_net_xmit 42 [ 927.062877][T15134] syz_tun: tun_net_xmit 42 [ 927.069772][T15134] syz_tun: tun_net_xmit 42 [ 927.075548][T15134] syz_tun: tun_net_xmit 42 [ 927.081964][T15134] syz_tun: tun_net_xmit 42 [ 927.088163][T15134] syz_tun: tun_net_xmit 42 [ 927.093059][T15134] syz_tun: tun_net_xmit 42 [ 927.100330][T15134] syz_tun: tun_net_xmit 42 [ 927.106288][T15134] syz_tun: tun_net_xmit 42 [ 927.111459][T15134] syz_tun: tun_net_xmit 42 [ 927.123319][T15134] syz_tun: tun_net_xmit 42 [ 927.133213][T15134] syz_tun: tun_net_xmit 42 [ 927.140316][T15134] syz_tun: tun_net_xmit 42 [ 927.146238][T15134] syz_tun: tun_net_xmit 42 [ 927.151984][T15134] syz_tun: tun_net_xmit 42 [ 927.152040][ T5935] usb 6-1: config 27 has an invalid descriptor of length 56, skipping remainder of the config [ 927.158336][T15134] syz_tun: tun_net_xmit 42 [ 927.172939][T15134] syz_tun: tun_net_xmit 42 [ 927.173055][ T5935] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 927.204736][ T5942] usb 1-1: 0:2 : does not exist [ 927.212907][ T5942] usb 1-1: unit 6 not found! [ 927.247511][ T5942] usb 1-1: USB disconnect, device number 103 [ 927.257829][T15134] syz_tun: tun_net_xmit 42 [ 927.263135][T15134] syz_tun: tun_net_xmit 42 [ 927.280057][T15134] syz_tun: tun_net_xmit 42 [ 927.284358][ T5935] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.329614][T15134] syz_tun: tun_net_xmit 42 [ 927.344994][T15134] syz_tun: tun_net_xmit 42 [ 927.363921][ T6183] udevd[6183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 927.377004][ T5935] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 927.385936][T15134] syz_tun: tun_net_xmit 42 [ 927.391157][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.403928][T15134] syz_tun: tun_net_xmit 42 [ 927.421124][T15134] syz_tun: tun_net_xmit 42 [ 927.431271][ T5935] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 927.441916][T15134] syz_tun: tun_net_xmit 42 [ 927.449234][ T5935] usb 6-1: invalid MIDI out EP 0 [ 927.473903][T15134] syz_tun: tun_net_xmit 42 [ 927.497818][T15134] syz_tun: tun_net_xmit 42 [ 927.502605][T15134] syz_tun: tun_net_xmit 42 [ 927.562621][ T5935] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 927.577699][T15134] syz_tun: tun_net_xmit 42 [ 927.582491][T15134] syz_tun: tun_net_xmit 42 [ 927.589134][ T9060] udevd[9060]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 927.609671][T15134] syz_tun: tun_net_xmit 42 [ 927.614744][T15134] syz_tun: tun_net_xmit 42 [ 927.628729][T15134] syz_tun: tun_net_xmit 42 [ 927.633605][T15134] syz_tun: tun_net_xmit 42 [ 927.757163][T15134] syz_tun: tun_net_xmit 42 [ 927.762089][T15134] syz_tun: tun_net_xmit 42 [ 927.938952][T15134] syz_tun: tun_net_xmit 42 [ 927.945074][T15134] syz_tun: tun_net_xmit 42 [ 927.956453][T15134] syz_tun: tun_net_xmit 42 [ 927.975523][T15134] syz_tun: tun_net_xmit 42 [ 927.981478][T15134] syz_tun: tun_net_xmit 42 [ 927.989847][T15134] syz_tun: tun_net_xmit 42 [ 927.994527][T15134] syz_tun: tun_net_xmit 42 [ 928.005335][T15134] syz_tun: tun_net_xmit 42 [ 928.016747][T15134] syz_tun: tun_net_xmit 42 [ 928.037466][T15254] netlink: 'syz.6.2427': attribute type 1 has an invalid length. [ 928.043376][T15134] syz_tun: tun_net_xmit 42 [ 928.072091][T15134] syz_tun: tun_net_xmit 42 [ 928.107086][T15134] syz_tun: tun_net_xmit 42 [ 928.112104][T15134] syz_tun: tun_net_xmit 42 [ 928.127310][T15134] syz_tun: tun_net_xmit 42 [ 928.132243][T15134] syz_tun: tun_net_xmit 42 [ 928.151533][T15254] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 928.172859][T15134] syz_tun: tun_net_xmit 42 [ 928.185135][T15134] syz_tun: tun_net_xmit 42 [ 928.202771][T15134] syz_tun: tun_net_xmit 42 [ 928.222476][T15254] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 928.247733][T15134] syz_tun: tun_net_xmit 42 [ 928.252675][T15134] syz_tun: tun_net_xmit 42 [ 928.259404][T15134] syz_tun: tun_net_xmit 42 [ 928.264259][T15134] syz_tun: tun_net_xmit 42 [ 928.270863][T15134] syz_tun: tun_net_xmit 42 [ 928.277267][T15134] syz_tun: tun_net_xmit 42 [ 928.282220][T15134] syz_tun: tun_net_xmit 42 [ 928.288096][T15134] syz_tun: tun_net_xmit 42 [ 928.293853][T15134] syz_tun: tun_net_xmit 42 [ 928.300948][T15134] syz_tun: tun_net_xmit 42 [ 928.307250][T15134] syz_tun: tun_net_xmit 42 [ 928.312113][T15134] syz_tun: tun_net_xmit 42 [ 928.318577][T15134] syz_tun: tun_net_xmit 42 [ 928.323495][T15134] syz_tun: tun_net_xmit 42 [ 928.394467][T15134] syz_tun: tun_net_xmit 42 [ 928.421941][T15134] syz_tun: tun_net_xmit 42 [ 928.427995][T15134] syz_tun: tun_net_xmit 42 [ 928.433051][T15134] syz_tun: tun_net_xmit 42 [ 928.511693][T15271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.521697][T15271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.629854][T15134] syz_tun: tun_net_xmit 42 [ 928.639982][T15258] gretap1: entered promiscuous mode [ 928.642501][T15134] syz_tun: tun_net_xmit 42 [ 928.663757][ T981] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 928.733220][T15258] bond1: (slave gretap1): making interface the new active one [ 928.746379][T15258] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 928.761695][T15134] syz_tun: tun_net_xmit 42 [ 928.828457][T15134] syz_tun: tun_net_xmit 42 [ 928.834492][T15134] syz_tun: tun_net_xmit 42 [ 928.883249][ T981] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.920502][ T981] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 928.931111][T15134] syz_tun: tun_net_xmit 42 [ 929.051581][T15134] syz_tun: tun_net_xmit 42 [ 929.060320][T15134] syz_tun: tun_net_xmit 42 [ 929.071390][T15134] syz_tun: tun_net_xmit 42 [ 929.082531][T15134] syz_tun: tun_net_xmit 42 [ 929.112256][T15134] syz_tun: tun_net_xmit 42 [ 929.122794][T15134] syz_tun: tun_net_xmit 42 [ 929.132259][T15134] syz_tun: tun_net_xmit 42 [ 929.140426][T15134] syz_tun: tun_net_xmit 42 [ 929.145160][T15134] syz_tun: tun_net_xmit 42 [ 929.150924][T15134] syz_tun: tun_net_xmit 42 [ 929.160591][T15134] syz_tun: tun_net_xmit 42 [ 929.165415][T15134] syz_tun: tun_net_xmit 42 [ 929.174279][T15134] syz_tun: tun_net_xmit 42 [ 929.180866][T15134] syz_tun: tun_net_xmit 42 [ 929.225310][T15134] syz_tun: tun_net_xmit 42 [ 929.230607][ T5869] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 929.252941][T15134] syz_tun: tun_net_xmit 42 [ 929.269375][T15134] syz_tun: tun_net_xmit 42 [ 929.283918][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.283945][T15134] syz_tun: tun_net_xmit 42 [ 929.284455][T15134] syz_tun: tun_net_xmit 42 [ 929.302500][ T981] usb 1-1: Product: syz [ 929.313836][ T981] usb 1-1: Manufacturer: syz [ 929.321865][ T981] usb 1-1: SerialNumber: syz [ 929.363828][ T981] usb 1-1: config 0 descriptor?? [ 929.392726][T15134] syz_tun: tun_net_xmit 42 [ 929.421425][ T5869] usb 7-1: unable to get BOS descriptor or descriptor too short [ 929.433478][ T5869] usb 7-1: not running at top speed; connect to a high speed hub [ 929.446560][ T5869] usb 7-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 929.465021][ T5869] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 929.531082][T15251] delete_channel: no stack [ 929.542156][ T5942] usb 6-1: USB disconnect, device number 87 [ 929.552935][T15134] syz_tun: tun_net_xmit 42 [ 929.564033][T15134] syz_tun: tun_net_xmit 42 [ 929.573412][ T5869] usb 7-1: config 1 has no interface number 1 [ 929.585420][T15134] syz_tun: tun_net_xmit 42 [ 929.593075][T15134] syz_tun: tun_net_xmit 42 [ 929.608596][ T5869] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 929.627044][T15134] syz_tun: tun_net_xmit 42 [ 929.647050][T15134] syz_tun: tun_net_xmit 42 [ 929.674134][ T5869] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 4 [ 929.687464][T15134] syz_tun: tun_net_xmit 42 [ 929.709278][T15134] syz_tun: tun_net_xmit 42 [ 929.718144][T15134] syz_tun: tun_net_xmit 42 [ 929.722844][T15134] syz_tun: tun_net_xmit 42 [ 929.762897][ T5869] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29436, setting to 1023 [ 929.790304][T15134] syz_tun: tun_net_xmit 42 [ 929.803129][T15134] syz_tun: tun_net_xmit 42 [ 929.849974][T15134] syz_tun: tun_net_xmit 42 [ 929.865413][T15134] syz_tun: tun_net_xmit 42 [ 929.898322][ T5868] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 929.903491][T15134] syz_tun: tun_net_xmit 42 [ 929.908045][ T5868] Bluetooth: hci0: Injecting HCI hardware error event [ 929.921789][ T5868] Bluetooth: hci0: hardware error 0x00 [ 929.937988][ T5869] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 929.963290][T15134] syz_tun: tun_net_xmit 42 [ 929.987543][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.011988][ T5869] usb 7-1: Product: syz [ 930.027551][ T5869] usb 7-1: Manufacturer: syz [ 930.032267][ T5869] usb 7-1: SerialNumber: syz [ 930.069796][T15134] syz_tun: tun_net_xmit 42 [ 930.132996][T15134] syz_tun: tun_net_xmit 42 [ 930.147550][T15134] syz_tun: tun_net_xmit 42 [ 930.203803][T15134] syz_tun: tun_net_xmit 42 [ 930.232181][T15134] syz_tun: tun_net_xmit 42 [ 930.270819][ T5869] hub 7-1:1.0: Invalid hub with more than one config or interface [ 930.280881][ T5869] hub 7-1:1.0: probe with driver hub failed with error -22 [ 930.292030][T15134] syz_tun: tun_net_xmit 42 [ 930.311365][T15134] syz_tun: tun_net_xmit 42 [ 930.319201][T15134] syz_tun: tun_net_xmit 42 [ 930.324690][ T5869] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 930.341605][T15134] syz_tun: tun_net_xmit 42 [ 930.397799][T15134] syz_tun: tun_net_xmit 42 [ 930.461366][T15134] syz_tun: tun_net_xmit 42 [ 930.495433][T15134] syz_tun: tun_net_xmit 42 [ 930.513874][ T5869] usb 7-1: USB disconnect, device number 70 [ 930.525662][T15134] syz_tun: tun_net_xmit 42 [ 930.539683][T15134] syz_tun: tun_net_xmit 42 [ 930.571517][T15134] syz_tun: tun_net_xmit 42 [ 930.909094][ T5942] syz_tun: tun_net_xmit 110 [ 930.918395][T15134] syz_tun: tun_net_xmit 42 [ 930.977506][T15134] syz_tun: tun_net_xmit 42 [ 930.995081][T15134] syz_tun: tun_net_xmit 42 [ 931.013670][T15134] syz_tun: tun_net_xmit 42 [ 931.019223][ T10] syz_tun: tun_net_xmit 110 [ 931.030108][T15134] syz_tun: tun_net_xmit 42 [ 931.042422][T15134] syz_tun: tun_net_xmit 42 [ 931.048557][T15134] syz_tun: tun_net_xmit 42 [ 931.054090][T15134] syz_tun: tun_net_xmit 42 [ 931.060314][T15134] syz_tun: tun_net_xmit 42 [ 931.069773][T15134] syz_tun: tun_net_xmit 42 [ 931.084391][ T6184] udevd[6184]: setting mode of /dev/dsp3 to 020660 failed: No such file or directory [ 931.094863][T15134] syz_tun: tun_net_xmit 42 [ 931.095088][T15134] syz_tun: tun_net_xmit 42 [ 931.095314][T15134] syz_tun: tun_net_xmit 42 [ 931.095482][T15134] syz_tun: tun_net_xmit 42 [ 931.114396][T15134] syz_tun: tun_net_xmit 42 [ 931.140646][ T6184] udevd[6184]: setting owner of /dev/dsp3 to uid=0, gid=29 failed: No such file or directory [ 931.163877][ T9060] udevd[9060]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 931.173911][T15134] syz_tun: tun_net_xmit 42 [ 931.229715][T15134] syz_tun: tun_net_xmit 42 [ 931.752364][T15134] syz_tun: tun_net_xmit 42 [ 931.767708][T15134] syz_tun: tun_net_xmit 42 [ 931.783654][T15134] syz_tun: tun_net_xmit 42 [ 931.792282][T15134] syz_tun: tun_net_xmit 42 [ 931.832247][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.835536][T15134] syz_tun: tun_net_xmit 42 [ 931.840288][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.899383][T15134] syz_tun: tun_net_xmit 42 [ 931.939148][T15134] syz_tun: tun_net_xmit 42 [ 931.943719][T15134] syz_tun: tun_net_xmit 42 [ 931.983197][ T5868] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 932.072311][T15134] syz_tun: tun_net_xmit 42 [ 932.172614][T15134] syz_tun: tun_net_xmit 42 [ 932.203634][T15134] syz_tun: tun_net_xmit 42 [ 932.314318][T15134] syz_tun: tun_net_xmit 42 [ 932.370761][T15134] syz_tun: tun_net_xmit 42 [ 932.379548][T15134] syz_tun: tun_net_xmit 42 [ 932.384286][T15134] syz_tun: tun_net_xmit 42 [ 932.403437][ T981] usb 1-1: USB disconnect, device number 104 [ 932.456919][T15134] syz_tun: tun_net_xmit 42 [ 932.461616][T15134] syz_tun: tun_net_xmit 42 [ 932.502996][T15293] FAULT_INJECTION: forcing a failure. [ 932.502996][T15293] name failslab, interval 1, probability 0, space 0, times 0 [ 932.528140][T15134] syz_tun: tun_net_xmit 42 [ 932.540128][T15134] syz_tun: tun_net_xmit 42 [ 932.544855][T15134] syz_tun: tun_net_xmit 42 [ 932.566779][T15293] CPU: 0 UID: 0 PID: 15293 Comm: syz.1.2436 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 932.566811][T15293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 932.566823][T15293] Call Trace: [ 932.566833][T15293] [ 932.566842][T15293] dump_stack_lvl+0x189/0x250 [ 932.566882][T15293] ? __pfx____ratelimit+0x10/0x10 [ 932.566903][T15293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 932.566926][T15293] ? __pfx__printk+0x10/0x10 [ 932.566955][T15293] ? __lock_acquire+0xab9/0xd20 [ 932.566994][T15293] should_fail_ex+0x414/0x560 [ 932.567030][T15293] should_failslab+0xa8/0x100 [ 932.567061][T15293] kmem_cache_alloc_noprof+0x73/0x3c0 [ 932.567086][T15293] ? skb_clone+0x212/0x3a0 [ 932.567117][T15293] skb_clone+0x212/0x3a0 [ 932.567146][T15293] __netlink_deliver_tap+0x404/0x850 [ 932.567182][T15293] ? netlink_deliver_tap+0x2e/0x1b0 [ 932.567206][T15293] netlink_deliver_tap+0x19c/0x1b0 [ 932.567230][T15293] netlink_unicast+0x7fa/0x9e0 [ 932.567269][T15293] ? __pfx_netlink_unicast+0x10/0x10 [ 932.567300][T15293] ? netlink_sendmsg+0x642/0xb30 [ 932.567319][T15293] ? skb_put+0x11b/0x210 [ 932.567347][T15293] netlink_sendmsg+0x805/0xb30 [ 932.567380][T15293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.567405][T15293] ? __import_iovec+0x5d4/0x7f0 [ 932.567429][T15293] ? aa_sock_msg_perm+0x94/0x160 [ 932.567456][T15293] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 932.567478][T15293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.567502][T15293] __sock_sendmsg+0x219/0x270 [ 932.567533][T15293] ____sys_sendmsg+0x505/0x830 [ 932.567563][T15293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 932.567607][T15293] ___sys_sendmsg+0x21f/0x2a0 [ 932.567634][T15293] ? __pfx____sys_sendmsg+0x10/0x10 [ 932.567702][T15293] ? __fget_files+0x2a/0x420 [ 932.567730][T15293] ? __fget_files+0x3a0/0x420 [ 932.567771][T15293] __sys_sendmsg+0x164/0x220 [ 932.567799][T15293] ? __pfx___sys_sendmsg+0x10/0x10 [ 932.567842][T15293] ? lockdep_hardirqs_on+0x9c/0x150 [ 932.567875][T15293] __do_fast_syscall_32+0xb6/0x2b0 [ 932.567897][T15293] ? lockdep_hardirqs_on+0x9c/0x150 [ 932.567922][T15293] do_fast_syscall_32+0x34/0x80 [ 932.567944][T15293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 932.567967][T15293] RIP: 0023:0xf70ae539 [ 932.567987][T15293] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 932.568005][T15293] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 932.568030][T15293] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004340 [ 932.568044][T15293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 932.568057][T15293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 932.568069][T15293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 932.568082][T15293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 932.568115][T15293] [ 932.575410][T15134] syz_tun: tun_net_xmit 42 [ 932.700572][T15297] syz.5.2435 (15297): drop_caches: 2 [ 932.892883][T15134] syz_tun: tun_net_xmit 42 [ 932.904302][T15134] syz_tun: tun_net_xmit 42 [ 932.913586][T15134] syz_tun: tun_net_xmit 42 [ 932.919843][T15297] syz.5.2435 (15297): drop_caches: 2 [ 932.928321][T15299] fuse: Unknown parameter '[jnÐ ²B' [ 932.988760][T15134] syz_tun: tun_net_xmit 42 [ 933.044976][T15134] syz_tun: tun_net_xmit 42 [ 933.065370][T15134] syz_tun: tun_net_xmit 42 [ 933.135899][T15134] syz_tun: