last executing test programs: 15m42.310830458s ago: executing program 1 (id=1315): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0xffffffffffffffed, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000408c0d030140000102030109026e0003017f0006090b0002012030230904000000010130000a2401100a0009000000090400fff7010230000904010101010230000905010960002523050a2525010400000500000904020000010230000904020101010230000905820900027409c00a2525ffffff7f01e10b"], 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000380), 0x185301, 0x0) syz_open_procfs(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0xa7c, r0}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='mtd0\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/fillfile\x00', 0x42, 0x9f) write(r1, 0x0, 0x0) 15m40.155367466s ago: executing program 1 (id=1321): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x2) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) 15m38.314449004s ago: executing program 1 (id=1328): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, &(0x7f0000000080)=""/160, 0xa0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380"], 0x38}}, 0x80) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xffe, 0xdddd1000, 0xa, 0x8, 0x5, 0x5, 0x8, 0x6, 0xc6, 0xbd, 0xf3, 0x3}, {0xffe, 0xfec06000, 0x0, 0x9, 0x1, 0x3, 0x1, 0x19, 0x9, 0x6, 0x4, 0xa5}, {0x0, 0x80a0000, 0x9, 0x7, 0x80, 0x7f, 0x5, 0xfb, 0x6, 0xcf, 0x81, 0x6}, {0xc000, 0x100000, 0xe, 0x1, 0x8, 0x6, 0x9, 0x6, 0x8, 0x3, 0x0, 0xb}, {0x2, 0xf000, 0x51f99739fc04c8a2, 0x0, 0xc9, 0x7f, 0x4, 0xd8, 0xf9, 0x5, 0xd, 0x5}, {0xc000, 0xa000, 0x0, 0x6, 0x8, 0x6, 0x8, 0x9, 0xa, 0x5, 0x5, 0x4}, {0xdddd0000, 0xe000, 0x4, 0x3, 0xb9, 0x5, 0x87, 0x1, 0x2, 0xe, 0x4, 0x2}, {0x10000, 0xffffffff, 0x8, 0xe, 0x9, 0x1, 0x3f, 0xe5, 0x1b, 0x4, 0x6, 0x1}, {0x8080000, 0xff20}, {0x3ff8, 0x200}, 0x40008, 0x0, 0x5000, 0x124040, 0x9, 0x4000, 0x3001, [0x100000000, 0x9, 0x9, 0xffffffffffffff46]}) 15m36.623029033s ago: executing program 1 (id=1333): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002d40)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020) r1 = openat(r0, &(0x7f0000004dc0)='./trace/events/sched/sched_switch/trigger/file0\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x268, 0x33a, 0x160, 0x268, 0x2a0, 0x460, 0x460, 0x2a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0xf8, 0x160, 0xd8000000, {0x9402}, [@common=@inet=@ecn={{0x28}, {0x10, 0x38, 0x8, 0xfc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xa, 0x5, 0xd2, 0x1ff, 'snmp_trap\x00', 'syz0\x00', {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x2, 0x0, 0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x800000, 0x0, 'snmp\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000004f40)) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000100)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000500)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000540)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000004e00)='.\x00', &(0x7f0000004e40)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002740)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffff44, 0x1, {0x0, 0xb, 0x3}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000004e80)='\x00', 0x89901) move_mount(r7, &(0x7f0000004ec0)='.\x00', 0xffffffffffffff9c, &(0x7f0000004f00)='./file0\x00', 0x262) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002d00)={0x24, 0x2a, 0x603, 0x0, 0x0, "", [@nested={0x14, 0x159, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0xb4}]}]}, 0x24}], 0x1}, 0x14008010) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000600)=0x201, 0x4) sendmsg$nl_route(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000004a00030000000000000000000a"], 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f00000002c0)={0x32, 0x17, 0x1, {0x29, './trace/events/sched/sched_switch/trigger'}}, 0x32) recvfrom$phonet(r3, 0x0, 0xffffffffffffff70, 0x40000142, &(0x7f00000003c0)={0x23, 0x9, 0xce, 0xe5}, 0x10) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000002840)) 15m36.32458485s ago: executing program 1 (id=1335): r0 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) close(0xffffffffffffffff) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a00)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f000001aa00)=0x7) r4 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f000001aac0)={{0x5, 0x0, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x6, 0x40, 0x3e, 0x0, 0x1, 0x4800000, 'syz1\x00', &(0x7f000001ac00)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3\xc2E{=8\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xdaV\xe3\xb0'], 0xbe}) 15m34.920680195s ago: executing program 1 (id=1339): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f00000006c0)="6a69c274386d178550cb864bd5", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) io_setup(0xde1, &(0x7f0000002500)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000900)={'#! ', './file0', [], 0xa, "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"}, 0x1de) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c000180"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x6, 0x0, 0x7d, @private1, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8000, 0x8, 0x8001, 0x10}}) 15m33.320091986s ago: executing program 32 (id=1339): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f00000006c0)="6a69c274386d178550cb864bd5", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) io_setup(0xde1, &(0x7f0000002500)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000900)={'#! ', './file0', [], 0xa, "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"}, 0x1de) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c000180"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x6, 0x0, 0x7d, @private1, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8000, 0x8, 0x8001, 0x10}}) 12m20.914356616s ago: executing program 5 (id=1939): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040efd", @ANYRES64], 0x100) 12m17.92687445s ago: executing program 5 (id=1947): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80140, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./dev/sda\x00', 0x2, 0x0) r3 = add_key(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000b40)='asymmetric\x00', 0x0, &(0x7f0000000b80)="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", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001100)={r4, 0x1c}, 0x0, &(0x7f0000001140)="0100", 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000580)}, {&(0x7f00000005c0)="ccdaa7ec5140e38d939dd21fb945efeed20f2c0077850fe6396be420613bf8e449f47b3d8c5db4db1c33b9cf7efaa0533b6431fb0298a9b74488f5c1525df22ce6443b94d9bc3443cafacfe53f1852c04c4308178633a980d4163816ce9163e0b5e02f49f790007e4caa0ce0414ff2d5", 0x70}, {&(0x7f0000000640)="724b70e0c83cf46675f0e4d1a4bcabced2727c98523d86d4807df8118ae0a20379053d33be61ffe6ec3683f5f09e374bf21b97ba19c9ba740eee", 0x3a}, {&(0x7f0000000740)="18614aabaa9b3467f43f6f300cd22a8724f66e7d03ee9907fec63400d8879c9ecc2862e6b0bed607838fcc5ee057f89a737c25a4cccd3562dd9aa67775866b4e2d54fe4957d6cc8a58df3c37f2bc3ae514ceeb43d7043116d7d4b12e8f18aa2b8d70ab2189a98dcfdbd084112a1ed344c4c8ad1e7b615859f4dfa9b578d2c8f89c315319b8ab63046006061487bffb1a", 0x90}, {&(0x7f0000000800)="ea9dfea8388aa122046dbf8cd4c170dc143efae6e9cb4fda4f88bfcb8b584f5cfd8d35f5a8508d5f2a4bebce64c3e2ff8f4f6b959bae228085df998818f21f207e2124afa51a66", 0x47}, {&(0x7f0000000880)}], 0x6, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r4], 0x10}, 0x48001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000940)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f00000009c0)) fcntl$setlease(r0, 0x400, 0x1) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000a00)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) 12m16.106774685s ago: executing program 5 (id=1949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in=@remote, 0xee24, 0x0, 0x10, 0x3, 0x2}, {0xff, 0x200000004, 0x40000000007, 0xfffffffc, 0x100000000, 0x4, 0x57, 0x9}, {0x2, 0x0, 0x0, 0x7}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x34fe, 0x4, 0x8, 0x0, 0x8000, 0xef, 0x10000}}, 0xe8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x1d, 0x0, 0x0, 0xfffff022}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3ae4d2000000000000000000a10b66a6e50b7a548d318f88c8c7fc7497eeb90ef1a946e42932c5ea0614cf5c5ae3a01185cec13033c0746ab81203b34fe47e20eff1b6f4ccfc23842ea3bfefc6a490f4950eb84d7fcb79cb3ff9dd1b640123318914762f10306849aeae676d1f71b3860e5d3eca344fdc6b8e96e1db05a8b30157d83a1c9b4f08182a7e50154b104b0a4a238b7f9d5bdd600b2557ca7f7f3b430960bc9a23d728397442b1ff6ffc423c2b462ff9e9cbdf912a318e5badd5741b03d5b43a4a89f5cacd3b81248aab7d6054187a5423fc130cb1c85a59b66e84bcfac2274f52c3e944668c77ce44410000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x0) r4 = socket(0x1e, 0x1, 0x0) listen(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$netlink(0x10, 0x3, 0xb) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000006c0)={0x77359400}, 0x10) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/175, 0xaf}], 0x1}, 0x40002000) write(r0, &(0x7f0000000200)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 12m14.908727986s ago: executing program 5 (id=1954): socketpair(0x28, 0x20000000000001, 0x0, &(0x7f0000000000)) symlinkat(&(0x7f00000006c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x60) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) quotactl$Q_GETINFO(0x614e803043f84146, &(0x7f0000000240)=@nullb, r0, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000980)='./bus\x00', &(0x7f00000009c0), 0xa14000, &(0x7f0000000a00)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000a40)='./bus\x00') syz_clone(0x200, &(0x7f0000000040)="a10ce3e2d08134dd9e305790294d72058868e7dc7dd6ea362305c02fdc61860f791ffbff26e3acf1aaaced5dd57797e1f43aed0745b19abcca0bbc38ef5efbc6ec39ef0f8bfb230d0fdf2af718c421facf3a480c", 0x54, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") renameat2(0xffffffffffffff9c, &(0x7f0000000ac0)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x0) 12m14.46072774s ago: executing program 5 (id=1956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, '\x00\x00\x00\x00'}}}}}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40006ba4100037040b3518422251c00d28ffffdf", @ANYRESHEX=r3, @ANYBLOB="1100030000000000200012800b00010069703667726500001000028005000b000b00000004001200"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000200)=[{{&(0x7f0000000240)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=ANY=[@ANYBLOB="280000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000008000500000000", @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000002a00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000029c0)={&(0x7f0000000fc0)={0x19c8, r3, 0x301, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x928, 0x11d, 0x0, 0x1, [{0x4}, {0x430, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x0, 0x4, 0xb7, 0x7, 0x6, 0x452]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x7, 0x2, 0x8, 0x9, 0x40, 0xe]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x9, 0x30, 0x1b, 0x9, 0x7, 0x6c, 0x60, 0x9, 0x4, 0x1b, 0x12, 0x41, 0x12, 0x1b, 0xc, 0x30, 0x48, 0x3c, 0x0, 0x3, 0xc, 0x24, 0x6c, 0x6, 0x60, 0x1, 0x18, 0x48]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x36, 0x1, 0x76, 0x6, 0x2]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x18, 0x9, 0x36, 0x9, 0x3, 0x6, 0x6, 0x24, 0x9, 0x5, 0x60, 0x12, 0x3, 0x32, 0xc, 0x5, 0x60, 0x9, 0x5, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2f, 0x3d, 0x5, 0xc, 0x6, 0x12, 0x9, 0x36, 0x36, 0x16, 0xb, 0x2, 0x6c, 0x60, 0x60, 0x9, 0x6c, 0x24, 0x5, 0x16, 0x1b, 0x1, 0x6, 0x9, 0x18, 0x2, 0x1a]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x15, 0x0, 0x4, 0xed, 0xfffc, 0x4, 0xfeff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xf, 0xb, 0x401, 0x8, 0xffff, 0x7, 0x7ff]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x12, 0x14, 0x3, 0x5, 0x12, 0x1, 0x6, 0x60, 0x30, 0x3, 0x9, 0x9, 0xc, 0x36, 0x36, 0x2e, 0x30, 0x12, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a, 0x58e, 0x2, 0x0, 0x34b, 0x63, 0x80, 0xa]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x4, 0x4}, {0x6, 0x5}, {0x5, 0xa}, {0x7, 0x4}, {0x2, 0x4}, {0x6, 0x1}, {0x6, 0x8}, {0x2, 0x1}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x4, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x4, 0x6}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0x5}, {0x4, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x5, 0x8}, {0x1}, {0x5, 0x1}, {0x0, 0x4}, {0x5}, {0x4, 0x9}, {0x3, 0x5}, {0x3, 0x6}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x2, 0x1}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x5}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x5, 0x3, 0x60, 0x5, 0x6, 0xb, 0x1, 0x60, 0x36, 0x2, 0x5, 0x6, 0x4, 0x24, 0x60, 0x96c495ff8d40df3b, 0x6, 0x24, 0x1, 0x3, 0x18, 0xe4, 0x6, 0x6, 0x0, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x9, 0x1, 0x40, 0x1, 0x1b, 0xb15, 0x9]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x10, 0x1, 0x1d63, 0xa00, 0x7, 0xce4a, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff2, 0x4, 0xae, 0x3, 0xfa0, 0x8, 0x3, 0x7]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0xa}, {0x2, 0x6}, {0x1, 0x9}, {0x3}, {0x6, 0x1}, {0x3, 0x3}, {0x5}, {0x7, 0x6}, {0x7, 0x2}, {0x7}, {0x7, 0x6}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0xa}, {0x2, 0x2}, {0x3, 0x9}, {0x0, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {}, {0x5, 0x9}, {0x3, 0x6}, {0x0, 0x4}, {0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x2}, {0x3, 0x6}, {0x1}, {0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x7, 0x9}, {0x2, 0xa}, {0x1, 0xa}, {0x5, 0x1}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x9}, {0x1, 0xa}, {0x6, 0x5}, {0x7}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x8}, {0x2, 0x6}, {0x3, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x9}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x5}, {0x4, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x9}, {0x3, 0x2}, {0x1, 0x8}, {0x5}, {0x7, 0x7}, {0x1, 0x1}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x7, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x4}, {0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x6, 0x6}]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1b, 0x3, 0xc065, 0x7, 0x8, 0x1, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x7fff, 0xd, 0x101, 0x9, 0xd70a]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x3, 0x8}, {0x5, 0x2}, {0x4, 0x7}, {0x5, 0x3}, {0x5, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x2}, {0x0, 0xa}, {0x2, 0x3}, {0x3, 0xa}, {0x4, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x6}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x6}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x24, 0x1b, 0x12, 0x5, 0x9, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x6, 0x7}, {0x5}, {0x6, 0x2}, {0x1, 0x5}, {0x6, 0x7}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x3}, {0x2}, {0x1, 0x5}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x3}, {0x4}, {0x4, 0x2}, {0x0, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x5}, {0x5, 0xa}, {0x0, 0x3}, {0x3, 0x2}, {0x4, 0x2}, {0x0, 0x4}, {0x6, 0x7}, {0x3, 0x2}, {0x4, 0x5}, {0x0, 0x7}, {0x1, 0x3}, {0x5, 0x4}, {0x5, 0x4}, {0x3, 0x3}, {0x0, 0xa}, {0x3, 0x2}, {0x7, 0x8}, {0x3, 0x9}, {0x5, 0x5}, {0x7, 0x3}, {0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0x7}, {0x3}, {0x5, 0x6}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x6}, {0x7, 0x8}, {0x2, 0x6}, {0x5, 0x8}, {0x6, 0x8}, {0x2, 0x4}, {}, {0x4, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x6, 0x3}, {0x0, 0x3}, {0x7, 0x5}, {0x2, 0x1}, {0x7, 0x2}, {0x1}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf9b9, 0x4be0, 0x3, 0x3ff, 0x0, 0x0, 0x2, 0x2]}}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x16, 0x30, 0x5, 0x12, 0x5, 0x5, 0x60, 0x3, 0x2, 0x2f, 0xb, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0xa}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xbd94, 0x6, 0x8000, 0x7fff, 0x5, 0x8, 0x3]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x2, 0x60, 0x48, 0x5, 0x5, 0xb, 0x16, 0x48, 0x6c, 0x3, 0x9, 0x9, 0xd, 0x18, 0x0, 0x1, 0x18, 0x9, 0x30, 0x5]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x1}, {0x4, 0x7}, {0x1, 0x3}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x6}, {0x6, 0x3}, {0x2, 0x2}, {0x2, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x8}, {0x6, 0x5}, {0x6, 0x2}, {0x2, 0x5}, {0x2, 0x5}, {0x5, 0x3}, {0x2, 0x6}, {0x7, 0x2}, {0x3, 0x2}, {0x3, 0x6}, {0x4}, {0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x6, 0x4}, {0x4, 0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x7}, {0x3}, {0x2}, {0x6, 0x4}, {0x2, 0x2}, {0x1, 0x9}, {0x1}, {0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x3}, {0x0, 0x6}, {0x7}, {0x3, 0x3}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x1}, {0x3, 0x1}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x1}, {0x6, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x7}, {0x6, 0x9}, {0x4, 0x5}, {0x2, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x94}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2d}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0xd, 0x6, 0x8, 0x6, 0x2, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x4, 0x7f, 0x280, 0x0, 0x6, 0xfa8b, 0xae38]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfffa, 0x1, 0x6, 0xcf21, 0x3, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x400, 0xfffa, 0xe, 0x5, 0x7, 0x8]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1c, 0x48, 0x36, 0x5, 0xd, 0x4, 0x4, 0x24, 0x48, 0x18, 0x2, 0x30, 0x18, 0x16, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x5}, {0x3, 0x1}, {0x4, 0x3}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x5}, {0x5, 0xa}, {0x3}, {0x0, 0x4}, {0x4, 0x5}, {0x3, 0x9}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x2}, {0x0, 0x7}, {0x6, 0x9}, {0x7, 0x1}, {0x1, 0x3}, {0x3}, {0x3, 0x7}, {0x5, 0xa}, {0x4, 0x2}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x6, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2e, 0x9, 0xfffa, 0x4, 0x5, 0xae, 0xfff7, 0x7]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x2, 0x5}, {0x7}, {0x6, 0x2}, {0x3}, {0x4, 0x7}, {0x3}, {0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x3, 0x7}, {0x6, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x6}, {0x1}, {0x3, 0x9}, {0x7, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x7, 0x8}, {0x3, 0x8}, {0x0, 0x2}, {0x2, 0x1}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x9}, {0x6, 0x5}, {0x3, 0x1}, {0x3, 0x8}, {0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7fff, 0x6, 0x2, 0xfe1e, 0x8, 0x1, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0x4}, {0x7, 0xa}, {0x2, 0x6}, {0x3, 0x2}, {0x6, 0x9}, {0x5, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0x6}, {0x7}, {0x1, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x4, 0xff01, 0x7878, 0x8, 0xb99, 0x6, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x10, 0x2, 0x2, 0x5, 0x1000, 0xa, 0x9]}}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7e, 0x7, 0x100, 0x9, 0x5, 0x6, 0x0, 0x154b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfffb, 0x5, 0x4, 0xfff7, 0x6, 0x1, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x6, 0x7, 0x8, 0x4, 0x4, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x7}, {0x6, 0x1}, {0x4}, {0x1, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x7, 0xa}, {0x1, 0x9}, {0x3, 0x9}, {0x7}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0xa}, {0x1, 0x1}, {0x3, 0x4}, {0x7, 0x6}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x7, 0x7}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x7}, {0x6}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x9}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x6, 0x7}, {0x0, 0x4}, {0x2}, {0x2, 0x8}, {0x4, 0x7}, {0x7}, {0x7, 0x1}, {0x7, 0x3}, {0x6, 0x8}, {0x3, 0x1}, {0x3, 0x2}, {0x7, 0xa}, {0x6, 0x1}]}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x101}]}, {0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x338c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x4, 0x60, 0x48, 0x6c, 0xb, 0x6c, 0x12, 0x3, 0x3, 0x12, 0x36, 0x1, 0x48, 0x3, 0x1b, 0x60, 0x3, 0x36, 0x18, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0xa}, {0x3, 0x3}, {0x7, 0xa}, {0x4, 0x2}, {0x7, 0x6}, {0x7, 0x4}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x7, 0x6}, {0x5, 0x7}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0xa}, {0x3}, {0x5, 0x4}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x2}, {0x1}, {0x1, 0x8}, {0x2, 0x9}, {0x3, 0x3}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x400, 0x4, 0x2, 0x36e, 0x40, 0x100, 0xfff9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3ff, 0x2, 0x3, 0x0, 0x5, 0xc7a5, 0x4]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x6, 0x7}, {0x5, 0x9}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0x9}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x2, 0x8}, {0x7}, {0x6, 0x7}, {0x3, 0x4}, {0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x5}, {0x2, 0x1}, {0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x4, 0x8}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x2}, {0x6}, {0x6, 0x2}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x2, 0x6}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x7}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x1b, 0xb, 0x2, 0x5, 0x16, 0xb, 0x18, 0xb, 0x48, 0x1, 0x6, 0x1b, 0x1b, 0x12, 0x18, 0x60, 0x3, 0x41, 0xb, 0x30, 0x16, 0x16, 0x9, 0x24, 0x18, 0x12, 0x60, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x5}, {0x4, 0x4}, {0x5, 0x4}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x2, 0x9}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x6}, {0x7, 0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x5, 0x9}, {}, {0x5}, {0x7, 0x4}, {0x4, 0x2}, {0x2, 0x4}, {0x7}, {0x3, 0xa}, {0x2, 0x3}, {0x6, 0x5}, {0x2, 0x6}, {0x6, 0x1}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x12, 0x48, 0x60, 0x12, 0x4e, 0xc, 0x60, 0x6, 0x48, 0x12, 0x9, 0x4, 0x60, 0xb, 0x1e, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x40, 0x6, 0x1, 0x8, 0x1, 0x1]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x699, 0xd, 0x8, 0x9, 0x90, 0xa, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x1}, {0x3, 0x7}, {0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x1}, {0x3, 0x7}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x2, 0x3}, {0x7, 0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x2, 0x6}, {0x1}, {0x1, 0xa}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7000, 0x6, 0x0, 0x7, 0x80, 0x4, 0x3]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x6, 0x60, 0x24, 0xc, 0x18, 0x6, 0x9, 0x78, 0x60, 0x1, 0x7d, 0x30, 0x6c, 0x12, 0x2, 0x36, 0x6c, 0x5, 0x9]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4f4, 0x11d, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6172}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0xfff8, 0x55, 0x80, 0x2, 0x3, 0x101]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x3, 0x36, 0x4, 0x5, 0x2, 0x2, 0x36, 0xc, 0x18, 0xc, 0x3, 0x4, 0x16, 0x48, 0x16, 0x3]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc75d, 0x7, 0x7, 0x40, 0x4, 0x9, 0x2, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x1, 0x8, 0x28ca, 0x332, 0xff, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xed, 0x72f6, 0x5, 0xf3, 0x8000, 0xffff, 0x4, 0x400]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x29c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x264, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x9, 0x12, 0x24, 0x3, 0x1b, 0x3, 0x18, 0x48]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x24, 0x1, 0x24, 0x6, 0x5, 0x12, 0x4, 0x16, 0x24, 0x48, 0x1b, 0x1, 0x2, 0x4, 0x9, 0x0, 0x5, 0x1, 0x6, 0x6c, 0x30, 0x4, 0x2, 0x5, 0x30, 0x12, 0x3, 