last executing test programs: 21.887668224s ago: executing program 3 (id=167): setregid(0xee00, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c0000000002010400000000000000e6eef2088a3b1df0bd200024000280140001800800000000"], 0x6c}}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x52, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000080)=0x400000, 0x4) r3 = getgid() syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x43, 0x24, 0x21, 0x8, 0x13d8, 0x1, 0x3062, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2f, 0x97, 0x9d}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8008550e, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000001d00)={0x18, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) setresgid(0x0, r3, 0x0) epoll_create1(0x80000) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {r8, r3}}, './file0\x00'}) 19.170450489s ago: executing program 3 (id=176): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xc, 0x4}) sendmsg(0xffffffffffffffff, 0x0, 0x44004) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002192ea0845050c800a030102030109021275a8000000000904"], 0x0) 14.305337493s ago: executing program 2 (id=180): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x55e3, &(0x7f0000000300)={0x0, 0xf76b, 0x2, 0xfffffffd, 0xfffffffe, 0x0, r0}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780), 0x1) 14.225918663s ago: executing program 3 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x1ffc, 0x1ffff, 0x6, 0x84, {0x4, 0x25, 0x7, 0x80000000, 0x4, 0xffff, 0x7d59, 0x8, 0x4, 0xc000, 0x7f, r4, r5, 0xcb, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.709019673s ago: executing program 2 (id=184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) 12.467175274s ago: executing program 2 (id=186): setregid(0xee00, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c0000000002010400000000000000e6eef2088a3b1df0bd200024000280140001800800000000"], 0x6c}}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x52, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000080)=0x400000, 0x4) r3 = getgid() syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x43, 0x24, 0x21, 0x8, 0x13d8, 0x1, 0x3062, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2f, 0x97, 0x9d}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8008550e, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000001d00)={0x18, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) setresgid(0x0, r3, 0x0) epoll_create1(0x80000) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {r8, r3}}, './file0\x00'}) 12.090926047s ago: executing program 3 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 9.033352222s ago: executing program 3 (id=190): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x142000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000600)={0x53, 0x1, 0x0, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)=[{&(0x7f0000000100)=""/226, 0xe2}]}, 0x0, 0x0, 0x840804, 0x10032, 0x2, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) remap_file_pages(&(0x7f0000881000/0x4000)=nil, 0x4000, 0x0, 0x8001, 0x2000) syz_usb_connect$uac1(0x6, 0xe4, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0xc, 0x170, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@processing_unit={0x7, 0x24, 0x7, 0x6, 0x6, 0x9}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x2, 0x6, "ff9a"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x6, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x4, 0x4, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0xa, 0x5, "c81b6686e2ae8e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0xfffe, 0x6, "7c37f785af"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x3, 0x1, "51e349"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x1, 0x7a, 'xX='}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x1, 0x1, "811105"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x1, 0x2, 'w'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x9, 0x5, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x93, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x3, 0x5, {0x7, 0x25, 0x1, 0x0, 0xe4, 0xd6}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x3, 0x0, 0x20, 0x3}, 0x34, &(0x7f00000001c0)={0x5, 0xf, 0x34, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "51128097c19b423019a234b9dee400ab"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "a1e70007dbd1b60098b21892f2243062"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180c}}]}) 7.663093709s ago: executing program 2 (id=194): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x703d25, 0x2, {0x0, 0x0, 0x0, r1, {0x10, 0xf}, {}, {0xd, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1d2eb}]}}]}, 0x3c}}, 0xd4) 7.321377938s ago: executing program 0 (id=196): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000000), 0x8) 7.197592495s ago: executing program 4 (id=197): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x5, 0x505a6dfb, 0x4, 0x7, 0x4, 0x0, [{0x6, 0x7, 0x5, '\x00', 0x2008}, {0x1ff, 0x9, 0xbc75, '\x00', 0x100c}, {0x40, 0xa14, 0x8, '\x00', 0x80}, {0x60a, 0xaa12, 0x1}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000340)=0xa85) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0xfc, &(0x7f0000000480), 0x106, 0xa}}, 0x20) ppoll(&(0x7f0000000a00)=[{}, {0xffffffffffffffff, 0x1040}, {r0, 0x1000}], 0x3, &(0x7f0000000a80), &(0x7f0000000ac0)={[0x4]}, 0x8) 6.93050785s ago: executing program 0 (id=198): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x6, 0x8, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000b80)='tlb_flush\x00', r1}, 0x10) 6.796359194s ago: executing program 2 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006280)="c9614df797d5bbaf2d529ccfe807cb2396820ca614edc8f52d067330a81f6c26f4cc0f48e5ae1d42335297538a44b9b28f2d36c39510bcdb6cf2fc17d9b35688d0447cc7167668496bdd28d8df1292b12b61894268f707c212263b3f1ae188c8a69527ac8e196f23028853fd4009294124f18fc47bd2322220e5f0d5d30223095e4e748803b6bf25ba87f40183766b5d2c3a6b3d2f7566b160f0e0742a6cabf6b0071295bc4d5ca4ee60a1fbdc8bbc1f2a59428bc836a1ef0c2dfcbe514f9857f7230f848af37be100dc4f4115ffcb0198774affeb7690dd6782a9f51987dba5d9fd0b6a3426c1ce1e04e48f4255c157450791ba022f0bad4844a22679bb17601987f461d7a35d7de8874cc3c47f360b3c31dfdbf7bb9f93ec80046118660e8bbb18930914f087c05df436073b9ccc5a740f8f634cc827245366b1179aaaddd2bd161f2fa413e1beded9f3063cabd52ece7139af17db00b63117a6b6a1ad8c33ed779d7dddf5b40c17635397b878c7117923f26767864e788da1f79dbbc769fbab45b34198b69dd0599904a0c1297812f9ad9cbf48c59d553b1004ab8213802f3a0852b5b827ab3ea7220873b379b459d7a09af061ccda8bd857d3b2bf2dbaea1b00e2cd0bcc8d6eb11c04bd21532bec66ae36d674a4dd01ab54c27d3267961ecfad0042837fea87d75cecc7a1a58f79f77d72fede0757b7c1f54a5040e741a0fc785ea0ad13bcfc0b69df4dc29dc75e331d2ba03c3cdf04e0a4490159b43c6ae2c010f276c85f3bc46ca94e73e11762739e40e6bfbc113f46ee6ab801b97d42fadc067e23a3151ae90ff64c80e64bba5313475948fbd24a6a95f7ec0b221c9f901c68d184d38b2e09cde68fbd6dd022b6fa1db26aa6ebe2128a93fcb7259ebcde896bd81685c881cb25f581e27479f929e1094852559209c255b0dd5317b148567674b235b10e093363e8e4bd15c4ab90c44abaadbfeabd65e26223543c415befff4d280ad0f0dc132b5413bbe96fdedcabc55e9f3eeead53a1f2d7c0455c8a3bda363a8c33c99888a05546f49dc4c3593aeb30b8ea314b77b8d117334d9c3f800a132e4c3bab461863f027dcfc066bf93f0426d74e02c92a0727309d5bf5bf8242a2b594b81de0e030e55f0125b5d4e12dbffc6806a6c7bd6d62c3d54e87f0607e08750d808a2f442a7eac0ec311c3498b9709ae2f505d5e8b3670079847644147741ffca679bbd1b658bc6c422e58d070f8608c246677af0e2efff5cbf88b3b4a0431a2f26648d64991cf99848012cb6eecb8a13ea91ce77d3c8f2bc047370f4811ae5c341371e3b65bed88294580ba90258c8d36683f21d91a8a914948b2222e4127b061cc0121b97a1b9b1c4ebb7ee166b5af58497d7e0ac90fda25e41a2490ec5d143d0e47475741b30138585637d7997fff2a8805a88c4bd75975ccffcbabefa3576328d86e802b8490e8a773e01afa74fa26c6849deb15b05596e7226cdc0c0ff364bcb4e62ec54984c9485b6eb819165972b9c935a3ae18c698438582e170437c538d7d24a935036964c77e6ed37de77c64384b258f7bbe944f630d3ca82c441c6b2c5bc73dd9f90ecff67a816de7b15bdcaa5a5f1bb8b270a8ac1119e1626e29eb5f2ae4595ca2e10c2e6b297c30c3eeb432ad374101938916c77aefd2ed0f5bb658922bdec9bd76767b9a4b56a15aaa2f7e7d06dba36710a4c8d69d2361aa5f1864710d0868d8f7616cffac40e0accd9b44df8cb5b5324039d82c44e9b97d3a77d914a3738cab84541f0dfc2ed93fb3a746d19cf73495cab380afcdac8acf300e34bb68917009ec1d205dc315669c6341218ebbd0a380c0d14396732e430544ea02d9aff1ffd199c475c4cd313aac4de1121055d806858ee1538436a5f3a549230a42698aeaa3b58b5b9dbf6e11292dad9e0535f5c0685105a448888101ca2228ab50af16b657bb9abb5d4c40cf03931f345663ef6e7655048f78bd23227c6a78bd8b8a457abad7267c8d3ed8decb74cfb21c98471c31f068fd8fea32f13d4478e476d7b5ee10579bda100686db9b3fac14b71e614fd156bddbbde1bf759d0023eb50345e970fa93efd99469583eecec690147f3c075da4efeda849b172829f34e31b281d844fb7c04ca49b30a15abbe493c191e003b76ccb8b2e560ddc3573c6182a87f8e5bdbe10333b3ff3381705984e5595831c025335d0438b053d17fe2f43424735ec3e9d0e8dc278d9e3f35d8d6881e47801d9f77ddf9954ba8f4fe95c295a67968b07bde6378b5ccf24f3d0d228b3cfb4624318828a2649af11698c56860c85617a5151f879846383f5fcf0e9ac483bc4c60beda3bd273a594fc26850d31a852839f23f9e5ffd31d63a7cee2341f22f385d41521aacfe6faf1c5b1e024cd6c6cd4b8696b8e66c6268196da27dc4090552748260bba916b932cbf8066b07dbf5f75b5ea04c385d2ac971d079ab7d4a6bec1008b7564f167aa903acda2ef1756ddbdee86ad25b172479756036d1e11b5c2ab10e657e3b3c768840fd111477bfa05b9e7a2ee765d685f7688765f2441e052a60f56286e6d15ea19d98306a0a5b5efd5b1363bf357d836cb20bb2420ecff7fd682c78763bd1ab31561e6a36a20bf57024852e168bdbc82efa42f7302dc5519c2b56ba3e960437e69f5502048e914540bd4e6138e04e3cb04c75abaee441dd29e23a23948eecb2a7883ae6f3c35b3a3a965fd062688a5975059da47b6029f38baec8d3932295a2257c83a0f966aa7c19db13ccadb86c6c81d84a09bd0782cc87369c8b3a006fee64323c964dcd731fbcaa2f1c1b19f55688365f183bc26bcb636eb0622fc5f5804d46db493737078fe6a6e82f34e48eef5974787c8c4b8abd8a0dcf516862454915b7b9d81a48b9d14a3a08a9408e41c3522480a925cb9521f02cf4380aa44796fa9569aa5043787d9c3a0a345f202d66e28f6c5fc17f8998655bff0351687e2ef6ee523f965d37ed7c4c1fedc51ad7024d8c1102fef833ecf9289050b944e2e9a5646e090f5ab5be3759ea66ee79d5f870fea4ed505a231461421084317c6c5379c74ba5eef02b77c9687f49b05606c5969ae5c84f74a7d43b148dddaffcbd45e8c4eefacdd5c8c07f926baf0b1e7f65c7184c56c9ac355fde5df39557d4011b7eeb65a18fca8de446d9879404bf64f3e460232642960938e6c797d3d942534fa64b9fb0ec5648940456ae4ec22df6ccbaca34ff8a296640ed28f903db33533e0bb4927ac96312580810a38738d5c5ae638359379d244d0c45cc9bc4525648748f4a2becb101c08d7c4ecc407067cf1008cb0f14279bae658ea5f16084769ad66a8e6a9a5137ec65764ec6d25e688cf8a357252420b1ba619e8ab19d28019060434a9d2579be998e8a735778b690cad9512cc9604d2e60e01f2cbb714dbfd87795092e0ff7acb8217074a6d0b9ae00d80685798eb4bee828dff6e1f6858202381cb4051c6a5b6918f8c042a3698ac5eb402abc1f27932764ebd54daa45105666041c1a51e55bf1761c2dbe2c75a511b168f4961385d1a7b7c780fc1c23f1710b7c1e4716e99ed044ce4697fa3b649bc85443ef1b111549d342cd2a417158d01c483e6a2d6535a5801c00f5a7bb47a0d51656bd50824b2f998ea59cde88a7c329e09f19a704104309b674e9b6dd48acd0abee6366ae1ccc24fc2cb1fc0666e71c57e314464c2f2b950b76d426441265f34ae20af7e5dbf47773459f2e34a3b1a2af5d2f406cda82049ca734f22c6ac5e284c4f4c3f10edf89ba7eac611dfd27c46fbad61aa3c5acfd1a29611b917a26ba070169f08e81441e7d6f77f73837dcf6c758c40fecebab6475fee4a6105c844fc52eb603159d4762408911fce84b736a4fae34cb79dd525ebdd53b3b241a08c664a90a6bab087052b82db1f0a9e2f98b78b4998504b148711f47caac7229b708a562e6968b91720b585b2446f7f8aa848d433ebdf0d9d5c866ae7c3660f0be9734959533da9b9484dd10954c7bbc631fc07cf74d1a103076721639a19dec9ba88904c55c3d0e4829d14e48c3f93097521c4a9f4fbcf7b0d17baa7b742afd32a2e78be29f6fb37018bd0579af59985171a8dd5dd35af833fd8816cdd704fa5214260994cd64bae6c7d1376b864874de542dafb0a5c4b29c5bd887bf1dc8ec0e2f907fcffeb6522a3aa20c8ae5912b519049719cba277be7bb6c4341d65fc530804dec7ce5c1a64c4aef279c0da8a1bcc89a63542fc2af2cd1d69701c78db225c596190e81fadabd718b794689fafc929ed092b90218642ae0c75ffe6b9fa9baff10f2424d43ecda2867013d4f2e7562d3bcaa7f51f1f5a96bcc9bff8dd1bce4eaaf49626550183dc19eb358c146b657c2b34fe67a8ecb12b1b29b3d0bf28d6ecc13578f7d1ec1c7f7f76f325d920ff717c7d01baffa0d52166f6849832895f9ec960c65b06506caf39ea6ececccfa197ae151b948d415338c18b3ac35f6f96e67c7662de01f8a92c2a224f4567fc72333b43fb099dda8c49c3cbaee48cff545894390165fc290d798888a84c583b0096513a5c61b2ee1e836b17632cff8f71f9c73546882961cf25a010c7276791167e0dd7d2de8bf44abe9f12419c8776d84418d8e26463ea139e64f82f81fc5b577957f6d34b247a6d7d79aec95d80320b7999f398347835d82a74f3f5637a37ca08158d4022e39ef514f264ba84dacb3c5270272ae94ee3858eaf4de98e8d944273398e315dc42a277fb97d9ee7ddc4f7dbb6cbdbb9283ff1ecbde638ce6edeb18e680addd942f6632e73fc11ba5874a179c79ae67a6406d19ab7293af407cd319862fd4c9568a3bcf31a11adc4ddd8a924e10768594e4689a109daeff28f15a182ee3bfb347f0500005d8dcc691421b6fad377a9ceda726d195eb847ee879664861d4e2e0d3567362524303feafc2b552f0f1f64436ce9efaa63b2b268c674969c879d027c37aca197b71cfe47670cc268de9714a91a3a50c7c205daa613c56c1b1f13d34eaf8dbfc126e0e9fc10cd3e508154e6cea0572e179e424d2270454b1000a3bf4aac26b18efeb9115b6fcd3fcee6ed5b9c3d585394077c35850ef697c5f8a57a270431a0a2e81f6a6269bff09be4da7640fb600130375de62e9796eed4e4e25bfd3f6addfe62addcf2b8fa8eb28d8c3fb20800a8e9ae87c114a1ae91ed347f8ff589cead9e646722180fd60bdc9d0923a1a6ec8fc6de5fadc2203344d459ef6f0145ff71a4cacdabaf1b55f262c86733dd109b747f8740a3959a13a32377e522997fbf93c41fe3408a67d7253df6e399345d9216600f82fefcba9db303442ab3f184c012b1359e8601d85d6b0312ea7b0474d0c8dbca06625643e94ffdacd9a0a2839674249370fa67a5681df0442079cf67bd073859cf3d423711639f8addb6a9acceda893f017f3ca1f23f1245473be8bc6b5c51afc5d088fc764b3d96c9bbe7908806e2b64908bd0be73aa09eeb09de1117d0159b17a166bdb1394892b815aabb68dd7aef00bb6660a31088c88d16d433079552f25801472a7302a44fcdaf13410d15ab5e690cabdfddf112046f58ded90f4d4cdc4de5bfbc5259456ace66f7dbde5c49446d377b87181f0ba03598973137ec2f9b038c0a8ddcd46a6d963086c383c9e86b98fafc0a3b8d7ace5e5f96a0414a4afd5ae75847997f982b338901d81a852081bd47ccd553c2a41aac73f2381e611c8c2581052779e0494f0e1efa0974e11659866f8687fae4236556988b24e0bfc2dceb6f71fe09ee3b4e723dbf369dd22b7889ba296d8c4062aeef1113839c793e4bf16a35b1388ec6af47c363855e03137e9e1d4795beef29d4bb62d611e14fd8f880ff1c8267f259b46229b96bd0e8f7068503b223fc01ba9d8986c601e9807bcd3c232babbbb3112c87d7c30ae496841c03b361045a31e9819b69ec7b94a12d1793ee0b9267a3f9b77e965d1089a2356c46a05f6facfe3e1fe10f5257dd1e83972a9bdf1275ed03ee0c32d8021f264ecd67f635051c9f51f69d4848876c7d68703cbdacaaac18c1ea5e43d9554ddfaeb22f72e73e53760ca15ee52fee57e153702f7f78001a282c8389adc9f1a9b33bda27d4ac6b29dca8b082db3f858df468570d2c099a2b2e5c0897e0183ab8b4dfb62d65d7492347d51ed7b69b414d0de1be678664c7209f849d62d0a5e3a64daeccd1f332831c4b91a11a5c48444e39cd19d0e45120d5ac9c03856df66c8615d359e2f89484a068468a3e319166631932b643d73ad3879b8c8854232384ec62bf7d3c68c51deacdf8685870842e57464659fc9cbfe75f97d8a34d730a74828757661040f9f2cd1832d4c15cb774e0af4d4d0dad5e0098e580f6259bcacb3557fd8442910c8222feb58104d075ef976218a6ceaf10a807b0df2fa5b08945ad17dbc17cd88d7a9bbe2d21332d2ce8a29abbfca7df2f498798e0cb0846c10e4a9125c0b7ab06902f15d8521c10def1ddc94e4f563252894f844a3ee109aec35f766001520926351795ecaa582e90598503a22a9d75bd60c8cb631897d98ea5d66d8f9f06345bb889c4aa21115518b444c2d9d45de72abc73659aafc00465cd3564834389576c5c04f911e2ac0082d72c58e2cec954e6ae72dba6c8b7ed682f488e81bc706d34c723fa3a7ba967b6b00e1abea0e7622a0d9ca17d403bcbf5e2316ab4d46734226ed6797c84161384fbb46b8fe8653cd351e526cca50e7ab8885dd7b5d240cfd15a0253830a7ceb9db44bb12529b77e3cc835442b4d58c7db6a762b7e2c5a3fb37ae9f1426a99823c2df6ca2f6fbf886af52e8565abb7904da69ad7f7029cf73ecc37b5a8c1da6a9e9e1cde38506c96bd7c8d2303d494e422fe181c96a6359b377f18917ae78729911b40b7e69cbefea3c25dd9803aee3183ee3933b5c19d84a400e6c57cb20dc7c7e68739edbf1e8e3475e0a64823dedb46c27780ad01a90a4244891c262d8b0f99e3b1adbb906f82e1977a6101a9d2b44b4b9bfc1f102490ae19e657fa8e7f432eb52d2a4ce932d5346566b887ad4c4f4b5d0dbce790a429f546593e52979c8400441bfe8485c8b864f81b627cf1e20c800b0197b562d0f9b173ca3ba0fae69fe11b91909df9a98ba358e59edbd73da0707a170b3e51928c9c27863dbc83bdecf632b0cc757ab90a270312b2949fdd93f6bea54e303fb0a97b380d516a36f86f053e55e81504affaf7d7b1b8bbde5da525d3f60a628ae17918e07b32b408b51ad3ba6030c3555556334f2fe7c11098007f3e232c8953754c794f807b0ac3680b2a3688f5205d90ccce3ba9c7907508cec61287ad0aa55a151e639bb9086444bdcd149bc5c003340b8381d8c35b073729d2e95a21af1d9995c8093d570b59d8730dd04f3e26ac85e20166e5596082680de90522bcb9532d9e9dce3a10e998f25503902fd7814577ded668bbf3de129c024135a8af420ded350479f13d55290274e3ac63f4568ec7c7a8244f610458d85ecf29aa135d0e56ee52d743200a754ee4508e94d5bc15b3cc8a28c8f37de84fb3cf27ad7590dcaedb78fd8c8f46aaa3529fbb1a2536956c940b605eda0668b1a0f763060bba65d471450a2b34c328c9fb5971851b341a092e315e34a6801cc0808559e5de6d2d9508d11d3072426aa2d43e65f8429c48dbd03197c4f616c253a5b1b50e7ff7cd44df88f5f142997adf976cd2f0cffd673c1791ab969f9dad5867abe531227c059e7b7a9c2343aad230c83513a130ce6e0c4d6815e2bd91f99b6c514703f50fb43139f2e83c521b7e5a3ff4603f006bc7d162047e647234b87439278b10ccd92a4fca136f74d211592235e602d3643fa190cecc8edaf2d727dd5db07f9873048b1f75e19e7c39ef839c0703ec53f70c9fe39b43b98fdacd56b49a416e3b8c66604fb912e3672b8b1a6c5ff7db16320b599513d39460098138b7336d9152df98179f2e07c5abffd4ecf8a2cc8903a40563f187da3a99071bf0c93a65708cb36cd6a69545b78be13a3df9b6c336166b591637bc1be3dfc502200ea982d3b428824cf257184ee93f2d0f3168d4179d238497b84cb73abead20f710057b52ed535adee055081cee4aa842c82c220c160477c16bd1baaa73f46442d2a00658303a9433aa858ce880ed80fa04b592da3c3452a0810f759cbfccd7143d10427c1d39b5c5ecffc590377ce68976315db340e0c00d35d34bec22cfe95882f52f40248281c94758c809d5e65cbf9aeb2dffbdbf2f9a7d10dcd6e7eccc5781851c26990d4a2a2e71598dca6973bfabc82a6135bcc1ee3f1611ced7454e271cbd85a07a583fe89ea98dc4c1b52293adaadfd195b95e6fef37525736a048bd3bb7cc769c50b26c42445f2d5aa37c5ae529b90a5638d920a330ce1ebaf9d979e1b8ee70aba747f7f1a0b9a873167fb5829e64ad08facdfed0fdb76718ef97eeb028cbea23578969190d46e27f81d5eae27987007e217d540d11a33cb36e5768d34d7607ea83221cda3cfefb1cc65f171711160eaadc737013ec1d51de97afd4afc67aa15a23f197800a0566ef4937a6bba9f3334c0aa0e1ed7e9b5c3fc52a3ee112169ed5bce66e88a06f7f3fdda21a10b818c080f2e08e16af6eaac777dff81bfc2231f4cd7360d460091929035b268785e54b3704d52b8c32ffcdf00f21e7f8d3434b3e1ee711a8427596a0e8ae606d02b06914ba09c0a75b2858c7a8dcfff15e2a78549a447dd5d0d5ce912623e4b43fa4106d98e0a5f7960deef827fa30e52697f486cc9928e9b614253a461435d9e993f4a2a700dd0bc54519a2044f36e8f02fb78ca1025d1ce8c35366eddc90818ca1cf9e28bb8ae0f337efe98b82af2547fa03c3eb0813e942d92f1dedac412fa6738c73339959d8f620ceb02ef65dc0a9e4ca272d1965c73c2b06810ba6e13d83de07c4eecbb9e43744b414003057bc26fce09696e98146e59b79a6d817e26b132e3c935d8e5230335ae363a42084ba271058fb25268b139397ef984861d4adbec66e66477df46049fcb8e5f0179846ca020284eccac22b51c3273ae69898295686843bfe2c2ce4f43ea8668a3121558c52d4eb967341197f650e3f145877eb1f5de8377434b18eb2a7bdbb5d7db569d0564d2db7b31f174113d8487be7a5f91f97cda158aac83f0b84eb6a787d30f35f8a1e5ce28f9f86999a06cec497fcd1c8c1c570eb00f1946f300a03bf9b08584df33e2050950dcf4010928365d667d8ee42403c9d1bab54a7518428f7679e0a0e172f33bb3b8b0a829ea3d53fe478fc2556fdb4e51bfa638e9343f628ea570a096e016f5e47e4b72b29b445f9eb12d133277b1213eae6a2ea224ee80e30eb2fd12b08bfb56a588f2f2e67b9c2cb4795c025bb257e954a7720f57687482d119b1850208267eefe0e65b0dc022da6c3324a0d4e1d35dea840b6bdf2fc652579ba3fe55c41126ca4cd54636e86089451e97e5ce3d7cc2499f0882a2c761f0c74640d5152a5bad5091187cbc0c11683f53b5f2b8d4202e33f42070f13e77a63e0794c6ac5dc986a531ab49225d408d8da33a3c89ec856b336faaee251afabc4895afc41165fb558e6c26a3dc12037945f47fc6e60d710f68ca3dd2f18ca8d96cb9e60d2d91cd5b5f56168dc8bda3d3d31779e02c9c6349847504fac30a82466cd692becd3aec74238d336e20a31c2b97be3bbd90c3a2ad938d7ff1b033fc899006acb36eb561a37d4397c09403c845f6081a36d9e4c590f335ebffdee96a0208bf18a9a5ce84ee45c76a22786822e296a957920150f5e11c3354329d4dc328552fa3f2a93d506c7159ddc3054cb1447808cd87c78b9cf74ace81847d712a68d5e88f9c75808fe57383d9867b264e7e3ba233a6bc79a13bf35531e40a1c0d8becacf3d51b07a0cd50e81153e4a0a70128d36ffc096c408b55f47496d08b0153a3e669688a4354ba7dcb65fad21760813afa8a8e4789a9466d7997a27f92e9dfd0e3f9e499c188a200dddc7b57794a2239feb263e8421b79df4f0e6444704476e209101ac5fbc55d41ed0ea466b05401148963ae15dbebfb8d6981330e5b9dcdb01c9d6f9f95ccf28a878e891ae69163071eebd1b738861c58c7b8b0022379412596ea8c2914977e419c5ed53c32e7b191cb148784f42044947eb19e61daf6c853364037a9f734732c8fe5ef76fcec755569621aa4cb7cffd79ffb01b18630bff7751a7e13c3e1427f3cc068ff199ddfe132eaeb4ecd69e48ce59230eff0a81f98ed2835afe2f8911bd9b03ea42cf67abe104cc8b6ee648b515c53f082aaf2ff9cccd1c5c11b920ad82b3bab7e301547713acc37a507059d5a854d08c1330827c87bcf9fb8a337f9d786f653ae90fa293285d5b2b8baf0bc97214dceb9ce1f882acdc45fc1b1c9c1ab8b9931c284fdd21a1c459a064b66f9ccecdc34bf616d9c96c44d741410307968b30d5d4512d5e3c130e2837c10a534bdc7598015c2c0fd1ced2b19628494e5726e55816da6f64c599f7617298c5e1cf4459622dfbf795488238ae1c2716843d2c8ecd1427e068d868ff4d1fa4ba4c701ac81962372867d7c021dd1d0056ef9426e5f8f0579cb26c812abf463d954d5776a3b9f52691ba69ef9dc8fbad3bbafabf6080a9811d23fc9ef802a85a5c315c4700b4d8c68544ca96203f606065bd5e42e1f593d34ef6a086a5399505d12dcd85aafb81da899eb2f01d742b735ec7820330cc92e10b243cafb228c195ade2a4f096b0170bb1be7d5265af0b9598740a5a874326e60cf475c99cacecb013d1eb5202169bcc3d8a1b98484d0dd5b06e4c432e6af4b1fe2a897215295febd579ef3ff568cf02ff1a5c6ba147c4505b3a6119a43b0f960e5fafbcf50135b7efe743580d399f1b21dd8566ab93c12efe9a00902e9fdd333c08ddeebd1a0bcad6cf5ad53fbfa2ce04bb6aa24fe9367c63e2f4f90359b7db4d68d9b68d3d40a5722c6c1fb1e62b27ebbf1bdb39ed409fb579572d64078d1391bad71b2816183da174f2d5c956ae58fd926750a272921b919f0a4aa5f824a79ddaab60c7da7c282053274df30d1df6df3e7e023e9675c329f921999c3afd1ba877b1e19ed260f2119795db264fbb9d72f4a31f230d26e12ebfa04ff480f2e6636daf722ef11df1ee5d99cf999f7dd61606c132d5f8ce95e0b154af0cb9f9ad20a49dc86bb2ad7e2f86069123aa8e25347ab2367c10b3835b72f25e953041dea58242a9b6dcd3635c24bc75f69fc7f18e90fc7c02e11c5243fa9ffceb2951eef8538f49b05c08779e8b68ce637a95e41d057522b60e5b1ed27d5a9bbb1400d01c40ce78ca77ba40cfbfbf7a9104b5d3db2f27bc78136599f3c9434167c8c09a8cb159034cac86167174cda08f81f384a8ea3d0fb9344d2eb1ee9171a2ed8e8eb1d60b669db2274c6811a9d254083f5d0f65aacd3dd4dad307c48a1d46f354bab93bcf98b174c40b00717fd55381519ed602675faa9a7f9cad1c46f66bdfd0c8c16f93ab11cb5773227af6a104dd57783b3e03cfa19f5183af3c908bc53d62bcdcb68d767c6afe9fc3be46ff9a9e94833bd39", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x1ffc, 