last executing test programs: 6.90978703s ago: executing program 1 (id=891): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000280)='./file0\x00', 0x9000, &(0x7f00000002c0)={0x0, 0x2000000, 0x100000}, 0x20) 6.620170897s ago: executing program 1 (id=894): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800010000000000000000000a1420000000000a0008000008001e00000200000c001680ed9900f9c7bfaf67402b08000100090000002a64a71877239e40db6f294f8a4c06a3000000173bd58f6d15a87d87a20ad6df1645299c6624560992848ee55963e5fb8887cd29fd5b56206be82c02ea2a5dd7d2f697080480431572c5c521d53e1da43305f2e396e9ead9acea02e0dfaa231adae349b395a4877ffbfa284a171cf0c2d0f05c3c966ac92284e92896596e792c82963647e38654c3951feb6ca2125708b3b8041adc18e5a22e5263c4605bcd10ab444606938f79d05edeaac59eea"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000050) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x22b7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x20303159, 0x0, 0xc, [{}, {0x2}, {}, {}, {}, {}, {}, {0x4}]}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) ftruncate(r5, 0xc17a) sendmsg$AUDIT_TTY_GET(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x3f8, 0x20, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4080) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x3f2, 0x10, 0x70bd25, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1000c000}, 0x24000001) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x7fffffff}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 6.489167471s ago: executing program 2 (id=897): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) r1 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000040)={0xfe, 0x2e5b, 0xb, 0x1, 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 6.323690408s ago: executing program 4 (id=899): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9}}}}}]}}]}}, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0xff) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) (async) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) (async) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) (async) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) (async) r7 = dup2(r2, r2) r8 = socket(0x2b, 0x1, 0x1) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) (async) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async) close_range(r10, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 6.171968472s ago: executing program 1 (id=901): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="ff"]) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)=ANY=[]) (fail_nth: 3) 5.877617016s ago: executing program 4 (id=902): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000022c0)={0x138c, r1, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8b}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x69}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffff8000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x98}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x46}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4a0, 0x11d, 0x0, 0x1, [{0x350, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x23c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x3, 0x1, 0x1, 0x200, 0x6424, 0x7f, 0x6]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x7c, 0x11, 0xc, 0x24, 0x48, 0x1b, 0xc, 0x18, 0xc, 0xc, 0x0, 0x3c, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x8, 0x0, 0x401, 0x6, 0x7, 0xf329]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0x6, 0x0, 0x7, 0x2, 0xd, 0x3]}}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x8}, {0x6, 0x7}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x4}, {0x7, 0x6}, {0x4, 0x7}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x6}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x7, 0xa}, {0x5, 0x7}, {0x4}, {0x3, 0x8}, {0x4, 0x1}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0x1}, {0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x2, 0x5}, {0x1, 0x3}, {}, {0x3}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x7, 0x5}, {0x6, 0x8}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x7}, {0x5, 0x1}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x6, 0x1}, {0x4, 0x9}, {0x2}, {0x3, 0xa}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x5}, {0x1}, {0x1, 0x1}, {0x5, 0xa}, {0x0, 0x9}, {0x4, 0x3}, {0x1, 0x2}, {0x7}, {0x3, 0x6}, {0x1, 0x4}, {0x4, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x16, 0x36, 0x48, 0x48, 0x12, 0x16, 0x48, 0x3, 0x1b, 0x5, 0x4, 0x48, 0x48]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x1, 0xe]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0xec, 0xdbbb, 0x4, 0x1, 0xbb, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0xa74, 0x1ff, 0x8, 0x7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfffe, 0x0, 0x3, 0x8, 0x0, 0x8, 0xa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x352, 0x1, 0x7, 0x9, 0xec53, 0x200, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x18, 0x9, 0x12, 0x60, 0x6, 0x6, 0x48, 0x16, 0x36, 0x0, 0x74, 0x18, 0x16, 0xc, 0x30, 0x1, 0x1b, 0x12, 0x2, 0x60, 0xc, 0x2, 0x2, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3ff, 0x9, 0x4, 0x4, 0x3, 0x7f, 0x4dc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x1}, {0x3, 0x4}, {0x3, 0x7}, {0x1, 0x7}, {0x2, 0x1}, {0x2, 0x8}, {0x5, 0xa}, {0x2, 0x6}, {0x3, 0x3}, {0x6, 0x3}, {0x5, 0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x4}, {0x4, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x1, 0xa}, {0x5, 0x4}, {0x6, 0x2}, {0x0, 0xa}, {0x3, 0xa}, {0x1, 0x4}, {}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x2}, {0x6, 0x9}, {0x0, 0xa}, {0x3, 0x9}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x4, 0x6, 0x5, 0x18]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x5, 0x2, 0x7, 0x81, 0x0, 0xe7]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0xe4b, 0xd4f, 0xef47, 0x7, 0x8, 0xbfd, 0x9e2]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x800, 0x6, 0xb, 0x614, 0x7, 0x7, 0x7]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x2}, {0x7, 0x1}, {}, {0x0, 0x6}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x9}, {0x4, 0x5}, {0x7, 0x2}, {0x2, 0x5}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x2}, {0x2, 0x8}, {}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0x2}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x6, 0xa}, {0x4}, {0x1, 0x7}, {0x3, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x4}, {0x0, 0x3}, {0x6}, {0x7, 0x3}, {0x3, 0xa}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x3}, {0x2}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x3, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x4, 0x2}, {0x4, 0x5}, {0x6}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb3e4, 0x3, 0x8, 0x4ac9, 0x7fff, 0x6, 0x2, 0x3d6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x4, 0x30, 0x3, 0x48, 0x16, 0x5, 0x12, 0x36, 0x5, 0x60, 0xc, 0x30, 0x6, 0x9, 0x6c, 0x12, 0x30, 0x6, 0x18, 0x60, 0xb, 0x24, 0x18, 0x1, 0x60, 0x1, 0x0, 0x12, 0x1b, 0x2, 0x4]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x3}, {0x3, 0x4}, {0x6, 0x9}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x4}, {0x2, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x2}, {0x0, 0x9}, {0x5, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x7, 0x6}, {0x0, 0x3}, {0x2, 0x2}, {0x3, 0x6}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0x6}, {0x7, 0x9}, {0x6, 0x4}, {0x7, 0xa}, {0x3, 0x8}, {0x4, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x5}, {0x6, 0x8}, {0x3, 0x2}, {0x7, 0x5}, {0x5}, {0x1}, {0x6, 0x1}, {0x3, 0x6}, {0x7, 0x4}, {0x1}, {0x5, 0x4}, {0x0, 0x5}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2000000000000000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x3, 0x60, 0x6c, 0x12, 0x7a, 0x6c, 0xb, 0x48, 0x18, 0x0, 0x36, 0x6, 0x6c, 0x9, 0x48, 0x48, 0x12, 0x1, 0x7, 0x6c, 0x6, 0x6c, 0x3, 0x6c, 0x24, 0x12, 0x32]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0xc, 0x6c, 0xc, 0x36, 0x3, 0x18, 0x16, 0x18, 0x6c, 0x6, 0x12, 0x2f]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x35}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x3d0, 0x11d, 0x0, 0x1, [{0x398, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xc, 0x6, 0x5, 0x5, 0xbe, 0xf36c, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x0, 0x8, 0x4, 0x9, 0x9, 0x4, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x401, 0x7, 0xdf, 0xff, 0x2, 0x2]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb7df, 0x41f4, 0xd88f, 0x2cd5, 0x1, 0x7, 0x22c, 0x6]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x60, 0x4, 0x12, 0x12, 0xb, 0x48, 0x1b, 0x4, 0x6, 0x9, 0x60, 0x4, 0x3, 0x36, 0xb, 0x12, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf3, 0x4, 0x4, 0x2, 0x7, 0xfe00, 0xfffa, 0xa]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x5, 0x0, 0x800, 0x5, 0x6, 0x4]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x3, 0x6, 0x6ff1, 0x5, 0x1, 0x454]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2f, 0x453d, 0x6, 0x3, 0x1ff, 0x6, 0xe, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x7, 0x469, 0x3, 0x8, 0x6, 0x3a1]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x14}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x1}, {0x5, 0x9}, {0x4, 0x9}, {0x2, 0x5}, {0x5, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x4, 0x4}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {}, {0x0, 0x1}, {0x2, 0x9}, {0x3, 0xa}, {0x2, 0x1}, {0x3, 0x9}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0x4}, {0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x1}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0x7b, 0x1, 0x1d, 0x12, 0x60, 0xb, 0xc, 0x5c, 0x30, 0x3, 0x48, 0x16, 0x1b, 0x4, 0x5, 0x5, 0xc, 0x3, 0x3, 0xc, 0x18, 0x56, 0x12, 0x36, 0x16, 0x9, 0x1, 0x1, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x1ff, 0x1, 0xc1, 0x3, 0x3, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x2, 0xff00, 0x7f, 0x8f73, 0x500, 0x9ddd, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffc0, 0x513f, 0x731, 0x9d3b, 0xfffa, 0xa5c, 0x6eaf, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x1b, 0x1b, 0x24, 0x60, 0x77, 0x48, 0x48, 0x12, 0xb, 0x6, 0x9, 0x12, 0x5, 0x2, 0x18, 0x36, 0x5, 0x5, 0x1, 0x3, 0x1b, 0x18, 0x2, 0x30, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x74bb47990e79e94b, 0x6c, 0x3, 0x30, 0x1b, 0x16, 0x3, 0x4, 0x2, 0x9, 0x1b, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8ca3, 0x59, 0x7, 0x8000, 0x9, 0x9, 0xe300, 0xfa9]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x9}, {0x3, 0xa}, {0x5, 0x3}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x2, 0x6}, {0x4}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x1, 0x7}, {0x4, 0x1}, {0x6, 0x5}, {0x1}, {0x5, 0xa}, {0x7, 0xa}, {0x4, 0x6}, {0x1, 0xa}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x16, 0x6, 0x60, 0x1b, 0x4, 0xc, 0x36, 0x12, 0x30, 0x1b, 0x5, 0x1b, 0x48, 0xb, 0x9, 0x16, 0x30, 0x18, 0x16, 0x0, 0x1b, 0x24, 0x3, 0x60, 0x60, 0x30, 0xc]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x1d}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x2}, {0x3, 0x4}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x7}, {0x2, 0x4}, {0x0, 0x6}, {0x4, 0x8}, {0x6}, {0x5, 0x7}, {0x0, 0x9}, {0x6, 0x8}, {0x2, 0x3}, {0x3, 0x9}, {0x4, 0x5}, {0x6, 0x7}, {0x2, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x5, 0x1, 0xa, 0x7ff, 0x9, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0xffff, 0x40, 0x8000, 0xf898, 0x3ff, 0xb]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd2, 0x90, 0xfff, 0x6, 0x6, 0x2, 0x2, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8b}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c4, 0x11d, 0x0, 0x1, [{0x1d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x2, 0x1, 0x7, 0x5, 0x60c, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x16, 0x18, 0x16, 0x8, 0x6, 0xc, 0x6c, 0x28, 0x1, 0xc, 0x48, 0x2, 0x30, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x16, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x1, 0xfff1, 0x5, 0x3, 0x5, 0x38ae]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xeda, 0x6, 0xfffd, 0x1b4, 0x8, 0x4, 0x8, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x30, 0x1b, 0x48, 0xb, 0x3, 0x18, 0xb, 0x5, 0x30, 0x1, 0xb, 0x6, 0x1b, 0x12, 0x48, 0x5b, 0x48, 0x36, 0x2, 0x1, 0x0, 0x30, 0xc, 0x3, 0x36, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x2a, 0x8165, 0x32, 0x401, 0x8, 0x8]}}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x2, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x6, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff, 0xbcf2, 0x8000, 0x80, 0x9, 0x4f6, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x2}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0x8}, {0x2, 0x2}, {0x3, 0xa}, {0x7}, {0x1, 0x2}, {0x7, 0xa}, {0x5, 0x1}, {0x6, 0x7}, {0x4, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x5}, {0x2, 0x9}, {0x6, 0x9}, {0x6, 0x9}, {0x1, 0x9}, {0x4, 0x5}, {0x2, 0x2}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0xa}, {0x3, 0x8}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {}, {0x5, 0xa}, {0x6, 0x7}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x1}, {0x6, 0x4}, {0x7, 0xa}, {0x4, 0xa}, {0x4, 0x4}, {0x2, 0x7}, {0x0, 0x6}, {0x5}, {}, {0x6, 0x8}, {0x1, 0x8}, {0x5}, {0x7, 0x9}, {0x1, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0xa1, 0x0, 0x800, 0x8, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0xa}, {0x5, 0x9}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {}, {0x0, 0x8}, {0x6, 0x1}, {0x2, 0x8}, {0x4, 0x3}, {0x1, 0x3}, {0x6, 0xa}, {0x6, 0x9}, {0x0, 0x9}, {0x2, 0x2}, {0x3}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x5}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x8}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x9, 0x12, 0x18, 0x1d, 0x3, 0x36, 0x75, 0x5, 0x48, 0x2, 0x9, 0x30, 0x12, 0x60, 0xf, 0x60, 0xc, 0x9, 0x4, 0xda04e70c1c890881, 0x3, 0x16, 0x1, 0x2, 0x36, 0x18, 0xb, 0x30, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x178, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x150, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x36, 0x1b, 0xb, 0x2, 0x61, 0x2]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0xda7, 0x5b, 0xde6, 0x4, 0x6, 0x604b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc8ff, 0xce, 0x1, 0x101, 0x0, 0x800, 0x6, 0x890c]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x7, 0x2, 0x9, 0xaf, 0x3, 0x2, 0x5]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{}, {0x3, 0x4}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0xa}, {0x4, 0x1}, {0x4, 0x3}, {0x7, 0x9}, {0x6, 0x9}, {0x4}, {0x5, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x4}, {0x5, 0x3}, {0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x7}, {0x3, 0x3}, {0x4}, {0x1, 0x5}, {0x3, 0x8}, {0x5}, {0x7, 0x8}, {0x0, 0x6}, {0x3}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x3, 0x7}, {0x7, 0xa}, {0x5, 0x9}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0x3}, {0x3, 0x9}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x30, 0x16, 0x48, 0x3, 0x4, 0xb, 0x3, 0x24, 0x12, 0x30, 0x36, 0x9, 0x48, 0xc, 0x6c, 0x9, 0xb, 0x9, 0x5, 0x6c, 0x5, 0x16, 0x60, 0x35, 0x36, 0x2]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x7, 0xe4b1, 0x3, 0x7fff, 0x401, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x16, 0x5, 0xc, 0x6, 0x36, 0x36, 0xc, 0x16, 0x6c, 0xc]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x8}, {0x7, 0x9}, {0x6}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x9}, {0x3, 0x3}, {0x6, 0x4}, {0x2, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x0, 0xff80, 0x2, 0x6, 0xffff, 0x1, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3adcfa118de14d62}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x210, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x12c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x6}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x8}, {0x5, 0x2}, {0x3, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x9, 0x1e, 0x2, 0x6, 0x9, 0x12, 0x2, 0xf, 0x24, 0x1, 0xc, 0xb, 0x30, 0x2e]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x1b, 0x60, 0x16, 0x36, 0x592cfbf8531189b5, 0x60, 0x2, 0xb, 0x18, 0xc, 0x6, 0x4, 0x6, 0x24, 0x48, 0x1b, 0x30, 0x9, 0x1, 0x16, 0x16]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x60, 0x9, 0x48, 0x6c, 0x4, 0x48, 0x16, 0x6c, 0xc, 0x12, 0x16, 0x16, 0x36, 0x1b, 0x48, 0x36, 0x4, 0x7b, 0x4, 0x30, 0x58, 0x1b, 0x30, 0x5, 0x36, 0x2, 0x6, 0xc, 0x30]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x985, 0x4, 0xf, 0xffff, 0x8, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1915, 0xfa, 0x6, 0x5a5a, 0x6aa, 0x1ff, 0x5, 0xa62]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1b, 0x3, 0x5, 0xd2, 0x6, 0x8, 0x1, 0x80]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x8000, 0x0, 0x7, 0x6, 0xb5, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x1, 0xffff, 0xdab9, 0x3, 0x791f, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe21d, 0x10, 0xfff, 0xcf, 0xfffc, 0x1, 0x7, 0xd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x8, 0x1, 0x6, 0x5, 0x401, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffff}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xb4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x5, 0x24, 0x47, 0x1, 0x50, 0x9, 0x30, 0x9, 0x1b, 0x30, 0x4]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x4, 0x7, 0x6, 0x2, 0x8, 0x87, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x6, 0x36, 0x30, 0x60, 0xc, 0x1, 0x0, 0x30, 0x60, 0x0, 0x12, 0x5, 0x18, 0x63, 0x30, 0x4, 0x6c, 0x18, 0x1b, 0x14, 0x24, 0x60, 0x36, 0x36, 0x1b, 0x6c, 0xc, 0x4, 0x1, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0xb, 0x9, 0x4, 0x60, 0x6c, 0x24, 0x9, 0x5, 0x48]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x2, 0x3, 0x6c, 0x3, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x8, 0x5, 0x7, 0x800, 0xecd7, 0x2]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x24, 0x1, 0x6c, 0x24, 0x12, 0x30, 0x2, 0x30, 0x30, 0x36, 0x16, 0x1b, 0x9, 0x6, 0x12, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x134, 0x11d, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x18, 0x60, 0xc, 0x5, 0xb1a4dd1b842514ed, 0x6c, 0x6c, 0x6c, 0x21, 0xb, 0xc, 0x9, 0x36, 0x24, 0x24, 0x0, 0x6, 0x18, 0x6c, 0x3, 0x5f, 0x24, 0x12, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x8}, {0x0, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x9}, {0x2, 0x4}, {0x2, 0x5}, {0x1, 0x8}, {0x7, 0x5}, {0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x5}, {0x4, 0x5}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x9}, {0x7, 0xa}, {0x1, 0x8}, {0x6, 0x2}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x0, 0x6}, {0x5, 0x6}, {0x5, 0x5}, {0x2}, {0x3, 0x7}, {0x0, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x3}, {0x2, 0x8}, {0x1, 0x9}, {0x3, 0xa}, {0x3, 0x3}, {0x0, 0x1}, {0x5, 0x4}, {0x2, 0x6}, {0x4, 0x9}, {0x5, 0x8}, {0x0, 0x2}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x9}, {0x4}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x8}, {0x6, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x6, 0x2}, {0x5, 0x1}, {0x4, 0x4}, {0x4, 0x5}, {0x5, 0x1}, {0x3, 0xa}, {0x2, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0x1}, {0x2, 0xa}, {0x1}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0xa}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x5}, {0x3, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x1, 0x3}, {0x2, 0x4}, {0x0, 0x3}, {0x6, 0x4}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x6, 0x4, 0x9, 0x5, 0x6, 0x3, 0x1, 0x1b, 0x24, 0x12, 0x12, 0x1b, 0x2, 0x12, 0x30, 0x2, 0x1, 0x36, 0x24, 0x6c, 0x24, 0x48, 0x1, 0x24, 0x0, 0x0, 0x18, 0x30, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x41}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x725a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x240, 0x11d, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x2}, {0x2, 0x9}, {0x7, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x2}, {0x5, 0x1}, {0x7, 0x3}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x2}, {0x5}, {0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x5, 0x8}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x5}, {0x1, 0xa}, {0x6}, {0x0, 0x1}, {0x4, 0x9}, {0x7, 0x9}, {0x4}, {0x4, 0x5}, {0x5}, {0x1, 0x9}, {0x5, 0x2}, {0x0, 0x6}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x3, 0x60, 0x30, 0x3, 0x1b, 0x30, 0x16, 0x16, 0x12, 0x24, 0x6, 0x36, 0x1b, 0x6c, 0x2, 0x18, 0x12, 0x4061e474d8f1b29d, 0x30, 0x1b, 0x18, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa67}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x8, 0x6, 0x4, 0x24c5, 0x2, 0x948]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x3, 0x9}, {0x2, 0x4}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0x6}, {0x4, 0x2}, {}, {0x1, 0x9}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0xa}, {0x7, 0x8}, {0x0, 0x9}, {0x2}, {0x0, 0x7}, {0x7, 0xa}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0x14}, {0x4, 0x1}, {0x5, 0x4}, {0x2, 0xa}, {0x2, 