tun_net_xmit 42 [ 933.140547][T15134] syz_tun: tun_net_xmit 42 [ 933.176066][T15134] syz_tun: tun_net_xmit 42 [ 933.189582][T15134] syz_tun: tun_net_xmit 42 [ 933.195847][T15134] syz_tun: tun_net_xmit 42 [ 933.209120][T15134] syz_tun: tun_net_xmit 42 [ 933.213766][T15134] syz_tun: tun_net_xmit 42 [ 933.229148][T15134] syz_tun: tun_net_xmit 42 [ 933.262293][T15134] syz_tun: tun_net_xmit 42 [ 933.347512][T15134] syz_tun: tun_net_xmit 42 [ 933.352302][T15134] syz_tun: tun_net_xmit 42 [ 933.372622][T15134] syz_tun: tun_net_xmit 42 [ 933.379673][T13422] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 933.392485][T13422] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 933.399742][T15134] syz_tun: tun_net_xmit 42 [ 933.399930][T15134] syz_tun: tun_net_xmit 42 [ 933.400101][T15134] syz_tun: tun_net_xmit 42 [ 933.400298][T15134] syz_tun: tun_net_xmit 42 [ 933.400481][T15134] syz_tun: tun_net_xmit 42 [ 933.407430][T13422] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 933.435305][T13422] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 933.453232][T13422] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 933.467043][T15134] syz_tun: tun_net_xmit 42 [ 933.531254][T15134] syz_tun: tun_net_xmit 42 [ 933.567677][T15134] syz_tun: tun_net_xmit 42 [ 933.600128][T15134] syz_tun: tun_net_xmit 42 [ 933.604976][T15134] syz_tun: tun_net_xmit 42 [ 933.611045][T15134] syz_tun: tun_net_xmit 42 [ 933.616900][T15134] syz_tun: tun_net_xmit 42 [ 933.621718][T15134] syz_tun: tun_net_xmit 42 [ 933.627404][T15134] syz_tun: tun_net_xmit 42 [ 933.632297][T15134] syz_tun: tun_net_xmit 42 [ 933.642471][T15134] syz_tun: tun_net_xmit 42 [ 933.646912][ T5935] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 933.686910][T15134] syz_tun: tun_net_xmit 42 [ 933.704166][T15134] syz_tun: tun_net_xmit 42 [ 933.716750][T15134] syz_tun: tun_net_xmit 42 [ 933.732373][T15134] syz_tun: tun_net_xmit 42 [ 933.774212][T15134] syz_tun: tun_net_xmit 42 [ 933.793221][T15134] syz_tun: tun_net_xmit 42 [ 933.814578][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 933.820799][T15134] syz_tun: tun_net_xmit 42 [ 933.820993][T15134] syz_tun: tun_net_xmit 42 [ 933.821162][T15134] syz_tun: tun_net_xmit 42 [ 933.821358][T15134] syz_tun: tun_net_xmit 42 [ 933.853812][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.875554][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.959433][T15134] syz_tun: tun_net_xmit 42 [ 933.964174][T15134] syz_tun: tun_net_xmit 42 [ 933.986775][ T5935] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 933.995861][T15134] syz_tun: tun_net_xmit 42 [ 933.996063][T15134] syz_tun: tun_net_xmit 42 [ 933.996229][T15134] syz_tun: tun_net_xmit 42 [ 933.996394][T15134] syz_tun: tun_net_xmit 42 [ 933.996557][T15134] syz_tun: tun_net_xmit 42 [ 933.996744][T15134] syz_tun: tun_net_xmit 42 [ 933.996915][T15134] syz_tun: tun_net_xmit 42 [ 933.997081][T15134] syz_tun: tun_net_xmit 42 [ 934.057116][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.082754][ T5935] usb 1-1: config 0 descriptor?? [ 934.141497][T15134] syz_tun: tun_net_xmit 42 [ 934.152468][T15134] syz_tun: tun_net_xmit 42 [ 934.159112][T15134] syz_tun: tun_net_xmit 42 [ 934.163967][T15134] syz_tun: tun_net_xmit 42 [ 934.170466][T15134] syz_tun: tun_net_xmit 42 [ 934.207571][T15134] syz_tun: tun_net_xmit 42 [ 934.224815][T15134] syz_tun: tun_net_xmit 42 [ 934.331951][T15134] syz_tun: tun_net_xmit 42 [ 934.347386][T15134] syz_tun: tun_net_xmit 42 [ 934.352777][T15134] syz_tun: tun_net_xmit 42 [ 934.371240][T15134] syz_tun: tun_net_xmit 42 [ 934.377330][T15134] syz_tun: tun_net_xmit 42 [ 934.382422][T15134] syz_tun: tun_net_xmit 42 [ 934.393897][T15134] syz_tun: tun_net_xmit 42 [ 934.407580][T15134] syz_tun: tun_net_xmit 42 [ 934.452582][T15134] syz_tun: tun_net_xmit 42 [ 934.480627][T15134] syz_tun: tun_net_xmit 42 [ 934.517496][T15134] syz_tun: tun_net_xmit 42 [ 934.522232][T15134] syz_tun: tun_net_xmit 42 [ 934.528944][T15134] syz_tun: tun_net_xmit 42 [ 934.534582][T15134] syz_tun: tun_net_xmit 42 [ 934.558673][T15134] syz_tun: tun_net_xmit 42 [ 934.563447][T15134] syz_tun: tun_net_xmit 42 [ 934.576958][T15134] syz_tun: tun_net_xmit 42 [ 934.587701][T15134] syz_tun: tun_net_xmit 42 [ 934.597268][T15134] syz_tun: tun_net_xmit 42 [ 934.611871][T15134] syz_tun: tun_net_xmit 42 [ 934.622191][T15134] syz_tun: tun_net_xmit 42 [ 934.648412][T15134] syz_tun: tun_net_xmit 42 [ 934.678276][T15313] chnl_net:caif_netlink_parms(): no params data found [ 934.685519][T15134] syz_tun: tun_net_xmit 42 [ 934.703584][T15134] syz_tun: tun_net_xmit 42 [ 934.733808][T15134] syz_tun: tun_net_xmit 42 [ 934.764273][T15134] syz_tun: tun_net_xmit 42 [ 934.822784][ T5935] usbhid 1-1:0.0: can't add hid device: -71 [ 934.829926][ T5935] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 934.845407][T15134] syz_tun: tun_net_xmit 42 [ 934.861922][T15134] syz_tun: tun_net_xmit 42 [ 934.869667][ T5935] usb 1-1: USB disconnect, device number 105 [ 934.885373][T15134] syz_tun: tun_net_xmit 42 [ 934.892295][T15134] syz_tun: tun_net_xmit 42 [ 934.907228][T15134] syz_tun: tun_net_xmit 42 [ 934.924725][T15134] syz_tun: tun_net_xmit 42 [ 934.931687][T15134] syz_tun: tun_net_xmit 42 [ 934.940211][T15134] syz_tun: tun_net_xmit 42 [ 934.948468][T15134] syz_tun: tun_net_xmit 42 [ 934.959442][T15134] syz_tun: tun_net_xmit 42 [ 934.971560][T15134] syz_tun: tun_net_xmit 42 [ 934.979674][T15134] syz_tun: tun_net_xmit 42 [ 934.992859][T15134] syz_tun: tun_net_xmit 42 [ 935.004652][T15134] syz_tun: tun_net_xmit 42 [ 935.017826][T15134] syz_tun: tun_net_xmit 42 [ 935.022969][T15134] syz_tun: tun_net_xmit 42 [ 935.041441][T15134] syz_tun: tun_net_xmit 42 [ 935.047955][T15134] syz_tun: tun_net_xmit 42 [ 935.052543][T15134] syz_tun: tun_net_xmit 42 [ 935.061272][T15134] syz_tun: tun_net_xmit 42 [ 935.067524][T15134] syz_tun: tun_net_xmit 42 [ 935.072739][T15134] syz_tun: tun_net_xmit 42 [ 935.079550][T15134] syz_tun: tun_net_xmit 42 [ 935.084269][T15134] syz_tun: tun_net_xmit 42 [ 935.092501][T15134] syz_tun: tun_net_xmit 42 [ 935.099516][T15134] syz_tun: tun_net_xmit 42 [ 935.104112][T15134] syz_tun: tun_net_xmit 42 [ 935.110905][T15134] syz_tun: tun_net_xmit 42 [ 935.117381][T15134] syz_tun: tun_net_xmit 42 [ 935.127666][T15134] syz_tun: tun_net_xmit 42 [ 935.135093][T15134] syz_tun: tun_net_xmit 42 [ 935.151709][T15134] syz_tun: tun_net_xmit 42 [ 935.164791][T15134] syz_tun: tun_net_xmit 42 [ 935.170762][T15134] syz_tun: tun_net_xmit 42 [ 935.175446][T15134] syz_tun: tun_net_xmit 42 [ 935.181365][T15134] syz_tun: tun_net_xmit 42 [ 935.187645][T15134] syz_tun: tun_net_xmit 42 [ 935.196846][T15134] syz_tun: tun_net_xmit 42 [ 935.201762][T15134] syz_tun: tun_net_xmit 42 [ 935.208253][T15134] syz_tun: tun_net_xmit 42 [ 935.212960][T15134] syz_tun: tun_net_xmit 42 [ 935.219055][T15134] syz_tun: tun_net_xmit 42 [ 935.223778][T15134] syz_tun: tun_net_xmit 42 [ 935.234013][T15313] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.247041][T15134] syz_tun: tun_net_xmit 42 [ 935.251798][T15134] syz_tun: tun_net_xmit 42 [ 935.268920][T15313] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.279933][T15134] syz_tun: tun_net_xmit 42 [ 935.284614][T15313] bridge_slave_0: entered allmulticast mode [ 935.302421][T15134] syz_tun: tun_net_xmit 42 [ 935.310541][T15313] bridge_slave_0: entered promiscuous mode [ 935.318308][T15134] syz_tun: tun_net_xmit 42 [ 935.322975][T15134] syz_tun: tun_net_xmit 42 [ 935.368215][T15313] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.388501][T15134] syz_tun: tun_net_xmit 42 [ 935.399051][T15313] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.407780][T15134] syz_tun: tun_net_xmit 42 [ 935.417628][T15134] syz_tun: tun_net_xmit 42 [ 935.427592][T15134] syz_tun: tun_net_xmit 42 [ 935.439972][T15134] syz_tun: tun_net_xmit 42 [ 935.444625][T15313] bridge_slave_1: entered allmulticast mode [ 935.468145][T15134] syz_tun: tun_net_xmit 42 [ 935.478732][T15313] bridge_slave_1: entered promiscuous mode [ 935.484798][T15134] syz_tun: tun_net_xmit 42 [ 935.508186][T15134] syz_tun: tun_net_xmit 42 [ 935.567827][T13422] Bluetooth: hci2: command tx timeout [ 935.567895][T15134] syz_tun: tun_net_xmit 42 [ 935.711159][T15341] netlink: 'syz.0.2446': attribute type 13 has an invalid length. [ 935.732876][T15134] syz_tun: tun_net_xmit 42 [ 935.761865][T15134] syz_tun: tun_net_xmit 42 [ 935.767633][T15134] syz_tun: tun_net_xmit 42 [ 935.772863][T15134] syz_tun: tun_net_xmit 42 [ 935.785314][T15339] FAULT_INJECTION: forcing a failure. [ 935.785314][T15339] name failslab, interval 1, probability 0, space 0, times 0 [ 935.794802][T15134] syz_tun: tun_net_xmit 42 [ 935.814960][T15134] syz_tun: tun_net_xmit 42 [ 935.824766][T15134] syz_tun: tun_net_xmit 42 [ 935.838910][T15313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.854025][T15134] syz_tun: tun_net_xmit 42 [ 935.859918][T15134] syz_tun: tun_net_xmit 42 [ 935.868343][T15313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.881450][T15134] syz_tun: tun_net_xmit 42 [ 935.887987][ T5869] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 935.901425][T15134] syz_tun: tun_net_xmit 42 [ 935.910322][T15134] syz_tun: tun_net_xmit 42 [ 935.921420][T15134] syz_tun: tun_net_xmit 42 [ 935.941327][T15341] netlink: 'syz.0.2446': attribute type 17 has an invalid length. [ 935.941515][T15134] syz_tun: tun_net_xmit 42 [ 935.950831][T15339] CPU: 1 UID: 0 PID: 15339 Comm: syz.5.2447 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 935.950858][T15339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.950869][T15339] Call Trace: [ 935.950878][T15339] [ 935.950886][T15339] dump_stack_lvl+0x189/0x250 [ 935.950914][T15339] ? __pfx____ratelimit+0x10/0x10 [ 935.950934][T15339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 935.950956][T15339] ? __pfx__printk+0x10/0x10 [ 935.950987][T15339] ? __pfx___might_resched+0x10/0x10 [ 935.951005][T15339] ? fs_reclaim_acquire+0x7d/0x100 [ 935.951037][T15339] should_fail_ex+0x414/0x560 [ 935.951070][T15339] should_failslab+0xa8/0x100 [ 935.951097][T15339] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 935.951121][T15339] ? __alloc_skb+0x112/0x2d0 [ 935.951146][T15339] __alloc_skb+0x112/0x2d0 [ 935.951170][T15339] netlink_ack+0x146/0xa50 [ 935.951187][T15339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 935.951210][T15339] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 935.951233][T15339] ? __pfx_nl80211_post_doit+0x10/0x10 [ 935.951258][T15339] ? __asan_memcpy+0x40/0x70 [ 935.951278][T15339] ? __pfx_ref_tracker_free+0x10/0x10 [ 935.951304][T15339] netlink_rcv_skb+0x28c/0x470 [ 935.951322][T15339] ? __lock_acquire+0xab9/0xd20 [ 935.951348][T15339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 935.951374][T15339] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 935.951413][T15339] ? down_read+0x1ad/0x2e0 [ 935.951437][T15339] genl_rcv+0x28/0x40 [ 935.951459][T15339] netlink_unicast+0x82f/0x9e0 [ 935.951495][T15339] ? __pfx_netlink_unicast+0x10/0x10 [ 935.951524][T15339] ? netlink_sendmsg+0x642/0xb30 [ 935.951541][T15339] ? skb_put+0x11b/0x210 [ 935.951566][T15339] netlink_sendmsg+0x805/0xb30 [ 935.951596][T15339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.951618][T15339] ? __import_iovec+0x5d4/0x7f0 [ 935.951641][T15339] ? aa_sock_msg_perm+0x94/0x160 [ 935.951665][T15339] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 935.951684][T15339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.951705][T15339] __sock_sendmsg+0x219/0x270 [ 935.951735][T15339] ____sys_sendmsg+0x505/0x830 [ 935.951764][T15339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 935.951804][T15339] ___sys_sendmsg+0x21f/0x2a0 [ 935.951861][T15339] ? __pfx____sys_sendmsg+0x10/0x10 [ 935.951922][T15339] ? __fget_files+0x2a/0x420 [ 935.951947][T15339] ? __fget_files+0x3a0/0x420 [ 935.951985][T15339] __sys_sendmsg+0x164/0x220 [ 935.952010][T15339] ? __pfx___sys_sendmsg+0x10/0x10 [ 935.952049][T15339] ? lockdep_hardirqs_on+0x9c/0x150 [ 935.952072][T15339] __do_fast_syscall_32+0xb6/0x2b0 [ 935.952092][T15339] ? lockdep_hardirqs_on+0x9c/0x150 [ 935.952114][T15339] do_fast_syscall_32+0x34/0x80 [ 935.952134][T15339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.952156][T15339] RIP: 0023:0xf70be539 [ 935.952173][T15339] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 935.952190][T15339] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 935.952211][T15339] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 935.952224][T15339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 935.952235][T15339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 935.952246][T15339] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 935.952257][T15339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 935.952287][T15339] [ 936.312799][T15134] syz_tun: tun_net_xmit 42 [ 936.327444][T15134] syz_tun: tun_net_xmit 42 [ 936.332050][T15134] syz_tun: tun_net_xmit 42 [ 936.342199][T15134] syz_tun: tun_net_xmit 42 [ 936.390468][T15134] syz_tun: tun_net_xmit 42 [ 936.452530][T15134] syz_tun: tun_net_xmit 42 [ 936.457170][ T5869] usb 7-1: config 0 has no interfaces? [ 936.470531][ T5869] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 936.480757][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.489818][ T5869] usb 7-1: Product: syz [ 936.497633][T15134] syz_tun: tun_net_xmit 42 [ 936.505431][ T5869] usb 7-1: Manufacturer: syz [ 936.514923][ T5869] usb 7-1: SerialNumber: syz [ 936.525492][T15134] syz_tun: tun_net_xmit 42 [ 936.543890][T15134] syz_tun: tun_net_xmit 42 [ 936.562825][T15341] bridge0: port 3(netdevsim0) entered blocking state [ 936.569664][T15341] bridge0: port 3(netdevsim0) entered forwarding state [ 936.577219][T15341] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.584509][T15341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.592112][T15341] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.599552][T15341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.637505][T15134] syz_tun: tun_net_xmit 42 [ 936.668792][ T5869] usb 7-1: config 0 descriptor?? [ 936.671739][T15134] syz_tun: tun_net_xmit 42 [ 936.680717][T15341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 936.720349][T15134] syz_tun: tun_net_xmit 42 [ 936.725155][T15134] syz_tun: tun_net_xmit 42 [ 936.758719][T15134] syz_tun: tun_net_xmit 42 [ 936.767129][T15313] team0: Port device team_slave_0 added [ 936.784482][T15313] team0: Port device team_slave_1 added [ 936.794643][T15346] blktrace: Concurrent blktraces are not allowed on sg0 [ 936.818639][T15134] syz_tun: tun_net_xmit 42 [ 936.887914][T15134] syz_tun: tun_net_xmit 42 [ 936.892656][T15134] syz_tun: tun_net_xmit 42 [ 936.928837][T15134] syz_tun: tun_net_xmit 42 [ 936.967822][T15134] syz_tun: tun_net_xmit 42 [ 936.973033][T15134] syz_tun: tun_net_xmit 42 [ 936.980344][T15134] syz_tun: tun_net_xmit 42 [ 936.985307][T15134] syz_tun: tun_net_xmit 42 [ 936.993311][T15134] syz_tun: tun_net_xmit 42 [ 937.014674][T15134] syz_tun: tun_net_xmit 42 [ 937.025483][T15134] syz_tun: tun_net_xmit 42 [ 937.034725][T15134] syz_tun: tun_net_xmit 42 [ 937.051214][T15134] syz_tun: tun_net_xmit 42 [ 937.062061][T15134] syz_tun: tun_net_xmit 42 [ 937.081022][T15134] syz_tun: tun_net_xmit 42 [ 937.103846][T15134] syz_tun: tun_net_xmit 42 [ 937.132094][T15134] syz_tun: tun_net_xmit 42 [ 937.147508][T15134] syz_tun: tun_net_xmit 42 [ 937.159420][T15313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.168335][T15134] syz_tun: tun_net_xmit 42 [ 937.173676][T15134] syz_tun: tun_net_xmit 42 [ 