last executing test programs: 17.152152381s ago: executing program 4 (id=518): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "bea6b6c8385a1164c5408a3337d310f1a05bf5002c7183ebf0001300", "2f8e34e4f7fd81d01756d0f86d2bcf86117c79e9316f49b70045a1919979364a", "478cc73e8d35b62265164f257354e5583b0423309e2dcff734b738c3b09dfb3c", "34a213f4534e23b32d6c4e24dce1010948bd57828a0119bfd214db7ee6a3cf9c", "12daa078c196b6028602171f00bf945fa730572e961a2a782f14f8ca92845813", "4eecb564677eb003302d59b5", 0x9, 0x1000, 0x53, 0xc, 0x1}}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x85, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r8 = eventfd(0x1000) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r8}) r9 = eventfd2(0x80000000, 0x80801) bind$netlink(r6, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r10, @ANYBLOB="05", @ANYRES16=r10], 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000005c0)={0x0, r9}) syz_clone3(&(0x7f0000000140)={0x801400, &(0x7f0000000080)=0xffffffffffffffff, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x6c) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) pidfd_getfd(r11, r11, 0x0) 12.832765089s ago: executing program 4 (id=530): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x3, 0x20, 0x1, 0x7ff, 0x6, 0x0, 0x9, 0x0, 0x7fff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x40880) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000300)={0xc, r3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$tipc(0x1e, 0x5, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0xab) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) 9.346724566s ago: executing program 3 (id=543): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x150) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90873a"}, &(0x7f0000000300)=ANY=[@ANYBLOB="2083"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0xce}]}]}, @nested={0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r2) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000240)='\x00') 9.257012952s ago: executing program 4 (id=544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) close_range(r1, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/kexec_crash_size', 0x800, 0x0) inotify_init1(0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8.977947153s ago: executing program 4 (id=545): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) splice(r0, 0x0, r2, 0x0, 0x7ffc, 0xd) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x16, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fb0(0xffffffffffffff9c, 0x0, 0x200101, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0003fd000000ec03"]}, 0x0) 7.998334632s ago: executing program 2 (id=548): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x0, 0xc8, 0x1}, {0x9, 0x5, 0x6, 0x2, 0x40, 0x1, 0xd3, 0x7}, {0x9, 0x5, 0x0, 0x3, 0x20, 0x4, 0x2}}}}}}]}}, 0x0) syz_usb_ep_read(r1, 0x3, 0xe, &(0x7f0000000140)=""/14) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) r3 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8d, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x2, 0x41}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xff, 0x6, 0x9}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xf, 0x0, 0x8, 0x40, 0x7f}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x0, 0xe}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x415}}, {0xdc, &(0x7f0000000500)=@string={0xdc, 0x3, "e25432bf8e3a0ad91c269eb1ebd5adb71e6c5fa02e7ec3752b1680c003b1eed2fb3c945b942af108800879461980228eafdc8445cd37dd68078f1c8da2030dd8751926033488dfea0360fa93095a92b560cf325107ed188552fcbd4c79ec5421db243aaedb36fda16d355efc73ebe4370ca3d45977d960cae18e5a604464d7855003ca6fd654e4f9a9ffda4ea03a9391b17f1e85c2b4ed542665c7f3038d57812a8981e278ff69076b07ce6c620cb57b4348b1c44d74ac19e8a5a5d58cd59da9c9f28c9a9432a9805a0869b9c00fdd7d923b26224c6a89bc09e5"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x180c}}, {0xc7, &(0x7f0000000640)=@string={0xc7, 0x3, "d833984b07af7610f81df016ef17d50eec2b2ba4dc35c7d9ad8bf656c5525ffc2e606da2783cc58093f8952f85faf961a92acd92f85d54ebeb8526f7b882830932b06870e973c0a423a3315fff40b9b54b925b2c2bd14a2487b3a6bdcc00d346a734151187dc3608de64763eefdc15c47d2187a298ec6e35a85a6b8143ddaaf4cc4e6a1f0ff07a8fc1edf77323e8ac1f49d72c5be2d448bff113044e04e21c3aa05ebde87525953c98d58cd62e964a5889eefa33dde654db0132eecc3c6475fbd66fb379c1"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x140c}}, {0x6b, &(0x7f0000000780)=@string={0x6b, 0x3, "74095fc6e0b87c2c92b7d7d9f7375fb3a5353de87ed19160ed90ae5813a061dd975ff4295d89028e327ed917b4cd804edb32d1e9fe565d9fd9533d97086f8286d6431c39d50098465af4d20c6bcaacd1b27f41448cc1cb6a13b84091f71b607782c65086fdb0714e68"}}, {0x6f, &(0x7f0000000800)=@string={0x6f, 0x3, "1afdc1b03176ed51f677409daed3a627dd21ec6eac94567eb89207c0670750d9a0ce252b39f7a370cbd53d37ed568f80bcb1ff3b5e17feb11e1de0cb7bd6496b3621440ed453b82c61bfbe8b1f207e08229faf3d4b234b12e04a25713b9273dcc96f5f7d08b374c935dbea4d8f"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000d00)={0x14, &(0x7f0000000bc0)={0x80, 0x4, 0x8c, {0x8c, 0x5, "b0e1598a53a422e495c38225b18a8e2ac3be2e440387feac174848b31fbb4dd5132f99f065a80635480d56330169811f14aa467e006d60f486d6527cc367cc56cbee8a990c08b8bc1ca3dc6ca014c657dec2e70ef48277ccb5f1a6aa710fe844162ea0e553041d5b832f7d0b79b8223b5719aaad38e7d37de0770d005c46959b1b62600e0a2146e02ca2"}}, &(0x7f0000000c80)=ANY=[@ANYBLOB="00036c0000006c7b87da0384f766c8b7a333176522484d009d16e5794ce50000000000008000295be2605f736b79f1311ba5b8ff204b24bf14a976a44753c1a522b870fb8cbcfb530bc994dec4d2db092915c89a0ea0f407250fd5437f300292d1260e961de9c301260d208702dad341610c"]}, &(0x7f0000001000)={0x34, &(0x7f0000000d40)={0x0, 0x11, 0xd8, "63166ee39629464d91982f2405413773edfa11f1a6566e717ca22f12c211613d285d6affbd6d485c532362e95e2f3bbd32f5307ceb3c88dc6ab30de0e6aaf4fc43cfa8ff9864db802a598e7a1ef30e15687f9dd41f09fe58eca04e16229ab329c05f4a8782079702bd4058b68f7e7cb2f846b80c310c3ef89139f02499f9886bb9bc7b37d4add9b0842ca48be4e6e44e3d7fb52d3bcdc2fee9c5f0c1129a6a22755bf2e414b713565776716846be91d74cf0bc351277c45da89aa08676b2e24c1ca55017c2655cc27d1ccb2598ad13cf4cc67a454f021472"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000ec0)={0x20, 0x0, 0x80, {0x7e, "6565c43be101ce2f3d0d473c06a4cda1e36af28cfc17503560f29c7574255dc594084c727cb7be2123af284f2dbc9a82e00474f99365be3f2761c346cd90a4fe49efd8c10fa379c24500998fefc1af6b3aee06c734a6eb894a44c315b3291d70c1c678b10df241bbff0757e0cb563486b8db3be705719730f9fe431ffad1"}}, &(0x7f0000000f80)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000fc0)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r7, 0xc004ae0a, &(0x7f0000000000)) syz_usb_ep_write(r3, 0x1, 0x61, &(0x7f0000000240)="25f0ef9d0a5a229299dbe28856c788d7d0071de2ee2a4c988f85c7fc9a6da5124d99c2ae32cf203a418c30e69900b34a33af9ab6cafd1d5e171facf15e997f2c33a3ce5aaf796801ac581accf7c84b811d44344cc830b458db1348248db24a0a4b") write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r6}}, 0x20) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x56}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000380)=0x0) syz_pidfd_open(r9, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r10, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x4000) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000040)={&(0x7f0000002540)=[{0x80, 0x1000, 0x0, 0x0}, {0x8, 0x6810, 0x0, 0x0}], 0x2}) 7.316169249s ago: executing program 0 (id=551): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/ip_tables_names\x00') socket$nl_route(0x10, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x82982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4a102, 0x0) getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) fsetxattr$security_capability(r4, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x4be76ba2}, {0x4, 0xfffffffd}]}, 0x14, 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000000006714fbd70000050001000600000005000500010000000900020073797a30000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000df0404d6347215cb368c3cf071edc5c2256ba9f5896963a327e1aeb2862390a3d620d3c538d8465aea2700c3b1f784b80bb7e3b896dcf73b4690823d2ac30000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x15, 0x80005, 0x0) getsockopt(r5, 0x200000000114, 0x5, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffe73) 6.526311453s ago: executing program 1 (id=553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) close_range(r1, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/kexec_crash_size', 0x800, 0x0) inotify_init1(0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.410918209s ago: executing program 1 (id=554): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x3, 0x100) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) pipe(&(0x7f0000000040)) syz_usb_connect(0x3, 0x24, &(0x7f0000000280)=ANY=[], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x1200) 6.317150032s ago: executing program 2 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) close_range(r1, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff6f, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) inotify_init1(0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.195062469s ago: executing program 3 (id=556): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_score_adj\x00') write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x700, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) 6.127858929s ago: executing program 3 (id=557): madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000180)=0x80001004, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f000000cf80)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)="7cb59e8d934c288cbe4c13cc0d7290bb86d8da090ae381820c788cfee2aefdd71b04d2d78d05d5e4417380fd6316684a562e7fc9147383413fa248333d8b1348ae83cbfcc29cac7740854ef870e3e243074962526454f506709ac50ee6723310d010f24c4526b2b124fe4b370e1f805d3448cc87c604ce2b3ca8774f19c43f8f626b08f6dee0110e35195598560da0dcbc6c3596a6841c55d9c44eeec5c556dffe3f072b500743e2a139656f26a027c51573d02ba77752175ae671f5be51f155e690d08d502da0a4f719c112b3371e488a916804b7a7abc64f8351ef196c924c93ca5337075de3cb21f8ae0d2f7c94dd8c53", 0xf2}, {&(0x7f0000000580)="4656f635b12ccedf327dca9fd112fd136e2768e27572c8668ccf0563a02066cae8b81540470ba003d47fdff62f3a0c9bc002a353d962b6585c8cb17413f6512bf17bfe5c87ad256c7513398e050e9e1ee73bfda36573902f06badaebb9", 0x5d}], 0x2, &(0x7f0000003d40)=[@rights={{0x18, 0x1, 0x1, [r0, r3]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r2, r0]}}], 0x58, 0x20000091}}, {{&(0x7f0000003dc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003e40)="27079214e4238ab9c9474551bf7ee661ccddcbe30515a003dda53997ec6d817b5a660ec31910a9e731910e38cc1a38f9c7c93cca994902bb011e8462497071bc0e770847c5a8e3fdc68218e6b2bdeb148d1ba23d5b9c2625904364b10523e05fd0de44", 0x63}, {&(0x7f0000003ec0)="9dc846e9ba47fec16e1447f875363689965460257440619734716e8472dc26bbb697e7ac66293eddfb62cb6099098a8276908d336bc72ffd72c423753ddb8770ee9c98b7ff2f83242529c77747132420f3ef3bbe16599c18345e15709e1708f491608da5a9f91f6543081a795202002d3a51ed344851e2b58580e408417868ce77e9f1ea06bcf9a2de975f0fb750883abb986fbdc103d7c8f65a519ad064fa755a937bde8df8fa8b8df62b27a857", 0xae}, {&(0x7f0000003f80)="4312265c37207495f937aa129b3d30d44fd3a5de6481a43f5c9b4c12c067d561a5ba8addb6d7a9482df644ed03aba31f7d8ffd932484ebb563a7a1428a12cff4b298", 0x42}], 0x3, &(0x7f0000004080)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000040c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005580)=[{&(0x7f0000004140)="b4db8f8af1034b2a8af6c9dd46783c5f5f627235f955332c53828629c89a3d9884054cb308164e2f26d433677aeee05c11975628df273363804320870087366d8974916b7753942805b47d0098dd41cbcc3639f1b596a5aceffb02508308941f2e4909c8466e000d2f376ed0f8a0e1893addd2cbc9eb43362a35a11d4e98d7c7d7925f1f754e6e633180e162aef2580bc4b844ea732977955a4f2245538d04589a488c2f40f3afc48728b1d1f953c319f315da8614cb64aef93165042ede27c588639711b2eecbbc0c3b31b819652a567faccebf03700465044ad89d2444cd84bb02161e68948872b58e81059e65d4c7794db1ed6574f2fa692111eb0bb4880158f8ff8e8bc3782f87ead8ae217170b1f2ddee74d7e0752c68917898fa30be7352e5f144058dbd8a616912381bf352054497d0ee3b84ac5e194797b54a3bded23e130f3602608f4d4d693984e4562075ea06165772c5bbc4abb72e531a90244f81140ee23d1d4b6599842e990db55ce58e2b488d21097bad1ca2c28fd9e35e5d9609420990d812f8640cd8e3966396e876422c109a22f5053c15beaeb432c2dcd9de35f91b469493a01fe908e394b19966dc39d73f8edb1291901465f421dd09de5bddea41cf7c34eeb9cc276d9d01c73d54c468136db70d4d0f961f1ef21a6b1793b35da3b21aba6e6a19abca3196260c94979335b5e3b68540fdd2123c86accd520d8372871c672632a4302177ce6ea83ffbaa33c616c6e0178f6c36ec673bffa1f6b67800aaaa8521b9f72f46e6964a8e9e431dbb601a31f28060a7d922c0bab6fd3cd6dad2319f1ee8bfd122b66b22de702274face95129e855f1d4bd0d4507a90085abdf045ba759574cc57ef83b1f4490837704a9ee81faef6344b4ee0eadbde51a46f39a18250093d7eb9406ff4ed312230c33b923c8593d86bcdd11f5c07aea4642e4bfababa15578bf6fe8f1312d0ea90c1f2848fa2706d1177b3dfe270a580463f9b0b49ff600c06d5aa18e6b027a7d58505a66990d61bc04464d85a9c7339b681d1e88d2e72451177fedf245c7e27861b47750a90b06c39cf89316e98c3d886e47a6ade3611f725d55579c2a7d9214fd73515998b37d20e493c56d14051ae99fe82220211cfa8d16143e6e8cd60fa267c65aff45dbfdd3cfdcba29961ad07d8a62e15a9b2f81ec57ba09c0e6ba363b0c8d53b52b10af3745a240f64226cfce6ed295680eb4da6d08dfdc2b23fef68e8cfe959d7320d8fa58acb4168a2384f95f5faab07fb58caea87509278bbc919d651ce52e9190553785c8c7e8304233483c01189fb750a772f8b43bc26735e206a1ff2f6b2e80d30e7af4680a322f50d08db278b09bd3c7e236d5c410b2bfdc68ac2edb8ae0c8e3af06432412129b9b780e87e69b341736d7f572dda1b87ad0e5bab870dfe4cdd2778d454d7be5956996d1bafe895f4999300ea68f00da870036662f60bfbf39c051903df34d49f921bf0cc0b24cf66b3a46f0f117aab95a8641c500ccf329930ee9beccc5a799c2b04ad4137d4190e098a0ed323d73731f4e2bdbc5db356a6850a5b4b286eef1bef16ebcd30fc6ef6e12c6b42c8cc4e60cca0c2fcb3096e0f57849337c9fc64a9f56768927a6f7b902a3cd68b2016d007e6550af6102b9d875bffa30c480b4876f79ff4a8826e71d1d8d7762fc8ae5cf327982e5256242881d527c3005f9336b67bb9de5a65ad6b475dd988d632f774ed2b2d7e527a10abb7b471c9714e471ce97ca236c3636f09b7490df331d4272e524bea7bbc7abaee461adf3b507789e2c92c113ca7a641c714a3681d776367ea8f44e75b5f9f3f8a0561aa0bb4ca4b60b328b643026e400b5c00a3dbc31bc5e5fc4768a1f57375b5a68173e9d3e86c161fce5ee5ed399afea4df42659accf0b7f7c3b220f5b64264ca7a425998049170fb097bc737273bea679eaae0b1c5ea16c83c3fee21e2ca87a5c9ef75a7999a0ca00e659e451eb61a3db829e5d61eb2cac4a41ce4ce426ecd3b6e6739a12eb9777d0ebffc380cb9de96a6217b44a85676ecdaa868cae4d51f7bc54c329a3e2cd1c9f00d8558a8d60f7528a5b5c0c212d2251e6489c8b43ce078d7026453189b9aac3cc02278fd810b03819ef81a04c602e50352f304154c880f0bc16980af572b5286cfaa8c457630f9be496a7e0c9dfc40ea96312f9d582ad5448a1763f7078adf9d4cc382eaa8fcc783841868f5d5765e7ab37830bb1c4c9a96f1070d043cee9fb3c8501f5f26b6291400cb16ae03f3c42d2a0a6cfa37e6dccb5716b9728b4a0d9130cdcfdd4b36fe5e7b2dc188123ae0fe6fdebe43222f876db7aebfe59a8aa8e42d0bfa45b2303b4a38ff8622442fb4042ab6ab15504f4b2c5415b231974ef5c8515d1ca25c7dd7c57d3a5d7965ea6c60cb7b59ec626063a0016da3b298726503c57598c653cc00a8308efb678d8c9d69b20a396117e567f9bbdd7ebd27bbc88d87f7033730cd0bb5ad8e846ae9a2810247b733a49b09670325ab41254c3dfa85f7fb7573871e61e782f1322e0c4b52eab52100b16ef705208149ca12435378fac9f196dc099f88afcd614a5b6cf4b50c1b9f3d929660b1384cf666af12bff300b076dca0c5d496a78a22dc35338e3a892e84cbda4e6cd0084f5142a090cd20d569d1b0aec24b8a44e9cf79215c1a8ef4ec8f6d0e685198a9692ff80de9c5639741724cfe4e7e2f2a487bc985ca96d21185227f6ffa58b1af330ce7f23864fe13ea18f04514f52e8d91eee2a3e88f11a7e847145e0726f71a1e153eefe960f3e82703a395d6c9fe0e81b2328ec860afa4f1e658624ef895f01dd82895732d9b0308f828f07c549e90df92fb3087eb60e471563972056b3b72ef4fbc3ee166b140fe7fc3ec8231af887e6954979c3917a3edc1df4b9203e4ae191d305e00d53b60700dcad6c0e31fabd6420cdce56972dc8391a5d3bd82778b142079e5f61931762f949dbe9e99e2503167fa2db2f8c245f4b58b2929d4e058110ad2336085150933bbca410a472b1a72ce5edf9dd1b8b606996f09d99890155c4dc780ab3bb7dbb76f7a160b2fd51dc1d124ce84483f160f722d694be9142032567f067469499a62a482a525246db27a4abaebe6fd91281e5712282bf0c086a34b606dedf6214175b824609506847347e09e5129ca5f63c6e647c5c45d37b6bc4198cc187144dcb0eb2b0b928943cdefa4fa6dc42831c6bab30d793fc881f2a691c3937f7db4b1428df995efdc31b9ac4cc922294ec77cbc576b254de6d2b1f5221cec09013cdc198687321792ab143d1484bdeb9d3eee6aa96fe1bc27dddb8855ff3398adf6fad386c9d6a1c8382519988b6288771b792d623838c7069c08fb728c476aac7dba41692813478abc63494339de7fb36fca2a346c39391068ad633ce0a13315cb81a79d7579a861485d76a6a833756148d37bf5011077bd6822132881378d7749f08cec12f33ee1909e430e8bb395aff2781f2d7fd012f62cbc03bceb4ab806d2fbfacf05d573b634aa551d6dbd887ceb0dd1e3c78db12eafeea240ed87168c61a0d613e49643f3877f3186c66262ea82caff2f5b2664443877dad69633d1c23c1cdeabf8216e6e5513e18835ac2390259df956ec01bbe6f74fceeb3bb3831d36ef805fec42ef4bf4536427b0e44db8a62ec272e8d52bad83c9ed65aaf8eb87a146e69399eb365bb8bd6d8486861ff89267500cf8ce41dd3b2774d6d76dc939b819f8f14fbb6a778f1b725009288082506b7b20b5bb162b38d68079a139b3ba13dfd7f50b2d1d59bb3eef7019c50aa5f24e134d7133fb1fec5c7ef08c9e4ca7d7776718b3a0aa5a0d99890e56332f50bc3da618153bc71f3aa1a81542eb38aab82633e96f89173d109e8b629b881b71bdd9946ad8df6e04cb90f71c9d19f83f58a37c4bfad3bd874b70bfc70e71cf56a37112037c307f5814bad6b08c3accac84e46f81d4804ad1f7b2c194c27d3062eb5a73f1d324112ff5f85f41f622a244d29b561db6810740593f306c3c657de281fdd5c725b09f2601b195fcf4c8559295571aee7d7b5f6e7b726de7d26e211d4d5cfaf40cd9b3b74d5e4e31180504d4aad4f54aa1e7ab7296e7743ef901bb91b6757164169ca13c28843d8e3c132abd5e69f10353cc4ec14075ea05378dd7f2a97d8946d6c854fa344493eea4b27300a0c5d5dc2312fc334406f509531416682004d99f517ba64662090b1555c1e0ad0afda7ce2b5dc6848283e4e1f3c19fa874e35ba022a89a7fea74db6c03cf9de6f364770ae38141b66141379f50137a4012d3987e5b719125a95f9941fe9ce919472f5d24f6bb120ff757c8616421e9bf24a312ee51e776778efb6eacde7b83035de52a78c746da46d94a15ccfe7e9f8d52a37e1eab68afb62efc7f1ef453f2de825710ba5d69a427a632375b5f56b3d85c94867514e2c098e65549031ba3315d392c07f2157b4809ca2ee783dd3c952971a32ae14b5dcea3c264d3aff17c1ff28037d55da706e895908cacee728accd1eb20dbdad97f7ad18a2edb95fd22147839901023320c230cb8a2c91975c3aa0568f1d2ceab65ef375ab9ddcd761c4ece8119f5295abbf23562d459153ed6433019861e5c894189fe5a02fc861aa77cb2884cd866cd3f0155bed9e4f5320e748f3506b2e93ddea12d13e032c33e9cba52b87aec4b1f06cc9ebe326def742eeda556ed487360beda4cb1a06d0a4d9ccca2e5588d817869258616195d0a35f9ec40dcf14f0258354ba5d7d167b3e6f7bef730cfee79f168effb27eec38e90c4a99550955b8ceadcc1b9e17ce3c3962b0337bdcb155bf55fb3b84aa7e90b814b051cb8ac1eda1627ab3d022970dda67f8067c4c7c1e163529d28e2f2d10f156e5ea0ef55fefa0e462cea462588a1b7c81c6128060f595638eef543f715ad031e4062d533841dfce6c3716b06d3e11e799755d95d3b73b557d8851fcef8d6ce32ad0543f37e0cc5fbf71abaa06296296993a19a0b897229d803ca7445073314f29a252f1193af2e223a359a51c889a7a50f15550ae3d5fb3912e63408e985d85404db5791193dc7c54c2ea8ca48c3b054dcf7a3fdbb74d126435ccf968261ccec45418640f9b02912e910fbf18561d9d2e0dfa554fc338399ecace70e70b7c76138d1cbc84d4aeb828d985ac02fc22b79ddf1c5aeba5248fcecb811aadd47e580eb28dbcfba67436cd641b3b954c786054e6302e225e521f06d848718f66f5c450dd20a43e66c4a1308cb246111c563074de1f7000f5b63b36ed31c7e81e8f76aa078f6af7b233b17d0d44a8dfb3150357c798fdd269a9944f08ea0528ab11db4a309f9043f86d184fa9aeaf27ee953ed252d3c18502512ad9188a7678ed521f53a7fc275e663f1a3a98ef84fda0556296ad4b54035c6bb522ef2d8636b3d4d52aa770627d88e3aeb706d9f12d560a1272286f44dba74f8b9fbaf0302df8699f385f57dc25a45b65a259d5fcc1d9c08489ecd8d5fa7c6f02a68a7e9e0e7b76f4e6216e6573d391124c6ff8d19d2af5482b3f04bb7146d50b7214ccbc8b0a3f0181f34de0e221a1122499e587eb52be4b123d180695032d068f3ec5b10c489c173462b5552e47d1b6c964556eeccdc671b3d3da1f9bcd7d5390f30bae8f0a18a0d9d9e77538dfa38256c504f00421714faa25d440c0a7183efcf1b7c33997c7c56523526adb73cc14481f2b7103031309e1c67d1bbe6a3d96eaddc8dbb029358b18e15833a135f6b3f97d8ae2f08459d3d57", 0x1000}, {&(0x7f0000005140)="cf3c9bdf98ed860efdde24968b40083a5e31ad7fc39af9ac458ab7e4a884d5419b8ee613718f3c98e8a4934f2c667a72598070f0d4b64f669808f02c951f000734831db9249ae26600318ea36ecedf210ed5e82a6002f9b2698e5c7e63b820c92d3973240afb07779eaa03595d0a8265f4db339de6c916138b61f8cc0fc2319982f341547e1934dbdf811729f2a9117a197a44b978eedee0719e5ca253eb805185681607197d53c7a6933d9fec0806ef44a75a62d269f1e9aa1b1a67fe624c31a5d5f724dd7dfa2d482798ff227d2dfe73", 0xd1}, {&(0x7f0000005240)="3083d5d1fb1f81cbba54174b93d92d2fc9090aad808c773e7127abb72830b6e23ad23e9e81659ba593861593967612da12b4562f1800b03eb64e1100f50a546cb4e27a813f4d13a0101b1d2ed4f7769d0d63ec845d623f5aeea1", 0x5a}, {&(0x7f00000052c0)="6c13e0ae5c82ba813b92b87d697fcb976c2e02787b1dde3bbafe2aac5795e66a2626c7471deabd6c575af978240f14e7ca27171d396664efb6e107f669e0f9576825e491aa0dddd740d126e051573ddaec942e4de9ccf69a24557dc28d858bdf384e66f1dde55177e8cab5f78009b94009a5ad6162cec698e1ecbfb83943bd8b978cdd07a6962576fa15f19038c01a5c945f7caf9e31a18d9b33399bdc706e4bb6f740c236fbb0582cd9bbd0a3e67e3144b6d1478b93995abd93c7f70fa7fcc8ae45c3741ff8d68a", 0xc8}, {&(0x7f00000053c0)="7b1320688ffd6ac512f4ba2e3f0b7338440ad9a28ece9b7e2a62b598472cfa529cfb5a1c7279fa2488301613febba465d536c9d56b963bf88fc5741cb68e015bc1bf5d6eb8a1dbc0bd3c18844ed9ed20cd00a3922a03abc6da27ab2624d9f7568c312964230606beb4cd2be79b90ede63a805e6d469449ebb117e5abefa69b898cccab7b883d7b9674cd42f6816b8ffe8d5ac4b1bd4bdd69e49c5065ff8a51ea9cc294ba0ffdf17201d444e683068b3884d6a1188f", 0xb5}, {&(0x7f0000005480)="b05a143754", 0x5}, {&(0x7f00000054c0)="77d90270f6febb97d80f1e35d0795373fb129eb4f58f324546c6b1bd03856843fccd76f2618d0a755af711da327056cc65e21e00f876fe2ebf266c0537b760e6b377612d64deb65f40c8e69e6ac88794", 0x50}, {&(0x7f0000005540)="6510", 0x2}], 0x8, &(0x7f0000005600), 0x0, 0x4}}, {{&(0x7f0000005640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000b800)=[{&(0x7f000000a3c0)="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", 0x1000}, {&(0x7f000000b3c0)="5edbc154406b65bc9ea9c9cd5aabefb8ca0c7ede0ca8a26153f25e6521735276babdc28fd0b7b512a34a8efe7568a711ce8cc057a2c34636044ee453c3e94db8983c29c1", 0x44}, {&(0x7f000000b440)="89dd692eb36b92f189e02c61f5b992f092664f4e2900f5dc73613b4fbc68dd212d51db96e6552efc4328c06467128b462de3bd9c0f33d6c9b89d5c64648f670860657768808aaf3dff7fdc0739c8818009925f440ae923489d411b1c00db0daec9084eaaf6c3d71a5e7ed9a806c4d4ca4fc58aa0a278871d5b39901e569288d5873f853e0e9ee33e1522c0becf46e711be937d1a1bf5d01c47fb6fff00d24aa9824e236018b4e98d95d7275078daa75d6ac690176a6b7157d02bc86d798678731108a01f5d96360b2458aab4c4dc9f637b124132c575e52e9c7e94e244f2bee8025dbf3e0109784f", 0xe8}, {&(0x7f000000b540)="b4815977a4862379cf846eeac6ca3f4727c9c52a2432da63817e3130850a8b84f8640c25bb2c4f9a84871b4c6358c9ac28ea34e3e15e8755a153854f303ead586cb8c737b09a29b9a63755c20ee19089775174c76be2f45965897e5c107cf9a8e5b2de5630c708ef123347214e132b365ac87f1eb7cfcd95d0afe7393a86b4534099626cb2ac725e93431374c28fb987e4", 