0x1ffff, 0x6, 0x84, {0x4, 0x25, 0x7, 0x80000000, 0x4, 0xffff, 0x7d59, 0x8, 0x4, 0xc000, 0x7f, r4, r5, 0xcb, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.741257188s ago: executing program 4 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 6.68586789s ago: executing program 0 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x40000000790, 0x80000000003, 0x180, 0x400000004, 0x0, 0xee, 0x20003, 0x100000000, 0x84, 0x3, 0x3b6, 0x2, 0xfffffffffffffffd, 0x1e00000, 0x8], 0x8000000, 0x3c6210}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 6.605623325s ago: executing program 1 (id=202): r0 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) tkill(0x0, 0x100033) socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) eventfd2(0xff, 0x80001) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 6.428277423s ago: executing program 0 (id=203): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000100)=0x600) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) brk(0x689d80000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) setreuid(0x0, 0xee00) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xffff, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) read(r4, &(0x7f0000001400)=""/4046, 0xffd8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) recvmmsg$unix(r5, &(0x7f0000000400)=[{{&(0x7f00000005c0), 0x6e, &(0x7f0000000340)}}], 0x1, 0x40000100, &(0x7f0000000480)={0x77359400}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010100020000fcdbdf252b000000080003005f0c066a2c162cab3d440cd76aa8f76101cc64d67f4a3a3b7fb7e286cb68e8e1ac0cf4e844450f6bfaaa5f86a7bd2b0b53fb7a2a390f5c8b2be29abd9397ce208d288242325b694b14290195e9cf1e070504c25bbed6e0d64c7886f403982ffab7529f1b73e79d288f495add43ffa1c58c617f3ce598378695c21ace513b04ea853200"/159, @ANYRES32=r8, @ANYBLOB="04004600040051800a0034000101010101010000080026006c090000"], 0x38}}, 0x4004880) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x8a4, r6, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x4}, {0x7, 0xa}, {0x4, 0x7}, {0x5, 0x7}, {0x2, 0x8}, {0x7, 0x1}, {0x6, 0x8}, {0x7}, {0x0, 0x8}, {0x5}, {0x1, 0x6}, {0x5}, {0x6}, {0x0, 0x9}, {0x1, 0x5}, {0x0, 0x9}, {0x3, 0x1}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0x3}, {0x4, 0x8}, {0x2, 0x5}, {0x1, 0xa}, {0x5, 0x3}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x1}, {0x3, 0x6}, {0x1, 0x8}, {0x7, 0x9}, {0x0, 0x2}, {0x2, 0x3}, {0x7, 0x2}, {0x3}, {0x7, 0x5}, {0x0, 0x8}, {0x4, 0x2}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0x2}, {0x4, 0x2}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x4}, {0x1, 0x3}, {0x5}, {0x6, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x7}, {0x5, 0x2}, {0x7, 0x3}, {0x4, 0x8}, {0x7}, {0x5}, {0x1, 0x9}, {0x2}, {0x1, 0x6}, {0x7, 0xa}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x4a, 0xdc, 0x6, 0x1, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x6, 0x4, 0x215f, 0xffff, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfff, 0xcd, 0x3, 0x58, 0x2, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x5, 0x5436, 0x4, 0x5, 0x4, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8001, 0x6, 0xffff, 0xc23, 0x6, 0xfff7, 0x5631]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x12, 0x36, 0x24, 0x58, 0x24, 0x30, 0x16, 0x3, 0x6, 0x12, 0x6c, 0x1, 0x6, 0x60, 0x9, 0x6, 0xc, 0x5a, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4ce8, 0x9, 0x5, 0x0, 0x7, 0x2, 0xef, 0x8]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x2ea, 0xb3d, 0x2, 0x1d, 0x48]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x40, 0x6, 0x5, 0xff3d, 0xaa, 0x6, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xbc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x6, 0x16, 0x6c, 0x36, 0x38, 0x9, 0x12, 0x30, 0x1, 0x2, 0x48, 0x6c, 0x5, 0x24, 0x1b, 0x60, 0x16, 0x18, 0x4, 0x2, 0xc, 0x2]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x48, 0x30, 0x24, 0x1b, 0x18, 0x48, 0xc, 0x2, 0x5, 0x48, 0x1b, 0x30, 0x60, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7f, 0x400, 0x8, 0x4, 0x425, 0x6, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x200, 0x5, 0x4, 0x0, 0xd46, 0x4, 0xff]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x6}, {0x1, 0x8}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x5}, {0x1, 0x6}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x3, 0x4}, {0x5, 0x6}, {0x0, 0x9}, {0x3, 0x5}, {0x3}, {0x7, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x7, 0x9}, {0x3, 0x6}, {0x7}, {0x7, 0x4}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x6}, {0x1, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x1, 0x5}, {}, {0x1, 0xa}, {0x6, 0x9}, {0x5}, {0x2, 0x3}, {0x5, 0x4}, {0x7, 0x8}, {0x2, 0x7}, {0x4}, {0x2, 0x8}, {0x1, 0xa}, {0x7, 0x5}, {0x5, 0x3}, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0x7}, {0x6}, {0x1, 0xa}, {0x1, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x6}, {0x1, 0x4}, {0x1, 0x1}, {0x6, 0x6}, {0x7, 0x3}, {0x7, 0x5}, {0x6, 0x8}, {0x6, 0x1}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x2}, {0x3, 0x7}, {0x1}, {0x5, 0x2}, {0x1, 0x4}, {0x0, 0x4}, {0x5, 0x8}, {0x7, 0x5}, {0x1, 0x3}, {}, {0x5, 0x5}, {0x2, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x2, 0x7}, {0x2, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x0, 0x6}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x1}, {0x1}, {}, {0x7, 0x6}, {0x6, 0x1}, {0x2, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1, 0x4}, {0x1, 0x7}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {}, {0x1, 0x8}, {0x2, 0xa}, {0x6}, {0x6, 0x9}, {0x2, 0x2}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x5, 0x2}, {0x1}, {0x1, 0x4}, {0x2, 0x5}, {0x4}, {0x4, 0x7}, {0x4, 0x3}, {0x4, 0x5}, {0x5, 0x1d}, {0x4}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x3, 0x1}, {0x7, 0x3}, {0x3, 0x9}, {0x6, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x13a, 0x1ff, 0xffff, 0x40, 0x0, 0x7f, 0x7, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x3, 0x3, 0xffff, 0x9, 0x4, 0x0, 0x9]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x4, 0xfff, 0x1, 0x0, 0xfff7, 0x3ff, 0x80]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe, 0x6, 0x4, 0x2, 0x2, 0xff, 0x1311]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2000, 0x5824, 0xb, 0xfff8, 0x9, 0x80, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x718f, 0xff4c, 0x9, 0x33c2, 0x40, 0x0, 0xab6c, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x330, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x7}, {0x2}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x9}, {0x6, 0x9}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x7}, {0x0, 0x7}, {0x5, 0x5}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x7}, {0x7, 0x9}, {0x2, 0x4}, {0x0, 0x9}, {0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x5, 0x3}, {0x7, 0x9}, {0x6}]}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x9, 0x2, 0xe63, 0x8, 0xfff4, 0x6, 0x3]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x4}, {0x0, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x7, 0x8}, {0x0, 0x3}, {0x4}, {0x7, 0x6}, {0x5, 0x9}, {0x5, 0x5}, {0x1, 0x6}, {0x1, 0x2}, {0x4}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x2, 0x9}, {0x5, 0x8}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x6, 0x6}, {0x3, 0x9}, {0x7, 0x3}, {0x6}, {0x0, 0x6}, {0x4, 0x6}, {0x6, 0x8}, {0x1, 0x7}, {0x3, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x6, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x1}, {0x5, 0x5}, {0x7, 0xa}, {0x4, 0x2}, {0x4, 0x7}, {0x4}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x6}, {0x2, 0x9}, {0x4, 0x2}, {0x2, 0x3}, {0x7, 0x8}, {0x3}, {0x5, 0x6}, {0x4, 0xa}, {0x1, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x3, 0xa}, {0x1, 0x3}, {0x3, 0x9}, {0x0, 0x4}, {0x2}, {0x2, 0x8}, {0x0, 0x1}, {0x7, 0x7}, {0x4, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe376, 0x7, 0x7b, 0x2, 0x3, 0x3, 0x0, 0xfe00]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0xb, 0x55, 0x60, 0x5, 0x1b, 0x18, 0x6, 0x6c, 0x2, 0x1, 0x48, 0xc, 0x6c, 0xc, 0x48, 0x16, 0x1, 0x1b, 0x12, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfffc, 0x3, 0xf, 0x8, 0xa, 0x6, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd45, 0x0, 0x5, 0x401, 0x7ff, 0x800, 0x6, 0xfffa]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x6}, {0x2, 0x7}, {0x7, 0x9}, {0x2, 0x3}, {0x1, 0xd}, {0x7, 0xa}, {0x2, 0x6}, {0x4, 0x5}, {0x4, 0x6}, {0x4, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0xa}, {0x4, 0xa}, {0x1, 0x3}, {0x0, 0x8}, {0x7}, {0x3, 0x2}, {0x3, 0xa}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x9}, {0x4, 0x9}, {0x0, 0x4}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x5, 0x4}, {0x5, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x8}, {0x2, 0x5}, {0x1, 0xa}, {0x6, 0x3}, {0x4, 0x4}, {0x6}, {0x4, 0x3}, {0x4}, {0x2, 0x8}, {0x3, 0x6}, {0x5}, {0x4, 0xa}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x1}, {0x7, 0x4}, {0x3, 0x7}, {0x1, 0x6}, {0x3, 0x9}, {0x4, 0x6}, {0x6, 0x3}, {0x6, 0x1}, {0x5, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0x9}, {0x7}, {0x6, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xec62, 0x100, 0x35fb, 0x0, 0xc, 0x8, 0x8000, 0x5]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0xa}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x1, 0x12, 0x36, 0xfb6a19f7940bb95a, 0x4, 0x5, 0x6, 0x0, 0x36, 0x10, 0x48, 0x1b, 0xf6d2a9de317c9a31, 0x16]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfff, 0x1, 0x1, 0x6000, 0xfffb, 0x15, 0x3]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x4, 0x5}, {0x2, 0x3}, {0x1, 0xa}, {0x3, 0x5}, {0x0, 0x7}, {0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x3, 0x6}, {0x7}, {0x1}, {0x7, 0x2}, {0x1}, {0x3, 0x7}, {0x2, 0x7}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x5}, {0x3, 0x4}, {0x2, 0x9}, {0x5, 0x1}, {0x6, 0x4}, {0x3, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x5, 0x6}, {0x4}, {0x0, 0x7}, {0x6, 0x3}, {0x2, 0x8}, {}, {0x7, 0xa}, {0x4, 0xa}, {0x3, 0x2}, {0x0, 0x5}, {0x6, 0x2}, {0x1, 0x3}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x3, 0x5}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x6, 0x7}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xc, 0x2, 0x80, 0x101, 0x1, 0xe]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x2}, {0x4, 0x9}, {0x1, 0x1}, {0x5, 0x4}, {0x4, 0x6}, {0x5}, {0x3}, {0x1, 0x1}, {0x4, 0x7}, {0x1, 0x6}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x6}, {0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x4, 0x8}, {0x1, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x2}, {0x7, 0x8}, {0x6, 0x3}, {0x6, 0x4}, {0x0, 0x3}, {0x6, 0x2}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x6}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x4}, {0x5, 0xa}, {0x5, 0xa}, {0x4, 0x6}, {0x4, 0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x4, 0x2}, {0x4, 0x5}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3d, 0x7fff, 0xffff, 0xf, 0x7ff, 0x4, 0x9, 0xb]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x5, 0x9}, {0x7}, {0x3, 0x6}, {0x2, 0x7}, {0x6, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x3, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0x9}, {0x7}, {0x0, 0x4}, {0x6, 0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x6, 0xa}, {0x2, 0x4}, {0x2, 0x1}, {0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x9, 0x16, 0x3, 0x18, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x9c, 0x9, 0x9541, 0xc9, 0x200, 0x3, 0x401]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7}, {0x1, 0x5}, {}, {0x2, 0x9}, {0x4, 0x3}, {0x7}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0x4}, {0x7, 0x5}, {0x5}, {0x4, 0x3}, {0x3, 0x1}, {0x7, 0x9}, {0x3, 0x3}, {0x5, 0x3}, {0x3, 0x1}, {0x5, 0x8}, {0x6, 0x8}, {0x7, 0x8}, {0x0, 0x5}, {0x6, 0x5}, {0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x4, 0x8}, {0x6, 0x1}, {0x3, 0x8}, {0x7, 0x1}, {0x4, 0x9}, {0x7, 0x6}, {0x2, 0xa}, {0x3, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x5}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x7}, {0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x4, 0x1}, {0x3, 0x9}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb, 0x7, 0x5, 0xb6, 0x401, 0xfff, 0x400]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xbbe, 0x1, 0x7, 0xe, 0x1, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x0, 0x1, 0x0, 0x9, 0x6, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x8, 0x9, 0x4, 0x9119, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x2, 0xfff, 0x100, 0x2, 0xaed, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x4}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x1}, {0x3, 0x8}, {0x3, 0x6}, {0x5, 0x7}, {0x5, 0xa}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x6}, {0x4, 0x6}, {0x2, 0x8}, {0x2, 0x2}, {0x4, 0x7}, {0x7, 0x7}, {0x2, 0xa}, {0x0, 0x8}, {}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x36, 0x36, 0x1, 0x1b, 0x1b, 0x0, 0x2, 0x0, 0x6c, 0x36, 0x3, 0x4, 0x5, 0x30, 0x30, 0x6c, 0x60, 0x24, 0x1, 0x6, 0x25, 0x2]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xa6e7, 0x81, 0x0, 0x8, 0x4, 0x2]}}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0xfffffffffffffebc, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x9}, {0x2, 0x3}, {0x2, 0x3}, {0x6, 0xa}, {0x0, 0x6}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x9}, {0x3, 0x8}, {0x4, 0x2}, {0x2, 0x8}, {0x4, 0x1}, {0x4}, {0x7, 0x9}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x6}, {0x5, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x6, 0x3}, {0x7, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x5, 0x3}, {}, {0x5, 0x4}, {0x5, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x4}, {0x6}, {0x6, 0x9}, {0x4, 0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xffff, 0x6, 0x7, 0x2c79, 0x7, 0x6, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0xb, 0x4, 0x72ee, 0x19de, 0x3, 0x1]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x4}, {0x6, 0xa}, {0x3}, {0x2, 0x8}, {0x3, 0x9}, {0x7}, {0x5, 0x3}, {0x5}, {0x5, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x6}, {0x3, 0x4}, {0x0, 0x9}, {}, {0x3, 0x6}, {0x6, 0x4}, {0x4, 0x4}, {0x4}, {0x3}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x3, 0x1}, {0x3, 0x5}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x4}, {0x5}, {0x1, 0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x0, 0x3}, {0x6, 0x1}, {0x5, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x48, 0x9, 0x3, 0x36, 0x18, 0x24, 0x2, 0x12, 0x36, 0x9, 0x4, 0x3, 0x4]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x36, 0x5, 0x2, 0x18, 0x5, 0x12, 0x30, 0x36, 0xb, 0xb, 0x5, 0x48, 0x1, 0x30, 0x6, 0x24, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x36, 0x12, 0x4, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc8, 0x9, 0x0, 0x40, 0x5, 0xc5, 0xea, 0x8]}}]}]}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.9069974s ago: executing program 3 (id=204): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendto$packet(r2, &(0x7f0000000000)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0x18, 0x0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000003780), 0x4) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000280)=0xffffffa9, 0x4) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r6, 0x0, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 3.850839246s ago: executing program 4 (id=205): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x9, 0x6, @local}, 0x14) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000300)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x100000000}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3.496575476s ago: executing program 1 (id=206): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0x1b73, 0x10009, 0x6, 0x80b}}) (fail_nth: 1) 3.470857809s ago: executing program 0 (id=207): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@x86={0x2, 0x3, 0x3, 0x0, 0x8, 0x13, 0x1, 0x7, 0x5, 0x1, 0xc, 0x9, 0x0, 0x81, 0x5, 0x8, 0xc, 0x7, 0x1, '\x00', 0x2, 0xfcf}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x1800, 0x0) close(0x3) (async) close(0x3) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) (async) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000240)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) (async) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x1000009, 0x7fffffff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x3], 0xeeee0000, 0x8340}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sched_setscheduler(r7, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r8, &(0x7f0000000580)=[{&(0x7f0000000640)="214eca7eb3b30984541b2e4ddcf9483e1ce189684ac91ca42b4f7ca385c7356e477e43e84ee7d8150872545b609df5474ee3723b082c680faaac983711ed172616790be848b54da31f950edf0678bad160a0d5544ba2a6002189d72c64e6a6cbfc47531b5d5a", 0x66}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000340012800c0001006d6163766c616e002400028008000300030000000800010010000000100005800a000400aaaaaaaaaaaa000008000500", @ANYRES32=r1, @ANYBLOB="140003"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f00000004c0)={0x4, 0xfffffffc, 0xe, 0x18, 0xad, &(0x7f0000000e00)="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"}) (async) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f00000004c0)={0x4, 0xfffffffc, 0xe, 0x18, 0xad, &(0x7f0000000e00)="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"}) 3.373367601s ago: executing program 2 (id=208): openat(0xffffffffffffff9c, 0x0, 0x42, 0x836d9fb164f927b3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 3.214863846s ago: executing program 1 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newchain={0x54, 0x64, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0x1a}, {0xffff}, {0xfff1, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xfffffff7}, @TCA_CHAIN={0x8, 0xb, 0x74}, @TCA_RATE={0x6, 0x5, {0xf, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x4, 0xf9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x600402, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000200)) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x4000010, r0, 0x0) (async) syz_io_uring_setup(0x6e38, &(0x7f0000000240)={0x0, 0xdaec, 0x10000, 0x1, 0x35a}, &(0x7f00000002c0), &(0x7f0000000300)=0x0) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) (async) r7 = open$dir(&(0x7f0000000400)='./file0\x00', 0xd191df1a80e4d6ce, 0x24) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, r6, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', r7, 0x0, 0x1}) (async) read$FUSE(r6, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000024c0)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f00000025c0)=0xe8) statx(r6, &(0x7f0000002600)='./file0\x00', 