937.178732][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.179707][T15134] syz_tun: tun_net_xmit 42 [ 937.205044][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.227825][T15351] fuse: Unknown parameter '[jnÐ ²B' [ 937.266773][T15313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.309981][T15313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.363542][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.412879][T15134] syz_tun: tun_net_xmit 42 [ 937.438979][T15313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.440637][T15134] syz_tun: tun_net_xmit 42 [ 937.477051][T15134] syz_tun: tun_net_xmit 42 [ 937.481947][T15134] syz_tun: tun_net_xmit 42 [ 937.517592][T15134] syz_tun: tun_net_xmit 42 [ 937.528417][T15134] syz_tun: tun_net_xmit 42 [ 937.545550][T15134] syz_tun: tun_net_xmit 42 [ 937.578790][T15134] syz_tun: tun_net_xmit 42 [ 937.590134][T15134] syz_tun: tun_net_xmit 42 [ 937.617210][T15134] syz_tun: tun_net_xmit 42 [ 937.622208][T15134] syz_tun: tun_net_xmit 42 [ 937.669108][T13422] Bluetooth: hci2: command tx timeout [ 937.680629][T15134] syz_tun: tun_net_xmit 42 [ 937.755230][T15134] syz_tun: tun_net_xmit 42 [ 937.797346][T15134] syz_tun: tun_net_xmit 42 [ 937.819243][T15134] syz_tun: tun_net_xmit 42 [ 937.834378][T15134] syz_tun: tun_net_xmit 42 [ 937.867266][T15134] syz_tun: tun_net_xmit 42 [ 937.884926][T15134] syz_tun: tun_net_xmit 42 [ 937.942674][T15313] hsr_slave_0: entered promiscuous mode [ 937.962941][T15313] hsr_slave_1: entered promiscuous mode [ 937.971113][T15134] syz_tun: tun_net_xmit 42 [ 938.033504][T15134] syz_tun: tun_net_xmit 42 [ 938.051326][T15134] syz_tun: tun_net_xmit 42 [ 938.065087][T15134] syz_tun: tun_net_xmit 42 [ 938.075006][T15134] syz_tun: tun_net_xmit 42 [ 938.090816][T15134] syz_tun: tun_net_xmit 42 [ 938.106452][T15134] syz_tun: tun_net_xmit 42 [ 938.138487][T15134] syz_tun: tun_net_xmit 42 [ 938.159503][T15134] syz_tun: tun_net_xmit 42 [ 938.170979][T15134] syz_tun: tun_net_xmit 42 [ 938.193942][T15134] syz_tun: tun_net_xmit 42 [ 938.214157][T15134] syz_tun: tun_net_xmit 42 [ 938.228078][T15134] syz_tun: tun_net_xmit 42 [ 938.234116][T15134] syz_tun: tun_net_xmit 42 [ 938.242094][T15134] syz_tun: tun_net_xmit 42 [ 938.247956][T15134] syz_tun: tun_net_xmit 42 [ 938.252780][T15134] syz_tun: tun_net_xmit 42 [ 938.303860][T15134] syz_tun: tun_net_xmit 42 [ 938.336522][T15134] syz_tun: tun_net_xmit 42 [ 938.359838][T15134] syz_tun: tun_net_xmit 42 [ 938.391683][T15134] syz_tun: tun_net_xmit 42 [ 938.412210][T15134] syz_tun: tun_net_xmit 42 [ 938.474485][T15134] syz_tun: tun_net_xmit 42 [ 938.494699][T15134] syz_tun: tun_net_xmit 42 [ 938.537370][T15134] syz_tun: tun_net_xmit 42 [ 938.554517][T15134] syz_tun: tun_net_xmit 42 [ 938.575546][T15134] syz_tun: tun_net_xmit 42 [ 938.594534][T15134] syz_tun: tun_net_xmit 42 [ 938.635345][T15134] syz_tun: tun_net_xmit 42 [ 938.667058][T15134] syz_tun: tun_net_xmit 42 [ 938.674182][T15134] syz_tun: tun_net_xmit 42 [ 938.688021][T15134] syz_tun: tun_net_xmit 42 [ 938.704841][T15134] syz_tun: tun_net_xmit 42 [ 938.720792][T15134] syz_tun: tun_net_xmit 42 [ 938.731861][T15134] syz_tun: tun_net_xmit 42 [ 938.741964][T15134] syz_tun: tun_net_xmit 42 [ 938.748460][T15134] syz_tun: tun_net_xmit 42 [ 938.753240][T15134] syz_tun: tun_net_xmit 42 [ 938.759456][T15134] syz_tun: tun_net_xmit 42 [ 938.765329][T15134] syz_tun: tun_net_xmit 42 [ 938.771228][T15134] syz_tun: tun_net_xmit 42 [ 938.799423][T15134] syz_tun: tun_net_xmit 42 [ 938.824551][T15134] syz_tun: tun_net_xmit 42 [ 938.845881][T15134] syz_tun: tun_net_xmit 42 [ 938.869047][T15134] syz_tun: tun_net_xmit 42 [ 938.891184][T15134] syz_tun: tun_net_xmit 42 [ 938.904847][ T5942] usb 7-1: USB disconnect, device number 71 [ 938.937414][T15134] syz_tun: tun_net_xmit 42 [ 938.942362][T15134] syz_tun: tun_net_xmit 42 [ 938.948266][T15134] syz_tun: tun_net_xmit 42 [ 938.953316][T15134] syz_tun: tun_net_xmit 42 [ 938.962426][T15134] syz_tun: tun_net_xmit 42 [ 938.969531][T15134] syz_tun: tun_net_xmit 42 [ 938.974304][T15134] syz_tun: tun_net_xmit 42 [ 938.981158][T15134] syz_tun: tun_net_xmit 42 [ 938.990954][T15134] syz_tun: tun_net_xmit 42 [ 938.997188][T15134] syz_tun: tun_net_xmit 42 [ 939.001976][T15134] syz_tun: tun_net_xmit 42 [ 939.009516][T15134] syz_tun: tun_net_xmit 42 [ 939.014244][T15134] syz_tun: tun_net_xmit 42 [ 939.020456][T15134] syz_tun: tun_net_xmit 42 [ 939.025331][T15134] syz_tun: tun_net_xmit 42 [ 939.031513][T15134] syz_tun: tun_net_xmit 42 [ 939.038095][T15134] syz_tun: tun_net_xmit 42 [ 939.042779][T15134] syz_tun: tun_net_xmit 42 [ 939.053698][T15134] syz_tun: tun_net_xmit 42 [ 939.065242][T15134] syz_tun: tun_net_xmit 42 [ 939.072909][T15371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.084290][T15134] syz_tun: tun_net_xmit 42 [ 939.092249][T15134] syz_tun: tun_net_xmit 42 [ 939.098821][T15134] syz_tun: tun_net_xmit 42 [ 939.114244][T15371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.124344][T15134] syz_tun: tun_net_xmit 42 [ 939.138340][T15134] syz_tun: tun_net_xmit 42 [ 939.143592][T15134] syz_tun: tun_net_xmit 42 [ 939.161862][T15134] syz_tun: tun_net_xmit 42 [ 939.185168][T15134] syz_tun: tun_net_xmit 42 [ 939.229418][T15134] syz_tun: tun_net_xmit 42 [ 939.240917][T15134] syz_tun: tun_net_xmit 42 [ 939.260616][T15134] syz_tun: tun_net_xmit 42 [ 939.312724][T15134] syz_tun: tun_net_xmit 42 [ 939.362241][T15377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.391975][T15377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.400304][T15134] syz_tun: tun_net_xmit 42 [ 939.405128][T15134] syz_tun: tun_net_xmit 42 [ 939.414312][T15134] syz_tun: tun_net_xmit 42 [ 939.467427][T15134] syz_tun: tun_net_xmit 42 [ 939.472248][T15134] syz_tun: tun_net_xmit 42 [ 939.485319][T15381] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2459'. [ 939.499179][T15382] netlink: 'syz.5.2460': attribute type 13 has an invalid length. [ 939.506923][T15134] syz_tun: tun_net_xmit 42 [ 939.512129][T15134] syz_tun: tun_net_xmit 42 [ 939.531196][T15382] netlink: 'syz.5.2460': attribute type 17 has an invalid length. [ 939.597038][T15134] syz_tun: tun_net_xmit 42 [ 939.608661][T15134] syz_tun: tun_net_xmit 42 [ 939.629184][T15134] syz_tun: tun_net_xmit 42 [ 939.658421][T15134] syz_tun: tun_net_xmit 42 [ 939.667530][T15134] syz_tun: tun_net_xmit 42 [ 939.677899][T15134] syz_tun: tun_net_xmit 42 [ 939.728100][T15134] syz_tun: tun_net_xmit 42 [ 939.732850][T15134] syz_tun: tun_net_xmit 42 [ 939.739297][T13422] Bluetooth: hci2: command tx timeout [ 939.745392][T15134] syz_tun: tun_net_xmit 42 [ 939.751774][T15134] syz_tun: tun_net_xmit 42 [ 939.817721][T15134] syz_tun: tun_net_xmit 42 [ 939.859172][T15134] syz_tun: tun_net_xmit 42 [ 939.877372][T15134] syz_tun: tun_net_xmit 42 [ 939.882468][T15134] syz_tun: tun_net_xmit 42 [ 939.890242][T15134] syz_tun: tun_net_xmit 42 [ 939.895432][T15134] syz_tun: tun_net_xmit 42 [ 939.914255][T15134] syz_tun: tun_net_xmit 42 [ 939.921665][T15134] syz_tun: tun_net_xmit 42 [ 939.929304][T15134] syz_tun: tun_net_xmit 42 [ 939.934259][T15134] syz_tun: tun_net_xmit 42 [ 939.940347][T15134] syz_tun: tun_net_xmit 42 [ 939.950298][T15134] syz_tun: tun_net_xmit 42 [ 939.955556][T15134] syz_tun: tun_net_xmit 42 [ 939.962504][T15134] syz_tun: tun_net_xmit 42 [ 940.068670][T15134] syz_tun: tun_net_xmit 42 [ 940.073620][T15134] syz_tun: tun_net_xmit 42 [ 940.088474][T15134] syz_tun: tun_net_xmit 42 [ 940.093378][T15134] syz_tun: tun_net_xmit 42 [ 940.110124][T15134] syz_tun: tun_net_xmit 42 [ 940.120751][T15134] syz_tun: tun_net_xmit 42 [ 940.127867][T15134] syz_tun: tun_net_xmit 42 [ 940.133024][T15134] syz_tun: tun_net_xmit 42 [ 940.140052][T15134] syz_tun: tun_net_xmit 42 [ 940.145275][T15134] syz_tun: tun_net_xmit 42 [ 940.152032][T15134] syz_tun: tun_net_xmit 42 [ 940.158609][T15134] syz_tun: tun_net_xmit 42 [ 940.163489][T15134] syz_tun: tun_net_xmit 42 [ 940.174637][T15134] syz_tun: tun_net_xmit 42 [ 940.176972][ T5942] syz_tun: tun_net_xmit 110 [ 940.180737][T15134] syz_tun: tun_net_xmit 42 [ 940.315668][T15134] syz_tun: tun_net_xmit 42 [ 940.322247][T15134] syz_tun: tun_net_xmit 42 [ 940.328280][T15134] syz_tun: tun_net_xmit 42 [ 940.333145][T15134] syz_tun: tun_net_xmit 42 [ 940.445226][T15134] syz_tun: tun_net_xmit 42 [ 940.453733][T15382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 940.472579][T15134] syz_tun: tun_net_xmit 42 [ 940.569035][T15134] syz_tun: tun_net_xmit 42 [ 940.582538][T15313] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 940.594988][T15134] syz_tun: tun_net_xmit 42 [ 940.648274][T15313] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 940.677572][ T5942] syz_tun: tun_net_xmit 110 [ 940.722496][T15313] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 940.751810][T15313] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 940.933931][T15400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 940.943195][ T10] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 941.109574][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 941.119281][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 941.147257][ T10] usb 1-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 941.209128][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 941.263809][T15313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.306824][ T10] usb 1-1: config 1 has no interface number 1 [ 941.339122][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 941.433512][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 4 [ 941.451151][T15313] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.485438][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29436, setting to 1023 [ 941.504354][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.511667][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.518974][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 941.541283][T10780] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.548574][T10780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.556675][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.721860][T15390] delete_channel: no stack [ 941.807350][T13422] Bluetooth: hci2: command tx timeout [ 941.821870][ T10] usb 1-1: Product: syz [ 941.827330][ T10] usb 1-1: Manufacturer: syz [ 941.832560][ T10] usb 1-1: SerialNumber: syz [ 942.002738][T15313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 942.092379][ T10] hub 1-1:1.0: Invalid hub with more than one config or interface [ 942.332960][T15313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 942.357425][T15407] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 942.364062][T15407] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 942.369935][ T10] hub 1-1:1.0: probe with driver hub failed with error -22 [ 942.390984][T15407] vhci_hcd vhci_hcd.0: Device attached [ 942.443228][ T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 942.452785][T15409] vhci_hcd: connection closed [ 942.474738][ T2977] vhci_hcd: stop threads [ 942.503991][ T2977] vhci_hcd: release socket [ 942.513202][ T2977] vhci_hcd: disconnect device [ 942.567357][ T981] vhci_hcd: vhci_device speed not set [ 942.928201][ T10] usb 1-1: USB disconnect, device number 106 [ 943.118177][ T9060] udevd[9060]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 943.500410][T15402] delete_channel: no stack [ 943.523160][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.540842][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 943.627863][T15313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.736226][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.760129][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 943.826818][ T5942] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 944.132373][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.151389][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 944.288611][ T5942] usb 6-1: unable to get BOS descriptor or descriptor too short [ 944.312130][ T5942] usb 6-1: not running at top speed; connect to a high speed hub [ 944.326380][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 944.338402][ T5942] usb 6-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 944.349747][ T5942] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 944.355043][T15414] delete_channel: no stack [ 944.379457][ T5942] usb 6-1: config 1 has no interface number 1 [ 944.401826][ T5942] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 944.451309][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 944.462108][ T5942] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 4 [ 944.489740][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 944.541153][ T5942] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29436, setting to 1023 [ 944.565076][ T5942] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.601357][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.673105][ T5942] usb 6-1: Product: syz [ 944.683254][ T5942] usb 6-1: Manufacturer: syz [ 944.703515][ T5942] usb 6-1: SerialNumber: syz [ 944.804859][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.836481][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 944.902917][T15427] blktrace: Concurrent blktraces are not allowed on sg0 [ 945.053335][ T5942] hub 6-1:1.0: Invalid hub with more than one config or interface [ 945.071013][ T5942] hub 6-1:1.0: probe with driver hub failed with error -22 [ 945.080398][T15313] veth0_vlan: entered promiscuous mode [ 945.126996][ T5942] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 945.177842][T15313] veth1_vlan: entered promiscuous mode [ 945.263876][ T5942] usb 6-1: USB disconnect, device number 88 [ 945.521704][T15429] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2470'. [ 945.717301][ T12] bridge_slave_1: left allmulticast mode [ 945.723114][ T12] bridge_slave_1: left promiscuous mode [ 945.747954][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.788784][ T12] bridge_slave_0: left allmulticast mode [ 945.795009][ T12] bridge_slave_0: left promiscuous mode [ 945.811777][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.302023][T15439] syz.0.2471 (15439): drop_caches: 2 [ 946.313640][T15439] syz.0.2471 (15439): drop_caches: 2 [ 947.665016][T15450] fuse: blksize only supported for fuseblk [ 948.917680][ T12] bond0 (unregistering): left promiscuous mode [ 948.923947][ T12] bond_slave_0: left promiscuous mode [ 948.934852][ T12] bond_slave_1: left promiscuous mode [ 948.967437][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.992240][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.004310][ T12] bond0 (unregistering): Released all slaves [ 949.134699][T15313] veth0_macvtap: entered promiscuous mode [ 949.312210][ T12] tipc: Left network mode [ 949.337716][T15458] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2476'. [ 949.389019][T15313] veth1_macvtap: entered promiscuous mode [ 949.446861][T13422] Bluetooth: hci7: unexpected event 0x09 length: 59 > 3 [ 949.657921][T15453] delete_channel: no stack [ 949.744471][T15313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.037012][ T5942] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 950.228281][ T5942] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 950.239271][ T5942] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 950.273557][ T5942] usb 6-1: config 2 interface 0 has no altsetting 0 [ 950.312119][ T5942] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 950.325919][T15313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.343757][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.379053][ T5942] usb 