0x91}, {&(0x7f000000b600)="4e1725f92663982cc0f623e070f994e09ee4d2d1a08abb58e1ee65bd71b507a79053810714934b688bda214a4d475007c5fa6acab12fa1b9a11b5e4ce817372b10cc4f5bae79a49b216ad0305f19be66b81e5185ea0cf4a15493b07f5153de60a2d57ee4347579340a725529488d509a26025fda960442f832b582a381623c54731cc54e21a27f50641b554ee4dc37fb9f3981bb36de5e5375e3e64cd939cf71e25ad51968df", 0xa6}, {&(0x7f000000b6c0)="2d65488a", 0x4}, {&(0x7f000000b700)="443451e6bbc3c7d8c6eafb6fe83c6f7d4a53e5b8b71ba0fdd4dd6e51e11a15bafd7031d9ad2972cb15a9b822692ae8c7e00d3036a27ec538ab2e408d2b145b6fb11e1f1cbfd1a4c4ad9bc20310a976839904870845e9710fb7eb501eeef65e4dd432d5c2095a3961e45e528844ff619c40035b3a522b39f95861ca6cf63a3688b022b3c611feb69306ccf53e4a2954ffd0ce4814c07507bb1820f40753adec017ad556effd2601c2f75afaee86f1a293eef7a48f9389f032b676546f4e973bef1f355299002946967c06e2542a1bd7fa1d7525c0f24a", 0xd6}], 0x7, &(0x7f000000b8c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r2]}}, @rights={{0x18, 0x1, 0x1, [r3, r1]}}], 0x78, 0x801}}, {{&(0x7f000000b940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000ba00)=[{&(0x7f000000b9c0)="13d93d4046188726b9a3dc72690865b602f2b48b10ec72ed58b6c72d", 0x1c}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f000000ba40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000bd80)=[{&(0x7f000000bac0)="ad5df7f36d345f90670a178c2a9c7a8e24badca77765feaf8cf1a3a552011f753c20f36f7a8c1150534f6d934932326a768364ff47c5a0ffa8ae58cd3d3c0f9ac5473db353f580ceec92255eca6fa3b922bc32f5c8f79723e9257d985f00dccf7565279577b378730ced285a1ea5fae0c841f34121647b777d19687c9a495e572448c3e74d7d5bfa563e128856e3c35d863994b3c0", 0x95}, {&(0x7f000000bb80)="18b83b6a2bfceb24dee22511eff7895ff275f7cc3c9c", 0x16}, {&(0x7f000000bbc0)="03edfc7f1462826dea095780e6ef58ccd0b3ef351bf283bbcaa8f12dda0947ad", 0x20}, {&(0x7f000000bc00)="e6c79cc2d3638a54d51a97dfd39eb061091fd4b43d03ccc7c4a37641e82f84c199275ed40bf7f3fdb452cb447dfe1919ccfb000d264a3d4cafe505514eb9b3df6c8b3bb3d2266d910735df8abd172ed7b8a0d1e0119d214ed0ec99959a6e8196bb89bf6035111f3fd5c2f943e08ba8b9c5da148079b18858d5c588a966248fd27794", 0x82}, {&(0x7f000000bcc0)="9706e5430bb192106f9d4495bbceadef6c0f7cac2434f6207d832e1e41d023a24a11387b5acd3b6ee51c9cbef45dbbfe30af16dc3ddbfe0495ef9c5b1cb425547c7c5168d28164212282229d1f04d0c4160274e2a0d3cec4b739d084b3929a3dc4f2a3a46a4a336c8765b20d61d11d98a75e26e044507f23e24d78a564c67737489ded88457940fe5cebfac27d76a3b5332c9830d14a5557054500e487e355a5fe595e", 0xa3}], 0x5, &(0x7f000000be00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x58}}, {{0x0, 0x0, &(0x7f000000c280)=[{&(0x7f000000be80)="2da17c0a2982afd373dff2a4bee244a897c248b8a35063f774e670b387674007dbacaaf6ec0873c4b2af2141030b18038aca9b6868e9dac3e668", 0x3a}, {&(0x7f000000bec0)="ef2e28e08db7799cc992495afc68b246b2ba8e5ea187e81b74e633fb36cb837aeb9324c55ff21149f08401", 0x2b}, {&(0x7f000000bf00)="27bbddbd678983790b64d128db1cbab8681b6af0c1f3a325e68deea1ea5f675f549a8350e4c2e6a60830e8fd3ead5f9e8557b2cd8836847dc8768e850606ca4a1b0e443ebe5b561577c245cfb7bf9373da6d3771f34a29cae3547afbf4813a2474ded6b9056a1a2448f1", 0x6a}, {&(0x7f000000bf80)="586643b01fcc44e23527b8df678f4e6d2a449abdbf27a1d85886efeb68f4e6b4d150bb57c8a57def157e9e03ef039872d55709db8cf9f38c11a5932975521adcb8ab4b0f501e2a9694439b5d4943c9592368b2801463d89898012a7625fd3a6133cc5f2335aed4d638539883559267de96eb4ff2124955e6267d6dfa65816947585c729d0ee43b93125fcc3abb74b85d0a185770e509c3f7b75249e887098c96d4b48d4f2f1e51dce91736bbbfb2637f417fa30aa587349211f7aa591305d01d91198e5aa028865f587161a25f5c71bba47f81d83875133f901112b025", 0xdd}, {&(0x7f000000c080)="b912d813a0f0a771fd0a6d0aade83b73a2", 0x11}, {&(0x7f000000c0c0)="f227d50e05ff7383f87911f669c075600597b9b4a97d8ee74e6a23557220d2e922bc86a749df73df8d565ad16cd42b8988b49ac654663553cb3c9b33b1407a2cc8f421f9ca30b00d1063138867a4f69fa05ff9512421dff945f78185aebec6e5792bbb25847f1539cf559783509a59bc95c27015e2b1e89ce3dd2c548c964b982fa98b206661ce05a6bd9459259346833eca848288a388977d1555dc274a", 0x9e}, {&(0x7f000000c180)="528dd3565a17708a1f6b2d447bcbded726109fa3624936f0face3f45f5f5915b4821dba684809ea4997549e883b1cffad4b0141fc8704623a54f2a1af9ccd40d5ab6e400e0597d1745906df27002fbc3cc99d89f82225ca1aa7744aa243a94f05e5831f57616d2dbd6c3572d5b0a7909e2e9c9b12ae601719a64715dc81410e3", 0x80}, {&(0x7f000000c200)="9b4f85becf4ba9d0b411a5299bef44bc2cc6a7ea6e135c619bb7f03acdc772f61d69ddf8989bf45ac6241be7633ae86c23951404870b5894c38b18d4755a65636c4869d0505fd4d9ecf16ee6b2bd0df04d3c5e7dc81dc3c2c7eb5719e4379ac99cd29c5190c991fea448ee133dad99a09e0564bd083f3069b02e6fd2", 0x7c}], 0x8, 0x0, 0x0, 0x40}}, {{&(0x7f000000c300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000c6c0)=[{&(0x7f000000c380)="1e5a2f3f08d5300b780c343776c4194fbbd6928dc3d6c88ceda7878c97dab949eec843cd1a15f2cfa39a854ae0e80587", 0x30}, {&(0x7f000000c3c0)="e86baa652d404bf937736ab2413b41482c31d5843e5505d7d165af013d74fac05b83f90742b7f58bec23b5", 0x2b}, {&(0x7f000000c400)="d4eefdf2e51b40074d4f36e9dd9eae2fd5ce3f77cd5fa825167474ca912a753970008b738be0d30e96fc23c30d0e3848ed6b97180d7e9901c15539eb1e6c2f0e0ee1fa2fb73a73b547f9beda91a3386557d0c11cecd322ee2f96f374e0ce7efeef2fd126688d2bfc433e1f74b6085fa763d04e1274211bc7970da7cd0f3276837bb7071511f46b1da0cc4e58d37c0ad06da02c2b86b64bd7c929efb391a2b2c5a25a896abc4c607fe898573d48d5ca5085bbfd44af", 0xb5}, {&(0x7f000000c4c0)="9d9f7abbb48e9dd1437a1a2440ec1d6814f288bd182d461c44235b3da4345efde7155129b80f162767b4741f5ba5336d8541eec8cfb2d41de1c5c8cad66ffa883d8888a15f83b15194c231a2a79f566dd1ef57c1300fef4eb6b4487b092babadfabe5232ad", 0x65}, {&(0x7f000000c540)="ce58f19b1877d7edcf3aae09baf082a62fe6165d4f61a42b3cf1069dcceff802fa1751988aa7e20a5f89694acf73e7abaa5e66b9fe03e3436a589fe77580e8f5911d78ab8a002f838ae6872d42a841741b580dc9be038286c3685a06d8f0f0cbcaf8e453998079b08b23267c436997daf0c320d86571c94409913b350b918afb1eaafea9f4a47a", 0x87}, {&(0x7f000000c600)="810997c83d7c6174f7dbfa85de5e2431866a7bf66e6aef8a1fba4deec32e16cb0e4d38e6e533fa5f47180ed7dd2cf0874cd90dc216673236dabdf1f9aced92de12316b67cec0c7368ce352860135792a591a08ffd02e4d21ce9dfbe1e706bd75fe4dbaaf3e88e42285086b338cfef45e87327a79fdb89283ce5d6dd9ce4633459e3b38356d89b2b7c39c0046b722e607ae18bbfc2bc4ee5b18ece28eb7a9020e57b69e0a63f2c2559b4b9fcc5ed8954bac1f8339", 0xb4}], 0x6, &(0x7f000000c880)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3]}}], 0x120, 0x80}}, {{&(0x7f000000c9c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000ce80)=[{&(0x7f000000ca40)="e69d7e4623f7bcae00d23b6d5bf78ea630a4555a663c33e86d0f8447d4c7351104811e97ae3313c68119eb61167a0d2a2d30d1037f7095e30fcbe43a6d86dbb131a2c57b67c8a4699b639214cf6fe6d4e66c195390fc424f2bf265064d6751c30f5d5d52dbcf363ee284a55470908b22e973bfb9a224dc55b098d856f63e8e4ec4c08b8f", 0x84}, {&(0x7f000000cb00)="ec672b70ee64247f82ae804a136c87de0c124f7f44269cd1e8ead6e5eb0b86aa68b73dd98da7017d262485333aeb56079d3b2a3fe36659e3fffb1f09614baaf3f37abf0ec0e94b0f489611b8275351c483f0a58cf91e2cc39f3d2f79ea952690104493f0c4f8e6215ad39e270e8a2b96f3ca79b0d64622aeae084ec46d49890ad8dc543487f73ba3128f8d26", 0x8c}, {&(0x7f000000cbc0)="6e0dc59e734b0406c979f06108a0fe6f2ebac11f8a39aa254537619a3c6d7e662b74b1e5cf8d5d0ce31b3c620aaa9382832ead12bb44825b503cfb108f7a01b0804667a00369f7a85ad9e399c604f3e723ea12c3706921e76772a68682984edc35898b1c401be91163b7e02f8f605832879e3089df77249d3913fe2130621a1d53734f76d91783558d4a37f30ebe8985054e7ddc89e55482520f2579879418c87c03532e437951fde99f3ca389b8caea99be9488e7ac8fe6bfbc06a1f922f92774cf474e58a82691690f586cf91952fea6d3e6a6b7d5231f3f05c7a973bf166393116f6e52ae6e07a4e5e374c74ec99787c0", 0xf2}, {&(0x7f000000ccc0)="03956f25d29be2182d0be939770d3dd58d0e1a3bff3308d44ca5eb6b358261b8bb21c4493bc0edf2364a09c05beeb7a5a1a5c94986a649bf2496f4195e81c41ef557098fd81333d55913f45f81f04f81528bd1df36d97a57b371bd5f8018a30e5f60854f8a7d39f42d4026cf91f9960a453156f86bf4c51e31cc62a2b7a2777e5795f63b90e7b1330fd0ed15976915c44cfdff4e6ab6c39d982bbf", 0x9b}, {&(0x7f000000cd80)="e18ba886692973b651479fbacbd43040e3e3d64ca645626c82cb63634f065f88f882b30add20d212fb5c2bdca64049566ddedeea1e34837d923042f78613dcfbb83cbccca6141890a38066a0310ab92266eade72f40829dcac947f46c0cc4a4e49fbfab0ec2ec96a16aeb3a4d135c2eae9c8015d786f20f2a54463d7ffdcb3361bfdbed91e62d210eb2f289d696f5bdb0e5ad7e8e463866a3ad7885dda1904efdf7b9d87c6231c24ce5749502ce8e4d7319b641706b79826d7a01fe21ecd3cd524d6798e2fe36fc4009a60a6e0cb241e8bef13652afe3f", 0xd7}], 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000d650001a18c5fd"], 0x58, 0x8000}}], 0x9, 0x44) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000001900), 0x175d, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000001cc0)={0x0, 0x0, 0x7, 0x6, 0x2}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x7fff, 0x3, 0x73d]}, &(0x7f0000000080)=0x44) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000003000000030000000000000000000000000000000000000017b04966ca387d45931415d02010cc8461fa3ecfdefbe5c870902e91fb50e8346122ef5e36a0eccf43"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil) fstatfs(r7, &(0x7f00000003c0)=""/146) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.056823422s ago: executing program 0 (id=558): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @broadcast}, 0x10) (fail_nth: 2) 5.722052865s ago: executing program 0 (id=559): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x804) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000009600)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4) shutdown(r4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd"], 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) (async) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1401}}, {0x35, &(0x7f00000002c0)=@string={0x35, 0x3, "a74ea72b61bd464e8518c10e72291f4d02120906dd7ec90f7a0697311e817670676a2dd676c14acb9aaae45bcdaa7b8a0ce426"}}, {0xe3, &(0x7f00000003c0)=@string={0xe3, 0x3, "e7cbd0ebc97174e77b54628c1d2274f6d0ef558adedab49cc3587cbd0c9743aea5543c26e57bcc0e112a6ecf021b004b484a4fa1818801985b95d728c5611b1add758c22b3cba2a05b8477f4e71ee91121d3529c868e339f1e65e6939cd4347ab31c2b476e3562cf032909709590e36b60e4f064bd7b9ac7691418809d86c9f9cbeb7e907556ffb9ff9ee10c7796f758527ef6c6274ceaa635af382a9db9e012f6067a661b3c058e45171a0dd536e7e608b727f767f9682ef12d77cc878f22ecc34924a6e6e12aebda920221dc4de33ce01c1c342167bfd20cd6087beafd33c841"}}, {0x9, &(0x7f00000004c0)=@string={0x9, 0x3, "a8acc09901ca56"}}, {0x77, &(0x7f0000000500)=@string={0x77, 0x3, "dd36ae89a89da1ed60fcbbab093b7019c89b2fc843ede9d09db7b46e3afacb89c111585d0329c5855a95035162aec14a4376942534c79791e18c9999e3d64e0d43282ff0330b4b762e7a218a91873ca8600804007f3be322c41e559e70afae921b888ff11128b43e384da2350535aedd25ebc29590"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2409}}, {0xd8, &(0x7f0000000680)=@string={0xd8, 0x3, "2816eb0e86366860ad918c20f9e9031759433e2929ead19cc2f4a2d3e55ee56aec65667162a452854c7a5667ef44a80ac2e3e258eb39f45ac609210e2025611f27f7c447ce1b927395e8f22a1cabba7f1d7caa4c4cf30ae42adb09ab6f4ce0701af6724d3d0979edb48889984bf594c637a56ad3278e6d5832278c4d58ba7ab077bcf1aae6b0f13a901434b2262d7490ea442b4f06d58e4dddb463054e5d2bab786cb0bb5349a0e8c78359b69fb37236daa197be0b63a85ddce63f61a9a6609b76794da53c6c552b3220042eb37f8a8c1f0a689463f6"}}]}) r8 = syz_open_dev$dri(&(0x7f00000001c0), 0xfffffffffffff801, 0x321041) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) read$FUSE(r9, &(0x7f0000006300)={0x2020}, 0x402) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, &(0x7f00000004c0)={r10, 0x0, 0xacf, 0x2, 0x3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r8, 0xc01864c1, &(0x7f0000000340)={r10}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) (async) sendto$packet(r5, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x18, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) 5.705133133s ago: executing program 4 (id=560): r0 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) socket$kcm(0x2, 0x200000000000004, 0x106) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0xb, 0x0, 0xffffffffffffff9c, &(0x7f0000000580), &(0x7f0000000000)='./file0\x00', 0x2, 0x1000, 0x1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r5, @ANYRES16=r6, @ANYRESDEC=r3], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r7 = dup2(r4, r4) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) r8 = socket(0x840000000002, 0x3, 0xfa) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000400)={0x0, 0xffffffffffffff6b, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x2004c405) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000000e72e499fdccaef28132fef26b0f111b14ff1e4ae37c6b37e82240144fa110a5867e7f03770ab8534", @ANYRES16=r5, @ANYBLOB="02002dbd7000ffdbdf25660000000800b70004000000080022012e0000000800270003000000080026002517000008009f00010000002000b98019007f003e01028c10f80c7cf995831a50682460608062fd5c000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x8080) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe62}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r10, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "cd9a0879", {0x3, 0x107, 0x0, 0x0, 0x29, 0xa3}}) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x64000600) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r11, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB='security'], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 5.567016095s ago: executing program 0 (id=561): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400100, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa2800, 0x62) getdents64(r0, 0x0, 0x22) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r6}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba00090400000903000000092100000001222200090581033d3503c249526e4f2c7fba4b9529dddbc845d67356ef5923dd0cf479562952dc11a9833524eb186db0b200fcbb7ec159ccd4f01aae848e4db16c1034cdd91f75a6a0930a122bec406d96ecbb6b04907c95bcfd6690a4fab154e6b951540947e64721ae52c898bff84c102c3d8be74d3a2642618941ea5956b1cca50ca763dac8cd8d05"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b09007a15b3"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000001e00", "0cfcb67ecace717eb34a87013860510f", "15f4a07f", "1600"}, 0x28) syz_pidfd_open(r1, 0x0) 5.309801141s ago: executing program 2 (id=562): r0 = io_uring_setup(0x5dde, &(0x7f0000000000)={0x0, 0x1e18, 0x8000, 0x1, 0x17e}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000006c0)={&(0x7f0000001000)={[{&(0x7f0000000080)="f8b384f3fdf6034b0459e07eb8d48fc20f828c163df800a2b08e1e3ac82d753bc89e9745b2bca1f73e0c374f961ee59ef2481d043ea304c34ec196585ed1fcb819153bb1938b4b25f23534d9ab30692669878ca910d185433711b9dc4426823f3c5367992c07b89b8f774669aa59da7c967b0b4e7cc886551404e446632f292af45e1839decd5ec22000ad4af5e731ff1299bad1d57e8c3ba3d6fa229600f1e86900edbff9dbf5ea11a2", 0xaa, 0x2}, {&(0x7f0000000140)="8f8290e51972558445e1a58ed204794c36aa19e0158d326c44c201f1804aa3032a57f8ae83be8087d4570a0a9f5c5d4de79338f86ab606c20cbfd18b8f6f77496a68bdd55164034fd7e36cbf54c91343aa5fbd", 0x53, 0x3}, {&(0x7f00000001c0)="60a9b8f3fc103972aee97e9b31f0057cd0425671ad1de287441087ad25db5a77d835ada4d67196de2473b49f7a1555ec821035c9df43c8694f129f5dee2ba5cd18a4e7d6faac6a452c67234589738375154a9cad1240177345459c3d0e91ebbe10b6e853abbd65221b200821041a088d162f39330d7fffc887c6a70542bd149fd86c295b468c291f6be0", 0x8a, 0x1}, {&(0x7f0000000280)="8bf9c5f01722d497c27b3348a4975f3a97ba2541", 0x14, 0x3}, {&(0x7f00000002c0)="27a1b67a57cac65efa473477eb362ecda1820cbd575f66fea820a4955b9d8c9f840c8e7f887d029002aa281b9de48b22e5fc6c5142bec090ace63b95a266", 0x3e, 0x2}, {&(0x7f0000000300)="31faed2df9d33610599a46ef4e48c383564444820158e31a8c10861deccce6351392476dbad0c5c020042165b461278a1be350e58d5af46e17b201216cc765dfd7842f3c080cfeb2ffc24955a1af98ca0ea733db538de9fd00f6e6550b009ab20e4b3f5da05f523b73bbd805ac293170cc58e091b8f5", 0x76}, {&(0x7f0000000380)="34fd82cf16572758c25f1e57f8c63263b74e4e7bc003cb9c4990d204db4935e3c1634c9db2a2343da514d415e2cd74ab50fbca0f008eeb222dd41b7040f9e028490da0430ce719aa80f4bbbd128013444af94ecd4fcd02a5895e789762f17a13e8d930767f2e248079656c91ef6a21f693ce9cc481db5872a8004f3424de8f2425f6193cdac6179e16b90be2384ee5acdb13ce438706a3541c9c377099ecc6aead3cf205bfd86aeee31a90bc492a331ca7cb40d771d687cce0d6", 0xba, 0x3}, {&(0x7f0000000440)="5d4345fa1fc17635daa8893742e43a32713fb864e6cb172c10428301a44314c63bd27c9c28d75a88d0dc087ff85c4028a362c320e0b3602302661d712e51289619286cd981bc6939ba1d018413404a38666ac6b6b18bc424116a1a3ab1fab8c1ed6aefe1d2035679f093d291d4a36310f8e7d17ab4a5c0d3f2845cfefbb830311caff34332ef23fe5729195b568ca00c93adc1b0c2b1d05cebed3c9f918578edbaad6c0d06ac18bc742c9a2874d2f5669651f8173be1a0d9930181312a88c2064a2eb1f89d36fa9884a046b0631ebbf2551de16575b45317af3a1cdba8b5504f445e02ba1a4458152e48643a4dc1ff933e60", 0xf2}, {&(0x7f0000000540)="b03c43c219458c70839330b87bd629a70897ca4b9257c20a54960fac0ba377653bb87043cbdafe533413dbaf6786c784a59cf8e0c7e302b914a441bde46f50ecb32d05e9c467e486941487ae1e4a6e56bcac1c0430db6efbee84ce1992a230c01b4d48eb652d100b523a5def20124d150488a2beee61d637de04f02bfedf11ef7503b54c6ba3a98060cff144bfdc3c90b3ade5e957b69a577f2730cb115e17dd26a3f833eb7020cf1aaa968f4fa48aee0d467cb956f7fde00b8861f158edfd741185979bd3f70cec50c3", 0xca, 0x1}, {&(0x7f0000000640)="f16c5c85130e77f478acea5351a62aa20cff9ed52132c7d42af485152a76041e51e9e86133b2a6499042313d6ac3402eb8bfda4e5d040ca5065b5be6448f31179c35c146dca4a771c0dda0cc43e3e25e", 0x50, 0x2}]}, 0xa, 0x1}, 0x1) close_range(r0, r0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x4b2100, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000740)={0x8029}) modify_ldt$read_default(0x2, &(0x7f0000000780)=""/164, 0xa4) (async) r2 = syz_open_dev$loop(&(0x7f0000000840), 0x1, 0x484000) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000880)=0x7) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000940)={0x1, 0x10, 0xfa00, {&(0x7f0000000900)}}, 0x18) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000980), 0x53ee5ede66d4f2, 0x0) (async) r4 = fspick(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000a00)={0x1, 0x3800}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000a80)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000b00)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000a40)=0x7, r5, 0x0, 0x0, 0x1}}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000b80)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x3}) (async) ioctl$KVM_GET_REGS(r6, 0x8090ae81, &(0x7f0000000bc0)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r6) sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r8, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x5e}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4090) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r7, {0x7fffffff}}, './file0\x00'}) (async) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000e00)=0x8) (async) modify_ldt$read_default(0x2, &(0x7f0000000e40)=""/31, 0x1f) socket$inet6_udp(0xa, 0x2, 0x0) (async) setxattr$incfs_id(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), &(0x7f0000000f00)={'0000000000000000000000000000000', 0x33}, 0x20, 0x1) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000002e00)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002000)={0xda0, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2c4, 0x11d, 0x0, 0x1, [{0x2ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x35, 0xfffc, 0x6, 0x2, 0x6, 0xbe1c, 0x282]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x18, 0x6c, 0x4, 0x1b, 0x16, 0x30, 0x1b, 0x24, 0x6c, 0x1, 0x12, 0x46, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31ef, 0xca0, 0x2, 0x1, 0x9, 0x8, 0xfffc, 0x2]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x3, 0x5, 0x2, 0x3, 0x5, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x7, 0x6, 0xfba, 0x1, 0x3, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x280, 0x1, 0x8001, 0x732, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x7}, {0x0, 0x5}, {0x7, 0x8}, {0x6, 0x6}, {0x4, 0x2}, {0x5, 0x2}, {0x3, 0x9}, {0x7, 0x8}, {0x7, 0x5}, {0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x3, 0x3}, {0x6, 0x4}, {0x5}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x4}, {0x3, 0xa}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x2}, {0x7, 0x5}, {0x5, 0x6}, {0x6, 0x2}, {0x2, 0x2}, {0x6, 0x8}, {0x4, 0x2}, {0x1, 0x2}, {0x7, 0x3}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x3, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x5}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x8}, {0x4, 0x5}, {0x2, 0xa}, {0x6, 0x6}, {0x6, 0x6}, {0x5, 0x3}, {0x6, 0x7}, {0x4}, {0x3, 0x9}, {0x7, 0x9}, {0x4, 0x2}, {0x6, 0x5}, {0x6, 0x2}, {0x1, 0x6}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x5}, {0x1}, {}, {0x3, 0x7}]}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x4, 0x4}, {}, {0x2, 0x1}, {0x0, 0x7}, {0x6, 0x4}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x3, 0x3}, {0x2, 0xa}, {0x6, 0x2}, {0x5, 0x7}, {0x0, 0x1}, {0x1}, {0x7}, {0x0, 0x2}, {0x7, 0x4}, {0x1, 0xa}, {0x6, 0x4}, {0x4, 0x7}, {0x1}, {0x5, 0x8}, {}, {0x3, 0x8}, {0x0, 0x7}, {0x6, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0x6}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x9}, {0x7, 0x1}, {0x5, 0x2}, {0x4, 0x4}, {0x1, 0x6}, {0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x0, 0x2}, {0x5, 0x9}, {0x7, 0x9}, {0x4, 0x2}, {0x6, 0x5}, {0x6, 0x7}, {0x5, 0x4}, {0x4, 0x1}, {0x6, 0x8}, {0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x1, 0x2}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x646d, 0x1, 0x6a, 0x7, 0x3, 0x8001, 0x280, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xa, 0x4, 0xe5, 0x5f4c, 0x100, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x24, 0x6c]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x1b, 0x6c, 0x36, 0x4, 0xc, 0x1f, 0x6, 0x6, 0x0, 0x1b, 0x30, 0x1b, 0x16, 0xc, 0x3, 0x4, 0x1b, 0x24, 0x16, 0x36, 0x4, 0x5, 0x5, 0x6, 0xb, 0x1, 0xb]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x8, 0x0, 0x5, 0x1ff, 0x8000]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x40, 0x200, 0xf, 0x0, 0x7fff, 0x98, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x5, 0x24, 0x1, 0x5, 0x5, 0x1b, 0x60, 0xc, 0x12, 0x18, 0x12, 0x2, 0x60, 0x9, 0x6c, 0x12, 0x6c, 0x1, 0x60, 0x5, 0x9, 0xf8, 0x30, 0x24, 0x3, 0x60]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x2}, {0x7, 0xa}, {0x2, 0x4}, {0x5, 0x2}, {0x7}, {0x6, 0x2}, {0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x6, 0x6}, {0x1, 0x3}, {0x3, 0x6}, {0x1, 0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x3, 0xa}, {0x3, 0xa}, {0x1, 0x8}, {0x5, 0x3}, {0x0, 0x6}, {0x2, 0xa}, {0x4, 0x4}, {0x7, 0x7}, {0x4, 0x9}, {0x2, 0xa}, {0x7, 0x6}, {}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x9}, {0x6, 0x3}, {0x3, 0x7}, {0x2, 0x2}, {0x1, 0x6}, {0x2, 0x1}, {0x2}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x4}, {0x1, 0x6}, {0x1}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0x3}, {0x0, 0x8}, {0x2, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0x3}, {0x0, 0x7}, {0x6, 0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x3, 0x3}, {0x2, 0x1}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0x9}, {0x5, 0x3}, {0x3, 