0x7}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x5}, {0x3}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x4}, {0x3, 0x3}, {0x0, 0x2}, {0x6, 0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x3, 0xa}, {0x7, 0xa}, {0x7, 0x3}, {0x5}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0x9}, {0x6, 0x5}, {0x7}, {0x3, 0x8}, {0x1, 0x4}, {0x2, 0x5}, {0x6, 0x7}, {0x1, 0x4}, {0x5, 0x4}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x6}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x7}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a14, 0xe6c, 0x8, 0x400, 0x21, 0x8, 0xf801, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x12, 0x60, 0x30, 0x12, 0x30, 0x24, 0x4, 0x9, 0x1, 0x3, 0xc, 0x24, 0x36, 0x4, 0x4, 0x60, 0x1b, 0x3, 0x1b, 0x4, 0x60, 0x4, 0x48, 0x3, 0x16, 0x24]}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x752, 0x8, 0x3, 0x2, 0x7, 0x735d, 0x4, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0x6c, 0x6c, 0x30, 0x5, 0x12, 0x48, 0x1b, 0xb, 0x9, 0x50, 0x16, 0x48, 0x1, 0x2, 0x2, 0x2b, 0x5, 0x30, 0x58, 0x5, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0xf7c1, 0x7, 0x6, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x45, 0x12, 0x9, 0x1b, 0x0, 0x18, 0x1b, 0x6, 0x16, 0x6, 0x12, 0x1, 0x9, 0x42, 0x60, 0x48, 0x24, 0x36, 0x36, 0x12, 0x24, 0x6d]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x4}, {0x6, 0x3}, {0x2}, {0x3, 0x3}, {0x4, 0x7}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x5}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0x4}, {0x7, 0x6}, {0x4, 0x4}, {0x7, 0x5}, {0x0, 0x5}, {0x5, 0xa}, {0x1, 0x7}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x1}, {0x7, 0x4}, {0x3, 0x3}, {0x7, 0x6}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x100, 0x265, 0xfff9, 0x8100, 0x8, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff7f, 0x6, 0x2, 0xb82, 0x5, 0xfe01, 0x81]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x88}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x138c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000002180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030028bd7000fedbdf250c00000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000000000050008000200000004000b00ac6fd9edafe91209460a85e99891da1cc434f841bb15bf4bf4892e61688898abd6ff4e2f38660497be10afb415354506ab0e7c01a6abe558c982b0d584288be0b606f3931a2ba412819cce5b90403c56d04bb7a3bbe84d13235e8a557761b29c7eb0b03c789be9320b3ddaa76ad2bd3e32e91c485c5fcdb36d44d7cbbad6f50eeec0ece8fe84cc6f3a61b07a2b877c2327ab6ea77174fab963b9dd13fb61289f301bf310c250b25c8185987fe25bb1f9accf6449130742d63559fbe20ca74fd40779a4bbd31027d4dd2e4194f62b1fc341ce43b3b689519ed57544a5414d78518b652d77344fe6"], 0x34}, 0x1, 0x0, 0x0, 0x858}, 0x2004000) 5.605566075s ago: executing program 2 (id=903): unshare(0x28040680) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb1003fff) r2 = eventfd(0x40048c67) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xfffffdeffffffffa, 0x2, 0x0, r2, 0x2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000200), 0x82, 0x0) r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {r2}}, './file0\x00'}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000ec0)=@deltfilter={0x490, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xb, 0xffff}, {0xe, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x458, 0x2, [@TCA_ROUTE4_POLICE={0x44c, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x97bc, 0x8, 0xa93e, {0x2, 0x0, 0x2, 0x4, 0x6, 0xfffffffa}, {0x8, 0x2, 0x4f8e, 0x3, 0xf39, 0x6}, 0x80000001, 0x3, 0x101}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x1, 0x2, 0x80, 0x8, 0x7, 0x2bd56523, 0x400, 0x3, 0x8, 0x2fe, 0x2, 0x7, 0x6, 0x401, 0xf, 0x7, 0x4, 0xfffffbff, 0x1, 0x2, 0x9, 0x200, 0x1, 0x7fffffff, 0x7, 0x3ff, 0x2, 0x9, 0x0, 0x100, 0x8c37, 0x7f, 0x6, 0x2a0, 0x7, 0x6, 0xd, 0x1, 0x3, 0x6, 0xfff, 0x7, 0x2, 0x3, 0x7, 0x1, 0x400, 0x2, 0xb, 0x2, 0x3, 0x7ff, 0x8, 0x5, 0x3, 0x9, 0x8, 0x9, 0x7, 0x80000001, 0x5e, 0xccf3, 0x0, 0x3, 0xc, 0x1, 0x2, 0x36, 0x1, 0x0, 0x4, 0x7, 0x7, 0x5, 0x1ff, 0x5e31, 0x6, 0x9, 0x6, 0xfffffff7, 0xfffffff9, 0x81, 0x3, 0x3, 0x3, 0x7ff, 0xb8, 0x6, 0x3, 0x7, 0x8000, 0x2, 0x7, 0x9, 0x9, 0x1, 0x7, 0x4, 0x5, 0x9, 0x4, 0x200, 0x2c65, 0x800, 0xc3d, 0x60bd9635, 0x5, 0x5f9be068, 0x9, 0x0, 0x10, 0x3, 0x10, 0xffffffff, 0xe, 0x9d28, 0x1, 0xff, 0x4, 0x3, 0x9, 0x5, 0x195, 0x4, 0x6, 0x1000, 0xff, 0x800, 0xa, 0x2, 0xfffffff8, 0x10001, 0x24982455, 0x1, 0xffffffff, 0x3, 0x1, 0x1, 0x10000, 0xffffd0b8, 0x8, 0xfff, 0x8, 0x4, 0xa3, 0xacac, 0x2000, 0x9, 0x1, 0x2, 0xf, 0x8, 0x4, 0x7, 0x4, 0x43, 0x0, 0xf, 0x2, 0x9, 0x1, 0x15da, 0x5, 0x2, 0x40, 0x3b2a, 0x1000, 0x6, 0x7, 0x0, 0x1ff, 0x20000000, 0x6fffffff, 0xb, 0x5, 0x2, 0x81, 0x1, 0x7c, 0x0, 0x7ff, 0x4ac, 0x12c, 0x1, 0x7, 0x10001, 0x7, 0xe, 0x1, 0x0, 0x57, 0xd, 0x2, 0x7, 0x19ce, 0x39be, 0x10, 0x100, 0x8, 0x0, 0xffc00000, 0x80000000, 0x80000000, 0x80, 0x0, 0x1, 0x1c, 0xffff1049, 0x2, 0x0, 0x8, 0x8, 0x50, 0x8, 0x0, 0x5, 0xd, 0x44, 0x9, 0x0, 0x101, 0x96bd, 0x0, 0x9, 0x3, 0x80000001, 0x32c, 0x13c9, 0xd, 0xc2e, 0x100, 0x8, 0x2b9b9d6, 0xe7ab, 0x100000, 0x7, 0x3, 0x9, 0x2, 0xffff4414, 0x3f6e, 0x3663, 0x3ff, 0x2, 0x94e0, 0x10, 0x84ca, 0x10001, 0x6, 0x200, 0x7, 0x9, 0x1, 0x4a1]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x47}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x40040}, 0x800) recvmmsg(r6, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000540)=""/234, 0xea}], 0x1}, 0x7}], 0x1, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@bridge_setlink={0x44, 0x13, 0x1, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x100, 0x200}, [@IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0x3}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x4000090) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) bind$packet(r6, &(0x7f0000000100)={0x11, 0xe4, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 5.539229191s ago: executing program 1 (id=904): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x110, 0x18c, 0x203, 0x0, 0x19030000, 0x1fc, 0x2e0, 0x2e0, 0x1fc, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@empty, @empty, [0xff000000, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xffffff], 'pim6reg1\x00', 'wg1\x00', {0xff}, {}, 0x2c, 0xf4}, 0x300, 0xc8, 0xec, 0x0, {0x1000000}, [@inet=@rpfilter={{0x24}, {0x6}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2fc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000600)="05223af104", 0x5, 0x240458d1, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x85, 0x6, @broadcast}, 0x14) getsockopt(r1, 0x9a, 0x9, &(0x7f0000000000), &(0x7f0000000380)) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x290}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000004"]) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="95ffa88800000000140012801f770000000000ff7fffff002a8008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x44}}, 0x8000) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 5.365879899s ago: executing program 4 (id=905): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d17, &(0x7f0000000040)) socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x9, 0x8, 0x0, 0x0, 0x9, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bdef18fa78bcb9616de723023034"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1cb040, 0x0) sendfile(r6, r6, 0x0, 0x200000) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)}, 0x3}], 0x1, 0x40000000, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r8, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r9, 0xc058565d, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, &(0x7f0000000180)={0x8, 0x2, 0x401, 0x2, 0x7, 0x7fff, 0x2, 0x3}, &(0x7f00000001c0)={0x9, 0x0, 0x7, 0x6, 0x5, 0x5, 0x4, 0xfffffffffffffff7}, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000280)={[0x2, 0x7]}, 0x8}) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 4.289986512s ago: executing program 2 (id=907): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg(r0, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[{0x10, 0x20, 0x24}], 0x10}}], 0x2, 0x4000800) 3.982585486s ago: executing program 3 (id=908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000000}) r2 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x9450) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x94, 0x9, 0x5, 0x5}]}) epoll_wait(r1, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 3.931544804s ago: executing program 2 (id=909): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}], 0x1fc}, 0x0, 0x40000000, 0x1}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x7, 0x0, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4a301, 0x0) close(r3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r4 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$nci(r4, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(&(0x7f0000000300)=""/7) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="00b258008860a7babba59e07003d432131251828566bbe63cdb4c49a4db4d7885eb23cbcf4146178938b03a7283d1143c6c16602f9f50d1fa875dddda4c14f"], &(0x7f0000000140)='GPL\x00', 0x5, 0xff5, &(0x7f0000001840)=""/4085}, 0x94) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r10, r11, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r6, r7, r11) 3.804956928s ago: executing program 4 (id=910): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/16, 0x10}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0xc5bf}], 0x2, 0x400000a0, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000d0605000000000000000000050000050d00030068617368036e64740000005f73ccbc5dfc7066f55bd803c7a7740007000000050018000000000005000500000000000e0003006269746d61703a6970000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008004}, 0x1) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e21, @empty}, @ib={0x1b, 0x7ff, 0x0, {"ff2af9bd3f93350e8f00"}, 0x0, 0x4, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000f00), r4}}, 0x18) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.746370236s ago: executing program 2 (id=911): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008095) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000800000018230000", @ANYRES32=r4, @ANYBLOB="00000010f303003fd86f157bba7ac1e3a8f5f7307f00"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0xff5, &(0x7f00000013c0)=""/4085}, 0x94) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f01000000000000000000090582"], 0x0) syz_open_dev$loop(&(0x7f00000002c0), 0xe, 0x52040) r5 = socket(0x40000000015, 0x5, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x40b101) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x5a, 0x1}, 0xffff2539, 0x44, 0x0, 0x0, 0x5, 0x8, 0x3, 0xc, 0x101, 0x0}) connect$inet(r5, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) r8 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername(r8, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) 3.594467183s ago: executing program 1 (id=913): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)='9', 0x1}], 0x1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000c00)) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000004540)={0x0, 0x1000, "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"}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, 0x0) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r4, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x2, 0x400, 0xc, {0x5, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x0, 0x5, 0xa000, 0x0, r5, r6, 0x1b, 0x58a9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) read(r7, &(0x7f0000000180)=""/170, 0xaa) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f00000c9000/0x4000)=nil, 0x4000}, 0x1}) syz_clone3(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020}, 0x2020) r8 = geteuid() openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) fstat(r7, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r8, r8, r9) r10 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x800, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 3.523549463s ago: executing program 3 (id=914): r0 = socket(0x2, 0x80805, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000095c0)={0x2020}, 0x2020) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xd}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = epoll_create1(0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000300)={0x6, 0x8, '\x00', 0x1, &(0x7f00000001c0)=[0x0]}) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000001480)={@pptp={0x18, 0x2, {0x3, @broadcast}}, {&(0x7f00000013c0)=""/173, 0xad}, &(0x7f0000000340), 0x1d}, 0xa0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xa0028000}) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000380)=""/4105, 0x1009}], 0x1, 0x8001, 0xa) read(0xffffffffffffffff, &(0x7f0000000040)=""/12, 0xc) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f80, 0x11f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x2, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xcf, 0x9}}) r8 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r8, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000001540)=@x86={0x1, 0x80, 0x1, 0x0, 0x2, 0x6, 0x9, 0x80, 0x0, 0x80, 0x7e, 0x10, 0x0, 0x10001, 0x2, 0x1, 0x6, 0xc, 0x9, '\x00', 0x8, 0xd}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x480, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 3.501838046s ago: executing program 4 (id=915): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x344, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2b0, 0x2a8, 0x2a8, 0x2b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90, 0x0, {0x10000000000000}}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0x1c0, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'team_slave_1\x00', {0x5, 0x7, 0x25, 0x7, 0x5, 0x1ff, 0xb, 0x18, 0x18}, {0x8}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x1, 0x1, 0x3], 0x0, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3a0) 3.459068767s ago: executing program 0 (id=916): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2000000000000000, 0x2) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000001c0)={0xa, {0x4, 0x3, 0x10001, 0x401}, {0x0, 0x2, 0x4, 0xffd}, {0xa47, 0x5}}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0046209, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000000c0)=0x3, 0x4) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r7, 0x0, 0x800) sched_setattr(0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r9, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) 2.990461344s ago: executing program 4 (id=917): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="b767a1e51b9463641d91bf087b830bc13c5a560a5acd45cf145115a930f11ef4464eb69c9db6a1a2675ba91f8bdec34521712764e4018d02d9f81e340dfa382239"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="927000369c5600"/21], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000040)={0x1, 0x200, 0x0, 0x8, 0x0, 0xac5, 0xa, 0x4, 0x1, 0x4, 0x8, 0x9, 0xfffffffa, 0x9}) 2.762385116s ago: executing program 0 (id=918): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xae, "fcd8d4406ca3fb31af343f9797a5e9154b76ba3283a5b6e4b7ab086bac0d58b2753629cf1b04e95b4263a0f0215619bd20d1a251146e4e7a471e959f65f3fad1fd95e15aeebbb157ee663fbcdcdf8ecc2fb5c14c701e9d87732f9cb859ba37423f0ab04fdc834fa891eac5d3b4eeb65531c5a308c56a4084f6d509d600bcb36a881d30cf7994ac148684aa6a69da01b5d60b65e91c402e32d4c3bdac66dab7dbd9546ba7bea63773aebec4a20867"}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r1, 0x2}, 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) epoll_create(0x8) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000000)=0x8) getsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) 2.38655691s ago: executing program 1 (id=919): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b244010203010902120001000200000904"], 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r2 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f00000001c0), 0x87a96a505f359afb, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x1}}) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003160000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x34, 0x6c, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x34}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000000000/0x1000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000002000/0x5000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0)="e288a0700760e65f78c2c53cfc0df3f16a9a59710c4d688dcb05c4ab0d2ed399289978d9b810975ab59875cf9779a0be6a45186c36c525e0eaa374e677b672472ca1edaa267fbe44a07c47ed2336c039de134c29c4cb548ebc5e7ff3b796dd46fb9e3b57ad4dacc3a6462ba97cfa52205e161e9abe1f6560be75d6c0a17fe835137f05a6f21e12fd2543f78734c3b69d8d9531bb9787297de4cf86c03cce0e9972f5e1b7b8ca87a005e9c0e4b7798b50b647c117", 0xb4, r1}, 0x64) 2.297566456s ago: executing program 3 (id=920): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000700)={&(0x7f0000000180)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000001c0)="5d7d3afb99", 0x5}], 0x1}, 0x40800) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r2, 0x4}, 0x8) 2.136815222s ago: executing program 0 (id=921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x0, 0x4000}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x0, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x3, 0xfffffff9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0xc, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0x4, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dd, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x1ff, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x0, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x85, 0x8001, 0x3, 0xaf, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x7, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0x5, 0x5d41, 0x1, 0x2a940, 0x0, 0xb, 0x7, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0xc, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0xfff, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800) 1.682263485s ago: executing program 0 (id=922): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x200, 0x70bd2d, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000014000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.562929097s ago: executing program 0 (id=923): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) (async, rerun: 32) unshare(0x28040200) (async, rerun: 32) unshare(0x20380) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x5cac3000) (async, rerun: 64) fchmod(0xffffffffffffffff, 0x0) (rerun: 64) socket(0x25, 0x3, 0x0) socket(0x18, 0x80000, 0x306) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000340)=ANY=[]) (rerun: 32) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="0004ffffff7fffdbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="7d003300b0080800ffffffffffff0802110000005050505050508000010004002f00100113dd566bd0df0d7044268e73b0d379a2b99169c01506d77ec04a09000000bd7e0d548ded450d0c8974c5178c168938fcaa153eef112910a7260065ea03de132024ea6e3548647504f84917c6a384f7fb19b5645ba279feaf54000000"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) (async) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x7fff, 0x6, 0x3}, 'syz1\x00', 0x4b}) (async) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0xee) (async) unshare(0x2000080) (async, rerun: 64) ioctl$UI_DEV_CREATE(r5, 0x5501) (async, rerun: 64) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.427506695s ago: executing program 0 (id=924): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x94e, &(0x7f0000000140)={0x0, 0x4bfd, 0x10100}, &(0x7f0000000100), &(0x7f00000002c0)) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) socket(0x15, 0x5, 0x0) unshare(0x20000400) signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002fad61b2077329e000f2e010203010902"], 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4000000000, 0x7, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) 1.319838726s ago: executing program 3 (id=925): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000cb1000/0x2000)=nil, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000008, 0x8011, 0x0, 0x9, 0x1, 0xfffffffffffffff8, 0xfa11, 0x2}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) getdents64(r2, &(0x7f00000002c0)=""/185, 0xb9) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r5, &(0x7f0000000380)=""/4091, 0xff3a) 522.657299ms ago: executing program 2 (id=926): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20000050) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000240)) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x800) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) pipe2$watch_queue(&(0x7f0000000380), 0x80) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x4, 0x49, 0x39cc191b, 0x5f, 0x9, 0x209, 0xffff2d33, 0xffffff01, 0x6, 0x3, 0x20000, 0x5, 0x4, 0xe4a1, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x6, 0x7, 0x1, 0x7, 0x9, 0x3e, 0x8f, 0x3, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x7, 