6-1: Product: syz [ 950.394623][ T5942] usb 6-1: Manufacturer: syz [ 950.407225][ T5942] usb 6-1: SerialNumber: syz [ 950.437297][T10783] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.456952][ T10] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 950.486716][T10783] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.665575][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.682397][T15464] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2477'. [ 950.692516][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 950.731034][T10783] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.737171][ T10] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 950.751805][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.767326][ T5942] usb 6-1: USB disconnect, device number 89 [ 950.773819][ T10] usb 1-1: Product: syz [ 950.785160][ T10] usb 1-1: Manufacturer: syz [ 950.795140][ T10] usb 1-1: SerialNumber: syz [ 950.849672][ T10] usb 1-1: config 0 descriptor?? [ 950.849693][T10783] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.000078][T15481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.032764][T15481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.553581][ T12] hsr_slave_0: left promiscuous mode [ 951.611631][ T12] hsr_slave_1: left promiscuous mode [ 951.638402][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.647981][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.664039][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.689287][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.833832][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 951.869598][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 951.988775][ T12] veth1_macvtap: left promiscuous mode [ 952.015464][ T12] veth0_macvtap: left promiscuous mode [ 952.039015][ T12] veth1_vlan: left promiscuous mode [ 952.299967][ T12] veth0_vlan: left promiscuous mode [ 953.967404][T15507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.057481][T15507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.094672][ T10] usb 1-1: USB disconnect, device number 107 [ 954.119536][T15507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2484'. [ 955.006809][T15511] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2486'. [ 955.203512][T15518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 956.138816][T15512] delete_channel: no stack [ 956.187555][T15515] delete_channel: no stack [ 956.540938][T15524] blktrace: Concurrent blktraces are not allowed on sg0 [ 956.674825][ T12] team0 (unregistering): Port device team_slave_1 removed [ 956.857822][ T12] team0 (unregistering): Port device team_slave_0 removed [ 957.548941][T15526] batadv1: entered promiscuous mode [ 957.715556][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.739113][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.787544][T15535] fuse: Unknown parameter '[jnÐ ²B' [ 957.875546][T15537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.905433][T10783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.932331][T10783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.977125][T15537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.148836][T15559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.205526][T15541] delete_channel: no stack [ 959.209160][T15559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.364058][T15556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2495'. [ 959.683842][T15571] fuse: blksize only supported for fuseblk [ 959.786828][ T10] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 960.267109][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.348181][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 960.423399][ T10] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 960.443682][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.470124][ T10] usb 7-1: Product: syz [ 960.481315][ T10] usb 7-1: Manufacturer: syz [ 960.513450][ T10] usb 7-1: SerialNumber: syz [ 960.580593][ T10] usb 7-1: config 0 descriptor?? [ 962.140628][T15598] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2501'. [ 962.340954][T13422] Bluetooth: hci2: unexpected event 0x09 length: 59 > 3 [ 962.595205][T15589] delete_channel: no stack [ 962.617310][T15605] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 962.728203][T15605] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 962.947526][ T9] usb 7-1: USB disconnect, device number 72 [ 963.148831][T15609] fuse: Unknown parameter '[jnÐ ²B' [ 963.707902][T15622] blktrace: Concurrent blktraces are not allowed on sg0 [ 963.897067][ T5935] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 964.222949][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 964.249527][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.274078][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.313974][ T5935] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 964.423716][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.477514][ T5935] usb 6-1: config 0 descriptor?? [ 964.825387][T15624] delete_channel: no stack [ 964.864474][ T5935] usbhid 6-1:0.0: can't add hid device: -71 [ 964.872484][ T5935] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 964.922796][ T5935] usb 6-1: USB disconnect, device number 90 [ 966.145575][T15653] syz.5.2511 (15653): drop_caches: 2 [ 966.254614][T15653] syz.5.2511 (15653): drop_caches: 2 [ 966.596582][ T5911] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 966.758392][T15670] fuse: blksize only supported for fuseblk [ 966.798756][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 966.821974][ T5911] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 966.908526][T15671] syz.1.2514 (15671): drop_caches: 2 [ 966.919122][T15671] syz.1.2514 (15671): drop_caches: 2 [ 967.532162][ T5911] usb 1-1: config 0 has no interface number 0 [ 967.808655][ T5911] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 968.222422][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.261188][ T5911] usb 1-1: Product: syz [ 968.281488][ T5911] usb 1-1: Manufacturer: syz [ 968.301756][ T5911] usb 1-1: SerialNumber: syz [ 968.364064][ T5911] usb 1-1: config 0 descriptor?? [ 968.394286][ T5911] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 968.654642][ T5911] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 968.729759][ T5911] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 969.512458][T15688] fuse: Unknown parameter '[jnÐ ²B' [ 969.747742][ T9] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 969.851381][T15688] KVM: debugfs: duplicate directory 15688-8 [ 970.021838][ T9] usb 7-1: config 0 has no interfaces? [ 970.053406][ T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 970.119530][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.149432][ T9] usb 7-1: Product: syz [ 970.159145][ T9] usb 7-1: Manufacturer: syz [ 970.174367][ T9] usb 7-1: SerialNumber: syz [ 970.197261][ T9] usb 7-1: config 0 descriptor?? [ 970.601523][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 970.602770][ T9] usb 1-1: USB disconnect, device number 108 [ 970.621518][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 970.776343][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 970.908644][ T9] quatech2 1-1:0.51: device disconnected [ 971.159385][T15694] delete_channel: no stack [ 971.851189][T15700] delete_channel: no stack [ 972.077570][T15708] netlink: 'syz.5.2518': attribute type 3 has an invalid length. [ 972.119779][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 972.119801][ T30] audit: type=1326 audit(1754286529.919:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15692 comm="syz.5.2518" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x0 [ 972.811128][T15717] blktrace: Concurrent blktraces are not allowed on sg0 [ 973.155117][T15725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.173516][T15725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.202110][ T5942] usb 7-1: USB disconnect, device number 73 [ 974.053594][T15718] delete_channel: no stack [ 974.475043][T15743] syz.6.2529 (15743): drop_caches: 2 [ 974.483286][T15743] syz.6.2529 (15743): drop_caches: 2 [ 976.937371][ T5942] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 976.996775][ T5911] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 977.143407][T15777] usb usb8: usbfs: process 15777 (syz.0.2536) did not claim interface 0 before use [ 977.173765][ T5942] usb 1-1: unable to get BOS descriptor or descriptor too short [ 977.182463][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 977.189554][ T5942] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 977.201564][ T5911] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 977.211811][ T5942] usb 1-1: can't read configurations, error -71 [ 977.231825][ T5911] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 977.243864][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 977.264936][ T5911] usb 7-1: Product: syz [ 977.290505][ T5911] usb 7-1: Manufacturer: syz [ 977.310255][ T5911] usb 7-1: SerialNumber: syz [ 977.343321][ T5911] usb 7-1: config 0 descriptor?? [ 977.380415][T15768] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 977.682014][T15768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.714575][T15780] delete_channel: no stack [ 977.723239][T15768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.737041][T15796] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2540'. [ 978.017409][ T9] usb 7-1: USB disconnect, device number 74 [ 978.047158][ T10] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 978.421581][ T10] usb 6-1: config 0 has no interfaces? [ 978.447874][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 978.461940][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.486406][ T10] usb 6-1: Product: syz [ 978.501002][ T10] usb 6-1: Manufacturer: syz [ 978.563138][ T10] usb 6-1: SerialNumber: syz [ 978.597085][T15811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.609424][T15811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.740279][ T10] usb 6-1: config 0 descriptor?? [ 979.156257][ T5911] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 979.399115][T15818] blktrace: Concurrent blktraces are not allowed on sg0 [ 979.417694][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.444950][ T5911] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 979.464272][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.517961][ T5911] usb 1-1: Product: syz [ 979.522420][ T5911] usb 1-1: Manufacturer: syz [ 979.528490][ T5911] usb 1-1: SerialNumber: syz [ 979.539461][ T5911] usb 1-1: config 0 descriptor?? [ 980.880852][ T981] usb 6-1: USB disconnect, device number 91 [ 981.370272][T15830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2545'. [ 981.447848][ T30] audit: type=1326 audit(1754286539.269:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15819 comm="syz.7.2544" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 981.522190][T15820] FAULT_INJECTION: forcing a failure. [ 981.522190][T15820] name failslab, interval 1, probability 0, space 0, times 0 [ 981.572918][T15820] CPU: 1 UID: 0 PID: 15820 Comm: syz.7.2544 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 981.572950][T15820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 981.572958][T15820] Call Trace: [ 981.572964][T15820] [ 981.572970][T15820] dump_stack_lvl+0x189/0x250 [ 981.572991][T15820] ? __pfx____ratelimit+0x10/0x10 [ 981.573009][T15820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 981.573023][T15820] ? __pfx__printk+0x10/0x10 [ 981.573040][T15820] ? __lock_acquire+0xab9/0xd20 [ 981.573063][T15820] should_fail_ex+0x414/0x560 [ 981.573084][T15820] should_failslab+0xa8/0x100 [ 981.573102][T15820] kmem_cache_alloc_noprof+0x73/0x3c0 [ 981.573118][T15820] ? skb_clone+0x212/0x3a0 [ 981.573137][T15820] skb_clone+0x212/0x3a0 [ 981.573155][T15820] __netlink_deliver_tap+0x404/0x850 [ 981.573177][T15820] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.573191][T15820] netlink_deliver_tap+0x19c/0x1b0 [ 981.573204][T15820] netlink_unicast+0x7fa/0x9e0 [ 981.573227][T15820] ? __pfx_netlink_unicast+0x10/0x10 [ 981.573246][T15820] ? netlink_sendmsg+0x642/0xb30 [ 981.573257][T15820] ? skb_put+0x11b/0x210 [ 981.573273][T15820] netlink_sendmsg+0x805/0xb30 [ 981.573292][T15820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.573306][T15820] ? __import_iovec+0x5d4/0x7f0 [ 981.573321][T15820] ? aa_sock_msg_perm+0x94/0x160 [ 981.573338][T15820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 981.573351][T15820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.573364][T15820] __sock_sendmsg+0x219/0x270 [ 981.573384][T15820] ____sys_sendmsg+0x505/0x830 [ 981.573403][T15820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.573428][T15820] ___sys_sendmsg+0x21f/0x2a0 [ 981.573448][T15820] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.573486][T15820] ? __fget_files+0x2a/0x420 [ 981.573501][T15820] ? __fget_files+0x3a0/0x420 [ 981.573525][T15820] __sys_sendmsg+0x164/0x220 [ 981.573540][T15820] ? __pfx___sys_sendmsg+0x10/0x10 [ 981.573561][T15820] ? arch_syscall_is_vdso_sigreturn+0x175/0x1a0 [ 981.573581][T15820] ? syscall_user_dispatch+0x4f/0x90 [ 981.573601][T15820] __do_fast_syscall_32+0xb6/0x2b0 [ 981.573615][T15820] ? lockdep_hardirqs_on+0x9c/0x150 [ 981.573630][T15820] do_fast_syscall_32+0x34/0x80 [ 981.573643][T15820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 981.573658][T15820] RIP: 0023:0xf703e539 [ 981.573670][T15820] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 981.573681][T15820] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 981.573705][T15820] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000080001e40 [ 981.573714][T15820] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 981.573721][T15820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 981.573729][T15820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 981.573736][T15820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 981.573755][T15820] [ 982.504073][ T5911] usb 1-1: USB disconnect, device number 111 [ 983.067544][ T10] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 983.304841][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 983.344987][ T10] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 983.379355][T15859] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2552'. [ 983.394290][ T10] usb 7-1: config 0 has no interface number 0 [ 983.407981][ T10] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 983.467749][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.482192][ T10] usb 7-1: Product: syz [ 983.517249][ T10] usb 7-1: Manufacturer: syz [ 983.522024][ T10] usb 7-1: SerialNumber: syz [ 983.558673][ T10] usb 7-1: config 0 descriptor?? [ 983.658674][ T10] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 983.909473][ T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 984.040566][ T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 984.206783][ T5911] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 984.376738][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.433964][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.486693][ T5911] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 984.531777][ C1] syz_tun: tun_net_xmit 86 [ 984.554173][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.620758][ T5911] usb 1-1: config 0 descriptor?? [ 985.088890][ T5911] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 985.115140][ T5911] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 