0x3}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x2}, {0x6}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0x7}, {0x1, 0x8}, {0x4}, {0x3, 0x5}, {0x4, 0x9}, {0x6, 0x4}, {0x7, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x0, 0x7}, {0x7, 0x9}, {0x5, 0x1}, {0x6, 0x8}, {0x1, 0x8}, {0x5}, {0x2, 0x2}, {0x1, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xed5}]}]}, @NL80211_ATTR_TID_CONFIG={0x428, 0x11d, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x9, 0xa1, 0x1, 0x7f, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x4, 0x6}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x6}, {0x4, 0xa}, {0x4, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x5, 0x2}, {0x2, 0x4}, {0x2, 0x1}, {0x7, 0x7}, {0x4, 0x8}, {0x3, 0x6}, {0x7, 0x3}, {0x2, 0x1}, {0x7, 0x6}, {0x0, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x5}, {0x2}, {0x0, 0x9}, {0x3, 0x4}, {0x5, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x5, 0x6}, {0x1, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0x8}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f0, 0x5929, 0xff, 0xffff, 0x7, 0x8, 0x401, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x3f, 0xfff, 0xd8, 0x8, 0x80, 0x2ccf, 0xe]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x400, 0xfe87, 0xfd4d, 0x7, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x5, 0x4, 0x9, 0x5, 0x5f, 0xe]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x7fff, 0x7f, 0xc5, 0x0, 0x4, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe5, 0x8, 0x4, 0x6, 0x20c, 0x140, 0x1ff, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0xa, 0x3, 0x27b, 0x7, 0x3, 0xd, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x86}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xb, 0x2, 0x7, 0x10, 0x7, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0xb, 0xffff, 0x8, 0x9, 0x10, 0xa4a5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x288, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x3, 0xa}, {0x6, 0xa}, {0x0, 0x3}, {0x1}, {0x6, 0x8}, {0x5}, {0x0, 0x8}, {}, {0x3, 0x4}, {0x1, 0x9}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x6}, {0x1, 0xa}, {0x5, 0x8}, {0x6, 0xa}, {0x1}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x8}, {0x1, 0x3}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x5}, {0x7}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x7}, {0x6}, {0x3, 0x1}, {0x5, 0x3}, {0x7, 0xa}, {0x5}, {0x7}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0x9}, {0x1}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x1}, {0x1}, {0x0, 0x6}, {0x5}, {0x2, 0x3}, {0x0, 0x4}, {0x3}, {0x6, 0x4}, {0x1}, {0x4, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x6}, {0x7, 0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0xa}, {0x0, 0xa}, {0x3, 0x1}, {0x4, 0x8}, {0x5, 0xa}, {0x5, 0x7}, {0x5}, {0x2, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x1, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0xa}, {0x7, 0xa}, {0x4, 0x4}, {0x1}, {0x7, 0x9}, {0x0, 0x7}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x4, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xb, 0x36, 0x16, 0x56, 0x30, 0x5, 0xb, 0x12, 0x18, 0x6, 0x12, 0xc, 0x3, 0x24, 0x30, 0x24, 0x60, 0x3, 0x30, 0x3, 0x5c, 0x24, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x5, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x158, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb2, 0x2, 0xd, 0x0, 0x0, 0x4, 0xc, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x6}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x0, 0x3}, {0x5, 0x1}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x4}, {0x3, 0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x8}, {0x0, 0x3}, {0x7, 0x2}, {0x7, 0x6}, {0x6, 0x7}, {0x7}, {0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0x36, 0x36, 0xb, 0x48, 0x24, 0x5, 0x1d, 0x3, 0x48, 0x18, 0xc, 0x36, 0x29, 0xc, 0x12, 0x1b, 0x9, 0x6, 0xd, 0x9, 0x12]}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x60, 0x2, 0x3, 0x6c, 0x16, 0x2, 0x30, 0xb, 0x2, 0x48, 0x24, 0x5, 0x24, 0x48, 0x9, 0x24, 0x4, 0x5, 0xb, 0x18, 0xc, 0xc, 0x24, 0x18, 0x4, 0xb, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfffe, 0xff, 0xffff, 0xfe01, 0x5, 0x1, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x40, 0x2, 0x6, 0x83f, 0x7c, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x7, 0x1, 0xff4, 0x0, 0x40, 0xc9d3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xc28, 0x400, 0x4, 0x6, 0x17d, 0x0, 0x8]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x3, 0xa7, 0x81, 0xffff, 0xa, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x18, 0x18, 0xb, 0x6, 0xc, 0x30, 0x1, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x200, 0x4, 0x80, 0x3ff, 0xfffa, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6, 0x8, 0x2, 0x81, 0x3, 0x200, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x34c, 0x11d, 0x0, 0x1, [{0x304, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x61}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7a29, 0x9, 0x810, 0x3, 0x0, 0x0, 0x1, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd5a, 0x4, 0x3, 0x5, 0x6, 0x1, 0x3, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x5, 0x5, 0x6c, 0x3, 0x1, 0xc, 0x9, 0x1b, 0x3, 0x18, 0x5, 0x16, 0x1b, 0x18, 0x6c, 0x12, 0x6, 0x6c, 0x1, 0x1b, 0xc, 0x4, 0x3, 0x12, 0x6c, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x8}, {0x5, 0x4}, {0x3, 0x2}, {0x6, 0x9}, {0x2}, {0x4}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x3}, {0x4, 0x6}, {0x3, 0x1}, {0x2, 0x9}, {0x2, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x2, 0x15}, {0x5, 0x2}, {0x6, 0x9}, {0x6, 0x2}, {0x7, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x1, 0x4}, {0x2, 0x5}, {0x3}, {}, {0x4, 0x3}, {0x1, 0x1}, {0x6, 0x8}, {0x6, 0x8}, {0x4, 0x16}, {0x1, 0x2}, {0x4, 0x6}, {0x6, 0x4}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x1, 0x6, 0x36, 0x5, 0x6, 0x35, 0x2, 0x36, 0x1b, 0x33, 0x60, 0x6c, 0x9, 0xc, 0x48, 0x16, 0xc, 0x0, 0x36, 0x5, 0x1b, 0x6c, 0x2, 0x60, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xff}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x60, 0x3, 0x60, 0x4, 0x3, 0x2, 0x24, 0x2, 0x36, 0x2, 0x2, 0x3, 0x24, 0x60, 0x12, 0x1b, 0x24, 0x5, 0x48]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x5}, {0x2, 0x6}, {0x5, 0xa}, {0x4}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x6}, {0x7, 0x1}, {0x6, 0x3}, {0x2, 0x7}, {0x6, 0x7}, {0x3, 0x6}, {0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x4}, {0x2, 0x8}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x7}, {0x3, 0x1a}, {0x0, 0x6}, {0x3, 0x8}, {0x6, 0x8}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xbcf, 0x4, 0x8acc, 0x3, 0xbe2, 0x2, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x80, 0x85, 0x7fff, 0x2, 0x5, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc, 0x4b, 0x1, 0x5, 0x6, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x6, 0x3, 0x8001, 0x4000, 0x4, 0x65f, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x7ff, 0xce8f, 0xfff8, 0x2ebf, 0x8, 0xfff, 0xafb9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7f80, 0x41, 0x401, 0x4, 0x9, 0xdfe4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x16, 0xc, 0x18, 0xb, 0xc, 0xc, 0x5, 0x1b, 0x13, 0x92f211f60f562219, 0x6c, 0xc, 0x6c, 0x30, 0x4, 0xb, 0x9, 0x48, 0xc, 0x36, 0x36, 0xc, 0x60, 0x48, 0x24, 0x6c, 0x16, 0xb, 0x36, 0x60, 0x1b]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x7}, {0x5, 0x8}, {0x5, 0x4}, {0x2, 0x16}, {0x5, 0x1}, {0x4, 0x3}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0x1}, {0x6, 0x7}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x8}, {0x7, 0xa}, {0x0, 0x8}, {0x7, 0x2}, {0x3, 0x3}, {0x1}, {0x0, 0x6}, {0x7, 0x3}, {0x4}, {0x4, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x0, 0x9}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x1b, 0x5, 0x1, 0xb, 0x3, 0x4, 0x12, 0x30, 0x0, 0xb, 0x36, 0x6, 0xb, 0x48, 0x3, 0x5, 0xc, 0x3, 0x18, 0x6c, 0x24, 0x24, 0x48, 0x9, 0x12, 0x6, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ae7, 0x0, 0x6, 0xfffe, 0x5, 0x0, 0x5, 0xf]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x1}, {0x0, 0x2}, {0x0, 0x9}, {0x7, 0xa}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0x5}, {0x7, 0x6}, {0x7, 0x2}, {0x6}, {0x3, 0x7}, {0x4, 0xa}, {0x3}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x3}, {0x6, 0xa}, {0x4, 0x8}, {0x1, 0x7}, {0x1, 0x6}, {0x3}, {0x4, 0x9}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x7}, {0x5, 0x2}, {0x7}, {0x6}, {0x2, 0x2}, {0x1}, {0x5, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x9, 0x52e, 0x1000, 0xd, 0xed0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd5, 0x9, 0xfc01, 0x6, 0x8, 0x0, 0x0, 0x782d]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x30079647}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}]}]}, @NL80211_ATTR_TID_CONFIG={0x2f8, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x969}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x23c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x228, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x1}, {0x6, 0x4}, {0x5, 0x6}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x5}, {0x6, 0x3}, {0x3, 0x6}, {0x1}, {0x1, 0xa}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcc, 0x8001, 0x5, 0x8, 0x27b3, 0x4, 0xb181, 0x6]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x6}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0x3}, {0x3, 0xa}, {0x5, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x9}, {0x6, 0x3}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x3, 0x7}, {0x6, 0x4}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x9}, {0x1, 0x6}, {0x4, 0x9}, {0x5, 0x4}, {0x4, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x1}, {0x4}, {0x3, 0xa}, {0x7, 0x6}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x3}, {0x3, 0xa}, {0x6, 0x9}, {0x7, 0x3}, {0x2, 0x1}, {0x7, 0x2}, {0x2, 0x5}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x9}, {0x4, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x5}, {0x6, 0x8}, {0x0, 0x6}, {0x2, 0x9}, {0x3, 0x8}, {0x6, 0x8}, {0x5, 0xa}, {0x1, 0x3}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x5c1, 0x505, 0x6, 0x81, 0x8, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x6}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x3, 0x8}, {0x5}, {0x7, 0x9}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x1}, {0x4, 0x5}, {0x4, 0x3}, {0x3, 0x4}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x5}, {0x6, 0xa}, {0x4, 0x2}, {0x5, 0x1}, {}, {0x7, 0x5}, {0x0, 0x6}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x4}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x5}, {0x4, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x2, 0x8}, {0x6, 0x4}, {0x7, 0x7}, {0x3, 0x5}, {0x6, 0x2}, {0x1, 0x7}, {}, {0x0, 0x9}, {0x3}, {0x0, 0x8}, {0x6, 0x2}, {0x7, 0x2}, {0x4, 0x1}, {0x3, 0x8}, {0x3}, {0x7, 0x4}, {0x2, 0xa}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x2}, {0x4, 0xa}, {0x1, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x4, 0x9}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x5}, {0x6, 0x6}, {0x2, 0x1}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x6}, {0x5, 0x2}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x3d, 0x0, 0x1, 0x1, 0x7, 0x8, 0x5]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x38, 0x36, 0x5, 0x16, 0x1b, 0x3d, 0x5, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0xfe41, 0x6, 0x400, 0x7, 0x2000, 0x3ff]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xd723, 0x8000, 0x8001, 0x4, 0xc, 0x0, 0xfffc]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0x8}, {0x5, 0x3}, {0x2, 0x3}, {0x5, 0x1}, {}, {0x4, 0x2}, {0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x9}, {0x5}, {0x0, 0x9}, {0x1, 0x5}, {0x3, 0x5}, {0x3}, {0x7, 0x3}, {0x1, 0x9}, {0x4, 0x2}, {0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x2, 0x8}, {0x4, 0x5}, {0x7, 0x5}, {0x3, 0x5}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0x1}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x7}, {0x4, 0x9}, {0x2, 0x9}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x1}, {0x3, 0x7}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x4, 0x4}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x6}, {0x2, 0x6}, {0x3, 0xa}, {0x7, 0x4}, {0x4, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x6}, {0x4, 0x4}, {0x6, 0x3}, {0x3, 0x7}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0xa}, {0x1, 0x4}, {0x5}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x3}, {0x5}, {0x4, 0x6}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffe, 0x9, 0x2, 0x1, 0x400, 0x1, 0x6]}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffeffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x30}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}]}, 0xda0}, 0x1, 0x0, 0x0, 0x400c0}, 0x24044040) 5.192780895s ago: executing program 2 (id=563): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x2, &(0x7f0000000480)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r0, 0xffffffffffffffff, 0x2) 5.13646765s ago: executing program 3 (id=564): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet(0x2, 0x80000, 0xfffffffb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x31000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000140)=[@in_dx={0x69, 0x20, {0x907e, 0x6}}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0xddc, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xfec00000, 0x8371}}, @nested_vmlaunch={0x12f, 0x18}, @nested_load_syzos={0x136, 0x58, {0x1, 0x9, [@wrmsr={0x65, 0x20, {0xafb, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x2}]}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x6f, 0x6, 0x5, 0x1}}, @nested_amd_vmsave={0x183, 0x18}, @uexit={0x0, 0x18, 0x7}, @wrmsr={0x65, 0x20, {0x1b1, 0x9}}, @in_dx={0x69, 0x20, {0x844c, 0x1}}, @wrmsr={0x65, 0x20, {0x938, 0x1}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}], 0x1f8}) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000257000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f00000004c0)="0f79b200680000660f38816ef6f3d9f366baf80c640f01cfef66bafc0c66ed66baa100ed0f01cbb8cc0a00000f23c00f21f835020005000f23f8ead000000054000f08", 0x43}], 0x1, 0x1f, &(0x7f0000000440)=[@cr0={0x0, 0x80000002}, @cr0={0x0, 0x40000009}], 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x1}, 0x7}}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0xd2980, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) 4.367164851s ago: executing program 1 (id=565): r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x6, 0x8, 0x2, 0x0, 0x8, 0x4, 0x29, 0x6, 0x5, 0xb7, 0x70, 0x4, 0x3, 0x8, 0x85, 0x5}}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff6b, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f000008c000/0x3000)=nil], 0x0, &(0x7f0000002240), 0x0) 4.16268788s ago: executing program 2 (id=566): madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001900), 0x175d, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000001cc0)={0x0, 0x0, 0x7, 0x6, 0x2}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x7fff, 0x3, 0x73d]}, &(0x7f0000000080)=0x44) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000003000000030000000000000000000000000000000000000017b04966ca387d45931415d02010cc8461fa3ecfdefbe5c870902e91fb50e8346122ef5e36a0eccf43"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil) fstatfs(r5, &(0x7f00000003c0)=""/146) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00000524"], 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010b4041c9340000102030109027e000301048009080b00010100200009040000000101200009240108000a1e000809240d0601000203000c2403030001e002020600050904010000010220000904010101010220000905010920000a0306082501013c810e0009040200000102200009040101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 2.296097201s ago: executing program 1 (id=567): unshare(0x28020480) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x4000000000000000}) (fail_nth: 2) 1.522990794s ago: executing program 1 (id=568): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7339e00a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x9, 0xe4, {{0x2a, 0x4, 0x2, 0x8, 0xa8, 0x64, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@cipso={0x86, 0x58, 0x2, [{0x4, 0xa, "cfae2c53227e311d"}, {0x1, 0x10, "a67190292a6ad1759887b52e6213"}, {0x2, 0x8, "5c5252da5444"}, {0x0, 0x6, "cf142ec3"}, {0x0, 0xf, "1b6c178ebf5a3de04ee44561c2"}, {0x2, 0xa, "4742f695341a9c0b"}, {0x0, 0xa, "67efb4952cf6a209"}, {0x2, 0x4, 'h['}, {0x1, 0x3, 'v'}]}, @cipso={0x86, 0x9, 0x1, [{0x2, 0x3, '\f'}]}, @ssrr={0x89, 0x27, 0x3c, [@rand_addr=0x64010101, @empty, @remote, @empty, @local, @broadcast, @empty, @local, @local]}, @ssrr={0x89, 0xb, 0x34, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x4, [@float={0xa, 0x0, 0x0, 0x10, 0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0xe, 0xc23d}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @volatile={0x1, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @struct={0xc, 0x5, 0x0, 0x4, 0x0, 0x1, [{0x9, 0x4, 0x1}, {0x0, 0x4, 0x6}, {0x5, 0x2, 0x8}, {0x0, 0x4, 0x1}, {0x6, 0x1, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x3}}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000380)=""/58, 0xd4, 0x3a, 0x1, 0x2, 0x10000}, 0x28) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$isdn(0x22, 0x2, 0x11) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x80044943, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) setsockopt$sock_int(r2, 0x1, 0x4a, &(0x7f0000000600)=0x3fa, 0x4) 1.494875425s ago: executing program 3 (id=569): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (fail_nth: 2) 1.131671369s ago: executing program 1 (id=570): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064d2, &(0x7f0000000080)={0x1, 0x80, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) (async) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) (async) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "01ff"}, @main=@item_4={0x3, 0x0, 0x0, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, '\x00\b'}, @global=@item_4={0x3, 0x1, 0x2, "0200"}, @main=@item_4={0x3, 0x0, 0x8, "0400"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async) close(r3) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000280)) r5 = socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0xfdc5, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) (async) waitid(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x46, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xab}]}]}, 0x1c}}, 0xc000) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1, 0x0, 0x0, 0x40404c4}, 0x0) (async) close(0x3) 1.117347949s ago: executing program 4 (id=571): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000240)=0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000400)={0x14, &(0x7f0000000140)={0x40, 0x3, 0x7f, {0x7f, 0xb, "21d218418fe219edb3bf26aa08934c064837141195dee9f6de16d22f732c1a16527dd04427482fb58525f0ba0c84ace7d5801c95cd1080a91e39e503ee732a57e36d14701638e1a3ea48392b653ace2adf512f2221ec0347388a488f19efc71b1a94914dd15407fc5202b13e20222d8e21947b079f7b990d677c83053c"}}, &(0x7f0000000340)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "a34792a193a5358ea292c377cb5afee72e032a323b29eaf71f5dd9d564bb6f9bb3c88c320b62e1f1531b6cc481ebcfe4b3e3b545f1168cf4ad6cabe9d2d9ec8fb59bcdacf96547559cadfef02da3c03d55ae034b16e035b4acd19803343403029b0666a8c7b1dc9fd45964b73e38b380c0acb720136a0c805044"}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x40, 0x16, 0xa5, "6ce26b32fc11dde75849b6c7eea4bf76f0cd6b4d7772ef26e8db2d8d54abeb2c92780488bcdeeef9adcd1b362815f9c918ee52b0f99dd0a4c8c22a82cae3d013c32a5601e8c6d9c8253f820afcbc01849c6ed00c1ab044d3cfe993f1fba727daf0176f3629c6f83b05c4e30010d49ca0a33f5c029687c78bea9f7bb42805e0c5bd32586f0894c815036cccb3f0aca4e3b2e7c39fa286d3b9b311f6fae5ef953ec65cc19d1a"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000580)={0xc0, 0x5, 0x4, "179b0315"}, &(0x7f00000005c0)={0x40, 0x5, 0x6, "5a600ad60122"}}) unshare(0x24020400) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x2, &(0x7f0000000d80)=@raw=[@map_fd], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r3 = io_uring_setup(0x643a, &(0x7f0000000280)={0x0, 0xc8a1, 0xc000, 0x2, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) read(r0, &(0x7f0000001380)=""/4138, 0x102a) 775.168804ms ago: executing program 0 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000b80), 0x440, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000bc0)=0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xa0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, 0x0, 0x1}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x3, 0x0, 0x0, 0xa, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x4, 0x0, 0x2, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x1, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0x883, 0x0, 0x80000, 0x8000, 0x0, 0x0, r6, 0x5, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r4, r8, 0x6700000000000000) close_range(r2, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000240)={0x0, 0x0, [{0x80000000, 0x8, 0x3, 0xffff0000, 0x4, 0x6, 0x1000}, {0x80000000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x7fffffff}, {0x6, 0x45d1, 0x6, 0x80, 0x10, 0xfffffffe, 0x200}]}) 571.241076ms ago: executing program 3 (id=573): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/65}, {&(0x7f00000000c0)=""/157}, {&(0x7f0000000180)=""/226, 0xed}], 0x3a, 0x2, 0x80000400, 0x1) (fail_nth: 3) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 450.054003ms ago: executing program 2 (id=574): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r2}, 0x10) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x61, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x31, 0x50, 0xf9, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x7, 0x38, 0x1, {0x22, 0x5cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0xf5, 0x6}}}}}]}}]}}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000e80)=@string={0x2}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0xd8f5}}]}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbf7, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x4018888) 0s ago: executing program 0 (id=575): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x2, 0x1, 0x1000b0a7}, 0x1c) ppoll(&(0x7f0000000040)=[{r4, 0x1380}], 0x1, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0), 0x400000000000181, 0x20004050) userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) kernel console output (not intermixed with test programs): .674666][ T6505] x_tables: duplicate underflow at hook 1 [ 108.812594][ T6507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.846089][ T6507] libceph: resolve '4' (ret=-3): failed [ 109.152244][ T6511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.160'. [ 109.550599][ T5897] usb 5-1: USB disconnect, device number 5 [ 109.667709][ T6522] binder: 6521:6522 ioctl c0306201 0 returned -14 [ 