0x8000, 0x10, 0x1, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x15a, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8c2, 0xea4, 0x0, 0x4, 0x2, 0x8004, 0x2009, 0x3fc, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x81, 0x223], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x4005, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x9, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x8, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x9, 0xac8, 0xbf, 0x59, 0x3, 0x80000000, 0xfffffff9, 0x0, 0x9, 0xffff, 0xb0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x0, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0xffffffff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x10, 0x7a, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x5, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x0, 0x200, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 115.129045ms ago: executing program 3 (id=927): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x2000000, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 0s ago: executing program 3 (id=928): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x300, r2}, 0x14) kernel console output (not intermixed with test programs): many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 201.230955][ T7080] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 201.245587][ T5902] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 201.256069][ T7080] usb 1-1: config 0 interface 48 has no altsetting 0 [ 201.263480][ T7080] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 201.273063][ T7080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.337164][ T7080] usb 1-1: config 0 descriptor?? [ 201.381853][ T5902] usb 4-1: device descriptor read/64, error -71 [ 201.572979][ T7080] usb 1-1: string descriptor 0 read error: -71 [ 201.592596][ T7080] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 201.608298][ T7080] dvb-usb: bulk message failed: -22 (3/0) [ 201.622557][ T5902] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 201.647595][ T7080] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 201.686232][ T7080] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 201.695496][ T7080] usb 1-1: media controller created [ 201.786129][ T7080] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.831802][ T5902] usb 4-1: device descriptor read/64, error -71 [ 201.839479][ T7080] dvb-usb: bulk message failed: -22 (6/0) [ 201.860815][ T7080] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 202.027521][ T7080] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 202.272677][ T5902] usb usb4-port1: attempt power cycle [ 202.280563][ T7080] dvb-usb: schedule remote query interval to 150 msecs. [ 202.591919][ T7080] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 202.643433][ T7080] usb 1-1: USB disconnect, device number 14 [ 202.786950][ T7080] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 202.864766][ T5902] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 202.912552][ T5902] usb 4-1: device descriptor read/8, error -71 [ 203.105138][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'. [ 203.201538][ T5902] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 203.263219][ T5902] usb 4-1: device descriptor read/8, error -71 [ 203.382387][ T5902] usb usb4-port1: unable to enumerate USB device [ 203.508797][ T5836] usb 5-1: string descriptor 0 read error: -71 [ 203.539258][ T5836] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.560077][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.602454][ T5836] usb 5-1: can't set config #1, error -71 [ 203.611399][ T5836] usb 5-1: USB disconnect, device number 11 [ 203.721102][ T7518] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 203.779797][ T7518] bridge0: entered allmulticast mode [ 204.581841][ T5836] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 205.511918][ T5937] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 205.694601][ T5937] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 205.713394][ T5937] usb 5-1: config 0 has no interface number 0 [ 205.743467][ T5937] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 205.801812][ T5937] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 205.840295][ T5937] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0 [ 205.910155][ T5937] usb 5-1: config 0 interface 200 has no altsetting 0 [ 205.940145][ T5937] usb 5-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 205.951633][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.959828][ T5937] usb 5-1: Product: syz [ 205.964341][ T5937] usb 5-1: Manufacturer: syz [ 205.969044][ T5937] usb 5-1: SerialNumber: syz [ 205.977788][ T5937] usb 5-1: config 0 descriptor?? [ 206.199826][ T5937] usb 5-1: USB disconnect, device number 12 [ 206.553476][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 206.685064][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 206.685085][ T30] audit: type=1326 audit(1760534863.719:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 206.713045][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.807626][ T30] audit: type=1326 audit(1760534863.759:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=148 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 206.830399][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.865173][ T7564] fuse: Unknown parameter 'rootmodu' [ 206.872641][ T30] audit: type=1326 audit(1760534863.759:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 207.303054][ T30] audit: type=1326 audit(1760534863.759:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 207.647112][ T7577] wg2: entered allmulticast mode [ 207.805500][ T7580] trusted_key: encrypted_key: insufficient parameters specified [ 208.243068][ T5902] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 208.425875][ T5902] usb 2-1: config 0 has no interfaces? [ 208.436933][ T5902] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 208.447995][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.458072][ T7604] netlink: 'syz.4.464': attribute type 8 has an invalid length. [ 208.462975][ T5902] usb 2-1: Product: syz [ 208.481244][ T5902] usb 2-1: Manufacturer: syz [ 208.490937][ T5902] usb 2-1: SerialNumber: syz [ 208.554696][ T5902] usb 2-1: config 0 descriptor?? [ 208.712618][ T5937] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 208.877567][ T5937] usb 3-1: config 0 has no interfaces? [ 208.912395][ T5937] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 208.938811][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.975374][ T5937] usb 3-1: config 0 descriptor?? [ 209.043681][ T5902] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 209.241859][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 209.253467][ T5902] usb 5-1: config 142 has an invalid interface number: 255 but max is 1 [ 209.262410][ T5902] usb 5-1: config 142 has an invalid interface number: 180 but max is 1 [ 209.270922][ T5902] usb 5-1: config 142 has no interface number 0 [ 209.291782][ T5902] usb 5-1: config 142 has no interface number 1 [ 209.310303][ T5902] usb 5-1: config 142 interface 255 has no altsetting 0 [ 209.323198][ T5902] usb 5-1: config 142 interface 180 has no altsetting 0 [ 209.338693][ T5902] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0062, bcdDevice=5a.e2 [ 209.352284][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.388442][ T5902] usb 5-1: Product: syz [ 209.417442][ T5902] usb 5-1: Manufacturer: syz [ 209.436376][ T5902] usb 5-1: SerialNumber: syz [ 209.600209][ T7637] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.476'. [ 209.706493][ T5902] dvb-usb: found a 'Terratec Cinergy T Express' in cold state, will try to load a firmware [ 209.753372][ T5902] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 209.753434][ T5902] dib0700: firmware download failed at 7 with -22 [ 209.774397][ T5902] dvb-usb: found a 'Terratec Cinergy T Express' in cold state, will try to load a firmware [ 209.774462][ T5902] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 209.774511][ T5902] dib0700: firmware download failed at 7 with -22 [ 209.781171][ T5902] usb 5-1: USB disconnect, device number 13 [ 209.815239][ T5941] udevd[5941]: setting mode of /dev/bus/usb/005/013 to 020664 failed: No such file or directory [ 209.815404][ T5941] udevd[5941]: setting owner of /dev/bus/usb/005/013 to uid=0, gid=0 failed: No such file or directory [ 209.844067][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.941550][ T5902] usb 2-1: USB disconnect, device number 17 [ 211.160188][ T7650] pimreg: entered allmulticast mode [ 211.196696][ T7648] pimreg: left allmulticast mode [ 211.232292][ T7653] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 211.239511][ T7653] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.273036][ T7653] vhci_hcd vhci_hcd.0: Device attached [ 211.322974][ T7655] vhci_hcd: connection closed [ 211.330972][ T36] vhci_hcd: stop threads [ 211.402724][ T36] vhci_hcd: release socket [ 211.442375][ T36] vhci_hcd: disconnect device [ 211.451889][ T5937] vhci_hcd: vhci_device speed not set [ 211.453424][ T5902] usb 3-1: USB disconnect, device number 10 [ 212.264294][ T7680] vlan0: entered promiscuous mode [ 212.270483][ T7680] bond0: entered promiscuous mode [ 212.306463][ T7680] bond_slave_0: entered promiscuous mode [ 212.488647][ T7680] bond_slave_1: entered promiscuous mode [ 212.762188][ T7080] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 212.889347][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 212.903268][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 212.931847][ T5902] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.953495][ T7080] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 212.962226][ T7080] usb 4-1: config 0 has no interface number 0 [ 212.995221][ T7080] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 213.052586][ T7080] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 213.089078][ T7080] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 213.103842][ T7080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.122382][ T5902] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 213.133915][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.145485][ T7080] usb 4-1: Product: syz [ 213.155793][ T7080] usb 4-1: Manufacturer: syz [ 213.163791][ T5902] usb 5-1: Product: syz [ 213.225012][ T7080] usb 4-1: SerialNumber: syz [ 213.230000][ T5902] usb 5-1: Manufacturer: syz [ 213.236516][ T5902] usb 5-1: SerialNumber: syz [ 213.246587][ T7080] usb 4-1: config 0 descriptor?? [ 213.282703][ T5902] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 213.312716][ T7682] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 213.331092][ T7080] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 213.395719][ T7089] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 213.451885][ T7090] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 213.460002][ T7080] ums-sddr09 4-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 213.655639][ T7090] usb 2-1: Using ep0 maxpacket: 8 [ 213.716030][ T7090] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 213.732212][ T7090] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 213.766397][ T7090] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 213.827667][ T5937] usb 5-1: USB disconnect, device number 14 [ 213.844032][ T7080] usb 4-1: USB disconnect, device number 25 [ 214.563735][ T7089] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 214.593279][ T7089] ath9k_htc: Failed to initialize the device [ 214.626477][ T5937] usb 5-1: ath9k_htc: USB layer deinitialized [ 214.734201][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 214.903077][ T7076] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 215.115185][ T7076] usb 3-1: Using ep0 maxpacket: 8 [ 215.151349][ T7076] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 215.156131][ T7728] FAULT_INJECTION: forcing a failure. [ 215.156131][ T7728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.181300][ T7076] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 215.214646][ T7728] CPU: 0 UID: 0 PID: 7728 Comm: syz.4.509 Not tainted syzkaller #0 PREEMPT(full) [ 215.214679][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.214692][ T7728] Call Trace: [ 215.214700][ T7728] [ 215.214709][ T7728] dump_stack_lvl+0x189/0x250 [ 215.214738][ T7728] ? __pfx____ratelimit+0x10/0x10 [ 215.214770][ T7728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.214793][ T7728] ? __pfx__printk+0x10/0x10 [ 215.214814][ T7728] ? __might_fault+0xb0/0x130 [ 215.214850][ T7728] should_fail_ex+0x414/0x560 [ 215.214887][ T7728] _copy_from_user+0x2d/0xb0 [ 215.214916][ T7728] cmsghdr_from_user_compat_to_kern+0x50b/0x800 [ 215.214964][ T7728] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 215.215007][ T7728] ____sys_sendmsg+0x20f/0x830 [ 215.215045][ T7728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.215093][ T7728] ___sys_sendmsg+0x21f/0x2a0 [ 215.215117][ T7728] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.215138][ T7728] ? __lock_acquire+0xab9/0xd20 [ 215.215206][ T7728] ? __fget_files+0x2a/0x420 [ 215.215232][ T7728] ? __fget_files+0x3a0/0x420 [ 215.215268][ T7728] __sys_sendmmsg+0x28e/0x430 [ 215.215295][ T7728] ? __pfx___sys_sendmmsg+0x10/0x10 [ 215.215312][ T7728] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 215.215362][ T7728] ? ksys_write+0x22a/0x250 [ 215.215388][ T7728] ? __pfx_ksys_write+0x10/0x10 [ 215.215417][ T7728] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 215.215450][ T7728] __do_fast_syscall_32+0xb6/0x2b0 [ 215.215481][ T7728] do_fast_syscall_32+0x34/0x80 [ 215.215503][ T7728] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.215527][ T7728] RIP: 0023:0xf704d539 [ 215.215546][ T7728] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 215.215565][ T7728] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 215.215588][ T7728] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800024c0 [ 215.215603][ T7728] RDX: 0000000000000001 RSI: 0000000000008005 RDI: 0000000000000000 [ 215.215616][ T7728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.215627][ T7728] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 215.215639][ T7728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.215672][ T7728] [ 215.462581][ T7076] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 215.473422][ T7076] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 215.499771][ T7076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.895857][ T7076] usb 3-1: string descriptor 0 read error: -71 [ 215.905182][ T7738] fuse: Bad value for 'user_id' [ 215.910695][ T7738] fuse: Bad value for 'user_id' [ 216.001970][ T5836] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 216.131560][ T7076] usb 3-1: USB disconnect, device number 11 [ 216.174604][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.232450][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.283517][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.338876][ T5836] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 216.366695][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.398375][ T7090] usb 2-1: string descriptor 0 read error: -71 [ 216.403481][ T5836] usb 5-1: config 0 descriptor?? [ 216.427942][ T7090] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.447838][ T7090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.474968][ T7090] usb 2-1: can't set config #1, error -71 [ 216.522988][ T7090] usb 2-1: USB disconnect, device number 18 [ 216.677117][ T5836] usbhid 5-1:0.0: can't add hid device: -71 [ 216.694411][ T5836] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 216.729441][ T5836] usb 5-1: USB disconnect, device number 15 [ 217.044382][ T5937] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 217.319694][ T5937] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 217.341731][ T5937] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.453332][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 217.477188][ T5937] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 217.510694][ T5937] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 217.587290][ T5937] usb 1-1: Manufacturer: syz [ 217.598062][ T5937] usb 1-1: SerialNumber: syz [ 217.964800][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.070750][ T7090] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 218.088938][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.252729][ T7090] usb 5-1: Using ep0 maxpacket: 8 [ 218.260744][ T7090] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 19910, setting to 64 [ 218.275485][ T7090] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.309723][ T5937] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 218.318982][ T7090] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 218.348543][ T5937] usb 1-1: USB disconnect, device number 15 [ 218.374311][ T7090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.414147][ T7090] usb 5-1: Product: syz [ 218.438996][ T7090] usb 5-1: Manufacturer: syz [ 218.473361][ T7090] usb 5-1: SerialNumber: syz [ 218.494998][ T7090] usb 5-1: config 0 descriptor?? [ 218.519286][ T7090] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 218.736779][ T7090] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 218.778993][ T7090] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 218.912578][ T5937] usb 5-1: USB disconnect, device number 16 [ 219.351964][ T7784] bond1: option ad_select: invalid value (34) [ 219.417768][ T7784] bond1 (unregistering): Released all slaves [ 221.982947][ T7820] FAULT_INJECTION: forcing a failure. [ 221.982947][ T7820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.009894][ T7820] CPU: 1 UID: 0 PID: 7820 Comm: syz.4.533 Not tainted syzkaller #0 PREEMPT(full) [ 222.009914][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.009922][ T7820] Call Trace: [ 222.009927][ T7820] [ 222.009933][ T7820] dump_stack_lvl+0x189/0x250 [ 222.009952][ T7820] ? __pfx____ratelimit+0x10/0x10 [ 222.009970][ T7820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.009982][ T7820] ? __pfx__printk+0x10/0x10 [ 222.009994][ T7820] ? __might_fault+0xb0/0x130 [ 222.010014][ T7820] should_fail_ex+0x414/0x560 [ 222.010036][ T7820] _copy_from_user+0x2d/0xb0 [ 222.010052][ T7820] copy_uabi_to_xstate+0x120/0x970 [ 222.010074][ T7820] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 222.010087][ T7820] ? __local_bh_enable_ip+0x12d/0x1c0 [ 222.010107][ T7820] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 222.010125][ T7820] ? x86_task_fpu+0x4c/0x90 [ 222.010138][ T7820] fpu__restore_sig+0xf75/0x1100 [ 222.010152][ T7820] ? fpu__restore_sig+0xa42/0x1100 [ 222.010168][ T7820] ? __pfx_fpu__restore_sig+0x10/0x10 [ 222.010199][ T7820] ia32_restore_sigcontext+0x449/0x5b0 [ 222.010217][ T7820] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 222.010234][ T7820] ? _raw_spin_lock_irq+0xae/0xf0 [ 222.010250][ T7820] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 222.010273][ T7820] ? _raw_spin_unlock_irq+0x23/0x50 [ 222.010289][ T7820] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.010303][ T7820] __ia32_compat_sys_rt_sigreturn+0x1a9/0x260 [ 222.010329][ T7820] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 222.010349][ T7820] ? do_int80_emulation+0xec/0x390 [ 222.010362][ T7820] ? asm_int80_emulation+0x1a/0x20 [ 222.010374][ T7820] do_int80_emulation+0x126/0x390 [ 222.010387][ T7820] ? clear_bhb_loop+0x60/0xb0 [ 222.010398][ T7820] ? clear_bhb_loop+0x60/0xb0 [ 222.010412][ T7820] asm_int80_emulation+0x1a/0x20 [ 222.010422][ T7820] RIP: 0023:0xf704d537 [ 222.010434][ T7820] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 222.010444][ T7820] RSP: 002b:00000000f543d55c EFLAGS: 00000206 [ 222.010457][ T7820] RAX: 000000000000016a RBX: 0000000000000005 RCX: 0000000080000280 [ 222.010465][ T7820] RDX: 000000000000006e RSI: 0000000000000000 RDI: 0000000000000000 [ 222.010473][ T7820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.010485][ T7820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.010492][ T7820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.010510][ T7820] [ 223.045297][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 223.058969][ T7833] QAT: failed to copy from user cfg_data. [ 223.185938][ T7840] input: syz1 as /devices/virtual/input/input21 [ 223.351889][ T5921] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 223.401815][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 223.502173][ T5921] usb 1-1: device descriptor read/64, error -71 [ 223.565767][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 223.606966][ T10] usb 5-1: config 81 has an invalid interface number: 93 but max is 0 [ 223.669206][ T10] usb 5-1: config 81 has no interface number 0 [ 223.696446][ T10] usb 5-1: config 81 interface 93 has