0x1000, 0x4, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f0000002800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000004840)={{0x1, 0x1, 0x18, r7, {0xee00, 0xee00}}, './file0\x00'}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000004880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file1\x00'}) (rerun: 32) write$FUSE_DIRENTPLUS(r6, &(0x7f00000048c0)={0x1f0, 0x0, r8, [{{0x0, 0x2, 0x5d, 0x80000001, 0x6, 0x56, {0x5, 0x0, 0xffffffffe1a2c8f1, 0xe3f, 0x2, 0x200000000, 0x0, 0xc, 0xf, 0xa000, 0x5, r10, r11, 0x4, 0x5}}, {0x6, 0xac, 0x3, 0xb8e6, '$@-'}}, {{0x0, 0x2, 0x101, 0xdb67, 0x7, 0x5, {0x6, 0xa, 0xc0000000000000, 0x6, 0x3, 0x8, 0x400, 0x1, 0xf, 0x1000, 0x8001, r12, r14, 0x72c8e340, 0x4}}, {0x1, 0xc77d, 0x6, 0x0, 'vcan0\x00'}}, {{0x2, 0x1, 0x3651, 0x9, 0x4, 0x4, {0x4, 0x6, 0x485, 0x2, 0x7a6, 0x7fffffffffffffff, 0x3, 0x1, 0x5, 0xc000, 0x759, r16, r18, 0xffff, 0x80000000}}, {0x4, 0x8, 0x1, 0x5, '\x00'}}]}, 0x1f0) (async) ioctl$IOMMU_DESTROY$hwpt(r15, 0x3b80, &(0x7f0000004ac0)={0x8}) mkdir(&(0x7f0000004b00)='./file1\x00', 0x3) (async) setreuid(r9, r13) (async) ioctl$VIDIOC_S_AUDIO(r15, 0x40345622, &(0x7f0000004b40)={0x5, "976235232c4451c08d96a749d94036c9bae9e28bafae57f80942f5933fa21478", 0x1, 0x1}) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000004b80), r17) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f0000004c00)=@filter={'filter\x00', 0xe, 0x4, 0x528, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, &(0x7f0000004bc0), {[{{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1c, 0x1, "c86043599694f0e54e76203e1ac3cd47c3be6ee81dcd4247956a851f7c1a"}}}, {{@uncond, 0x0, 0x210, 0x250, 0x0, {}, [@common=@frag={{0x30}, {[], 0x6fea, 0x0, 0x7}}, @common=@rt={{0x138}, {0x5, [0x0, 0x4], 0x200, 0x2, 0x4, [@empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, @empty, @remote, @dev={0xfe, 0x80, '\x00', 0x3c}, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x37}, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, @remote, @mcast1], 0xb}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x6, 0x0, 0x4, 0x3, 0x5, 0x4, 0x40]}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "b64d", 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) (async) mknodat(0xffffffffffffffff, &(0x7f00000051c0)='./file1\x00', 0x800, 0x8f7edba) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000005200)={0x0, 0x4f, "4c9119a28728cd60c1b59097f8206f188a731814f6c36ce43ef4c2c094ca78bf3a5b5cce0e31b44d91576dd0a62ca8cd51a7d1ea509d455ecc03f2cd0b52f196c6949a073ff0e5b7f6fbe43f3c48d5"}, &(0x7f0000005280)=0x57) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r15, 0x84, 0x1f, &(0x7f00000052c0)={r19, @in6={{0xa, 0x4e21, 0xef, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8001}}, 0x8, 0xfffd}, &(0x7f0000005380)=0x90) sendmsg$kcm(r17, &(0x7f0000005ac0)={&(0x7f00000053c0)=@isdn={0x22, 0x9, 0xb, 0xe, 0x87}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005440)="bebbe3bf3679deaae920c1c8f8bcaaec7188cd56", 0x14}, {&(0x7f0000005480)="5c120276a598257d770ae371152e31", 0xf}, {&(0x7f00000054c0)="67f128be6ef615b7aeb225865e59233fa74bfca9455743d62fd74334d9f2a56acd1c1cf5d416d4cdc9552bb8b00ba04c89f89b83faf805a6f2311f6a0f5e61664697b57d8ef8d82c63a68e95a54360fe88f3064487b751b67e1b78dbf4f8a72646e5a6a95ef2afd6692e347045ed3027ea38b2179def97117f81abbd27c2f21415674412544eedd69375cb17ddf702d0dd0b434b93a5ee2eac98786840b467320bee4e367008fb98a5e19b3ef40a98e07614b9400d5004cb2a54eff04b", 0xbd}, {&(0x7f0000005580)="1d4b1bcd86b8b0aaeb33b1c0f4f67de85d71ad114235b3498ed7cb965e0cff90755244654b1e0f893a8986105b8fff029e8eef39ddf6874bec30ac344a77aee582ebb3192e274ab8be19cd79256bd2ddde6d7a5f8950abe08a5f83e455eb444125cc024ac5fad0310227ae0d", 0x6c}, {&(0x7f0000005600)="c5ed95745f81f6ae84a7699d79f69f24e1171371a4bc5774ad610a68dbe6f2517b57a40fd24d4a2c207b82734b82780c372871f31531caa064f5fe6e9f8b9f726ef85b6face375f5486db8271396c917e569d69fbb36f46ba7f2cecd3cd7ca491be17528faa2eb470e46acff3f30f2eec63dc249370e543ab9a76cd2d3c50ec299e6597fa6a440af284072324310df5b3525d4e1bc32da5b57bdc01b848b53972e52d54217b2c6f4f97fc0b773dd1900b4022e40817504d2b8f655b6157ad5e53565b3b7805d377310e99855", 0xcc}, {&(0x7f0000005700)="5d69d82c626ecca5f9a4045f0ee974fcd88b13175fcddff5695ba074ad15ae703c55b222a048e814bff652a6e993d9ee33174298a167efd9b98b15c25d28ec11f7ed87b68d31096e683752fe1fd48952b22658bcac97213361571f7739998d23b0b96d7f627dc96301dad3a108d1a4a6b7b383241b396d74a0cf3c38334791300a3f8a155044c3b842be9d9870d81e3616a1de055999b33b9a5ed81238dd9a383090b296f2b6f27b17aab5d441a58391f077b94306d1ef5f0ab9d41f48c7cb6d35097e8d02de985317185675e278314006456ed8eb7eacc9ecdbd8687e42467d67ad9596e79665", 0xe7}, {&(0x7f0000005800)="6e4bd7946be0eadec0457ad42763327e516ebef7c9e107f023b4ea288858cf19f284d74ae91ec8d37d926c70bfd07024f9f44f5941b268f5d72fe5e6868f9f548e5234a10b2b599ac75f34e37d9c5d4dce1d3d47a0d97ea96986fdec86ff62f3159bd2b9b7ec14957b76ef6b2891ba5467fe326a4c373734120bd6dbbe6cec1f71ecf05e056000", 0x87}], 0x7, &(0x7f0000005940)=[{0x90, 0x10d, 0x81, "856fe0333ea6a3f6eb459a555ef6f8d4ff75d23b713dea283a11667743182eb550a916f028e9fc6941ed1ecfecb48734c16940011e9b932c2820c31e8fc818e8ad59389b8fc4ffb742bfd3663ddb2e64ed39e5538e9b84d17e8878424826701c0d9322731871dfaaa5a4550d90994822bd908a81acaee3336e8b08865aa627"}, {0x18, 0x10e, 0x3e8, "8c7bee4aa3"}, {0x28, 0x3a9, 0x6, "46c512ba0ce05bc907e1a9e74f5554a38433b71c"}, {0xa0, 0x119, 0x7fffffff, "6a7b58a01555edc2dee5bc102135bfb476e7a76624c34b4c72d9b5d027c78d941e029ecf42b5b3b0c830c8018d6b963322ea5f4cf1002a7621ed5eb9ecc9bc65541332ac4c4b7dae62307e40a4a98fe8480f9bb9296a70ea61e7cb4a517f0873a3db7b427fa52207973f32a402f96f3435fac569d5434b3d04e6c7ad3c5e0037ea8a5004717d6643b432fc9e"}], 0x170}, 0x81) 2.935100611s ago: executing program 1 (id=210): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x5, 0x505a6dfb, 0x4, 0x7, 0x4, 0x0, [{0x6, 0x7, 0x5, '\x00', 0x2008}, {0x1ff, 0x9, 0xbc75, '\x00', 0x100c}, {0x40, 0xa14, 0x8, '\x00', 0x80}, {0x60a, 0xaa12, 0x1}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000340)=0xa85) ppoll(&(0x7f0000000a00)=[{}, {0xffffffffffffffff, 0x1040}, {r0, 0x1000}], 0x3, &(0x7f0000000a80), &(0x7f0000000ac0)={[0x4]}, 0x8) 2.885562744s ago: executing program 4 (id=211): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 2.397126946s ago: executing program 1 (id=212): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x400000000010, 0x5, 0x0) connect$netlink(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x40004}]}}]}, 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206ec227e6e9050c1efa1a1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a3562526132c7bbd497d3f5d40881e6c7363f2e21c8ae8d3ade72d57b6fe9a6cce7f100ae63775c6706b5004312b057aa9191e7614a69584974629c81e536b6422072cdb55b5d98418bf0b15268551548fbc6a9c84f4f701461c5e8e9f12573cc7611758c085582c823f9500d1fb8fa0eb44423f78fa60262f1578304c834865ba39ae3a1a393cfc3c9892518fca1ce37752f488faeabcb616700e8312390", 0xdbd}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f80)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000880)="5684ce31e0c1622cb1c3d0e26106d43980c87c22723b9a1087766a8be3922150d0dc8d5feb43ce466d4bbee420f2aad4f12da860f728", 0x36}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) prlimit64(r7, 0x10, 0x0, &(0x7f0000000040)) 512.44391ms ago: executing program 4 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x40000000790, 0x80000000003, 0x180, 0x400000004, 0x0, 0xee, 0x20003, 0x100000000, 0x84, 0x3, 0x3b6, 0x2, 0xfffffffffffffffd, 0x1e00000, 0x8], 0x8000000, 0x3c6210}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 467.281083ms ago: executing program 0 (id=214): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x82042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x800000000000000c) write$tcp_mem(r0, &(0x7f0000000240)={0x100, 0x2d, 0x10000, 0x3a, 0xdffffffffffffffe, 0x2c}, 0x48) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c9024"], 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x2, 0x0, 0x4000}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) bind$can_raw(r4, &(0x7f00000002c0), 0x10) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000080)={0xe, @raw_data="8748d904312d9614a700656285d6ca232c5e4b35ebdb07beb32ae36b6f0ef57692ca3dd99f4c48d9c84843d154a22e7e0ff0fa0cafa0627c229d1f07ec2c1219063f827a901539f6e1b89749608e44ae94272121bbdcad9c71bc46e67789a438e9b144abc7ab0545f7919791e873f750a5e723ec4bef1fad204b0f39fd4ca9b93a5c5d1ef028aed255dc5ddc63c06882be4cc7db84b6b6759d7ab633b15118047f859059a9c036d0ad65b7bacf6c1e100a4cd139f8d17bf9a615b879236ca4f14416b81fefb7349e"}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000006c0)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000200)={0x10009, 0x4000008, 0x40}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x58, r9, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 3.649146ms ago: executing program 1 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 0s ago: executing program 4 (id=216): r0 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) tkill(0x0, 0x100033) socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) eventfd2(0xff, 0x80001) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 86.758107][ T1230] cfg80211: failed to load regulatory.db [ 87.919303][ T5793] cgroup: Unknown subsys name 'net' [ 88.179985][ T5793] cgroup: Unknown subsys name 'cpuset' [ 88.235243][ T5793] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.134862][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.996397][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.005942][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.013762][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.014484][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.015606][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.031342][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.033058][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.062558][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.068426][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.078030][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.081734][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.082603][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.085996][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.086538][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.088862][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.200533][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.212679][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.213484][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.220778][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.245489][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.304654][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.308991][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.313376][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.344905][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.355679][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.140297][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 94.206718][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 94.376118][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 94.432309][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 94.836067][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 95.027302][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.027411][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.027816][ T5808] bridge_slave_0: entered allmulticast mode [ 95.029944][ T5808] bridge_slave_0: entered promiscuous mode [ 95.145886][ T5818] Bluetooth: hci0: command tx timeout [ 95.145894][ T61] Bluetooth: hci1: command tx timeout [ 95.202633][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.202748][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.202878][ T5808] bridge_slave_1: entered allmulticast mode [ 95.205658][ T5808] bridge_slave_1: entered promiscuous mode [ 95.224864][ T5818] Bluetooth: hci2: command tx timeout [ 95.285917][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.286018][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.286170][ T5809] bridge_slave_0: entered allmulticast mode [ 95.288001][ T5809] bridge_slave_0: entered promiscuous mode [ 95.304845][ T5818] Bluetooth: hci3: command tx timeout [ 95.465020][ T5818] Bluetooth: hci4: command tx timeout [ 95.512547][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.512662][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.512775][ T5809] bridge_slave_1: entered allmulticast mode [ 95.514369][ T5809] bridge_slave_1: entered promiscuous mode [ 95.517350][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.517486][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.517671][ T5806] bridge_slave_0: entered allmulticast mode [ 95.520335][ T5806] bridge_slave_0: entered promiscuous mode [ 95.775596][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.775716][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.775881][ T5806] bridge_slave_1: entered allmulticast mode [ 95.777703][ T5806] bridge_slave_1: entered promiscuous mode [ 95.778724][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.778835][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.778952][ T5810] bridge_slave_0: entered allmulticast mode [ 95.780572][ T5810] bridge_slave_0: entered promiscuous mode [ 95.788556][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.946722][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.946886][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.947031][ T5810] bridge_slave_1: entered allmulticast mode [ 95.949086][ T5810] bridge_slave_1: entered promiscuous mode [ 95.952896][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.018187][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.278454][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.281477][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.596626][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.597707][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.597858][ T5821] bridge_slave_0: entered allmulticast mode [ 96.599855][ T5821] bridge_slave_0: entered promiscuous mode [ 96.668405][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.672717][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.674593][ T5808] team0: Port device team_slave_0 added [ 96.677167][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.677323][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.677501][ T5821] bridge_slave_1: entered allmulticast mode [ 96.680421][ T5821] bridge_slave_1: entered promiscuous mode [ 96.878577][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.880213][ T5808] team0: Port device team_slave_1 added [ 96.937464][ T5809] team0: Port device team_slave_0 added [ 97.207643][ T5809] team0: Port device team_slave_1 added [ 97.209426][ T5806] team0: Port device team_slave_0 added [ 97.224745][ T5818] Bluetooth: hci1: command tx timeout [ 97.234943][ T5818] Bluetooth: hci0: command tx timeout [ 97.305031][ T5818] Bluetooth: hci2: command tx timeout [ 97.349027][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.384880][ T5818] Bluetooth: hci3: command tx timeout [ 97.427549][ T5806] team0: Port device team_slave_1 added [ 97.429590][ T5810] team0: Port device team_slave_0 added [ 97.544873][ T5818] Bluetooth: hci4: command tx timeout [ 97.656758][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.656773][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.656793][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.660839][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.797130][ T5810] team0: Port device team_slave_1 added [ 97.798214][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.798226][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.798246][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.886226][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.886240][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.886259][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.116379][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.116398][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.116426][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.117957][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.117969][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.117985][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.217492][ T5821] team0: Port device team_slave_0 added [ 98.225459][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.225478][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.225510][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.227683][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.227698][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.227729][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.234047][ T5821] team0: Port device team_slave_1 added [ 98.251362][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.251382][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.251424][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.722598][ T5808] hsr_slave_0: entered promiscuous mode [ 98.723767][ T5808] hsr_slave_1: entered promiscuous mode [ 98.727372][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.727388][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.727417][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.867912][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.867928][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.867946][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.874154][ T5809] hsr_slave_0: entered promiscuous mode [ 98.876267][ T5809] hsr_slave_1: entered promiscuous mode [ 98.877584][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 98.877723][ T5809] Cannot create hsr debugfs directory [ 99.029813][ T5806] hsr_slave_0: entered promiscuous mode [ 99.030719][ T5806] hsr_slave_1: entered promiscuous mode [ 99.031352][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 99.031373][ T5806] Cannot create hsr debugfs directory [ 99.185704][ T5810] hsr_slave_0: entered promiscuous mode [ 99.186752][ T5810] hsr_slave_1: entered promiscuous mode [ 99.187417][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 99.187438][ T5810] Cannot create hsr debugfs directory [ 99.304961][ T5818] Bluetooth: hci0: command tx timeout [ 99.304994][ T5818] Bluetooth: hci1: command tx timeout [ 99.384799][ T61] Bluetooth: hci2: command tx timeout [ 99.466136][ T61] Bluetooth: hci3: command tx timeout [ 99.625707][ T61] Bluetooth: hci4: command tx timeout [ 99.769105][ T5821] hsr_slave_0: entered promiscuous mode [ 99.770153][ T5821] hsr_slave_1: entered promiscuous mode [ 99.770794][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 99.770816][ T5821] Cannot create hsr debugfs directory [ 100.995446][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.031531][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.048632][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.103422][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.233629][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.272116][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.289932][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.345030][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.384773][ T61] Bluetooth: hci1: command tx timeout [ 101.385672][ T61] Bluetooth: hci0: command tx timeout [ 101.462351][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.474824][ T61] Bluetooth: hci2: command tx timeout [ 101.501079][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.533445][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.544818][ T61] Bluetooth: hci3: command tx timeout [ 101.568934][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.692347][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.714990][ T61] Bluetooth: hci4: command tx timeout [ 