109.675054][ T5941] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.684399][ T6522] binder: 6521:6522 ioctl c0306201 0 returned -14 [ 109.692648][ T6522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.164'. [ 109.836655][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.863020][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.876078][ T5941] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 109.899306][ T5941] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 109.917190][ T5941] usb 2-1: Manufacturer: syz [ 109.938538][ T5941] usb 2-1: config 0 descriptor?? [ 110.213699][ T5930] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.376175][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 110.390590][ T6534] all: renamed from bridge_slave_1 (while UP) [ 110.400900][ T5930] usb 1-1: config 0 has no interfaces? [ 110.417321][ T5930] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 110.438265][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.464918][ T5930] usb 1-1: Product: syz [ 110.483505][ T5930] usb 1-1: Manufacturer: syz [ 110.492894][ T5930] usb 1-1: SerialNumber: syz [ 110.532622][ T5930] usb 1-1: config 0 descriptor?? [ 110.760792][ T6530] netlink: 'syz.0.166': attribute type 10 has an invalid length. [ 110.791309][ T5941] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 110.829266][ T5941] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 110.839167][ T6530] bond0: (slave wlan1): Opening slave failed [ 110.857299][ T5941] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 110.878818][ T5941] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 110.894493][ T5941] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 110.931577][ T5941] usb 2-1: USB disconnect, device number 4 [ 111.184985][ T807] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 111.355736][ T807] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 111.388197][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.407414][ T807] usb 5-1: Product: syz [ 111.415429][ T807] usb 5-1: Manufacturer: syz [ 111.431002][ T807] usb 5-1: SerialNumber: syz [ 111.460107][ T807] usb 5-1: config 0 descriptor?? [ 111.583091][ T6545] syzkaller0: entered promiscuous mode [ 111.595879][ T6545] syzkaller0: entered allmulticast mode [ 111.622481][ T6547] IPv6: A: Disabled Multicast RS [ 111.690157][ T807] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 112.290157][ T6557] binder: 6556:6557 ioctl c0306201 0 returned -14 [ 112.299229][ T6557] binder: 6556:6557 ioctl c0306201 0 returned -14 [ 112.317573][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.175'. [ 112.547288][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 112.547306][ T30] audit: type=1326 audit(1776816332.106:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5a99c819 code=0x7ffc0000 [ 112.595860][ T30] audit: type=1326 audit(1776816332.106:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5a99c819 code=0x7ffc0000 [ 112.622773][ T30] audit: type=1326 audit(1776816332.146:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f2d5a99c819 code=0x7ffc0000 [ 112.645404][ T30] audit: type=1326 audit(1776816332.146:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5a99c819 code=0x7ffc0000 [ 112.668066][ T30] audit: type=1326 audit(1776816332.146:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5a99c819 code=0x7ffc0000 [ 112.693391][ T30] audit: type=1326 audit(1776816332.146:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2d5a99c819 code=0x7ffc0000 [ 112.728941][ T30] audit: type=1326 audit(1776816332.146:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5a99c819 code=0x7ffc0000 [ 112.753214][ T30] audit: type=1326 audit(1776816332.146:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5a99c819 code=0x7ffc0000 [ 113.058907][ T5941] usb 1-1: USB disconnect, device number 7 [ 113.065948][ T6528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.182799][ T6571] all: renamed from bridge_slave_1 (while UP) [ 113.536253][ T807] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 113.543293][ T941] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.568909][ T807] usb 5-1: USB disconnect, device number 6 [ 113.726790][ T941] usb 1-1: Using ep0 maxpacket: 32 [ 113.740092][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.773103][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.795140][ T941] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.806864][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.834807][ T941] usb 1-1: config 0 descriptor?? [ 113.851476][ T941] hub 1-1:0.0: USB hub found [ 114.183406][ T5941] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.345899][ T5941] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 114.371110][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.389978][ T5941] usb 2-1: Product: syz [ 114.403671][ T5941] usb 2-1: Manufacturer: syz [ 114.419130][ T5941] usb 2-1: SerialNumber: syz [ 114.869705][ T5941] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 114.927450][ T5941] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 114.963405][ T5941] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 115.006095][ T5941] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 115.057436][ T5941] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 115.114476][ T5941] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 115.169197][ T5941] usb 2-1: USB disconnect, device number 5 [ 115.239768][ T941] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 115.281374][ T941] usbhid 1-1:0.0: can't add hid device: -71 [ 115.311890][ T941] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 115.364242][ T941] usb 1-1: USB disconnect, device number 8 [ 115.395293][ T6598] binder: 6597:6598 ioctl c0306201 0 returned -14 [ 115.447053][ T6599] binder: 6597:6599 ioctl c0306201 0 returned -14 [ 115.494532][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.186'. [ 115.760766][ T6608] all: renamed from bridge_slave_1 (while UP) [ 115.896645][ T30] audit: type=1326 audit(1776816335.456:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2125d9c819 code=0x7ffc0000 [ 115.929732][ T5897] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.937423][ T807] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 115.948482][ T30] audit: type=1326 audit(1776816335.456:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f2125d9c819 code=0x7ffc0000 [ 116.056025][ T6617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.103241][ T807] usb 1-1: Using ep0 maxpacket: 32 [ 116.111312][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 116.120399][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.134140][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.144738][ T5897] usb 3-1: config 208 has an invalid interface number: 119 but max is 0 [ 116.153412][ T5897] usb 3-1: config 208 has no interface number 0 [ 116.159771][ T807] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 116.169033][ T5897] usb 3-1: config 208 interface 119 has no altsetting 0 [ 116.176539][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.186820][ T5897] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 116.197257][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.206226][ T807] usb 1-1: config 0 descriptor?? [ 116.213055][ T5897] usb 3-1: Product: syz [ 116.217322][ T5897] usb 3-1: Manufacturer: syz [ 116.222193][ T5897] usb 3-1: SerialNumber: syz [ 116.648264][ T807] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 116.678041][ T807] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 116.835499][ T807] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 116.880939][ T6630] fuse: Unknown parameter '' [ 116.953069][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.046527][ T807] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 117.135528][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.146627][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 117.175540][ T24] usb 2-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 117.186340][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.195333][ T24] usb 2-1: Product: syz [ 117.200121][ T24] usb 2-1: Manufacturer: syz [ 117.207431][ T24] usb 2-1: SerialNumber: syz [ 117.247943][ T807] ft260 0003:0403:6030.0003: failed to retrieve status: -32, no wakeup [ 117.425649][ T6624] mmap: syz.1.195 (6624) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.466898][ T6605] FAULT_INJECTION: forcing a failure. [ 117.466898][ T6605] name failslab, interval 1, probability 0, space 0, times 0 [ 117.480117][ T6605] CPU: 0 UID: 0 PID: 6605 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(full) [ 117.480144][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.480156][ T6605] Call Trace: [ 117.480163][ T6605] [ 117.480172][ T6605] dump_stack_lvl+0xe8/0x150 [ 117.480207][ T6605] should_fail_ex+0x412/0x560 [ 117.480243][ T6605] should_failslab+0xa8/0x100 [ 117.480272][ T6605] __kmalloc_noprof+0xe8/0x760 [ 117.480297][ T6605] ? tomoyo_encode+0x28b/0x550 [ 117.480322][ T6605] tomoyo_encode+0x28b/0x550 [ 117.480347][ T6605] tomoyo_realpath_from_path+0x58d/0x5d0 [ 117.480378][ T6605] ? tomoyo_path_number_perm+0x219/0x630 [ 117.480406][ T6605] tomoyo_path_number_perm+0x246/0x630 [ 117.480437][ T6605] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.480464][ T6605] ? __lock_acquire+0x6b5/0x2cf0 [ 117.480508][ T6605] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 117.480560][ T6605] ? __fget_files+0x2a/0x420 [ 117.480583][ T6605] ? __fget_files+0x2a/0x420 [ 117.480602][ T6605] ? __fget_files+0x3a0/0x420 [ 117.480620][ T6605] ? __fget_files+0x2a/0x420 [ 117.480644][ T6605] security_file_ioctl+0xc3/0x2a0 [ 117.480672][ T6605] __se_sys_ioctl+0x47/0x170 [ 117.480697][ T6605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.480719][ T6605] do_syscall_64+0x15f/0xf80 [ 117.480741][ T6605] ? trace_irq_disable+0x3b/0x140 [ 117.480767][ T6605] ? clear_bhb_loop+0x40/0x90 [ 117.480791][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.480810][ T6605] RIP: 0033:0x7fb52fb9c819 [ 117.480827][ T6605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.480843][ T6605] RSP: 002b:00007fb530ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.480862][ T6605] RAX: ffffffffffffffda RBX: 00007fb52fe15fa0 RCX: 00007fb52fb9c819 [ 117.480876][ T6605] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004 [ 117.480888][ T6605] RBP: 00007fb530ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 117.480900][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.480911][ T6605] R13: 00007fb52fe16038 R14: 00007fb52fe15fa0 R15: 00007fb52ff3fa48 [ 117.480941][ T6605] [ 117.481354][ T6605] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.551202][ T24] usb 2-1: 0:2 : does not exist [ 117.587371][ T24] usb 2-1: unit 66 not found! [ 117.642616][ T5941] usb 1-1: USB disconnect, device number 9 [ 117.927683][ T24] usb 2-1: USB disconnect, device number 6 [ 118.002048][ T6641] binder: 6640:6641 ioctl c0306201 0 returned -14 [ 118.010095][ T6641] binder: 6640:6641 ioctl c0306201 0 returned -14 [ 118.018096][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.199'. [ 118.052560][ T6484] udevd[6484]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.110680][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 118.117357][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a68400: rx timeout, send abort [ 118.340838][ T6648] all: renamed from bridge_slave_1 (while UP) [ 118.349315][ T6643] delete_channel: no stack [ 118.381701][ T6652] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 118.381701][ T6652] program iou-wrk-6651 not setting count and/or reply_len properly [ 118.545073][ T6656] input: syz0 as /devices/virtual/input/input10 [ 118.641139][ T5897] ums-alauda 3-1:208.119: USB Mass Storage device detected [ 118.680717][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 118.680733][ T30] audit: type=1326 audit(1776816338.236:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52fb9c819 code=0x7ffc0000 [ 118.719973][ T30] audit: type=1326 audit(1776816338.266:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52fb9c819 code=0x7ffc0000 [ 118.773205][ T5897] usb 3-1: USB disconnect, device number 5 [ 118.906018][ T6673] binder: 6670:6673 ioctl c0306201 0 returned -14 [ 118.918445][ T6673] binder: 6670:6673 ioctl c0306201 0 returned -14 [ 118.932399][ T6673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.210'. [ 119.625316][ T6695] all: renamed from bridge_slave_1 (while UP) [ 120.030546][ T5931] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 120.257556][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 120.278775][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.335578][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 120.356860][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.377435][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 120.393076][ T5842] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.405675][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.432762][ T5931] usb 2-1: config 0 descriptor?? [ 120.447715][ T6697] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.471237][ T5931] hub 2-1:0.0: USB hub found [ 120.575782][ T5842] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 120.586185][ T5897] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 120.596809][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.613348][ T5842] usb 3-1: config 0 has no interface number 0 [ 120.619588][ T5842] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 120.631441][ T5842] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.654617][ T5842] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 120.669993][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.680794][ T5842] usb 3-1: Product: syz [ 120.688454][ T5842] usb 3-1: Manufacturer: syz [ 120.695508][ T5842] usb 3-1: SerialNumber: syz [ 120.706219][ T5842] usb 3-1: config 0 descriptor?? [ 120.723697][ T5842] cyberjack 3-1:0.69: required endpoints missing [ 120.773136][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 120.781538][ T5897] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.796518][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.807614][ T5897] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 120.820361][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.837709][ T5897] usb 5-1: config 0 descriptor?? [ 120.867638][ T5931] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 120.891639][ T5931] usbhid 2-1:0.0: can't add hid device: -71 [ 120.902830][ T5931] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 120.946500][ T5931] usb 2-1: USB disconnect, device number 7 [ 121.016439][ T24] usb 3-1: USB disconnect, device number 6 [ 121.291986][ T5897] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 121.577380][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.597149][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.670660][ T30] audit: type=1400 audit(1776816341.226:35): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=6724 comm="syz.0.226" [ 121.692534][ T6726] binder: 6724:6726 ioctl 800c5012 200000001100 returned -22 [ 121.831990][ T6722] dummy0: entered allmulticast mode [ 122.010810][ T6740] netlink: 80 bytes leftover after parsing attributes in process `syz.0.229'. [ 122.081999][ T6742] netlink: 80 bytes leftover after parsing attributes in process `syz.2.230'. [ 122.363472][ T5941] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 122.379325][ T6747] fuse: Unknown parameter '0x0000000000000005' [ 122.537260][ T5941] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 122.545842][ T5941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.556151][ T5941] usb 1-1: config 0 has no interface number 0 [ 122.562375][ T5941] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 122.572297][ T5941] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.589642][ T5941] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 122.598963][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.607132][ T5941] usb 1-1: Product: syz [ 122.611327][ T5941] usb 1-1: Manufacturer: syz [ 122.616373][ T5941] usb 1-1: SerialNumber: syz [ 122.624095][ T5941] usb 1-1: config 0 descriptor?? [ 122.632554][ T5941] cyberjack 1-1:0.69: required endpoints missing [ 122.919427][ T24] usb 1-1: USB disconnect, device number 10 [ 123.382739][ T6712] dummy0: left allmulticast mode [ 123.419163][ T5931] usb 5-1: USB disconnect, device number 7 [ 123.693118][ T5941] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.854472][ T6768] netlink: 64 bytes leftover after parsing attributes in process `syz.4.239'. [ 123.869542][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 123.885117][ T5941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.896851][ T5941] usb 2-1: config 4 interface 0 has no altsetting 0 [ 123.917672][ T5941] usb 2-1: string descriptor 0 read error: -22 [ 123.925205][ T5941] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 123.943366][ T5941] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 123.975129][ T5941] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 124.000888][ T5941] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 124.052535][ T5941] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 124.065014][ T5941] usb 2-1: media controller created [ 124.076049][ T6777] netlink: 80 bytes leftover after parsing attributes in process `syz.4.241'. [ 124.106084][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.175426][ T6757] usb 2-1: dvb_usb_au6610: wlen=20, aborting [ 124.645596][ T6786] all: renamed from bridge_slave_1 (while UP) [ 125.244945][ T5941] zl10353_read_register: readreg error (reg=127, ret==0) [ 125.402451][ T5941] usb 2-1: USB disconnect, device number 8 [ 125.461483][ T6801] syzkaller0: entered promiscuous mode [ 125.475167][ T6801] syzkaller0: entered allmulticast mode [ 125.507945][ T6801] tipc: Started in network mode [ 125.513138][ T6801] tipc: Node identity 025eb8cd5536, cluster identity 4711 [ 125.524659][ T6801] tipc: Enabled bearer , priority 0 [ 125.623032][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 125.795954][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.815231][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.833241][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 125.852797][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.895478][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.919086][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.940967][ T24] usb 5-1: config 0 descriptor?? [ 126.213272][ T5941] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 126.251356][ T6800] tipc: Resetting bearer [ 126.268864][ T6800] tipc: Disabling bearer [ 126.373286][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 126.388687][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.401813][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.414643][ T5941] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 126.424313][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.437781][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 126.453874][ T5941] usb 2-1: config 0 descriptor?? [ 126.653127][ T5931] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 126.807632][ T5931] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 126.817329][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.826094][ T5931] usb 1-1: Product: syz [ 126.830537][ T5931] usb 1-1: Manufacturer: syz [ 126.835462][ T5931] usb 1-1: SerialNumber: syz [ 126.861967][ T5931] usb 1-1: config 0 descriptor?? [ 126.888425][ T6814] netlink: 80 bytes leftover after parsing attributes in process `syz.2.253'. [ 126.898115][ T5941] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 126.910775][ T5941] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 126.989525][ T6815] sg_write: data in/out 813332815/461 bytes for SCSI command 0x0-- guessing data in; [ 126.989525][ T6815] program syz.4.248 not setting count and/or reply_len properly [ 127.071093][ T5941] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 127.080954][ T5931] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 127.109712][ T5931] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 127.136440][ T5931] usb 1-1: USB disconnect, device number 11 [ 127.190964][ T941] usb 5-1: USB disconnect, device number 8 [ 127.279188][ T5941] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 127.490360][ T5941] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup [ 127.527961][ T5941] ft260 0003:0403:6030.0006: failed to retrieve status: -5 [ 128.529832][ T5941] ft260 0003:0403:6030.0006: failed to reset I2C controller: -71 [ 128.612854][ T5941] usb 2-1: USB disconnect, device number 9 [ 129.733502][ T5941] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 129.758330][ T6856] netlink: 80 bytes leftover after parsing attributes in process `syz.1.265'. [ 129.915504][ T5941] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.937041][ T5941] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.971604][ T5941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.008911][ T5941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.048289][ T5941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.095207][ T5941] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.106933][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.116541][ T5941] usb 5-1: Product: syz [ 130.121240][ T5941] usb 5-1: Manufacturer: syz [ 130.139336][ T5941] cdc_wdm 5-1:1.0: skipping garbage [ 130.145358][ T5941] cdc_wdm 5-1:1.0: skipping garbage [ 130.164487][ T5941] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 130.170986][ T5941] cdc_wdm 5-1:1.0: Unknown control protocol [ 130.338028][ T6854] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 130.355444][ T6854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.375066][ T6854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.384371][ T5931] usb 5-1: USB disconnect, device number 9 [ 130.537958][ T30] audit: type=1800 audit(1776816350.096:36): pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.268" name="file1" dev="tmpfs" ino=322 res=0 errno=0 [ 130.823182][ T5941] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.002158][ T5941] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.034768][ T5941] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.059718][ T5941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.079622][ T5941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.097902][ T5941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.107892][ T5931] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 131.132799][ T5941] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.152427][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.167465][ T5941] usb 5-1: Product: syz [ 131.177912][ T5941] usb 5-1: Manufacturer: syz [ 131.205098][ T5941] cdc_wdm 5-1:1.0: skipping garbage [ 131.215329][ T5941] cdc_wdm 5-1:1.0: skipping garbage [ 131.240421][ T5941] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 131.253093][ T5941] cdc_wdm 5-1:1.0: Unknown control protocol [ 131.273378][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 131.284808][ T5930] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 131.297302][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.329039][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.339931][ T5931] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 131.350308][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.359312][ T6872] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.271'. [ 131.378583][ T5931] usb 1-1: config 0 descriptor?? [ 131.395094][ T6872] bridge_slave_1: default FDB implementation only supports local addresses [ 131.412099][ T6854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.426300][ T6854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.460826][ T5941] usb 5-1: USB disconnect, device number 10 [ 131.467326][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 131.487957][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.521083][ T5930] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 131.556845][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.580998][ T5930] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 131.648004][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.765784][ T5930] usb 3-1: Product: syz [ 131.773585][ T5930] usb 3-1: Manufacturer: syz [ 131.778291][ T5930] usb 3-1: SerialNumber: syz [ 131.798630][ T5931] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 131.807691][ T5930] usb 3-1: config 0 descriptor?? [ 131.828459][ T5931] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 131.997090][ T5931] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 132.197887][ T5931] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 132.244713][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.278470][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.398520][ T5931] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 132.436433][ T5931] ft260 0003:0403:6030.0007: failed to retrieve status: -5 [ 132.487906][ T5930] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 132.519219][ T5930] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 132.580449][ T5930] usb 3-1: USB disconnect, device number 7 [ 132.608721][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.618431][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.399175][ T5931] ft260 0003:0403:6030.0007: failed to reset I2C controller: -71 [ 133.468524][ T5931] usb 1-1: USB disconnect, device number 12 [ 133.480646][ T5941] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 133.669190][ T5941] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 133.703365][ T5941] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.731893][ T5941] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 133.769747][ T5941] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.791863][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.814139][ T5941] usb 3-1: SerialNumber: syz [ 134.077524][ T5941] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 134.102285][ T5941] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 134.115495][ T6895] netlink: 80 bytes leftover after parsing attributes in process `syz.3.276'. [ 134.146019][ T5941] usb 3-1: USB disconnect, device number 8 [ 134.546091][ T5931] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 134.646012][ T6908] netlink: 'syz.1.281': attribute type 21 has an invalid length. [ 134.656616][ T6908] netlink: 132 bytes leftover after parsing attributes in process `syz.1.281'. [ 134.666952][ T6908] FAULT_INJECTION: forcing a failure. [ 134.666952][ T6908] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.681384][ T6908] CPU: 0 UID: 0 PID: 6908 Comm: syz.1.281 Not tainted syzkaller #0 PREEMPT(full) [ 134.681406][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 134.681417][ T6908] Call Trace: [ 134.681424][ T6908] [ 134.681431][ T6908] dump_stack_lvl+0xe8/0x150 [ 134.681475][ T6908] should_fail_ex+0x412/0x560 [ 134.681509][ T6908] _copy_to_user+0x31/0xb0 [ 134.681531][ T6908] simple_read_from_buffer+0xe1/0x170 [ 134.681554][ T6908] proc_fail_nth_read+0x1bb/0x230 [ 134.681577][ T6908] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.681599][ T6908] ? rw_verify_area+0x2a6/0x4d0 [ 134.681620][ T6908] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.681641][ T6908] vfs_read+0x20c/0xa70 [ 134.681667][ T6908] ? __pfx___mutex_lock+0x10/0x10 [ 134.681690][ T6908] ? __pfx_vfs_read+0x10/0x10 [ 134.681713][ T6908] ? __fget_files+0x2a/0x420 [ 134.681734][ T6908] ? __fget_files+0x3a0/0x420 [ 134.681752][ T6908] ? __fget_files+0x2a/0x420 [ 134.681777][ T6908] ksys_read+0x150/0x270 [ 134.681800][ T6908] ? __pfx_ksys_read+0x10/0x10 [ 134.681829][ T6908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.681849][ T6908] do_syscall_64+0x15f/0xf80 [ 134.681874][ T6908] ? trace_irq_disable+0x3b/0x140 [ 134.681915][ T6908] ? clear_bhb_loop+0x40/0x90 [ 134.681942][ T6908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.681981][ T6908] RIP: 0033:0x7f2125d5d04e [ 134.682012][ T6908] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 134.682030][ T6908] RSP: 002b:00007f2126bbffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.682060][ T6908] RAX: ffffffffffffffda RBX: 00007f2126bc06c0 RCX: 00007f2125d5d04e [ 134.682075][ T6908] RDX: 000000000000000f RSI: 00007f2126bc00a0 RDI: 0000000000000004 [ 134.682088][ T6908] RBP: 00007f2126bc0090 R08: 0000000000000000 R09: 0000000000000000 [ 134.682100][ T6908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.682112][ T6908] R13: 00007f2126016038 R14: 00007f2126015fa0 R15: 00007f212613fa48 [ 134.682147][ T6908] [ 134.913365][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 134.920457][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.932162][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.944180][ T5931] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 134.953336][ T5931] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 134.961453][ T5931] usb 5-1: Manufacturer: syz [ 134.968359][ T5931] usb 5-1: config 0 descriptor?? [ 135.448419][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 135.464351][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 135.482969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 135.563060][ T5941] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.587098][ T5931] usbhid 5-1:0.0: can't add hid device: -71 [ 135.604362][ T5931] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 135.623207][ T5946] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.632405][ T5931] usb 5-1: USB disconnect, device number 11 [ 135.733172][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 135.744743][ T5941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.758354][ T5941] usb 2-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 135.775804][ T5941] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.792360][ T5941] usb 2-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 135.801650][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 135.807920][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.818316][ T5941] usb 2-1: Product: syz [ 135.822776][ T5941] usb 2-1: Manufacturer: syz [ 135.827721][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.838717][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.848836][ T5941] usb 2-1: SerialNumber: syz [ 135.856368][ T5946] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 135.865819][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.880693][ T5946] usb 3-1: config 0 descriptor?? [ 136.088719][ T5941] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.102103][ T5941] usb 2-1: MIDIStreaming interface descriptor not found [ 136.255492][ T5941] usb 2-1: USB disconnect, device number 10 [ 136.316954][ T5946] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 136.330283][ T5946] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 136.384714][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.501510][ T5946] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 136.524901][ T6941] netlink: 'syz.4.292': attribute type 2 has an invalid length. [ 136.535979][ T6941] netlink: 'syz.4.292': attribute type 5 has an invalid length. [ 136.544312][ T6941] netlink: 'syz.4.292': attribute type 2 has an invalid length. [ 136.552013][ T6941] netlink: 'syz.4.292': attribute type 5 has an invalid length. [ 136.704949][ T5946] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 136.902906][ T5946] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 136.935010][ T5946] ft260 0003:0403:6030.0008: failed to retrieve status: -5 [ 137.887832][ T5946] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71 [ 137.919083][ T6975] FAULT_INJECTION: forcing a failure. [ 137.919083][ T6975] name failslab, interval 1, probability 0, space 0, times 0 [ 137.942743][ T5946] usb 3-1: USB disconnect, device number 9 [ 137.952242][ T6975] CPU: 0 UID: 0 PID: 6975 Comm: syz.4.300 Not tainted syzkaller #0 PREEMPT(full) [ 137.952268][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.952281][ T6975] Call Trace: [ 137.952289][ T6975] [ 137.952298][ T6975] dump_stack_lvl+0xe8/0x150 [ 137.952338][ T6975] should_fail_ex+0x412/0x560 [ 137.952376][ T6975] should_failslab+0xa8/0x100 [ 137.952415][ T6975] __kmalloc_noprof+0xe8/0x760 [ 137.952441][ T6975] ? snd_interval_refine+0x609/0xa50 [ 137.952464][ T6975] ? snd_pcm_hw_refine+0x9b1/0x1710 [ 137.952493][ T6975] snd_pcm_hw_refine+0x9b1/0x1710 [ 137.952532][ T6975] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 137.952563][ T6975] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 137.952622][ T6975] snd_pcm_hw_param_last+0x3ad/0xb70 [ 137.952661][ T6975] snd_pcm_hw_param_near+0x329/0x4d0 [ 137.952688][ T6975] ? __asan_memset+0x22/0x50 [ 137.952718][ T6975] snd_pcm_oss_change_params_locked+0x1f86/0x3e00 [ 137.952778][ T6975] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 137.952808][ T6975] ? __pfx_aa_file_perm+0x10/0x10 [ 137.952855][ T6975] snd_pcm_oss_write+0x27c/0xbd0 [ 137.952900][ T6975] vfs_writev+0x4bd/0x990 [ 137.952939][ T6975] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 137.952972][ T6975] ? __pfx_vfs_writev+0x10/0x10 [ 137.953020][ T6975] ? __fget_files+0x2a/0x420 [ 137.953046][ T6975] ? __fget_files+0x3a0/0x420 [ 137.953067][ T6975] ? __fget_files+0x2a/0x420 [ 137.953098][ T6975] do_writev+0x154/0x2e0 [ 137.953133][ T6975] ? __pfx_do_writev+0x10/0x10 [ 137.953184][ T6975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.953204][ T6975] do_syscall_64+0x15f/0xf80 [ 137.953228][ T6975] ? trace_irq_disable+0x3b/0x140 [ 137.953253][ T6975] ? clear_bhb_loop+0x40/0x90 [ 137.953277][ T6975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.953296][ T6975] RIP: 0033:0x7f340b59c819 [ 137.953314][ T6975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.953329][ T6975] RSP: 002b:00007f340c45c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 137.953349][ T6975] RAX: ffffffffffffffda RBX: 00007f340b815fa0 RCX: 00007f340b59c819 [ 137.953363][ T6975] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003 [ 137.953375][ T6975] RBP: 00007f340c45c090 R08: 0000000000000000 R09: 0000000000000000 [ 137.953386][ T6975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.953397][ T6975] R13: 00007f340b816038 R14: 00007f340b815fa0 R15: 00007f340b93fa48 [ 137.953434][ T6975] [ 138.415181][ T5930] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 138.545797][ T5931] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.573464][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 138.581449][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 138.598582][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.620654][ T5930] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 138.635612][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.652593][ T5930] usb 1-1: Product: syz [ 138.662174][ T5930] usb 1-1: Manufacturer: syz [ 138.668794][ T5930] usb 1-1: SerialNumber: syz [ 138.687716][ T5930] usb 1-1: config 0 descriptor?? [ 138.703193][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 138.715849][ T5930] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 138.733494][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.749896][ T5930] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 138.768337][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.799574][ T5931] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 138.832065][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.865917][ T5931] usb 2-1: config 0 descriptor?? [ 139.313976][ T5931] corsair 0003:1B1C:1B02.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 139.332028][ T5930] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 139.359402][ T5930] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 139.721261][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'. [ 139.986061][ T5930] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 139.997797][ T5930] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 140.268680][ T7011] x_tables: duplicate underflow at hook 2 [ 140.633389][ T5930] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 140.645266][ T5930] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 140.818460][ T5930] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 140.835421][ T5930] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 140.857427][ T5930] usb 1-1: USB disconnect, device number 13 [ 141.547725][ T5931] corsair 0003:1B1C:1B02.0009: Failed to get K90 initial state (error -71). [ 141.590863][ T5931] usb 2-1: USB disconnect, device number 11 [ 141.964608][ T5931] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 142.133959][ T5931] usb 2-1: too many configurations: 145, using maximum allowed: 8 [ 142.146939][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 142.161987][ T5931] usb 2-1: can't read configurations, error -61 [ 142.303111][ T5931] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 142.454336][ T5931] usb 2-1: too many configurations: 145, using maximum allowed: 8 [ 142.464113][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 142.471802][ T5931] usb 2-1: can't read configurations, error -61 [ 142.479332][ T5931] usb usb2-port1: attempt power cycle [ 142.696364][ T7032] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.704104][ T7032] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.715402][ T7032] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.726498][ T7032] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.732531][ T7032] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.739842][ T7032] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.747758][ T7032] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.754082][ T7032] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.764047][ T7032] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.771140][ T7032] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.777511][ T7032] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.785210][ T7032] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.804721][ T7032] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 142.812552][ T7032] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 142.824672][ T5931] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 142.845963][ T7032] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 142.857253][ T5931] usb 2-1: too many configurations: 145, using maximum allowed: 8 [ 142.887816][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 142.902837][ T5931] usb 2-1: can't read configurations, error -61 [ 143.063145][ T5931] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 143.114490][ T5931] usb 2-1: too many configurations: 145, using maximum allowed: 8 [ 143.137211][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 143.155778][ T5931] usb 2-1: can't read configurations, error -61 [ 143.173228][ T5931] usb usb2-port1: unable to enumerate USB device [ 143.315985][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.324'. [ 143.373434][ T5930] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 143.534643][ T5930] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.545120][ T5930] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 143.567657][ T5930] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 143.578310][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.588799][ T5930] usb 1-1: Product: syz [ 143.593918][ T5930] usb 1-1: Manufacturer: syz [ 143.598738][ T5930] usb 1-1: SerialNumber: syz [ 143.843937][ T5930] usb 1-1: 0:2 : does not exist [ 143.850486][ T5930] usb 1-1: unit 66 not found! [ 143.883038][ T5897] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 143.931063][ T5930] usb 1-1: USB disconnect, device number 14 [ 143.963383][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.011764][ T6484] udevd[6484]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.064102][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 144.079262][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 144.098962][ T5897] usb 5-1: can't read configurations, error -61 [ 144.316734][ T7059] Cannot find del_set index 1 as target [ 144.334238][ T7060] Cannot find del_set index 1 as target [ 144.373167][ T5897] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 144.552998][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 144.567953][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 144.578568][ T5897] usb 5-1: can't read configurations, error -61 [ 144.589269][ T5897] usb usb5-port1: attempt power cycle [ 144.766240][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.773524][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.843776][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.851631][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 144.935233][ T5897] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 144.975181][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 144.984429][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 144.997334][ T5897] usb 5-1: can't read configurations, error -61 [ 145.033784][ T5930] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 145.144510][ T5897] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 145.163377][ T5931] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 145.173652][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 145.181329][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 145.188985][ T5897] usb 5-1: can't read configurations, error -61 [ 145.196143][ T5930] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 145.199367][ T5897] usb usb5-port1: unable to enumerate USB device [ 145.208403][ T5930] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 145.222105][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.249335][ T5930] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 145.333160][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 145.342428][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.356873][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.366987][ T5931] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 145.376130][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.403436][ T5931] usb 1-1: config 0 descriptor?? [ 145.818799][ T5931] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 145.825994][ T5931] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 146.015982][ T5931] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 146.055079][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.222500][ T5931] ft260 0003:0403:6030.000A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 146.293801][ T5930] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 146.302045][ T5930] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 146.309164][ T5930] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 146.317427][ T5930] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 146.326876][ T5930] usb 3-1: USB disconnect, device number 10 [ 146.383345][ T5946] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 146.423592][ T5931] ft260 0003:0403:6030.000A: failed to retrieve status: -32, no wakeup [ 146.535116][ T5946] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.545373][ T5946] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.556727][ T5946] usb 2-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 146.566117][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.574263][ T5946] usb 2-1: Product: syz [ 146.578493][ T5946] usb 2-1: Manufacturer: syz [ 146.583335][ T5946] usb 2-1: SerialNumber: syz [ 146.793085][ T7097] netlink: 'syz.4.341': attribute type 4 has an invalid length. [ 146.826385][ T5946] usb 2-1: 0:2 : does not exist [ 146.831628][ T5946] usb 2-1: unit 66 not found! [ 146.844048][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.844644][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.923549][ T5158] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.923585][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.951642][ T5946] usb 2-1: USB disconnect, device number 16 [ 146.974734][ T7099] input: syz0 as /devices/virtual/input/input15 [ 147.088381][ T5848] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 147.088828][ T6484] udevd[6484]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.157357][ T5931] ft260 0003:0403:6030.000A: failed to retrieve status: -71 [ 147.185729][ T5931] ft260 0003:0403:6030.000A: failed to reset I2C controller: -71 [ 147.532094][ T7118] input: syz1 as /devices/virtual/input/input16 [ 147.532352][ T7116] sctp: [Deprecated]: syz.4.348 (pid 7116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.532352][ T7116] Use struct sctp_sack_info instead [ 147.738681][ T7119] delete_channel: no stack [ 147.888780][ T7126] xt_hashlimit: size too large, truncated to 1048576 [ 147.945922][ T7128] xt_cgroup: invalid path, errno=-2 [ 147.962768][ T7131] xt_hashlimit: size too large, truncated to 1048576 [ 148.029743][ T5931] usb 1-1: USB disconnect, device number 15 [ 148.125461][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.658582][ T7143] netlink: 164 bytes leftover after parsing attributes in process `syz.3.357'. [ 148.813917][ T5931] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 148.923822][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.933315][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.957350][ T7152] delete_channel: no stack [ 148.983077][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 148.998191][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.009518][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 149.015648][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.046132][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.060455][ T5931] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 149.069744][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.082482][ T5931] usb 3-1: config 0 descriptor?? [ 149.447398][ T7165] netlink: 80 bytes leftover after parsing attributes in process `syz.0.366'. [ 149.506942][ T5931] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 149.519762][ T5931] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 149.571193][ T7169] xt_hashlimit: size too large, truncated to 1048576 [ 149.697741][ T5931] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 149.907434][ T5931] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 150.847243][ T5931] ft260 0003:0403:6030.000B: failed to retrieve status: -71, no wakeup [ 150.868655][ T5931] ft260 0003:0403:6030.000B: failed to retrieve status: -71 [ 150.876712][ T5931] ft260 0003:0403:6030.000B: failed to reset I2C controller: -71 [ 150.912489][ T5931] usb 3-1: USB disconnect, device number 11 [ 151.217147][ T7187] delete_channel: no stack [ 151.570845][ T7199] netlink: 'syz.1.372': attribute type 10 has an invalid length. [ 151.570884][ T7199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.372'. [ 151.866382][ T7210] xt_hashlimit: size too large, truncated to 1048576 [ 152.003276][ T5946] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 152.177543][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.204567][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 152.226540][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.256031][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.305696][ T5946] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.328204][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.357874][ T5946] usb 1-1: config 0 descriptor?? [ 152.379806][ T7208] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.693182][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 152.802068][ T5946] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 152.863402][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 152.874534][ T5946] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 152.908283][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.939767][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.949746][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 152.958867][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.976873][ T24] usb 3-1: config 0 descriptor?? [ 153.077269][ T5897] usb 1-1: USB disconnect, device number 16 [ 153.380994][ T7230] delete_channel: no stack [ 153.417688][ T24] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 153.441319][ T24] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 153.613271][ T24] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 154.114296][ T5946] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 154.276460][ T5946] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.299910][ T5946] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 154.321100][ T5946] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 154.339463][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.347807][ T5946] usb 1-1: Product: syz [ 154.352830][ T5946] usb 1-1: Manufacturer: syz [ 154.357647][ T5946] usb 1-1: SerialNumber: syz [ 154.550968][ T24] ft260 0003:0403:6030.000D: failed to retrieve system status [ 154.597699][ T24] ft260 0003:0403:6030.000D: probe with driver ft260 failed with error -71 [ 154.611312][ T5946] usb 1-1: 0:2 : does not exist [ 154.634253][ T5946] usb 1-1: unit 66 not found! [ 154.662880][ T24] usb 3-1: USB disconnect, device number 12 [ 154.718985][ T7262] all: renamed from bridge_slave_1 (while UP) [ 154.770845][ T5946] usb 1-1: USB disconnect, device number 17 [ 154.867604][ T6484] udevd[6484]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.118331][ T7270] syzkaller0: entered promiscuous mode [ 155.124440][ T7270] syzkaller0: entered allmulticast mode [ 155.149643][ T7270] FAULT_INJECTION: forcing a failure. [ 155.149643][ T7270] name failslab, interval 1, probability 0, space 0, times 0 [ 155.183030][ T7270] CPU: 1 UID: 0 PID: 7270 Comm: syz.3.395 Not tainted syzkaller #0 PREEMPT(full) [ 155.183059][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.183072][ T7270] Call Trace: [ 155.183080][ T7270] [ 155.183088][ T7270] dump_stack_lvl+0xe8/0x150 [ 155.183134][ T7270] should_fail_ex+0x412/0x560 [ 155.183167][ T7270] should_failslab+0xa8/0x100 [ 155.183194][ T7270] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 155.183216][ T7270] ? __alloc_skb+0x186/0x7d0 [ 155.183241][ T7270] ? __alloc_skb+0x1d0/0x7d0 [ 155.183264][ T7270] ? __local_bh_enable_ip+0xd0/0x130 [ 155.183294][ T7270] __alloc_skb+0x1d0/0x7d0 [ 155.183319][ T7270] ? netlink_ack_tlv_len+0x6c/0x210 [ 155.183348][ T7270] netlink_ack+0x146/0xa50 [ 155.183379][ T7270] ? __kmalloc_cache_noprof+0x31c/0x660 [ 155.183409][ T7270] nfnetlink_rcv+0x251a/0x27b0 [ 155.183463][ T7270] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 155.183502][ T7270] ? ref_tracker_free+0x693/0x840 [ 155.183546][ T7270] ? __netlink_deliver_tap+0x807/0x850 [ 155.183581][ T7270] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.183607][ T7270] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.183638][ T7270] netlink_unicast+0x75c/0x8e0 [ 155.183671][ T7270] netlink_sendmsg+0x813/0xb40 [ 155.183706][ T7270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.183737][ T7270] ? aa_sock_msg_perm+0xf1/0x1b0 [ 155.183756][ T7270] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.183781][ T7270] ____sys_sendmsg+0x972/0x9f0 [ 155.183798][ T7270] ? __might_fault+0xaf/0x130 [ 155.183823][ T7270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.183849][ T7270] ? import_iovec+0x73/0xa0 [ 155.183872][ T7270] ___sys_sendmsg+0x2a5/0x360 [ 155.183889][ T7270] ? __lock_acquire+0x6b5/0x2cf0 [ 155.183920][ T7270] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.183969][ T7270] ? __fget_files+0x2a/0x420 [ 155.183993][ T7270] ? __fget_files+0x3a0/0x420 [ 155.184020][ T7270] __x64_sys_sendmsg+0x1bd/0x2a0 [ 155.184041][ T7270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.184068][ T7270] ? __pfx_ksys_write+0x10/0x10 [ 155.184098][ T7270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.184117][ T7270] do_syscall_64+0x15f/0xf80 [ 155.184139][ T7270] ? trace_irq_disable+0x3b/0x140 [ 155.184163][ T7270] ? clear_bhb_loop+0x40/0x90 [ 155.184185][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.184203][ T7270] RIP: 0033:0x7f2d5a99c819 [ 155.184220][ T7270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.184234][ T7270] RSP: 002b:00007f2d5b807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.184254][ T7270] RAX: ffffffffffffffda RBX: 00007f2d5ac15fa0 RCX: 00007f2d5a99c819 [ 155.184267][ T7270] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000009 [ 155.184279][ T7270] RBP: 00007f2d5b807090 R08: 0000000000000000 R09: 0000000000000000 [ 155.184289][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.184299][ T7270] R13: 00007f2d5ac16038 R14: 00007f2d5ac15fa0 R15: 00007f2d5ad3fa48 [ 155.184327][ T7270] [ 156.103311][ T5946] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 156.217653][ T7288] all: renamed from bridge_slave_1 (while UP) [ 156.228562][ T7290] netem: change failed [ 156.275815][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 156.289146][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.309258][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.342211][ T5946] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 156.355113][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.398575][ T5946] usb 5-1: config 0 descriptor?? [ 156.826105][ T5946] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 156.853628][ T5946] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 157.243284][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 157.423003][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 157.435738][ T24] usb 1-1: config 0 has no interfaces? [ 157.462699][ T24] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 157.483813][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.501368][ T24] usb 1-1: Product: syz [ 157.524014][ T24] usb 1-1: Manufacturer: syz [ 157.530128][ T24] usb 1-1: SerialNumber: syz [ 157.555610][ T5897] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 157.564565][ T24] usb 1-1: config 0 descriptor?? [ 157.767672][ T5897] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 157.777688][ T5946] ft260 0003:0403:6030.000E: failed to retrieve chip version [ 157.804074][ T5897] usb 2-1: can't read configurations, error -22 [ 157.838255][ T7307] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 157.841755][ T5946] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -71 [ 157.898176][ T7307] bond0: (slave wlan1): Opening slave failed [ 157.912562][ T5946] usb 5-1: USB disconnect, device number 16 [ 157.993262][ T5897] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 158.185274][ T5897] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 158.199508][ T5897] usb 2-1: can't read configurations, error -22 [ 158.207161][ T5897] usb usb2-port1: attempt power cycle [ 158.403020][ T29] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 158.562997][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 158.579590][ T29] usb 3-1: config 0 has no interfaces? [ 158.586382][ T5897] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 158.594103][ T29] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 158.616977][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.629969][ T5897] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 158.649180][ T5897] usb 2-1: can't read configurations, error -22 [ 158.657166][ T29] usb 3-1: config 0 descriptor?? [ 158.803055][ T5897] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 158.837611][ T5897] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 158.847015][ T5897] usb 2-1: can't read configurations, error -22 [ 158.857426][ T5897] usb usb2-port1: unable to enumerate USB device [ 159.006538][ T7324] futex_wake_op: syz.4.414 tries to shift op by 36; fix this program [ 159.254529][ T7329] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 159.327592][ T5946] usb 3-1: USB disconnect, device number 13 [ 160.122773][ T5842] usb 1-1: USB disconnect, device number 18 [ 160.133587][ T7306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.773196][ T5842] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 160.793086][ T5897] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 160.955830][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 160.962033][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 160.969999][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.982314][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.995598][ T5897] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 161.005792][ T5842] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 161.015369][ T5897] usb 2-1: config 0 has no interface number 0 [ 161.022417][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.033386][ T5897] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 161.045384][ T5842] usb 3-1: config 0 descriptor?? [ 161.051087][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.073228][ T5897] usb 2-1: Product: syz [ 161.082450][ T5897] usb 2-1: Manufacturer: syz [ 161.089623][ T5897] usb 2-1: SerialNumber: syz [ 161.101351][ T5897] usb 2-1: config 0 descriptor?? [ 161.115823][ T5897] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 161.325845][ T7353] pim6reg: entered allmulticast mode [ 161.337902][ T7353] pim6reg: left allmulticast mode [ 161.353071][ T5946] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 161.388506][ T7353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.399440][ T7353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.414823][ T5897] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 161.431831][ T5897] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 161.504313][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 161.516324][ T5946] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.525887][ T5946] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.536112][ T5946] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.547161][ T5946] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 161.557852][ T5946] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 161.576966][ T5946] usb 5-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 161.586346][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.594563][ T5946] usb 5-1: Product: syz [ 161.598779][ T5946] usb 5-1: Manufacturer: syz [ 161.604410][ T5946] usb 5-1: SerialNumber: syz [ 161.858540][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 161.866940][ T5897] usb 2-1: USB disconnect, device number 21 [ 161.895576][ T5897] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 161.915710][ T5897] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 161.929728][ T5897] quatech2 2-1:0.51: device disconnected [ 162.259325][ T5842] usbhid 3-1:0.0: can't add hid device: -71 [ 162.271248][ T5842] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 162.275873][ T5842] usb 3-1: USB disconnect, device number 14 [ 162.637696][ T7371] delete_channel: no stack [ 162.778072][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.430'. [ 162.797353][ T7377] batadv0: entered promiscuous mode [ 163.345645][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 163.383590][ T9] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 163.410640][ T9] usb 4-1: USB disconnect, device number 4 [ 163.733706][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 163.913405][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 163.931004][ T9] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 163.965904][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.012717][ T9] usb 4-1: config 0 descriptor?? [ 164.066883][ T9] as10x_usb: device has been detected [ 164.106378][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 164.199073][ T5946] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.227743][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 164.424679][ T9] as10x_usb: error during firmware upload part1 [ 164.449834][ T9] Registered device nBox DVB-T Dongle [ 164.478525][ T9] usb 4-1: USB disconnect, device number 5 [ 164.529744][ T5946] usb 5-1: USB disconnect, device number 17 [ 164.602268][ T9] Unregistered device nBox DVB-T Dongle [ 164.702113][ T9] as10x_usb: device has been disconnected [ 164.867160][ T7402] FAULT_INJECTION: forcing a failure. [ 164.867160][ T7402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.932014][ T7402] CPU: 1 UID: 0 PID: 7402 Comm: syz.2.436 Not tainted syzkaller #0 PREEMPT(full) [ 164.932036][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.932053][ T7402] Call Trace: [ 164.932060][ T7402] [ 164.932066][ T7402] dump_stack_lvl+0xe8/0x150 [ 164.932097][ T7402] should_fail_ex+0x412/0x560 [ 164.932126][ T7402] _copy_to_user+0x31/0xb0 [ 164.932145][ T7402] simple_read_from_buffer+0xe1/0x170 [ 164.932165][ T7402] proc_fail_nth_read+0x1bb/0x230 [ 164.932184][ T7402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.932204][ T7402] ? rw_verify_area+0x2a6/0x4d0 [ 164.932222][ T7402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.932239][ T7402] vfs_read+0x20c/0xa70 [ 164.932261][ T7402] ? __pfx___mutex_lock+0x10/0x10 [ 164.932281][ T7402] ? __pfx_vfs_read+0x10/0x10 [ 164.932301][ T7402] ? __fget_files+0x2a/0x420 [ 164.932319][ T7402] ? __fget_files+0x3a0/0x420 [ 164.932333][ T7402] ? __fget_files+0x2a/0x420 [ 164.932354][ T7402] ksys_read+0x150/0x270 [ 164.932375][ T7402] ? __pfx_ksys_read+0x10/0x10 [ 164.932399][ T7402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.932415][ T7402] do_syscall_64+0x15f/0xf80 [ 164.932433][ T7402] ? trace_irq_disable+0x3b/0x140 [ 164.932454][ T7402] ? clear_bhb_loop+0x40/0x90 [ 164.932472][ T7402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.932491][ T7402] RIP: 0033:0x7fb56f15d04e [ 164.932505][ T7402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.932518][ T7402] RSP: 002b:00007fb5700b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.932535][ T7402] RAX: ffffffffffffffda RBX: 00007fb5700b46c0 RCX: 00007fb56f15d04e [ 164.932546][ T7402] RDX: 000000000000000f RSI: 00007fb5700b40a0 RDI: 0000000000000007 [ 164.932555][ T7402] RBP: 00007fb5700b4090 R08: 0000000000000000 R09: 0000000000000000 [ 164.932565][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.932574][ T7402] R13: 00007fb56f416038 R14: 00007fb56f415fa0 R15: 00007fb56f53fa48 [ 164.932597][ T7402] [ 165.462704][ T7405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.597796][ T7405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.836986][ T5842] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.013447][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 166.021692][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.043535][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.064868][ T5842] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 166.076044][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.090302][ T5842] usb 3-1: config 0 descriptor?? [ 166.129382][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 166.693056][ T29] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 166.876298][ T29] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.896085][ T29] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 166.923003][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.943170][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 166.972996][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 166.995995][ T29] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.024391][ T29] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.035912][ T29] usb 1-1: Product: syz [ 167.042061][ T29] usb 1-1: Manufacturer: syz [ 167.051581][ T5842] usbhid 3-1:0.0: can't add hid device: -71 [ 167.060148][ T5842] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 167.091284][ T29] cdc_wdm 1-1:1.0: skipping garbage [ 167.109122][ T29] cdc_wdm 1-1:1.0: skipping garbage [ 167.123431][ T5842] usb 3-1: USB disconnect, device number 15 [ 167.145936][ T29] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 167.172492][ T29] cdc_wdm 1-1:1.0: Unknown control protocol [ 167.212397][ T7422] all: renamed from bridge_slave_1 (while UP) [ 167.372893][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.400742][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.569924][ T5930] usb 1-1: USB disconnect, device number 19 [ 167.734148][ T7445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.773049][ T5931] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 167.873441][ T5946] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.923280][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 167.938248][ T5931] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 167.947687][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.958251][ T5931] usb 2-1: Product: syz [ 167.962485][ T5931] usb 2-1: Manufacturer: syz [ 167.967639][ T5931] usb 2-1: SerialNumber: syz [ 168.035450][ T5946] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.043647][ T5946] usb 4-1: config 0 has no interface number 0 [ 168.049836][ T5946] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.061295][ T5946] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.071515][ T5946] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 168.080825][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.092830][ T5946] usb 4-1: config 0 descriptor?? [ 168.204310][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.246732][ T5931] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 168.257320][ T5931] usb 2-1: incorrect wMaxPacketSize 0x3ef for BADD profile [ 168.401907][ T7465] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 168.418727][ T5931] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 168.450659][ T7464] bridge1: entered promiscuous mode [ 168.465936][ T5931] usb 2-1: USB disconnect, device number 22 [ 168.505972][ T6484] udevd[6484]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.542269][ T7464] loop9: detected capacity change from 0 to 524287935 [ 168.567134][ T5946] usbhid 4-1:0.1: can't add hid device: -71 [ 168.595419][ T5946] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 168.627448][ T5946] usb 4-1: USB disconnect, device number 6 [ 169.263028][ T5946] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 169.443100][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 169.458221][ T5946] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 169.486080][ T5946] usb 1-1: config 0 has no interface number 0 [ 169.507717][ T5946] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 169.533059][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 169.545042][ T5946] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 169.579989][ T5946] usb 1-1: config 0 interface 41 has no altsetting 0 [ 169.612125][ T5946] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 169.646134][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.667815][ T5946] usb 1-1: Product: syz [ 169.678111][ T5946] usb 1-1: Manufacturer: syz [ 169.690701][ T5946] usb 1-1: SerialNumber: syz [ 169.706567][ T5946] usb 1-1: config 0 descriptor?? [ 169.716561][ T7470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.724448][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 169.739405][ T7470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.751039][ T9] usb 3-1: config 0 has no interfaces? [ 169.767299][ T9] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 169.791453][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.811900][ T9] usb 3-1: Product: syz [ 169.822672][ T9] usb 3-1: Manufacturer: syz [ 169.839302][ T9] usb 3-1: SerialNumber: syz [ 169.874892][ T9] usb 3-1: config 0 descriptor?? [ 169.883078][ T5842] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 169.951943][ T7470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.976257][ T7470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 170.073135][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 170.085474][ T5842] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 170.099634][ T5842] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.118437][ T7478] netlink: 'syz.2.462': attribute type 10 has an invalid