no altsetting 0 [ 223.725896][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=dd.a4 [ 223.754824][ T5921] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 223.788386][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.814874][ T10] usb 5-1: Product: syz [ 223.830380][ T10] usb 5-1: Manufacturer: syz [ 223.846899][ T10] usb 5-1: SerialNumber: syz [ 223.902074][ T5921] usb 1-1: device descriptor read/64, error -71 [ 224.022752][ T5921] usb usb1-port1: attempt power cycle [ 224.117842][ T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:81.93/input/input22 [ 224.157000][ T5186] bcm5974 5-1:81.93: could not read from device [ 224.184408][ T10] usb 5-1: USB disconnect, device number 17 [ 224.193476][ T5186] bcm5974 5-1:81.93: could not read from device [ 224.401971][ T5921] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 224.434146][ T5921] usb 1-1: device descriptor read/8, error -71 [ 224.715589][ T5921] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 224.782934][ T5921] usb 1-1: device descriptor read/8, error -71 [ 224.914305][ T5921] usb usb1-port1: unable to enumerate USB device [ 224.975048][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 225.388165][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 225.424488][ T7876] netlink: 36 bytes leftover after parsing attributes in process `syz.2.551'. [ 226.361991][ T7089] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 226.541784][ T7089] usb 4-1: Using ep0 maxpacket: 8 [ 226.554212][ T7089] usb 4-1: config index 0 descriptor too short (expected 32033, got 36) [ 226.571765][ T7089] usb 4-1: config 139 has too many interfaces: 244, using maximum allowed: 32 [ 226.623548][ T7089] usb 4-1: config 139 has an invalid descriptor of length 0, skipping remainder of the config [ 226.674821][ T7089] usb 4-1: config 139 has 0 interfaces, different from the descriptor's value: 244 [ 226.723962][ T7089] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 226.765803][ T7076] IPVS: starting estimator thread 0... [ 226.772243][ T7089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.892156][ T7901] IPVS: using max 25 ests per chain, 60000 per kthread [ 227.233942][ T7905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.560'. [ 227.292231][ T7076] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 227.469644][ T12] IPVS: stop unused estimator thread 0... [ 227.475921][ T7076] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 227.495625][ T7076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.523484][ T7076] usb 1-1: Product: syz [ 227.546594][ T7076] usb 1-1: Manufacturer: syz [ 227.568719][ T7076] usb 1-1: SerialNumber: syz [ 228.459900][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 229.019952][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 229.170952][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 229.190649][ T7089] usb 4-1: string descriptor 0 read error: -71 [ 229.258734][ T7089] usb 4-1: USB disconnect, device number 26 [ 229.444602][ T7076] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 229.884463][ T7076] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 229.903573][ T7076] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 229.940294][ T7076] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 230.050275][ T7076] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 230.345592][ T7076] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 230.360549][ T7076] usb 1-1: USB disconnect, device number 20 [ 230.770598][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.577'. [ 230.793027][ T7954] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000004114386944' [ 230.861921][ T7090] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 230.874577][ T7947] bond1: option arp_all_targets: invalid value (29) [ 230.892049][ T7076] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 230.912405][ T7947] bond1 (unregistering): Released all slaves [ 231.032324][ T7090] usb 2-1: Using ep0 maxpacket: 16 [ 231.039883][ T7090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.051330][ T7090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.064001][ T7076] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.071899][ T7090] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 231.079909][ T7076] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 231.101778][ T7090] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 231.110881][ T7090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.115363][ T7076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.146023][ T7090] usb 2-1: config 0 descriptor?? [ 231.153260][ T7076] usb 1-1: config 0 descriptor?? [ 231.175977][ T7076] pwc: Askey VC010 type 2 USB webcam detected. [ 231.575886][ T7076] pwc: recv_control_msg error -32 req 02 val 2b00 [ 231.581053][ T7090] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0005/input/input23 [ 231.585963][ T7076] pwc: recv_control_msg error -32 req 02 val 2700 [ 231.731812][ T7089] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 231.769499][ T7090] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 231.833791][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.581'. [ 231.884534][ T7076] pwc: recv_control_msg error -71 req 04 val 1000 [ 231.897245][ T7076] pwc: recv_control_msg error -71 req 04 val 1300 [ 231.920431][ T7076] pwc: recv_control_msg error -71 req 04 val 1400 [ 231.940993][ T7076] pwc: recv_control_msg error -71 req 02 val 2000 [ 231.975606][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.988474][ T7089] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.006600][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.025822][ T7089] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.038274][ T7076] pwc: recv_control_msg error -71 req 02 val 2100 [ 232.063801][ T7076] pwc: recv_control_msg error -71 req 04 val 1500 [ 232.089476][ T7089] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.089528][ T7076] pwc: recv_control_msg error -71 req 02 val 2500 [ 232.154842][ T7090] usb 2-1: USB disconnect, device number 19 [ 232.160050][ T7076] pwc: recv_control_msg error -71 req 02 val 2400 [ 232.191098][ T7089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.194400][ T7076] pwc: recv_control_msg error -71 req 02 val 2600 [ 232.229070][ T7971] fido_id[7971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 232.239658][ T7076] pwc: recv_control_msg error -71 req 02 val 2900 [ 232.258501][ T7962] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 232.285019][ T7076] pwc: recv_control_msg error -71 req 02 val 2800 [ 232.301583][ T7076] pwc: recv_control_msg error -71 req 04 val 1100 [ 232.314114][ T7076] pwc: recv_control_msg error -71 req 04 val 1200 [ 232.343820][ T7089] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.385602][ T7076] pwc: Registered as video103. [ 232.515017][ T7076] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 232.617497][ T7076] usb 1-1: USB disconnect, device number 21 [ 232.764239][ T5921] usb 3-1: USB disconnect, device number 12 [ 234.052826][ T7990] tipc: Enabled bearer , priority 0 [ 234.107527][ T7990] syzkaller0: entered promiscuous mode [ 234.157325][ T7990] syzkaller0: entered allmulticast mode [ 234.508448][ T7989] tipc: Resetting bearer [ 234.581532][ T7989] tipc: Disabling bearer [ 234.609926][ T8002] FAULT_INJECTION: forcing a failure. [ 234.609926][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 234.680110][ T8002] CPU: 0 UID: 0 PID: 8002 Comm: syz.2.589 Not tainted syzkaller #0 PREEMPT(full) [ 234.680142][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.680154][ T8002] Call Trace: [ 234.680163][ T8002] [ 234.680173][ T8002] dump_stack_lvl+0x189/0x250 [ 234.680202][ T8002] ? __pfx____ratelimit+0x10/0x10 [ 234.680234][ T8002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.680256][ T8002] ? __pfx__printk+0x10/0x10 [ 234.680284][ T8002] ? __pfx___might_resched+0x10/0x10 [ 234.680319][ T8002] should_fail_ex+0x414/0x560 [ 234.680358][ T8002] should_failslab+0xa8/0x100 [ 234.680386][ T8002] __kmalloc_noprof+0xcb/0x7f0 [ 234.680407][ T8002] ? kfree+0x4d/0x6d0 [ 234.680423][ T8002] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 234.680455][ T8002] tomoyo_realpath_from_path+0xe3/0x5d0 [ 234.680495][ T8002] tomoyo_check_open_permission+0x1c1/0x3b0 [ 234.680528][ T8002] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 234.680558][ T8002] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 234.680586][ T8002] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 234.680650][ T8002] ? lockref_get+0x15/0x60 [ 234.680686][ T8002] ? tomoyo_file_open+0x165/0x220 [ 234.680718][ T8002] security_file_open+0xb1/0x270 [ 234.680749][ T8002] do_dentry_open+0x384/0x13f0 [ 234.680784][ T8002] ? vfs_open+0x31/0x340 [ 234.680816][ T8002] vfs_open+0x3b/0x340 [ 234.680839][ T8002] ? path_openat+0x2ecd/0x3830 [ 234.680861][ T8002] path_openat+0x2ee5/0x3830 [ 234.680920][ T8002] ? __pfx_path_openat+0x10/0x10 [ 234.680960][ T8002] do_filp_open+0x1fa/0x410 [ 234.680993][ T8002] ? __lock_acquire+0xab9/0xd20 [ 234.681022][ T8002] ? __pfx_do_filp_open+0x10/0x10 [ 234.681066][ T8002] ? _raw_spin_unlock+0x28/0x50 [ 234.681095][ T8002] ? alloc_fd+0x64c/0x6c0 [ 234.681148][ T8002] do_sys_openat2+0x121/0x1c0 [ 234.681180][ T8002] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.681210][ T8002] ? ksys_write+0x22a/0x250 [ 234.681229][ T8002] ? exc_page_fault+0x82/0x100 [ 234.681249][ T8002] ? __pfx_ksys_write+0x10/0x10 [ 234.681274][ T8002] __ia32_compat_sys_openat+0x131/0x160 [ 234.681310][ T8002] __do_fast_syscall_32+0xb6/0x2b0 [ 234.681332][ T8002] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.681355][ T8002] do_fast_syscall_32+0x34/0x80 [ 234.681376][ T8002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.681399][ T8002] RIP: 0023:0xf703d539 [ 234.681416][ T8002] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 234.681433][ T8002] RSP: 002b:00000000f542d100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 234.681454][ T8002] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f542d150 [ 234.681467][ T8002] RDX: 0000000000101301 RSI: 0000000000000000 RDI: 00000000f73d5ff4 [ 234.681480][ T8002] RBP: 0000000000101301 R08: 0000000000000000 R09: 0000000000000000 [ 234.681493][ T8002] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 234.681505][ T8002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.681535][ T8002] [ 234.981331][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.051921][ T8002] ERROR: Out of memory at tomoyo_realpath_from_path. [ 235.372960][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 235.445219][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.475840][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 236.133665][ T8027] input: syz1 as /devices/virtual/input/input25 [ 236.497131][ T8033] FAULT_INJECTION: forcing a failure. [ 236.497131][ T8033] name failslab, interval 1, probability 0, space 0, times 0 [ 236.602312][ T8033] CPU: 1 UID: 0 PID: 8033 Comm: syz.0.598 Not tainted syzkaller #0 PREEMPT(full) [ 236.602344][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.602356][ T8033] Call Trace: [ 236.602368][ T8033] [ 236.602378][ T8033] dump_stack_lvl+0x189/0x250 [ 236.602407][ T8033] ? __pfx____ratelimit+0x10/0x10 [ 236.602439][ T8033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.602460][ T8033] ? __pfx__printk+0x10/0x10 [ 236.602487][ T8033] ? __pfx___might_resched+0x10/0x10 [ 236.602515][ T8033] ? fs_reclaim_acquire+0x7d/0x100 [ 236.602546][ T8033] should_fail_ex+0x414/0x560 [ 236.602583][ T8033] should_failslab+0xa8/0x100 [ 236.602612][ T8033] kmem_cache_alloc_noprof+0x74/0x6e0 [ 236.602633][ T8033] ? ksys_write+0x22a/0x250 [ 236.602652][ T8033] ? getname_flags+0xb8/0x540 [ 236.602676][ T8033] ? exc_page_fault+0x82/0x100 [ 236.602700][ T8033] getname_flags+0xb8/0x540 [ 236.602731][ T8033] __ia32_sys_mknodat+0x96/0xc0 [ 236.602755][ T8033] __do_fast_syscall_32+0xb6/0x2b0 [ 236.602778][ T8033] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.602800][ T8033] do_fast_syscall_32+0x34/0x80 [ 236.602822][ T8033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.602847][ T8033] RIP: 0023:0xf705d539 [ 236.602865][ T8033] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 236.602883][ T8033] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000129 [ 236.602906][ T8033] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 236.602920][ T8033] RDX: 00000000000081c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.602932][ T8033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.602944][ T8033] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 236.603045][ T8033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.603079][ T8033] [ 237.461840][ T7090] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 237.712148][ T7090] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 237.720479][ T7090] usb 3-1: config 0 has no interface number 0 [ 237.755384][ T7090] usb 3-1: config 0 interface 160 has no altsetting 0 [ 237.796111][ T7090] usb 3-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 237.873246][ T7090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.893871][ T7090] usb 3-1: Product: syz [ 237.902510][ T7090] usb 3-1: Manufacturer: syz [ 237.918757][ T7090] usb 3-1: SerialNumber: syz [ 237.973084][ T7090] usb 3-1: config 0 descriptor?? [ 238.001063][ T7090] usb-storage 3-1:0.160: USB Mass Storage device detected [ 239.125654][ T8073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.610'. [ 239.158184][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 239.335389][ T8076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.376534][ T8076] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.407243][ T8076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.577463][ T7089] usb 3-1: USB disconnect, device number 13 [ 239.987791][ T8088] binder: BINDER_SET_CONTEXT_MGR already set [ 240.086983][ T8095] binder: BINDER_SET_CONTEXT_MGR already set [ 240.093256][ T8095] binder: 8094:8095 ioctl 4018620d 80000040 returned -16 [ 240.206507][ T8088] binder: 8080:8088 ioctl 4018620d 80000040 returned -16 [ 240.544770][ T7090] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 240.691817][ T7090] usb 2-1: device descriptor read/64, error -71 [ 240.951795][ T7090] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 241.111910][ T7090] usb 2-1: device descriptor read/64, error -71 [ 241.240606][ T7090] usb usb2-port1: attempt power cycle [ 241.438361][ T8111] input: syz1 as /devices/virtual/input/input26 [ 241.567657][ T8111] gretap1: entered allmulticast mode [ 241.602130][ T7090] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 241.623614][ T7090] usb 2-1: device descriptor read/8, error -71 [ 241.862643][ T7090] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 241.912622][ T7090] usb 2-1: device descriptor read/8, error -71 [ 242.024760][ T7090] usb usb2-port1: unable to enumerate USB device [ 242.166769][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 243.992791][ T8132] delete_channel: no stack [ 244.811812][ T7076] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 244.843211][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 244.910079][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 244.970158][ T7076] usb 4-1: Using ep0 maxpacket: 32 [ 244.988438][ T7076] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 245.009885][ T7076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.078324][ T7076] usb 4-1: config 0 descriptor?? [ 245.147484][ T8161] netlink: 'syz.0.637': attribute type 27 has an invalid length. [ 245.329118][ T7076] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 245.375894][ T7076] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.431167][ T7076] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 245.462259][ T7076] usb 4-1: media controller created [ 245.607635][ T7076] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.639177][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.640'. [ 245.699044][ T7076] az6027: usb out operation failed. (-71) [ 245.751497][ T7076] az6027: usb out operation failed. (-71) [ 245.766237][ T7076] stb0899_attach: Driver disabled by Kconfig [ 245.779407][ T7076] az6027: no front-end attached [ 245.779407][ T7076] [ 245.796569][ T7076] az6027: usb out operation failed. (-71) [ 245.812026][ T7076] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 245.839215][ T7076] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 245.895865][ T7076] dvb-usb: schedule remote query interval to 400 msecs. [ 245.941805][ T7076] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 246.012095][ T7076] usb 4-1: USB disconnect, device number 27 [ 246.109154][ T8181] dummy0: mtu less than device minimum [ 246.368714][ T7076] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 246.564676][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 246.685970][ T8191] netlink: 'syz.2.649': attribute type 10 has an invalid length. [ 246.713710][ T8191] team0: Device dummy0 is up. Set it down before adding it as a team port [ 247.004518][ T8191] bond1 (unregistering): Released all slaves [ 247.252288][ T7076] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 247.451817][ T7076] usb 1-1: Using ep0 maxpacket: 8 [ 247.459282][ T7076] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 247.468107][ T7076] usb 1-1: config 150 has no interface number 0 [ 247.499055][ T8202] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.514210][ T7076] usb 1-1: config 150 interface 204 has no altsetting 0 [ 247.529769][ T8202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.537503][ T8202] IPv6: NLM_F_CREATE should be set when creating new route [ 247.545174][ T8202] IPv6: NLM_F_CREATE should be set when creating new route [ 247.562037][ T7076] usb 1-1: config 150 interface 1 has no altsetting 0 [ 247.581650][ T7076] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 247.596526][ T7076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.609417][ T7076] usb 1-1: Product: syz [ 247.621457][ T7076] usb 1-1: Manufacturer: syz [ 247.629004][ T8203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.632961][ T7076] usb 1-1: SerialNumber: syz [ 247.691940][ T5836] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 247.916059][ T8180] syzkaller0: entered promiscuous mode [ 247.921645][ T8180] syzkaller0: entered allmulticast mode [ 248.055726][ T7076] xr_serial 1-1:150.204: xr_serial converter detected [ 248.461882][ T5937] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 248.761945][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 248.788515][ T5937] usb 2-1: too many configurations: 238, using maximum allowed: 8 [ 248.814718][ T5937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 248.822927][ T5937] usb 2-1: can't read configurations, error -61 [ 248.926554][ T7076] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 248.933808][ T7076] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 248.963343][ T5937] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 248.984234][ T7076] usb 1-1: USB disconnect, device number 22 [ 249.018354][ T7076] xr_serial 1-1:150.204: device disconnected [ 249.162481][ T8227] FAULT_INJECTION: forcing a failure. [ 249.162481][ T8227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.165590][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 249.204190][ T5937] usb 2-1: too many configurations: 238, using maximum allowed: 8 [ 249.235447][ T5937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 249.249327][ T5937] usb 2-1: can't read configurations, error -61 [ 249.249488][ T8227] CPU: 0 UID: 0 PID: 8227 Comm: syz.3.660 Not tainted syzkaller #0 PREEMPT(full) [ 249.249512][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.249523][ T8227] Call Trace: [ 249.249531][ T8227] [ 249.249539][ T8227] dump_stack_lvl+0x189/0x250 [ 249.249563][ T8227] ? __pfx____ratelimit+0x10/0x10 [ 249.249591][ T8227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.249610][ T8227] ? __pfx__printk+0x10/0x10 [ 249.249629][ T8227] ? __might_fault+0xb0/0x130 [ 249.249660][ T8227] should_fail_ex+0x414/0x560 [ 249.249692][ T8227] _copy_from_iter+0x1de/0x1790 [ 249.249720][ T8227] ? _copy_from_iter+0x24f/0x1790 [ 249.249747][ T8227] ? __pfx__copy_from_iter+0x10/0x10 [ 249.249765][ T8227] ? sock_alloc_send_pskb+0x86b/0x980 [ 249.249791][ T8227] ? __pfx__copy_from_iter+0x10/0x10 [ 249.249814][ T8227] ? page_copy_sane+0x16a/0x280 [ 249.249837][ T8227] copy_page_from_iter+0xdd/0x170 [ 249.249863][ T8227] skb_copy_datagram_from_iter+0x306/0x720 [ 249.249896][ T8227] tun_get_user+0x1691/0x3e90 [ 249.249937][ T8227] ? aa_file_perm+0x44d/0x1550 [ 249.249958][ T8227] ? __pfx_tun_get_user+0x10/0x10 [ 249.249979][ T8227] ? _parse_integer_limit+0x1ae/0x1f0 [ 249.250007][ T8227] ? __lock_acquire+0xab9/0xd20 [ 249.250035][ T8227] ? ref_tracker_alloc+0x318/0x460 [ 249.250052][ T8227] ? __lock_acquire+0xab9/0xd20 [ 249.250076][ T8227] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 249.250107][ T8227] ? tun_get+0x1c/0x2f0 [ 249.250134][ T8227] ? tun_get+0x1c/0x2f0 [ 249.250155][ T8227] ? tun_get+0x1c/0x2f0 [ 249.250180][ T8227] tun_chr_write_iter+0x113/0x200 [ 249.250205][ T8227] vfs_write+0x5c9/0xb30 [ 249.250229][ T8227] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 249.250252][ T8227] ? __pfx_vfs_write+0x10/0x10 [ 249.250281][ T8227] ? __fget_files+0x2a/0x420 [ 249.250311][ T8227] ksys_write+0x145/0x250 [ 249.250329][ T8227] ? exc_page_fault+0x82/0x100 [ 249.250347][ T8227] ? __pfx_ksys_write+0x10/0x10 [ 249.250383][ T8227] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 249.250403][ T8227] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.250424][ T8227] __do_fast_syscall_32+0xb6/0x2b0 [ 249.250444][ T8227] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.250466][ T8227] do_fast_syscall_32+0x34/0x80 [ 249.250485][ T8227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.250507][ T8227] RIP: 0023:0xf7f04539 [ 249.250529][ T8227] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 249.250544][ T8227] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 249.250565][ T8227] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 249.250577][ T8227] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 249.250589][ T8227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.250600][ T8227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 249.250610][ T8227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.250639][ T8227] [ 249.673264][ T5937] usb usb2-port1: attempt power cycle [ 249.841925][ T8232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.662'. [ 249.872523][ T8232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.662'. [ 250.000120][ T8232] bond0: entered promiscuous mode [ 250.038483][ T8232] bond_slave_0: entered promiscuous mode [ 250.072248][ T8232] bond_slave_1: entered promiscuous mode [ 250.111836][ T5937] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 250.134051][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 250.140547][ T5937] usb 2-1: too many configurations: 238, using maximum allowed: 8 [ 250.163697][ T8232] bridge0: entered promiscuous mode [ 250.170730][ T5937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 250.170774][ T5937] usb 2-1: can't read configurations, error -61 [ 250.176001][ T8232] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 250.311980][ T5937] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 250.332956][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 250.337855][ T5937] usb 2-1: too many configurations: 238, using maximum allowed: 8 [ 250.341156][ T5937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 250.341202][ T5937] usb 2-1: can't read configurations, error -61 [ 250.341558][ T5937] usb usb2-port1: unable to enumerate USB device [ 250.629723][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 250.788827][ T8255] netlink: zone id is out of range [ 250.788866][ T8255] netlink: zone id is out of range [ 250.788875][ T8255] netlink: zone id is out of range [ 250.788885][ T8255] netlink: zone id is out of range [ 250.788894][ T8255] netlink: zone id is out of range [ 250.788904][ T8255] netlink: zone id is out of range [ 250.788914][ T8255] netlink: zone id is out of range [ 250.788924][ T8255] netlink: zone id is out of range [ 252.073118][ T7080] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 252.242580][ T7080] usb 3-1: Using ep0 maxpacket: 8 [ 252.292008][ T7080] usb 3-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 252.292080][ T7080] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64 [ 252.292110][ T7080] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 252.298605][ T7080] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 252.298680][ T7080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.298702][ T7080] usb 3-1: Product: syz [ 252.298719][ T7080] usb 3-1: Manufacturer: syz [ 252.298735][ T7080] usb 3-1: SerialNumber: syz [ 252.349112][ T7080] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 252.353487][ T7080] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 252.353575][ T7080] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 253.658017][ T8292] warning: `syz.0.682' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 254.298300][ T7076] usb 3-1: USB disconnect, device number 15 [ 254.588565][ T8303] fuse: Bad value for 'fd' [ 254.720965][ T8309] FAULT_INJECTION: forcing a failure. [ 254.720965][ T8309] name failslab, interval 1, probability 0, space 0, times 0 [ 254.759791][ T8309] CPU: 0 UID: 0 PID: 8309 Comm: syz.1.688 Not tainted syzkaller #0 PREEMPT(full) [ 254.759825][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.759844][ T8309] Call Trace: [ 254.759853][ T8309] [ 254.759862][ T8309] dump_stack_lvl+0x189/0x250 [ 254.759891][ T8309] ? __pfx____ratelimit+0x10/0x10 [ 254.759921][ T8309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.759942][ T8309] ? __pfx__printk+0x10/0x10 [ 254.759970][ T8309] ? __pfx___might_resched+0x10/0x10 [ 254.759997][ T8309] ? fs_reclaim_acquire+0x7d/0x100 [ 254.760026][ T8309] should_fail_ex+0x414/0x560 [ 254.760063][ T8309] should_failslab+0xa8/0x100 [ 254.760089][ T8309] __kmalloc_noprof+0xcb/0x7f0 [ 254.760110][ T8309] ? tomoyo_encode+0x28b/0x550 [ 254.760139][ T8309] tomoyo_encode+0x28b/0x550 [ 254.760169][ T8309] tomoyo_realpath_from_path+0x58d/0x5d0 [ 254.760195][ T8309] ? tomoyo_domain+0xd9/0x130 [ 254.760225][ T8309] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 254.760255][ T8309] tomoyo_path_number_perm+0x1e8/0x5a0 [ 254.760288][ T8309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 254.760370][ T8309] ? __pfx_current_check_access_path+0x10/0x10 [ 254.760395][ T8309] ? d_alloc_parallel+0x2f0/0x15e0 [ 254.760427][ T8309] tomoyo_path_mknod+0x142/0x190 [ 254.760455][ T8309] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 254.760493][ T8309] security_path_mknod+0x17e/0x3a0 [ 254.760522][ T8309] path_openat+0xd56/0x3830 [ 254.760583][ T8309] ? __pfx_path_openat+0x10/0x10 [ 254.760627][ T8309] do_filp_open+0x1fa/0x410 [ 254.760644][ T8309] ? __lock_acquire+0xab9/0xd20 [ 254.760671][ T8309] ? __pfx_do_filp_open+0x10/0x10 [ 254.760716][ T8309] ? _raw_spin_unlock+0x28/0x50 [ 254.760743][ T8309] ? alloc_fd+0x64c/0x6c0 [ 254.760787][ T8309] do_sys_openat2+0x121/0x1c0 [ 254.760820][ T8309] ? __pfx_do_sys_openat2+0x10/0x10 [ 254.760857][ T8309] ? ksys_write+0x22a/0x250 [ 254.760881][ T8309] ? __pfx_ksys_write+0x10/0x10 [ 254.760908][ T8309] __ia32_compat_sys_openat+0x131/0x160 [ 254.760943][ T8309] __do_fast_syscall_32+0xb6/0x2b0 [ 254.760966][ T8309] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.760991][ T8309] do_fast_syscall_32+0x34/0x80 [ 254.761013][ T8309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.761036][ T8309] RIP: 0023:0xf706d539 [ 254.761054][ T8309] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 254.761072][ T8309] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 254.761093][ T8309] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 254.761107][ T8309] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.761119][ T8309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.761131][ T8309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 254.761142][ T8309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.761175][ T8309] [ 254.872213][ T8309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.011919][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.080579][ T5937] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 255.264473][ T5937] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.276577][ T5937] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 255.313742][ T5937] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.337882][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.375176][ T8303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 255.399341][ T5937] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.616799][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.670337][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.710941][ T5937] usb 3-1: USB disconnect, device number 16 [ 255.914307][ T7089] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 255.932542][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.938922][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.081909][ T7089] usb 4-1: Using ep0 maxpacket: 8 [ 256.093920][ T7089] usb 4-1: config 0 has no interfaces? [ 256.111237][ T7089] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 256.127833][ T7089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.152769][ T7089] usb 4-1: config 0 descriptor?? [ 256.435542][ T30] audit: type=1400 audit(1760534913.469:285): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A2F2F2077EBB7 pid=8321 comm="syz.3.692" [ 256.489573][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.504614][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.722171][ T5937] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 256.891779][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 256.913010][ T5937] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 256.942511][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.975260][ T5937] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 256.985008][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.010943][ T5937] usb 2-1: Product: syz [ 257.026796][ T5937] usb 2-1: Manufacturer: syz [ 257.036370][ T5937] usb 2-1: SerialNumber: syz [ 257.234068][ T8349] netlink: 48 bytes leftover after parsing attributes in process `syz.0.700'. [ 257.250361][ T5937] usb 2-1: config 0 descriptor?? [ 257.380563][ T5937] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 257.402451][ T5937] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 257.462608][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 257.473600][ T8350] netlink: 86 bytes leftover after parsing attributes in process `syz.0.700'. [ 257.911039][ T5937] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 257.932161][ T5937] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 258.140210][ T8357] AppArmor: change_hat: Invalid input '0x000000000000' [ 258.143513][ T5937] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 258.157523][ T5937] em28xx 2-1:0.0: No AC97 audio processor [ 258.251934][ T7080] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 258.395883][ T7080] usb 3-1: device descriptor read/64, error -71 [ 258.612670][ T7076] usb 4-1: USB disconnect, device number 28 [ 258.661881][ T7080] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 258.812266][ T7080] usb 3-1: device descriptor read/64, error -71 [ 258.857490][ T8368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.876738][ T8368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.949195][ T7080] usb usb3-port1: attempt power cycle [ 259.123472][ T8372] random: crng reseeded on system resumption [ 259.333050][ T7080] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 259.357896][ T7080] usb 3-1: device descriptor read/8, error -71 [ 259.621781][ T7080] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 259.802564][ T7080] usb 3-1: device descriptor read/8, error -71 [ 260.083987][ T7080] usb usb3-port1: unable to enumerate USB device [ 260.237489][ T7076] usb 2-1: USB disconnect, device number 28 [ 260.257578][ T7076] em28xx 2-1:0.0: Disconnecting em28xx [ 260.540492][ T7076] em28xx 2-1:0.0: Freeing device [ 261.167180][ T8393] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 261.173870][ T8393] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 261.185026][ T8405] FAULT_INJECTION: forcing a failure. [ 261.185026][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 261.225212][ T8393] vhci_hcd vhci_hcd.0: Device attached [ 261.241247][ T8405] CPU: 1 UID: 0 PID: 8405 Comm: syz.3.718 Not tainted syzkaller #0 PREEMPT(full) [ 261.241279][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.241290][ T8405] Call Trace: [ 261.241299][ T8405] [ 261.241308][ T8405] dump_stack_lvl+0x189/0x250 [ 261.241337][ T8405] ? __pfx____ratelimit+0x10/0x10 [ 261.241381][ T8405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.241402][ T8405] ? __pfx__printk+0x10/0x10 [ 261.241441][ T8405] should_fail_ex+0x414/0x560 [ 261.241478][ T8405] should_failslab+0xa8/0x100 [ 261.241507][ T8405] kmem_cache_alloc_noprof+0x74/0x6e0 [ 261.241529][ T8405] ? skb_clone+0x212/0x3a0 [ 261.241556][ T8405] skb_clone+0x212/0x3a0 [ 261.241582][ T8405] __netlink_deliver_tap+0x404/0x850 [ 261.241626][ T8405] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.241661][ T8405] netlink_deliver_tap+0x19c/0x1b0 [ 261.241692][ T8405] __netlink_sendskb+0x47/0x90 [ 261.241718][ T8405] netlink_dump+0xa84/0xe90 [ 261.241768][ T8405] ? __pfx_netlink_dump+0x10/0x10 [ 261.241792][ T8405] ? __netlink_lookup+0x7db/0x8a0 [ 261.241841][ T8405] ? netlink_lookup+0x30/0x200 [ 261.241867][ T8405] ? netlink_lookup+0x30/0x200 [ 261.241890][ T8405] ? netlink_lookup+0x30/0x200 [ 261.241924][ T8405] __netlink_dump_start+0x5cb/0x7e0 [ 261.241962][ T8405] xfrm_user_rcv_msg+0x42f/0xab0 [ 261.241992][ T8405] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 261.242057][ T8405] ? __pfx___mutex_trylock_common+0x10/0x10 [ 261.242090][ T8405] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 261.242107][ T8405] ? __pfx_xfrm_dump_sa_done+0x10/0x10 [ 261.242131][ T8405] ? trace_contention_end+0x39/0x120 [ 261.242162][ T8405] ? __mutex_lock+0x335/0x1350 [ 261.242193][ T8405] netlink_rcv_skb+0x208/0x470 [ 261.242223][ T8405] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 261.242244][ T8405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.242288][ T8405] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.242315][ T8405] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.242347][ T8405] xfrm_netlink_rcv+0x79/0x90 [ 261.242368][ T8405] netlink_unicast+0x82f/0x9e0 [ 261.242412][ T8405] ? __pfx_netlink_unicast+0x10/0x10 [ 261.242441][ T8405] ? netlink_sendmsg+0x642/0xb30 [ 261.242466][ T8405] ? skb_put+0x11b/0x210 [ 261.242498][ T8405] netlink_sendmsg+0x805/0xb30 [ 261.242539][ T8405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.242571][ T8405] ? __import_iovec+0x5d4/0x7f0 [ 261.242595][ T8405] ? aa_sock_msg_perm+0xf1/0x1d0 [ 261.242620][ T8405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.242645][ T8405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.242676][ T8405] __sock_sendmsg+0x21c/0x270 [ 261.242704][ T8405] ____sys_sendmsg+0x505/0x830 [ 261.242749][ T8405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.242800][ T8405] ___sys_sendmsg+0x21f/0x2a0 [ 261.242824][ T8405] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.242888][ T8405] ? __fget_files+0x2a/0x420 [ 261.242912][ T8405] ? __fget_files+0x3a0/0x420 [ 261.242950][ T8405] __sys_sendmsg+0x164/0x220 [ 261.242972][ T8405] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.243014][ T8405] ? __pfx_ksys_write+0x10/0x10 [ 261.243041][ T8405] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 261.243064][ T8405] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.243088][ T8405] __do_fast_syscall_32+0xb6/0x2b0 [ 261.243112][ T8405] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.243136][ T8405] do_fast_syscall_32+0x34/0x80 [ 261.243159][ T8405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.243182][ T8405] RIP: 0023:0xf7f04539 [ 261.243201][ T8405] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 261.243218][ T8405] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 261.243243][ T8405] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 261.243258][ T8405] RDX: 0000000020040810 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.243271][ T8405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.243282][ T8405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.243294][ T8405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.243329][ T8405] [ 261.718153][ T8408] input: syz1 as /devices/virtual/input/input28 [ 261.767185][ T8403] usbip_core: unknown command [ 261.772166][ T8403] vhci_hcd: unknown pdu 2684354560 [ 261.777336][ T8403] usbip_core: unknown command [ 261.783730][ T1148] vhci_hcd: stop threads [ 261.788043][ T1148] vhci_hcd: release socket [ 261.797845][ T1148] vhci_hcd: disconnect device [ 261.843338][ T8393] fuse: Bad value for 'fd' [ 261.941099][ T8393] fuse: blksize only supported for fuseblk [ 262.053191][ T8420] FAULT_INJECTION: forcing a failure. [ 262.053191][ T8420] name failslab, interval 1, probability 0, space 0, times 0 [ 262.079737][ T8420] CPU: 1 UID: 0 PID: 8420 Comm: syz.2.723 Not tainted syzkaller #0 PREEMPT(full) [ 262.079776][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.079788][ T8420] Call Trace: [ 262.079797][ T8420] [ 262.079806][ T8420] dump_stack_lvl+0x189/0x250 [ 262.079834][ T8420] ? __pfx____ratelimit+0x10/0x10 [ 262.079866][ T8420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.079887][ T8420] ? __pfx__printk+0x10/0x10 [ 262.079911][ T8420] ? __lock_acquire+0xab9/0xd20 [ 262.079944][ T8420] should_fail_ex+0x414/0x560 [ 262.079980][ T8420] should_failslab+0xa8/0x100 [ 262.080008][ T8420] kmem_cache_alloc_noprof+0x74/0x6e0 [ 262.080030][ T8420] ? skb_clone+0x212/0x3a0 [ 262.080055][ T8420] skb_clone+0x212/0x3a0 [ 262.080079][ T8420] __netlink_deliver_tap+0x404/0x850 [ 262.080121][ T8420] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.080151][ T8420] netlink_deliver_tap+0x19c/0x1b0 [ 262.080179][ T8420] netlink_unicast+0x7fa/0x9e0 [ 262.080214][ T8420] ? __pfx_netlink_unicast+0x10/0x10 [ 262.080242][ T8420] ? netlink_sendmsg+0x642/0xb30 [ 262.080267][ T8420] ? skb_put+0x11b/0x210 [ 262.080299][ T8420] netlink_sendmsg+0x805/0xb30 [ 262.080337][ T8420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.080368][ T8420] ? __import_iovec+0x5d4/0x7f0 [ 262.080391][ T8420] ? aa_sock_msg_perm+0xf1/0x1d0 [ 262.080416][ T8420] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.080440][ T8420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.080470][ T8420] __sock_sendmsg+0x21c/0x270 [ 262.080496][ T8420] ____sys_sendmsg+0x505/0x830 [ 262.080533][ T8420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.080580][ T8420] ___sys_sendmsg+0x21f/0x2a0 [ 262.080604][ T8420] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.080663][ T8420] ? __fget_files+0x2a/0x420 [ 262.080687][ T8420] ? __fget_files+0x3a0/0x420 [ 262.080723][ T8420] __sys_sendmsg+0x164/0x220 [ 262.080754][ T8420] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.080795][ T8420] ? __pfx_ksys_write+0x10/0x10 [ 262.080820][ T8420] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 262.080843][ T8420] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.080867][ T8420] __do_fast_syscall_32+0xb6/0x2b0 [ 262.080889][ T8420] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.080912][ T8420] do_fast_syscall_32+0x34/0x80 [ 262.080934][ T8420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.080957][ T8420] RIP: 0023:0xf703d539 [ 262.080974][ T8420] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 262.080992][ T8420] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 262.081015][ T8420] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 262.081028][ T8420] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.081039][ T8420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.081050][ T8420] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 262.081061][ T8420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.081092][ T8420] [ 262.792505][ T8434] syzkaller1: entered promiscuous mode [ 262.798302][ T8434] syzkaller1: entered allmulticast mode [ 262.832523][ T8432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.726'. [ 262.845461][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.726'. [ 263.202287][ T8441] FAULT_INJECTION: forcing a failure. [ 263.202287][ T8441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.242126][ T8441] CPU: 0 UID: 0 PID: 8441 Comm: syz.3.731 Not tainted syzkaller #0 PREEMPT(full) [ 263.242156][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.242168][ T8441] Call Trace: [ 263.242175][ T8441] [ 263.242184][ T8441] dump_stack_lvl+0x189/0x250 [ 263.242212][ T8441] ? __pfx____ratelimit+0x10/0x10 [ 263.242241][ T8441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.242261][ T8441] ? __pfx__printk+0x10/0x10 [ 263.242285][ T8441] ? __might_fault+0xb0/0x130 [ 263.242314][ T8441] should_fail_ex+0x414/0x560 [ 263.242349][ T8441] _copy_from_user+0x2d/0xb0 [ 263.242377][ T8441] move_addr_to_kernel+0x7e/0x160 [ 263.242403][ T8441] get_compat_msghdr+0x3bd/0x4a0 [ 263.242440][ T8441] ? __pfx_get_compat_msghdr+0x10/0x10 [ 263.242484][ T8441] ___sys_sendmsg+0x193/0x2a0 [ 263.242507][ T8441] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.242567][ T8441] ? __fget_files+0x2a/0x420 [ 263.242590][ T8441] ? __fget_files+0x3a0/0x420 [ 263.242625][ T8441] __sys_sendmsg+0x164/0x220 [ 263.242647][ T8441] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.242688][ T8441] ? __pfx_ksys_write+0x10/0x10 [ 263.242713][ T8441] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 263.242736][ T8441] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.242760][ T8441] __do_fast_syscall_32+0xb6/0x2b0 [ 263.242782][ T8441] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.242807][ T8441] do_fast_syscall_32+0x34/0x80 [ 263.242828][ T8441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.242852][ T8441] RIP: 0023:0xf7f04539 [ 263.242871][ T8441] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 263.242889][ T8441] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 263.242911][ T8441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003740 [ 263.242925][ T8441] RDX: 0000000000040014 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.242938][ T8441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.242949][ T8441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 263.242969][ T8441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.243002][ T8441] [ 263.469792][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.627993][ T8474] syzkaller0: entered promiscuous mode [ 265.873899][ T7115] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 266.044382][ T7115] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 266.074993][ T7115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.085126][ C1] net_ratelimit: 8 callbacks suppressed [ 266.085147][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 266.163036][ T7115] usb 5-1: config 0 descriptor?? [ 266.195175][ T7115] pwc: Creative Labs Webcam 5 detected. [ 266.222416][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 266.394517][ T7115] pwc: Failed to set LED on/off time (-71) [ 266.430066][ T7115] pwc: send_video_command error -71 [ 266.435894][ T7115] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 266.477881][ T7115] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 266.544124][ T7115] usb 5-1: USB disconnect, device number 18 [ 266.729998][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'. [ 266.773341][ T7090] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 266.954417][ T7090] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 266.981990][ T7090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.014343][ T7090] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 267.037551][ T7090] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 267.067121][ T7090] usb 1-1: Manufacturer: syz [ 267.090599][ T7090] usb 1-1: config 0 descriptor?? [ 267.130068][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 267.323305][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.346282][ T7090] rc_core: IR keymap rc-hauppauge not found [ 267.362029][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.385301][ T7090] Registered IR keymap rc-empty [ 267.403012][ T7090] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 267.416740][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.454383][ T7090] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29 [ 267.505119][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.831926][ T7115] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 268.003766][ T7115] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 268.056183][ T7076] usb 1-1: USB disconnect, device number 23 [ 268.079416][ T7115] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.120322][ T7115] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.145883][ T7115] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 268.177994][ T7115] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 268.191552][ T7115] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 268.200216][ T7115] usb 3-1: Manufacturer: syz [ 268.211069][ T7115] usb 3-1: config 0 descriptor?? [ 268.631279][ T7115] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 268.661845][ T7090] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 268.681830][ T7076] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 268.698250][ T7115] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 268.816894][ T8556] binder: 8553:8556 unknown command 0 [ 268.831921][ T8556] binder: 8553:8556 ioctl c0306201 80004a40 returned -22 [ 268.839192][ T7090] usb 2-1: Using ep0 maxpacket: 8 [ 268.853931][ T7090] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 268.871778][ T7090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.873841][ T7076] usb 4-1: config 0 has an invalid interface number: 245 but max is 0 [ 268.886609][ T7090] pvrusb2: Hardware description: Terratec Grabster AV400 [ 268.903668][ T7076] usb 4-1: config 0 has no interface number 0 [ 268.905559][ T7090] pvrusb2: ********** [ 268.917659][ T7090] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 268.918752][ T7076] usb 4-1: New USB device found, idVendor=699b, idProduct=9cbd, bcdDevice=76.2a [ 268.928680][ T7090] pvrusb2: Important functionality might not be entirely working. [ 268.946201][ T7090] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 268.958864][ T7090] pvrusb2: ********** [ 268.961751][ T7076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.992768][ T7076] usb 4-1: config 0 descriptor?? [ 269.022434][ T5921] usb 3-1: USB disconnect, device number 21 [ 269.090771][ T2345] pvrusb2: Invalid write control endpoint [ 269.233116][ T2345] pvrusb2: Invalid write control endpoint [ 269.250251][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 269.282513][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 269.311715][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 269.331984][ T2345] pvrusb2: Device being rendered inoperable [ 269.358472][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 269.391884][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 269.461578][ T2345] pvrusb2: Attached sub-driver cx25840 [ 269.472203][ T7115] usb 2-1: USB disconnect, device number 29 [ 269.494904][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 269.545888][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 269.713562][ T8575] xt_hashlimit: overflow, rate too high: 0 [ 270.441810][ T7089] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 270.802089][ T7089] usb 5-1: Using ep0 maxpacket: 8 [ 270.829287][ T7089] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 271.116565][ T7089] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64 [ 271.275518][ T7089] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 271.311794][ T5921] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 271.505314][ T7076] usb 4-1: string descriptor 0 read error: -71 [ 271.534247][ T7076] usb-storage 4-1:0.245: USB Mass Storage device detected [ 271.671938][ T5921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 271.698276][ T5921] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.710501][ T5921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.752169][ T5921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 271.753706][ T7089] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 271.828231][ T5921] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 271.881830][ T7076] usb 4-1: USB disconnect, device number 29 [ 272.104958][ T5921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.152045][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 272.267550][ T5921] usb 3-1: SerialNumber: syz [ 272.312668][ T7089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.320739][ T7089] usb 5-1: Product: syz [ 272.518047][ T7089] usb 5-1: Manufacturer: syz [ 272.543422][ T7089] usb 5-1: SerialNumber: syz [ 272.590829][ T7089] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 272.653136][ T7089] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 272.659721][ T7089] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 272.776147][ T8608] netlink: 'syz.3.782': attribute type 1 has an invalid length. [ 273.232401][ T8610] bond1: (slave geneve2): making interface the new active one [ 273.313737][ T8610] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 273.400634][ T78] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 273.453246][ T78] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 273.532177][ T78] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 273.646311][ T78] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 273.808122][ T5921] usb 3-1: can't set config #1, error -71 [ 273.829471][ T5921] usb 3-1: USB disconnect, device number 22 [ 274.021798][ T7089] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 274.040883][ T7090] usb 5-1: USB disconnect, device number 19 [ 274.174723][ T7089] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.206221][ T7089] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.247253][ T7089] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.271800][ T7089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.291192][ T8627] FAULT_INJECTION: forcing a failure. [ 274.291192][ T8627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.325655][ T8619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 274.333468][ T8627] CPU: 1 UID: 0 PID: 8627 Comm: syz.4.787 Not tainted syzkaller #0 PREEMPT(full) [ 274.333495][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.333507][ T8627] Call Trace: [ 274.333516][ T8627] [ 274.333525][ T8627] dump_stack_lvl+0x189/0x250 [ 274.333552][ T8627] ? __pfx____ratelimit+0x10/0x10 [ 274.333585][ T8627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.333605][ T8627] ? __pfx__printk+0x10/0x10 [ 274.333625][ T8627] ? __might_fault+0xb0/0x130 [ 274.333659][ T8627] should_fail_ex+0x414/0x560 [ 274.333693][ T8627] _copy_from_iter+0x1de/0x1790 [ 274.333725][ T8627] ? __lock_acquire+0xab9/0xd20 [ 274.333748][ T8627] ? __pfx__copy_from_iter+0x10/0x10 [ 274.333777][ T8627] ? page_copy_sane+0x4e/0x280 [ 274.333802][ T8627] copy_page_from_iter+0xdd/0x170 [ 274.333829][ T8627] tun_get_user+0x1d7b/0x3e90 [ 274.333863][ T8627] ? tun_get_user+0x6f6/0x3e90 [ 274.333895][ T8627] ? aa_file_perm+0x44d/0x1550 [ 274.333934][ T8627] ? __pfx_tun_get_user+0x10/0x10 [ 274.333956][ T8627] ? _parse_integer_limit+0x1ae/0x1f0 [ 274.333986][ T8627] ? __lock_acquire+0xab9/0xd20 [ 274.334016][ T8627] ? ref_tracker_alloc+0x318/0x460 [ 274.334035][ T8627] ? __lock_acquire+0xab9/0xd20 [ 274.334061][ T8627] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 274.334087][ T8627] ? tun_get+0x1c/0x2f0 [ 274.334117][ T8627] ? tun_get+0x1c/0x2f0 [ 274.334139][ T8627] ? tun_get+0x1c/0x2f0 [ 274.334166][ T8627] tun_chr_write_iter+0x113/0x200 [ 274.334194][ T8627] vfs_write+0x5c9/0xb30 [ 274.334219][ T8627] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 274.334244][ T8627] ? __pfx_vfs_write+0x10/0x10 [ 274.334274][ T8627] ? __fget_files+0x2a/0x420 [ 274.334308][ T8627] ksys_write+0x145/0x250 [ 274.334327][ T8627] ? exc_page_fault+0x82/0x100 [ 274.334346][ T8627] ? __pfx_ksys_write+0x10/0x10 [ 274.334370][ T8627] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 274.334391][ T8627] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.334414][ T8627] __do_fast_syscall_32+0xb6/0x2b0 [ 274.334437][ T8627] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.334462][ T8627] do_fast_syscall_32+0x34/0x80 [ 274.334483][ T8627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.334513][ T8627] RIP: 0023:0xf704d539 [ 274.334530][ T8627] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 274.334547][ T8627] RSP: 002b:00000000f543d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 274.334569][ T8627] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000780 [ 274.334583][ T8627] RDX: 000000000000010e RSI: 00000000f73e5ff4 RDI: 0000000000000000 [ 274.334595][ T8627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.334606][ T8627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 274.334618][ T8627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.334647][ T8627] [ 274.654904][ T7089] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.665621][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'. [ 275.824705][ T8647] netlink: 'syz.2.793': attribute type 5 has an invalid length. [ 275.912160][ T8648] netlink: 'syz.2.793': attribute type 29 has an invalid length. [ 276.002714][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 276.758775][ T7090] usb 1-1: USB disconnect, device number 24 [ 276.857036][ T8663] FAULT_INJECTION: forcing a failure. [ 276.857036][ T8663] name failslab, interval 1, probability 0, space 0, times 0 [ 276.897442][ T8663] CPU: 0 UID: 0 PID: 8663 Comm: syz.3.798 Not tainted syzkaller #0 PREEMPT(full) [ 276.897473][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.897485][ T8663] Call Trace: [ 276.897494][ T8663] [ 276.897503][ T8663] dump_stack_lvl+0x189/0x250 [ 276.897532][ T8663] ? __pfx____ratelimit+0x10/0x10 [ 276.897563][ T8663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.897585][ T8663] ? __pfx__printk+0x10/0x10 [ 276.897613][ T8663] ? __pfx___might_resched+0x10/0x10 [ 276.897653][ T8663] should_fail_ex+0x414/0x560 [ 276.897688][ T8663] should_failslab+0xa8/0x100 [ 276.897716][ T8663] kmem_cache_alloc_noprof+0x74/0x6e0 [ 276.897734][ T8663] ? ksys_write+0x22a/0x250 [ 276.897754][ T8663] ? exc_page_fault+0x82/0x100 [ 276.897771][ T8663] ? getname_flags+0xb8/0x540 [ 276.897802][ T8663] getname_flags+0xb8/0x540 [ 276.897827][ T8663] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 276.897853][ T8663] __ia32_sys_mkdir+0x5d/0x80 [ 276.897876][ T8663] __do_fast_syscall_32+0xb6/0x2b0 [ 276.897898][ T8663] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.897922][ T8663] do_fast_syscall_32+0x34/0x80 [ 276.897944][ T8663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.897968][ T8663] RIP: 0023:0xf7f04539 [ 276.897987][ T8663] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 276.898004][ T8663] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 276.898027][ T8663] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 276.898041][ T8663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.898053][ T8663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.898066][ T8663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 276.898078][ T8663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.898111][ T8663] [ 277.637010][ T8675] netlink: 196 bytes leftover after parsing attributes in process `syz.1.799'. [ 278.834350][ T8674] loop8: detected capacity change from 0 to 8 [ 278.843481][ T8674] Dev loop8: unable to read RDB block 8 [ 278.849074][ T8674] loop8: unable to read partition table [ 278.901883][ T8674] loop8: partition table beyond EOD, truncated [ 278.921972][ T8674] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 278.975661][ T8674] binder: BINDER_SET_CONTEXT_MGR already set [ 278.982205][ T8674] binder: 8673:8674 ioctl 4018620d 80004a80 returned -16 [ 279.602616][ T8702] Option 'å%%*UÄ' to dns_resolver key: bad/missing value [ 279.814319][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 279.877959][ T7076] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 279.881779][ T7089] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 280.041764][ T7076] usb 4-1: device descriptor read/64, error -71 [ 280.041869][ T7089] usb 5-1: Using ep0 maxpacket: 8 [ 280.077053][ T7089] usb 5-1: config 0 has an invalid interface number: 190 but max is 0 [ 280.085683][ T7089] usb 5-1: config 0 has an invalid interface number: 77 but max is 0 [ 280.094042][ T7089] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 280.111742][ T7089] usb 5-1: config 0 has no interface number 0 [ 280.118376][ T7089] usb 5-1: config 0 has no interface number 1 [ 280.224639][ T7089] usb 5-1: config 0 interface 190 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 280.281581][ T7089] usb 5-1: config 0 interface 190 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 280.304400][ T7089] usb 5-1: config 0 interface 190 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 280.341719][ T7089] usb 5-1: too many endpoints for config 0 interface 77 altsetting 221: 198, using maximum allowed: 30 [ 280.353529][ T8710] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 280.382029][ T7089] usb 5-1: config 0 interface 77 altsetting 221 endpoint 0x7 has an invalid bInterval 52, changing to 7 [ 280.391763][ T7076] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 280.416226][ T7089] usb 5-1: config 0 interface 77 altsetting 221 has an invalid descriptor for endpoint zero, skipping [ 280.428218][ T8710] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 280.450923][ T7089] usb 5-1: config 0 interface 77 altsetting 221 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 280.494223][ T7089] usb 5-1: config 0 interface 77 altsetting 221 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 280.571814][ T7076] usb 4-1: device descriptor read/64, error -71 [ 280.595957][ T7089] usb 5-1: config 0 interface 77 altsetting 221 bulk endpoint 0x9 has invalid maxpacket 64 [ 280.611735][ T7089] usb 5-1: config 0 interface 77 altsetting 221 has a duplicate endpoint with address 0x4, skipping [ 280.642072][ T7089] usb 5-1: config 0 interface 77 altsetting 221 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 280.671950][ T7089] usb 5-1: config 0 interface 77 altsetting 221 has a duplicate endpoint with address 0x4, skipping [ 280.701890][ T7076] usb usb4-port1: attempt power cycle [ 280.721001][ T7089] usb 5-1: config 0 interface 77 altsetting 221 has a duplicate endpoint with address 0xF, skipping [ 280.772366][ T7089] usb 5-1: config 0 interface 77 altsetting 221 has a duplicate endpoint with address 0x9, skipping [ 280.795981][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.813'. [ 280.851749][ T7089] usb 5-1: config 0 interface 77 altsetting 221 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 280.877529][ T7089] usb 5-1: config 0 interface 77 altsetting 221 has 14 endpoint descriptors, different from the interface descriptor's value: 198 [ 280.951750][ T7089] usb 5-1: config 0 interface 77 has no altsetting 0 [ 280.961783][ T7080] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 280.974952][ T7089] usb 5-1: New USB device found, idVendor=eb2a, idProduct=17de, bcdDevice=54.13 [ 281.035775][ T7089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.077943][ T7089] usb 5-1: Product: syz [ 281.099258][ T7089] usb 5-1: Manufacturer: syz [ 281.109457][ T7089] usb 5-1: SerialNumber: syz [ 281.122068][ T7076] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 281.149136][ T7076] usb 4-1: device descriptor read/8, error -71 [ 281.163814][ T7080] usb 1-1: device descriptor read/64, error -71 [ 281.207102][ T7089] usb 5-1: config 0 descriptor?? [ 281.214392][ T8705] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 281.228247][ T7089] dvb-usb: found a 'KWorld Xpert DVB-T USB2.0' in cold state, will try to load a firmware [ 281.250970][ T7089] usb 5-1: Direct firmware load for dvb-usb-adstech-usb2-02.fw failed with error -2 [ 281.291743][ T7089] usb 5-1: Falling back to sysfs fallback for: dvb-usb-adstech-usb2-02.fw [ 281.405520][ T7076] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 281.422165][ T7080] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 281.432566][ T7076] usb 4-1: device descriptor read/8, error -71 [ 281.434948][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.477456][ T8727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.502371][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.502707][ T8727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.545826][ T7076] usb usb4-port1: unable to enumerate USB device [ 281.581898][ T7080] usb 1-1: device descriptor read/64, error -71 [ 281.692417][ T7080] usb usb1-port1: attempt power cycle [ 282.042144][ T7080] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 282.078802][ T7080] usb 1-1: device descriptor read/8, error -71 [ 282.332045][ T7080] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 282.372556][ T7080] usb 1-1: device descriptor read/8, error -71 [ 282.542123][ T7080] usb usb1-port1: unable to enumerate USB device [ 283.051803][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 283.383499][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 283.451933][ T8748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.461773][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.481893][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.492183][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 283.523557][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 283.551951][ T10] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 