985.230782][T15875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 985.284289][ T5911] cp2112 0003:10C4:EA90.0013: Part Number: 0x82 Device Version: 0xFE [ 985.485343][ T5911] cp2112 0003:10C4:EA90.0013: error requesting SMBus config [ 985.549859][ T5911] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -5 [ 985.822137][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 985.831799][ T9] usb 7-1: USB disconnect, device number 75 [ 985.843802][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 985.920534][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 985.961347][ T9] quatech2 7-1:0.51: device disconnected [ 986.064798][T15885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.075828][T15885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.185279][T15870] delete_channel: no stack [ 986.202180][T15886] netlink: 'syz.0.2553': attribute type 1 has an invalid length. [ 986.221175][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2553'. [ 987.187067][ T9] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 987.387406][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.533617][ T9] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 987.552506][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.574186][ T9] usb 7-1: Product: syz [ 987.624829][ T9] usb 7-1: Manufacturer: syz [ 987.657551][ T9] usb 7-1: SerialNumber: syz [ 987.673840][ T9] usb 7-1: config 0 descriptor?? [ 987.705225][ T10] usb 1-1: USB disconnect, device number 112 [ 988.088649][T15905] blktrace: Concurrent blktraces are not allowed on sg0 [ 989.468182][ T9] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 989.629401][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 989.639731][ T9] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 46, using maximum allowed: 30 [ 989.726895][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 989.782580][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 46 [ 989.899431][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 989.964057][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 990.035637][ T9] usb 6-1: SerialNumber: syz [ 990.104730][T15912] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 990.148524][T15928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.160755][T15928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.430688][T15912] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 990.443094][ T981] usb 7-1: USB disconnect, device number 76 [ 990.947880][ T9] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 991.053337][T15939] syz.6.2566 (15939): drop_caches: 2 [ 991.075227][T15939] syz.6.2566 (15939): drop_caches: 2 [ 991.561214][T15945] tipc: Enabled bearer , priority 0 [ 991.569760][T15945] syzkaller0: entered promiscuous mode [ 991.577268][T15945] syzkaller0: entered allmulticast mode [ 992.079722][T15946] tipc: Resetting bearer [ 992.649773][ T981] tipc: Node number set to 410028428 [ 992.862275][T15965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 993.203026][T15947] tipc: Resetting bearer [ 993.381112][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.388692][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.515059][T15947] tipc: Disabling bearer [ 993.598912][ T9] usb 6-1: USB disconnect, device number 92 [ 993.612276][ T9] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 993.978963][T15959] delete_channel: no stack [ 994.536413][T15984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.573091][T15984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.957250][ T10] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 996.253727][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.332804][ T10] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 996.384701][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.491650][ T10] usb 1-1: Product: syz [ 996.540523][ T10] usb 1-1: Manufacturer: syz [ 996.561433][ T10] usb 1-1: SerialNumber: syz [ 996.649978][ T10] usb 1-1: config 0 descriptor?? [ 997.330486][ T9] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 997.669878][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.757457][ T9] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 997.849838][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.872212][ T9] usb 6-1: Product: syz [ 997.924972][ T9] usb 6-1: Manufacturer: syz [ 997.981147][T16039] fuse: blksize only supported for fuseblk [ 998.098865][T16040] syz.7.2581 (16040): drop_caches: 2 [ 998.138452][T16040] syz.7.2581 (16040): drop_caches: 2 [ 998.410013][ T9] usb 6-1: SerialNumber: syz [ 998.430178][ T9] usb 6-1: config 0 descriptor?? [ 998.447188][ T10] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 998.626605][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 998.779060][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 999.062628][ T10] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 999.157335][ T10] usb 7-1: config 7 has no interface number 0 [ 999.179172][ T10] usb 7-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 999.605656][ T10] usb 7-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 999.656772][ T10] usb 7-1: config 7 interface 187 has no altsetting 0 [ 999.681078][ T10] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 999.850546][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.907278][ T10] usb 7-1: Product: syz [ 999.911525][ T10] usb 7-1: Manufacturer: syz [ 999.974759][ T10] usb 7-1: SerialNumber: syz [ 1000.020740][T16034] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1000.028982][T16034] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1000.091711][ T5942] usb 1-1: USB disconnect, device number 113 [ 1000.272894][ T10] usb 7-1: Limiting number of CPorts to U8_MAX [ 1000.304865][ T10] usb 7-1: Unknown endpoint type found, address 0x07 [ 1000.344138][ T10] usb 7-1: Unused bulk OUT endpoint found: 0x03 [ 1000.415296][ T10] usb 7-1: Not enough endpoints found in device, aborting! [ 1000.600332][ T10] usb 7-1: USB disconnect, device number 77 [ 1000.857234][ T5942] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1000.904264][ T5911] usb 6-1: USB disconnect, device number 93 [ 1001.018344][ T5942] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.031720][ T5942] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1001.093642][ T5942] usb 1-1: config 2 interface 0 has no altsetting 0 [ 1001.153956][T16067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.163840][T16067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.213259][ T5942] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1001.227754][T16067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.253339][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.304734][T16067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.327886][ T5942] usb 1-1: Product: syz [ 1001.358854][ T5942] usb 1-1: Manufacturer: syz [ 1001.363498][ T5942] usb 1-1: SerialNumber: syz [ 1001.434672][T16075] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2588'. [ 1001.618302][T16061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2584'. [ 1001.651221][ T5942] usb 1-1: USB disconnect, device number 114 [ 1001.697593][ T1542] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 1001.848185][ T10] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1001.881552][ T1542] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1001.898260][ T1542] usb 7-1: not running at top speed; connect to a high speed hub [ 1001.912732][ T1542] usb 7-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 1001.947796][ T1542] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1001.988938][ T1542] usb 7-1: config 1 has no interface number 1 [ 1002.014340][ T1542] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1002.028412][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1002.040493][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.072815][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.090615][ T1542] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 4 [ 1002.104507][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1002.116804][ T1542] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29436, setting to 1023 [ 1002.130186][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.144659][ T10] usb 6-1: config 0 descriptor?? [ 1002.173499][ T1542] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1002.183749][ T1542] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.192936][ T1542] usb 7-1: Product: syz [ 1002.203114][ T1542] usb 7-1: Manufacturer: syz [ 1002.221771][ T1542] usb 7-1: SerialNumber: syz [ 1002.436959][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1002.443063][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1002.514094][ T10] usb 6-1: USB disconnect, device number 94 [ 1002.552109][ T1542] hub 7-1:1.0: Invalid hub with more than one config or interface [ 1002.569547][ T1542] hub 7-1:1.0: probe with driver hub failed with error -22 [ 1002.610266][ T1542] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 1003.040734][ T1542] usb 7-1: USB disconnect, device number 78 [ 1003.212313][ T9060] udevd[9060]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.154148][T16117] syz.6.2595 (16117): drop_caches: 2 [ 1004.188255][T16117] syz.6.2595 (16117): drop_caches: 2 [ 1006.175419][ T30] audit: type=1326 audit(1754286563.969:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16139 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1006.326824][ T30] audit: type=1326 audit(1754286563.969:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16139 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1006.442000][ T30] audit: type=1326 audit(1754286563.969:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16139 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1006.515295][T16145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.527310][ T1542] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1006.539358][T16145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.554109][ T30] audit: type=1326 audit(1754286563.969:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16139 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1006.588180][T16145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.692644][T16145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.706815][ T1542] usb 7-1: Using ep0 maxpacket: 16 [ 1006.714786][ T1542] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.727107][ T1542] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1006.744697][ T1542] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.799655][ T1542] usb 7-1: config 0 descriptor?? [ 1006.929099][ T30] audit: type=1326 audit(1754286563.969:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16139 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1006.951140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1007.147441][ T30] audit: type=1326 audit(1754286563.969:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16139 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1007.214168][ T30] audit: type=1326 audit(1754286563.969:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16139 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1007.248920][ T10] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1007.301856][ T30] audit: type=1326 audit(1754286563.969:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16139 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1007.544322][ T30] audit: type=1326 audit(1754286563.969:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16139 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1007.567032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1007.624848][ T30] audit: type=1326 audit(1754286563.969:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16139 comm="syz.1.2600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1007.669404][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1007.675170][ T1542] usbhid 7-1:0.0: can't add hid device: -71 [ 1007.685180][ T1542] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1007.695174][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.777087][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.816800][ T1542] usb 7-1: USB disconnect, device number 79 [ 1007.837265][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1007.940811][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.978588][ T10] usb 1-1: config 0 descriptor?? [ 1008.250979][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1008.324227][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1008.498176][ T10] usb 1-1: USB disconnect, device number 115 [ 1008.911130][T16172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.924994][T16172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.126560][T16177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1010.207048][T16173] delete_channel: no stack [ 1010.580655][T16194] syz.7.2612 (16194): drop_caches: 2 [ 1010.597669][T16194] syz.7.2612 (16194): drop_caches: 2 [ 1011.636757][ T981] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1011.809307][ T981] usb 1-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 1011.836702][ T981] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 1011.890183][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.979036][ T981] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1012.120323][ T981] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1012.206714][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.268783][ T981] usb 1-1: config 0 descriptor?? [ 1012.306864][ T10] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1012.343669][T16214] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2617'. [ 1012.410319][T13422] Bluetooth: hci2: unexpected event 0x09 length: 59 > 3 [ 1012.488143][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1012.540163][T16224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1012.624728][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1012.649171][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1012.682927][T16200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.683624][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1012.692881][T16200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.720864][ T981] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.0014/input/input49 [ 1012.818205][ T10] usb 7-1: Product: syz [ 1012.824439][ T10] usb 7-1: Manufacturer: syz [ 1012.835383][ T10] usb 7-1: SerialNumber: syz [ 1012.868178][ T10] usb 7-1: config 0 descriptor?? [ 1012.882380][T16228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.904817][T16207] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1012.927696][ T981] uclogic 0003:28BD:0909.0014: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 1012.941842][T16228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.153262][T16213] delete_channel: no stack [ 1013.246219][T16207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.302436][T16207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.322633][ T10] usb 1-1: USB disconnect, device number 116 [ 1013.397736][T16231] fido_id[16231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1013.478974][ T981] usb 7-1: USB disconnect, device number 80 [ 1014.080924][T16245] tipc: Enabled bearer , priority 0 [ 1014.149316][T16245] syzkaller0: entered promiscuous mode [ 1014.154851][T16245] syzkaller0: entered allmulticast mode [ 1014.235054][T16245] tipc: Resetting bearer [ 1014.288776][T16244] tipc: Resetting bearer [ 1014.343514][T16244] tipc: Disabling bearer [ 1015.037437][ T5942] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1015.282657][ T5942] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1015.322102][ T5942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.334156][ T5942] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1015.347154][ T5942] usb 1-1: config 1 has no interface number 1 [ 1015.353399][ T5942] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1015.369962][ T5942] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1015.421672][T16276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.465123][ T5942] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1015.490222][T16276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.578391][T16268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2629'. [ 1015.602008][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.674789][ T5942] usb 1-1: Product: syz [ 1015.686670][ T5942] usb 1-1: Manufacturer: syz [ 1015.700043][ T5942] usb 1-1: SerialNumber: syz [ 1015.806047][ T981] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 1015.973154][ T981] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.988462][ T5942] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1015.997108][ T5942] usb 1-1: MIDIStreaming interface descriptor not found [ 1016.000166][ T981] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1016.021395][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.088710][ T981] usb 7-1: Product: syz [ 1016.108376][ T981] usb 7-1: Manufacturer: syz [ 1016.113178][ T981] usb 7-1: SerialNumber: syz [ 1016.397409][ T5942] usb 1-1: USB disconnect, device number 117 [ 1016.413827][ T981] usb 7-1: config 0 descriptor?? [ 1017.184328][ T9057] udevd[9057]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.236951][ T5911] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1018.677130][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.712236][ T5911] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1018.725526][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.797117][ T5911] usb 1-1: Product: syz [ 1018.812271][ T5911] usb 1-1: Manufacturer: syz [ 1018.828353][ T5911] usb 1-1: SerialNumber: syz [ 1018.921428][ T5911] usb 1-1: config 0 descriptor?? [ 1019.899185][ T5911] usb 7-1: USB disconnect, device number 81 [ 1021.166920][ T5935] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 1021.490110][ T5935] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.517129][ T5942] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1021.562842][ T5935] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1021.574510][ T5935] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.584763][ T5935] usb 7-1: Product: syz [ 1021.593290][ T5935] usb 7-1: Manufacturer: syz [ 1021.599474][ T5935] usb 7-1: SerialNumber: syz [ 1021.631724][ T5935] usb 7-1: config 0 descriptor?? [ 1021.641587][ T10] usb 1-1: USB disconnect, device number 118 [ 1021.687205][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 1021.695019][ T5942] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1021.750721][ T5942] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1022.009352][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1022.019922][ T5942] usb 6-1: Product: syz [ 1022.040810][ T5942] usb 6-1: Manufacturer: syz [ 1022.052249][ T5942] usb 6-1: SerialNumber: syz [ 1022.073124][ T5942] usb 6-1: config 0 descriptor?? [ 1022.082107][T16342] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1022.545701][T16342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.622990][T16342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.778118][ T5911] usb 6-1: USB disconnect, device number 95 [ 1023.362664][ T5942] usb 7-1: USB disconnect, device number 82 [ 1023.532178][T16368] fuse: blksize only supported for fuseblk [ 1024.013180][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2646'. [ 1024.037258][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2646'. [ 1024.099378][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2646'. [ 1024.118833][T16386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1024.221428][T16384] FAULT_INJECTION: forcing a failure. [ 1024.221428][T16384] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.270641][T16384] CPU: 0 UID: 0 PID: 16384 Comm: syz.6.2646 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1024.270674][T16384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1024.270687][T16384] Call Trace: [ 1024.270696][T16384] [ 1024.270706][T16384] dump_stack_lvl+0x189/0x250 [ 1024.270737][T16384] ? __pfx____ratelimit+0x10/0x10 [ 1024.270758][T16384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1024.270782][T16384] ? __pfx__printk+0x10/0x10 [ 1024.270814][T16384] ? __pfx___might_resched+0x10/0x10 [ 1024.270833][T16384] ? fs_reclaim_acquire+0x7d/0x100 [ 1024.270868][T16384] should_fail_ex+0x414/0x560 [ 1024.270914][T16384] should_failslab+0xa8/0x100 [ 1024.270944][T16384] __kmalloc_cache_noprof+0x70/0x3d0 [ 1024.270971][T16384] ? xfrm_policy_alloc+0x78/0x2b0 [ 1024.271000][T16384] xfrm_policy_alloc+0x78/0x2b0 [ 1024.271025][T16384] xfrm_policy_construct+0x39/0x6b0 [ 1024.271067][T16384] xfrm_add_policy+0x267/0x800 [ 1024.271103][T16384] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1024.271137][T16384] ? __nla_parse+0x40/0x60 [ 1024.271165][T16384] xfrm_user_rcv_msg+0x7a3/0xab0 [ 1024.271200][T16384] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1024.271270][T16384] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1024.271300][T16384] ? rcu_is_watching+0x15/0xb0 [ 1024.271321][T16384] ? trace_contention_end+0x39/0x120 [ 1024.271344][T16384] ? __mutex_lock+0x335/0x1360 [ 1024.271374][T16384] netlink_rcv_skb+0x205/0x470 [ 1024.271398][T16384] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1024.271428][T16384] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1024.271467][T16384] ? netlink_deliver_tap+0x2e/0x1b0 [ 1024.271488][T16384] ? netlink_deliver_tap+0x2e/0x1b0 [ 1024.271512][T16384] xfrm_netlink_rcv+0x79/0x90 [ 1024.271545][T16384] netlink_unicast+0x82f/0x9e0 [ 1024.271586][T16384] ? __pfx_netlink_unicast+0x10/0x10 [ 1024.271620][T16384] ? netlink_sendmsg+0x642/0xb30 [ 1024.271639][T16384] ? skb_put+0x11b/0x210 [ 1024.271668][T16384] netlink_sendmsg+0x805/0xb30 [ 1024.271702][T16384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.271727][T16384] ? __import_iovec+0x5d4/0x7f0 [ 1024.271752][T16384] ? aa_sock_msg_perm+0x94/0x160 [ 1024.271780][T16384] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1024.271802][T16384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.271824][T16384] __sock_sendmsg+0x219/0x270 [ 1024.271859][T16384] ____sys_sendmsg+0x505/0x830 [ 1024.271892][T16384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1024.271949][T16384] ___sys_sendmsg+0x21f/0x2a0 [ 1024.271978][T16384] ? __pfx____sys_sendmsg+0x10/0x10 [ 1024.272048][T16384] ? __fget_files+0x2a/0x420 [ 1024.272076][T16384] ? __fget_files+0x3a0/0x420 [ 1024.272118][T16384] __sys_sendmsg+0x164/0x220 [ 1024.272146][T16384] ? __pfx___sys_sendmsg+0x10/0x10 [ 1024.272192][T16384] ? lockdep_hardirqs_on+0x9c/0x150 [ 1024.272217][T16384] __do_fast_syscall_32+0xb6/0x2b0 [ 1024.272241][T16384] ? lockdep_hardirqs_on+0x9c/0x150 [ 1024.272267][T16384] do_fast_syscall_32+0x34/0x80 [ 1024.272290][T16384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1024.272315][T16384] RIP: 0023:0xf70fe539 [ 1024.272334][T16384] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1024.272353][T16384] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1024.272376][T16384] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000580 [ 1024.272391][T16384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1024.272404][T16384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1024.272417][T16384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1024.272429][T16384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1024.272462][T16384] [ 1024.638225][ C0] vkms_vblank_simulate: vblank timer overrun [ 1024.927090][T16381] delete_channel: no stack [ 1025.043661][T16388] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2647'. [ 1025.083200][T13422] Bluetooth: hci7: unexpected event 0x09 length: 59 > 3 [ 1025.527953][T16402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.549621][T16402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.610925][T16403] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1025.620948][T16403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1025.654057][T16403] tipc: New replicast peer: 255.255.255.255 [ 1025.663979][T16403] tipc: Enabled bearer , priority 10 [ 1025.826995][ T5911] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1025.930577][ T10] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1025.986523][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 1025.998042][ T5911] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1026.013342][ T5911] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1026.062502][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1026.099092][ T5911] usb 7-1: Product: syz [ 1026.394893][ T5911] usb 7-1: Manufacturer: syz [ 1026.423470][ T5911] usb 7-1: SerialNumber: syz [ 1026.426226][ T10] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1026.497398][ T10] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 1026.531563][ T5911] usb 7-1: config 0 descriptor?? [ 1026.544751][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1026.578538][ T10] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1026.623352][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1026.631156][T16392] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1026.645138][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.279281][T16392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.336312][T16392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.531487][T16416] blktrace: Concurrent blktraces are not allowed on sg0 [ 1027.584151][ T5942] usb 7-1: USB disconnect, device number 83 [ 1027.992554][ T10] ath6kl: Failed to submit usb control message: -71 [ 1028.014339][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 1028.105169][ T10] ath6kl: Unable to send get target info: -71 [ 1028.156977][ T10] ath6kl: Failed to init ath6kl core: -71 [ 1028.184384][ T10] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1028.223907][ T10] usb 6-1: USB disconnect, device number 96 [ 1029.226254][ T5911] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1029.282581][T16434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.329635][T16434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.396447][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 1029.412073][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.476269][ T5911] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1029.512528][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.590214][ T5911] usb 7-1: config 0 descriptor?? [ 1029.738287][T16443] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2660'. [ 1029.770870][T13422] Bluetooth: hci7: unexpected event 0x09 length: 59 > 3 [ 1030.116722][ T1542] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1030.238650][ T5911] usbhid 7-1:0.0: can't add hid device: -71 [ 1030.265174][ T5911] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1030.304804][ T5911] usb 7-1: USB disconnect, device number 84 [ 1030.342583][ T1542] usb 6-1: Using ep0 maxpacket: 16 [ 1030.365492][ T1542] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 1030.404482][ T1542] usb 6-1: config 0 has no interface number 0 [ 1030.411975][ T1542] usb 6-1: config 0 interface 160 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1030.439751][ T1542] usb 6-1: config 0 interface 160 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1030.455303][ T1542] usb 6-1: New USB device found, idVendor=07aa, idProduct=0017, bcdDevice=6c.f5 [ 1030.468633][ T1542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.517939][ T1542] usb 6-1: Product: syz [ 1030.537207][ T1542] usb 6-1: Manufacturer: syz [ 1030.542097][ T1542] usb 6-1: SerialNumber: syz [ 1030.578394][ T1542] usb 6-1: config 0 descriptor?? [ 1030.640776][T16446] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1030.693569][T16446] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1030.834723][T16464] syz.1.2664 (16464): drop_caches: 2 [ 1030.858938][T16464] syz.1.2664 (16464): drop_caches: 2 [ 1030.995452][T16446] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1031.036956][T16446] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1031.269799][ T1542] asix 6-1:0.160 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1031.344054][ T1542] asix 6-1:0.160: probe with driver asix failed with error -71 [ 1031.431895][ T1542] usb 6-1: USB disconnect, device number 97 [ 1031.592657][T16473] fuse: blksize only supported for fuseblk [ 1032.477363][ T5942] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1032.636935][ T5942] usb 7-1: Using ep0 maxpacket: 16 [ 1032.649981][ T5942] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1032.730931][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.742066][ T1542] usb 2-1: USB disconnect, device number 37 [ 1032.849756][ T5942] usb 7-1: config 0 descriptor?? [ 1032.950202][ T5942] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1034.092285][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1034.119966][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1034.132662][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1034.158535][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1034.192096][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1034.473299][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.702334][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.190906][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.215071][T16511] blktrace: Concurrent blktraces are not allowed on sg0 [ 1035.641609][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.844092][T16479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.856844][T16479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.024466][ T5942] gspca_sonixj: reg_w err -71 [ 1036.031146][ T5869] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1036.041040][ T5942] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1036.060806][ T5942] usb 7-1: USB disconnect, device number 85 [ 1036.219641][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1036.277374][ T5869] usb 1-1: not running at top speed; connect to a high speed hub [ 1036.287951][ T5868] Bluetooth: hci0: command tx timeout [ 1036.320244][ T5869] usb 1-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 1036.348711][ T5869] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1036.369981][ T5869] usb 1-1: config 1 has no interface number 1 [ 1036.442170][T16502] chnl_net:caif_netlink_parms(): no params data found [ 1036.473347][ T5869] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1036.515316][ T5869] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 4 [ 1036.552756][ T5869] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29436, setting to 1023 [ 1036.584892][ T5869] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1036.602471][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.639321][ T5869] usb 1-1: Product: syz [ 1036.715201][ T5869] usb 1-1: Manufacturer: syz [ 1036.793895][ T5869] usb 1-1: SerialNumber: syz [ 1036.932926][ T36] bridge_slave_1: left allmulticast mode [ 1036.940898][ T36] bridge_slave_1: left promiscuous mode [ 1036.948316][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.963536][ T36] bridge_slave_0: left allmulticast mode [ 1036.973504][ T36] bridge_slave_0: left promiscuous mode [ 1036.987099][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.057993][ T5869] hub 1-1:1.0: Invalid hub with more than one config or interface [ 1037.097244][ T5869] hub 1-1:1.0: probe with driver hub failed with error -22 [ 1037.113572][ T5869] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1037.137791][ T5942] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1037.262062][ T5869] usb 1-1: USB disconnect, device number 119 [ 1037.297337][ T5942] usb 7-1: Using ep0 maxpacket: 16 [ 1037.314216][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.429753][ T5942] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1037.458556][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.462866][ T9060] udevd[9060]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1037.527275][ T5942] usb 7-1: config 0 descriptor?? [ 1038.187282][ T9] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1038.208862][ T5942] usbhid 7-1:0.0: can't add hid device: -71 [ 1038.217888][ T5942] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1038.235082][ T5942] usb 7-1: USB disconnect, device number 86 [ 1038.369578][ T9] usb 1-1: config 0 has no interfaces? [ 1038.377202][ T5868] Bluetooth: hci0: command tx timeout [ 1038.389329][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1038.402311][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.424650][ T9] usb 1-1: Product: syz [ 1038.436740][ T9] usb 1-1: Manufacturer: syz [ 1038.456701][ T9] usb 1-1: SerialNumber: syz [ 1038.464875][ T9] usb 1-1: config 0 descriptor?? [ 1038.633392][T16540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.643180][T16540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.791940][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.812911][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.825469][ T36] bond0 (unregistering): Released all slaves [ 1038.896800][ T5935] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1039.055525][ T36] bond1 (unregistering): Released all slaves [ 1039.126772][ T5942] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1039.303625][ T5942] usb 7-1: config 0 has no interfaces? [ 1039.316903][ T5942] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1039.331799][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.341325][ T5942] usb 7-1: Product: syz [ 1039.346991][ T5942] usb 7-1: Manufacturer: syz [ 1039.351774][ T5942] usb 7-1: SerialNumber: syz [ 1039.353918][T16502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.376577][T16502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.380694][ T5942] usb 7-1: config 0 descriptor?? [ 1039.384055][T16502] bridge_slave_0: entered allmulticast mode [ 1039.411891][T16502] bridge_slave_0: entered promiscuous mode [ 1039.422295][T16502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.430826][T16502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.438950][T16502] bridge_slave_1: entered allmulticast mode [ 1039.450933][T16502] bridge_slave_1: entered promiscuous mode [ 1039.531621][T16502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.570270][T16502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.650903][T16502] team0: Port device team_slave_0 added [ 1039.711592][ T36] hsr_slave_0: left promiscuous mode [ 1039.732507][ T36] hsr_slave_1: left promiscuous mode [ 1039.744639][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.762537][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.787668][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.820524][ T36] batman_adv: batadv0: Interface deactivated: dummy0 [ 1039.829317][ T36] batman_adv: batadv0: Removing interface: dummy0 [ 1039.865148][ T36] veth1_macvtap: left promiscuous mode [ 1039.872217][ T36] veth0_macvtap: left promiscuous mode [ 1039.884233][ T36] veth1_vlan: left promiscuous mode [ 1039.891476][ T36] veth0_vlan: left promiscuous mode [ 1040.461892][ T5868] Bluetooth: hci0: command tx timeout [ 1041.001382][ T5942] usb 1-1: USB disconnect, device number 120 [ 1042.147494][ T5935] usb 7-1: USB disconnect, device number 87 [ 1042.402006][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1042.525426][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1042.534163][ T5868] Bluetooth: hci0: command tx timeout [ 1042.703579][T16570] fuse: blksize only supported for fuseblk [ 1044.177466][T16502] team0: Port device team_slave_1 added [ 1044.227513][ T981] usb 7-1: new full-speed USB device number 88 using dummy_hcd [ 1044.407130][ T981] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.530825][ T981] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1044.589315][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.622308][T16502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.658924][T16502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.658948][ T981] usb 7-1: Product: syz [ 1044.658972][ T981] usb 7-1: Manufacturer: syz [ 1044.685259][ C0] vkms_vblank_simulate: vblank timer overrun [ 1044.830954][T16502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.873732][ T981] usb 7-1: SerialNumber: syz [ 1044.877284][T16502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.893461][T16502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.896549][ T5911] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1044.919822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1044.958461][ T981] usb 7-1: config 0 descriptor?? [ 1044.991308][T16502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.564628][ T5911] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.604254][ T5911] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1045.719492][ T5911] usb 1-1: config 2 interface 0 has no altsetting 0 [ 1045.749169][ T5911] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1045.759533][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.770857][ T5911] usb 1-1: Product: syz [ 1045.784624][ T5911] usb 1-1: Manufacturer: syz [ 1045.792721][ T5911] usb 1-1: SerialNumber: syz [ 1045.937454][T16502] hsr_slave_0: entered promiscuous mode [ 1045.978447][T16502] hsr_slave_1: entered promiscuous mode [ 1045.987624][T16502] debugfs: 'hsr0' already exists in 'hsr' [ 1045.993548][T16502] Cannot create hsr debugfs directory [ 1046.052915][ T5911] usb 1-1: USB disconnect, device number 121 [ 1047.079825][ T9] usb 7-1: USB disconnect, device number 88 [ 1047.127097][ T5869] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1047.306724][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 1047.324512][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1047.361173][ T5869] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1047.416707][ T5942] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1047.724259][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1047.768925][ T5869] usb 1-1: Product: syz [ 1047.797682][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 1047.854884][ T5869] usb 1-1: Manufacturer: syz [ 1047.868219][ T5942] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1047.895219][ T5869] usb 1-1: SerialNumber: syz [ 1047.930598][ T5942] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1047.956741][ T5869] usb 1-1: config 0 descriptor?? [ 1047.971460][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1047.991601][T16601] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1048.022276][ T5942] usb 6-1: Product: syz [ 1048.045455][T16502] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1048.057430][T16619] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2691'. [ 1048.088926][ T5942] usb 6-1: Manufacturer: syz [ 1048.092657][T16502] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1048.106794][ T5942] usb 6-1: SerialNumber: syz [ 1048.179447][ T5942] usb 6-1: config 0 descriptor?? [ 1048.179456][ T5868] Bluetooth: hci2: unexpected event 0x09 length: 59 > 3 [ 1048.185049][T16502] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1048.188411][T16611] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1048.367968][ T5942] chaoskey 6-1:0.0: Unable to register with hwrng [ 1048.375299][T16601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.410588][T16502] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1048.445125][T16601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.645076][ T5944] usb 1-1: USB disconnect, device number 122 [ 1049.080657][T16608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.122641][T16608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.210450][T16502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.221923][ T1542] usb 6-1: USB disconnect, device number 99 [ 1049.399786][T16502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.443117][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.450562][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.532299][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.539721][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.761632][T16502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.943570][T16502] veth0_vlan: entered promiscuous mode [ 1049.974097][T16502] veth1_vlan: entered promiscuous mode [ 1050.061100][T16502] veth0_macvtap: entered promiscuous mode [ 1050.088781][T16649] fuse: blksize only supported for fuseblk [ 1050.146923][T16648] blktrace: Concurrent blktraces are not allowed on sg0 [ 1050.221524][T16502] veth1_macvtap: entered promiscuous mode [ 1050.264967][T16502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.316873][T16502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.402101][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.441288][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.537039][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.550750][T10780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.830443][T10783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.871689][T10783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.006686][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.038347][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.057428][ T5869] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1051.238851][ T5869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.262331][ T5869] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1051.273732][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.296863][ T5869] usb 6-1: Product: syz [ 1051.301199][ T5869] usb 6-1: Manufacturer: syz [ 1051.322685][ T5869] usb 6-1: SerialNumber: syz [ 1051.352944][ T5869] usb 6-1: config 0 descriptor?? [ 1051.707063][ T5869] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1051.868088][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 1051.878798][ T5869] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1051.895184][ T5869] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1051.920490][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.953799][ T5869] usb 2-1: Product: syz [ 1051.964797][ T5869] usb 2-1: Manufacturer: syz [ 1051.990543][ T5869] usb 2-1: SerialNumber: syz [ 1052.014725][ T5869] usb 2-1: config 0 descriptor?? [ 1052.035202][ T5869] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1052.046855][ T5869] usb 2-1: Detected FT232R [ 1052.380014][T16675] [ 1052.382498][T16675] ===================================================== [ 1052.389605][T16675] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1052.397165][T16675] 6.16.0-syzkaller-11322-g352af6a011d5 #0 Not tainted [ 1052.403959][T16675] ----------------------------------------------------- [ 1052.411007][T16675] syz.6.2698/16675 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1052.418762][T16675] ffff88804fa3c2b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1052.427592][T16675] [ 1052.427592][T16675] and this task is already holding: [ 1052.435239][T16675] ffff888029b08028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1052.445036][T16675] which would create a new lock dependency: [ 1052.450955][T16675] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1052.459178][T16675] [ 1052.459178][T16675] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1052.468630][T16675] (&client->buffer_lock){..-.}-{3:3} [ 1052.468666][T16675] [ 1052.468666][T16675] ... which became SOFTIRQ-irq-safe at: [ 1052.481860][T16675] lock_acquire+0x120/0x360 [ 1052.486505][T16675] _raw_spin_lock+0x2e/0x40 [ 1052.491140][T16675] evdev_pass_values+0xb9/0xbd0 [ 1052.496494][T16675] evdev_events+0x1e6/0x340 [ 1052.501126][T16675] input_pass_values+0x288/0x890 [ 1052.506214][T16675] input_event_dispose+0x3e5/0x6b0 [ 1052.511440][T16675] input_event+0x89/0xe0 [ 1052.515823][T16675] hidinput_hid_event+0x12d7/0x1c90 [ 1052.521249][T16675] hid_process_event+0x4be/0x620 [ 1052.526380][T16675] hid_report_raw_event+0xe91/0x16d0 [ 1052.531796][T16675] hid_input_report+0x43e/0x520 [ 1052.536756][T16675] hid_irq_in+0x47e/0x6d0 [ 1052.541180][T16675] __usb_hcd_giveback_urb+0x417/0x690 [ 1052.546681][T16675] dummy_timer+0x862/0x4550 [ 1052.551285][T16675] __hrtimer_run_queues+0x529/0xc60 [ 1052.556570][T16675] hrtimer_run_softirq+0x187/0x2b0 [ 1052.561776][T16675] handle_softirqs+0x286/0x870 [ 1052.566670][T16675] __irq_exit_rcu+0xca/0x1f0 [ 1052.571361][T16675] irq_exit_rcu+0x9/0x30 [ 1052.575705][T16675] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1052.581509][T16675] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1052.587600][T16675] xas_reload+0x7c/0x470 [ 1052.591931][T16675] next_uptodate_folio+0x15f/0x5d0 [ 1052.597145][T16675] filemap_map_pages+0x102b/0x1740 [ 1052.602456][T16675] __handle_mm_fault+0x34ac/0x5440 [ 1052.607687][T16675] handle_mm_fault+0x40a/0x8e0 [ 1052.612602][T16675] __get_user_pages+0x1699/0x2ce0 [ 1052.617757][T16675] populate_vma_page_range+0x29f/0x3a0 [ 1052.623323][T16675] __mm_populate+0x24c/0x380 [ 1052.628084][T16675] vm_mmap_pgoff+0x387/0x4d0 [ 1052.632991][T16675] __do_fast_syscall_32+0xb6/0x2b0 [ 1052.638402][T16675] do_fast_syscall_32+0x34/0x80 [ 1052.643357][T16675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1052.649815][T16675] [ 1052.649815][T16675] to a SOFTIRQ-irq-unsafe lock: [ 1052.656970][T16675] (tasklist_lock){.+.+}-{3:3} [ 1052.657001][T16675] [ 1052.657001][T16675] ... which became SOFTIRQ-irq-unsafe at: [ 1052.669647][T16675] ... [ 1052.669656][T16675] lock_acquire+0x120/0x360 [ 1052.676872][T16675] _raw_read_lock+0x36/0x50 [ 1052.681493][T16675] __do_wait+0xde/0x740 [ 1052.685861][T16675] do_wait+0x1f8/0x520 [ 1052.690039][T16675] kernel_wait+0xab/0x170 [ 1052.694479][T16675] call_usermodehelper_exec_work+0xbe/0x230 [ 1052.700765][T16675] process_scheduled_works+0xade/0x17b0 [ 1052.706529][T16675] worker_thread+0x8a0/0xda0 [ 1052.711283][T16675] kthread+0x711/0x8a0 [ 1052.715482][T16675] ret_from_fork+0x3f9/0x770 [ 1052.720167][T16675] ret_from_fork_asm+0x1a/0x30 [ 1052.725182][T16675] [ 1052.725182][T16675] other info that might help us debug this: [ 1052.725182][T16675] [ 1052.735524][T16675] Chain exists of: [ 1052.735524][T16675] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1052.735524][T16675] [ 1052.748712][T16675] Possible interrupt unsafe locking scenario: [ 1052.748712][T16675] [ 1052.757130][T16675] CPU0 CPU1 [ 1052.762509][T16675] ---- ---- [ 1052.768149][T16675] lock(tasklist_lock); [ 1052.772416][T16675] local_irq_disable(); [ 1052.779184][T16675] lock(&client->buffer_lock); [ 1052.786576][T16675] lock(&new->fa_lock); [ 1052.793370][T16675] [ 1052.796863][T16675] lock(&client->buffer_lock); [ 1052.801989][T16675] [ 1052.801989][T16675] *** DEADLOCK *** [ 1052.801989][T16675] [ 1052.810351][T16675] 7 locks held by syz.6.2698/16675: [ 1052.815746][T16675] #0: ffff888146bb0118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1052.825001][T16675] #1: ffff88801eb12230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1052.835167][T16675] #2: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1052.845046][T16675] #3: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1052.854673][T16675] #4: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1052.863852][T16675] #5: ffff888029b08028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1052.874329][T16675] #6: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1052.883502][T16675] [ 1052.883502][T16675] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1052.894009][T16675] -> (&client->buffer_lock){..