0x16, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7d1, 0x0, 0xfffe, 0x6, 0x7, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x16, 0x1, 0x9, 0x16, 0x4, 0x12, 0x30, 0x36, 0x2, 0x30, 0x6, 0x18, 0x6, 0x18, 0x9, 0x1b, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0x3}, {0x0, 0xa}, {0x1, 0x8}, {0x2, 0x1}, {0x2, 0x3}, {0x6}, {0x4, 0x8}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0xa}, {0x3, 0x4}, {0x6, 0x1}, {0x3, 0x5}, {0x5, 0x3}, {0x4, 0xa}, {0x6, 0x9}, {0x1, 0x7}, {0x6, 0x4}, {0x5, 0x8}, {0x6, 0x7}, {0x2, 0x9}, {0x2}, {0x1, 0x2}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x4}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x9}, {0x5, 0xa}, {0x1, 0x2}, {}, {0x6, 0xa}, {0x2, 0x3}, {0x3, 0x7}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x7}, {0x2}, {0x1, 0x5}, {0x6, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x6}, {0x2, 0x3}, {0x5, 0x5}, {0x2, 0x3}, {0x7, 0x2}, {0x5}, {0x7}, {0x4, 0x5}, {0x7, 0x6}, {0x7, 0xa}, {0x3}, {0x7, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x5}, {0x1, 0x2}, {0x2, 0x5}, {0x2, 0x5}, {0x4}, {0x6, 0x6}, {0x2, 0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x5, 0x2}, {0x1, 0x3}, {0x4, 0x7}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x5}, {0x2, 0x4}, {0x5, 0x4}, {0x5, 0x7}, {0x1, 0x5}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x8000, 0xc, 0x9, 0x401, 0x966, 0x0, 0x3]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0x6c, 0x6c]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0xf, 0xdd9e, 0x3, 0x246b, 0x4, 0x26e3, 0xfb22]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x0]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x7}, {0x6, 0x5}, {0x7, 0xa}, {0x7, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x1}, {0x2, 0x4}, {0x3, 0x4}, {0x0, 0x1}, {0x5, 0x4}, {0x5, 0x2}, {0x5}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x4, 0x6}, {0x6, 0x3}, {0x2, 0x3}, {0x2, 0x7}, {0x7, 0x4}, {0x6}, {0x7, 0x3}, {0x2, 0x5}, {}, {0x1, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x6, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x1, 0x2}, {0x5, 0x7}, {0x7, 0xa}, {0x3, 0x6}, {0x2, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x63, 0x48, 0x9, 0x12, 0x36, 0x12, 0x48, 0x24, 0x36, 0xb, 0x5, 0x18, 0x16]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x5, 0xa729, 0x7, 0x10, 0x5, 0x8]}}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7fff, 0xd322, 0x7ff, 0x9, 0x0, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x3}, {0x5, 0x7}, {0x6}, {0x0, 0x6}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x8}, {0x1, 0x6}, {0x2, 0x9}, {0x6, 0x6}, {0x7, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x4}, {0x6, 0x5}, {0x2, 0x3}, {0x2, 0x9}, {0x7, 0xa}, {0x4, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {}, {0x1, 0x4}, {0x0, 0x3}, {0x7, 0xf}, {0x6, 0x1}, {0x3, 0x3}, {0x6, 0x8}, {0x5, 0x3}, {0x5, 0x2}, {0x4, 0x8}, {}, {0x3, 0x1}, {}, {0x0, 0x6}, {0x7}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {}, {0x7, 0x7}, {0x5, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x5}, {0x7, 0x5}, {0x7}, {0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x5, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x3, 0x824, 0x1, 0x4, 0x80, 0x7, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7996}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x56}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x4}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x24, 0x12, 0x4, 0x24, 0x18, 0x18, 0x6, 0x1, 0x48, 0x36, 0x6c, 0x6, 0x4, 0x30, 0xb, 0x24, 0x30, 0x3, 0x2, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x3, 0x4, 0x0, 0x9, 0x9, 0x5]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x3}, {0x5, 0x2}, {0x5, 0x1}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x4}, {}, {0x5, 0x9}, {0x2, 0x6}, {0x1, 0x5}, {0x6, 0x7}, {0x2, 0x8}, {0x5, 0x7}, {0x4}, {0x4, 0x6}, {0x4, 0x9}, {0x4}, {0x1, 0x1}, {0x5, 0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x6, 0x8}, {0x7, 0x7}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x4}, {0x3, 0x9}, {0x6, 0x3}, {0x5, 0x6}, {0x3, 0x5}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x9}, {0x6, 0x9}, {0x4, 0x2}, {0x6, 0x9}, {0x3, 0x9}, {0x1, 0x1}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x8}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x8, 0x2, 0x60, 0x5, 0x0, 0x7838, 0x1ecf]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2aa7, 0x4, 0xef08, 0x0, 0x9e, 0xffc0, 0x10, 0xfff]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x1}, {}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0x4}, {0x7, 0x8}, {0x1, 0x8}, {0x2, 0x1}, {0x2, 0xa}, {0x5, 0x3}, {0x3, 0x5}, {0x5, 0x7}, {0x5, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x4, 0x8}, {0x7, 0x6}, {0x7, 0x8}, {0x3, 0xa}, {0x4, 0xa}, {0x0, 0xa}, {0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0xf1aadbc239cf8e51}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x210}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x3f4, 0x11d, 0x0, 0x1, [{0x3d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3a8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x4, 0x1, 0x4, 0x2, 0x6, 0xb, 0x0, 0x3, 0x1, 0x30]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe, 0x8001, 0x2, 0x800, 0x2, 0x39e3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc24, 0x1, 0xd, 0x2, 0x2, 0x3, 0x80, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfc01, 0x8, 0x2, 0x0, 0xd, 0x8, 0xb3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x783, 0xffe7, 0x9, 0x6, 0x2, 0x7f, 0x1, 0xe8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x2, 0x0, 0x4, 0x1000, 0x0, 0x801]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x800, 0x1, 0xa7c, 0x8, 0x6, 0x0, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x5, 0x0, 0x48, 0x3, 0x36, 0x1b, 0x9, 0x18, 0x4, 0x30, 0x1b, 0x60, 0x6c, 0x1b, 0x48, 0xb, 0x9, 0x1b, 0x0, 0x24, 0x5, 0x12, 0x5, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0xc]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x2}, {0x4, 0x4}, {0x0, 0x3}, {0x7}, {0x6, 0x2}, {0x1, 0x7}, {0x2, 0x4}, {0x3, 0x6}, {0x3, 0x6}, {0x7, 0x9}, {0x7, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x7}, {0x4, 0x4}, {0x0, 0x2}, {0x4, 0x5}, {0x2, 0x8}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x6}, {0x7, 0x5}, {0x4, 0x9}, {0x2, 0x5}, {0x7, 0x2}, {0x7, 0x1}, {0x3, 0x5}, {0x6, 0x7}, {0x0, 0x8}, {0x6, 0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x5, 0x7}, {0x5, 0x3}, {0x3, 0x8}, {0x4, 0x1}, {0x3, 0x6}, {0x7, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x7}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x5}, {0x7, 0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x5, 0xa}, {}, {0x5, 0x7}, {0x1}, {}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x9}, {0x3, 0xa}, {0x5, 0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x5, 0x6}, {0x5, 0x2}, {0x5, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x5, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x5, 0x9}, {0x6, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x8}, {0x5, 0x9}, {0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x7, 0x6}, {0x7, 0x7}, {0x2, 0x3}, {0x6, 0x9}, {0x4}, {0x4, 0x8}, {0x3, 0x9}, {0x3, 0x4}, {0x6, 0x6}, {0x0, 0x3}, {0x3}, {0x2, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x0, 0x7}, {0x3}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x1}, {0x7, 0x7}, {0x4, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x4d, 0x6, 0x2, 0x2, 0xa, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x1000, 0x1000, 0x7fff, 0xe794, 0xb, 0x3842]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x4}, {0x4, 0x8}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x5}, {0x2, 0x6}, {0x6, 0x8}, {0x6, 0x7}, {0x5, 0x8}, {0x3, 0x5}, {0x6, 0x6}]}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x36, 0xc, 0x4, 0x60, 0x9, 0x6, 0x12, 0x30, 0x1b, 0x60, 0x36, 0x4, 0x3e, 0xc, 0x5, 0x5, 0x63, 0x1, 0x2, 0x60, 0x5, 0x3, 0x24, 0x48, 0x18, 0x3, 0x16, 0x5, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x4, 0x3, 0x80, 0x4, 0x101, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x8}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x4}, {0x7, 0x1e}, {0x2, 0xd}, {0x3, 0x8}, {0x7, 0x7}, {0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x2}, {0x3, 0xa}, {0x2, 0x4}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x4}, {0x6, 0x3}, {0x4, 0x3}, {0x6, 0x3}, {0x0, 0x9}, {0x3, 0x7}, {0x4, 0x1}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0x7}, {0x0, 0x2}, {0x4, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0xa}, {0x5, 0x7}, {0x1, 0x1}, {0x3}, {0x0, 0x5}, {0x7, 0x4}, {0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfbff, 0x4, 0x115, 0x400, 0x3, 0x44, 0x3ff]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0xa}, {0x1, 0x3}, {0x6, 0x9}, {0x6, 0xa}, {0x6, 0x4}, {0x1}, {0x2}, {0x4}, {0x7, 0x8}, {0x7, 0x2}, {0x7, 0x1}, {0x6, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x3, 0x3}, {0x6, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x6, 0xa}, {0x3, 0x4}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x2}, {0x6, 0xa}, {0x7, 0x7}, {0x0, 0x4}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x4, 0x5}, {0x6}, {0x6, 0x1}, {0x6, 0x2}, {0x2}, {0x5, 0x7}, {0x1, 0xa}, {0x7, 0x5}, {0x5, 0x8}, {0x1}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x2, 0x8}, {0x2, 0x5}, {0x4, 0x4}, {0x7}, {0x3, 0x9}]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x1, 0x30, 0x6c, 0x48, 0xb, 0x2, 0x24, 0x0, 0x1, 0x4, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfff8, 0xaa43, 0x4, 0x5, 0xc, 0x9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x2, 0x6, 0x30, 0x60, 0xb, 0x60, 0x6, 0x1e, 0x5, 0x30, 0x12, 0x12, 0x36, 0x36, 0x52, 0x6c, 0x3, 0x9, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xff, 0x4, 0xda7, 0x0, 0xb, 0x8, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x401, 0x9, 0x1, 0x8, 0x800, 0x8, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x6, 0x2, 0x3, 0x0, 0x218, 0x7]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x60, 0x24, 0x4, 0x3, 0x24, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}]}]}, @NL80211_ATTR_TID_CONFIG={0x4e0, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x27}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x31}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x29}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x34, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x5, 0x48, 0x49, 0x12, 0x9, 0x18, 0xc, 0x30, 0x6c, 0x24, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x860d, 0xa, 0x3, 0x6, 0x8, 0x4, 0x401, 0x1708]}}]}]}]}, {0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x240, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x5, 0x6c, 0xc, 0x0, 0x6c, 0x18, 0xc, 0x24, 0x60, 0x6c, 0x18, 0x2, 0x16, 0x6, 0x16, 0x36, 0x12, 0x24, 0x16, 0x60, 0x60, 0x12, 0x4]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x2, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x7}, {0x2, 0x9}, {0x6, 0x1}, {0x3, 0x5}, {0x5, 0x5}, {0x1, 0x1}, {0x4, 0x2}, {0x4, 0x8}, {0x4, 0x7}, {0x7, 0x6}, {0x5, 0x9}, {0x6, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x2}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x8}, {0x7}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0x8}, {0x6, 0x4}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbe, 0x2eaa, 0xc, 0x2, 0x9, 0xd, 0x9, 0x7]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x36, 0x24, 0x3a, 0x18, 0x2, 0x1, 0x1, 0x60, 0x1b, 0x1, 0x30, 0x16, 0xb, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8, 0x100, 0x2000, 0x24, 0x2, 0x7, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x3, 0x4, 0x7fff, 0x40, 0x3, 0x81]}}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3275, 0x7f, 0x8, 0x1, 0x6, 0x0, 0x9, 0xc]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0xa}, {0x3, 0x5}, {0x1, 0x7}, {0x4, 0x5}, {0x3, 0x8}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x2, 0x1}, {0x5}, {0x2, 0x7}, {0x7, 0x3}, {0x3, 0x6}, {}, {0x1, 0xa}, {0x2, 0x4}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0x8}, {0x1, 0x8}, {0x2, 0x8}, {0x2, 0x2}, {0x5, 0x4}, {0x7, 0x4}, {0x1, 0x3}, {0x4}, {0x6, 0x2}, {0x3, 0x5}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x2}, {0x1, 0x6}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0x2}, {0x5}, {0x6, 0x7}, {0x2, 0x5}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x7}, {0x2, 0x15}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x2, 0x1}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x36, 0x42, 0x6, 0x3, 0x60, 0x9, 0x48, 0xb, 0x16, 0x4, 0xb, 0x18, 0x36, 0x1b, 0x1, 0x9, 0x5, 0x6, 0x2, 0x18, 0x60, 0x6, 0xc, 0x2, 0x2, 0xc, 0x12, 0x12, 0x16]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x45d5, 0x8, 0xa, 0x165, 0xff80, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9c0, 0x3, 0x8, 0x0, 0x9, 0x1, 0x6]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x6, 0x6, 0x16, 0x9, 0xb, 0x1, 0x6b, 0x5, 0x1, 0x5, 0x1b, 0x36, 0x24, 0x12, 0x3, 0x5, 0x2, 0x16, 0x90, 0x3, 0x16, 0xb]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0xa}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x2}, {0x4, 0xa}, {0x4, 0x7}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x4, 0x1b, 0x6c, 0x60, 0x36, 0x6c, 0x48, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x200, 0x9, 0x5, 0x6, 0xe, 0xac, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x1, 0x9, 0x5, 0x2e94, 0x4, 0x6, 0x8000]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x8001, 0x8000, 0xc0, 0x5, 0x3, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xea}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x15, 0xc, 0x6, 0x1b, 0x6c, 0xc, 0x2, 0x2, 0x3, 0x36, 0x36, 0x6c, 0x24, 0x15, 0xc, 0x16, 0x6, 0x6c, 0x12]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5b3, 0x824f, 0x7, 0x8000, 0x8, 0x0, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x6}, {0x7}, {0x2, 0x4}, {0x3}, {0x0, 0x5}, {0x1, 0x1}, {0x2, 0x6}, {0x3, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x232, 0x8, 0x3, 0xcbc, 0xe, 0xfff8, 0x1, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x69, 0x6, 0x16, 0xb, 0x6c, 0x9, 0x4, 0x7, 0x48, 0x48, 0x5, 0x60, 0x60, 0x2, 0x9cf36eee8e1bffd1, 0xc, 0x36, 0x16, 0x12, 0x4, 0x6c, 0x6c, 0x60, 0x60, 0x0, 0x5, 0x18, 0xc, 0x12, 0x48, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x130, 0x11d, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0x1d}, {0x3, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x3}, {0x5, 0x4}, {0x2, 0x9}, {0x6, 0x7}, {0x5, 0x1}, {0x7, 0x2}, {0x5, 0x1}, {0x6, 0x5}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x3, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x200, 0x47d, 0x1a61, 0x8, 0x401, 0x6, 0xa2d3]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x2}, {0x1, 0x9}, {0x0, 0x4}, {0x5, 0x2}, {0x4}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x6}, {0x1, 0x5}, {0x1}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x6}, {0x4, 0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x3}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0x6}, {0x4, 0x8}, {0x4, 0x3}, {0x4, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x2}, {0x3}, {0x7, 0x5}, {0x2}, {0x5, 0x9}, {0x7, 0x9}, {0x4, 0x3}, {0x4, 0x9}, {0x3, 0x2}, {0x2, 0xa}, {}, {0x3, 0x3}, {}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0x7}, {0x2, 0xa}, {0x4, 0x6}, {0x2, 0x1}, {0x6, 0x4}, {0x0, 0x8}, {0x7}, {0x2, 0x2}, {0x6, 0x8}, {0x0, 0x6}, {0x2, 0x1}, {0x2, 0x9}, {0x3, 0x9}, {0x0, 0xa}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x3, 0x8, 0xa, 0x800, 0x4, 0x1]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x2}, {0x0, 0x6}, {0x6}, {0x7, 0x7}, {0x0, 0x6}, {0x4, 0x6}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x8}, {0x7, 0x8}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0x1}, {0x2, 0x2}, {0x5, 0x4}, {0x2, 0xa}, {0x1, 0x6}, {0x4, 0x9}, {0x7, 0x2}, {0x7, 0x4}, {0x6, 0xa}, {0x4, 0x2}, {0x3, 0x1}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0x3}, {0x4, 0x9}, {0x5, 0x1}, {0x3, 0x2}, {0x6, 0x8}, {0x2, 0x8}, {0x2}, {0x1, 0x4}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x5, 0x8}, {0x4, 0x9}, {0x7, 0x9}, {0x0, 0x1}, {0x0, 0x8}, {0x6, 0x8}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x6}, {0x3, 0xa}, {0x5, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x62}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x85}]}]}, @NL80211_ATTR_TID_CONFIG={0x128, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x71}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}]}]}]}, 0x19c8}, 0x1, 0x0, 0x0, 0x8880}, 0x580b8) 12m11.534199892s ago: executing program 5 (id=1963): rt_sigqueueinfo(0x0, 0xb, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000700)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0x3a, 0x6, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000080)=0x2800, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x100, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0xc, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8058}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd27, 0x25dfdbfc, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x845}, 0x2000c050) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r8, r7, 0xa000000000000000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1d, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@generic={0x5, 0x8, 0x6, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x492, 0x0, 0x0, 0x41100, 0x70, '\x00', r6, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x7, &(0x7f0000000bc0)=[r9, r10, 0x1, r11], &(0x7f0000000c00)=[{0x2, 0x4, 0x5, 0x5}, {0x2, 0x3, 0x6, 0x3}, {0x4, 0x1, 0xb, 0xb}, {0x5, 0x3, 0xa, 0x7}, {0x0, 0x4, 0x8, 0x1}, {0x3, 0x2, 0x2, 0x9}, {0x0, 0x3, 0x5, 0x1}], 0x10, 0x8001}, 0x94) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x14, &(0x7f0000000540)=[{&(0x7f0000000580)=' ', 0xffffff1f}], 0x1}, 0x0) pipe2(&(0x7f0000000140), 0x80000) 12m11.165487875s ago: executing program 33 (id=1963): rt_sigqueueinfo(0x0, 0xb, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000700)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0x3a, 0x6, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000080)=0x2800, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x100, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0xc, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8058}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd27, 0x25dfdbfc, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x845}, 0x2000c050) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r8, r7, 0xa000000000000000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1d, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@generic={0x5, 0x8, 0x6, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x492, 0x0, 0x0, 0x41100, 0x70, '\x00', r6, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x7, &(0x7f0000000bc0)=[r9, r10, 0x1, r11], &(0x7f0000000c00)=[{0x2, 0x4, 0x5, 0x5}, {0x2, 0x3, 0x6, 0x3}, {0x4, 0x1, 0xb, 0xb}, {0x5, 0x3, 0xa, 0x7}, {0x0, 0x4, 0x8, 0x1}, {0x3, 0x2, 0x2, 0x9}, {0x0, 0x3, 0x5, 0x1}], 0x10, 0x8001}, 0x94) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x14, &(0x7f0000000540)=[{&(0x7f0000000580)=' ', 0xffffff1f}], 0x1}, 0x0) pipe2(&(0x7f0000000140), 0x80000) 18.732767784s ago: executing program 4 (id=3654): syz_usb_connect$uac3(0x3, 0xb1, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000080c200b1040001f02030109029f0003010d5000080b0102012130010904000000f90030000a240c000000000040000d240706050a04000407000000132403020504020604810000007f008000ff0711240a05"], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) r4 = syz_create_resource$futex(&(0x7f0000000100)=0x2) futex(r4, 0xb, 0x1, &(0x7f00000193c0), 0x0, 0x0) sched_setaffinity(r1, 0x9, &(0x7f0000000340)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xa, &(0x7f0000019500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000019580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000019440)={0x0, 0x0, &(0x7f0000019480)={&(0x7f00000194c0)=ANY=[@ANYBLOB="3000000041000f01fefeffff00000000017c0000040042801400018006000300800a000008000900", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_xfrm(r5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x0, 0x51, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) socket$inet_smc(0x2b, 0x1, 0x0) 17.988242728s ago: executing program 6 (id=3656): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x105000, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000340)={0x0, &(0x7f0000000380)}) sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) poll(0x0, 0x0, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000580)) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) socket$igmp(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000600), 0x0, 0x60, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x4}, 0x6) syz_usb_connect(0x5, 0x27, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) 15.435073292s ago: executing program 4 (id=3659): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80140, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./dev/sda\x00', 0x2, 0x0) r3 = add_key(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000b40)='asymmetric\x00', 0x0, &(0x7f0000000b80)="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", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001100)={r4, 0x1c}, 0x0, &(0x7f0000001140)="0100", 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000580)}, {&(0x7f00000005c0)="ccdaa7ec5140e38d939dd21fb945efeed20f2c0077850fe6396be420613bf8e449f47b3d8c5db4db1c33b9cf7efaa0533b6431fb0298a9b74488f5c1525df22ce6443b94d9bc3443cafacfe53f1852c04c4308178633a980d4163816ce9163e0b5e02f49f790007e4caa0ce0414ff2d5", 0x70}, {&(0x7f0000000640)="724b70e0c83cf46675f0e4d1a4bcabced2727c98523d86d4807df8118ae0a20379053d33be61ffe6ec3683f5f09e374bf21b97ba19c9ba740eee", 0x3a}, {&(0x7f0000000740)="18614aabaa9b3467f43f6f300cd22a8724f66e7d03ee9907fec63400d8879c9ecc2862e6b0bed607838fcc5ee057f89a737c25a4cccd3562dd9aa67775866b4e2d54fe4957d6cc8a58df3c37f2bc3ae514ceeb43d7043116d7d4b12e8f18aa2b8d70ab2189a98dcfdbd084112a1ed344c4c8ad1e7b615859f4dfa9b578d2c8f89c315319b8ab63046006061487bffb1a", 0x90}, {&(0x7f0000000800)="ea9dfea8388aa122046dbf8cd4c170dc143efae6e9cb4fda4f88bfcb8b584f5cfd8d35f5a8508d5f2a4bebce64c3e2ff8f4f6b959bae228085df998818f21f207e2124afa51a66", 0x47}], 0x5, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r4], 0x10}, 0x48001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000940)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f00000009c0)) fcntl$setlease(r0, 0x400, 0x1) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000a00)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) 13.303675449s ago: executing program 6 (id=3662): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000080)={0x0, @broadcast}) 12.953279704s ago: executing program 3 (id=3663): syz_open_dev$dri(0x0, 0x0, 0x80000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mq_timedsend(r2, 0x0, 0x1f, 0xb, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r2, &(0x7f0000000500)=""/202, 0xca, 0x200000200009, 0x0) 12.407697753s ago: executing program 6 (id=3664): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0xa, 0x300) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffbf00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) fsmount(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_delrule={0x30, 0x18, 0x301, 0x70bd27, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x5, 0x10001}, [@FRA_DST={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0) r6 = openat(r5, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000480)='serial8250', 0xa) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f00000000c0)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x1, {0xa, 0x4e20, 0x1, @mcast2, 0x1}}}, 0x32) 12.09350272s ago: executing program 2 (id=3665): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f0000000240)=""/195}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r1, &(0x7f0000001c80)=""/102400, 0x19000) sched_setaffinity(0x0, 0x8, &(0x7f000001ac80)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mknod$loop(&(0x7f000001acc0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f000001ad00)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) r3 = socket$inet6(0xa, 0x80000, 0x4) bind(r3, &(0x7f000001ad40)=@hci={0xa, 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sec/safesetid/gid_allowlist_policy\x00', 0x2, 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x190, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x2, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffe0, 0x8, 0x9, 0xe0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x5, 0x1, {0x8, 0x25, 0x1, 0x82, 0x3c, 0x81, 0x46d0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x8, 0x6, {0x8, 0x25, 0x1, 0x81, 0x33, 0x8, 0x7443}}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x5, &(0x7f0000000780)={0x5, 0xf, 0x5}}) syz_usb_connect(0x3, 0x4e, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 12.004740966s ago: executing program 4 (id=3666): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x408c0c0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000780), 0x800, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000800)=0xfff, 0x4) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000008c0)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046}) (async) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000008c0)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{0x0}], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x801, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000340)={0xf0f042}) memfd_create(&(0x7f0000000080)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) (async) r4 = memfd_create(&(0x7f0000000080)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r4, 0x0) ftruncate(r4, 0x0) (async) ftruncate(r4, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 10.988733562s ago: executing program 6 (id=3667): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0) r1 = syz_io_uring_setup(0x26cb, &(0x7f00000197c0)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000019840)=0x0, &(0x7f0000019880)=0x0, &(0x7f00000198c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000019900)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffff, 0x0, 0x0, 0x20, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x18, 0x30, 0x9, 0x70bd29, 0xffffffff, {}, [{0x4}]}, 0x18}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) syz_open_dev$MSR(&(0x7f0000000200), 0x171, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x5, 0xdc0, 0x0, &(0x7f0000000480), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000000680)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x47, &(0x7f0000019680)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000196c0)='./mnt\x00', 0x1ff) syz_open_dev$usbmon(&(0x7f0000000480), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000500), 0x77, 0x101301) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) 10.970429947s ago: executing program 0 (id=3668): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="5500000020007fafb70000200000000080000000030b43026c26ca8a9848a3c728f9c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f99a5650645929192403bad02c780c", 0x57}], 0x1}, 0x4000080) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000440)={0x57, 0xfffd, 0x4, {0x0, 0x1}, {0x2074, 0x2}, @const={0x896e, {0xb, 0x53, 0x2}}}) r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x822b01) capset(0x0, &(0x7f00000005c0)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) write$char_usb(r2, &(0x7f0000000600)="e2", 0xff0f) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000640)=""/13) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='10', 0x2) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000008000000334900007f00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000008ce5cb894a58115a000000000000000010000000000000"], 0x50) r4 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r7, &(0x7f00000003c0)=@abs, 0x6e) recvmmsg(r7, &(0x7f0000000480), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x0, 0x3a, 0x0, 0x1, 0x0, 0x10000, @value=r5}, 0x28) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x1d, 0x2, 0x6) 10.720372971s ago: executing program 3 (id=3669): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x6a040300) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x0) 9.276970764s ago: executing program 3 (id=3670): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x2}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 9.187992162s ago: executing program 4 (id=3671): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x24, r3, 0x101, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x845400}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x841) 9.084389349s ago: executing program 0 (id=3672): pwrite64(0xffffffffffffffff, &(0x7f0000000040)="01921dc787e1e2c6e392d42312a882a789eb2703522d73dac3f965884f6ae0294e3fef6b47709081b4a4221539885867f1d34c9b0abbf71da704222ee98e111d8fce52fa6e411262", 0x48, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000400)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x42, 0x0) link(&(0x7f0000000500)='./file1\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f00000007c0)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000001980), 0x2, 0x141102) writev(r1, &(0x7f00000019c0)=[{&(0x7f0000001a00)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001a40), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x16c, r5, 0x2, 0x70bd26, 0x25dfdafb, {}, [@TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x43f684e3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf4}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x316}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x986}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaeec}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) sendfile(r2, r3, 0x0, 0x20000023896) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="180000001e1401"], 0x18}}, 0x2000481c) r7 = syz_open_procfs(0x0, &(0x7f0000001c80)='numa_maps\x00') read$FUSE(r7, &(0x7f0000001f80)={0x2020}, 0x2020) socket$rds(0x15, 0x5, 0x0) 8.910295504s ago: executing program 4 (id=3673): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = socket$netlink(0x10, 0x3, 0x4) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000240)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x17, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYBLOB="2c13dd680922", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000650901000000000066000000060000001801000020756c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000200000056000000060000002c93000000000000b5030000000000008500000078000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 ', @ANYRESOCT=r8], 0x6e) 8.878963812s ago: executing program 2 (id=3674): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000655000/0x1000)=nil, 0x1000, &(0x7f00000009c0)='\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070002002000000000000500000018000180140002007379000074756e00000000000000000008000500102700cce0bd526b8753493ec8755d28e8f2c2c11283510ba2c432314626ada269ff7989cc693603000000000000005c81c4bcea0569944f71e63d86df41b1a2ee1e382c5cb3dd6b4e2d27a9d93b6fb1b992d5f61ec47f15c1dca4751f4cabb00000000000000000"], 0x34}}, 0x894) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 7.730456444s ago: executing program 4 (id=3675): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1e502d00000000000109022400010000102c0904000b0a0300000009210080090122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl(r1, 0x3b8e, &(0x7f0000000340)="1000") read(0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000010c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYBLOB="7d626b2644faca803e1215e92ad3a55fe30407a0ae43b06931432602a79328ea79ce7690e14dcc16", @ANYRES16=0x0, @ANYBLOB="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"], 0x754}, 0x1, 0x0, 0x0, 0x24000000}, 0x4014) syz_usb_connect(0x5, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303f6"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r3 = getpid() add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r3, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000540), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r6 = syz_socket_connect_nvme_tcp() sendfile(r2, r6, 0x0, 0x9daa5d) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) modify_ldt$write2(0x11, &(0x7f0000000380), 0x10) modify_ldt$read(0x0, &(0x7f00000003c0)=""/66, 0x42) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r7) chdir(&(0x7f0000000000)='./file0\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000640)={0x0, 0x500, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, r8, 0x9c3fa077fa966179, 0x20, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 6.288104782s ago: executing program 2 (id=3676): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80140, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./dev/sda\x00', 0x2, 0x0) r3 = add_key(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000b40)='asymmetric\x00', 0x0, &(0x7f0000000b80)="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", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001100)={r4, 0x1c}, 0x0, &(0x7f0000001140)="0100", 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000580)}, {&(0x7f00000005c0)="ccdaa7ec5140e38d939dd21fb945efeed20f2c0077850fe6396be420613bf8e449f47b3d8c5db4db1c33b9cf7efaa0533b6431fb0298a9b74488f5c1525df22ce6443b94d9bc3443cafacfe53f1852c04c4308178633a980d4163816ce9163e0b5e02f49f790007e4caa0ce0414ff2d5", 0x70}, {&(0x7f0000000640)="724b70e0c83cf46675f0e4d1a4bcabced2727c98523d86d4807df8118ae0a20379053d33be61ffe6ec3683f5f09e374bf21b97ba19c9ba740eee", 0x3a}, {&(0x7f0000000740)="18614aabaa9b3467f43f6f300cd22a8724f66e7d03ee9907fec63400d8879c9ecc2862e6b0bed607838fcc5ee057f89a737c25a4cccd3562dd9aa67775866b4e2d54fe4957d6cc8a58df3c37f2bc3ae514ceeb43d7043116d7d4b12e8f18aa2b8d70ab2189a98dcfdbd084112a1ed344c4c8ad1e7b615859f4dfa9b578d2c8f89c315319b8ab63046006061487bffb1a", 0x90}, {&(0x7f0000000800)="ea9dfea8388aa122046dbf8cd4c170dc143efae6e9cb4fda4f88bfcb8b584f5cfd8d35f5a8508d5f2a4bebce64c3e2ff8f4f6b959bae228085df998818f21f207e2124afa51a66", 0x47}], 0x5, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r4], 0x10}, 0x48001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000940)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f00000009c0)) fcntl$setlease(r0, 0x400, 0x1) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000a00)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) 6.258390194s ago: executing program 0 (id=3677): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0xa, 0x300) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffbf00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) fsmount(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_delrule={0x30, 0x18, 0x301, 0x70bd27, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x5, 0x10001}, [@FRA_DST={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0) r6 = openat(r5, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000480)='serial8250', 0xa) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f00000000c0)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x1, {0xa, 0x4e20, 0x1, @mcast2, 0x1}}}, 0x32) 6.219913019s ago: executing program 6 (id=3678): syz_usb_connect$uac3(0x3, 0xb1, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000080c200b1040001f02030109029f0003010d5000080b0102012130010904000000f90030000a240c000000000040000d240706050a04000407000000132403020504020604810000007f008000ff0711240a05"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) r4 = syz_create_resource$futex(&(0x7f0000000100)=0x2) futex(r4, 0xb, 0x1, &(0x7f00000193c0), 0x0, 0x0) sched_setaffinity(r1, 0x9, &(0x7f0000000340)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xa, &(0x7f0000019500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000019580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000019440)={0x0, 0x0, &(0x7f0000019480)={&(0x7f00000194c0)=ANY=[@ANYBLOB="3000000041000f01fefeffff00000000017c0000040042801400018006000300800a000008000900", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_xfrm(r5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x6, 0x10001, 0x8, 0x7, 0x2}, 0x14) 5.044748209s ago: executing program 0 (id=3679): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', &(0x7f0000000200)={0x13de80, 0x20}, 0x18) r1 = openat(r0, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0xd02, 0x10) write(r1, &(0x7f0000000180)='3', 0x4e) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000000206010844a75758fc562300000000000000000100fffe050072000600000005000500020000000900020073797a320000000e13000300686173683a6e65742c696661636500009bff04ac007ff42e01f3e13756f6e57a521cf9482fbf52500f7b5c4477077ab23c4299d0c487e28d8022450a7b98747cfacd2ead2c00d3014be82266d684f9f8d7af0f121a7f7f3b3ca79e10759bbc24708911d6a1181cedde3b90e7f17a9facb49a010ffc24ee6dd24e796d0986ffdf"], 0x44}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=ANY=[@ANYRES8=r2, @ANYRESDEC=r2, @ANYRES8=r4, @ANYRESDEC=r5, @ANYRES8=r3, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRESHEX=r3, @ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x10) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) semget(0x1, 0x5, 0x6b4) r6 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000600)={{0x200002, 0x0, 0x4, 0xfffffffe, 'syz0\x00', 0xf5}, 0x4, 0x400, 0x1, 0x0, 0x0, 0x77c3, 'syz1\x00', 0x0}) prlimit64(r2, 0xb, &(0x7f0000000780)={0xffffffffffffffff, 0x3}, &(0x7f00000007c0)) socket$can_j1939(0x1d, 0x2, 0x7) r7 = io_uring_setup(0x1, &(0x7f0000000d40)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r7, 0x20, &(0x7f0000000dc0)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000e40)={&(0x7f0000000e80)}, &(0x7f0000000ec0)={&(0x7f0000000080), 0x0, 0x1, 0x0, 0xffffffffffffd2c7}, {0x10, 0xfffffffd}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r7, 0x24, &(0x7f0000000f40)={0x0, 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.021154359s ago: executing program 2 (id=3680): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x42, 0xb6) keyctl$invalidate(0x15, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x44, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0) r4 = syz_io_uring_setup(0xefd, &(0x7f0000000640)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000780)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./nfsd\x00', &(0x7f0000000880)='nfsd\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./nfsd/filehandle\x00', 0x2, 0x0) write(r8, &(0x7f0000000900)='mydomain / 64\n', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a40)='mydomain / 64\n', 0xe) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x402, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x10}) 3.887220509s ago: executing program 0 (id=3681): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000080)=0xffffbff6, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0x721b4633b2e9ae69, 0x0) sendfile(r4, r3, &(0x7f0000000280)=0x23, 0x1c) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dd0902db2abd5b30e9898c63093acfddcf91561d148d440982cc7ad56ef3f79fb922e3c43e53aa28b6572771e62759e88ddeec84936693ad0ccd17eba7adefe1bd9ee8a3fe55e1c224f24cdc9731a492525f21a8b8799920ae389a6cc333f961d630fc45bd230e35b0a82a55dd5ebaef6905ff808b7eb40e2519f1e6cdd8da59d49b", @ANYRES8=r2], 0x94}, 0x1, 0x0, 0x0, 0x881}, 0x0) listen(r0, 0x5) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a0901030602090401000001022000090401010101022000090501090002080706082501800f07000009040200000102200009040201"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 3.859703719s ago: executing program 2 (id=3682): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x4231, &(0x7f0000000300)={0x0, 0xb9d8, 0x20000, 0x3}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280), 0x1) 2.095481109s ago: executing program 6 (id=3683): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b5, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000200)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Xg\x00\x00\x00\x00\x00\xfd\x84\xa1\xeb\xa9\x91\xd8\x8c2\x130\xa0', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r3, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.862619366s ago: executing program 3 (id=3684): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000655000/0x1000)=nil, 0x1000, &(0x7f00000009c0)='\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070002002000000000000500000018000180140002007379000074756e00000000000000000008000500102700cce0bd526b8753493ec8755d28e8f2c2c11283510ba2c432314626ada269ff7989cc693603000000000000005c81c4bcea0569944f71e63d86df41b1a2ee1e382c5cb3dd6b4e2d27a9d93b6fb1b992d5f61ec47f15c1dca4751f4cabb00000000000000000"], 0x34}}, 0x894) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x24, r8, 0x101, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x845400}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x2c, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x841) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r12, &(0x7f0000000300)={&(0x7f0000000340)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/251, 0xfb}], 0x1}, 0x1f00) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000840)={0xf010002, @pix_mp={0x800, 0x93, 0x20343059, 0x7, 0x3, [{0x1, 0x3c9a}, {0x100, 0xfffffff7}, {0x101, 0x6}, {0x8, 0x1}, {0x1, 0x5}, {0x1}, {0xff, 0xf1}, {0x7f, 0xfff}], 0x2a, 0x7, 0xc, 0x2, 0x4}}) sendmsg$tipc(r13, &(0x7f0000000500)={0x0, 0xfffffff5, &(0x7f0000000540)=[{&(0x7f0000000580)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) timer_create(0x4, &(0x7f00000006c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000700)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) 1.344615052s ago: executing program 2 (id=3685): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0) r1 = syz_io_uring_setup(0x26cb, &(0x7f00000197c0)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000019840)=0x0, &(0x7f0000019880)=0x0, &(0x7f00000198c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000019900)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffff, 0x0, 0x0, 0x20, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x18, 0x30, 0x9, 0x70bd29, 0xffffffff, {}, [{0x4}]}, 0x18}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) syz_open_dev$MSR(&(0x7f0000000200), 0x171, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x5, 0xdc0, 0x0, &(0x7f0000000480), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000000680)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x47, &(0x7f0000019680)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000196c0)='./mnt\x00', 0x1ff) syz_open_dev$usbmon(&(0x7f0000000480), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000500), 0x77, 0x101301) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) 917.505864ms ago: executing program 3 (id=3686): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101, 0xff, 0xffffff00, 'dvmrp0\x00', 'macsec0\x00', {}, {0xff}, 0x8, 0x3, 0x9}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010100, 0xff, 0xff, 'syz_tun\x00', '\x00', {}, {0xff}, 0x32, 0x2, 0x26}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x8b4, {0x5}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x200001, 0x2, 0x1, 0xc}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) recvfrom$inet6(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r1, 0x0, 0x0) shutdown(r1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000400)="b203", 0x2, 0x0, &(0x7f0000000440)={0x2, 0x1234, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) mount(0x0, &(0x7f0000000340)='./trace\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket$alg(0x26, 0x5, 0x0) 24.948119ms ago: executing program 0 (id=3687): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0, 0x51}, 0x28) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000001bc0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40042, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x80000006) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.deny\x00', 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) signalfd(0xffffffffffffffff, &(0x7f0000000440)={[0xf]}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000480)={0xc, 0xffffffffffffffff, 'id0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x8}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r4, &(0x7f0000001c00)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f000001ac00)={0x7, 0x6, &(0x7f000001acc0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f000001ad00)='GPL\x00', 0x5, 0x29e, &(0x7f000001ad40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f000001ae40)='./file0\x00', &(0x7f000001ae80), 0x800) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="2f00111aca872387b17d071ae1cf7c000030000000040000f32e7598cd0d5db0ac06e4f34a4a00", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) 0s ago: executing program 3 (id=3688): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500003cae00000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000009500f9ffffffffffffff00"/27], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000700), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r3], 0x44}}, 0x0) (async) preadv(r3, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000009c0)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000100)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xc}) (rerun: 64) r5 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r6, r6, r5}, &(0x7f0000000680)=""/67, 0x43, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f00000004c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r8, 0x0) openat(r8, &(0x7f0000000500)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x9850c1, 0x182) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x46, 0x0, &(0x7f0000000000)='\x00', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): /input174 [ 1408.491415][ T5337] dvb-usb: schedule remote query interval to 1000 msecs. [ 1408.491433][ T5337] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1408.491447][ T5337] dvb-usb: bulk message failed: -22 (7/0) [ 1408.491460][ T5337] dvb-usb: bulk message failed: -22 (7/0) [ 1408.706631][ T987] usb 7-1: USB disconnect, device number 67 [ 1408.799666][T19754] udevd[19754]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1408.902073][T20280] netlink: 57 bytes leftover after parsing attributes in process `syz.0.3454'. [ 1408.906673][T20280] FAULT_INJECTION: forcing a failure. [ 1408.906673][T20280] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.906704][T20280] CPU: 0 UID: 0 PID: 20280 Comm: syz.0.3454 Tainted: G L syzkaller #0 PREEMPT(full) [ 1408.906731][T20280] Tainted: [L]=SOFTLOCKUP [ 1408.906738][T20280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1408.906751][T20280] Call Trace: [ 1408.906758][T20280] [ 1408.906767][T20280] dump_stack_lvl+0x100/0x190 [ 1408.906802][T20280] should_fail_ex.cold+0x5/0xa [ 1408.906833][T20280] should_failslab+0xc2/0x120 [ 1408.906866][T20280] __kmalloc_noprof+0xfc/0x840 [ 1408.906890][T20280] ? rcu_is_watching+0x13/0xc0 [ 1408.906918][T20280] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1408.906943][T20280] tomoyo_realpath_from_path+0xb6/0x690 [ 1408.906971][T20280] tomoyo_check_open_permission+0x2af/0x3c0 [ 1408.907002][T20280] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1408.907041][T20280] ? hook_file_open+0x248/0x8e0 [ 1408.907093][T20280] ? path_get+0x61/0x80 [ 1408.907118][T20280] tomoyo_file_open+0x6b/0x90 [ 1408.907144][T20280] security_file_open+0xb5/0x1e0 [ 1408.907165][T20280] do_dentry_open+0x588/0x14d0 [ 1408.907198][T20280] vfs_open+0x82/0x3f0 [ 1408.907229][T20280] path_openat+0x1a23/0x2450 [ 1408.907261][T20280] ? __pfx_path_openat+0x10/0x10 [ 1408.907298][T20280] do_file_open+0x20e/0x430 [ 1408.907328][T20280] ? __pfx_do_file_open+0x10/0x10 [ 1408.907378][T20280] ? _raw_spin_unlock+0x28/0x50 [ 1408.907405][T20280] ? alloc_fd+0x471/0x7a0 [ 1408.907445][T20280] do_sys_openat2+0x10f/0x1e0 [ 1408.907465][T20280] ? __pfx_do_sys_openat2+0x10/0x10 [ 1408.907499][T20280] __x64_sys_openat+0x12d/0x210 [ 1408.907521][T20280] ? __pfx___x64_sys_openat+0x10/0x10 [ 1408.907552][T20280] do_syscall_64+0x123/0x790 [ 1408.907582][T20280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.907602][T20280] RIP: 0033:0x7f2c2095ed8e [ 1408.907619][T20280] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1408.907639][T20280] RSP: 002b:00007f2c218f8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1408.907660][T20280] RAX: ffffffffffffffda RBX: 00007f2c218f96c0 RCX: 00007f2c2095ed8e [ 1408.907674][T20280] RDX: 0000000000141102 RSI: 00007f2c218f8c00 RDI: ffffffffffffff9c [ 1408.907687][T20280] RBP: 00007f2c218f8c00 R08: 0000000000000000 R09: 0000000000000000 [ 1408.907700][T20280] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1408.907711][T20280] R13: 00007f2c20c26038 R14: 00007f2c20c25fa0 R15: 00007ffea3ea0358 [ 1408.907739][T20280] [ 1408.907756][T20280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1409.770549][ T5715] dvb-usb: bulk message failed: -22 (7/0) [ 1409.770570][ T5715] dvb-usb: error while querying for an remote control event. [ 1409.771181][ T5715] usb 5-1: USB disconnect, device number 42 [ 1409.845583][T20282] can0: slcan on ttyS3. [ 1409.979269][T20272] Bluetooth: hci1: command 0x0406 tx timeout [ 1411.074117][ T5715] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1411.189597][T20284] can0 (unregistered): slcan off ttyS3. [ 1411.578240][ T987] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1412.245582][ T987] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1412.421961][ T987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.520598][ T987] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1412.763900][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.811589][ T987] usb 4-1: Product: syz [ 1412.811642][ T987] usb 4-1: Manufacturer: syz [ 1412.811667][ T987] usb 4-1: SerialNumber: syz [ 1413.516804][ T987] usb 4-1: config 0 descriptor?? [ 1413.544463][ T987] usb 4-1: can't set config #0, error -71 [ 1413.555876][T20310] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3460'. [ 1413.567601][ T987] usb 4-1: USB disconnect, device number 84 [ 1413.570803][T19334] net_ratelimit: 81 callbacks suppressed [ 1413.636743][T20310] bond0: (slave bond_slave_0): Releasing backup interface [ 1413.704121][T20310] bond_slave_0: entered promiscuous mode [ 1413.704137][T20310] bond_slave_0: entered allmulticast mode [ 1413.740694][T20315] netlink: 57 bytes leftover after parsing attributes in process `syz.3.3461'. [ 1413.833141][T20311] ªªªªª»: renamed from vlan0 (while UP) [ 1413.847777][T20315] FAULT_INJECTION: forcing a failure. [ 1413.847777][T20315] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.847811][T20315] CPU: 1 UID: 0 PID: 20315 Comm: syz.3.3461 Tainted: G L syzkaller #0 PREEMPT(full) [ 1413.847843][T20315] Tainted: [L]=SOFTLOCKUP [ 1413.847851][T20315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1413.847863][T20315] Call Trace: [ 1413.847870][T20315] [ 1413.847879][T20315] dump_stack_lvl+0x100/0x190 [ 1413.847913][T20315] should_fail_ex.cold+0x5/0xa [ 1413.847938][T20315] should_failslab+0xc2/0x120 [ 1413.847967][T20315] __kmalloc_noprof+0xfc/0x840 [ 1413.847989][T20315] ? rcu_is_watching+0x13/0xc0 [ 1413.848015][T20315] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1413.848038][T20315] tomoyo_realpath_from_path+0xb6/0x690 [ 1413.848062][T20315] tomoyo_check_open_permission+0x2af/0x3c0 [ 1413.848095][T20315] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1413.848132][T20315] ? hook_file_open+0x248/0x8e0 [ 1413.848170][T20315] ? path_get+0x61/0x80 [ 1413.848191][T20315] tomoyo_file_open+0x6b/0x90 [ 1413.848213][T20315] security_file_open+0xb5/0x1e0 [ 1413.848233][T20315] do_dentry_open+0x588/0x14d0 [ 1413.848266][T20315] vfs_open+0x82/0x3f0 [ 1413.848299][T20315] path_openat+0x1a23/0x2450 [ 1413.848331][T20315] ? __pfx_path_openat+0x10/0x10 [ 1413.848368][T20315] do_file_open+0x20e/0x430 [ 1413.848399][T20315] ? __pfx_do_file_open+0x10/0x10 [ 1413.848447][T20315] ? _raw_spin_unlock+0x28/0x50 [ 1413.848472][T20315] ? alloc_fd+0x471/0x7a0 [ 1413.848509][T20315] do_sys_openat2+0x10f/0x1e0 [ 1413.848528][T20315] ? __pfx_do_sys_openat2+0x10/0x10 [ 1413.848557][T20315] __x64_sys_openat+0x12d/0x210 [ 1413.848577][T20315] ? __pfx___x64_sys_openat+0x10/0x10 [ 1413.848606][T20315] do_syscall_64+0x123/0x790 [ 1413.848645][T20315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.848667][T20315] RIP: 0033:0x7fc0a535ed8e [ 1413.848686][T20315] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1413.848706][T20315] RSP: 002b:00007fc0a61a0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1413.848727][T20315] RAX: ffffffffffffffda RBX: 00007fc0a61a16c0 RCX: 00007fc0a535ed8e [ 1413.848741][T20315] RDX: 0000000000141102 RSI: 00007fc0a61a0c00 RDI: ffffffffffffff9c [ 1413.848754][T20315] RBP: 00007fc0a61a0c00 R08: 0000000000000000 R09: 0000000000000000 [ 1413.848767][T20315] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1413.848782][T20315] R13: 00007fc0a5626038 R14: 00007fc0a5625fa0 R15: 00007ffeda4de388 [ 1413.848812][T20315] [ 1413.848889][T20315] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1416.173806][ T30] audit: type=1400 audit(1700001092.814:2647): avc: denied { write } for pid=20312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.286860][ T30] audit: type=1400 audit(1700001092.926:2648): avc: denied { write } for pid=20349 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.626037][ T5715] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1416.642698][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3470'. [ 1416.858779][ T5715] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1417.011357][ T5715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.011455][ T5715] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1417.011511][ T5715] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1417.011625][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.716034][ T30] audit: type=1400 audit(1700001095.190:2649): avc: denied { write } for pid=20354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1418.800517][ T5715] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 1418.800542][ T5715] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1418.800553][ T5715] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1418.815395][ T5715] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 1418.839589][ T5715] usb 5-1: USB disconnect, device number 43 [ 1418.955793][ T30] audit: type=1400 audit(1700001095.415:2650): avc: denied { write } for pid=20375 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1419.068803][ T9245] net_ratelimit: 64 callbacks suppressed [ 1419.621288][T20384] netlink: 57 bytes leftover after parsing attributes in process `syz.3.3476'. [ 1419.666733][T20384] FAULT_INJECTION: forcing a failure. [ 1419.666733][T20384] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.666760][T20384] CPU: 0 UID: 0 PID: 20384 Comm: syz.3.3476 Tainted: G L syzkaller #0 PREEMPT(full) [ 1419.666779][T20384] Tainted: [L]=SOFTLOCKUP [ 1419.666784][T20384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1419.666791][T20384] Call Trace: [ 1419.666796][T20384] [ 1419.666801][T20384] dump_stack_lvl+0x100/0x190 [ 1419.666822][T20384] should_fail_ex.cold+0x5/0xa [ 1419.666839][T20384] should_failslab+0xc2/0x120 [ 1419.666858][T20384] __kmalloc_noprof+0xfc/0x840 [ 1419.666877][T20384] ? rcu_is_watching+0x13/0xc0 [ 1419.666895][T20384] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1419.666910][T20384] tomoyo_realpath_from_path+0xb6/0x690 [ 1419.666926][T20384] tomoyo_check_open_permission+0x2af/0x3c0 [ 1419.666944][T20384] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1419.666964][T20384] ? hook_file_open+0x248/0x8e0 [ 1419.666988][T20384] ? path_get+0x61/0x80 [ 1419.667001][T20384] tomoyo_file_open+0x6b/0x90 [ 1419.667015][T20384] security_file_open+0xb5/0x1e0 [ 1419.667026][T20384] do_dentry_open+0x588/0x14d0 [ 1419.667045][T20384] vfs_open+0x82/0x3f0 [ 1419.667064][T20384] path_openat+0x1a23/0x2450 [ 1419.667084][T20384] ? __pfx_path_openat+0x10/0x10 [ 1419.667104][T20384] do_file_open+0x20e/0x430 [ 1419.667122][T20384] ? __pfx_do_file_open+0x10/0x10 [ 1419.667149][T20384] ? _raw_spin_unlock+0x28/0x50 [ 1419.667164][T20384] ? alloc_fd+0x471/0x7a0 [ 1419.667185][T20384] do_sys_openat2+0x10f/0x1e0 [ 1419.667197][T20384] ? __pfx_do_sys_openat2+0x10/0x10 [ 1419.667214][T20384] __x64_sys_openat+0x12d/0x210 [ 1419.667226][T20384] ? __pfx___x64_sys_openat+0x10/0x10 [ 1419.667243][T20384] do_syscall_64+0x123/0x790 [ 1419.667261][T20384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.667273][T20384] RIP: 0033:0x7fc0a535ed8e [ 1419.667284][T20384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1419.667296][T20384] RSP: 002b:00007fc0a61a0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1419.667308][T20384] RAX: ffffffffffffffda RBX: 00007fc0a61a16c0 RCX: 00007fc0a535ed8e [ 1419.667316][T20384] RDX: 0000000000141102 RSI: 00007fc0a61a0c00 RDI: ffffffffffffff9c [ 1419.667323][T20384] RBP: 00007fc0a61a0c00 R08: 0000000000000000 R09: 0000000000000000 [ 1419.667330][T20384] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1419.667337][T20384] R13: 00007fc0a5626038 R14: 00007fc0a5625fa0 R15: 00007ffeda4de388 [ 1419.667353][T20384] [ 1419.667358][T20384] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1421.481438][ T5715] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1421.618844][T20411] bridge0: port 3(syz_tun) entered blocking state [ 1421.619001][T20411] bridge0: port 3(syz_tun) entered disabled state [ 1421.619172][T20411] syz_tun: entered allmulticast mode [ 1421.644066][T20411] syz_tun: entered promiscuous mode [ 1421.644550][T20411] bridge0: port 3(syz_tun) entered blocking state [ 1421.644634][T20411] bridge0: port 3(syz_tun) entered forwarding state [ 1421.645650][ T5715] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1421.649908][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.650286][T20411] syz_tun: left allmulticast mode [ 1421.650304][T20411] syz_tun: left promiscuous mode [ 1421.650527][T20411] bridge0: port 3(syz_tun) entered disabled state [ 1421.714778][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.714790][ T5715] usb 5-1: Product: syz [ 1421.714798][ T5715] usb 5-1: Manufacturer: syz [ 1421.714807][ T5715] usb 5-1: SerialNumber: syz [ 1421.792566][T20411] bridge_slave_1: left allmulticast mode [ 1421.792587][T20411] bridge_slave_1: left promiscuous mode [ 1421.792763][T20411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.796565][ T5715] usb 5-1: config 0 descriptor?? [ 1421.873205][ T30] audit: type=1400 audit(1700001098.146:2651): avc: denied { write } for pid=20393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1421.885202][T20411] bridge_slave_0: left allmulticast mode [ 1421.885219][T20411] bridge_slave_0: left promiscuous mode [ 1421.885385][T20411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.049669][ T30] audit: type=1400 audit(1700001098.314:2652): avc: denied { bind } for pid=20415 comm="syz.3.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1422.286203][ T30] audit: type=1400 audit(1700001098.529:2653): avc: denied { write } for pid=20417 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1424.006682][T14573] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1424.034452][T20438] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3483'. [ 1424.076507][T20432] rxe_eth0 speed is unknown, defaulting to 1000 [ 1424.167011][T14573] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1424.168257][T14573] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1424.172356][T14573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.172375][T14573] usb 1-1: Product: syz [ 1424.172390][T14573] usb 1-1: Manufacturer: syz [ 1424.172405][T14573] usb 1-1: SerialNumber: syz [ 1424.227354][T14573] usb 1-1: config 0 descriptor?? [ 1424.234129][ T5715] usb 5-1: USB disconnect, device number 44 [ 1424.380025][ T987] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1424.433916][ C0] net_ratelimit: 96 callbacks suppressed [ 1424.570797][ T987] usb 3-1: Using ep0 maxpacket: 16 [ 1424.571593][ T987] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 1424.571627][ T987] usb 3-1: too many configurations: 129, using maximum allowed: 8 [ 1424.572588][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.572603][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 58912, setting to 1024 [ 1424.572619][ T987] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1424.572634][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1424.573655][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.573670][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 58912, setting to 1024 [ 1424.573685][ T987] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1424.573700][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1424.574657][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.574682][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 58912, setting to 1024 [ 1424.574707][ T987] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1424.574730][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1424.578187][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.578212][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 58912, setting to 1024 [ 1424.578238][ T987] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1424.578263][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1424.579316][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.579341][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 58912, setting to 1024 [ 1424.579366][ T987] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1424.579389][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1424.580510][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.580528][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 58912, setting to 1024 [ 1424.580543][ T987] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1424.580558][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1424.616578][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.616600][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 58912, setting to 1024 [ 1424.616623][ T987] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1424.616645][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1424.659192][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.659215][ T987] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 58912, setting to 1024 [ 1424.659240][ T987] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1424.659261][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1424.659305][ T987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.863451][ T987] usb 3-1: config 0 descriptor?? [ 1424.882082][T20445] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1425.257837][T20432] lo speed is unknown, defaulting to 1000 [ 1425.273667][ T987] input: HID 172f:0502 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:172F:0502.0041/input/input175 [ 1425.445304][ T987] waltop 0003:172F:0502.0041: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.2-1/input0 [ 1425.472421][ T987] usb 3-1: USB disconnect, device number 107 [ 1425.661510][T20453] fido_id[20453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1426.517622][ T5337] usb 1-1: USB disconnect, device number 47 [ 1427.950383][T20475] netlink: 'syz.0.3490': attribute type 1 has an invalid length. [ 1429.258627][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'. [ 1429.279284][T20487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'. [ 1429.819860][ C0] net_ratelimit: 70 callbacks suppressed [ 1432.035412][ T5790] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1432.674730][ T5790] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1432.677732][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.677744][ T5790] usb 4-1: Product: syz [ 1432.677752][ T5790] usb 4-1: Manufacturer: syz [ 1432.677761][ T5790] usb 4-1: SerialNumber: syz [ 1432.679312][ T5790] usb 4-1: config 0 descriptor?? [ 1432.681686][ T5790] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1432.684974][ T5790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1432.685591][ T5790] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1432.685640][ T5790] usb 4-1: media controller created [ 1432.811593][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1433.137373][ T5790] DVB: Unable to find symbol mt352_attach() [ 1433.208860][ T10] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1433.240237][ T5790] DVB: Unable to find symbol nxt6000_attach() [ 1433.240242][ T5790] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1433.267841][ T5790] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input176 [ 1433.289925][ T5790] dvb-usb: schedule remote query interval to 1000 msecs. [ 1433.289941][ T5790] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1433.289956][ T5790] dvb-usb: bulk message failed: -22 (7/0) [ 1433.289969][ T5790] dvb-usb: bulk message failed: -22 (7/0) [ 1433.403609][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1433.403648][ T10] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1433.418726][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.418744][ T10] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1433.428334][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.428351][ T10] usb 7-1: Product: syz [ 1433.428365][ T10] usb 7-1: Manufacturer: syz [ 1433.428378][ T10] usb 7-1: SerialNumber: syz [ 1433.967363][T20536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.986473][T20536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.099442][ T9241] rpcbind: server 127.0.0.1 not responding, timed out [ 1434.268498][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1434.358155][ T10] usb 7-1: USB disconnect, device number 68 [ 1434.363309][ T5337] usb 4-1: USB disconnect, device number 85 [ 1434.443817][T20277] udevd[20277]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1434.613644][ T30] audit: type=1400 audit(1700001110.063:2654): avc: denied { write } for pid=20553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1435.186744][ C0] net_ratelimit: 70 callbacks suppressed [ 1435.527249][T20573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3512'. [ 1435.638788][ T5337] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1435.831922][ T30] audit: type=1400 audit(1700001111.204:2655): avc: denied { write } for pid=20575 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1436.074994][T20581] netlink: 'syz.0.3510': attribute type 1 has an invalid length. [ 1436.498700][T20592] netlink: 57 bytes leftover after parsing attributes in process `syz.3.3517'. [ 1436.514253][T20592] FAULT_INJECTION: forcing a failure. [ 1436.514253][T20592] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.514287][T20592] CPU: 0 UID: 0 PID: 20592 Comm: syz.3.3517 Tainted: G L syzkaller #0 PREEMPT(full) [ 1436.514315][T20592] Tainted: [L]=SOFTLOCKUP [ 1436.514323][T20592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1436.514334][T20592] Call Trace: [ 1436.514341][T20592] [ 1436.514350][T20592] dump_stack_lvl+0x100/0x190 [ 1436.514386][T20592] should_fail_ex.cold+0x5/0xa [ 1436.514415][T20592] should_failslab+0xc2/0x120 [ 1436.514444][T20592] __kmalloc_noprof+0xfc/0x840 [ 1436.514469][T20592] ? rcu_is_watching+0x13/0xc0 [ 1436.514500][T20592] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1436.514526][T20592] tomoyo_realpath_from_path+0xb6/0x690 [ 1436.514552][T20592] tomoyo_check_open_permission+0x2af/0x3c0 [ 1436.514581][T20592] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1436.514618][T20592] ? hook_file_open+0x248/0x8e0 [ 1436.514662][T20592] ? path_get+0x61/0x80 [ 1436.514684][T20592] tomoyo_file_open+0x6b/0x90 [ 1436.514707][T20592] security_file_open+0xb5/0x1e0 [ 1436.514726][T20592] do_dentry_open+0x588/0x14d0 [ 1436.514759][T20592] vfs_open+0x82/0x3f0 [ 1436.514793][T20592] path_openat+0x1a23/0x2450 [ 1436.514822][T20592] ? __pfx_path_openat+0x10/0x10 [ 1436.514855][T20592] do_file_open+0x20e/0x430 [ 1436.514884][T20592] ? __pfx_do_file_open+0x10/0x10 [ 1436.514932][T20592] ? _raw_spin_unlock+0x28/0x50 [ 1436.514958][T20592] ? alloc_fd+0x471/0x7a0 [ 1436.514996][T20592] do_sys_openat2+0x10f/0x1e0 [ 1436.515017][T20592] ? __pfx_do_sys_openat2+0x10/0x10 [ 1436.515049][T20592] __x64_sys_openat+0x12d/0x210 [ 1436.515070][T20592] ? __pfx___x64_sys_openat+0x10/0x10 [ 1436.515105][T20592] do_syscall_64+0x123/0x790 [ 1436.515138][T20592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.515159][T20592] RIP: 0033:0x7fc0a535ed8e [ 1436.515177][T20592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1436.515239][T20592] RSP: 002b:00007fc0a61a0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1436.515262][T20592] RAX: ffffffffffffffda RBX: 00007fc0a61a16c0 RCX: 00007fc0a535ed8e [ 1436.515274][T20592] RDX: 0000000000141102 RSI: 00007fc0a61a0c00 RDI: ffffffffffffff9c [ 1436.515286][T20592] RBP: 00007fc0a61a0c00 R08: 0000000000000000 R09: 0000000000000000 [ 1436.515297][T20592] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1436.515308][T20592] R13: 00007fc0a5626038 R14: 00007fc0a5625fa0 R15: 00007ffeda4de388 [ 1436.515333][T20592] [ 1436.516880][T20592] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1440.626004][T19711] net_ratelimit: 42 callbacks suppressed [ 1440.976133][ T5337] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1441.009851][ T30] audit: type=1400 audit(1700001116.040:2656): avc: denied { write } for pid=20585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 ** 27331 printk messages dropped ** ** 66675 printk messages dropped ** ** 68077 printk messages dropped ** ** 255 printk messages dropped ** ** 241 printk messages dropped ** ** 235 printk messages dropped ** ** 240 printk messages dropped ** ** 241 printk messages dropped ** ** 242 printk messages dropped ** ** 287 printk messages dropped ** ** 243 printk messages dropped ** ** 241 printk messages dropped ** ** 237 printk messages dropped ** ** 239 printk messages dropped ** ** 241 printk messages dropped ** ** 243 printk messages dropped ** ** 29010 printk messages dropped ** ** 262 printk messages dropped ** ** 239 printk messages dropped ** ** 238 printk messages dropped ** ** 243 printk messages dropped ** ** 241 printk messages dropped ** ** 238 printk messages dropped ** ** 241 printk messages dropped ** ** 243 printk messages dropped ** ** 241 printk messages dropped ** ** 233 printk messages dropped ** ** 171 printk messages dropped ** ** 199 printk messages dropped ** ** 209 printk messages dropped ** ** 262 printk messages dropped ** ** 240 printk messages dropped ** ** 242 printk messages dropped ** ** 243 printk messages dropped ** ** 239 printk messages dropped ** ** 4015 printk messages dropped ** ** 359 printk messages dropped ** ** 247 printk messages dropped ** ** 269 printk messages dropped ** ** 269 printk messages dropped ** ** 1127 printk messages dropped ** ** 365 printk messages dropped ** ** 354 printk messages dropped ** ** 248 printk messages dropped ** ** 169 printk messages dropped ** ** 334 printk messages dropped ** ** 251 printk messages dropped ** ** 356 printk messages dropped ** ** 