283.561756][ T10] usb 2-1: Manufacturer: syz [ 283.580048][ T10] usb 2-1: config 0 descriptor?? [ 283.646434][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 284.313949][ T10] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 284.382881][ T10] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 284.881891][ T7076] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 285.031856][ T7076] usb 1-1: Using ep0 maxpacket: 32 [ 285.111795][ T7080] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 285.137102][ T7076] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.161829][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 285.186022][ T7076] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 285.221044][ T7076] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.251885][ T7080] usb 4-1: device descriptor read/64, error -71 [ 285.268105][ T7076] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 285.280915][ T7076] usb 1-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 285.290414][ T7076] usb 1-1: Product: syz [ 285.299377][ T7076] usb 1-1: Manufacturer: syz [ 285.311048][ T7076] usb 1-1: SerialNumber: syz [ 285.314663][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.340416][ T7076] usb 1-1: config 0 descriptor?? [ 285.341999][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 285.376100][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.380046][ T7076] usb 1-1: no audio or video endpoints found [ 285.405329][ T10] usb 3-1: config 0 descriptor?? [ 285.501838][ T7080] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 285.634768][ T7080] usb 4-1: device descriptor read/64, error -71 [ 285.763511][ T7080] usb usb4-port1: attempt power cycle [ 285.849164][ T10] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 285.895333][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input30 [ 286.137518][ T10] keytouch 0003:0926:3333.0008: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 286.151338][ T7080] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 286.247749][ T8774] trusted_key: encrypted_key: insufficient parameters specified [ 286.253842][ T7080] usb 4-1: device descriptor read/8, error -71 [ 286.523816][ T7080] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 286.542883][ T7080] usb 4-1: device descriptor read/8, error -71 [ 286.655614][ T7080] usb usb4-port1: unable to enumerate USB device [ 286.730733][ T8779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.812880][ T8779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.051263][ T5937] usb 1-1: USB disconnect, device number 29 [ 287.190312][ T7076] usb 2-1: USB disconnect, device number 30 [ 287.722929][ T7076] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 287.914064][ T7076] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 287.951856][ T7076] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.962697][ T5937] usb 3-1: USB disconnect, device number 23 [ 288.021729][ T7076] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 288.051478][ T7076] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.098349][ T7076] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 288.138657][ T7076] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 288.178469][ T7076] usb 2-1: Product: syz [ 288.211733][ T7076] usb 2-1: Manufacturer: syz [ 288.273346][ T7076] cdc_wdm 2-1:1.0: skipping garbage [ 288.278703][ T7076] cdc_wdm 2-1:1.0: skipping garbage [ 288.311874][ T7076] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 288.426538][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 288.451832][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 288.587725][ T8798] FAULT_INJECTION: forcing a failure. [ 288.587725][ T8798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.632455][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 288.641487][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.652057][ T10] usb 1-1: config 0 has no interface number 0 [ 288.659509][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.3.835 Not tainted syzkaller #0 PREEMPT(full) [ 288.659537][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.659550][ T8798] Call Trace: [ 288.659558][ T8798] [ 288.659567][ T8798] dump_stack_lvl+0x189/0x250 [ 288.659593][ T8798] ? __pfx____ratelimit+0x10/0x10 [ 288.659623][ T8798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.659641][ T8798] ? __pfx__printk+0x10/0x10 [ 288.659658][ T8798] ? __might_fault+0xb0/0x130 [ 288.659677][ T8798] should_fail_ex+0x414/0x560 [ 288.659698][ T8798] _copy_from_user+0x2d/0xb0 [ 288.659715][ T8798] get_compat_msghdr+0xad/0x4a0 [ 288.659736][ T8798] ? __pfx_get_compat_msghdr+0x10/0x10 [ 288.659762][ T8798] ? ___sys_recvmsg+0x1c4/0x510 [ 288.659774][ T8798] ? kfree+0x4d/0x6d0 [ 288.659790][ T8798] ___sys_recvmsg+0x17f/0x510 [ 288.659806][ T8798] ? __pfx____sys_recvmsg+0x10/0x10 [ 288.659833][ T8798] ? __fget_files+0x3a0/0x420 [ 288.659855][ T8798] do_recvmmsg+0x36a/0x770 [ 288.659872][ T8798] ? __pfx_do_recvmmsg+0x10/0x10 [ 288.659884][ T8798] ? ksys_write+0x1cb/0x250 [ 288.659908][ T8798] ? __fget_files+0x3a0/0x420 [ 288.659930][ T8798] __sys_recvmmsg+0x19d/0x280 [ 288.659944][ T8798] ? __pfx___sys_recvmmsg+0x10/0x10 [ 288.659960][ T8798] ? __pfx_ksys_write+0x10/0x10 [ 288.659977][ T8798] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 288.659997][ T8798] __do_fast_syscall_32+0xb6/0x2b0 [ 288.660010][ T8798] ? asm_int80_emulation+0x1a/0x20 [ 288.660021][ T8798] ? do_int80_emulation+0x1f3/0x390 [ 288.660036][ T8798] do_fast_syscall_32+0x34/0x80 [ 288.660049][ T8798] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.660063][ T8798] RIP: 0023:0xf7f04539 [ 288.660074][ T8798] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 288.660085][ T8798] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 288.660100][ T8798] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003700 [ 288.660109][ T8798] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 288.660116][ T8798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.660123][ T8798] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 288.660130][ T8798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.660148][ T8798] [ 288.901060][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.037150][ T5937] usb 2-1: USB disconnect, device number 31 [ 289.074312][ T10] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 289.084396][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.093719][ T10] usb 1-1: Product: syz [ 289.098929][ T10] usb 1-1: Manufacturer: syz [ 289.103641][ T10] usb 1-1: SerialNumber: syz [ 289.114550][ T10] usb 1-1: config 0 descriptor?? [ 289.126813][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 289.391812][ T7076] usb 4-1: new high-speed USB device number 38 using dummy_hcd Stopping sshd: stopped /usr/sbin/sshd (pid 5592) OK [ 289.531431][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy Stopping crond: [ 289.541975][ T7080] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 289.545725][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.561759][ T7076] usb 4-1: Using ep0 maxpacket: 32 [ 289.576770][ T7076] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 289.592465][ T7076] usb 4-1: config 0 has no interface number 0 [ 289.598650][ T7076] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping stopped /usr/sbin/crond (pid 5575) [ 289.636733][ T7076] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 OK [ 289.672222][ T7076] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 289.701777][ T7080] usb 3-1: Using ep0 maxpacket: 8 [ 289.710533][ T7080] usb 3-1: unable to get BOS descriptor or descriptor too short [ 289.713950][ T7076] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 289.730803][ T7080] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 289.753292][ T7080] usb 3-1: config 4 has no interface number 0 [ 289.759491][ T7080] usb 3-1: config 4 interface 30 has no altsetting 0 [ 289.768730][ T7076] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 289.795713][ T7080] usb 3-1: string descriptor 0 read error: -22 [ 289.812725][ T7080] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 289.832135][ T7076] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.835791][ T7080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.860706][ T7076] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 289.894236][ T7076] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.908180][ T7080] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 289.931969][ T7076] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.936000][ T7080] dw2102: su3000_power_ctrl: 1, initialized 0 [ 289.973235][ T7080] dvb-usb: bulk message failed: -22 (2/0) [ 289.975016][ T8818] bond1: Unable to set down delay as MII monitoring is disabled [ 290.004284][ T7080] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 290.014117][ T10] gspca_spca1528: reg_w err -71 [ 290.023441][ T7080] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 290.023985][ T7076] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 290.031134][ T7080] usb 3-1: media controller created [ 290.051331][ T10] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 290.067487][ T7080] dvb-usb: bulk message failed: -22 (6/0) [ 290.079883][ T8818] bond1 (unregistering): Released all slaves [ 290.087662][ T10] usb 1-1: USB disconnect, device number 30 [ 290.088553][ T7076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.093805][ T7080] dw2102: i2c transfer failed. [ 290.141726][ T7076] usb 4-1: Product: syz [ 290.143106][ T7080] dvb-usb: bulk message failed: -22 (6/0) [ 290.164127][ T7076] usb 4-1: Manufacturer: syz [ 290.182255][ T7076] usb 4-1: SerialNumber: syz [ 290.185036][ T7080] dw2102: i2c transfer failed. [ 290.199180][ T8810] dvb-usb: bulk message failed: -22 (3/0) [ 290.205822][ T8810] dw2102: i2c transfer failed. [ 290.212524][ T8810] dw2102: i2c wr: len=70 is too big! [ 290.212524][ T8810] [ 290.232196][ T7080] dvb-usb: bulk message failed: -22 (6/0) [ 290.233169][ T7076] usb 4-1: config 0 descriptor?? [ 290.238029][ T7080] dw2102: i2c transfer failed. Stopping dhcpcd... [ 290.271442][ T8807] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 290.277960][ T7080] dvb-usb: bulk message failed: -22 (6/0) [ 290.284471][ T7076] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 290.301933][ T7080] dw2102: i2c transfer failed. [ 290.306950][ T7080] dvb-usb: bulk message failed: -22 (6/0) [ 290.322479][ T7076] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 290.341745][ T7080] dw2102: i2c transfer failed. [ 290.356011][ T7080] dvb-usb: bulk message failed: -22 (6/0) [ 290.375664][ T7080] dw2102: i2c transfer failed. [ 290.383221][ T7080] dvb-usb: MAC address: 02:02:02:02:02:02 stopped /sbin/dhcpcd (pid 5495) [ 290.486510][ T5921] usb 4-1: USB disconnect, device number 38 [ 290.494263][ T7080] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.604966][ T7080] dvb-usb: bulk message failed: -22 (3/0) [ 290.610899][ T7080] dw2102: command 0x0e transfer failed. [ 290.669909][ T7080] dvb-usb: bulk message failed: -22 (3/0) [ 290.692867][ T7080] dw2102: command 0x0e transfer failed. [ 291.081822][ T7080] dvb-usb: bulk message failed: -22 (3/0) [ 291.087627][ T7080] dw2102: command 0x0e transfer failed. [ 291.124991][ T8844] syz.0.842 (8844): /proc/8833/oom_adj is deprecated, please use /proc/8833/oom_score_adj instead. [ 291.212508][ T7080] dvb-usb: bulk message failed: -22 (3/0) [ 291.218353][ T7080] dw2102: command 0x0e transfer failed. [ 291.245423][ T7080] dvb-usb: bulk message failed: -22 (1/0) [ 291.278688][ T7080] dw2102: command 0x51 transfer failed. [ 291.438414][ T7080] dvb-usb: bulk message failed: -22 (5/0) [ 291.482371][ T7080] dw2102: i2c probe for address 0x68 failed. [ 291.499533][ T7080] dvb-usb: bulk message failed: -22 (5/0) Stopping network: [ 291.523155][ T7080] dw2102: i2c probe for address 0x69 failed. [ 291.610297][ T7080] dvb-usb: bulk message failed: -22 (5/0) [ 291.632074][ T7080] dw2102: i2c probe for address 0x6a failed. [ 291.642275][ T7080] dw2102: probing for demodulator failed. Is the external power switched on? [ 291.992875][ T7080] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 292.547811][ T7080] rc_core: IR keymap rc-tt-1500 not found [ 292.589572][ T7080] Registered IR keymap rc-empty [ 292.626711][ T7080] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 292.724356][ T7080] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input31 [ 292.766105][ T8853] syzkaller0: entered promiscuous mode [ 292.805977][ T7080] dvb-usb: schedule remote query interval to 250 msecs. [ 292.824092][ T8853] syzkaller0: entered allmulticast mode [ 292.835119][ T7080] dw2102: su3000_power_ctrl: 0, initialized 1 [ 292.841262][ T7080] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 292.924157][ T7080] usb 3-1: USB disconnect, device number 24 [ 293.233537][ T7080] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 294.612041][ T10] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 294.764137][ T10] usb 1-1: config 0 has an invalid interface number: 82 but max is 0 [ 294.772590][ T10] usb 1-1: config 0 has no interface number 0 [ 294.829290][ T10] usb 1-1: config 0 interface 82 has no altsetting 0 [ 294.870074][ T10] usb 1-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=b6.28 [ 294.879540][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.993089][ T10] usb 1-1: Product: syz [ 295.002088][ T10] usb 1-1: Manufacturer: syz [ 295.013644][ T10] usb 1-1: SerialNumber: syz [ 295.029342][ T10] usb 1-1: config 0 descriptor?? [ 295.437528][ T10] kaweth 1-1:0.82: Firmware present in device. [ 295.621607][ T10] kaweth 1-1:0.82: Statistics collection: 0 [ 295.627724][ T10] kaweth 1-1:0.82: Multicast filter limit: 0 [ 295.649895][ T10] kaweth 1-1:0.82: MTU: 0 [ 295.670937][ T10] kaweth 1-1:0.82: Read MAC address 00:00:00:00:00:00 [ 296.315933][ T8899] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.854'. [ 296.327223][ T8899] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 296.893180][ T7090] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 297.071955][ T7090] usb 3-1: Using ep0 maxpacket: 8 [ 297.082911][ T7090] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 297.094303][ T7090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.105447][ T7090] usb 3-1: Product: syz [ 297.109713][ T7090] usb 3-1: Manufacturer: syz [ 297.115251][ T7090] usb 3-1: SerialNumber: syz [ 297.124904][ T7090] usb 3-1: config 0 descriptor?? [ 297.187936][ T8893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.853'. [ 297.267178][ T10] kaweth 1-1:0.82: Error setting receive filter [ 297.274571][ T10] kaweth 1-1:0.82: probe with driver kaweth failed with error -5 [ 297.401597][ T10] usb 1-1: USB disconnect, device number 31 [ 297.414572][ T7090] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 297.935699][ T8914] sctp: [Deprecated]: syz.1.859 (pid 8914) Use of int in max_burst socket option deprecated. [ 297.935699][ T8914] Use struct sctp_assoc_value instead OK Stopping iptables: [ 298.445461][ T7090] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 OK [ 298.621259][ T7090] usb 3-1: USB disconnect, device number 25 Stopping system message bus: done [ 300.003897][ T8967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.870'. [ 300.034257][ T8967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.870'. [ 300.562104][ T7076] IPVS: starting estimator thread 0... [ 300.772056][ T8979] IPVS: using max 47 ests per chain, 112800 per kthread [ 301.306384][ T5902] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 301.452195][ T7076] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 301.472743][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 301.508780][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.537766][ T5902] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 301.586548][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.623377][ T7076] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 301.660516][ T7076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.700323][ T5902] usb 2-1: config 0 descriptor?? [ 301.732906][ T5902] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 301.773167][ T7076] usb 3-1: config 0 descriptor?? [ 301.809779][ T7076] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 301.925531][ T7076] dvb-usb: bulk message failed: -22 (3/0) [ 302.032503][ T7076] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 302.090693][ T7076] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 302.180570][ T7076] usb 3-1: media controller created [ 302.216210][ T7076] dvb-usb: bulk message failed: -22 (5/0) [ 302.231930][ T7076] dvb-usb: MAC address reading failed. [ 302.285914][ T7076] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.378895][ T7076] dvb-usb: bulk message failed: -22 (6/0) [ 302.428647][ T9002] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 302.450794][ T7076] dvb-usb: bulk message failed: -22 (6/0) [ 302.518198][ T7076] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 302.590246][ T7076] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 302.601975][ T5902] gspca_vc032x: reg_r err -32 [ 302.606803][ T5902] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 302.612462][ T7076] dvb-usb: schedule remote query interval to 100 msecs. [ 302.626269][ T7076] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 302.671909][ T7076] usb 3-1: USB disconnect, device number 26 [ 303.263083][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.308335][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.699421][ T7076] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 303.935520][ T7090] usb 2-1: USB disconnect, device number 32 Stopping klogd: [ 304.146400][ T9031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.892'. [ 304.190884][ T9037] xt_connbytes: Forcing CT accounting to be enabled [ 304.411978][ T7076] usb 1-1: new full-speed USB device number 32 using dummy_hcd OK [ 304.594168][ T7076] usb 1-1: unable to get BOS descriptor or descriptor too short Stopping acpid: [ 304.622219][ T7076] usb 1-1: not running at top speed; connect to a high speed hub [ 304.654400][ T7076] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.689300][ T7076] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 304.752004][ T7076] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 304.875904][ T7076] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.895439][ T7076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.901909][ T9063] FAULT_INJECTION: forcing a failure. [ 304.901909][ T9063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.910617][ T7076] usb 1-1: Product: syz [ 304.921555][ T7076] usb 1-1: Manufacturer: syz [ 304.928930][ T7076] usb 1-1: SerialNumber: syz [ 304.997090][ T9063] CPU: 0 UID: 0 PID: 9063 Comm: syz.1.901 Not tainted syzkaller #0 PREEMPT(full) [ 304.997122][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 304.997134][ T9063] Call Trace: [ 304.997143][ T9063] [ 304.997151][ T9063] dump_stack_lvl+0x189/0x250 [ 304.997178][ T9063] ? __pfx____ratelimit+0x10/0x10 [ 304.997210][ T9063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.997231][ T9063] ? __pfx__printk+0x10/0x10 [ 304.997253][ T9063] ? __might_fault+0xb0/0x130 [ 304.997288][ T9063] should_fail_ex+0x414/0x560 [ 304.997318][ T9063] ? __pfx_do_get_feature_msr+0x10/0x10 [ 304.997348][ T9063] _copy_from_user+0x2d/0xb0 [ 304.997376][ T9063] msr_io+0xa2/0x570 [ 304.997400][ T9063] ? kasan_quarantine_put+0xdd/0x220 [ 304.997422][ T9063] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.997448][ T9063] ? __pfx_msr_io+0x10/0x10 [ 304.997473][ T9063] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 304.997504][ T9063] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 304.997538][ T9063] kvm_arch_dev_ioctl+0x210/0x8f0 [ 304.997566][ T9063] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 304.997592][ T9063] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 304.997628][ T9063] ? __lock_acquire+0xab9/0xd20 [ 304.997679][ T9063] kvm_dev_ioctl+0x597/0x1570 [ 304.997703][ T9063] ? __fget_files+0x2a/0x420 [ 304.997731][ T9063] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 304.997749][ T9063] ? __fget_files+0x2a/0x420 [ 304.997777][ T9063] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 304.997810][ T9063] __ia32_compat_sys_ioctl+0x543/0x840 [ 304.997834][ T9063] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 304.997855][ T9063] ? __fget_files+0x3a0/0x420 [ 304.997926][ T9063] ? fput+0xa0/0xd0 [ 304.997962][ T9063] ? ksys_write+0x22a/0x250 [ 304.997981][ T9063] ? exc_page_fault+0x82/0x100 [ 304.998001][ T9063] ? __pfx_ksys_write+0x10/0x10 [ 304.998025][ T9063] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 304.998048][ T9063] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.998079][ T9063] __do_fast_syscall_32+0xb6/0x2b0 [ 304.998101][ T9063] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.998138][ T9063] do_fast_syscall_32+0x34/0x80 [ 304.998159][ T9063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.998192][ T9063] RIP: 0023:0xf706d539 [ 304.998210][ T9063] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 304.998228][ T9063] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 304.998251][ T9063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008ae88 [ 304.998265][ T9063] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.998277][ T9063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.998289][ T9063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 304.998300][ T9063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.998348][ T9063] [ 304.999894][ T9066] misc userio: No port type given on /dev/userio [ 305.384933][ T9068] batadv0: entered promiscuous mode [ 305.407602][ T9068] macsec1: entered promiscuous mode [ 305.412672][ T9067] netlink: 128 bytes leftover after parsing attributes in process `syz.3.900'. [ 305.431342][ T9067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.900'. [ 305.432266][ T9068] batadv0: left promiscuous mode [ 305.582926][ T5902] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 305.753820][ T5902] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.764685][ T5902] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.775535][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.784705][ T5902] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.804679][ T5902] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.814464][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.822815][ T5902] usb 2-1: Product: syz [ 305.827644][ T5902] usb 2-1: Manufacturer: syz [ 305.858737][ T5902] cdc_wdm 2-1:1.0: skipping garbage [ 305.865053][ T5902] cdc_wdm 2-1:1.0: skipping garbage [ 305.880375][ T5902] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 305.953625][ T30] audit: type=1326 audit(1760534962.989:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.3.906" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x0 [ 306.065102][ T30] audit: type=1326 audit(1760534963.099:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 306.088600][ T30] audit: type=1326 audit(1760534963.099:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 306.142747][ T30] audit: type=1326 audit(1760534963.099:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 306.171788][ T30] audit: type=1326 audit(1760534963.099:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 OK [ 306.224355][ T9072] netlink: 'syz.1.904': attribute type 4 has an invalid length. [ 306.254576][ T30] audit: type=1326 audit(1760534963.099:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 306.393583][ T9084] fuse: Bad value for 'fd' [ 306.426398][ T30] audit: type=1326 audit(1760534963.099:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 306.509583][ T9082] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 306.575873][ T30] audit: type=1326 audit(1760534963.099:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 Stopping syslogd: [ 306.637864][ T30] audit: type=1326 audit(1760534963.119:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 306.690613][ T30] audit: type=1326 audit(1760534963.119:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.3.906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 306.716998][ T10] usb 2-1: USB disconnect, device number 33 stopped /sbin/syslogd (pid 5183) OK [ 307.195485][ T7076] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 307.253337][ T7076] usb 1-1: USB disconnect, device number 32 [ 307.787662][ T9122] Cannot find add_set index 2 as target umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 308.192213][ T7076] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 308.545047][ T7076] usb 3-1: Using ep0 maxpacket: 8 [ 308.589344][ T7076] usb 3-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 308.610848][ T7076] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64 [ 308.686864][ T7076] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 308.765790][ T7076] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 308.779252][ T7076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.797612][ T7076] usb 3-1: Product: syz [ 308.802663][ T7076] usb 3-1: Manufacturer: syz [ 308.807308][ T7076] usb 3-1: SerialNumber: syz [ 308.835198][ T7076] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 308.902022][ T7115] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 308.913448][ T7076] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 308.981246][ T7076] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 309.031751][ T7115] usb 2-1: device descriptor read/64, error -71 [ 309.223452][ T9139] netlink: 'syz.0.922': attribute type 12 has an invalid length. [ 309.232205][ T9139] netlink: 'syz.0.922': attribute type 29 has an invalid length. [ 309.240214][ T9139] netlink: 148 bytes leftover after parsing attributes in process `syz.0.922'. [ 309.250989][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 309.301988][ T7115] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 309.451858][ T7115] usb 2-1: device descriptor read/64, error -71 [ 309.572454][ T7115] usb usb2-port1: attempt power cycle [ 309.893489][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 309.962391][ T7115] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 309.982436][ T7115] usb 2-1: device descriptor read/8, error -71 [ 310.113200][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 310.121841][ T10] usb 1-1: config 0 has no interfaces? [ 310.132624][ T10] usb 1-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=2e.0f [ 310.142445][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.151034][ T10] usb 1-1: Product: syz [ 310.155632][ T10] usb 1-1: Manufacturer: syz [ 310.160505][ T10] usb 1-1: SerialNumber: syz [ 310.169478][ T10] usb 1-1: config 0 descriptor?? [ 310.231978][ T7115] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 310.301399][ T10] usb 3-1: USB disconnect, device number 27 [ 310.329221][ T7115] usb 2-1: device descriptor read/8, error -71 [ 310.509584][ T7115] usb usb2-port1: unable to enumerate USB device [ 310.814657][ T9157] netlink: 'syz.3.927': attribute type 4 has an invalid length. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 310.878207][ T5201] udevd[5201]: could not touch /run/udev/queue: Read-only file system [ 310.888304][ T10] usb 1-1: USB disconnect, device number 33 Sent SIGTERM to all processes Connection to 10.128.0.194 closed by remote host. [ 311.958863][ T5854] bridge0: port 3(syz_tun) entered disabled state [ 311.980113][ T5854] syz_tun (unregistering): left allmulticast mode [ 311.987063][ T5854] syz_tun (unregistering): left promiscuous mode [ 311.994368][ T5854] bridge0: port 3(syz_tun) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 312.608720][ T3572] bridge_slave_1: left allmulticast mode [ 312.616631][ T3572] bridge_slave_1: left promiscuous mode [ 312.623950][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.634756][ T3572] bridge_slave_0: left allmulticast mode [ 312.640507][ T3572] bridge_slave_0: left promiscuous mode [ 312.646747][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.836697][ T3572] bridge0 (unregistering): left promiscuous mode [ 313.039073][ T3572] bond0 (unregistering): left promiscuous mode [ 313.045729][ T3572] bond_slave_0: left promiscuous mode [ 313.051311][ T3572] bond_slave_1: left promiscuous mode [ 313.072324][ T3572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.083816][ T3572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.093518][ T3572] bond0 (unregistering): Released all slaves [ 313.318647][ T9158] smc: removing smcd device lo [ 313.349769][ T7089] dvb-usb: did not find the firmware file 'dvb-usb-adstech-usb2-02.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 313.371695][ T7089] dvb_usb_dibusb_mb 5-1:0.190: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 313.387494][ T7089] dvb-usb: found a 'KWorld Xpert DVB-T USB2.0' in cold state, will try to load a firmware [ 313.398974][ T7089] usb 5-1: Direct firmware load for dvb-usb-adstech-usb2-02.fw failed with error -2 [ 313.409049][ T7089] usb 5-1: Falling back to sysfs fallback for: dvb-usb-adstech-usb2-02.fw [ 313.418025][ T7089] ------------[ cut here ]------------ [ 313.423684][ T7089] WARNING: CPU: 0 PID: 7089 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x746/0x9b0 [ 313.435715][ T7089] Modules linked in: [ 313.439898][ T7089] CPU: 0 UID: 0 PID: 7089 Comm: kworker/0:14 Not tainted syzkaller #0 PREEMPT(full) [ 313.449678][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.459965][ T7089] Workqueue: usb_hub_wq hub_event [ 313.465401][ T7089] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 313.471686][ T7089] Code: ec fb e9 5d fc ff ff e8 d8 b2 ec fb c6 05 c3 99 b4 09 01 48 c7 c7 e0 5c e8 8b e8 b5 ff 53 fb e9 85 fc ff ff e8 bb b2 ec fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 c0 5d e8 8b 4c 89 e2 e8 45 ad 58 fb e9 [ 313.491622][ T7089] RSP: 0018:ffffc90003366870 EFLAGS: 00010287 [ 313.497834][ T7089] RAX: ffffffff85d39135 RBX: dffffc0000000000 RCX: 0000000000100000 [ 313.506674][ T7089] RDX: ffffc90018784000 RSI: 00000000000af904 RDI: 00000000000af905 [ 313.514832][ T7089] RBP: 0000000000000001 R08: ffffffff8f9e1177 R09: 1ffffffff1f3c22e [ 313.523401][ T7089] R10: dffffc0000000000 R11: fffffbfff1f3c22f R12: ffffffff8c316820 [ 313.531420][ T7089] R13: 0000000000001770 R14: ffff8880248eb0b0 R15: 00000000fffffff5 [ 313.539612][ T7089] FS: 0000000000000000(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 313.548655][ T7089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.555393][ T7089] CR2: 00007f41feff84c0 CR3: 0000000033156000 CR4: 00000000003526f0 [ 313.563750][ T7089] DR0: 000000000000000f DR1: 0000000000000000 DR2: 0000000000000000 [ 313.571888][ T7089] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 313.580007][ T7089] Call Trace: [ 313.583381][ T7089] [ 313.586368][ T7089] ? kmem_cache_free+0x19b/0x690 [ 313.600537][ T7089] ? _request_firmware+0x6be/0x15b0 [ 313.606807][ T7089] _request_firmware+0xf83/0x15b0 [ 313.611879][ T7089] ? preempt_schedule_thunk+0x16/0x30 [ 313.617389][ T7089] ? __pfx__request_firmware+0x10/0x10 [ 313.622929][ T7089] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 313.630200][ T7089] request_firmware+0x36/0x50 [ 313.635588][ T7089] dvb_usb_download_firmware+0xaf/0x260 [ 313.641155][ T7089] ? __pfx__printk+0x10/0x10 [ 313.645802][ T7089] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 313.652106][ T7089] ? dvb_usb_device_init+0x14c/0x2580 [ 313.657538][ T7089] dvb_usb_device_init+0xdd2/0x2580 [ 313.662991][ T7089] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 313.668975][ T7089] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.674500][ T7089] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 313.680426][ T7089] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 313.686933][ T7089] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 313.692655][ T7089] ? __update_runtime_status+0x1b3/0x390 [ 313.698434][ T7089] ? __pm_runtime_set_status+0x785/0xa50 [ 313.704341][ T7089] dibusb_probe+0x89/0xf0 [ 313.708772][ T7089] usb_probe_interface+0x668/0xc30 [ 313.713950][ T7089] ? __pfx_usb_probe_interface+0x10/0x10 [ 313.719705][ T7089] really_probe+0x26d/0x9e0 [ 313.724296][ T7089] __driver_probe_device+0x18c/0x2f0 [ 313.729609][ T7089] driver_probe_device+0x4f/0x430 [ 313.734759][ T7089] __device_attach_driver+0x2ce/0x530 [ 313.740469][ T7089] bus_for_each_drv+0x251/0x2e0 [ 313.745587][ T7089] ? __pfx___device_attach_driver+0x10/0x10 [ 313.751507][ T7089] ? __pfx_bus_for_each_drv+0x10/0x10 [ 313.756925][ T7089] __device_attach+0x2b8/0x400 [ 313.761756][ T7089] ? __pfx___device_attach+0x10/0x10 [ 313.767081][ T7089] ? do_raw_spin_unlock+0x122/0x240 [ 313.772339][ T7089] bus_probe_device+0x185/0x260 [ 313.777200][ T7089] device_add+0x7b6/0xb50 [ 313.781773][ T7089] usb_set_configuration+0x1a87/0x20e0 [ 313.787286][ T7089] usb_generic_driver_probe+0x8d/0x150 [ 313.793251][ T7089] usb_probe_device+0x1c4/0x390 [ 313.798133][ T7089] ? __pfx_usb_probe_device+0x10/0x10 [ 313.803690][ T7089] really_probe+0x26d/0x9e0 [ 313.808336][ T7089] __driver_probe_device+0x18c/0x2f0 [ 313.813769][ T7089] driver_probe_device+0x4f/0x430 [ 313.818905][ T7089] __device_attach_driver+0x2ce/0x530 [ 313.824328][ T7089] bus_for_each_drv+0x251/0x2e0 [ 313.829457][ T7089] ? __pfx___device_attach_driver+0x10/0x10 [ 313.835427][ T7089] ? __pfx_bus_for_each_drv+0x10/0x10 [ 313.840923][ T7089] __device_attach+0x2b8/0x400 [ 313.845779][ T7089] ? __pfx___device_attach+0x10/0x10 [ 313.851335][ T7089] ? do_raw_spin_unlock+0x122/0x240 [ 313.856705][ T7089] bus_probe_device+0x185/0x260 [ 313.861731][ T7089] device_add+0x7b6/0xb50 [ 313.866155][ T7089] usb_new_device+0xa39/0x16f0 [ 313.871073][ T7089] ? __pfx_usb_new_device+0x10/0x10 [ 313.876458][ T7089] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.881946][ T7089] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.887229][ T7089] hub_event+0x2958/0x4a20 [ 313.891740][ T7089] ? __pfx_hub_event+0x10/0x10 [ 313.896697][ T7089] ? process_scheduled_works+0x9ef/0x17b0 [ 313.902473][ T7089] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.907679][ T7089] ? process_scheduled_works+0x9ef/0x17b0 [ 313.913422][ T7089] ? process_scheduled_works+0x9ef/0x17b0 [ 313.919321][ T7089] process_scheduled_works+0xae1/0x17b0 [ 313.924946][ T7089] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.931127][ T7089] worker_thread+0x8a0/0xda0 [ 313.935947][ T7089] kthread+0x711/0x8a0 [ 313.940042][ T7089] ? __pfx_worker_thread+0x10/0x10 [ 313.945395][ T7089] ? __pfx_kthread+0x10/0x10 [ 313.950100][ T7089] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.955341][ T7089] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.960585][ T7089] ? __pfx_kthread+0x10/0x10 [ 313.965349][ T7089] ret_from_fork+0x4bc/0x870 [ 313.969952][ T7089] ? __pfx_ret_from_fork+0x10/0x10 [ 313.975218][ T7089] ? __switch_to_asm+0x39/0x70 [ 313.980119][ T7089] ? __switch_to_asm+0x33/0x70 [ 313.984978][ T7089] ? __pfx_kthread+0x10/0x10 [ 313.989677][ T7089] ret_from_fork_asm+0x1a/0x30 [ 313.994492][ T7089] [ 313.997510][ T7089] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 314.004886][ T7089] CPU: 0 UID: 0 PID: 7089 Comm: kworker/0:14 Not tainted syzkaller #0 PREEMPT(full) [ 314.014714][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 314.024972][ T7089] Workqueue: usb_hub_wq hub_event [ 314.030252][ T7089] Call Trace: [ 314.034228][ T7089] [ 314.037789][ T7089] dump_stack_lvl+0x99/0x250 [ 314.042470][ T7089] ? __asan_memcpy+0x40/0x70 [ 314.047079][ T7089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.052303][ T7089] ? __pfx__printk+0x10/0x10 [ 314.056908][ T7089] vpanic+0x237/0x6d0 [ 314.060980][ T7089] ? __pfx_vpanic+0x10/0x10 [ 314.065615][ T7089] panic+0xb9/0xc0 [ 314.069358][ T7089] ? __pfx_panic+0x10/0x10 [ 314.073803][ T7089] __warn+0x31b/0x4b0 [ 314.077813][ T7089] ? firmware_fallback_sysfs+0x746/0x9b0 [ 314.083546][ T7089] ? firmware_fallback_sysfs+0x746/0x9b0 [ 314.089399][ T7089] report_bug+0x2be/0x4f0 [ 314.093844][ T7089] ? firmware_fallback_sysfs+0x746/0x9b0 [ 314.099503][ T7089] ? firmware_fallback_sysfs+0x746/0x9b0 [ 314.105283][ T7089] ? firmware_fallback_sysfs+0x748/0x9b0 [ 314.111135][ T7089] handle_bug+0x84/0x160 [ 314.115433][ T7089] exc_invalid_op+0x1a/0x50 [ 314.120155][ T7089] asm_exc_invalid_op+0x1a/0x20 [ 314.125301][ T7089] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 314.131741][ T7089] Code: ec fb e9 5d fc ff ff e8 d8 b2 ec fb c6 05 c3 99 b4 09 01 48 c7 c7 e0 5c e8 8b e8 b5 ff 53 fb e9 85 fc ff ff e8 bb b2 ec fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 c0 5d e8 8b 4c 89 e2 e8 45 ad 58 fb e9 [ 314.151484][ T7089] RSP: 0018:ffffc90003366870 EFLAGS: 00010287 [ 314.157721][ T7089] RAX: ffffffff85d39135 RBX: dffffc0000000000 RCX: 0000000000100000 [ 314.165791][ T7089] RDX: ffffc90018784000 RSI: 00000000000af904 RDI: 00000000000af905 [ 314.173772][ T7089] RBP: 0000000000000001 R08: ffffffff8f9e1177 R09: 1ffffffff1f3c22e [ 314.181756][ T7089] R10: dffffc0000000000 R11: fffffbfff1f3c22f R12: ffffffff8c316820 [ 314.190290][ T7089] R13: 0000000000001770 R14: ffff8880248eb0b0 R15: 00000000fffffff5 [ 314.198370][ T7089] ? firmware_fallback_sysfs+0x745/0x9b0 [ 314.204126][ T7089] ? kmem_cache_free+0x19b/0x690 [ 314.209071][ T7089] ? _request_firmware+0x6be/0x15b0 [ 314.214338][ T7089] _request_firmware+0xf83/0x15b0 [ 314.219563][ T7089] ? preempt_schedule_thunk+0x16/0x30 [ 314.225125][ T7089] ? __pfx__request_firmware+0x10/0x10 [ 314.230623][ T7089] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 314.236489][ T7089] request_firmware+0x36/0x50 [ 314.242420][ T7089] dvb_usb_download_firmware+0xaf/0x260 [ 314.248516][ T7089] ? __pfx__printk+0x10/0x10 [ 314.253211][ T7089] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 314.259377][ T7089] ? dvb_usb_device_init+0x14c/0x2580 [ 314.264770][ T7089] dvb_usb_device_init+0xdd2/0x2580 [ 314.270279][ T7089] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 314.276190][ T7089] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.281423][ T7089] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 314.287331][ T7089] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.293780][ T7089] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 314.299540][ T7089] ? __update_runtime_status+0x1b3/0x390 [ 314.305244][ T7089] ? __pm_runtime_set_status+0x785/0xa50 [ 314.310990][ T7089] dibusb_probe+0x89/0xf0 [ 314.315426][ T7089] usb_probe_interface+0x668/0xc30 [ 314.320643][ T7089] ? __pfx_usb_probe_interface+0x10/0x10 [ 314.326291][ T7089] really_probe+0x26d/0x9e0 [ 314.330824][ T7089] __driver_probe_device+0x18c/0x2f0 [ 314.336265][ T7089] driver_probe_device+0x4f/0x430 [ 314.341330][ T7089] __device_attach_driver+0x2ce/0x530 [ 314.346729][ T7089] bus_for_each_drv+0x251/0x2e0 [ 314.351869][ T7089] ? __pfx___device_attach_driver+0x10/0x10 [ 314.357831][ T7089] ? __pfx_bus_for_each_drv+0x10/0x10 [ 314.363266][ T7089] __device_attach+0x2b8/0x400 [ 314.368278][ T7089] ? __pfx___device_attach+0x10/0x10 [ 314.373607][ T7089] ? do_raw_spin_unlock+0x122/0x240 [ 314.379277][ T7089] bus_probe_device+0x185/0x260 [ 314.386750][ T7089] device_add+0x7b6/0xb50 [ 314.391382][ T7089] usb_set_configuration+0x1a87/0x20e0 [ 314.397231][ T7089] usb_generic_driver_probe+0x8d/0x150 [ 314.403276][ T7089] usb_probe_device+0x1c4/0x390 [ 314.408740][ T7089] ? __pfx_usb_probe_device+0x10/0x10 [ 314.414242][ T7089] really_probe+0x26d/0x9e0 [ 314.418860][ T7089] __driver_probe_device+0x18c/0x2f0 [ 314.424360][ T7089] driver_probe_device+0x4f/0x430 [ 314.429555][ T7089] __device_attach_driver+0x2ce/0x530 [ 314.435037][ T7089] bus_for_each_drv+0x251/0x2e0 [ 314.440089][ T7089] ? __pfx___device_attach_driver+0x10/0x10 [ 314.446180][ T7089] ? __pfx_bus_for_each_drv+0x10/0x10 [ 314.452016][ T7089] __device_attach+0x2b8/0x400 [ 314.456814][ T7089] ? __pfx___device_attach+0x10/0x10 [ 314.462126][ T7089] ? do_raw_spin_unlock+0x122/0x240 [ 314.467426][ T7089] bus_probe_device+0x185/0x260 [ 314.472728][ T7089] device_add+0x7b6/0xb50 [ 314.477181][ T7089] usb_new_device+0xa39/0x16f0 [ 314.482611][ T7089] ? __pfx_usb_new_device+0x10/0x10 [ 314.488153][ T7089] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.493755][ T7089] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.499435][ T7089] hub_event+0x2958/0x4a20 [ 314.504104][ T7089] ? __pfx_hub_event+0x10/0x10 [ 314.508983][ T7089] ? process_scheduled_works+0x9ef/0x17b0 [ 314.514975][ T7089] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.520299][ T7089] ? process_scheduled_works+0x9ef/0x17b0 [ 314.526045][ T7089] ? process_scheduled_works+0x9ef/0x17b0 [ 314.531795][ T7089] process_scheduled_works+0xae1/0x17b0 [ 314.537420][ T7089] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.543490][ T7089] worker_thread+0x8a0/0xda0 [ 314.548306][ T7089] kthread+0x711/0x8a0 [ 314.552721][ T7089] ? __pfx_worker_thread+0x10/0x10 [ 314.558050][ T7089] ? __pfx_kthread+0x10/0x10 [ 314.562686][ T7089] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.568103][ T7089] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.573341][ T7089] ? __pfx_kthread+0x10/0x10 [ 314.578142][ T7089] ret_from_fork+0x4bc/0x870 [ 314.582851][ T7089] ? __pfx_ret_from_fork+0x10/0x10 [ 314.588618][ T7089] ? __switch_to_asm+0x39/0x70 [ 314.593547][ T7089] ? __switch_to_asm+0x33/0x70 [ 314.598525][ T7089] ? __pfx_kthread+0x10/0x10 [ 314.603268][ T7089] ret_from_fork_asm+0x1a/0x30 [ 314.608097][ T7089] [ 314.611762][ T7089] Kernel Offset: disabled [ 314.616103][ T7089] Rebooting in 86400 seconds..