101.748576][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.792496][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.844983][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.909470][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.974109][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.011497][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.051484][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.081488][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.103286][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.142620][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.143165][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.183117][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.183282][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.216376][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.295883][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.330693][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.342096][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.342340][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.378018][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.378182][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.427798][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.482694][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.486818][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.487018][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.528710][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.528847][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.598677][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.619842][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.649859][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.650076][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.692335][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.692465][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.738000][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.781227][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.782202][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.832194][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.832881][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.887757][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.301135][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.538381][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.587965][ T5809] veth0_vlan: entered promiscuous mode [ 103.640495][ T5809] veth1_vlan: entered promiscuous mode [ 103.692022][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.718738][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.740352][ T5806] veth0_vlan: entered promiscuous mode [ 103.784123][ T5806] veth1_vlan: entered promiscuous mode [ 103.800003][ T5809] veth0_macvtap: entered promiscuous mode [ 103.829321][ T5809] veth1_macvtap: entered promiscuous mode [ 103.830926][ T5808] veth0_vlan: entered promiscuous mode [ 103.894469][ T5808] veth1_vlan: entered promiscuous mode [ 103.932451][ T5810] veth0_vlan: entered promiscuous mode [ 103.943289][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.964328][ T5821] veth0_vlan: entered promiscuous mode [ 103.983168][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.998934][ T5806] veth0_macvtap: entered promiscuous mode [ 104.003379][ T5810] veth1_vlan: entered promiscuous mode [ 104.028200][ T1424] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.030757][ T5806] veth1_macvtap: entered promiscuous mode [ 104.033068][ T5821] veth1_vlan: entered promiscuous mode [ 104.041286][ T1424] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.054909][ T1424] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.067644][ T1424] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.145056][ T5808] veth0_macvtap: entered promiscuous mode [ 104.163051][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.163639][ T5808] veth1_macvtap: entered promiscuous mode [ 104.220782][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.308295][ T5810] veth0_macvtap: entered promiscuous mode [ 104.319819][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.342137][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.367335][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.370102][ T5821] veth0_macvtap: entered promiscuous mode [ 104.376966][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.379653][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.380243][ T5810] veth1_macvtap: entered promiscuous mode [ 104.406444][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.406475][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.427304][ T5821] veth1_macvtap: entered promiscuous mode [ 104.464129][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.548464][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.561040][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.608778][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.611485][ T1424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.611502][ T1424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.639736][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.646551][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.687818][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.748086][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.826791][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.829320][ T1424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.829337][ T1424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.866483][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.872106][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.943059][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.956902][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.982242][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.002107][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.051291][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.083038][ T37] audit: type=1326 audit(1762181841.805:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5923 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c93eefc9 code=0x7ffc0000 [ 105.083379][ T37] audit: type=1326 audit(1762181841.805:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5923 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c93eefc9 code=0x7ffc0000 [ 105.095844][ T37] audit: type=1326 audit(1762181841.815:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5923 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08c93eefc9 code=0x7ffc0000 [ 105.095898][ T37] audit: type=1326 audit(1762181841.825:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5923 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c93eefc9 code=0x7ffc0000 [ 105.096754][ T37] audit: type=1326 audit(1762181841.825:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5923 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f08c93eefc9 code=0x7ffc0000 [ 105.097073][ T37] audit: type=1326 audit(1762181841.825:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5923 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c93eefc9 code=0x7ffc0000 [ 105.097757][ T37] audit: type=1326 audit(1762181841.825:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5923 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c93eefc9 code=0x7ffc0000 [ 105.098076][ T37] audit: type=1326 audit(1762181841.825:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5923 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f08c93eefc9 code=0x7ffc0000 [ 105.106751][ T37] audit: type=1326 audit(1762181841.835:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5923 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c93eefc9 code=0x7ffc0000 [ 105.107480][ T37] audit: type=1326 audit(1762181841.835:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5923 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c93eefc9 code=0x7ffc0000 [ 105.328369][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.366946][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.366968][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.395699][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.539898][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.539918][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.554954][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 105.623712][ T9] usb 3-1: config index 0 descriptor too short (expected 29970, got 18) [ 105.623738][ T9] usb 3-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 105.623755][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 105.633553][ T9] usb 3-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 105.633586][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.633608][ T9] usb 3-1: Product: syz [ 105.633623][ T9] usb 3-1: Manufacturer: syz [ 105.633639][ T9] usb 3-1: SerialNumber: syz [ 105.658148][ T9] usb 3-1: config 0 descriptor?? [ 105.735463][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 105.758105][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 105.880957][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.880975][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.950744][ T9] usb 3-1: USB disconnect, device number 2 [ 106.138677][ T1487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.138697][ T1487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.280083][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.280106][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.344012][ T5926] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.515386][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.515407][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.579892][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.579910][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.758467][ T9] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 106.948701][ T9] usb 5-1: config 0 has an invalid interface number: 181 but max is 0 [ 106.948733][ T9] usb 5-1: config 0 has no interface number 0 [ 106.948791][ T9] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 106.948817][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.987565][ T9] usb 5-1: config 0 descriptor?? [ 107.312828][ T5944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.377198][ T5948] FAULT_INJECTION: forcing a failure. [ 107.377198][ T5948] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.377331][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 107.377358][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.377378][ T5948] Call Trace: [ 107.377390][ T5948] [ 107.377400][ T5948] dump_stack_lvl+0x189/0x250 [ 107.377441][ T5948] ? __pfx____ratelimit+0x10/0x10 [ 107.377471][ T5948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.377504][ T5948] ? __pfx__printk+0x10/0x10 [ 107.377532][ T5948] ? __might_fault+0xb0/0x130 [ 107.377575][ T5948] should_fail_ex+0x46c/0x600 [ 107.377610][ T5948] _copy_from_user+0x2d/0xb0 [ 107.377635][ T5948] __sys_connect+0x124/0x450 [ 107.377657][ T5948] ? do_sys_openat2+0x154/0x1c0 [ 107.377678][ T5948] ? __pfx___sys_connect+0x10/0x10 [ 107.377713][ T5948] ? __pfx_ksys_write+0x10/0x10 [ 107.377747][ T5948] __x64_sys_connect+0x7a/0x90 [ 107.377771][ T5948] do_syscall_64+0xfa/0xfa0 [ 107.377801][ T5948] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.377831][ T5948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.377871][ T5948] ? clear_bhb_loop+0x60/0xb0 [ 107.377899][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.377921][ T5948] RIP: 0033:0x7f08c93eefc9 [ 107.377946][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.377964][ T5948] RSP: 002b:00007f08c764e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 107.377989][ T5948] RAX: ffffffffffffffda RBX: 00007f08c9645fa0 RCX: 00007f08c93eefc9 [ 107.378029][ T5948] RDX: 000000000000006e RSI: 000020000057eff8 RDI: 0000000000000004 [ 107.378043][ T5948] RBP: 00007f08c764e090 R08: 0000000000000000 R09: 0000000000000000 [ 107.378056][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.378070][ T5948] R13: 00007f08c9646038 R14: 00007f08c9645fa0 R15: 00007ffee85be428 [ 107.378106][ T5948] [ 107.678327][ T5953] process 'syz.3.10' launched '/dev/fd/9' with NULL argv: empty string added [ 108.064818][ T990] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 108.101690][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 108.115536][ T5958] TCP: TCP_TX_DELAY enabled [ 108.246573][ T990] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.249070][ T990] usb 4-1: not running at top speed; connect to a high speed hub [ 108.295091][ T990] usb 4-1: config 4 has an invalid interface number: 111 but max is 0 [ 108.295118][ T990] usb 4-1: config 4 has no interface number 0 [ 108.295208][ T990] usb 4-1: config 4 interface 111 has no altsetting 0 [ 108.325540][ T990] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 108.325572][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.325595][ T990] usb 4-1: Product: syz [ 108.325611][ T990] usb 4-1: Manufacturer: syz [ 108.325627][ T990] usb 4-1: SerialNumber: syz [ 108.414762][ T49] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.574883][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 108.601222][ T49] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 108.601254][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.601274][ T49] usb 2-1: Product: syz [ 108.601290][ T49] usb 2-1: Manufacturer: syz [ 108.601306][ T49] usb 2-1: SerialNumber: syz [ 108.628181][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.632571][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.676891][ T49] usb 2-1: config 0 descriptor?? [ 108.746623][ T49] usb 2-1: selecting invalid altsetting 3 [ 108.746655][ T49] comedi comedi5: could not set alternate setting 3 in high speed [ 108.746672][ T49] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 108.808088][ T990] pvrusb2: Hardware description: Terratec Grabster AV400 [ 108.808112][ T990] pvrusb2: ********** [ 108.808120][ T990] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 108.808132][ T990] pvrusb2: Important functionality might not be entirely working. [ 108.808141][ T990] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 108.808153][ T990] pvrusb2: ********** [ 108.809023][ T990] usb 4-1: selecting invalid altsetting 0 [ 108.839211][ T5971] FAULT_INJECTION: forcing a failure. [ 108.839211][ T5971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.839250][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.839277][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.839290][ T5971] Call Trace: [ 108.839299][ T5971] [ 108.839309][ T5971] dump_stack_lvl+0x189/0x250 [ 108.839350][ T5971] ? __pfx____ratelimit+0x10/0x10 [ 108.839381][ T5971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.839416][ T5971] ? __pfx__printk+0x10/0x10 [ 108.839446][ T5971] ? __might_fault+0xb0/0x130 [ 108.839491][ T5971] should_fail_ex+0x46c/0x600 [ 108.839535][ T5971] _copy_from_user+0x2d/0xb0 [ 108.839563][ T5971] ___sys_sendmsg+0x158/0x2a0 [ 108.839595][ T5971] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.839664][ T5971] ? __fget_files+0x2a/0x420 [ 108.839696][ T5971] ? __fget_files+0x3a6/0x420 [ 108.839739][ T5971] __x64_sys_sendmsg+0x1a1/0x260 [ 108.839771][ T5971] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.839810][ T5971] ? __pfx_ksys_write+0x10/0x10 [ 108.839844][ T5971] ? do_syscall_64+0xbe/0xfa0 [ 108.839879][ T5971] do_syscall_64+0xfa/0xfa0 [ 108.839908][ T5971] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.839938][ T5971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.839961][ T5971] ? clear_bhb_loop+0x60/0xb0 [ 108.839989][ T5971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.840012][ T5971] RIP: 0033:0x7f08c93eefc9 [ 108.840031][ T5971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.840050][ T5971] RSP: 002b:00007f08c764e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.840074][ T5971] RAX: ffffffffffffffda RBX: 00007f08c9645fa0 RCX: 00007f08c93eefc9 [ 108.840091][ T5971] RDX: 000000000c000802 RSI: 0000200000000000 RDI: 0000000000000003 [ 108.840106][ T5971] RBP: 00007f08c764e090 R08: 0000000000000000 R09: 0000000000000000 [ 108.840121][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.840133][ T5971] R13: 00007f08c9646038 R14: 00007f08c9645fa0 R15: 00007ffee85be428 [ 108.840175][ T5971] [ 108.963773][ T2371] pvrusb2: control-write URB failure, status=-71 [ 108.963792][ T2371] pvrusb2: Device being rendered inoperable [ 108.980755][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 108.980772][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 109.168291][ T49] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 109.264786][ T49] usb 2-1: USB disconnect, device number 2 [ 109.350579][ T990] usb 4-1: USB disconnect, device number 2 [ 109.372673][ T5975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'. [ 109.680123][ T5968] usb 5-1: USB disconnect, device number 2 [ 110.042962][ T5981] vxfs: WRONG superblock magic 00000000 at 1 [ 110.043407][ T5981] vxfs: WRONG superblock magic 00000000 at 8 [ 110.043424][ T5981] vxfs: can't find superblock. [ 110.581815][ T5998] Zero length message leads to an empty skb [ 110.655129][ T5968] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 110.823264][ T5968] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.823296][ T5968] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12576, setting to 64 [ 110.823323][ T5968] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.823366][ T5968] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.823390][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.907535][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.193775][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.193810][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.193832][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.193875][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.193900][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.256262][ T5968] usb 2-1: usb_control_msg returned -32 [ 111.256318][ T5968] usbtmc 2-1:16.0: can't read capabilities [ 111.388530][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.467324][ T10] usb 5-1: config 0 descriptor?? [ 111.669834][ T5968] usb 2-1: USB disconnect, device number 3 [ 112.067600][ T5889] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 112.230823][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 112.230938][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 112.279748][ T10] usb 5-1: USB disconnect, device number 3 [ 112.329096][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.329120][ T5889] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.329154][ T5889] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 112.329175][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.408634][ T6032] FAULT_INJECTION: forcing a failure. [ 112.408634][ T6032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.408665][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.1.26 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.408686][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.408707][ T6032] Call Trace: [ 112.408714][ T6032] [ 112.408722][ T6032] dump_stack_lvl+0x189/0x250 [ 112.408755][ T6032] ? __pfx____ratelimit+0x10/0x10 [ 112.408781][ T6032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.408810][ T6032] ? __pfx__printk+0x10/0x10 [ 112.408835][ T6032] ? __might_fault+0xb0/0x130 [ 112.408873][ T6032] should_fail_ex+0x46c/0x600 [ 112.408904][ T6032] _copy_from_user+0x2d/0xb0 [ 112.408927][ T6032] ___sys_sendmsg+0x158/0x2a0 [ 112.408954][ T6032] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.409011][ T6032] ? __fget_files+0x2a/0x420 [ 112.409039][ T6032] ? __fget_files+0x3a6/0x420 [ 112.409076][ T6032] __x64_sys_sendmsg+0x1a1/0x260 [ 112.409101][ T6032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.409132][ T6032] ? __pfx_ksys_write+0x10/0x10 [ 112.409159][ T6032] ? do_syscall_64+0xbe/0xfa0 [ 112.409187][ T6032] do_syscall_64+0xfa/0xfa0 [ 112.409212][ T6032] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.409236][ T6032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.409255][ T6032] ? clear_bhb_loop+0x60/0xb0 [ 112.409278][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.409297][ T6032] RIP: 0033:0x7f12159fefc9 [ 112.409313][ T6032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.409329][ T6032] RSP: 002b:00007f1213c5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.409350][ T6032] RAX: ffffffffffffffda RBX: 00007f1215c55fa0 RCX: 00007f12159fefc9 [ 112.409363][ T6032] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 112.409375][ T6032] RBP: 00007f1213c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 112.409387][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.409397][ T6032] R13: 00007f1215c56038 R14: 00007f1215c55fa0 R15: 00007ffde28098b8 [ 112.409427][ T6032] [ 112.856646][ T5889] usb 1-1: config 0 descriptor?? [ 113.473462][ T6044] misc userio: Begin command sent, but we're already running [ 113.519904][ T5889] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.613233][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.716851][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 113.720621][ T5889] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.720665][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.766353][ T5889] usb 5-1: config 0 descriptor?? [ 113.788739][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 113.794189][ T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.794219][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.827764][ T10] usb 3-1: config 0 descriptor?? [ 113.979965][ T5889] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 114.045116][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 114.060952][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.062641][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 114.062737][ T10] usb 3-1: media controller created [ 114.093461][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.097069][ T5889] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 114.097182][ T5889] usb 5-1: media controller created [ 114.246523][ T6042] FAULT_INJECTION: forcing a failure. [ 114.246523][ T6042] name failslab, interval 1, probability 0, space 0, times 1 [ 114.246560][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.2.28 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.246594][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.246607][ T6042] Call Trace: [ 114.246616][ T6042] [ 114.246626][ T6042] dump_stack_lvl+0x189/0x250 [ 114.246670][ T6042] ? __pfx____ratelimit+0x10/0x10 [ 114.246700][ T6042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.246736][ T6042] ? __pfx__printk+0x10/0x10 [ 114.246772][ T6042] ? __pfx___might_resched+0x10/0x10 [ 114.246803][ T6042] should_fail_ex+0x46c/0x600 [ 114.246841][ T6042] should_failslab+0xa8/0x100 [ 114.246886][ T6042] __kmalloc_noprof+0xcc/0x7d0 [ 114.246916][ T6042] ? kfree+0x51/0x950 [ 114.246941][ T6042] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 114.246977][ T6042] tomoyo_realpath_from_path+0xe3/0x5d0 [ 114.247008][ T6042] ? tomoyo_domain+0xda/0x130 [ 114.247043][ T6042] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 114.247081][ T6042] tomoyo_path_number_perm+0x1e8/0x5a0 [ 114.247121][ T6042] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.247164][ T6042] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 114.247197][ T6042] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.247274][ T6042] ? __fget_files+0x2a/0x420 [ 114.247311][ T6042] ? __fget_files+0x3a6/0x420 [ 114.247342][ T6042] ? __fget_files+0x2a/0x420 [ 114.247378][ T6042] security_file_ioctl+0xcb/0x2d0 [ 114.247404][ T6042] __se_sys_ioctl+0x47/0x170 [ 114.247432][ T6042] do_syscall_64+0xfa/0xfa0 [ 114.247461][ T6042] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.247491][ T6042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.247513][ T6042] ? clear_bhb_loop+0x60/0xb0 [ 114.247541][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.247562][ T6042] RIP: 0033:0x7f08c93eefc9 [ 114.247587][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.247606][ T6042] RSP: 002b:00007f08c764e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.247629][ T6042] RAX: ffffffffffffffda RBX: 00007f08c9645fa0 RCX: 00007f08c93eefc9 [ 114.247645][ T6042] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000004 [ 114.247659][ T6042] RBP: 00007f08c764e090 R08: 0000000000000000 R09: 0000000000000000 [ 114.247672][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.247685][ T6042] R13: 00007f08c9646038 R14: 00007f08c9645fa0 R15: 00007ffee85be428 [ 114.247722][ T6042] [ 114.247829][ T6042] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.256013][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.337658][ T6050] FAULT_INJECTION: forcing a failure. [ 114.337658][ T6050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.337693][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz.3.30 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.337719][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.337731][ T6050] Call Trace: [ 114.337740][ T6050] [ 114.337749][ T6050] dump_stack_lvl+0x189/0x250 [ 114.337789][ T6050] ? __pfx____ratelimit+0x10/0x10 [ 114.337816][ T6050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.337849][ T6050] ? __pfx__printk+0x10/0x10 [ 114.337876][ T6050] ? __might_fault+0xb0/0x130 [ 114.337921][ T6050] should_fail_ex+0x46c/0x600 [ 114.337959][ T6050] _copy_from_user+0x2d/0xb0 [ 114.337986][ T6050] ___sys_sendmsg+0x158/0x2a0 [ 114.338016][ T6050] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.338079][ T6050] ? __fget_files+0x2a/0x420 [ 114.338114][ T6050] ? __fget_files+0x3a6/0x420 [ 114.338155][ T6050] __x64_sys_sendmsg+0x1a1/0x260 [ 114.338184][ T6050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.338219][ T6050] ? __pfx_ksys_write+0x10/0x10 [ 114.338251][ T6050] ? do_syscall_64+0xbe/0xfa0 [ 114.338285][ T6050] do_syscall_64+0xfa/0xfa0 [ 114.338312][ T6050] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.338341][ T6050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.338361][ T6050] ? clear_bhb_loop+0x60/0xb0 [ 114.338406][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.338429][ T6050] RIP: 0033:0x7f416f9defc9 [ 114.338448][ T6050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.338466][ T6050] RSP: 002b:00007f416dc46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.338490][ T6050] RAX: ffffffffffffffda RBX: 00007f416fc35fa0 RCX: 00007f416f9defc9 [ 114.338507][ T6050] RDX: 0000000000048004 RSI: 0000200000000200 RDI: 0000000000000003 [ 114.338522][ T6050] RBP: 00007f416dc46090 R08: 0000000000000000 R09: 0000000000000000 [ 114.338535][ T6050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.338549][ T6050] R13: 00007f416fc36038 R14: 00007f416fc35fa0 R15: 00007ffd1cf2c2e8 [ 114.338593][ T6050] [ 114.458106][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.722045][ T10] az6027: usb out operation failed. (-71) [ 114.734845][ T10] az6027: usb out operation failed. (-71) [ 114.734867][ T10] stb0899_attach: Driver disabled by Kconfig [ 114.734879][ T10] az6027: no front-end attached [ 114.734879][ T10] [ 114.736217][ T10] az6027: usb out operation failed. (-71) [ 114.736246][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 114.775151][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 114.823312][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 114.823332][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 114.869818][ T5889] az6027: usb out operation failed. (-71) [ 114.878293][ T5889] az6027: usb out operation failed. (-71) [ 114.878317][ T5889] stb0899_attach: Driver disabled by Kconfig [ 114.878328][ T5889] az6027: no front-end attached [ 114.878328][ T5889] [ 114.882385][ T5889] az6027: usb out operation failed. (-71) [ 114.882405][ T5889] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 114.954381][ T10] usb 3-1: USB disconnect, device number 3 [ 115.042400][ T5889] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 115.258511][ T5889] dvb-usb: schedule remote query interval to 400 msecs. [ 115.258534][ T5889] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 115.314893][ T5889] usb 5-1: USB disconnect, device number 4 [ 115.441734][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 115.441778][ T37] audit: type=1326 audit(1762181852.165:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 115.482425][ T37] audit: type=1326 audit(1762181852.205:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 115.482714][ T37] audit: type=1326 audit(1762181852.205:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 115.483094][ T37] audit: type=1326 audit(1762181852.205:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 115.483728][ T37] audit: type=1326 audit(1762181852.205:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 115.484015][ T37] audit: type=1326 audit(1762181852.205:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 115.484387][ T37] audit: type=1326 audit(1762181852.205:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 115.554257][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 115.608007][ T5936] usb 1-1: USB disconnect, device number 2 [ 115.628318][ T37] audit: type=1326 audit(1762181852.205:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 115.628659][ T37] audit: type=1326 audit(1762181852.355:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 115.629104][ T37] audit: type=1326 audit(1762181852.355:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 115.849077][ T5889] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 116.084853][ T5936] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.294828][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 116.298689][ T5936] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.298714][ T5936] usb 1-1: config 0 has no interface number 0 [ 116.303978][ T5936] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 116.304008][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.304029][ T5936] usb 1-1: Product: syz [ 116.304056][ T5936] usb 1-1: Manufacturer: syz [ 116.304071][ T5936] usb 1-1: SerialNumber: syz [ 116.396705][ T5936] usb 1-1: config 0 descriptor?? [ 116.416470][ T5936] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 116.416716][ T5936] usb 1-1: selecting invalid altsetting 1 [ 116.416742][ T5936] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 116.519427][ T6075] misc userio: No port type given on /dev/userio [ 117.075019][ T6065] FAULT_INJECTION: forcing a failure. [ 117.075019][ T6065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.075055][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.075080][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.075093][ T6065] Call Trace: [ 117.075102][ T6065] [ 117.075111][ T6065] dump_stack_lvl+0x189/0x250 [ 117.075150][ T6065] ? __pfx____ratelimit+0x10/0x10 [ 117.075179][ T6065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.075214][ T6065] ? __pfx__printk+0x10/0x10 [ 117.075259][ T6065] should_fail_ex+0x46c/0x600 [ 117.075296][ T6065] _copy_to_user+0x31/0xb0 [ 117.075323][ T6065] simple_read_from_buffer+0xe1/0x170 [ 117.075360][ T6065] proc_fail_nth_read+0x1b6/0x220 [ 117.075388][ T6065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.075423][ T6065] ? rw_verify_area+0x2ac/0x4e0 [ 117.075450][ T6065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.075476][ T6065] vfs_read+0x206/0xa30 [ 117.075513][ T6065] ? __pfx_vfs_read+0x10/0x10 [ 117.075537][ T6065] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 117.075572][ T6065] ? mutex_lock_nested+0x154/0x1d0 [ 117.075594][ T6065] ? fdget_pos+0x253/0x320 [ 117.075636][ T6065] ksys_read+0x14b/0x260 [ 117.075662][ T6065] ? __fget_files+0x2a/0x420 [ 117.075696][ T6065] ? __pfx_ksys_read+0x10/0x10 [ 117.075728][ T6065] ? do_syscall_64+0xbe/0xfa0 [ 117.075762][ T6065] do_syscall_64+0xfa/0xfa0 [ 117.075793][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.075815][ T6065] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 117.075837][ T6065] ? clear_bhb_loop+0x60/0xb0 [ 117.075864][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.075886][ T6065] RIP: 0033:0x7f15d856d9dc [ 117.075905][ T6065] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.075923][ T6065] RSP: 002b:00007f15d67d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.075946][ T6065] RAX: ffffffffffffffda RBX: 00007f15d87c5fa0 RCX: 00007f15d856d9dc [ 117.075962][ T6065] RDX: 000000000000000f RSI: 00007f15d67d60a0 RDI: 0000000000000004 [ 117.075976][ T6065] RBP: 00007f15d67d6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.075990][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.076003][ T6065] R13: 00007f15d87c6038 R14: 00007f15d87c5fa0 R15: 00007ffff4bcc528 [ 117.076058][ T6065] [ 117.381815][ T5936] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 117.382171][ T5936] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 117.382218][ T5936] usb 1-1: media controller created [ 117.503617][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.570986][ T5936] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 117.571052][ T5936] zl10353_read_register: readreg error (reg=127, ret==-71) [ 117.592578][ T5936] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 117.622654][ T6078] nvme_fabrics: missing parameter 'transport=%s' [ 117.622669][ T6078] nvme_fabrics: missing parameter 'nqn=%s' [ 117.662765][ T5936] usb 1-1: USB disconnect, device number 3 [ 117.899153][ T6093] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 118.157407][ T5968] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.144994][ T5968] usb 2-1: Using ep0 maxpacket: 16 [ 119.149745][ T5968] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.149768][ T5968] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.154109][ T5968] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 119.154134][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.154153][ T5968] usb 2-1: Product: syz [ 119.154167][ T5968] usb 2-1: Manufacturer: syz [ 119.154180][ T5968] usb 2-1: SerialNumber: syz [ 119.484935][ T5912] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.634881][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 119.642760][ T5912] usb 3-1: config 0 has an invalid interface number: 195 but max is 0 [ 119.642786][ T5912] usb 3-1: config 0 has no interface number 0 [ 119.642920][ T5912] usb 3-1: config 0 interface 195 has no altsetting 0 [ 119.659801][ T5912] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=25.d4 [ 119.660218][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.660242][ T5912] usb 3-1: Product: syz [ 119.660272][ T5912] usb 3-1: Manufacturer: syz [ 119.660306][ T5912] usb 3-1: SerialNumber: syz [ 119.722684][ T5912] usb 3-1: config 0 descriptor?? [ 119.761008][ T5912] kvaser_usb 3-1:0.195: error -ENODEV: Cannot get usb endpoint(s) [ 119.785793][ T6107] rtc_cmos 00:00: Alarms can be up to one day in the future [ 120.370950][ T5889] usb 3-1: USB disconnect, device number 4 [ 120.445828][ T6078] syz.1.38 (6078) used greatest stack depth: 17744 bytes left [ 120.504961][ T5818] Bluetooth: hci5: command 0x1003 tx timeout [ 120.506164][ T61] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 120.676831][ T5968] usb 2-1: 0:2 : does not exist [ 120.691311][ T5968] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 120.714046][ T5968] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 121.134725][ T5968] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 121.141106][ T5968] usb 2-1: USB disconnect, device number 4 [ 121.287951][ T6110] misc userio: Begin command sent, but we're already running [ 121.498524][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.833566][ T6130] misc userio: No port type given on /dev/userio [ 123.931069][ T5818] Bluetooth: hci4: command 0x0405 tx timeout [ 124.689992][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 124.690009][ T37] audit: type=1326 audit(1762181861.415:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 124.723784][ T37] audit: type=1326 audit(1762181861.445:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 124.731884][ T5889] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.401370][ T6162] syzkaller1: entered promiscuous mode [ 126.401397][ T6162] syzkaller1: entered allmulticast mode [ 126.593304][ T6164] fuse: root generation should be zero [ 127.211316][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 127.312594][ T6174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.830423][ T37] audit: type=1326 audit(1762181867.555:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12159fefc9 code=0x7ffc0000 [ 131.292943][ T6195] misc userio: No port type given on /dev/userio [ 131.645302][ T6194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 131.899295][ T49] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.075130][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 132.083341][ T49] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 132.083369][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.083388][ T49] usb 3-1: Product: syz [ 132.083401][ T49] usb 3-1: Manufacturer: syz [ 132.083414][ T49] usb 3-1: SerialNumber: syz [ 132.215879][ T49] usb 3-1: config 0 descriptor?? [ 132.242244][ T49] usb 3-1: selecting invalid altsetting 3 [ 132.242267][ T49] comedi comedi5: could not set alternate setting 3 in high speed [ 132.242281][ T49] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 132.276243][ T49] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 132.325199][ T5874] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 132.650045][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.650789][ T5874] usb 1-1: config 0 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.650867][ T5874] usb 1-1: config 0 interface 0 has no altsetting 0 [ 132.650981][ T5874] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 132.651060][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.757395][ T5874] usb 1-1: config 0 descriptor?? [ 133.373174][ T5874] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 133.881984][ T5874] usb 3-1: USB disconnect, device number 6 [ 138.529554][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.529650][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.566488][ T5922] usb 1-1: USB disconnect, device number 4 [ 139.692153][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.713814][ T1459] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.714697][ T1459] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.714902][ T1459] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.715097][ T1459] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.715291][ T1459] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.715554][ T1459] Bluetooth: hci5: Frame reassembly failed (-84) [ 142.692330][ T6240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.745766][ T61] Bluetooth: hci5: command 0x1003 tx timeout [ 142.748915][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 143.680621][ T6250] misc userio: No port type given on /dev/userio [ 144.698384][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 144.838189][ T5922] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.984828][ T5796] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.017565][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 145.022908][ T5922] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.022935][ T5922] usb 4-1: config 0 has no interface number 0 [ 145.053130][ T5922] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 145.053160][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.053181][ T5922] usb 4-1: Product: syz [ 145.053195][ T5922] usb 4-1: Manufacturer: syz [ 145.053210][ T5922] usb 4-1: SerialNumber: syz [ 145.134213][ T5922] usb 4-1: config 0 descriptor?? [ 145.166828][ T5796] usb 5-1: Using ep0 maxpacket: 8 [ 145.307776][ T5922] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 145.307803][ T5922] usb 4-1: selecting invalid altsetting 1 [ 145.307877][ T5922] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 145.325485][ T5796] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 145.325517][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.325532][ T5796] usb 5-1: Product: syz [ 145.325542][ T5796] usb 5-1: Manufacturer: syz [ 145.325552][ T5796] usb 5-1: SerialNumber: syz [ 145.383743][ T5796] usb 5-1: config 0 descriptor?? [ 145.464828][ T5874] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 145.565811][ T6253] geneve2: entered promiscuous mode [ 145.565835][ T6253] geneve2: entered allmulticast mode [ 145.567135][ T5922] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.567608][ T5922] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 145.567645][ T5922] usb 4-1: media controller created [ 145.619993][ T5796] usb 5-1: selecting invalid altsetting 3 [ 145.620017][ T5796] comedi comedi5: could not set alternate setting 3 in high speed [ 145.620032][ T5796] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 145.657934][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.657985][ T5874] usb 3-1: config 0 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.658020][ T5874] usb 3-1: config 0 interface 0 has no altsetting 0 [ 145.658049][ T5874] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 145.658071][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.660900][ T5796] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 145.668432][ T5874] usb 3-1: config 0 descriptor?? [ 145.734482][ T5874] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 145.868340][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.890154][ T5796] usb 5-1: USB disconnect, device number 5 [ 146.113815][ T6267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.88'. [ 146.276973][ T5922] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 146.277013][ T5922] zl10353_read_register: readreg error (reg=127, ret==-71) [ 146.277840][ T5922] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 146.372530][ T5922] usb 4-1: USB disconnect, device number 3 [ 146.597452][ T5796] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.754775][ T5796] usb 1-1: Using ep0 maxpacket: 8 [ 146.759572][ T5796] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 146.759599][ T5796] usb 1-1: config 0 has no interface number 0 [ 146.759649][ T5796] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.759674][ T5796] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 146.759701][ T5796] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.759728][ T5796] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.759771][ T5796] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 146.759808][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.806811][ T5796] usb 1-1: config 0 descriptor?? [ 146.885859][ T5796] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 147.420500][ T5936] usb 1-1: USB disconnect, device number 5 [ 147.496162][ T6305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.553864][ T5936] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 147.813138][ T6309] misc userio: No port type given on /dev/userio [ 149.535532][ T5796] usb 3-1: USB disconnect, device number 7 [ 149.609411][ T6322] FAULT_INJECTION: forcing a failure. [ 149.609411][ T6322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.609455][ T6322] CPU: 0 UID: 0 PID: 6322 Comm: syz.3.97 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.609477][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 149.609496][ T6322] Call Trace: [ 149.609504][ T6322] [ 149.609513][ T6322] dump_stack_lvl+0x189/0x250 [ 149.609550][ T6322] ? __pfx____ratelimit+0x10/0x10 [ 149.609578][ T6322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.609610][ T6322] ? __pfx__printk+0x10/0x10 [ 149.609636][ T6322] ? __might_fault+0xb0/0x130 [ 149.609677][ T6322] should_fail_ex+0x46c/0x600 [ 149.609711][ T6322] _copy_from_user+0x2d/0xb0 [ 149.609734][ T6322] ___sys_sendmsg+0x158/0x2a0 [ 149.609763][ T6322] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.609826][ T6322] ? __fget_files+0x2a/0x420 [ 149.609855][ T6322] ? __fget_files+0x3a6/0x420 [ 149.609894][ T6322] __x64_sys_sendmsg+0x1a1/0x260 [ 149.609922][ T6322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.609957][ T6322] ? __pfx_ksys_write+0x10/0x10 [ 149.609988][ T6322] ? do_syscall_64+0xbe/0xfa0 [ 149.610021][ T6322] do_syscall_64+0xfa/0xfa0 [ 149.610047][ T6322] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.610075][ T6322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.610095][ T6322] ? clear_bhb_loop+0x60/0xb0 [ 149.610121][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.610141][ T6322] RIP: 0033:0x7f416f9defc9 [ 149.610159][ T6322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.610176][ T6322] RSP: 002b:00007f416dc25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.610204][ T6322] RAX: ffffffffffffffda RBX: 00007f416fc36090 RCX: 00007f416f9defc9 [ 149.610219][ T6322] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 149.610231][ T6322] RBP: 00007f416dc25090 R08: 0000000000000000 R09: 0000000000000000 [ 149.610244][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.610256][ T6322] R13: 00007f416fc36128 R14: 00007f416fc36090 R15: 00007ffd1cf2c2e8 [ 149.610290][ T6322] [ 149.694767][ T5936] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 149.857940][ T5936] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 149.857972][ T5936] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 149.857994][ T5936] usb 5-1: config 6 has no interface number 0 [ 149.858145][ T5936] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.891296][ T5936] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 149.891332][ T5936] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 149.891358][ T5936] usb 5-1: Product: syz [ 149.891376][ T5936] usb 5-1: Manufacturer: syz [ 149.891394][ T5936] usb 5-1: SerialNumber: syz [ 149.999135][ T5936] hso 5-1:6.2: Failed to find INT IN ep [ 150.253590][ T5866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 150.253626][ T5866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 150.253650][ T5866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 150.253675][ T5866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 150.253699][ T5866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 150.253723][ T5866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 150.253746][ T5866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 150.253771][ T5866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 150.253796][ T5866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 150.253818][ T5866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 150.371498][ T5866] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 150.632655][ T6334] program syz.3.102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.213519][ T5866] usb 5-1: USB disconnect, device number 6 [ 151.686836][ T6336] fido_id[6336]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.126660][ T5874] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 152.325767][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 152.379502][ T5874] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.379738][ T5874] usb 2-1: config 0 has no interface number 0 [ 152.381781][ T5874] usb 2-1: New USB device found, idVendor=9d6c, idProduct=75e1, bcdDevice=d2.34 [ 152.381954][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.607060][ T5874] usb 2-1: config 0 descriptor?? [ 152.630793][ T5874] usb-storage 2-1:0.1: USB Mass Storage device detected [ 153.390707][ T6365] FAULT_INJECTION: forcing a failure. [ 153.390707][ T6365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.390743][ T6365] CPU: 1 UID: 0 PID: 6365 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.390769][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.390782][ T6365] Call Trace: [ 153.390791][ T6365] [ 153.390800][ T6365] dump_stack_lvl+0x189/0x250 [ 153.390840][ T6365] ? __pfx____ratelimit+0x10/0x10 [ 153.390868][ T6365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.390902][ T6365] ? __pfx__printk+0x10/0x10 [ 153.390930][ T6365] ? __might_fault+0xb0/0x130 [ 153.390979][ T6365] should_fail_ex+0x46c/0x600 [ 153.391015][ T6365] _copy_from_user+0x2d/0xb0 [ 153.391042][ T6365] __x64_sys_sigaltstack+0x10f/0x280 [ 153.391080][ T6365] ? __pfx___x64_sys_sigaltstack+0x10/0x10 [ 153.391115][ T6365] ? ksys_write+0x230/0x260 [ 153.391154][ T6365] ? do_syscall_64+0xbe/0xfa0 [ 153.391189][ T6365] do_syscall_64+0xfa/0xfa0 [ 153.391218][ T6365] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.391247][ T6365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.391270][ T6365] ? clear_bhb_loop+0x60/0xb0 [ 153.391297][ T6365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.391318][ T6365] RIP: 0033:0x7f08c93eefc9 [ 153.391337][ T6365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.391355][ T6365] RSP: 002b:00007f08c764e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 153.391378][ T6365] RAX: ffffffffffffffda RBX: 00007f08c9645fa0 RCX: 00007f08c93eefc9 [ 153.391394][ T6365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000880 [ 153.391407][ T6365] RBP: 00007f08c764e090 R08: 0000000000000000 R09: 0000000000000000 [ 153.391420][ T6365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.391433][ T6365] R13: 00007f08c9646038 R14: 00007f08c9645fa0 R15: 00007ffee85be428 [ 153.391470][ T6365] [ 153.906595][ T6375] kernel read not supported for file /#! [ 153.906595][ T6375] G (pid: 6375 comm: syz.0.111) [ 153.937328][ T37] audit: type=1800 audit(1762181890.635:108): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.111" name=2321200A47 dev="mqueue" ino=10247 res=0 errno=0 [ 154.024798][ T5936] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 154.125970][ T6380] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 154.220163][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.220232][ T5936] usb 3-1: config 0 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.220262][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.220294][ T5936] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 154.220317][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.289926][ T5936] usb 3-1: config 0 descriptor?? [ 154.442464][ T5796] usb 2-1: USB disconnect, device number 6 [ 154.457301][ T5936] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 154.460648][ T6377] FAULT_INJECTION: forcing a failure. [ 154.460648][ T6377] name failslab, interval 1, probability 0, space 0, times 0 [ 154.460679][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.460702][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.460714][ T6377] Call Trace: [ 154.460722][ T6377] [ 154.460730][ T6377] dump_stack_lvl+0x189/0x250 [ 154.460760][ T6377] ? __pfx____ratelimit+0x10/0x10 [ 154.460779][ T6377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.460801][ T6377] ? __pfx__printk+0x10/0x10 [ 154.460824][ T6377] ? __pfx___might_resched+0x10/0x10 [ 154.460843][ T6377] should_fail_ex+0x46c/0x600 [ 154.460867][ T6377] should_failslab+0xa8/0x100 [ 154.460890][ T6377] __kmalloc_noprof+0xcc/0x7d0 [ 154.460909][ T6377] ? kfree+0x51/0x950 [ 154.460924][ T6377] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 154.460947][ T6377] tomoyo_realpath_from_path+0xe3/0x5d0 [ 154.460966][ T6377] ? tomoyo_domain+0xda/0x130 [ 154.460987][ T6377] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 154.461011][ T6377] tomoyo_path_number_perm+0x1e8/0x5a0 [ 154.461036][ T6377] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 154.461063][ T6377] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 154.461083][ T6377] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.461124][ T6377] ? __fget_files+0x2a/0x420 [ 154.461148][ T6377] ? __fget_files+0x3a6/0x420 [ 154.461167][ T6377] ? __fget_files+0x2a/0x420 [ 154.461196][ T6377] security_file_ioctl+0xcb/0x2d0 [ 154.461217][ T6377] __se_sys_ioctl+0x47/0x170 [ 154.461262][ T6377] do_syscall_64+0xfa/0xfa0 [ 154.461289][ T6377] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.461317][ T6377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.461339][ T6377] ? clear_bhb_loop+0x60/0xb0 [ 154.461367][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.461387][ T6377] RIP: 0033:0x7f416f9defc9 [ 154.461406][ T6377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.461424][ T6377] RSP: 002b:00007f416dc46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.461447][ T6377] RAX: ffffffffffffffda RBX: 00007f416fc35fa0 RCX: 00007f416f9defc9 [ 154.461463][ T6377] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 154.461476][ T6377] RBP: 00007f416dc46090 R08: 0000000000000000 R09: 0000000000000000 [ 154.461489][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.461501][ T6377] R13: 00007f416fc36038 R14: 00007f416fc35fa0 R15: 00007ffd1cf2c2e8 [ 154.461539][ T6377] [ 154.461728][ T6377] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.734899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.020399][ T6392] FAULT_INJECTION: forcing a failure. [ 155.020399][ T6392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.020448][ T6392] CPU: 0 UID: 0 PID: 6392 Comm: syz.0.114 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.020472][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 155.020485][ T6392] Call Trace: [ 155.020493][ T6392] [ 155.020503][ T6392] dump_stack_lvl+0x189/0x250 [ 155.020542][ T6392] ? __pfx____ratelimit+0x10/0x10 [ 155.020571][ T6392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.020606][ T6392] ? __pfx__printk+0x10/0x10 [ 155.020633][ T6392] ? __might_fault+0xb0/0x130 [ 155.020677][ T6392] should_fail_ex+0x46c/0x600 [ 155.020714][ T6392] _copy_from_user+0x2d/0xb0 [ 155.020740][ T6392] ___sys_sendmsg+0x158/0x2a0 [ 155.020771][ T6392] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.020839][ T6392] ? __fget_files+0x2a/0x420 [ 155.020871][ T6392] ? __fget_files+0x3a6/0x420 [ 155.020914][ T6392] __sys_sendmmsg+0x22d/0x430 [ 155.020948][ T6392] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.020987][ T6392] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 155.021030][ T6392] ? ksys_write+0x230/0x260 [ 155.021060][ T6392] ? __pfx_ksys_write+0x10/0x10 [ 155.021095][ T6392] __x64_sys_sendmmsg+0xa0/0xc0 [ 155.021124][ T6392] do_syscall_64+0xfa/0xfa0 [ 155.021152][ T6392] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.021189][ T6392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.021210][ T6392] ? clear_bhb_loop+0x60/0xb0 [ 155.021237][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.021257][ T6392] RIP: 0033:0x7f15d856efc9 [ 155.021275][ T6392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.021293][ T6392] RSP: 002b:00007f15d67d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.021315][ T6392] RAX: ffffffffffffffda RBX: 00007f15d87c5fa0 RCX: 00007f15d856efc9 [ 155.021331][ T6392] RDX: 0000000000000002 RSI: 0000200000005d40 RDI: 0000000000000003 [ 155.021345][ T6392] RBP: 00007f15d67d6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.021358][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.021371][ T6392] R13: 00007f15d87c6038 R14: 00007f15d87c5fa0 R15: 00007ffff4bcc528 [ 155.021407][ T6392] [ 155.503863][ T6397] FAULT_INJECTION: forcing a failure. [ 155.503863][ T6397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.503898][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.503922][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 155.503935][ T6397] Call Trace: [ 155.503944][ T6397] [ 155.503953][ T6397] dump_stack_lvl+0x189/0x250 [ 155.503991][ T6397] ? __pfx____ratelimit+0x10/0x10 [ 155.504019][ T6397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.504052][ T6397] ? __pfx__printk+0x10/0x10 [ 155.504079][ T6397] ? __might_fault+0xb0/0x130 [ 155.504122][ T6397] should_fail_ex+0x46c/0x600 [ 155.504158][ T6397] _copy_from_user+0x2d/0xb0 [ 155.504184][ T6397] ___sys_sendmsg+0x158/0x2a0 [ 155.504216][ T6397] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.504303][ T6397] ? __fget_files+0x2a/0x420 [ 155.504346][ T6397] ? __fget_files+0x3a6/0x420 [ 155.504397][ T6397] __x64_sys_sendmsg+0x1a1/0x260 [ 155.504428][ T6397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.504465][ T6397] ? __pfx_ksys_write+0x10/0x10 [ 155.504498][ T6397] ? do_syscall_64+0xbe/0xfa0 [ 155.504533][ T6397] do_syscall_64+0xfa/0xfa0 [ 155.504561][ T6397] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.504591][ T6397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.504612][ T6397] ? clear_bhb_loop+0x60/0xb0 [ 155.504643][ T6397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.504664][ T6397] RIP: 0033:0x7f15d856efc9 [ 155.504682][ T6397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.504700][ T6397] RSP: 002b:00007f15d67d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.504722][ T6397] RAX: ffffffffffffffda RBX: 00007f15d87c5fa0 RCX: 00007f15d856efc9 [ 155.504738][ T6397] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 155.504751][ T6397] RBP: 00007f15d67d6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.504764][ T6397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.504776][ T6397] R13: 00007f15d87c6038 R14: 00007f15d87c5fa0 R15: 00007ffff4bcc528 [ 155.504811][ T6397] [ 156.879848][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 157.030698][ T5796] usb 3-1: USB disconnect, device number 8 [ 157.241321][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.651782][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.887108][ T6421] netlink: 'syz.1.122': attribute type 10 has an invalid length. [ 157.888309][ T6421] veth0_vlan: entered allmulticast mode [ 158.119013][ T6421] veth0_vlan: left promiscuous mode [ 158.149119][ T6421] veth0_vlan: entered promiscuous mode [ 158.197032][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.200368][ T6421] team0: Device veth0_vlan failed to register rx_handler [ 158.208522][ T6424] FAULT_INJECTION: forcing a failure. [ 158.208522][ T6424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.208556][ T6424] CPU: 0 UID: 0 PID: 6424 Comm: syz.0.121 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.208581][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.208594][ T6424] Call Trace: [ 158.208602][ T6424] [ 158.208611][ T6424] dump_stack_lvl+0x189/0x250 [ 158.208650][ T6424] ? __pfx____ratelimit+0x10/0x10 [ 158.208680][ T6424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.208715][ T6424] ? __pfx__printk+0x10/0x10 [ 158.208741][ T6424] ? __might_fault+0xb0/0x130 [ 158.208787][ T6424] should_fail_ex+0x46c/0x600 [ 158.208824][ T6424] _copy_from_user+0x2d/0xb0 [ 158.208850][ T6424] ___sys_sendmsg+0x158/0x2a0 [ 158.208881][ T6424] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.208952][ T6424] ? __fget_files+0x2a/0x420 [ 158.208996][ T6424] ? __fget_files+0x3a6/0x420 [ 158.209040][ T6424] __x64_sys_sendmsg+0x1a1/0x260 [ 158.209072][ T6424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.209111][ T6424] ? __pfx_ksys_write+0x10/0x10 [ 158.209144][ T6424] ? do_syscall_64+0xbe/0xfa0 [ 158.209180][ T6424] do_syscall_64+0xfa/0xfa0 [ 158.209209][ T6424] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.209240][ T6424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.209263][ T6424] ? clear_bhb_loop+0x60/0xb0 [ 158.209291][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.209313][ T6424] RIP: 0033:0x7f15d856efc9 [ 158.209332][ T6424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.209351][ T6424] RSP: 002b:00007f15d67b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.209374][ T6424] RAX: ffffffffffffffda RBX: 00007f15d87c6090 RCX: 00007f15d856efc9 [ 158.209390][ T6424] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000003 [ 158.209404][ T6424] RBP: 00007f15d67b5090 R08: 0000000000000000 R09: 0000000000000000 [ 158.209418][ T6424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.209431][ T6424] R13: 00007f15d87c6128 R14: 00007f15d87c6090 R15: 00007ffff4bcc528 [ 158.209468][ T6424] [ 158.448804][ T6427] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.457243][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.902441][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.954956][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.234810][ T5874] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.863909][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.894837][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 160.899628][ T5874] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 160.899658][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.934958][ T5936] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 160.936921][ T5874] usb 1-1: config 0 descriptor?? [ 161.112591][ T5936] usb 2-1: device descriptor read/64, error -71 [ 161.300114][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.420420][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.702844][ T5874] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 162.037659][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 162.054176][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.075161][ T5874] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 162.075211][ T5874] usb 1-1: media controller created [ 162.094904][ T6429] FAULT_INJECTION: forcing a failure. [ 162.094904][ T6429] name failslab, interval 1, probability 0, space 0, times 0 [ 162.094946][ T6429] CPU: 0 UID: 0 PID: 6429 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 162.094974][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.094997][ T6429] Call Trace: [ 162.095006][ T6429] [ 162.095016][ T6429] dump_stack_lvl+0x189/0x250 [ 162.095061][ T6429] ? __pfx____ratelimit+0x10/0x10 [ 162.095094][ T6429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.095132][ T6429] ? __pfx__printk+0x10/0x10 [ 162.095169][ T6429] ? __pfx___might_resched+0x10/0x10 [ 162.095203][ T6429] should_fail_ex+0x46c/0x600 [ 162.095243][ T6429] should_failslab+0xa8/0x100 [ 162.095282][ T6429] __kmalloc_noprof+0xcc/0x7d0 [ 162.095314][ T6429] ? kfree+0x51/0x950 [ 162.095340][ T6429] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 162.095377][ T6429] tomoyo_realpath_from_path+0xe3/0x5d0 [ 162.095408][ T6429] ? tomoyo_domain+0xda/0x130 [ 162.095445][ T6429] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 162.095486][ T6429] tomoyo_path_number_perm+0x1e8/0x5a0 [ 162.095528][ T6429] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.095573][ T6429] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 162.095608][ T6429] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.095674][ T6429] ? __fget_files+0x2a/0x420 [ 162.095714][ T6429] ? __fget_files+0x3a6/0x420 [ 162.095747][ T6429] ? __fget_files+0x2a/0x420 [ 162.095786][ T6429] security_file_ioctl+0xcb/0x2d0 [ 162.095814][ T6429] __se_sys_ioctl+0x47/0x170 [ 162.095847][ T6429] do_syscall_64+0xfa/0xfa0 [ 162.095880][ T6429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.095904][ T6429] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 162.095928][ T6429] ? clear_bhb_loop+0x60/0xb0 [ 162.095958][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.095987][ T6429] RIP: 0033:0x7f15d856efc9 [ 162.096009][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.096028][ T6429] RSP: 002b:00007f15d67d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.096052][ T6429] RAX: ffffffffffffffda RBX: 00007f15d87c5fa0 RCX: 00007f15d856efc9 [ 162.096090][ T6429] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000004 [ 162.096104][ T6429] RBP: 00007f15d67d6090 R08: 0000000000000000 R09: 0000000000000000 [ 162.096121][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.096136][ T6429] R13: 00007f15d87c6038 R14: 00007f15d87c5fa0 R15: 00007ffff4bcc528 [ 162.096176][ T6429] [ 162.096186][ T6429] ERROR: Out of memory at tomoyo_realpath_from_path. [ 162.096467][ T6429] dib0700: tx buffer length is larger than 4. Not supported. [ 162.104774][ T5936] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.234774][ T5936] usb 2-1: device descriptor read/64, error -71 [ 162.348961][ T5936] usb usb2-port1: attempt power cycle [ 162.471124][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.681993][ T6452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.130'. [ 162.704779][ T5936] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.725326][ T5874] DVB: Unable to find symbol dib7000p_attach() [ 162.725341][ T5874] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 162.725859][ T5936] usb 2-1: device descriptor read/8, error -71 [ 162.877108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.946470][ T5796] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 162.954831][ T5874] rc_core: IR keymap rc-dib0700-rc5 not found [ 162.954852][ T5874] Registered IR keymap rc-empty [ 162.955195][ T5874] dvb-usb: could not initialize remote control. [ 162.955206][ T5874] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 162.997117][ T5874] usb 1-1: USB disconnect, device number 6 [ 163.017665][ T5936] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 163.037009][ T5936] usb 2-1: device descriptor read/8, error -71 [ 163.055369][ T5874] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 163.106573][ T5796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.106631][ T5796] usb 5-1: config 0 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.106660][ T5796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.106694][ T5796] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 163.106719][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.138827][ T5796] usb 5-1: config 0 descriptor?? [ 163.155626][ T5936] usb usb2-port1: unable to enumerate USB device [ 163.189538][ T5796] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 163.360095][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 163.625088][ T5874] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.680165][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.776470][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 163.813797][ T5874] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 163.813828][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.813848][ T5874] usb 4-1: Product: syz [ 163.813974][ T5874] usb 4-1: Manufacturer: syz [ 163.813991][ T5874] usb 4-1: SerialNumber: syz [ 163.839194][ T5874] usb 4-1: config 0 descriptor?? [ 163.865161][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 163.927986][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 163.928033][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.928068][ T10] usb 3-1: Product: syz [ 163.928081][ T10] usb 3-1: Manufacturer: syz [ 163.928095][ T10] usb 3-1: SerialNumber: syz [ 163.970212][ T5874] usb 4-1: selecting invalid altsetting 3 [ 163.970237][ T5874] comedi comedi5: could not set alternate setting 3 in high speed [ 163.970252][ T5874] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 163.999357][ T10] usb 3-1: config 0 descriptor?? [ 164.022718][ T5874] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 164.041170][ T10] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 164.068122][ T6475] vlan2: entered promiscuous mode [ 164.068300][ T6475] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 164.424176][ T5874] usb 4-1: USB disconnect, device number 4 [ 164.427124][ T6461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.132'. [ 164.483359][ T10] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 164.483904][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 164.520226][ T10] usb 3-1: USB disconnect, device number 9 [ 164.804864][ T49] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.281615][ T6503] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.829229][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.829285][ T49] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 165.829312][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.840469][ T49] usb 1-1: config 0 descriptor?? [ 166.873851][ T6517] netlink: 240 bytes leftover after parsing attributes in process `syz.2.140'. [ 166.876112][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 166.953123][ T5866] usb 5-1: USB disconnect, device number 7 [ 169.100883][ T49] usbhid 1-1:0.0: can't add hid device: -71 [ 169.101011][ T49] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 169.134850][ T49] usb 1-1: USB disconnect, device number 7 [ 169.262344][ T6528] FAULT_INJECTION: forcing a failure. [ 169.262344][ T6528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.262379][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz.1.143 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 169.262402][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.262414][ T6528] Call Trace: [ 169.262422][ T6528] [ 169.262431][ T6528] dump_stack_lvl+0x189/0x250 [ 169.262468][ T6528] ? __pfx____ratelimit+0x10/0x10 [ 169.262495][ T6528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.262527][ T6528] ? __pfx__printk+0x10/0x10 [ 169.262553][ T6528] ? __might_fault+0xb0/0x130 [ 169.262595][ T6528] should_fail_ex+0x46c/0x600 [ 169.262630][ T6528] _copy_from_user+0x2d/0xb0 [ 169.262655][ T6528] ___sys_sendmsg+0x158/0x2a0 [ 169.262684][ T6528] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.262747][ T6528] ? __fget_files+0x2a/0x420 [ 169.262777][ T6528] ? __fget_files+0x3a6/0x420 [ 169.262817][ T6528] __x64_sys_sendmsg+0x1a1/0x260 [ 169.262846][ T6528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.262882][ T6528] ? __pfx_ksys_write+0x10/0x10 [ 169.262912][ T6528] ? do_syscall_64+0xbe/0xfa0 [ 169.262945][ T6528] do_syscall_64+0xfa/0xfa0 [ 169.262972][ T6528] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.263000][ T6528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.263021][ T6528] ? clear_bhb_loop+0x60/0xb0 [ 169.263047][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.263068][ T6528] RIP: 0033:0x7f12159fefc9 [ 169.263085][ T6528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.263103][ T6528] RSP: 002b:00007f1213c5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.263124][ T6528] RAX: ffffffffffffffda RBX: 00007f1215c55fa0 RCX: 00007f12159fefc9 [ 169.263139][ T6528] RDX: 0000000000008800 RSI: 0000200000000180 RDI: 0000000000000003 [ 169.263153][ T6528] RBP: 00007f1213c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 169.263166][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.263178][ T6528] R13: 00007f1215c56038 R14: 00007f1215c55fa0 R15: 00007ffde28098b8 [ 169.263212][ T6528] [ 170.047409][ T5968] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 170.047750][ T5796] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 170.234931][ T5796] usb 3-1: Using ep0 maxpacket: 8 [ 170.485110][ T5796] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 170.485139][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.485159][ T5796] usb 3-1: Product: syz [ 170.485179][ T5796] usb 3-1: Manufacturer: syz [ 170.485194][ T5796] usb 3-1: SerialNumber: syz [ 170.510055][ T5968] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 170.510204][ T5968] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 170.510227][ T5968] usb 2-1: Product: syz [ 170.510244][ T5968] usb 2-1: Manufacturer: syz [ 170.510260][ T5968] usb 2-1: SerialNumber: syz [ 171.047818][ T6548] misc userio: No port type given on /dev/userio [ 171.133140][ T5968] usb 2-1: config 0 descriptor?? [ 171.158593][ T5968] ch341 2-1:0.0: ch341-uart converter detected [ 171.210511][ T5796] usb 3-1: config 0 descriptor?? [ 171.583142][ T5796] usb 3-1: selecting invalid altsetting 3 [ 171.583167][ T5796] comedi comedi5: could not set alternate setting 3 in high speed [ 171.583182][ T5796] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 171.683875][ T5796] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 171.853763][ T37] audit: type=1326 audit(1762181908.575:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6537 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15d850b099 code=0x7ffc0000 [ 171.856156][ T37] audit: type=1326 audit(1762181908.575:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6537 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d856efc9 code=0x7ffc0000 [ 171.864135][ T37] audit: type=1326 audit(1762181908.585:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6537 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15d850b099 code=0x7ffc0000 [ 171.878662][ T37] audit: type=1326 audit(1762181908.595:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6537 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15d850b099 code=0x7ffc0000 [ 171.890577][ T37] audit: type=1326 audit(1762181908.615:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6537 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15d850b099 code=0x7ffc0000 [ 171.904202][ T37] audit: type=1326 audit(1762181908.625:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6537 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15d850b099 code=0x7ffc0000 [ 171.918692][ T37] audit: type=1326 audit(1762181908.635:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6537 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15d850b099 code=0x7ffc0000 [ 171.933911][ T37] audit: type=1326 audit(1762181908.645:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6537 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15d850b099 code=0x7ffc0000 [ 171.942413][ T37] audit: type=1326 audit(1762181908.655:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6537 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d856efc9 code=0x7ffc0000 [ 171.963915][ T37] audit: type=1326 audit(1762181908.675:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6537 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15d850b099 code=0x7ffc0000 [ 171.999591][ T49] usb 3-1: USB disconnect, device number 10 [ 172.558333][ T5968] usb 2-1: failed to send control message: -110 [ 172.558396][ T5968] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 172.634706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.727037][ T5866] usb 2-1: USB disconnect, device number 11 [ 172.730366][ T5866] ch341 2-1:0.0: device disconnected [ 173.254871][ T5796] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 173.445715][ T6577] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.546118][ T5866] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 174.194768][ T5796] usb 4-1: Using ep0 maxpacket: 32 [ 174.210862][ T5796] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 174.210890][ T5796] usb 4-1: config 0 has no interface number 0 [ 174.210937][ T5796] usb 4-1: config 0 interface 184 has no altsetting 0 [ 174.214351][ T5796] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 174.214380][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.214402][ T5796] usb 4-1: Product: syz [ 174.214417][ T5796] usb 4-1: Manufacturer: syz [ 174.214433][ T5796] usb 4-1: SerialNumber: syz [ 174.417476][ T5796] usb 4-1: config 0 descriptor?? [ 174.438958][ T5796] smsc75xx v1.0.0 [ 175.053038][ T5796] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 175.053072][ T5796] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 176.089934][ T6594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.470863][ T5866] usb 2-1: device descriptor read/all, error -71 [ 176.472231][ T6599] FAULT_INJECTION: forcing a failure. [ 176.472231][ T6599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.472263][ T6599] CPU: 1 UID: 0 PID: 6599 Comm: syz.4.156 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.472288][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.472301][ T6599] Call Trace: [ 176.472310][ T6599] [ 176.472319][ T6599] dump_stack_lvl+0x189/0x250 [ 176.472357][ T6599] ? __pfx____ratelimit+0x10/0x10 [ 176.472386][ T6599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.472421][ T6599] ? __pfx__printk+0x10/0x10 [ 176.472465][ T6599] should_fail_ex+0x46c/0x600 [ 176.472500][ T6599] _copy_to_user+0x31/0xb0 [ 176.472527][ T6599] simple_read_from_buffer+0xe1/0x170 [ 176.472563][ T6599] proc_fail_nth_read+0x1b6/0x220 [ 176.472592][ T6599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.472620][ T6599] ? rw_verify_area+0x2ac/0x4e0 [ 176.472647][ T6599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.472673][ T6599] vfs_read+0x206/0xa30 [ 176.472709][ T6599] ? __pfx_vfs_read+0x10/0x10 [ 176.472732][ T6599] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 176.472766][ T6599] ? mutex_lock_nested+0x154/0x1d0 [ 176.472789][ T6599] ? fdget_pos+0x253/0x320 [ 176.472831][ T6599] ksys_read+0x14b/0x260 [ 176.472855][ T6599] ? __fget_files+0x2a/0x420 [ 176.472888][ T6599] ? __pfx_ksys_read+0x10/0x10 [ 176.472920][ T6599] ? do_syscall_64+0xbe/0xfa0 [ 176.472955][ T6599] do_syscall_64+0xfa/0xfa0 [ 176.472984][ T6599] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.473014][ T6599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.473036][ T6599] ? clear_bhb_loop+0x60/0xb0 [ 176.473062][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.473084][ T6599] RIP: 0033:0x7fc27079d9dc [ 176.473103][ T6599] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 176.473122][ T6599] RSP: 002b:00007fc26e9dd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.473146][ T6599] RAX: ffffffffffffffda RBX: 00007fc2709f6090 RCX: 00007fc27079d9dc [ 176.473161][ T6599] RDX: 000000000000000f RSI: 00007fc26e9dd0a0 RDI: 0000000000000006 [ 176.473182][ T6599] RBP: 00007fc26e9dd090 R08: 0000000000000000 R09: 0000000000000000 [ 176.473195][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.473208][ T6599] R13: 00007fc2709f6128 R14: 00007fc2709f6090 R15: 00007ffe76d1c9c8 [ 176.473244][ T6599] [ 176.838971][ T5796] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 176.839005][ T5796] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 176.839025][ T5796] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 176.839694][ T5796] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 177.145205][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 177.554084][ T6623] debugfs: 'ptm0' already exists in 'caif_serial' [ 177.604805][ T5866] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 177.914414][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 177.950110][ T5866] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 177.950149][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.950171][ T5866] usb 2-1: Product: syz [ 177.950187][ T5866] usb 2-1: Manufacturer: syz [ 177.950203][ T5866] usb 2-1: SerialNumber: syz [ 177.992233][ T5866] usb 2-1: config 0 descriptor?? [ 178.106163][ T61] Bluetooth: hci4: command 0x0405 tx timeout [ 178.172853][ T5866] usb 2-1: selecting invalid altsetting 3 [ 178.172879][ T5866] comedi comedi5: could not set alternate setting 3 in high speed [ 178.172895][ T5866] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 178.235161][ T5874] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 178.337840][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'. [ 178.353622][ T5866] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 178.353749][ T5968] usb 4-1: USB disconnect, device number 5 [ 178.411796][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 178.495344][ T5874] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 178.495371][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.495390][ T5874] usb 3-1: Product: syz [ 178.495404][ T5874] usb 3-1: Manufacturer: syz [ 178.495417][ T5874] usb 3-1: SerialNumber: syz [ 178.642172][ T5866] usb 2-1: USB disconnect, device number 13 [ 178.675435][ T5912] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 179.010538][ T5874] usb 3-1: config 0 descriptor?? [ 180.628285][ T6646] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.724740][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 181.727190][ T5912] usb 1-1: device descriptor read/all, error -71 [ 181.736607][ T5874] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 181.736672][ T5874] pctv452e: pctv452e_power_ctrl: 1 [ 181.736672][ T5874] [ 181.736731][ T5874] usb 3-1: selecting invalid altsetting 3 [ 181.736749][ T5874] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 181.736749][ T5874] [ 181.736768][ T5874] dvb-usb: bulk message failed: -22 (5/0) [ 181.813924][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.830392][ T5874] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 181.830468][ T5874] usb 3-1: media controller created [ 181.831160][ T5874] dvb-usb: bulk message failed: -22 (8/0) [ 181.831181][ T5874] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 181.831274][ T5874] dvb-usb: MAC address reading failed. [ 182.042459][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.264805][ T5936] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 182.415923][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 182.430474][ T5936] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 182.430502][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.430522][ T5936] usb 4-1: Product: syz [ 182.430536][ T5936] usb 4-1: Manufacturer: syz [ 182.430549][ T5936] usb 4-1: SerialNumber: syz [ 182.480485][ T5936] usb 4-1: config 0 descriptor?? [ 182.534894][ T5936] usb 4-1: selecting invalid altsetting 3 [ 182.534919][ T5936] comedi comedi5: could not set alternate setting 3 in high speed [ 182.534934][ T5936] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 182.539627][ T5936] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 182.588116][ T6669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.974738][ T5936] usb 4-1: USB disconnect, device number 6 [ 183.149329][ T6674] FAULT_INJECTION: forcing a failure. [ 183.149329][ T6674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.149364][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.0.170 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 183.149392][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.149401][ T6674] Call Trace: [ 183.149407][ T6674] [ 183.149413][ T6674] dump_stack_lvl+0x189/0x250 [ 183.149445][ T6674] ? __pfx____ratelimit+0x10/0x10 [ 183.149466][ T6674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.149489][ T6674] ? __pfx__printk+0x10/0x10 [ 183.149507][ T6674] ? __might_fault+0xb0/0x130 [ 183.149554][ T6674] should_fail_ex+0x46c/0x600 [ 183.149579][ T6674] _copy_from_user+0x2d/0xb0 [ 183.149597][ T6674] ___sys_sendmsg+0x158/0x2a0 [ 183.149618][ T6674] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.149662][ T6674] ? __fget_files+0x2a/0x420 [ 183.149684][ T6674] ? __fget_files+0x3a6/0x420 [ 183.149718][ T6674] __x64_sys_sendmsg+0x1a1/0x260 [ 183.149752][ T6674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.149776][ T6674] ? __pfx_ksys_write+0x10/0x10 [ 183.149816][ T6674] ? do_syscall_64+0xbe/0xfa0 [ 183.149839][ T6674] do_syscall_64+0xfa/0xfa0 [ 183.149858][ T6674] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.149878][ T6674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.149893][ T6674] ? clear_bhb_loop+0x60/0xb0 [ 183.149911][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.149926][ T6674] RIP: 0033:0x7f15d856efc9 [ 183.149944][ T6674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.149957][ T6674] RSP: 002b:00007f15d67b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.149973][ T6674] RAX: ffffffffffffffda RBX: 00007f15d87c6090 RCX: 00007f15d856efc9 [ 183.149984][ T6674] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000005 [ 183.149994][ T6674] RBP: 00007f15d67b5090 R08: 0000000000000000 R09: 0000000000000000 [ 183.150004][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.150012][ T6674] R13: 00007f15d87c6128 R14: 00007f15d87c6090 R15: 00007ffff4bcc528 [ 183.150036][ T6674] [ 183.453330][ T5874] DVB: Unable to find symbol stb0899_attach() [ 183.453347][ T5874] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 183.469804][ T6679] netlink: 'syz.2.173': attribute type 3 has an invalid length. [ 183.614823][ T5874] rc_core: IR keymap rc-tt-1500 not found [ 183.614844][ T5874] Registered IR keymap rc-empty [ 183.622562][ T5874] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 183.688831][ T5874] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11 [ 183.710496][ T5874] dvb-usb: schedule remote query interval to 100 msecs. [ 183.710516][ T5874] pctv452e: pctv452e_power_ctrl: 0 [ 183.710516][ T5874] [ 183.710527][ T5874] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 183.754451][ T5874] usb 3-1: USB disconnect, device number 11 [ 184.566756][ T37] kauditd_printk_skb: 43 callbacks suppressed [ 184.566776][ T37] audit: type=1326 audit(1762181921.285:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 184.604368][ T5874] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 184.615918][ T37] audit: type=1326 audit(1762181921.295:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 184.616215][ T37] audit: type=1326 audit(1762181921.345:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 184.617063][ T37] audit: type=1326 audit(1762181921.345:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 184.617419][ T37] audit: type=1326 audit(1762181921.345:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 184.619395][ T37] audit: type=1326 audit(1762181921.345:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 184.619621][ T37] audit: type=1326 audit(1762181921.345:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 184.619877][ T37] audit: type=1326 audit(1762181921.345:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 184.620080][ T37] audit: type=1326 audit(1762181921.345:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 184.655243][ T37] audit: type=1326 audit(1762181921.385:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416f9defc9 code=0x7ffc0000 [ 184.974693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 184.984689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 184.994660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 185.004663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 185.014654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 185.024657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 185.034655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 185.559322][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 185.559374][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 187.715294][ T5866] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 188.239113][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 189.340138][ T5866] usb 4-1: device descriptor read/all, error -71 [ 189.627704][ T5922] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 189.714584][ T6724] syzkaller1: entered promiscuous mode [ 189.720449][ T6724] syzkaller1: entered allmulticast mode [ 189.798639][ T5922] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 189.798662][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.798676][ T5922] usb 1-1: config 0 has no interface number 0 [ 189.798714][ T5922] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 189.798734][ T5922] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 189.798754][ T5922] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.694836][ T5922] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 190.694857][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.694870][ T5922] usb 1-1: Product: syz [ 190.694898][ T5922] usb 1-1: Manufacturer: syz [ 190.694909][ T5922] usb 1-1: SerialNumber: syz [ 190.767098][ T5922] usb 1-1: config 0 descriptor?? [ 190.771415][ T6717] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 191.065358][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 191.065375][ T37] audit: type=1326 audit(1762181927.785:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c93eefc9 code=0x7ffc0000 [ 191.065422][ T37] audit: type=1326 audit(1762181927.795:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c93eefc9 code=0x7ffc0000 [ 191.184756][ T5894] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 191.228954][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.229522][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.348938][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.348984][ T5894] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 191.349007][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.386061][ T5894] usb 2-1: config 0 descriptor?? [ 191.544837][ T5968] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 191.897624][ T5894] usbhid 2-1:0.0: can't add hid device: -71 [ 191.897751][ T5894] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 191.924794][ T5968] usb 3-1: Using ep0 maxpacket: 8 [ 191.939695][ T5968] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 191.939727][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.939748][ T5968] usb 3-1: Product: syz [ 191.939764][ T5968] usb 3-1: Manufacturer: syz [ 191.939780][ T5968] usb 3-1: SerialNumber: syz [ 192.288182][ T5894] usb 2-1: USB disconnect, device number 14 [ 192.314560][ T5968] usb 3-1: config 0 descriptor?? [ 192.666136][ T6760] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 193.314508][ T5968] usb 3-1: selecting invalid altsetting 3 [ 193.314534][ T5968] comedi comedi5: could not set alternate setting 3 in high speed [ 193.314549][ T5968] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 193.356124][ T5968] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 193.385413][ T5968] usb 3-1: USB disconnect, device number 12 [ 194.605407][ T5894] usb 1-1: USB disconnect, device number 10 [ 194.883297][ T6763] mmap: syz.3.190 (6763) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 196.050240][ T6770] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 196.133206][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 196.321218][ T6783] FAULT_INJECTION: forcing a failure. [ 196.321218][ T6783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.321257][ T6783] CPU: 0 UID: 0 PID: 6783 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.321303][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.321325][ T6783] Call Trace: [ 196.321333][ T6783] [ 196.321343][ T6783] dump_stack_lvl+0x189/0x250 [ 196.321382][ T6783] ? __pfx____ratelimit+0x10/0x10 [ 196.321411][ T6783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.321445][ T6783] ? __pfx__printk+0x10/0x10 [ 196.321473][ T6783] ? __might_fault+0xb0/0x130 [ 196.321517][ T6783] should_fail_ex+0x46c/0x600 [ 196.321553][ T6783] _copy_from_user+0x2d/0xb0 [ 196.321579][ T6783] ___sys_sendmsg+0x158/0x2a0 [ 196.321609][ T6783] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.321676][ T6783] ? __fget_files+0x2a/0x420 [ 196.321707][ T6783] ? __fget_files+0x3a6/0x420 [ 196.321750][ T6783] __x64_sys_sendmsg+0x1a1/0x260 [ 196.321780][ T6783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.321818][ T6783] ? __pfx_ksys_write+0x10/0x10 [ 196.321850][ T6783] ? do_syscall_64+0xbe/0xfa0 [ 196.321885][ T6783] do_syscall_64+0xfa/0xfa0 [ 196.321930][ T6783] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.321958][ T6783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.321979][ T6783] ? clear_bhb_loop+0x60/0xb0 [ 196.322004][ T6783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.322025][ T6783] RIP: 0033:0x7f12159fefc9 [ 196.322042][ T6783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.322059][ T6783] RSP: 002b:00007f1213c3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.322080][ T6783] RAX: ffffffffffffffda RBX: 00007f1215c56090 RCX: 00007f12159fefc9 [ 196.322095][ T6783] RDX: 00000000000000d4 RSI: 0000200000000140 RDI: 0000000000000003 [ 196.322107][ T6783] RBP: 00007f1213c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 196.322120][ T6783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.322132][ T6783] R13: 00007f1215c56128 R14: 00007f1215c56090 R15: 00007ffde28098b8 [ 196.322165][ T6783] [ 197.259687][ T6795] syzkaller1: entered promiscuous mode [ 197.259711][ T6795] syzkaller1: entered allmulticast mode [ 197.538033][ T6805] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.423380][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.423452][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.961485][ T6816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.262253][ T6819] FAULT_INJECTION: forcing a failure. [ 200.262253][ T6819] name failslab, interval 1, probability 0, space 0, times 0 [ 200.262288][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.1.206 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 200.262313][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.262326][ T6819] Call Trace: [ 200.262334][ T6819] [ 200.262343][ T6819] dump_stack_lvl+0x189/0x250 [ 200.262382][ T6819] ? __pfx____ratelimit+0x10/0x10 [ 200.262411][ T6819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.262453][ T6819] ? __pfx__printk+0x10/0x10 [ 200.262487][ T6819] ? __pfx___might_resched+0x10/0x10 [ 200.262516][ T6819] should_fail_ex+0x46c/0x600 [ 200.262554][ T6819] should_failslab+0xa8/0x100 [ 200.262588][ T6819] __kmalloc_noprof+0xcc/0x7d0 [ 200.262617][ T6819] ? kfree+0x51/0x950 [ 200.262640][ T6819] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 200.262675][ T6819] tomoyo_realpath_from_path+0xe3/0x5d0 [ 200.262704][ T6819] ? tomoyo_domain+0xda/0x130 [ 200.262739][ T6819] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 200.262776][ T6819] tomoyo_path_number_perm+0x1e8/0x5a0 [ 200.262819][ T6819] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 200.262860][ T6819] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 200.262892][ T6819] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.262954][ T6819] ? __fget_files+0x2a/0x420 [ 200.262992][ T6819] ? __fget_files+0x3a6/0x420 [ 200.263021][ T6819] ? __fget_files+0x2a/0x420 [ 200.263057][ T6819] security_file_ioctl+0xcb/0x2d0 [ 200.263083][ T6819] __se_sys_ioctl+0x47/0x170 [ 200.263111][ T6819] do_syscall_64+0xfa/0xfa0 [ 200.263139][ T6819] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.263168][ T6819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.263191][ T6819] ? clear_bhb_loop+0x60/0xb0 [ 200.263218][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.263239][ T6819] RIP: 0033:0x7f12159fefc9 [ 200.263259][ T6819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.263277][ T6819] RSP: 002b:00007f1213c5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.263300][ T6819] RAX: ffffffffffffffda RBX: 00007f1215c55fa0 RCX: 00007f12159fefc9 [ 200.263316][ T6819] RDX: 0000200000000040 RSI: 000000004014563c RDI: 0000000000000003 [ 200.263330][ T6819] RBP: 00007f1213c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 200.263344][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.263356][ T6819] R13: 00007f1215c56038 R14: 00007f1215c55fa0 R15: 00007ffde28098b8 [ 200.263393][ T6819] [ 200.308891][ T6819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.466908][ T6821] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 200.467231][ T6820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 200.469025][ T6820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.207'. [ 206.060609][ C1] ------------[ cut here ]------------ [ 206.060626][ C1] refcount_t: addition on 0; use-after-free. [ 206.061318][ C1] WARNING: CPU: 1 PID: 29 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 206.061364][ C1] Modules linked in: [ 206.061385][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 206.061411][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.061426][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 206.061453][ C1] Code: 00 00 e8 59 5c 45 fd 5b 41 5e e9 91 bb 4a 06 cc e8 4b 5c 45 fd c6 05 d6 08 47 0a 01 90 48 c7 c7 80 2e 3d 8b e8 57 a1 09 fd 90 <0f> 0b 90 90 eb d7 e8 2b 5c 45 fd c6 05 b7 08 47 0a 01 90 48 c7 c7 [ 206.061473][ C1] RSP: 0018:ffffc90000a3f830 EFLAGS: 00010246 [ 206.061493][ C1] RAX: 8423aa39cbbe3700 RBX: 0000000000000002 RCX: ffff88801beb1e00 [ 206.061511][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 206.061525][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 206.061539][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000147f18 [ 206.061557][ C1] R13: ffff88803d5b0460 R14: ffff88803d5b0080 R15: dffffc0000000000 [ 206.061575][ C1] FS: 0000000000000000(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 206.061594][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.061609][ C1] CR2: 0000001b2fb22ff8 CR3: 000000005e09c000 CR4: 00000000003526f0 [ 206.061647][ C1] Call Trace: [ 206.061656][ C1] [ 206.061669][ C1] mptcp_schedule_work+0x164/0x1a0 [ 206.061701][ C1] mptcp_tout_timer+0x21/0xa0 [ 206.061736][ C1] call_timer_fn+0x17e/0x5f0 [ 206.061769][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 206.061800][ C1] ? call_timer_fn+0xbe/0x5f0 [ 206.061834][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 206.061880][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.061915][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.061946][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 206.061980][ C1] __run_timer_base+0x648/0x970 [ 206.062032][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 206.062096][ C1] run_timer_softirq+0xb7/0x180 [ 206.062135][ C1] handle_softirqs+0x22f/0x710 [ 206.062196][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 206.062241][ C1] run_ktimerd+0xcf/0x190 [ 206.062275][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 206.062306][ C1] ? schedule+0x91/0x360 [ 206.062347][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 206.062378][ C1] smpboot_thread_fn+0x542/0xa60 [ 206.062412][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 206.062455][ C1] kthread+0x711/0x8a0 [ 206.062497][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 206.062529][ C1] ? __pfx_kthread+0x10/0x10 [ 206.062563][ C1] ? rt_spin_unlock+0x150/0x200 [ 206.062596][ C1] ? rt_spin_unlock+0x161/0x200 [ 206.062620][ C1] ? __pfx_kthread+0x10/0x10 [ 206.062659][ C1] ret_from_fork+0x4bc/0x870 [ 206.062692][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 206.062732][ C1] ? __switch_to_asm+0x39/0x70 [ 206.062758][ C1] ? __switch_to_asm+0x33/0x70 [ 206.062781][ C1] ? __pfx_kthread+0x10/0x10 [ 206.062820][ C1] ret_from_fork_asm+0x1a/0x30 [ 206.062868][ C1] [ 206.062880][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 206.062909][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 206.062937][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.062951][ C1] Call Trace: [ 206.062960][ C1] [ 206.062970][ C1] dump_stack_lvl+0x99/0x250 [ 206.063007][ C1] ? __asan_memcpy+0x40/0x70 [ 206.063036][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.063074][ C1] ? __pfx__printk+0x10/0x10 [ 206.063146][ C1] vpanic+0x237/0x6d0 [ 206.063169][ C1] ? __pfx_vpanic+0x10/0x10 [ 206.063208][ C1] panic+0xb9/0xc0 [ 206.063230][ C1] ? __pfx_panic+0x10/0x10 [ 206.063277][ C1] __warn+0x31b/0x4b0 [ 206.063299][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 206.063330][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 206.063357][ C1] report_bug+0x2be/0x4f0 [ 206.063389][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 206.063417][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 206.063457][ C1] ? refcount_warn_saturate+0xfc/0x1d0 [ 206.063483][ C1] handle_bug+0x84/0x160 [ 206.063521][ C1] exc_invalid_op+0x1a/0x50 [ 206.063559][ C1] asm_exc_invalid_op+0x1a/0x20 [ 206.063582][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 206.063608][ C1] Code: 00 00 e8 59 5c 45 fd 5b 41 5e e9 91 bb 4a 06 cc e8 4b 5c 45 fd c6 05 d6 08 47 0a 01 90 48 c7 c7 80 2e 3d 8b e8 57 a1 09 fd 90 <0f> 0b 90 90 eb d7 e8 2b 5c 45 fd c6 05 b7 08 47 0a 01 90 48 c7 c7 [ 206.063630][ C1] RSP: 0018:ffffc90000a3f830 EFLAGS: 00010246 [ 206.063649][ C1] RAX: 8423aa39cbbe3700 RBX: 0000000000000002 RCX: ffff88801beb1e00 [ 206.063666][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 206.063682][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 206.063696][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000147f18 [ 206.063714][ C1] R13: ffff88803d5b0460 R14: ffff88803d5b0080 R15: dffffc0000000000 [ 206.063755][ C1] mptcp_schedule_work+0x164/0x1a0 [ 206.063783][ C1] mptcp_tout_timer+0x21/0xa0 [ 206.063816][ C1] call_timer_fn+0x17e/0x5f0 [ 206.063848][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 206.063878][ C1] ? call_timer_fn+0xbe/0x5f0 [ 206.063929][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 206.063976][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.064010][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.064041][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 206.064076][ C1] __run_timer_base+0x648/0x970 [ 206.064133][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 206.064187][ C1] run_timer_softirq+0xb7/0x180 [ 206.064220][ C1] handle_softirqs+0x22f/0x710 [ 206.064263][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 206.064309][ C1] run_ktimerd+0xcf/0x190 [ 206.064343][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 206.064381][ C1] ? schedule+0x91/0x360 [ 206.064422][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 206.064452][ C1] smpboot_thread_fn+0x542/0xa60 [ 206.064486][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 206.064531][ C1] kthread+0x711/0x8a0 [ 206.064573][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 206.064607][ C1] ? __pfx_kthread+0x10/0x10 [ 206.064638][ C1] ? rt_spin_unlock+0x150/0x200 [ 206.064671][ C1] ? rt_spin_unlock+0x161/0x200 [ 206.064696][ C1] ? __pfx_kthread+0x10/0x10 [ 206.064736][ C1] ret_from_fork+0x4bc/0x870 [ 206.064769][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 206.064809][ C1] ? __switch_to_asm+0x39/0x70 [ 206.064834][ C1] ? __switch_to_asm+0x33/0x70 [ 206.064857][ C1] ? __pfx_kthread+0x10/0x10 [ 206.064896][ C1] ret_from_fork_asm+0x1a/0x30 [ 206.064946][ C1] [ 206.065305][ C1] Kernel Offset: disabled