312 printk messages dropped ** ** 357 printk messages dropped ** ** 236 printk messages dropped ** ** 299 printk messages dropped ** ** 242 printk messages dropped ** ** 250 printk messages dropped ** ** 244 printk messages dropped ** ** 27968 printk messages dropped ** ** 2275 printk messages dropped ** ** 253 printk messages dropped ** ** 238 printk messages dropped ** ** 240 printk messages dropped ** ** 241 printk messages dropped ** ** 246 printk messages dropped ** ** 236 printk messages dropped ** ** 242 printk messages dropped ** ** 243 printk messages dropped ** ** 238 printk messages dropped ** ** 242 printk messages dropped ** ** 241 printk messages dropped ** ** 237 printk messages dropped ** ** 242 printk messages dropped ** ** 241 printk messages dropped ** ** 390 printk messages dropped ** ** 240 printk messages dropped ** ** 152 printk messages dropped ** ** 237 printk messages dropped ** ** 242 printk messages dropped ** ** 241 printk messages dropped ** ** 227 printk messages dropped ** ** 240 printk messages dropped ** ** 242 printk messages dropped ** ** 242 printk messages dropped ** ** 353 printk messages dropped ** ** 242 printk messages dropped ** ** 238 printk messages dropped ** ** 245 printk messages dropped ** ** 258 printk messages dropped ** ** 242 printk messages dropped ** ** 297 printk messages dropped ** ** 247 printk messages dropped ** ** 244 printk messages dropped ** ** 234 printk messages dropped ** ** 340 printk messages dropped ** ** 242 printk messages dropped ** ** 246 printk messages dropped ** ** 246 printk messages dropped ** ** 289 printk messages dropped ** ** 353 printk messages dropped ** ** 247 printk messages dropped ** ** 354 printk messages dropped ** ** 243 printk messages dropped ** ** 240 printk messages dropped ** ** 238 printk messages dropped ** ** 242 printk messages dropped ** ** 231 printk messages dropped ** ** 294 printk messages dropped ** ** 246 printk messages dropped ** ** 246 printk messages dropped ** ** 248 printk messages dropped ** ** 247 printk messages dropped ** ** 269 printk messages dropped ** ** 246 printk messages dropped ** ** 366 printk messages dropped ** ** 243 printk messages dropped ** ** 248 printk messages dropped ** ** 246 printk messages dropped ** ** 244 printk messages dropped ** ** 364 printk messages dropped ** ** 250 printk messages dropped ** ** 253 printk messages dropped ** ** 246 printk messages dropped ** ** 245 printk messages dropped ** ** 381 printk messages dropped ** ** 242 printk messages dropped ** ** 242 printk messages dropped ** ** 251 printk messages dropped ** ** 279 printk messages dropped ** ** 352 printk messages dropped ** ** 246 printk messages dropped ** ** 247 printk messages dropped ** ** 245 printk messages dropped ** ** 273 printk messages dropped ** ** 246 printk messages dropped ** ** 355 printk messages dropped ** ** 168 printk messages dropped ** ** 244 printk messages dropped ** ** 244 printk messages dropped ** ** 273 printk messages dropped ** ** 245 printk messages dropped ** ** 349 printk messages dropped ** ** 244 printk messages dropped ** ** 241 printk messages dropped ** ** 241 printk messages dropped ** ** 406 printk messages dropped ** ** 243 printk messages dropped ** ** 246 printk messages dropped ** ** 246 printk messages dropped ** ** 245 printk messages dropped ** ** 352 printk messages dropped ** ** 245 printk messages dropped ** ** 243 printk messages dropped ** ** 510 printk messages dropped ** ** 275 printk messages dropped ** ** 248 printk messages dropped ** ** 246 printk messages dropped ** ** 69802 printk messages dropped ** [ 1446.326040][ C1] net_ratelimit: 46 callbacks suppressed ** 675 printk messages dropped ** ** 246 printk messages dropped ** ** 242 printk messages dropped ** ** 242 printk messages dropped ** ** 242 printk messages dropped ** ** 241 printk messages dropped ** ** 242 printk messages dropped ** ** 236 printk messages dropped ** ** 242 printk messages dropped ** ** 242 printk messages dropped ** ** 162 printk messages dropped ** ** 244 printk messages dropped ** ** 243 printk messages dropped ** ** 245 printk messages dropped ** ** 244 printk messages dropped ** ** 242 printk messages dropped ** ** 238 printk messages dropped ** ** 247 printk messages dropped ** ** 243 printk messages dropped ** ** 242 printk messages dropped ** ** 250 printk messages dropped ** ** 244 printk messages dropped ** ** 243 printk messages dropped ** ** 241 printk messages dropped ** ** 244 printk messages dropped ** ** 243 printk messages dropped ** ** 240 printk messages dropped ** ** 242 printk messages dropped ** ** 242 printk messages dropped ** ** 530 printk messages dropped ** ** 245 printk messages dropped ** ** 245 printk messages dropped ** ** 244 printk messages dropped ** ** 240 printk messages dropped ** ** 240 printk messages dropped ** ** 359 printk messages dropped ** ** 246 printk messages dropped ** ** 244 printk messages dropped ** ** 249 printk messages dropped ** ** 239 printk messages dropped ** ** 291 printk messages dropped ** ** 168 printk messages dropped ** ** 242 printk messages dropped ** ** 283 printk messages dropped ** ** 243 printk messages dropped ** ** 259 printk messages dropped ** ** 277 printk messages dropped ** ** 244 printk messages dropped ** ** 243 printk messages dropped ** ** 246 printk messages dropped ** ** 246 printk messages dropped ** ** 241 printk messages dropped ** ** 241 printk messages dropped ** ** 260 printk messages dropped ** ** 248 printk messages dropped ** ** 243 printk messages dropped ** ** 2569 printk messages dropped ** ** 294 printk messages dropped ** ** 242 printk messages dropped ** ** 70095 printk messages dropped ** ** 261 printk messages dropped ** ** 241 printk messages dropped ** ** 240 printk messages dropped ** ** 241 printk messages dropped ** ** 240 printk messages dropped ** ** 241 printk messages dropped ** ** 236 printk messages dropped ** ** 240 printk messages dropped ** ** 240 printk messages dropped ** ** 229 printk messages dropped ** ** 241 printk messages dropped ** ** 242 printk messages dropped ** ** 241 printk messages dropped ** ** 240 printk messages dropped ** ** 241 printk messages dropped ** ** 242 printk messages dropped ** ** 259 printk messages dropped ** ** 245 printk messages dropped ** ** 240 printk messages dropped ** ** 237 printk messages dropped ** ** 241 printk messages dropped ** ** 243 printk messages dropped ** ** 239 printk messages dropped ** ** 240 printk messages dropped ** ** 242 printk messages dropped ** ** 235 printk messages dropped ** ** 156 printk messages dropped ** ** 241 printk messages dropped ** ** 239 printk messages dropped ** ** 240 printk messages dropped ** ** 241 printk messages dropped ** ** 240 printk messages dropped ** ** 241 printk messages dropped ** ** 242 printk messages dropped ** ** 243 printk messages dropped ** ** 303 printk messages dropped ** ** 242 printk messages dropped ** ** 240 printk messages dropped ** ** 647 printk messages dropped ** ** 241 printk messages dropped ** ** 241 printk messages dropped ** ** 240 printk messages dropped ** ** 241 printk messages dropped ** ** 247 printk messages dropped ** ** 241 printk messages dropped ** ** 240 printk messages dropped ** ** 248 printk messages dropped ** ** 241 printk messages dropped ** ** 241 printk messages dropped ** ** 390 printk messages dropped ** ** 350 printk messages dropped ** ** 239 printk messages dropped ** ** 240 printk messages dropped ** ** 242 printk messages dropped ** ** 239 printk messages dropped ** ** 306 printk messages dropped ** ** 194 printk messages dropped ** ** 242 printk messages dropped ** ** 242 printk messages dropped ** ** 244 printk messages dropped ** ** 246 printk messages dropped ** ** 241 printk messages dropped ** ** 248 printk messages dropped ** ** 241 printk messages dropped ** ** 297 printk messages dropped ** ** 242 printk messages dropped ** ** 241 printk messages dropped ** ** 287 printk messages dropped ** ** 290 printk messages dropped ** ** 232 printk messages dropped ** ** 259 printk messages dropped ** ** 243 printk messages dropped ** ** 242 printk messages dropped ** ** 243 printk messages dropped ** ** 363 printk messages dropped ** ** 241 printk messages dropped ** ** 242 printk messages dropped ** ** 297 printk messages dropped ** ** 245 printk messages dropped ** ** 242 printk messages dropped ** ** 241 printk messages dropped ** ** 258 printk messages dropped ** ** 351 printk messages dropped ** ** 244 printk messages dropped ** ** 242 printk messages dropped ** ** 244 printk messages dropped ** ** 168 printk messages dropped ** ** 374 printk messages dropped ** ** 248 printk messages dropped ** ** 246 printk messages dropped ** ** 246 printk messages dropped ** ** 242 printk messages dropped ** ** 245 printk messages dropped ** ** 240 printk messages dropped ** ** 243 printk messages dropped ** ** 241 printk messages dropped ** ** 388 printk messages dropped ** ** 244 printk messages dropped ** ** 241 printk messages dropped ** ** 243 printk messages dropped ** ** 321 printk messages dropped ** ** 244 printk messages dropped ** ** 246 printk messages dropped ** ** 250 printk messages dropped ** ** 242 printk messages dropped ** ** 241 printk messages dropped ** ** 305 printk messages dropped ** ** 245 printk messages dropped ** ** 296 printk messages dropped ** ** 250 printk messages dropped ** ** 278 printk messages dropped ** ** 243 printk messages dropped ** ** 242 printk messages dropped ** ** 274 printk messages dropped ** ** 258 printk messages dropped ** ** 242 printk messages dropped ** ** 242 printk messages dropped ** ** 253 printk messages dropped ** ** 243 printk messages dropped ** ** 237 printk messages dropped ** ** 343 printk messages dropped ** ** 243 printk messages dropped ** ** 238 printk messages dropped ** ** 251 printk messages dropped ** ** 256 printk messages dropped ** ** 244 printk messages dropped ** ** 248 printk messages dropped ** ** 245 printk messages dropped ** ** 241 printk messages dropped ** ** 247 printk messages dropped ** ** 249 printk messages dropped ** ** 248 printk messages dropped ** ** 241 printk messages dropped ** ** 249 printk messages dropped ** ** 247 printk messages dropped ** ** 245 printk messages dropped ** ** 240 printk messages dropped ** ** 242 printk messages dropped ** ** 249 printk messages dropped ** ** 245 printk messages dropped ** ** 243 printk messages dropped ** ** 242 printk messages dropped ** ** 355 printk messages dropped ** ** 243 printk messages dropped ** ** 422 printk messages dropped ** ** 244 printk messages dropped ** ** 242 printk messages dropped ** ** 258 printk messages dropped ** ** 245 printk messages dropped ** ** 243 printk messages dropped ** ** 250 printk messages dropped ** ** 242 printk messages dropped ** ** 241 printk messages dropped ** ** 457 printk messages dropped ** ** 243 printk messages dropped ** ** 248 printk messages dropped ** ** 243 printk messages dropped ** ** 247 printk messages dropped ** ** 240 printk messages dropped ** ** 243 printk messages dropped ** ** 241 printk messages dropped ** ** 285 printk messages dropped ** ** 245 printk messages dropped ** ** 242 printk messages dropped ** ** 242 printk messages dropped ** ** 246 printk messages dropped ** ** 243 printk messages dropped ** ** 240 printk messages dropped ** ** 247 printk messages dropped ** ** 245 printk messages dropped ** ** 243 printk messages dropped ** ** 254 printk messages dropped ** ** 246 printk messages dropped ** ** 245 printk messages dropped ** ** 251 printk messages dropped ** ** 241 printk messages dropped ** ** 244 printk messages dropped ** ** 238 printk messages dropped ** ** 198 printk messages dropped ** ** 313 printk messages dropped ** ** 246 printk messages dropped ** ** 245 printk messages dropped ** ** 243 printk messages dropped ** ** 250 printk messages dropped ** ** 246 printk messages dropped ** ** 349 printk messages dropped ** ** 245 printk messages dropped ** ** 246 printk messages dropped ** ** 250 printk messages dropped ** ** 243 printk messages dropped ** ** 242 printk messages dropped ** ** 247 printk messages dropped ** ** 345 printk messages dropped ** ** 244 printk messages dropped ** ** 246 printk messages dropped ** ** 246 printk messages dropped ** ** 243 printk messages dropped ** ** 241 printk messages dropped ** ** 246 printk messages dropped ** ** 246 printk messages dropped ** ** 243 printk messages dropped ** ** 241 printk messages dropped ** ** 246 printk messages dropped ** ** 245 printk messages dropped ** ** 239 printk messages dropped ** ** 244 printk messages dropped ** ** 246 printk messages dropped ** ** 246 printk messages dropped ** ** 242 printk messages dropped ** ** 259 printk messages dropped ** ** 183 printk messages dropped ** ** 248 printk messages dropped ** ** 351 printk messages dropped ** ** 245 printk messages dropped ** ** 244 printk messages dropped ** ** 242 printk messages dropped ** ** 243 printk messages dropped ** ** 311 printk messages dropped ** ** 246 printk messages dropped ** ** 243 printk messages dropped ** ** 258 printk messages dropped ** ** 244 printk messages dropped ** ** 248 printk messages dropped ** ** 244 printk messages dropped ** ** 247 printk messages dropped ** ** 243 printk messages dropped ** ** 360 printk messages dropped ** ** 286 printk messages dropped ** ** 244 printk messages dropped ** ** 248 printk messages dropped ** ** 243 printk messages dropped ** ** 244 printk messages dropped ** ** 305 printk messages dropped ** ** 243 printk messages dropped ** ** 284 printk messages dropped ** ** 242 printk messages dropped ** ** 244 printk messages dropped ** ** 242 printk messages dropped ** ** 248 printk messages dropped ** ** 243 printk messages dropped ** ** 192 printk messages dropped ** ** 321 printk messages dropped ** ** 244 printk messages dropped ** ** 237 printk messages dropped ** ** 361 printk messages dropped ** ** 243 printk messages dropped ** ** 245 printk messages dropped ** ** 246 printk messages dropped ** ** 247 printk messages dropped ** ** 248 printk messages dropped ** ** 243 printk messages dropped ** ** 247 printk messages dropped ** ** 294 printk messages dropped ** ** 243 printk messages dropped ** ** 244 printk messages dropped ** ** 251 printk messages dropped ** ** 267 printk messages dropped ** ** 358 printk messages dropped ** ** 250 printk messages dropped ** ** 246 printk messages dropped ** ** 231 printk messages dropped ** ** 239 printk messages dropped ** ** 248 printk messages dropped ** ** 307 printk messages dropped ** ** 248 printk messages dropped ** ** 243 printk messages dropped ** ** 242 printk messages dropped ** ** 233 printk messages dropped ** ** 342 printk messages dropped ** ** 246 printk messages dropped ** ** 235 printk messages dropped ** ** 167 printk messages dropped ** ** 245 printk messages dropped ** ** 244 printk messages dropped ** ** 243 printk messages dropped ** ** 240 printk messages dropped ** ** 338 printk messages dropped ** ** 238 printk messages dropped ** ** 241 printk messages dropped ** ** 145 printk messages dropped ** ** 3068 printk messages dropped ** [ 1448.732389][T20650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3529'. [ 1448.732403][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3529'. [ 1448.957377][ T30] audit: type=1400 audit(1700001123.477:2658): avc: denied { write } for pid=20652 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1450.557564][T20671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.885154][ C0] net_ratelimit: 83 callbacks suppressed [ 1453.072117][T14573] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1453.129879][T20704] netlink: 57 bytes leftover after parsing attributes in process `syz.0.3540'. [ 1453.185087][T20704] FAULT_INJECTION: forcing a failure. [ 1453.185087][T20704] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.185121][T20704] CPU: 1 UID: 0 PID: 20704 Comm: syz.0.3540 Tainted: G L syzkaller #0 PREEMPT(full) [ 1453.185150][T20704] Tainted: [L]=SOFTLOCKUP [ 1453.185158][T20704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1453.185171][T20704] Call Trace: [ 1453.185178][T20704] [ 1453.185187][T20704] dump_stack_lvl+0x100/0x190 [ 1453.185223][T20704] should_fail_ex.cold+0x5/0xa [ 1453.185250][T20704] should_failslab+0xc2/0x120 [ 1453.185279][T20704] __kmalloc_noprof+0xfc/0x840 [ 1453.185304][T20704] ? rcu_is_watching+0x13/0xc0 [ 1453.185332][T20704] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1453.185358][T20704] tomoyo_realpath_from_path+0xb6/0x690 [ 1453.185384][T20704] tomoyo_check_open_permission+0x2af/0x3c0 [ 1453.185414][T20704] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1453.185449][T20704] ? hook_file_open+0x248/0x8e0 [ 1453.185493][T20704] ? path_get+0x61/0x80 [ 1453.185514][T20704] tomoyo_file_open+0x6b/0x90 [ 1453.185536][T20704] security_file_open+0xb5/0x1e0 [ 1453.185556][T20704] do_dentry_open+0x588/0x14d0 [ 1453.185588][T20704] vfs_open+0x82/0x3f0 [ 1453.185620][T20704] path_openat+0x1a23/0x2450 [ 1453.185653][T20704] ? __pfx_path_openat+0x10/0x10 [ 1453.185689][T20704] do_file_open+0x20e/0x430 [ 1453.185719][T20704] ? __pfx_do_file_open+0x10/0x10 [ 1453.185776][T20704] ? _raw_spin_unlock+0x28/0x50 [ 1453.185801][T20704] ? alloc_fd+0x471/0x7a0 [ 1453.185841][T20704] do_sys_openat2+0x10f/0x1e0 [ 1453.185861][T20704] ? __pfx_do_sys_openat2+0x10/0x10 [ 1453.185890][T20704] __x64_sys_openat+0x12d/0x210 [ 1453.185910][T20704] ? __pfx___x64_sys_openat+0x10/0x10 [ 1453.185948][T20704] do_syscall_64+0x123/0x790 [ 1453.185982][T20704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.186004][T20704] RIP: 0033:0x7f2c2095ed8e [ 1453.186022][T20704] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1453.186041][T20704] RSP: 002b:00007f2c218f8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1453.186061][T20704] RAX: ffffffffffffffda RBX: 00007f2c218f96c0 RCX: 00007f2c2095ed8e [ 1453.186074][T20704] RDX: 0000000000141102 RSI: 00007f2c218f8c00 RDI: ffffffffffffff9c [ 1453.186087][T20704] RBP: 00007f2c218f8c00 R08: 0000000000000000 R09: 0000000000000000 [ 1453.186100][T20704] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1453.186113][T20704] R13: 00007f2c20c26038 R14: 00007f2c20c25fa0 R15: 00007ffea3ea0358 [ 1453.186142][T20704] [ 1453.203722][T20704] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1453.243877][T14573] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1453.244958][T14573] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1453.253220][T14573] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.253238][T14573] usb 7-1: Product: syz [ 1453.253251][T14573] usb 7-1: Manufacturer: syz [ 1453.253264][T14573] usb 7-1: SerialNumber: syz [ 1453.263022][T14573] usb 7-1: config 0 descriptor?? [ 1453.445518][T10162] Bluetooth: hci3: command 0x0406 tx timeout [ 1454.063728][T20713] FAULT_INJECTION: forcing a failure. [ 1454.063728][T20713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1454.063756][T20713] CPU: 0 UID: 0 PID: 20713 Comm: syz.4.3542 Tainted: G L syzkaller #0 PREEMPT(full) [ 1454.063780][T20713] Tainted: [L]=SOFTLOCKUP [ 1454.063786][T20713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1454.063797][T20713] Call Trace: [ 1454.063803][T20713] [ 1454.063810][T20713] dump_stack_lvl+0x100/0x190 [ 1454.063840][T20713] should_fail_ex.cold+0x5/0xa [ 1454.063865][T20713] _copy_from_user+0x2e/0xd0 [ 1454.063893][T20713] __x64_sys_signalfd4+0x125/0x1d0 [ 1454.063919][T20713] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 1454.063954][T20713] do_syscall_64+0x123/0x790 [ 1454.063991][T20713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.064010][T20713] RIP: 0033:0x7f716c79e559 [ 1454.064026][T20713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.064041][T20713] RSP: 002b:00007f716d663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 1454.064059][T20713] RAX: ffffffffffffffda RBX: 00007f716ca26090 RCX: 00007f716c79e559 [ 1454.064071][T20713] RDX: 0000000000000008 RSI: 0000200000000240 RDI: 0000000000000003 [ 1454.064083][T20713] RBP: 00007f716d663090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.064094][T20713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.064105][T20713] R13: 00007f716ca26128 R14: 00007f716ca26090 R15: 00007fff21575de8 [ 1454.064130][T20713] [ 1454.538967][ T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1454.548159][T14573] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1454.699849][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1454.699883][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=8b.ac [ 1454.700954][ T10] usb 3-1: config 129 has an invalid interface number: 49 but max is 0 [ 1454.700975][ T10] usb 3-1: config 129 has no interface number 0 [ 1454.701000][ T10] usb 3-1: config 129 interface 49 has no altsetting 0 [ 1454.703221][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.703240][ T10] usb 3-1: Product: syz [ 1454.703254][ T10] usb 3-1: Manufacturer: syz [ 1454.703267][ T10] usb 3-1: SerialNumber: syz [ 1454.708592][T14573] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1454.718674][T14573] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1454.718697][T14573] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.718716][T14573] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1454.718739][T14573] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1454.718781][T14573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.774544][T14573] usb 1-1: config 0 descriptor?? [ 1455.684021][T14573] hid_parser_main: 14 callbacks suppressed [ 1455.706428][T14573] kovaplus 0003:1E7D:2D50.0042: unknown main item tag 0x0 [ 1455.706467][T14573] kovaplus 0003:1E7D:2D50.0042: unknown main item tag 0x0 [ 1455.706488][T14573] kovaplus 0003:1E7D:2D50.0042: unknown main item tag 0x0 [ 1455.706509][T14573] kovaplus 0003:1E7D:2D50.0042: unknown main item tag 0x0 [ 1455.706527][T14573] kovaplus 0003:1E7D:2D50.0042: unknown main item tag 0x0 [ 1455.706547][T14573] kovaplus 0003:1E7D:2D50.0042: unknown main item tag 0x0 [ 1455.706567][T14573] kovaplus 0003:1E7D:2D50.0042: unknown main item tag 0x0 [ 1455.706586][T14573] kovaplus 0003:1E7D:2D50.0042: unknown main item tag 0x0 [ 1455.706610][T14573] kovaplus 0003:1E7D:2D50.0042: unknown main item tag 0x0 [ 1455.706630][T14573] kovaplus 0003:1E7D:2D50.0042: unknown main item tag 0x0 [ 1455.707145][ T5337] usb 7-1: USB disconnect, device number 69 [ 1455.804860][T14573] kovaplus 0003:1E7D:2D50.0042: hidraw0: USB HID v80.