-.}-{3:3} { [ 1052.899783][T16675] IN-SOFTIRQ-W at: [ 1052.903763][T16675] lock_acquire+0x120/0x360 [ 1052.910215][T16675] _raw_spin_lock+0x2e/0x40 [ 1052.916416][T16675] evdev_pass_values+0xb9/0xbd0 [ 1052.922941][T16675] evdev_events+0x1e6/0x340 [ 1052.929177][T16675] input_pass_values+0x288/0x890 [ 1052.935793][T16675] input_event_dispose+0x3e5/0x6b0 [ 1052.942563][T16675] input_event+0x89/0xe0 [ 1052.948520][T16675] hidinput_hid_event+0x12d7/0x1c90 [ 1052.955421][T16675] hid_process_event+0x4be/0x620 [ 1052.962133][T16675] hid_report_raw_event+0xe91/0x16d0 [ 1052.969100][T16675] hid_input_report+0x43e/0x520 [ 1052.975631][T16675] hid_irq_in+0x47e/0x6d0 [ 1052.981771][T16675] __usb_hcd_giveback_urb+0x417/0x690 [ 1052.988823][T16675] dummy_timer+0x862/0x4550 [ 1052.995072][T16675] __hrtimer_run_queues+0x529/0xc60 [ 1053.002034][T16675] hrtimer_run_softirq+0x187/0x2b0 [ 1053.008814][T16675] handle_softirqs+0x286/0x870 [ 1053.015407][T16675] __irq_exit_rcu+0xca/0x1f0 [ 1053.021771][T16675] irq_exit_rcu+0x9/0x30 [ 1053.027780][T16675] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1053.035179][T16675] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1053.042933][T16675] xas_reload+0x7c/0x470 [ 1053.048965][T16675] next_uptodate_folio+0x15f/0x5d0 [ 1053.055930][T16675] filemap_map_pages+0x102b/0x1740 [ 1053.062816][T16675] __handle_mm_fault+0x34ac/0x5440 [ 1053.069620][T16675] handle_mm_fault+0x40a/0x8e0 [ 1053.076078][T16675] __get_user_pages+0x1699/0x2ce0 [ 1053.082892][T16675] populate_vma_page_range+0x29f/0x3a0 [ 1053.090380][T16675] __mm_populate+0x24c/0x380 [ 1053.096841][T16675] vm_mmap_pgoff+0x387/0x4d0 [ 1053.103232][T16675] __do_fast_syscall_32+0xb6/0x2b0 [ 1053.110030][T16675] do_fast_syscall_32+0x34/0x80 [ 1053.116555][T16675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.124628][T16675] INITIAL USE at: [ 1053.128625][T16675] lock_acquire+0x120/0x360 [ 1053.134762][T16675] _raw_spin_lock+0x2e/0x40 [ 1053.140929][T16675] evdev_pass_values+0xb9/0xbd0 [ 1053.147377][T16675] evdev_events+0x1e6/0x340 [ 1053.153465][T16675] input_pass_values+0x288/0x890 [ 1053.160025][T16675] input_event_dispose+0x330/0x6b0 [ 1053.166891][T16675] input_inject_event+0x1dd/0x340 [ 1053.173600][T16675] evdev_write+0x2fc/0x480 [ 1053.179799][T16675] vfs_write+0x27b/0xa90 [ 1053.185641][T16675] ksys_write+0x145/0x250 [ 1053.191560][T16675] __do_fast_syscall_32+0xb6/0x2b0 [ 1053.198284][T16675] do_fast_syscall_32+0x34/0x80 [ 1053.204961][T16675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.212864][T16675] } [ 1053.215371][T16675] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1053.223720][T16675] [ 1053.223720][T16675] the dependencies between the lock to be acquired [ 1053.223736][T16675] and SOFTIRQ-irq-unsafe lock: [ 1053.237327][T16675] -> (tasklist_lock){.+.+}-{3:3} { [ 1053.242647][T16675] HARDIRQ-ON-R at: [ 1053.246811][T16675] lock_acquire+0x120/0x360 [ 1053.253473][T16675] _raw_read_lock+0x36/0x50 [ 1053.260173][T16675] __do_wait+0xde/0x740 [ 1053.266338][T16675] do_wait+0x1f8/0x520 [ 1053.272419][T16675] kernel_wait+0xab/0x170 [ 1053.278842][T16675] call_usermodehelper_exec_work+0xbe/0x230 [ 1053.286762][T16675] process_scheduled_works+0xade/0x17b0 [ 1053.294410][T16675] worker_thread+0x8a0/0xda0 [ 1053.301080][T16675] kthread+0x711/0x8a0 [ 1053.307159][T16675] ret_from_fork+0x3f9/0x770 [ 1053.313754][T16675] ret_from_fork_asm+0x1a/0x30 [ 1053.320874][T16675] SOFTIRQ-ON-R at: [ 1053.325043][T16675] lock_acquire+0x120/0x360 [ 1053.331560][T16675] _raw_read_lock+0x36/0x50 [ 1053.338093][T16675] __do_wait+0xde/0x740 [ 1053.344343][T16675] do_wait+0x1f8/0x520 [ 1053.350416][T16675] kernel_wait+0xab/0x170 [ 1053.356800][T16675] call_usermodehelper_exec_work+0xbe/0x230 [ 1053.365053][T16675] process_scheduled_works+0xade/0x17b0 [ 1053.372710][T16675] worker_thread+0x8a0/0xda0 [ 1053.379404][T16675] kthread+0x711/0x8a0 [ 1053.385523][T16675] ret_from_fork+0x3f9/0x770 [ 1053.392241][T16675] ret_from_fork_asm+0x1a/0x30 [ 1053.399127][T16675] INITIAL USE at: [ 1053.403240][T16675] lock_acquire+0x120/0x360 [ 1053.409957][T16675] _raw_write_lock_irq+0xa2/0xf0 [ 1053.416847][T16675] copy_process+0x224f/0x3c00 [ 1053.423450][T16675] kernel_clone+0x21e/0x840 [ 1053.429984][T16675] user_mode_thread+0xdd/0x140 [ 1053.436675][T16675] rest_init+0x23/0x300 [ 1053.442747][T16675] start_kernel+0x3a9/0x410 [ 1053.449382][T16675] x86_64_start_reservations+0x24/0x30 [ 1053.456887][T16675] x86_64_start_kernel+0x143/0x1c0 [ 1053.463927][T16675] common_startup_64+0x13e/0x147 [ 1053.470805][T16675] INITIAL READ USE at: [ 1053.475369][T16675] lock_acquire+0x120/0x360 [ 1053.482253][T16675] _raw_read_lock+0x36/0x50 [ 1053.489154][T16675] __do_wait+0xde/0x740 [ 1053.495688][T16675] do_wait+0x1f8/0x520 [ 1053.502115][T16675] kernel_wait+0xab/0x170 [ 1053.508836][T16675] call_usermodehelper_exec_work+0xbe/0x230 [ 1053.517217][T16675] process_scheduled_works+0xade/0x17b0 [ 1053.525144][T16675] worker_thread+0x8a0/0xda0 [ 1053.532384][T16675] kthread+0x711/0x8a0 [ 1053.538837][T16675] ret_from_fork+0x3f9/0x770 [ 1053.545800][T16675] ret_from_fork_asm+0x1a/0x30 [ 1053.553015][T16675] } [ 1053.555703][T16675] ... key at: [] tasklist_lock+0x18/0x40 [ 1053.563961][T16675] ... acquired at: [ 1053.567946][T16675] lock_acquire+0x120/0x360 [ 1053.572741][T16675] _raw_read_lock+0x36/0x50 [ 1053.577465][T16675] send_sigurg+0x12b/0x420 [ 1053.582072][T16675] sk_send_sigurg+0x6c/0x2e0 [ 1053.586848][T16675] queue_oob+0x420/0x4f0 [ 1053.591320][T16675] unix_stream_sendmsg+0xc3f/0xdf0 [ 1053.596626][T16675] __sock_sendmsg+0x219/0x270 [ 1053.601567][T16675] ____sys_sendmsg+0x52d/0x830 [ 1053.606593][T16675] ___sys_sendmsg+0x21f/0x2a0 [ 1053.611577][T16675] __sys_sendmmsg+0x28e/0x430 [ 1053.616500][T16675] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1053.622263][T16675] __do_fast_syscall_32+0xb6/0x2b0 [ 1053.627657][T16675] do_fast_syscall_32+0x34/0x80 [ 1053.632707][T16675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.639235][T16675] [ 1053.641574][T16675] -> (&f_owner->lock){....}-{3:3} { [ 1053.646907][T16675] INITIAL USE at: [ 1053.650998][T16675] lock_acquire+0x120/0x360 [ 1053.657257][T16675] _raw_write_lock_irq+0xa2/0xf0 [ 1053.663959][T16675] __f_setown+0x67/0x370 [ 1053.669962][T16675] do_fcntl+0x15ff/0x1910 [ 1053.676148][T16675] do_compat_fcntl64+0x477/0x720 [ 1053.682910][T16675] __do_fast_syscall_32+0xb6/0x2b0 [ 1053.689817][T16675] do_fast_syscall_32+0x34/0x80 [ 1053.696448][T16675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.704631][T16675] INITIAL READ USE at: [ 1053.709087][T16675] lock_acquire+0x120/0x360 [ 1053.715978][T16675] _raw_read_lock_irqsave+0xaf/0x100 [ 1053.723469][T16675] send_sigio+0x38/0x370 [ 1053.729914][T16675] dnotify_handle_event+0x169/0x440 [ 1053.737297][T16675] fsnotify+0x1814/0x1a80 [ 1053.743832][T16675] vfs_mkdir+0x477/0x510 [ 1053.750274][T16675] do_mkdirat+0x247/0x590 [ 1053.756809][T16675] __ia32_sys_mkdirat+0x87/0xa0 [ 1053.764006][T16675] __do_fast_syscall_32+0xb6/0x2b0 [ 1053.771310][T16675] do_fast_syscall_32+0x34/0x80 [ 1053.778426][T16675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.786938][T16675] } [ 1053.789537][T16675] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1053.798759][T16675] ... acquired at: [ 1053.802684][T16675] lock_acquire+0x120/0x360 [ 1053.807480][T16675] _raw_read_lock_irqsave+0xaf/0x100 [ 1053.812950][T16675] send_sigio+0x38/0x370 [ 1053.817365][T16675] kill_fasync+0x24d/0x4d0 [ 1053.822077][T16675] sock_wake_async+0x137/0x160 [ 1053.827126][T16675] sock_def_readable+0x3bb/0x550 [ 1053.832351][T16675] queue_oob+0x44f/0x4f0 [ 1053.836784][T16675] unix_stream_sendmsg+0xc3f/0xdf0 [ 1053.842166][T16675] __sock_sendmsg+0x219/0x270 [ 1053.847049][T16675] ____sys_sendmsg+0x52d/0x830 [ 1053.852141][T16675] ___sys_sendmsg+0x21f/0x2a0 [ 1053.856993][T16675] __sys_sendmmsg+0x28e/0x430 [ 1053.861845][T16675] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1053.867650][T16675] __do_fast_syscall_32+0xb6/0x2b0 [ 1053.872973][T16675] do_fast_syscall_32+0x34/0x80 [ 1053.878353][T16675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.884918][T16675] [ 1053.887262][T16675] -> (&new->fa_lock){....}-{3:3} { [ 1053.892455][T16675] INITIAL USE at: [ 1053.896374][T16675] lock_acquire+0x120/0x360 [ 1053.902567][T16675] _raw_write_lock_irq+0xa2/0xf0 [ 1053.909138][T16675] fasync_remove_entry+0xf1/0x1c0 [ 1053.915749][T16675] pipe_fasync+0xff/0x1e0 [ 1053.921772][T16675] __fput+0x89f/0xa70 [ 1053.927331][T16675] task_work_run+0x1d1/0x260 [ 1053.933700][T16675] do_exit+0x6b5/0x2300 [ 1053.939560][T16675] do_group_exit+0x21c/0x2d0 [ 1053.945748][T16675] get_signal+0x1286/0x1340 [ 1053.952044][T16675] arch_do_signal_or_restart+0x9a/0x750 [ 1053.959176][T16675] exit_to_user_mode_loop+0x75/0x110 [ 1053.966207][T16675] __do_fast_syscall_32+0x1f4/0x2b0 [ 1053.972964][T16675] do_fast_syscall_32+0x34/0x80 [ 1053.979691][T16675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.987719][T16675] INITIAL READ USE at: [ 1053.992161][T16675] lock_acquire+0x120/0x360 [ 1053.998686][T16675] _raw_read_lock_irqsave+0xaf/0x100 [ 1054.005988][T16675] kill_fasync+0x199/0x4d0 [ 1054.012427][T16675] sock_wake_async+0x137/0x160 [ 1054.019233][T16675] sk_send_sigurg+0x1f1/0x2e0 [ 1054.026208][T16675] queue_oob+0x420/0x4f0 [ 1054.032619][T16675] unix_stream_sendmsg+0xc3f/0xdf0 [ 1054.039756][T16675] __sock_sendmsg+0x219/0x270 [ 1054.046618][T16675] ____sys_sendmsg+0x52d/0x830 [ 1054.053397][T16675] ___sys_sendmsg+0x21f/0x2a0 [ 1054.060109][T16675] __sys_sendmmsg+0x28e/0x430 [ 1054.066801][T16675] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1054.074554][T16675] __do_fast_syscall_32+0xb6/0x2b0 [ 1054.081802][T16675] do_fast_syscall_32+0x34/0x80 [ 1054.088855][T16675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1054.097301][T16675] } [ 1054.099827][T16675] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1054.108877][T16675] ... acquired at: [ 1054.112701][T16675] lock_acquire+0x120/0x360 [ 1054.117482][T16675] _raw_read_lock_irqsave+0xaf/0x100 [ 1054.122977][T16675] kill_fasync+0x199/0x4d0 [ 1054.127751][T16675] evdev_pass_values+0x627/0xbd0 [ 1054.133082][T16675] evdev_events+0x1e6/0x340 [ 1054.137995][T16675] input_pass_values+0x288/0x890 [ 1054.143154][T16675] input_event_dispose+0x330/0x6b0 [ 1054.148476][T16675] input_inject_event+0x1dd/0x340 [ 1054.153778][T16675] evdev_write+0x2fc/0x480 [ 1054.158366][T16675] vfs_write+0x27b/0xa90 [ 1054.162805][T16675] ksys_write+0x145/0x250 [ 1054.167353][T16675] __do_fast_syscall_32+0xb6/0x2b0 [ 1054.172840][T16675] do_fast_syscall_32+0x34/0x80 [ 1054.177885][T16675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1054.184649][T16675] [ 1054.186988][T16675] [ 1054.186988][T16675] stack backtrace: [ 1054.192886][T16675] CPU: 1 UID: 0 PID: 16675 Comm: syz.6.2698 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1054.192915][T16675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1054.192928][T16675] Call Trace: [ 1054.192940][T16675] [ 1054.192949][T16675] dump_stack_lvl+0x189/0x250 [ 1054.192979][T16675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1054.192996][T16675] ? __pfx__printk+0x10/0x10 [ 1054.193015][T16675] validate_chain+0x1f05/0x2140 [ 1054.193034][T16675] __lock_acquire+0xab9/0xd20 [ 1054.193059][T16675] ? kill_fasync+0x199/0x4d0 [ 1054.193089][T16675] lock_acquire+0x120/0x360 [ 1054.193114][T16675] ? kill_fasync+0x199/0x4d0 [ 1054.193139][T16675] _raw_read_lock_irqsave+0xaf/0x100 [ 1054.193158][T16675] ? kill_fasync+0x199/0x4d0 [ 1054.193169][T16675] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1054.193186][T16675] ? do_raw_spin_lock+0x121/0x290 [ 1054.193207][T16675] kill_fasync+0x199/0x4d0 [ 1054.193228][T16675] ? kill_fasync+0x53/0x4d0 [ 1054.193248][T16675] evdev_pass_values+0x627/0xbd0 [ 1054.193271][T16675] ? evdev_pass_values+0x651/0xbd0 [ 1054.193291][T16675] evdev_events+0x1e6/0x340 [ 1054.193303][T16675] ? evdev_events+0x79/0x340 [ 1054.193314][T16675] ? input_pass_values+0x8d/0x890 [ 1054.193325][T16675] input_pass_values+0x288/0x890 [ 1054.193338][T16675] ? input_handle_event+0x70c/0xf30 [ 1054.193360][T16675] input_event_dispose+0x330/0x6b0 [ 1054.193388][T16675] input_inject_event+0x1dd/0x340 [ 1054.193415][T16675] ? input_inject_event+0xb6/0x340 [ 1054.193440][T16675] evdev_write+0x2fc/0x480 [ 1054.193454][T16675] ? __pfx_evdev_write+0x10/0x10 [ 1054.193466][T16675] ? bpf_lsm_file_permission+0x9/0x20 [ 1054.193481][T16675] ? security_file_permission+0x75/0x290 [ 1054.193495][T16675] ? rw_verify_area+0x255/0x4d0 [ 1054.193516][T16675] ? __lock_acquire+0xab9/0xd20 [ 1054.193541][T16675] ? __pfx_evdev_write+0x10/0x10 [ 1054.193561][T16675] vfs_write+0x27b/0xa90 [ 1054.193587][T16675] ? __pfx_vfs_write+0x10/0x10 [ 1054.193604][T16675] ? __fget_files+0x2a/0x420 [ 1054.193621][T16675] ? __fget_files+0x2a/0x420 [ 1054.193643][T16675] ? __fget_files+0x3a0/0x420 [ 1054.193665][T16675] ? __fget_files+0x2a/0x420 [ 1054.193695][T16675] ksys_write+0x145/0x250 [ 1054.193719][T16675] ? __pfx_ksys_write+0x10/0x10 [ 1054.193743][T16675] ? lockdep_hardirqs_on+0x9c/0x150 [ 1054.193756][T16675] __do_fast_syscall_32+0xb6/0x2b0 [ 1054.193771][T16675] do_fast_syscall_32+0x34/0x80 [ 1054.193783][T16675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1054.193799][T16675] RIP: 0023:0xf70fe539 [ 1054.193817][T16675] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1054.193835][T16675] RSP: 002b:00000000f50ac55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1054.193858][T16675] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1054.193872][T16675] RDX: 000000000000005b RSI: 0000000000000000 RDI: 0000000000000000 [ 1054.193885][T16675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1054.193897][T16675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1054.193905][T16675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1054.193917][T16675] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1054.688912][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.695654][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.841942][ T981] usb 6-1: USB disconnect, device number 100 [ 1054.918079][ T5869] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1055.045699][ T5869] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1055.096102][ T5869] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1055.148908][ T5869] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1055.207231][ T5869] usb 2-1: USB disconnect, device number 38 [ 1055.259105][ T5869] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1055.288043][ T5869] ftdi_sio 2-1:0.0: device disconnected [ 1056.766842][T13422] Bluetooth: hci2: command 0x0406 tx timeout