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 1455.836294][T20715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.857411][T20715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.524939][T14573] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1456.697381][T14573] usb 5-1: Using ep0 maxpacket: 16 [ 1456.698096][T14573] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1456.699048][T14573] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.699107][T14573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.703210][T14573] usb 5-1: config 0 descriptor?? [ 1456.756859][T14573] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input177 [ 1456.969808][ T30] audit: type=1400 audit(1700001130.969:2659): avc: denied { write } for pid=20733 comm="syz.4.3547" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1457.027086][ T4956] bcm5974 5-1:0.0: could not read from device [ 1457.028636][ T5337] usb 5-1: USB disconnect, device number 45 [ 1457.036281][T20731] bcm5974 5-1:0.0: could not read from device [ 1457.375305][ T9253] net_ratelimit: 105 callbacks suppressed [ 1458.208740][ T987] usb 1-1: USB disconnect, device number 48 [ 1458.967321][T20755] syz_tun: entered allmulticast mode [ 1458.995070][T20735] loop5: detected capacity change from 0 to 7 [ 1458.999885][T20735] Dev loop5: unable to read RDB block 7 [ 1458.999916][T20735] loop5: unable to read partition table [ 1459.000100][T20735] loop5: partition table beyond EOD, truncated [ 1459.000118][T20735] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1459.068598][ T10] usb 3-1: USB disconnect, device number 108 [ 1459.216615][T20735] Dev loop5: unable to read RDB block 7 [ 1459.216725][T20735] loop5: unable to read partition table [ 1459.217431][T20735] loop5: partition table beyond EOD, truncated [ 1459.217504][T20735] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1460.256117][ T10] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1460.451283][ T10] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1460.493124][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.493223][ T10] usb 7-1: Product: syz [ 1460.494486][ T10] usb 7-1: Manufacturer: syz [ 1460.494504][ T10] usb 7-1: SerialNumber: syz [ 1460.813830][ T10] usb 7-1: config 0 descriptor?? [ 1460.835683][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1460.855248][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1460.856914][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1460.856974][ T10] usb 7-1: media controller created [ 1460.863801][T20733] syz_tun: left allmulticast mode [ 1460.954695][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1461.048884][ T10] DVB: Unable to find symbol mt352_attach() [ 1461.095402][ T10] DVB: Unable to find symbol nxt6000_attach() [ 1461.095412][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1461.098809][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input179 [ 1461.138804][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 1461.138819][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1461.138832][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 1461.138844][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 1462.310577][T14573] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1462.324914][ T5337] dvb-usb: bulk message failed: -22 (7/0) [ 1462.324930][ T5337] dvb-usb: error while querying for an remote control event. [ 1463.375666][ T987] usb 7-1: USB disconnect, device number 70 [ 1463.390430][ T5728] net_ratelimit: 58 callbacks suppressed [ 1463.463865][T14573] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1463.464698][T14573] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1463.464711][T14573] usb 5-1: config 1 has no interface number 0 [ 1463.464731][T14573] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1463.464745][T14573] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 217, changing to 11 [ 1463.466675][T14573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.466687][T14573] usb 5-1: Product: syz [ 1463.466696][T14573] usb 5-1: Manufacturer: syz [ 1463.466704][T14573] usb 5-1: SerialNumber: syz [ 1463.470204][T20774] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1463.725127][ T987] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1463.725387][T20774] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1463.728321][T14573] usb 5-1: No status endpoint found [ 1463.832068][ T30] audit: type=1400 audit(1700001137.395:2660): avc: denied { call } for pid=20783 comm="syz.3.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1463.955176][T14573] usb 5-1: USB disconnect, device number 46 [ 1464.411377][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3559'. [ 1464.425175][ T30] audit: type=1400 audit(1700001137.676:2661): avc: denied { mount } for pid=20786 comm="syz.0.3560" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1464.425294][ T30] audit: type=1400 audit(1700001137.685:2662): avc: denied { search } for pid=20786 comm="syz.0.3560" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1464.425334][ T30] audit: type=1400 audit(1700001137.695:2663): avc: denied { read write } for pid=20786 comm="syz.0.3560" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1464.425368][ T30] audit: type=1400 audit(1700001137.695:2664): avc: denied { open } for pid=20786 comm="syz.0.3560" path="/54/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1465.216530][ T30] audit: type=1400 audit(1700001138.696:2665): avc: denied { unmount } for pid=19019 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1465.312343][T20795] batadv_slave_0: entered promiscuous mode [ 1465.809849][T20796] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1466.285261][T20797] batadv_slave_0: left promiscuous mode [ 1466.366641][ T30] audit: type=1400 audit(1700001139.238:2666): avc: denied { relabelto } for pid=20794 comm="syz.6.3563" name="290" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1466.366688][ T30] audit: type=1400 audit(1700001139.238:2667): avc: denied { associate } for pid=20794 comm="syz.6.3563" name="290" dev="tmpfs" ino=1633 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1466.409454][ T30] audit: type=1400 audit(1700001139.799:2668): avc: denied { write } for pid=13863 comm="syz-executor" name="290" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1466.415835][ T30] audit: type=1400 audit(1700001139.799:2669): avc: denied { remove_name } for pid=13863 comm="syz-executor" name="core" dev="tmpfs" ino=1638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1467.996569][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1467.996627][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1468.602464][T20815] FAULT_INJECTION: forcing a failure. [ 1468.602464][T20815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1468.602510][T20815] CPU: 0 UID: 0 PID: 20815 Comm: syz.3.3567 Tainted: G L syzkaller #0 PREEMPT(full) [ 1468.602537][T20815] Tainted: [L]=SOFTLOCKUP [ 1468.602544][T20815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1468.602556][T20815] Call Trace: [ 1468.602562][T20815] [ 1468.602570][T20815] dump_stack_lvl+0x100/0x190 [ 1468.602603][T20815] should_fail_ex.cold+0x5/0xa [ 1468.602631][T20815] _copy_to_user+0x32/0xd0 [ 1468.602661][T20815] simple_read_from_buffer+0xcb/0x170 [ 1468.602693][T20815] proc_fail_nth_read+0x1af/0x230 [ 1468.602723][T20815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1468.602759][T20815] ? rw_verify_area+0xce/0x6d0 [ 1468.602780][T20815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1468.602807][T20815] vfs_read+0x1e4/0xb40 [ 1468.602830][T20815] ? lock_acquire+0x1d1/0x380 [ 1468.602852][T20815] ? __fget_files+0x34/0x3d0 [ 1468.602879][T20815] ? __pfx_vfs_read+0x10/0x10 [ 1468.602900][T20815] ? find_held_lock+0x2b/0x80 [ 1468.602928][T20815] ? __fget_files+0x215/0x3d0 [ 1468.602960][T20815] ? __fget_files+0x21f/0x3d0 [ 1468.602994][T20815] ksys_read+0x12a/0x250 [ 1468.603017][T20815] ? __pfx_ksys_read+0x10/0x10 [ 1468.603047][T20815] do_syscall_64+0x123/0x790 [ 1468.603078][T20815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.603099][T20815] RIP: 0033:0x7fc0a535ed8e [ 1468.603115][T20815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1468.603132][T20815] RSP: 002b:00007fc0a61a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1468.603151][T20815] RAX: ffffffffffffffda RBX: 00007fc0a61a16c0 RCX: 00007fc0a535ed8e [ 1468.603164][T20815] RDX: 000000000000000f RSI: 00007fc0a61a10a0 RDI: 0000000000000004 [ 1468.603175][T20815] RBP: 00007fc0a61a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.603186][T20815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.603197][T20815] R13: 00007fc0a5626038 R14: 00007fc0a5625fa0 R15: 00007ffeda4de388 [ 1468.603224][T20815] [ 1468.949004][ T49] net_ratelimit: 54 callbacks suppressed [ 1470.004728][T20837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3571'. [ 1470.508295][ T5337] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1470.671816][ T5337] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1470.677354][ T5337] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.677385][ T5337] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.677413][ T5337] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1470.677487][ T5337] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1470.677636][ T5337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.975643][ T5337] usb 3-1: config 0 descriptor?? [ 1472.099727][ T5337] hid_parser_main: 14 callbacks suppressed [ 1472.099740][ T5337] kovaplus 0003:1E7D:2D50.0043: unknown main item tag 0x0 [ 1472.099761][ T5337] kovaplus 0003:1E7D:2D50.0043: unknown main item tag 0x0 [ 1472.099777][ T5337] kovaplus 0003:1E7D:2D50.0043: unknown main item tag 0x0 [ 1472.099794][ T5337] kovaplus 0003:1E7D:2D50.0043: unknown main item tag 0x0 [ 1472.099810][ T5337] kovaplus 0003:1E7D:2D50.0043: unknown main item tag 0x0 [ 1472.099827][ T5337] kovaplus 0003:1E7D:2D50.0043: unknown main item tag 0x0 [ 1472.099844][ T5337] kovaplus 0003:1E7D:2D50.0043: unknown main item tag 0x0 [ 1472.099860][ T5337] kovaplus 0003:1E7D:2D50.0043: unknown main item tag 0x0 [ 1472.099877][ T5337] kovaplus 0003:1E7D:2D50.0043: unknown main item tag 0x0 [ 1472.099893][ T5337] kovaplus 0003:1E7D:2D50.0043: unknown main item tag 0x0 [ 1472.148836][ T5337] kovaplus 0003:1E7D:2D50.0043: hidraw0: USB HID v80.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 1472.259065][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'. [ 1472.403733][ T30] audit: type=1400 audit(1700001145.412:2670): avc: denied { write } for pid=13863 comm="syz-executor" name="290" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1472.407502][ T30] audit: type=1400 audit(1700001145.412:2671): avc: denied { write } for pid=13863 comm="syz-executor" name="290" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1472.408846][ T30] audit: type=1400 audit(1700001145.412:2672): avc: denied { write } for pid=13863 comm="syz-executor" name="290" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1472.408885][ T30] audit: type=1400 audit(1700001145.412:2673): avc: denied { write } for pid=13863 comm="syz-executor" name="290" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1472.416044][ T30] audit: type=1400 audit(1700001145.421:2674): avc: denied { rmdir } for pid=13863 comm="syz-executor" name="290" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1472.610398][T20831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.620747][T20831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.720314][ C0] net_ratelimit: 47 callbacks suppressed [ 1474.851118][ T29] usb 3-1: USB disconnect, device number 109 [ 1475.960545][T14573] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1475.987043][T14573] libceph: connect (1)[c::]:6789 error -101 [ 1475.987222][T14573] libceph: mon0 (1)[c::]:6789 connect error [ 1475.992036][T14573] libceph: connect (1)[c::]:6789 error -101 [ 1475.992220][T14573] libceph: mon0 (1)[c::]:6789 connect error [ 1476.007696][T20869] ceph: No mds server is up or the cluster is laggy [ 1476.059200][T20862] ceph: No mds server is up or the cluster is laggy [ 1476.059794][ T5337] libceph: connect (1)[c::]:6789 error -101 [ 1476.059951][ T5337] libceph: mon0 (1)[c::]:6789 connect error [ 1476.122699][ T29] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1476.239391][ T987] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1476.305886][ T29] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1476.320923][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.381445][ T191] libceph: connect (1)[c::]:6789 error -101 [ 1476.381645][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 1476.431521][T14573] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1476.442012][ T5337] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1476.592626][T14573] usb 7-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 0.00 [ 1476.595060][T14573] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1476.595090][T14573] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1476.595272][T14573] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.662075][T20879] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1476.697108][T14573] i2c-diolan-u2c 7-1:1.0: Diolan U2C at USB bus 007 address 071 speed 100000 Hz [ 1476.704319][T14573] i2c-diolan-u2c 7-1:1.0: failed to initialize adapter [ 1476.704381][T14573] i2c-diolan-u2c 7-1:1.0: probe with driver i2c-diolan-u2c failed with error -71 [ 1476.790613][ T5337] usb 1-1: Using ep0 maxpacket: 16 [ 1476.792677][ T5337] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1476.857949][ T5337] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.858068][ T5337] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1476.899484][ T5337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.899511][ T5337] usb 1-1: Product: syz [ 1476.899574][ T5337] usb 1-1: Manufacturer: syz [ 1476.899639][ T5337] usb 1-1: SerialNumber: syz [ 1477.203485][T14573] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1478.238210][ T29] usb 3-1: Firmware version (0.0) predates our first public release. [ 1478.238231][ T29] usb 3-1: Please update to version 0.2 or newer [ 1478.253675][ T5790] usb 7-1: USB disconnect, device number 71 [ 1478.271533][T20870] ceph: No mds server is up or the cluster is laggy [ 1478.288846][ T5802] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1478.477027][ T29] usb 3-1: USB disconnect, device number 110 [ 1479.158954][T20883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.165490][T20883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.306714][ T29] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1479.351174][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1479.445593][ T29] usb 3-1: device descriptor read/64, error -71 [ 1479.458396][ T5337] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1479.511201][ T10] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1479.517581][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.517600][ T10] usb 5-1: Product: syz [ 1479.517615][ T10] usb 5-1: Manufacturer: syz [ 1479.517630][ T10] usb 5-1: SerialNumber: syz [ 1479.551955][ T10] usb 5-1: config 0 descriptor?? [ 1479.573229][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1479.662985][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1479.674814][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1479.674872][ T10] usb 5-1: media controller created [ 1479.703263][ T29] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1479.825674][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1479.841134][ T29] usb 3-1: device descriptor read/64, error -71 [ 1479.854407][ T5337] usb 1-1: USB disconnect, device number 49 [ 1479.960246][ T29] usb usb3-port1: attempt power cycle [ 1479.979225][T20893] udevd[20893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1480.005463][ T4206] IPVS: starting estimator thread 0... [ 1480.099162][T20906] IPVS: using max 44 ests per chain, 105600 per kthread [ 1480.143484][ T10] DVB: Unable to find symbol mt352_attach() [ 1480.203972][ T10] DVB: Unable to find symbol nxt6000_attach() [ 1480.203981][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1480.212912][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input180 [ 1480.222256][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 1480.222271][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1480.222284][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 1480.222295][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 1480.248844][ C0] net_ratelimit: 199 callbacks suppressed [ 1480.333074][ T191] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1480.333319][ T29] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1480.360326][ T29] usb 3-1: device descriptor read/8, error -71 [ 1480.494668][ T191] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 1480.495843][ T191] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.495869][ T191] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1480.495893][ T191] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1480.495941][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.500994][ T191] usb 4-1: config 0 descriptor?? [ 1480.762751][ T29] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1480.790650][ T29] usb 3-1: device descriptor read/8, error -71 [ 1480.901908][ T29] usb usb3-port1: unable to enumerate USB device [ 1481.022478][ T30] audit: type=1326 audit(1700001153.475:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.0.3589" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2099e559 code=0x7ffc0000 [ 1481.023879][ T30] audit: type=1326 audit(1700001153.475:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.0.3589" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2099e559 code=0x7ffc0000 [ 1481.095164][ T30] audit: type=1326 audit(1700001153.540:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.0.3589" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c2099e559 code=0x7ffc0000 [ 1481.096919][ T30] audit: type=1326 audit(1700001153.540:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.0.3589" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2099e559 code=0x7ffc0000 [ 1481.099640][ T30] audit: type=1326 audit(1700001153.540:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.0.3589" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2099e559 code=0x7ffc0000 [ 1481.206356][ T191] thrustmaster 0003:044F:B65A.0044: ignoring unknown output usage 00010001 [ 1481.206375][ T191] thrustmaster 0003:044F:B65A.0044: ignoring unknown output usage 00010000 [ 1481.206390][ T191] thrustmaster 0003:044F:B65A.0044: can't find FF field in output reports [ 1481.208163][ T191] thrustmaster 0003:044F:B65A.0044: hidraw0: USB HID v0.00 Joystick [HID 044f:b65a] on usb-dummy_hcd.3-1/input0 [ 1481.252359][T14573] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1481.306214][ T191] dvb-usb: bulk message failed: -22 (7/0) [ 1481.306227][ T191] dvb-usb: error while querying for an remote control event. [ 1481.413468][T14573] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1481.469128][T20905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.471026][T20905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.510415][ T191] usb 4-1: USB disconnect, device number 88 [ 1481.649562][T14573] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.649582][T14573] usb 7-1: Product: syz [ 1481.649595][T14573] usb 7-1: Manufacturer: syz [ 1481.649608][T14573] usb 7-1: SerialNumber: syz [ 1481.958241][T14573] usb 7-1: config 0 descriptor?? [ 1482.431281][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 1482.431324][ T10] dvb-usb: error while querying for an remote control event. [ 1482.503676][T14573] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1482.506991][T14573] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1482.507647][T14573] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1482.507702][T14573] usb 7-1: media controller created [ 1482.530303][T14573] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1482.572257][ T29] usb 5-1: USB disconnect, device number 47 [ 1482.792928][T14573] DVB: Unable to find symbol mt352_attach() [ 1482.876349][ T29] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1482.888704][ T191] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1482.963962][T14573] DVB: Unable to find symbol nxt6000_attach() [ 1482.963967][T14573] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1482.965717][T14573] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input182 [ 1482.972550][T14573] dvb-usb: schedule remote query interval to 1000 msecs. [ 1482.972567][T14573] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1482.972582][T14573] dvb-usb: bulk message failed: -22 (7/0) [ 1482.972595][T14573] dvb-usb: bulk message failed: -22 (7/0) [ 1483.048728][ T191] usb 3-1: device descriptor read/64, error -71 [ 1483.315621][ T191] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1483.406906][T20943] netlink: 'syz.0.3592': attribute type 1 has an invalid length. [ 1483.454619][ T191] usb 3-1: device descriptor read/64, error -71 [ 1483.572816][ T191] usb usb3-port1: attempt power cycle [ 1483.841856][ T10] usb 7-1: USB disconnect, device number 72 [ 1483.991754][ T191] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1484.011718][ T191] usb 3-1: device descriptor read/8, error -71 [ 1484.628465][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1484.705442][ T29] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1484.716104][ T191] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1484.749357][ T191] usb 3-1: device descriptor read/8, error -71 [ 1484.866155][ T191] usb usb3-port1: unable to enumerate USB device [ 1484.866340][ T29] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1484.869471][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.869483][ T29] usb 4-1: Product: syz [ 1484.869492][ T29] usb 4-1: Manufacturer: syz [ 1484.869503][ T29] usb 4-1: SerialNumber: syz [ 1484.875893][ T29] usb 4-1: config 0 descriptor?? [ 1484.933508][ T29] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1484.937351][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1484.940841][ T29] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1484.940898][ T29] usb 4-1: media controller created [ 1485.024315][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1485.807527][ T9253] net_ratelimit: 484 callbacks suppressed [ 1486.327111][ T29] DVB: Unable to find symbol mt352_attach() [ 1486.436419][T20958] netlink: 'syz.2.3599': attribute type 4 has an invalid length. [ 1486.436438][T20958] netlink: 'syz.2.3599': attribute type 10 has an invalid length. [ 1486.436451][T20958] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3599'. [ 1486.480306][ T29] DVB: Unable to find symbol nxt6000_attach() [ 1486.480314][ T29] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1486.486724][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input183 [ 1486.497221][ T29] dvb-usb: schedule remote query interval to 1000 msecs. [ 1486.497238][ T29] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1486.497252][ T29] dvb-usb: bulk message failed: -22 (7/0) [ 1486.497265][ T29] dvb-usb: bulk message failed: -22 (7/0) [ 1486.665259][T20963] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3600'. [ 1486.971844][ T29] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1487.122111][ T29] usb 7-1: device descriptor read/64, error -71 [ 1487.236649][ T5337] usb 4-1: USB disconnect, device number 89 [ 1487.283804][ T191] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1487.390240][ T29] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1487.528765][ T29] usb 7-1: device descriptor read/64, error -71 [ 1487.580460][ T191] usb 5-1: device descriptor read/64, error -71 [ 1487.652632][ T29] usb usb7-port1: attempt power cycle [ 1488.002032][ T191] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1488.017587][ T29] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1488.045665][ T29] usb 7-1: device descriptor read/8, error -71 [ 1488.148717][ T4206] rpcbind: server 127.0.0.1 not responding, timed out [ 1488.180179][T14573] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 1488.301616][ T191] usb 5-1: device descriptor read/64, error -71 [ 1488.314785][ T29] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1488.340904][T14573] usb 1-1: Invalid ep0 maxpacket: 32 [ 1488.342876][ T29] usb 7-1: device descriptor read/8, error -71 [ 1488.460813][ T29] usb usb7-port1: unable to enumerate USB device [ 1488.465626][ T191] usb usb5-port1: attempt power cycle [ 1488.481944][T14573] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 1488.704498][T14573] usb 1-1: Invalid ep0 maxpacket: 32 [ 1488.714819][T14573] usb usb1-port1: attempt power cycle [ 1489.484078][T14573] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 1489.506431][T14573] usb 1-1: Invalid ep0 maxpacket: 32 [ 1489.624624][ T5337] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1489.647176][T14573] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 1489.672423][T14573] usb 1-1: Invalid ep0 maxpacket: 32 [ 1489.672902][T14573] usb usb1-port1: unable to enumerate USB device [ 1489.842812][T20987] FAULT_INJECTION: forcing a failure. [ 1489.842812][T20987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1489.842840][T20987] CPU: 1 UID: 0 PID: 20987 Comm: syz.2.3606 Tainted: G L syzkaller #0 PREEMPT(full) [ 1489.842867][T20987] Tainted: [L]=SOFTLOCKUP [ 1489.842874][T20987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1489.842886][T20987] Call Trace: [ 1489.842893][T20987] [ 1489.842901][T20987] dump_stack_lvl+0x100/0x190 [ 1489.842934][T20987] should_fail_ex.cold+0x5/0xa [ 1489.842961][T20987] _copy_from_user+0x2e/0xd0 [ 1489.842991][T20987] bpf_ctx_init+0x14e/0x1e0 [ 1489.843019][T20987] bpf_prog_test_run_sk_lookup+0x2c6/0x1300 [ 1489.843053][T20987] ? lock_acquire+0x1d1/0x380 [ 1489.843075][T20987] ? __fget_files+0x34/0x3d0 [ 1489.843108][T20987] ? find_held_lock+0x2b/0x80 [ 1489.843137][T20987] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 1489.843165][T20987] ? __fget_files+0x215/0x3d0 [ 1489.843196][T20987] ? __fget_files+0x21f/0x3d0 [ 1489.843228][T20987] ? fput+0x7c/0x100 [ 1489.843256][T20987] ? __bpf_prog_get+0x97/0x290 [ 1489.843284][T20987] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 1489.843314][T20987] __sys_bpf+0x2265/0x4a30 [ 1489.843343][T20987] ? __pfx___sys_bpf+0x10/0x10 [ 1489.843364][T20987] ? find_held_lock+0x2b/0x80 [ 1489.843391][T20987] ? get_pid_task+0xfc/0x250 [ 1489.843415][T20987] ? get_pid_task+0xfc/0x250 [ 1489.843448][T20987] ? find_held_lock+0x2b/0x80 [ 1489.843475][T20987] ? rcu_read_lock_any_held+0x6a/0x90 [ 1489.843490][T20987] ? find_held_lock+0x2b/0x80 [ 1489.843511][T20987] ? ksys_write+0x190/0x250 [ 1489.843528][T20987] ? ksys_write+0x190/0x250 [ 1489.843545][T20987] ? lock_acquire+0x1d1/0x380 [ 1489.843574][T20987] ? fput+0x7c/0x100 [ 1489.843595][T20987] ? ksys_write+0x1ac/0x250 [ 1489.843615][T20987] ? __x64_sys_bpf+0xce/0x140 [ 1489.843631][T20987] __x64_sys_bpf+0xce/0x140 [ 1489.843648][T20987] ? do_syscall_64+0xae/0x790 [ 1489.843671][T20987] do_syscall_64+0x123/0x790 [ 1489.843693][T20987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.843708][T20987] RIP: 0033:0x7fe64679e559 [ 1489.843720][T20987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.843734][T20987] RSP: 002b:00007fe64761c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1489.843750][T20987] RAX: ffffffffffffffda RBX: 00007fe646a26180 RCX: 00007fe64679e559 [ 1489.843759][T20987] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1489.843768][T20987] RBP: 00007fe64761c090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.843777][T20987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.843786][T20987] R13: 00007fe646a26218 R14: 00007fe646a26180 R15: 00007ffec55263e8 [ 1489.843806][T20987] [ 1489.848170][ T191] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1490.039056][ T5337] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1490.075953][ T191] usb 5-1: device not accepting address 50, error -71 [ 1490.287226][ T5337] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1490.294525][ T5337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.294597][ T5337] usb 4-1: Product: syz [ 1490.294670][ T5337] usb 4-1: Manufacturer: syz [ 1490.294775][ T5337] usb 4-1: SerialNumber: syz [ 1490.349127][T20995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3607'. [ 1490.415260][ T5337] usb 4-1: config 0 descriptor?? [ 1490.425886][T20995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1490.503550][ T30] audit: type=1400 audit(1700001162.333:2680): avc: denied { mount } for pid=20991 comm="syz.6.3607" name="/" dev="hugetlbfs" ino=66660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1490.644100][ T30] audit: type=1400 audit(1700001162.380:2681): avc: denied { ioctl } for pid=20991 comm="syz.6.3607" path="socket:[66661]" dev="sockfs" ino=66661 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1490.655693][ T5337] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1490.742230][ T5337] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1490.745677][ T5337] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1490.745716][ T5337] usb 4-1: media controller created [ 1490.932495][ T5337] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1491.384712][ C0] net_ratelimit: 67 callbacks suppressed [ 1492.317030][ T191] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1492.466567][ T5337] DVB: Unable to find symbol mt352_attach() [ 1492.489010][ T191] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1492.490474][ T191] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1492.490495][ T191] usb 3-1: config 0 has no interface number 0 [ 1492.492418][ T5337] DVB: Unable to find symbol nxt6000_attach() [ 1492.492425][ T5337] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1492.494351][ T5337] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input184 [ 1492.495510][ T5337] dvb-usb: schedule remote query interval to 1000 msecs. [ 1492.495520][ T5337] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1492.495529][ T5337] dvb-usb: bulk message failed: -22 (7/0) [ 1492.495537][ T5337] dvb-usb: bulk message failed: -22 (7/0) [ 1492.502607][ T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.502619][ T191] usb 3-1: Product: syz [ 1492.502628][ T191] usb 3-1: Manufacturer: syz [ 1492.502636][ T191] usb 3-1: SerialNumber: syz [ 1492.504038][ T191] usb 3-1: config 0 descriptor?? [ 1492.623656][ T5337] usb 4-1: USB disconnect, device number 90 [ 1492.753772][ T5337] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1493.622376][ T191] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1493.974136][T14573] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1494.135272][T14573] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1494.136874][T14573] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.136889][T14573] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.136902][T14573] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1494.136916][T14573] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1494.136945][T14573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.139291][T14573] usb 1-1: config 0 descriptor?? [ 1494.393943][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3609'. [ 1494.800219][ T30] audit: type=1400 audit(1700001166.365:2682): avc: denied { lock } for pid=21035 comm="syz.3.3620" path="socket:[66421]" dev="sockfs" ino=66421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1494.835334][T14573] hid_parser_main: 14 callbacks suppressed [ 1494.835350][T14573] kovaplus 0003:1E7D:2D50.0045: unknown main item tag 0x0 [ 1494.835376][T14573] kovaplus 0003:1E7D:2D50.0045: unknown main item tag 0x0 [ 1494.835394][T14573] kovaplus 0003:1E7D:2D50.0045: unknown main item tag 0x0 [ 1494.835413][T14573] kovaplus 0003:1E7D:2D50.0045: unknown main item tag 0x0 [ 1494.835431][T14573] kovaplus 0003:1E7D:2D50.0045: unknown main item tag 0x0 [ 1494.835451][T14573] kovaplus 0003:1E7D:2D50.0045: unknown main item tag 0x0 [ 1494.835470][T14573] kovaplus 0003:1E7D:2D50.0045: unknown main item tag 0x0 [ 1494.835488][T14573] kovaplus 0003:1E7D:2D50.0045: unknown main item tag 0x0 [ 1494.835507][T14573] kovaplus 0003:1E7D:2D50.0045: unknown main item tag 0x0 [ 1494.835526][T14573] kovaplus 0003:1E7D:2D50.0045: unknown main item tag 0x0 [ 1494.838641][T14573] kovaplus 0003:1E7D:2D50.0045: hidraw0: USB HID v80.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 1494.901830][T21038] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3619'. [ 1495.043214][ T191] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1495.067951][T21025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.068531][T21025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.214249][ T5699] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1495.235717][ T191] usb 5-1: device descriptor read/64, error -71 [ 1495.793236][ T5699] usb 4-1: device descriptor read/64, error -71 [ 1495.809991][ T5337] usb 3-1: USB disconnect, device number 119 [ 1495.866895][ T191] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1496.785723][ C1] net_ratelimit: 50 callbacks suppressed [ 1497.185050][ T191] usb 5-1: device descriptor read/64, error -71 [ 1497.246131][ T5699] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1497.272121][ T987] usb 1-1: USB disconnect, device number 54 [ 1497.300371][ T191] usb usb5-port1: attempt power cycle [ 1497.716085][ T5707] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1497.816948][ T5699] usb 4-1: device descriptor read/64, error -71 [ 1497.888868][ T5707] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1497.912940][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.912970][ T5707] usb 7-1: Product: syz [ 1497.912998][ T5707] usb 7-1: Manufacturer: syz [ 1497.913038][ T5707] usb 7-1: SerialNumber: syz [ 1497.980400][ T5699] usb usb4-port1: attempt power cycle [ 1498.008839][ T5707] usb 7-1: config 0 descriptor?? [ 1498.100679][ T191] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1498.135892][ T5707] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1499.404962][ T5707] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1499.687940][ T5707] sq905c 7-1:0.0: Get version command failed [ 1499.688180][ T5707] sq905c 7-1:0.0: probe with driver sq905c failed with error -110 [ 1499.744817][T21055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.745315][T21055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.975528][ T191] usb 5-1: device descriptor read/8, error -71 [ 1500.974389][ T10] usb 7-1: USB disconnect, device number 77 [ 1501.104856][ T987] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1502.299555][ T5728] net_ratelimit: 62 callbacks suppressed [ 1502.334797][ T987] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1502.337650][ T987] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.337673][ T987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1502.337739][ T987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.343647][ T987] usb 1-1: config 0 descriptor?? [ 1503.165457][T21060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.165854][T21060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.206085][ T987] Bluetooth: Can't get version to change to load ram patch err [ 1503.206093][ T987] Bluetooth: Loading sysconfig file failed [ 1503.206107][ T987] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 1503.207556][ T987] usb 1-1: USB disconnect, device number 55 [ 1504.974144][ T191] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1505.361144][ T191] usb 5-1: device descriptor read/64, error -71 [ 1505.425531][ T10] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1505.629474][ T191] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1506.042879][ T10] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1506.049618][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.049634][ T10] usb 7-1: Product: syz [ 1506.049648][ T10] usb 7-1: Manufacturer: syz [ 1506.049661][ T10] usb 7-1: SerialNumber: syz [ 1506.059548][ T10] usb 7-1: config 0 descriptor?? [ 1506.079940][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1506.087383][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1506.088125][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1506.088172][ T10] usb 7-1: media controller created [ 1506.099859][ T191] usb 5-1: device descriptor read/64, error -71 [ 1506.216996][ T191] usb usb5-port1: attempt power cycle [ 1506.263141][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1506.799486][ T191] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1506.817028][ T191] usb 5-1: device descriptor read/8, error -71 [ 1506.917824][ T10] DVB: Unable to find symbol mt352_attach() [ 1506.931504][ T5699] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1506.993389][ T10] DVB: Unable to find symbol nxt6000_attach() [ 1506.993395][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1506.996805][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input185 [ 1507.001236][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 1507.001250][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1507.001263][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 1507.001285][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 1507.070335][ T191] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1507.092319][ T5699] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1507.095293][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.095304][ T5699] usb 4-1: Product: syz [ 1507.095313][ T5699] usb 4-1: Manufacturer: syz [ 1507.095321][ T5699] usb 4-1: SerialNumber: syz [ 1507.096806][ T5699] usb 4-1: config 0 descriptor?? [ 1507.127514][ T5699] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1507.144134][ T5699] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1507.152479][ T5699] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1507.152525][ T5699] usb 4-1: media controller created [ 1507.169338][ T5802] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1507.236242][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1507.294668][ T191] usb 5-1: device not accepting address 59, error -71 [ 1507.295091][ T191] usb usb5-port1: unable to enumerate USB device [ 1507.348968][ T5802] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1507.350387][ T5802] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1507.350412][ T5802] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.350434][ T5802] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1507.350459][ T5802] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1507.350504][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.355426][ T5802] usb 3-1: config 0 descriptor?? [ 1507.459804][ T5699] DVB: Unable to find symbol mt352_attach() [ 1507.512374][ T5699] DVB: Unable to find symbol nxt6000_attach() [ 1507.512383][ T5699] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1507.516614][ T5699] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input186 [ 1507.521625][ T5699] dvb-usb: schedule remote query interval to 1000 msecs. [ 1507.521640][ T5699] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1507.521658][ T5699] dvb-usb: bulk message failed: -22 (7/0) [ 1507.521670][ T5699] dvb-usb: bulk message failed: -22 (7/0) [ 1507.604630][ T191] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1507.812920][T21137] syzkaller0: entered promiscuous mode [ 1507.812933][T21137] syzkaller0: entered allmulticast mode [ 1507.879754][ T191] usb 5-1: Using ep0 maxpacket: 32 [ 1507.902317][T21126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.920628][ T191] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1507.922662][T21126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.995706][T17394] net_ratelimit: 48 callbacks suppressed [ 1508.075834][ T5699] dvb-usb: bulk message failed: -22 (7/0) [ 1508.076951][ T5699] dvb-usb: error while querying for an remote control event. [ 1508.315188][ T191] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1508.315210][ T191] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1508.315229][ T191] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1508.315266][ T191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1508.315282][ T191] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1508.315295][ T191] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1508.315334][ T191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.321541][ T191] usb 5-1: config 0 descriptor?? [ 1508.759495][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 1508.759523][ T10] dvb-usb: error while querying for an remote control event. [ 1509.003642][ T5707] usb 7-1: USB disconnect, device number 78 [ 1509.078663][ T191] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1509.455996][ T5699] usb 4-1: USB disconnect, device number 94 [ 1510.135455][ T30] audit: type=1400 audit(1700001180.639:2683): avc: denied { read write } for pid=21130 comm="syz.4.3642" name="lp0" dev="devtmpfs" ino=5771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1510.135502][ T30] audit: type=1400 audit(1700001180.639:2684): avc: denied { open } for pid=21130 comm="syz.4.3642" path="/dev/usb/lp0" dev="devtmpfs" ino=5771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1510.189149][ T5802] usbhid 3-1:0.0: can't add hid device: -71 [ 1510.189271][ T5802] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1510.214043][ T5802] usb 3-1: USB disconnect, device number 120 [ 1510.262529][ T5707] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1510.273996][T21144] xt_hashlimit: size too large, truncated to 1048576 [ 1511.622539][T21131] FAULT_INJECTION: forcing a failure. [ 1511.622539][T21131] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.622578][T21131] CPU: 1 UID: 0 PID: 21131 Comm: syz.4.3642 Tainted: G L syzkaller #0 PREEMPT(full) [ 1511.622608][T21131] Tainted: [L]=SOFTLOCKUP [ 1511.622617][T21131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1511.622629][T21131] Call Trace: [ 1511.622637][T21131] [ 1511.622647][T21131] dump_stack_lvl+0x100/0x190 [ 1511.622685][T21131] should_fail_ex.cold+0x5/0xa [ 1511.622715][T21131] should_failslab+0xc2/0x120 [ 1511.622746][T21131] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1511.622776][T21131] ? sock_alloc_inode+0x26/0x2c0 [ 1511.622802][T21131] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1511.622826][T21131] sock_alloc_inode+0x26/0x2c0 [ 1511.622848][T21131] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1511.622869][T21131] alloc_inode+0x68/0x250 [ 1511.622891][T21131] sock_alloc+0x44/0x280 [ 1511.622912][T21131] ? security_socket_create+0x7f/0x250 [ 1511.622940][T21131] __sock_create+0xc2/0x860 [ 1511.622973][T21131] __sys_socket+0x14d/0x260 [ 1511.623004][T21131] ? __pfx___sys_socket+0x10/0x10 [ 1511.623040][T21131] __x64_sys_socket+0x72/0xb0 [ 1511.623064][T21131] ? lockdep_hardirqs_on+0x7d/0x110 [ 1511.623095][T21131] do_syscall_64+0x123/0x790 [ 1511.623126][T21131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.623147][T21131] RIP: 0033:0x7f716c79e559 [ 1511.623166][T21131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.623185][T21131] RSP: 002b:00007f716d684028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1511.623204][T21131] RAX: ffffffffffffffda RBX: 00007f716ca25fa0 RCX: 00007f716c79e559 [ 1511.623217][T21131] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1511.623227][T21131] RBP: 00007f716c835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1511.623238][T21131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.623249][T21131] R13: 00007f716ca26038 R14: 00007f716ca25fa0 R15: 00007fff21575de8 [ 1511.623273][T21131] [ 1511.697417][ T5699] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1511.970677][ T30] audit: type=1800 audit(1700001182.426:2685): pid=21155 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3649" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1512.094969][ T5337] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1512.255221][ T5337] usb 3-1: Using ep0 maxpacket: 32 [ 1512.255804][ T5337] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1512.256749][ T5337] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 1512.258893][ T5337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.258910][ T5337] usb 3-1: Product: syz [ 1512.258923][ T5337] usb 3-1: Manufacturer: syz [ 1512.258936][ T5337] usb 3-1: SerialNumber: syz [ 1512.303473][ T5337] usb 3-1: config 0 descriptor?? [ 1512.333926][ T5337] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1512.333958][ T5337] dvb-usb: bulk message failed: -22 (2/0) [ 1512.373602][ T5337] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1512.384815][ T5337] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1512.384866][ T5337] usb 3-1: media controller created [ 1512.552625][T21153] dvb-usb: bulk message failed: -22 (4/0) [ 1512.578170][ T5337] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1512.732979][ T5802] usb 5-1: USB disconnect, device number 60 [ 1512.737542][ T5337] usb 3-1: selecting invalid altsetting 7 [ 1512.737553][ T5337] cxusb: set interface failed [ 1512.737564][ T5337] dvb-usb: bulk message failed: -22 (1/0) [ 1512.762040][ T5802] usblp0: removed [ 1512.836169][ T191] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1512.975140][ T191] usb 7-1: device descriptor read/64, error -71 [ 1512.975957][ T5337] DVB: Unable to find symbol lgdt330x_attach() [ 1512.975962][ T5337] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1513.150863][ T5337] rc_core: IR keymap rc-dvico-portable not found [ 1513.150873][ T5337] Registered IR keymap rc-empty [ 1513.151503][ T5337] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1513.158411][ T5337] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input187 [ 1513.181157][ T5337] dvb-usb: schedule remote query interval to 100 msecs. [ 1513.181170][ T5337] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1513.238776][ T191] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1513.303154][ T5337] dvb-usb: bulk message failed: -22 (1/0) [ 1513.394683][ T191] usb 7-1: device descriptor read/64, error -71 [ 1513.420728][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1513.507987][ T191] usb usb7-port1: attempt power cycle [ 1513.538098][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1513.612895][ T5337] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1513.655803][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1513.773258][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1513.783507][ T5337] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1513.783545][ T5337] usb 1-1: no configurations [ 1513.783558][ T5337] usb 1-1: can't read configurations, error -22 [ 1513.805185][ C0] net_ratelimit: 60 callbacks suppressed [ 1513.870283][ T191] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1513.891367][ T5699] dvb-usb: bulk message failed: -22 (1/0) [ 1513.948006][ T5337] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1513.972737][ T191] usb 7-1: device descriptor read/8, error -71 [ 1514.036894][ T5699] dvb-usb: bulk message failed: -22 (1/0) [ 1514.381947][ T5699] dvb-usb: bulk message failed: -22 (1/0) [ 1514.402677][ T5337] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1514.402712][ T5337] usb 1-1: no configurations [ 1514.402724][ T5337] usb 1-1: can't read configurations, error -22 [ 1514.426042][ T5337] usb usb1-port1: attempt power cycle [ 1514.436002][ T191] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1514.459462][ T191] usb 7-1: device descriptor read/8, error -71 [ 1514.511819][ T5699] dvb-usb: bulk message failed: -22 (1/0) [ 1514.578423][ T191] usb usb7-port1: unable to enumerate USB device [ 1514.628417][ T5802] usb 3-1: USB disconnect, device number 121 [ 1514.801497][ T5337] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1514.822053][ T5337] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1514.822096][ T5337] usb 1-1: no configurations [ 1514.822109][ T5337] usb 1-1: can't read configurations, error -22 [ 1514.841897][ T5699] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1514.960381][ T5337] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1514.984778][ T5337] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1514.984810][ T5337] usb 1-1: no configurations [ 1514.984818][ T5337] usb 1-1: can't read configurations, error -22 [ 1514.985078][ T5337] usb usb1-port1: unable to enumerate USB device [ 1515.034616][ T5699] usb 5-1: Using ep0 maxpacket: 8 [ 1515.041335][ T5699] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1515.053202][ T5699] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.053222][ T5699] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1515.082602][ T5699] usb 5-1: New USB device strings: Mfr=31, Product=2, SerialNumber=3 [ 1515.082620][ T5699] usb 5-1: Product: syz [ 1515.082635][ T5699] usb 5-1: Manufacturer: syz [ 1515.082648][ T5699] usb 5-1: SerialNumber: syz [ 1516.175868][ T5699] usb 5-1: unit 4 not found! [ 1516.265018][ T5699] usb 5-1: USB disconnect, device number 61 [ 1516.426801][T20835] udevd[20835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1517.811773][ T5802] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1518.320985][T21196] bonding: bond0 is being created... [ 1518.327639][ T5699] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1518.343890][T21196] bonding: bond0 already exists [ 1518.489178][ T5699] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1518.491861][ T5699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.491873][ T5699] usb 7-1: Product: syz [ 1518.491882][ T5699] usb 7-1: Manufacturer: syz [ 1518.491890][ T5699] usb 7-1: SerialNumber: syz [ 1518.499693][ T5699] usb 7-1: config 0 descriptor?? [ 1518.508531][ T5699] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1518.550698][ T5699] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1518.555748][ T5699] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1518.555805][ T5699] usb 7-1: media controller created [ 1518.605322][ T5707] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1518.605476][ T5802] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1518.659192][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1518.787431][ T5707] usb 4-1: Using ep0 maxpacket: 16 [ 1518.788097][ T5707] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1518.789824][ T5802] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1518.791537][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 1518.791556][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 1518.791650][ T5802] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.791664][ T5802] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.791675][ T5802] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1518.791696][ T5802] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1518.791812][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.823675][ T5802] usb 3-1: config 0 descriptor?? [ 1518.841386][ T5699] DVB: Unable to find symbol mt352_attach() [ 1518.869319][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.869338][ T5707] usb 4-1: Product: syz [ 1518.869353][ T5707] usb 4-1: Manufacturer: syz [ 1518.869367][ T5707] usb 4-1: SerialNumber: syz [ 1518.936349][ T5707] usb 4-1: config 0 descriptor?? [ 1518.983117][ T5707] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1519.024844][ T5699] DVB: Unable to find symbol nxt6000_attach() [ 1519.024852][ T5699] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1519.041471][ T5699] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input188 [ 1519.071858][ T5699] dvb-usb: schedule remote query interval to 1000 msecs. [ 1519.071874][ T5699] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1519.071907][ T5699] dvb-usb: bulk message failed: -22 (7/0) [ 1519.071919][ T5699] dvb-usb: bulk message failed: -22 (7/0) [ 1519.174663][ T5707] usb 4-1: USB disconnect, device number 95 [ 1519.174902][ T4311] usb 4-1: Failed to submit usb control message: -71 [ 1519.174929][ T4311] usb 4-1: unable to send the bmi data to the device: -71 [ 1519.174944][ T4311] usb 4-1: unable to get target info from device [ 1519.174956][ T4311] usb 4-1: could not get target info (-71) [ 1519.175252][ T4311] usb 4-1: could not probe fw (-71) [ 1519.278779][ C0] net_ratelimit: 53 callbacks suppressed [ 1519.339228][T21186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.340241][T21186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.989635][ T10] usb 7-1: USB disconnect, device number 83 [ 1520.160222][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1521.137897][ T5802] usbhid 3-1:0.0: can't add hid device: -71 [ 1521.160828][ T5802] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1521.273325][ T5802] usb 3-1: USB disconnect, device number 122 [ 1522.462937][ T5802] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1522.541405][T21236] netlink: 57 bytes leftover after parsing attributes in process `syz.0.3668'. [ 1522.577021][T21236] FAULT_INJECTION: forcing a failure. [ 1522.577021][T21236] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.577045][T21236] CPU: 0 UID: 0 PID: 21236 Comm: syz.0.3668 Tainted: G L syzkaller #0 PREEMPT(full) [ 1522.577063][T21236] Tainted: [L]=SOFTLOCKUP [ 1522.577068][T21236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1522.577075][T21236] Call Trace: [ 1522.577081][T21236] [ 1522.577086][T21236] dump_stack_lvl+0x100/0x190 [ 1522.577108][T21236] should_fail_ex.cold+0x5/0xa [ 1522.577126][T21236] should_failslab+0xc2/0x120 [ 1522.577157][T21236] __kmalloc_noprof+0xfc/0x840 [ 1522.577172][T21236] ? rcu_is_watching+0x13/0xc0 [ 1522.577190][T21236] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1522.577206][T21236] tomoyo_realpath_from_path+0xb6/0x690 [ 1522.577221][T21236] tomoyo_check_open_permission+0x2af/0x3c0 [ 1522.577238][T21236] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1522.577259][T21236] ? hook_file_open+0x248/0x8e0 [ 1522.577283][T21236] ? path_get+0x61/0x80 [ 1522.577296][T21236] tomoyo_file_open+0x6b/0x90 [ 1522.577310][T21236] security_file_open+0xb5/0x1e0 [ 1522.577322][T21236] do_dentry_open+0x588/0x14d0 [ 1522.577342][T21236] vfs_open+0x82/0x3f0 [ 1522.577361][T21236] path_openat+0x1a23/0x2450 [ 1522.577380][T21236] ? __pfx_path_openat+0x10/0x10 [ 1522.577402][T21236] do_file_open+0x20e/0x430 [ 1522.577420][T21236] ? __pfx_do_file_open+0x10/0x10 [ 1522.577447][T21236] ? _raw_spin_unlock+0x28/0x50 [ 1522.577463][T21236] ? alloc_fd+0x471/0x7a0 [ 1522.577484][T21236] do_sys_openat2+0x10f/0x1e0 [ 1522.577496][T21236] ? __pfx_do_sys_openat2+0x10/0x10 [ 1522.577513][T21236] __x64_sys_openat+0x12d/0x210 [ 1522.577524][T21236] ? __pfx___x64_sys_openat+0x10/0x10 [ 1522.577548][T21236] do_syscall_64+0x123/0x790 [ 1522.577567][T21236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.577580][T21236] RIP: 0033:0x7f2c2095ed8e [ 1522.577592][T21236] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1522.577604][T21236] RSP: 002b:00007f2c218f8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1522.577617][T21236] RAX: ffffffffffffffda RBX: 00007f2c218f96c0 RCX: 00007f2c2095ed8e [ 1522.577626][T21236] RDX: 0000000000141102 RSI: 00007f2c218f8c00 RDI: ffffffffffffff9c [ 1522.577634][T21236] RBP: 00007f2c218f8c00 R08: 0000000000000000 R09: 0000000000000000 [ 1522.577641][T21236] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1522.577648][T21236] R13: 00007f2c20c26038 R14: 00007f2c20c25fa0 R15: 00007ffea3ea0358 [ 1522.577664][T21236] [ 1522.577670][T21236] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1522.646318][ T5802] usb 3-1: Using ep0 maxpacket: 16 [ 1522.648545][ T5802] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1522.648588][ T5802] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 1522.651851][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.651868][ T5802] usb 3-1: Product: syz [ 1522.651881][ T5802] usb 3-1: Manufacturer: syz [ 1522.651894][ T5802] usb 3-1: SerialNumber: syz [ 1522.876324][ T5802] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1524.752365][ C0] net_ratelimit: 50 callbacks suppressed [ 1524.896916][T21258] Cannot find add_set index 2 as target [ 1525.584036][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3672'. [ 1527.027931][ T5802] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1527.101207][ T5802] usb 3-1: USB disconnect, device number 123 [ 1527.166654][T20835] udevd[20835]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1528.184191][ T10] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1528.417596][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1528.418362][ T10] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1528.422525][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.422547][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1528.424668][ T10] usb 7-1: New USB device strings: Mfr=31, Product=2, SerialNumber=3 [ 1528.424688][ T10] usb 7-1: Product: syz [ 1528.424703][ T10] usb 7-1: Manufacturer: syz [ 1528.424718][ T10] usb 7-1: SerialNumber: syz [ 1530.482631][ C1] net_ratelimit: 56 callbacks suppressed [ 1530.499287][T21274] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 1530.530773][ T10] usb 7-1: unit 4 not found! [ 1530.595216][ T10] usb 7-1: USB disconnect, device number 84 [ 1531.349726][ T5699] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1531.508931][ T5699] usb 1-1: Using ep0 maxpacket: 32 [ 1531.515429][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1531.515728][ T5699] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1531.518828][ T5699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.876449][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1531.908667][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.908689][ T5699] usb 1-1: Product: syz [ 1531.908703][ T5699] usb 1-1: Manufacturer: syz [ 1531.908718][ T5699] usb 1-1: SerialNumber: syz [ 1532.033534][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1532.034820][ T10] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1532.034846][ T10] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.034892][ T10] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1532.034920][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1532.035108][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.038190][ T10] usb 5-1: config 0 descriptor?? [ 1532.193948][ T5699] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1532.218317][ T5699] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1532.373266][ T5699] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1532.396432][ T5699] usb 1-1: USB disconnect, device number 60 [ 1532.462027][T20832] udevd[20832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1532.509409][T21297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.514647][T21297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.828534][ T987] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1532.995779][ T987] usb 7-1: Using ep0 maxpacket: 32 [ 1533.000076][ T987] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1533.029634][ T987] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1533.029718][ T987] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1533.029934][ T987] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1533.030424][ T987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1533.030845][ T987] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1533.031420][ T987] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1533.032013][ T987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.142760][ T987] usb 7-1: config 0 descriptor?? [ 1533.308029][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1533.308090][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1533.378543][ T987] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 85 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1533.909356][ T30] audit: type=1326 audit(1700001202.939:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.6.3683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fbb9e559 code=0x7ffc0000 [ 1533.946726][ T30] audit: type=1326 audit(1700001202.939:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.6.3683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fbb9e559 code=0x7ffc0000 [ 1534.010852][ T30] audit: type=1326 audit(1700001203.023:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.6.3683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fe0fbb9e559 code=0x7ffc0000 [ 1534.055131][ T30] audit: type=1326 audit(1700001203.079:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.6.3683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fbb9e559 code=0x7ffc0000 [ 1534.092678][ T30] audit: type=1326 audit(1700001203.079:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.6.3683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fbb9e559 code=0x7ffc0000 [ 1534.147885][ T30] audit: type=1326 audit(1700001203.163:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.6.3683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0fbb9e559 code=0x7ffc0000 [ 1534.203037][ T30] audit: type=1326 audit(1700001203.191:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.6.3683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fbb9e559 code=0x7ffc0000 [ 1534.203085][ T30] audit: type=1326 audit(1700001203.191:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.6.3683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fbb9e559 code=0x7ffc0000 [ 1534.371798][ C0] [CPU: 0]TIME DOES NOT MATCH expected:465283 actual:465284 delta:1 before:465283 after:465283 context:h [ 1534.371798][ C0] trace clock:trace_clock_counter+0x0/0x40 [ 1534.371849][ C0] [465255] PAGE TIME STAMP [ 1534.371858][ C0] 0x0: [465255] delta:0 hd [ 1534.371869][ C0] 0x10: [465256] delta:1 hd [ 1534.371881][ C0] 0x20: [465257] delta:1 hd [ 1534.371892][ C0] 0x30: [465258] delta:1 Hsd [ 1534.371902][ C0] 0x40: [465259] delta:1 hd [ 1534.371912][ C0] 0x50: [465260] delta:1 hd [ 1534.371922][ C0] 0x60: [465261] delta:1 hd [ 1534.371933][ C0] 0x70: [465262] delta:1 hd [ 1534.371942][ C0] 0x80: [465263] delta:1 Hsd [ 1534.371949][ C0] 0x90: [465264] delta:1 hd [ 1534.371955][ C0] 0xa0: [465265] delta:1 hd [ 1534.371962][ C0] 0xb0: [465266] delta:1 hd [ 1534.371968][ C0] 0xc0: [465267] delta:1 hd [ 1534.371974][ C0] 0xd0: [465268] delta:1 Hsd [ 1534.371980][ C0] 0xe0: [465269] delta:1 hd [ 1534.371986][ C0] 0xf0: [465270] delta:1 hd [ 1534.371992][ C0] 0x100: [465271] delta:1 hd [ 1534.371998][ C0] 0x110: [465272] delta:1 hd [ 1534.372008][ C0] 0x120: [465273] delta:1 hd [ 1534.372018][ C0] 0x130: [465274] delta:1 Hsd [ 1534.372029][ C0] 0x140: [465275] delta:1 hd [ 1534.372039][ C0] 0x150: [465276] delta:1 hd [ 1534.372049][ C0] 0x160: [465277] delta:1 .d [ 1534.372059][ C0] 0x170: [465278] delta:1 hd [ 1534.372070][ C0] 0x180: [465279] delta:1 .d [ 1534.372080][ C0] 0x190: [465280] delta:1 hd [ 1534.372088][ C0] 0x1a0: [465281] delta:1 . [ 1534.372094][ C0] 0x1b0: [465282] delta:1 PADDING [ 1534.372100][ C0] 0x1d4: [465283] delta:1 hd [ 1534.372106][ C0] expected end:0x1e4 last event actually ended at:0x1e4 [ 1534.372177][ C0] ------------[ cut here ]------------ [ 1534.372183][ C0] system_state != SYSTEM_BOOTING [ 1534.372189][ C0] WARNING: kernel/trace/ring_buffer.c:4785 at check_buffer.cold+0x1a2/0x1ef, CPU#0: syz.3.3688/21324 [ 1534.524087][ T987] usb 7-1: USB disconnect, device number 85 [ 1534.534329][ T30] audit: type=1326 audit(1700001203.481:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.6.3683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0fbb9e559 code=0x7ffc0000 [ 1534.534371][ T30] audit: type=1326 audit(1700001203.481:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.6.3683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fbb9e559 code=0x7ffc0000 [ 1534.536378][ T987] usblp0: removed [ 1534.620742][ C0] Modules linked in: [ 1534.624627][ C0] CPU: 0 UID: 0 PID: 21324 Comm: syz.3.3688 Tainted: G L syzkaller #0 PREEMPT(full) [ 1534.635536][ C0] Tainted: [L]=SOFTLOCKUP [ 1534.639834][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1534.649874][ C0] RIP: 0010:check_buffer.cold+0x1a2/0x1ef [ 1534.655574][ C0] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 5c 8b 2d 1c f7 21 11 31 ff 89 ee e8 6f 2a e9 00 85 ed 0f 84 b8 c5 eb 00 e8 f2 2f e9 00 90 <0f> 0b 90 e9 63 c3 eb 00 49 c7 c7 a0 5e f6 8b e9 51 fe ff ff e8 88 [ 1534.675169][ C0] RSP: 0000:ffffc90005077808 EFLAGS: 00010046 [ 1534.681216][ C0] RAX: 8000000001000003 RBX: 1ffff92000a0ef07 RCX: 0000000001000003 [ 1534.689166][ C0] RDX: ffff888075a7a580 RSI: ffffffff8123277e RDI: ffff888075a7a580 [ 1534.697134][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1534.705093][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000071984 [ 1534.713040][ C0] R13: ffff88801d095000 R14: ffff88807f6fc000 R15: ffffffff8bf65a40 [ 1534.720999][ C0] FS: 00007fc0a35f66c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 1534.729903][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1534.736463][ C0] CR2: 0000000000003880 CR3: 000000008965f000 CR4: 00000000003526f0 [ 1534.744410][ C0] Call Trace: [ 1534.747680][ C0] [ 1534.750612][ C0] ? __pfx_trace_clock_counter+0x10/0x10 [ 1534.756237][ C0] ? __pfx_check_buffer+0x10/0x10 [ 1534.761250][ C0] ? event_triggers_call+0x337/0x4d0 [ 1534.766524][ C0] __rb_reserve_next.constprop.0+0x486/0x1640 [ 1534.772583][ C0] ring_buffer_lock_reserve+0x49a/0x1220 [ 1534.778202][ C0] ? vcpu_run+0x1324/0x61a0 [ 1534.782692][ C0] ? load_fixmap_gdt+0x68/0xb0 [ 1534.787436][ C0] ? __pfx_load_fixmap_gdt+0x10/0x10 [ 1534.792699][ C0] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 1534.798742][ C0] ? __pfx_vmx_vcpu_put+0x10/0x10 [ 1534.803761][ C0] ? irqentry_exit+0x24d/0xa10 [ 1534.808521][ C0] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 1534.814659][ C0] trace_event_buffer_reserve+0x1f9/0x350 [ 1534.820358][ C0] eprobe_trigger_func+0x558/0x1450 [ 1534.825532][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1534.831155][ C0] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 1534.836760][ C0] ? kvm_vcpu_ioctl+0x40f/0x1700 [ 1534.841698][ C0] event_triggers_call+0x29e/0x4d0 [ 1534.846799][ C0] trace_event_buffer_commit+0x66b/0xa80 [ 1534.852413][ C0] trace_event_raw_event_msr_trace_class+0x17d/0x270 [ 1534.859080][ C0] ? __pfx_trace_event_raw_event_msr_trace_class+0x10/0x10 [ 1534.866259][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1534.871445][ C0] trace_read_msr+0x160/0x1f0 [ 1534.876110][ C0] __rdmsr_safe_on_cpu+0xc8/0xf0 [ 1534.881027][ C0] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 1534.886645][ C0] __flush_smp_call_function_queue+0x43a/0x8c0 [ 1534.892778][ C0] __sysvec_call_function_single+0x81/0x420 [ 1534.898646][ C0] sysvec_call_function_single+0x51/0xc0 [ 1534.904264][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 1534.910232][ C0] RIP: 0033:0x7fc0a539e559 [ 1534.914632][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.934215][ C0] RSP: 002b:00007fc0a35f6028 EFLAGS: 00000246 [ 1534.940263][ C0] RAX: 0000000000000000 RBX: 00007fc0a5626180 RCX: 00007fc0a539e559 [ 1534.948208][ C0] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000027 [ 1534.956171][ C0] RBP: 00007fc0a5435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1534.964119][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1534.972074][ C0] R13: 00007fc0a5626218 R14: 00007fc0a5626180 R15: 00007ffeda4de388 [ 1534.980029][ C0] [ 1534.983023][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1534.990280][ C0] CPU: 0 UID: 0 PID: 21324 Comm: syz.3.3688 Tainted: G L syzkaller #0 PREEMPT(full) [ 1535.001193][ C0] Tainted: [L]=SOFTLOCKUP [ 1535.005507][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1535.015545][ C0] Call Trace: [ 1535.018825][ C0] [ 1535.021732][ C0] dump_stack_lvl+0x100/0x190 [ 1535.026395][ C0] vpanic+0x553/0x970 [ 1535.030351][ C0] ? __pfx_vpanic+0x10/0x10 [ 1535.034837][ C0] panic+0xd1/0xe0 [ 1535.038531][ C0] ? __pfx_panic+0x10/0x10 [ 1535.042926][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1535.048284][ C0] ? check_buffer.cold+0x1a2/0x1ef [ 1535.053370][ C0] __warn.cold+0x191/0x318 [ 1535.057762][ C0] __report_bug+0x30f/0x440 [ 1535.062243][ C0] ? check_buffer.cold+0x1a2/0x1ef [ 1535.067330][ C0] ? __pfx___report_bug+0x10/0x10 [ 1535.072336][ C0] ? console_srcu_read_unlock+0x46/0x60 [ 1535.077867][ C0] ? __wake_up_klogd+0xe5/0x140 [ 1535.082691][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 1535.087349][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1535.092368][ C0] ? check_buffer.cold+0x1a2/0x1ef [ 1535.097461][ C0] report_bug+0xb3/0x220 [ 1535.101690][ C0] ? check_buffer.cold+0x1a2/0x1ef [ 1535.106781][ C0] handle_bug+0x16a/0x2a0 [ 1535.111090][ C0] exc_invalid_op+0x17/0x50 [ 1535.115572][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1535.120399][ C0] RIP: 0010:check_buffer.cold+0x1a2/0x1ef [ 1535.126098][ C0] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 5c 8b 2d 1c f7 21 11 31 ff 89 ee e8 6f 2a e9 00 85 ed 0f 84 b8 c5 eb 00 e8 f2 2f e9 00 90 <0f> 0b 90 e9 63 c3 eb 00 49 c7 c7 a0 5e f6 8b e9 51 fe ff ff e8 88 [ 1535.145685][ C0] RSP: 0000:ffffc90005077808 EFLAGS: 00010046 [ 1535.151731][ C0] RAX: 8000000001000003 RBX: 1ffff92000a0ef07 RCX: 0000000001000003 [ 1535.159684][ C0] RDX: ffff888075a7a580 RSI: ffffffff8123277e RDI: ffff888075a7a580 [ 1535.167635][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1535.175582][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000071984 [ 1535.183533][ C0] R13: ffff88801d095000 R14: ffff88807f6fc000 R15: ffffffff8bf65a40 [ 1535.191489][ C0] ? check_buffer.cold+0x1a1/0x1ef [ 1535.196588][ C0] ? check_buffer.cold+0x1a1/0x1ef [ 1535.201678][ C0] ? __pfx_trace_clock_counter+0x10/0x10 [ 1535.207296][ C0] ? __pfx_check_buffer+0x10/0x10 [ 1535.212302][ C0] ? event_triggers_call+0x337/0x4d0 [ 1535.217576][ C0] __rb_reserve_next.constprop.0+0x486/0x1640 [ 1535.223630][ C0] ring_buffer_lock_reserve+0x49a/0x1220 [ 1535.229246][ C0] ? vcpu_run+0x1324/0x61a0 [ 1535.233763][ C0] ? load_fixmap_gdt+0x68/0xb0 [ 1535.238515][ C0] ? __pfx_load_fixmap_gdt+0x10/0x10 [ 1535.243792][ C0] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 1535.249860][ C0] ? __pfx_vmx_vcpu_put+0x10/0x10 [ 1535.254876][ C0] ? irqentry_exit+0x24d/0xa10 [ 1535.259640][ C0] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 1535.265793][ C0] trace_event_buffer_reserve+0x1f9/0x350 [ 1535.271499][ C0] eprobe_trigger_func+0x558/0x1450 [ 1535.276680][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1535.282299][ C0] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 1535.287913][ C0] ? kvm_vcpu_ioctl+0x40f/0x1700 [ 1535.292844][ C0] event_triggers_call+0x29e/0x4d0 [ 1535.297943][ C0] trace_event_buffer_commit+0x66b/0xa80 [ 1535.303568][ C0] trace_event_raw_event_msr_trace_class+0x17d/0x270 [ 1535.310229][ C0] ? __pfx_trace_event_raw_event_msr_trace_class+0x10/0x10 [ 1535.317432][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1535.322619][ C0] trace_read_msr+0x160/0x1f0 [ 1535.327283][ C0] __rdmsr_safe_on_cpu+0xc8/0xf0 [ 1535.332205][ C0] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 1535.337822][ C0] __flush_smp_call_function_queue+0x43a/0x8c0 [ 1535.343962][ C0] __sysvec_call_function_single+0x81/0x420 [ 1535.349858][ C0] sysvec_call_function_single+0x51/0xc0 [ 1535.355474][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 1535.361433][ C0] RIP: 0033:0x7fc0a539e559 [ 1535.365827][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.385427][ C0] RSP: 002b:00007fc0a35f6028 EFLAGS: 00000246 [ 1535.391493][ C0] RAX: 0000000000000000 RBX: 00007fc0a5626180 RCX: 00007fc0a539e559 [ 1535.399449][ C0] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000027 [ 1535.407401][ C0] RBP: 00007fc0a5435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1535.415350][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1535.423297][ C0] R13: 00007fc0a5626218 R14: 00007fc0a5626180 R15: 00007ffeda4de388 [ 1535.431256][ C0] [ 1535.434480][ C0] Kernel Offset: disabled [ 1535.438779][ C0] Rebooting in 86400 seconds..