length. [ 170.127023][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.138530][ T7478] bond0: (slave wlan1): Opening slave failed [ 170.148002][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.166252][ T5842] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.191767][ T5842] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.214579][ T5946] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 170.229267][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.258349][ T5946] usb 1-1: USB disconnect, device number 20 [ 170.496099][ T5842] usb 4-1: usb_control_msg returned -32 [ 170.508840][ T5842] usbtmc 4-1:16.0: can't read capabilities [ 170.698909][ T5842] usb 4-1: USB disconnect, device number 7 [ 172.409387][ T7517] xt_ecn: cannot match TCP bits for non-tcp packets [ 172.519717][ T7477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.535819][ T5946] usb 3-1: USB disconnect, device number 16 [ 173.035792][ T7529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.142667][ T5931] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 173.303753][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 173.326840][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 173.345340][ T5897] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 173.363488][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 173.410172][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 173.433778][ T7533] netlink: 'syz.0.480': attribute type 11 has an invalid length. [ 173.455495][ T5931] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 173.468663][ T7533] netlink: 'syz.0.480': attribute type 29 has an invalid length. [ 173.479403][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.495567][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 173.507482][ T5931] usb 3-1: Product: syz [ 173.515476][ T5931] usb 3-1: Manufacturer: syz [ 173.539941][ T5931] usb 3-1: SerialNumber: syz [ 173.553187][ T5842] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 173.579710][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 173.596582][ T5931] usb 3-1: config 0 descriptor?? [ 173.620216][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.642771][ T5931] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 173.679849][ T5897] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 173.725742][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.740431][ C0] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 173.741970][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.778946][ T5897] usb 4-1: config 0 descriptor?? [ 173.787153][ T5842] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.812300][ T7529] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 173.843220][ T5842] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 173.860673][ C0] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 173.889358][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.934869][ T5842] usb 2-1: Product: syz [ 173.947641][ T807] usb 3-1: USB disconnect, device number 17 [ 173.948049][ C0] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 174.004532][ T5842] usb 2-1: Manufacturer: syz [ 174.033565][ T5842] usb 2-1: SerialNumber: syz [ 174.106044][ T5842] usb 2-1: config 0 descriptor?? [ 174.137779][ T5842] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 174.165703][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.184539][ T5842] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 174.205536][ T5842] usb 2-1: media controller created [ 174.229808][ T7538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.483'. [ 174.269691][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.483'. [ 174.285377][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.295352][ T5897] hid-multitouch 0003:0457:07DA.000F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 174.320383][ T7538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.483'. [ 174.447602][ T5842] DVB: Unable to find symbol tda10046_attach() [ 174.477836][ T5842] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 174.508906][ T5842] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 174.543146][ T807] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 174.756612][ T807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 174.782709][ T807] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 174.792101][ T807] usb 5-1: can't read configurations, error -22 [ 174.863071][ T29] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 174.923217][ T807] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 175.043379][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 175.056734][ T29] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 175.067778][ T29] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 175.082693][ T29] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 175.097458][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.107622][ T807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 175.120233][ T29] usb 3-1: Product: syz [ 175.128207][ T807] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 175.136757][ T29] usb 3-1: Manufacturer: syz [ 175.144495][ T29] usb 3-1: SerialNumber: syz [ 175.150775][ T807] usb 5-1: can't read configurations, error -22 [ 175.168446][ T807] usb usb5-port1: attempt power cycle [ 175.490125][ T29] usb 3-1: USB disconnect, device number 18 [ 175.523132][ T807] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 175.561233][ T807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 175.571452][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.599661][ T807] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 175.611699][ T807] usb 5-1: can't read configurations, error -22 [ 175.755029][ T5842] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 175.775446][ T5842] usb 2-1: USB disconnect, device number 23 [ 175.783005][ T807] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 175.809519][ T807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 175.819354][ T807] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 175.832843][ T807] usb 5-1: can't read configurations, error -22 [ 175.840283][ T807] usb usb5-port1: unable to enumerate USB device [ 176.350786][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 176.457926][ T7572] fuse: Bad value for 'fd' [ 176.480778][ T807] usb 4-1: USB disconnect, device number 8 [ 176.636937][ T7578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'. [ 176.646133][ T7578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.494'. [ 176.893134][ T5842] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 177.043015][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 177.062986][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 177.079189][ T5842] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x79, changing to 0x9 [ 177.110286][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 47932, setting to 1024 [ 177.137737][ T5842] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 177.163282][ T5842] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 177.179007][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.219730][ T5842] usb 3-1: Product: syz [ 177.243102][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 177.249565][ T5842] usb 3-1: Manufacturer: syz [ 177.264858][ T5842] usb 3-1: SerialNumber: syz [ 177.308689][ T9] usb 4-1: config 0 has no interfaces? [ 177.326507][ T5842] usb 3-1: config 0 descriptor?? [ 177.351590][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.372197][ T7578] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 177.397790][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.439034][ T9] usb 4-1: Manufacturer: syz [ 177.458209][ T9] usb 4-1: config 0 descriptor?? [ 177.813882][ T5931] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 177.973120][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 177.989312][ T5931] usb 2-1: config 0 has no interfaces? [ 178.006962][ T5931] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 178.030294][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.055823][ T5931] usb 2-1: Product: syz [ 178.070686][ T5931] usb 2-1: Manufacturer: syz [ 178.085547][ T5931] usb 2-1: SerialNumber: syz [ 178.104735][ T5931] usb 2-1: config 0 descriptor?? [ 178.367997][ T7587] netlink: 'syz.1.496': attribute type 10 has an invalid length. [ 178.425896][ T7587] bond0: (slave wlan1): Opening slave failed [ 179.729520][ T5897] usb 3-1: USB disconnect, device number 19 [ 179.878347][ T9] usb 4-1: USB disconnect, device number 9 [ 179.981862][ T7621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.505'. [ 180.392860][ T7634] ªªªªª(: renamed from bridge_slave_0 (while UP) [ 180.714765][ T5931] usb 2-1: USB disconnect, device number 24 [ 180.722782][ T7586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.110891][ T7653] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 181.117557][ T7653] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 181.167156][ T7653] vhci_hcd vhci_hcd.0: Device attached [ 181.184453][ T7656] vhci_hcd: connection closed [ 181.186732][ T48] vhci_hcd vhci_hcd.2: stop threads [ 181.224232][ T48] vhci_hcd vhci_hcd.2: release socket [ 181.234047][ T5897] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 181.265328][ T48] vhci_hcd vhci_hcd.2: disconnect device [ 181.443016][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 181.458683][ T5897] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 181.487051][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.519400][ T5897] usb 4-1: config 0 has no interface number 0 [ 181.526049][ T5897] usb 4-1: config 0 interface 205 has no altsetting 0 [ 181.558511][ T5897] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 181.583058][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.594565][ T5897] usb 4-1: Product: syz [ 181.598897][ T5897] usb 4-1: Manufacturer: syz [ 181.606596][ T5897] usb 4-1: SerialNumber: syz [ 181.613345][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 181.621451][ T5897] usb 4-1: config 0 descriptor?? [ 181.636369][ T9] usb 2-1: config index 0 descriptor too short (expected 6701, got 45) [ 181.650980][ T5897] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 181.667590][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.674224][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 181.709135][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.763715][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.768058][ T5897] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 181.839209][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.848074][ T5897] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 181.897808][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 181.920200][ T5897] usb 4-1: media controller created [ 181.936561][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.959769][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.000383][ T9] usb 2-1: config 0 descriptor?? [ 182.020409][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 182.048599][ T5897] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 182.100608][ T5897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 182.133353][ T807] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 182.154644][ T5897] dvb-usb: schedule remote query interval to 150 msecs. [ 182.185553][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 182.213005][ T5897] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 182.239852][ T7659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.260202][ T7659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.344412][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 182.357599][ T807] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.370833][ T5897] dvb-usb: error while querying for an remote control event. [ 182.390229][ T807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.434881][ T807] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.470596][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.496834][ T807] usb 5-1: SerialNumber: syz [ 182.521233][ T9] logitech 0003:046D:CA03.0010: unknown main item tag 0x0 [ 182.549493][ T9] logitech 0003:046D:CA03.0010: unknown main item tag 0x0 [ 182.563476][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 182.575100][ T9] logitech 0003:046D:CA03.0010: unknown main item tag 0x0 [ 182.589783][ T9] logitech 0003:046D:CA03.0010: unknown main item tag 0x0 [ 182.605541][ T5897] dvb-usb: error while querying for an remote control event. [ 182.629935][ T9] logitech 0003:046D:CA03.0010: unknown main item tag 0x0 [ 182.661274][ T9] logitech 0003:046D:CA03.0010: unknown main item tag 0x0 [ 182.696200][ T9] logitech 0003:046D:CA03.0010: unknown main item tag 0x0 [ 182.747172][ T9] logitech 0003:046D:CA03.0010: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.1-1/input0 [ 182.783673][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 182.789319][ T9] logitech 0003:046D:CA03.0010: no inputs found [ 182.797881][ T5897] dvb-usb: error while querying for an remote control event. [ 182.868846][ T9] usb 2-1: USB disconnect, device number 25 [ 182.937129][ T7674] ipvlan2: entered promiscuous mode [ 182.969957][ T7675] fido_id[7675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 183.000854][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 183.019349][ T5897] dvb-usb: error while querying for an remote control event. [ 183.035630][ T7666] capability: warning: `syz.4.518' uses deprecated v2 capabilities in a way that may be insecure [ 183.203049][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 183.209053][ T29] dvb-usb: error while querying for an remote control event. [ 183.403112][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 183.420418][ T29] dvb-usb: error while querying for an remote control event. [ 183.614106][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 183.651359][ T29] dvb-usb: error while querying for an remote control event. [ 183.863474][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 183.885124][ T29] dvb-usb: error while querying for an remote control event. [ 184.035192][ T5897] usb 4-1: USB disconnect, device number 10 [ 184.065035][ T5842] dvb-usb: bulk message failed: -22 (1/0) [ 184.072619][ T5842] dvb-usb: error while querying for an remote control event. [ 184.161929][ T5897] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 184.419142][ T7691] netlink: 'syz.3.525': attribute type 1 has an invalid length. [ 184.547043][ T7691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.588684][ T7696] FAULT_INJECTION: forcing a failure. [ 184.588684][ T7696] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 184.625893][ T7696] CPU: 0 UID: 0 PID: 7696 Comm: syz.1.526 Not tainted syzkaller #0 PREEMPT(full) [ 184.625918][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.625930][ T7696] Call Trace: [ 184.625937][ T7696] [ 184.625945][ T7696] dump_stack_lvl+0xe8/0x150 [ 184.625997][ T7696] should_fail_ex+0x412/0x560 [ 184.626024][ T7696] prepare_alloc_pages+0x22a/0x650 [ 184.626071][ T7696] __alloc_frozen_pages_noprof+0x12f/0x380 [ 184.626101][ T7696] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 184.626145][ T7696] __alloc_pages_noprof+0x10/0x100 [ 184.626165][ T7696] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 184.626204][ T7696] ? __kmalloc_noprof+0x37d/0x760 [ 184.626240][ T7696] ? copy_splice_read+0x16f/0xaa0 [ 184.626258][ T7696] ? __kmalloc_noprof+0x1b8/0x760 [ 184.626281][ T7696] copy_splice_read+0x19f/0xaa0 [ 184.626307][ T7696] ? __pfx_iter_file_splice_write+0x10/0x10 [ 184.626324][ T7696] ? __pfx_copy_splice_read+0x10/0x10 [ 184.626341][ T7696] ? register_lock_class+0x31/0x2e0 [ 184.626383][ T7696] ? file_end_write+0xd8/0x250 [ 184.626404][ T7696] ? direct_splice_actor+0x10c/0x160 [ 184.626425][ T7696] ? __pfx_copy_splice_read+0x10/0x10 [ 184.626444][ T7696] splice_direct_to_actor+0x478/0xc70 [ 184.626469][ T7696] ? __pfx_direct_splice_actor+0x10/0x10 [ 184.626488][ T7696] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 184.626521][ T7696] do_splice_direct+0x195/0x290 [ 184.626545][ T7696] ? __pfx_do_splice_direct+0x10/0x10 [ 184.626565][ T7696] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 184.626596][ T7696] ? bpf_lsm_file_permission+0x9/0x20 [ 184.626618][ T7696] ? security_file_permission+0x75/0x260 [ 184.626636][ T7696] ? rw_verify_area+0x255/0x4d0 [ 184.626654][ T7696] do_sendfile+0x535/0x7d0 [ 184.626693][ T7696] ? __pfx_vfs_write+0x10/0x10 [ 184.626720][ T7696] ? __pfx_do_sendfile+0x10/0x10 [ 184.626746][ T7696] ? __fget_files+0x3a0/0x420 [ 184.626773][ T7696] __se_sys_sendfile64+0x144/0x1a0 [ 184.626793][ T7696] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 184.626836][ T7696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.626857][ T7696] do_syscall_64+0x15f/0xf80 [ 184.626878][ T7696] ? trace_irq_disable+0x3b/0x140 [ 184.626901][ T7696] ? clear_bhb_loop+0x40/0x90 [ 184.626923][ T7696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.626938][ T7696] RIP: 0033:0x7f2125d9c819 [ 184.626950][ T7696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.626961][ T7696] RSP: 002b:00007f2126bc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 184.626991][ T7696] RAX: ffffffffffffffda RBX: 00007f2126015fa0 RCX: 00007f2125d9c819 [ 184.627006][ T7696] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 184.627016][ T7696] RBP: 00007f2126bc0090 R08: 0000000000000000 R09: 0000000000000000 [ 184.627026][ T7696] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 184.627037][ T7696] R13: 00007f2126016038 R14: 00007f2126015fa0 R15: 00007f212613fa48 [ 184.627068][ T7696] [ 184.793040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 184.962938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 185.044820][ T807] usb 5-1: 0:2 : does not exist [ 185.069097][ T807] usb 5-1: unit 5 not found! [ 185.118381][ T7693] bond2: (slave gretap1): making interface the new active one [ 185.169887][ T7693] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 185.231065][ T807] usb 5-1: USB disconnect, device number 22 [ 185.283789][ T5930] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 185.446246][ T5930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.469774][ T5930] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.510937][ T5930] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.532271][ T5930] usb 4-1: config 1 interface 0 has no altsetting 0 [ 185.562346][ T5930] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 185.583862][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.610523][ T5930] usb 4-1: Product: syz [ 185.621895][ T5930] usb 4-1: Manufacturer: syz [ 185.637929][ T5930] usb 4-1: SerialNumber: syz [ 185.684252][ T5930] smsusb:smsusb_probe: board id=8, interface number 0 [ 185.709910][ T5930] smsusb:smsusb_probe: Device initialized with return code -19 [ 185.947455][ T5930] usb 4-1: USB disconnect, device number 11 [ 186.115788][ T30] audit: type=1326 audit(1776816405.676:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340b59c819 code=0x7ffc0000 [ 186.187887][ T30] audit: type=1326 audit(1776816405.696:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f340b59c819 code=0x7ffc0000 [ 186.276971][ T30] audit: type=1326 audit(1776816405.726:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340b59c819 code=0x7ffc0000 [ 186.330228][ T30] audit: type=1326 audit(1776816405.726:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f340b59c819 code=0x7ffc0000 [ 186.583930][ T30] audit: type=1326 audit(1776816405.736:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340b59c819 code=0x7ffc0000 [ 186.583980][ T30] audit: type=1326 audit(1776816405.736:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340b59c819 code=0x7ffc0000 [ 186.584024][ T30] audit: type=1326 audit(1776816405.786:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f340b59c819 code=0x7ffc0000 [ 187.139586][ T30] audit: type=1326 audit(1776816406.686:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340b59c819 code=0x7ffc0000 [ 187.195495][ T30] audit: type=1326 audit(1776816406.686:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340b59c819 code=0x7ffc0000 [ 187.353327][ T5897] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 187.430943][ T7743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.533481][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 187.571430][ T5897] usb 3-1: config 0 has no interfaces? [ 187.589160][ T5897] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 187.632100][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.653612][ T5897] usb 3-1: Product: syz [ 187.673026][ T5897] usb 3-1: Manufacturer: syz [ 187.681370][ T5897] usb 3-1: SerialNumber: syz [ 187.731540][ T5897] usb 3-1: config 0 descriptor?? [ 187.753665][ T5930] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 187.906368][ T7749] netlink: 'syz.1.541': attribute type 46 has an invalid length. [ 187.956561][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 187.980120][ T7729] netlink: 'syz.2.536': attribute type 10 has an invalid length. [ 188.002020][ T7729] bond0: (slave wlan1): Opening slave failed [ 188.016393][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.083291][ T5930] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 188.108049][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.162731][ T5930] usb 1-1: config 0 descriptor?? [ 188.182266][ T7743] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 188.692628][ T5930] hid-multitouch 0003:0457:07DA.0011: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 189.473091][ T5897] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 189.636684][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.679500][ T5897] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 189.718434][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.749998][ T5897] usb 4-1: config 0 descriptor?? [ 189.983522][ T5897] usbhid 4-1:0.0: can't add hid device: -71 [ 190.002696][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 190.023357][ T5931] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 190.050282][ T5897] usb 4-1: USB disconnect, device number 12 [ 190.194558][ T807] usb 3-1: USB disconnect, device number 20 [ 190.211860][ T7728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.214210][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 190.260819][ T5931] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 190.274456][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.299964][ T5931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.321128][ T5931] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.335015][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.355210][ T5931] usb 5-1: Product: syz [ 190.365417][ T5931] usb 5-1: Manufacturer: syz [ 190.377571][ T5931] usb 5-1: SerialNumber: syz [ 190.411610][ T5931] usb 5-1: 0:2 : does not exist [ 190.523343][ T5897] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 190.661537][ T7777] loop5: detected capacity change from 0 to 7 [ 190.682079][ T7777] Dev loop5: unable to read RDB block 7 [ 190.695147][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 190.700731][ T7777] loop5: unable to read partition table [ 190.717429][ T7777] loop5: partition table beyond EOD, truncated [ 190.729849][ T5897] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 190.731332][ T7777] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.788075][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.833371][ T807] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 190.844906][ T5897] usb 4-1: config 0 descriptor?? [ 190.950192][ T5930] usb 1-1: USB disconnect, device number 21 [ 191.033340][ T807] usb 3-1: Using ep0 maxpacket: 32 [ 191.051891][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.074629][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.094853][ T807] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 191.115739][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.131070][ T807] usb 3-1: config 0 descriptor?? [ 191.272356][ T7760] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.300913][ T5897] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 191.310469][ T5897] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 191.320205][ T5897] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 191.335080][ T5897] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 191.345467][ T5897] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 191.363060][ T5897] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 191.373386][ T5897] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 191.383204][ T5897] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 191.392748][ T5897] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 191.401363][ T5897] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 191.449115][ T5897] logitech-djreceiver 0003:046D:C71F.0012: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 191.559094][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.570545][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.593291][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.618974][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.628495][ T807] usbhid 3-1:0.0: can't add hid device: -32 [ 191.635450][ T807] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 191.670535][ T807] usb 3-1: USB disconnect, device number 21 [ 191.702073][ T5897] usb 4-1: USB disconnect, device number 13 [ 192.403097][ T5931] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 192.489505][ T7803] FAULT_INJECTION: forcing a failure. [ 192.489505][ T7803] name failslab, interval 1, probability 0, space 0, times 0 [ 192.504316][ T7803] CPU: 1 UID: 0 PID: 7803 Comm: syz.0.558 Not tainted syzkaller #0 PREEMPT(full) [ 192.504340][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 192.504351][ T7803] Call Trace: [ 192.504358][ T7803] [ 192.504366][ T7803] dump_stack_lvl+0xe8/0x150 [ 192.504400][ T7803] should_fail_ex+0x412/0x560 [ 192.504433][ T7803] should_failslab+0xa8/0x100 [ 192.504463][ T7803] ? dst_alloc+0x105/0x170 [ 192.504483][ T7803] kmem_cache_alloc_noprof+0x87/0x650 [ 192.504512][ T7803] dst_alloc+0x105/0x170 [ 192.504536][ T7803] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 192.504562][ T7803] ? ip_route_output_key_hash+0xd8/0x2a0 [ 192.504579][ T7803] ip_route_output_key_hash+0x18d/0x2a0 [ 192.504594][ T7803] ? __lock_acquire+0x6b5/0x2cf0 [ 192.504618][ T7803] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 192.504646][ T7803] ip_route_output_flow+0x2a/0x150 [ 192.504668][ T7803] ? security_sk_classify_flow+0x6d/0x150 [ 192.504690][ T7803] __ip4_datagram_connect+0x9a5/0x1270 [ 192.504728][ T7803] udp_connect+0x33/0x1f0 [ 192.504750][ T7803] __sys_connect+0x312/0x450 [ 192.504774][ T7803] ? __pfx___sys_connect+0x10/0x10 [ 192.504804][ T7803] ? __pfx_ksys_write+0x10/0x10 [ 192.504827][ T7803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.504843][ T7803] __x64_sys_connect+0x7a/0x90 [ 192.504865][ T7803] do_syscall_64+0x15f/0xf80 [ 192.504883][ T7803] ? trace_irq_disable+0x3b/0x140 [ 192.504903][ T7803] ? clear_bhb_loop+0x40/0x90 [ 192.504921][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.504936][ T7803] RIP: 0033:0x7fb52fb9c819 [ 192.504950][ T7803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.504963][ T7803] RSP: 002b:00007fb530ab5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 192.504979][ T7803] RAX: ffffffffffffffda RBX: 00007fb52fe15fa0 RCX: 00007fb52fb9c819 [ 192.504990][ T7803] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000003 [ 192.505000][ T7803] RBP: 00007fb530ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 192.505008][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.505017][ T7803] R13: 00007fb52fe16038 R14: 00007fb52fe15fa0 R15: 00007fb52ff3fa48 [ 192.505040][ T7803] [ 192.755114][ T5931] usb 2-1: config 0 has no interfaces? [ 192.782706][ T7807] netlink: 'syz.0.559': attribute type 1 has an invalid length. [ 192.792382][ T5931] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 192.822456][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.831294][ T9] usb 5-1: USB disconnect, device number 23 [ 192.865360][ T5931] usb 2-1: Product: syz [ 192.876017][ T5931] usb 2-1: Manufacturer: syz [ 192.897699][ T5931] usb 2-1: SerialNumber: syz [ 192.911722][ T7807] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 192.974459][ T5931] usb 2-1: config 0 descriptor?? [ 193.201338][ T7823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.261021][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.294282][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.345443][ T7794] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.470160][ T5931] usb 2-1: USB disconnect, device number 26 [ 193.493649][ T807] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 193.553041][ T5897] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 193.680053][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 193.710687][ T807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.747127][ T807] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 193.776277][ T5897] usb 5-1: config index 0 descriptor too short (expected 65122, got 72) [ 193.784716][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.795355][ T5897] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.814141][ T807] usb 1-1: config 0 descriptor?? [ 193.822132][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.838692][ T7823] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 193.864642][ T5897] usb 5-1: Product: syz [ 193.880115][ T5897] usb 5-1: Manufacturer: syz [ 193.900412][ T5897] usb 5-1: SerialNumber: syz [ 193.940633][ T5897] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 193.974402][ T29] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 193.996616][ T7837] tipc: Can't bind to reserved service type 1 [ 194.048478][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.055455][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.406324][ T807] hid-multitouch 0003:0457:07DA.0013: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 195.115243][ T29] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 195.142084][ T29] ath9k_htc: Failed to initialize the device [ 195.219331][ T29] usb 5-1: ath9k_htc: USB layer deinitialized [ 195.433211][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 195.697908][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.768858][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 195.788302][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.808355][ T9] usb 3-1: Product: syz [ 195.828123][ T9] usb 3-1: Manufacturer: syz [ 195.849227][ T9] usb 3-1: SerialNumber: syz [ 195.877187][ T9] usb 3-1: config 0 descriptor?? [ 195.914341][ T9] usb 3-1: No union descriptors [ 195.932831][ T9] usb 3-1: unsupported MDLM descriptors [ 196.252731][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.315359][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.405765][ T7853] FAULT_INJECTION: forcing a failure. [ 196.405765][ T7853] name failslab, interval 1, probability 0, space 0, times 0 [ 196.450880][ T7853] CPU: 0 UID: 0 PID: 7853 Comm: syz.1.567 Not tainted syzkaller #0 PREEMPT(full) [ 196.450908][ T7853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.450922][ T7853] Call Trace: [ 196.450931][ T7853] [ 196.450941][ T7853] dump_stack_lvl+0xe8/0x150 [ 196.450979][ T7853] should_fail_ex+0x412/0x560 [ 196.451019][ T7853] should_failslab+0xa8/0x100 [ 196.451042][ T7853] __kmalloc_noprof+0xe8/0x760 [ 196.451084][ T7853] ? tomoyo_encode+0x28b/0x550 [ 196.451114][ T7853] tomoyo_encode+0x28b/0x550 [ 196.451141][ T7853] tomoyo_realpath_from_path+0x58d/0x5d0 [ 196.451170][ T7853] ? tomoyo_domain+0xd7/0x130 [ 196.451191][ T7853] ? tomoyo_path_number_perm+0x219/0x630 [ 196.451214][ T7853] tomoyo_path_number_perm+0x246/0x630 [ 196.451260][ T7853] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 196.451297][ T7853] ? sb_end_write+0xe9/0x1c0 [ 196.451333][ T7853] ? vfs_write+0x9bc/0xb90 [ 196.451376][ T7853] ? ksys_write+0x1fc/0x270 [ 196.451422][ T7853] security_file_ioctl+0xc3/0x2a0 [ 196.451453][ T7853] __se_sys_ioctl+0x47/0x170 [ 196.451485][ T7853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.451502][ T7853] do_syscall_64+0x15f/0xf80 [ 196.451521][ T7853] ? trace_irq_disable+0x3b/0x140 [ 196.451558][ T7853] ? clear_bhb_loop+0x40/0x90 [ 196.451586][ T7853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.451607][ T7853] RIP: 0033:0x7f2125d9c819 [ 196.451626][ T7853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.451647][ T7853] RSP: 002b:00007f2126bc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.451663][ T7853] RAX: ffffffffffffffda RBX: 00007f2126015fa0 RCX: 00007f2125d9c819 [ 196.451674][ T7853] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 196.451684][ T7853] RBP: 00007f2126bc0090 R08: 0000000000000000 R09: 0000000000000000 [ 196.451693][ T7853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.451719][ T7853] R13: 00007f2126016038 R14: 00007f2126015fa0 R15: 00007f212613fa48 [ 196.451753][ T7853] [ 196.660095][ T7853] ERROR: Out of memory at tomoyo_realpath_from_path. [ 197.219327][ T7854] delete_channel: no stack [ 197.279826][ T9] usb 5-1: USB disconnect, device number 24 [ 197.345380][ T7858] FAULT_INJECTION: forcing a failure. [ 197.345380][ T7858] name failslab, interval 1, probability 0, space 0, times 0 [ 197.410939][ T29] usb 1-1: USB disconnect, device number 22 [ 197.426149][ T7858] CPU: 1 UID: 0 PID: 7858 Comm: syz.3.569 Not tainted syzkaller #0 PREEMPT(full) [ 197.426178][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 197.426191][ T7858] Call Trace: [ 197.426199][ T7858] [ 197.426208][ T7858] dump_stack_lvl+0xe8/0x150 [ 197.426245][ T7858] should_fail_ex+0x412/0x560 [ 197.426294][ T7858] should_failslab+0xa8/0x100 [ 197.426323][ T7858] __kmalloc_noprof+0xe8/0x760 [ 197.426347][ T7858] ? tomoyo_encode+0x28b/0x550 [ 197.426373][ T7858] tomoyo_encode+0x28b/0x550 [ 197.426399][ T7858] tomoyo_realpath_from_path+0x58d/0x5d0 [ 197.426431][ T7858] ? tomoyo_path_number_perm+0x219/0x630 [ 197.426459][ T7858] tomoyo_path_number_perm+0x246/0x630 [ 197.426490][ T7858] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 197.426517][ T7858] ? __lock_acquire+0x6b5/0x2cf0 [ 197.426562][ T7858] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 197.426607][ T7858] ? __fget_files+0x2a/0x420 [ 197.426630][ T7858] ? __fget_files+0x2a/0x420 [ 197.426649][ T7858] ? __fget_files+0x3a0/0x420 [ 197.426668][ T7858] ? __fget_files+0x2a/0x420 [ 197.426692][ T7858] security_file_ioctl+0xc3/0x2a0 [ 197.426721][ T7858] __se_sys_ioctl+0x47/0x170 [ 197.426746][ T7858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.426769][ T7858] do_syscall_64+0x15f/0xf80 [ 197.426791][ T7858] ? trace_irq_disable+0x3b/0x140 [ 197.426826][ T7858] ? clear_bhb_loop+0x40/0x90 [ 197.426851][ T7858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.426870][ T7858] RIP: 0033:0x7f2d5a99c819 [ 197.426888][ T7858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.426904][ T7858] RSP: 002b:00007f2d5b807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.426926][ T7858] RAX: ffffffffffffffda RBX: 00007f2d5ac15fa0 RCX: 00007f2d5a99c819 [ 197.426940][ T7858] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000003 [ 197.426951][ T7858] RBP: 00007f2d5b807090 R08: 0000000000000000 R09: 0000000000000000 [ 197.426963][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.426975][ T7858] R13: 00007f2d5ac16038 R14: 00007f2d5ac15fa0 R15: 00007f2d5ad3fa48 [ 197.427010][ T7858] [ 197.658119][ T7858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 197.967587][ T807] usb 3-1: USB disconnect, device number 22 [ 198.013442][ T5931] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 198.023346][ T7868] FAULT_INJECTION: forcing a failure. [ 198.023346][ T7868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.060825][ T7868] CPU: 1 UID: 0 PID: 7868 Comm: syz.3.573 Not tainted syzkaller #0 PREEMPT(full) [ 198.060849][ T7868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.060861][ T7868] Call Trace: [ 198.060872][ T7868] [ 198.060880][ T7868] dump_stack_lvl+0xe8/0x150 [ 198.060914][ T7868] should_fail_ex+0x412/0x560 [ 198.060948][ T7868] _copy_to_iter+0x589/0x17d0 [ 198.060980][ T7868] ? __pfx__copy_to_iter+0x10/0x10 [ 198.060997][ T7868] ? single_next+0xd/0x40 [ 198.061022][ T7868] ? single_stop+0x9/0x10 [ 198.061045][ T7868] ? traverse+0x544/0x580 [ 198.061080][ T7868] seq_read_iter+0x2e9/0xe10 [ 198.061107][ T7868] ? rcu_is_watching+0x15/0xb0 [ 198.061140][ T7868] proc_reg_read_iter+0x1b7/0x280 [ 198.061166][ T7868] do_iter_readv_writev+0x619/0x8c0 [ 198.061194][ T7868] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 198.061226][ T7868] ? rw_verify_area+0x2a6/0x4d0 [ 198.061252][ T7868] vfs_readv+0x288/0x840 [ 198.061288][ T7868] ? __pfx_vfs_readv+0x10/0x10 [ 198.061329][ T7868] ? __fget_files+0x2a/0x420 [ 198.061353][ T7868] ? __fget_files+0x3a0/0x420 [ 198.061371][ T7868] ? __fget_files+0x2a/0x420 [ 198.061397][ T7868] __se_sys_preadv2+0x184/0x2a0 [ 198.061425][ T7868] ? __pfx___se_sys_preadv2+0x10/0x10 [ 198.061456][ T7868] ? __x64_sys_preadv2+0x20/0xc0 [ 198.061480][ T7868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.061500][ T7868] do_syscall_64+0x15f/0xf80 [ 198.061522][ T7868] ? trace_irq_disable+0x3b/0x140 [ 198.061547][ T7868] ? clear_bhb_loop+0x40/0x90 [ 198.061569][ T7868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.061586][ T7868] RIP: 0033:0x7f2d5a99c819 [ 198.061602][ T7868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.061617][ T7868] RSP: 002b:00007f2d5b807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 198.061635][ T7868] RAX: ffffffffffffffda RBX: 00007f2d5ac15fa0 RCX: 00007f2d5a99c819 [ 198.061647][ T7868] RDX: 000000000000003a RSI: 0000200000000300 RDI: 0000000000000003 [ 198.061666][ T7868] RBP: 00007f2d5b807090 R08: 0000000080000400 R09: 0000000000000001 [ 198.061677][ T7868] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 198.061688][ T7868] R13: 00007f2d5ac16038 R14: 00007f2d5ac15fa0 R15: 00007f2d5ad3fa48 [ 198.061714][ T7868] [ 198.303912][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 198.311198][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.322449][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.333566][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.346610][ T5931] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 198.355760][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.363811][ T5842] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 198.375066][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 198.385431][ T5931] usb 2-1: config 0 descriptor?? [ 198.605132][ T7860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.614347][ T7860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.679163][ T7879] kAFS: unable to lookup cell 'ÿ' [ 198.713133][ T807] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 198.801214][ T7859] ================================================================== [ 198.809323][ T7859] BUG: KASAN: slab-use-after-free in drm_gem_object_release_handle+0x4b/0x1e0 [ 198.818208][ T7859] Read of size 8 at addr ffff888030efa278 by task syz.1.570/7859 [ 198.825946][ T7859] [ 198.828288][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: syz.1.570 Not tainted syzkaller #0 PREEMPT(full) [ 198.828310][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.828321][ T7859] Call Trace: [ 198.828329][ T7859] [ 198.828337][ T7859] dump_stack_lvl+0xe8/0x150 [ 198.828367][ T7859] print_address_description+0x55/0x1e0 [ 198.828394][ T7859] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 198.828416][ T7859] print_report+0x58/0x70 [ 198.828439][ T7859] kasan_report+0x117/0x150 [ 198.828464][ T7859] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 198.828489][ T7859] drm_gem_object_release_handle+0x4b/0x1e0 [ 198.828511][ T7859] idr_for_each+0x1c6/0x2a0 [ 198.828539][ T7859] ? __pfx_drm_fb_release+0x10/0x10 [ 198.828557][ T7859] ? __pfx_drm_gem_object_release_handle+0x10/0x10 [ 198.828578][ T7859] ? __pfx_idr_for_each+0x10/0x10 [ 198.828603][ T7859] drm_gem_release+0x28/0x40 [ 198.828624][ T7859] drm_file_free+0x729/0xa00 [ 198.828654][ T7859] drm_release+0x2de/0x3f0 [ 198.828681][ T7859] ? __pfx_drm_release+0x10/0x10 [ 198.828705][ T7859] __fput+0x44f/0xa60 [ 198.828727][ T7859] task_work_run+0x1d9/0x270 [ 198.828751][ T7859] ? __pfx_task_work_run+0x10/0x10 [ 198.828775][ T7859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.828794][ T7859] exit_to_user_mode_loop+0xed/0x480 [ 198.828820][ T7859] ? rcu_is_watching+0x15/0xb0 [ 198.828844][ T7859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.828863][ T7859] do_syscall_64+0x33e/0xf80 [ 198.828886][ T7859] ? clear_bhb_loop+0x40/0x90 [ 198.828907][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.828925][ T7859] RIP: 0033:0x7f2125d9c819 [ 198.828940][ T7859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.828957][ T7859] RSP: 002b:00007f212613fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 198.828977][ T7859] RAX: 0000000000000000 RBX: 00007f2126017da0 RCX: 00007f2125d9c819 [ 198.828990][ T7859] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 198.829002][ T7859] RBP: 00007f2126017da0 R08: 00007f2126016128 R09: 0000000000000000 [ 198.829014][ T7859] R10: 000000000003fd00 R11: 0000000000000246 R12: 0000000000031380 [ 198.829026][ T7859] R13: 00007f2126015fac R14: 00000000000307fa R15: 00007f2126015fa0 [ 198.829048][ T7859] [ 198.829054][ T7859] [ 199.060165][ T7859] Allocated by task 7860: [ 199.064514][ T7859] kasan_save_track+0x3e/0x80 [ 199.069214][ T7859] __kasan_kmalloc+0x93/0xb0 [ 199.073830][ T7859] __kmalloc_cache_noprof+0x31c/0x660 [ 199.079227][ T7859] __drm_gem_shmem_create+0xc4/0x2e0 [ 199.084561][ T7859] drm_gem_shmem_dumb_create+0x72/0x120 [ 199.090188][ T7859] drm_mode_create_dumb_ioctl+0x2bd/0x340 [ 199.095922][ T7859] drm_ioctl_kernel+0x2df/0x3b0 [ 199.100802][ T7859] drm_ioctl+0x6ba/0xb80 [ 199.105074][ T7859] __se_sys_ioctl+0xfc/0x170 [ 199.109686][ T7859] do_syscall_64+0x15f/0xf80 [ 199.114313][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.120219][ T7859] [ 199.122574][ T7859] Freed by task 7861: [ 199.126569][ T7859] kasan_save_track+0x3e/0x80 [ 199.131268][ T7859] kasan_save_free_info+0x46/0x50 [ 199.136303][ T7859] __kasan_slab_free+0x5c/0x80 [ 199.141092][ T7859] kfree+0x1c5/0x640 [ 199.145036][ T7859] drm_gem_object_release_handle+0xc2/0x1e0 [ 199.150960][ T7859] drm_gem_handle_delete+0x7b/0xb0 [ 199.156087][ T7859] drm_ioctl_kernel+0x2df/0x3b0 [ 199.160955][ T7859] drm_ioctl+0x6ba/0xb80 [ 199.165216][ T7859] __se_sys_ioctl+0xfc/0x170 [ 199.169833][ T7859] do_syscall_64+0x15f/0xf80 [ 199.174442][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.180371][ T7859] [ 199.182711][ T7859] The buggy address belongs to the object at ffff888030efa000 [ 199.182711][ T7859] which belongs to the cache kmalloc-1k of size 1024 [ 199.196792][ T7859] The buggy address is located 632 bytes inside of [ 199.196792][ T7859] freed 1024-byte region [ffff888030efa000, ffff888030efa400) [ 199.210698][ T7859] [ 199.213046][ T7859] The buggy address belongs to the physical page: [ 199.219491][ T7859] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030eff000 pfn:0x30ef8 [ 199.229566][ T7859] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 199.238090][ T7859] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 199.246657][ T7859] page_type: f5(slab) [ 199.250672][ T7859] raw: 00fff00000000240 ffff88813fe2edc0 ffffea0000aaa010 ffffea0001dd6010 [ 199.259279][ T7859] raw: ffff888030eff000 000000080010000e 00000000f5000000 0000000000000000 [ 199.267990][ T7859] head: 00fff00000000240 ffff88813fe2edc0 ffffea0000aaa010 ffffea0001dd6010 [ 199.276784][ T7859] head: ffff888030eff000 000000080010000e 00000000f5000000 0000000000000000 [ 199.285487][ T7859] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 199.294181][ T7859] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 199.302860][ T7859] page dumped because: kasan: bad access detected [ 199.309308][ T7859] page_owner tracks the page as allocated [ 199.315033][ T7859] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 83968795263, free_ts 83966290366 [ 199.335447][ T7859] post_alloc_hook+0x231/0x280 [ 199.340238][ T7859] get_page_from_freelist+0x24ba/0x2540 [ 199.345805][ T7859] __alloc_frozen_pages_noprof+0x18d/0x380 [ 199.351630][ T7859] allocate_slab+0x77/0x660 [ 199.356161][ T7859] refill_objects+0x339/0x3d0 [ 199.360967][ T7859] __pcs_replace_empty_main+0x321/0x720 [ 199.366543][ T7859] __kmalloc_noprof+0x474/0x760 [ 199.371412][ T7859] ___neigh_create+0x6d5/0x2250 [ 199.376296][ T7859] ip6_finish_output2+0x729/0x13e0 [ 199.381452][ T7859] ip6_output+0x340/0x550 [ 199.385810][ T7859] ndisc_send_skb+0xd0b/0x1670 [ 199.390602][ T7859] addrconf_dad_completed+0x909/0xe60 [ 199.395995][ T7859] addrconf_dad_work+0xc5e/0x14c0 [ 199.401051][ T7859] process_scheduled_works+0xb5d/0x1860 [ 199.406656][ T7859] worker_thread+0xa53/0xfc0 [ 199.411294][ T7859] kthread+0x388/0x470 [ 199.415389][ T7859] page last free pid 5904 tgid 5904 stack trace: [ 199.421747][ T7859] __free_frozen_pages+0xbc7/0xd30 [ 199.426883][ T7859] __slab_free+0x274/0x2c0 [ 199.431327][ T7859] qlist_free_all+0x99/0x100 [ 199.435945][ T7859] kasan_quarantine_reduce+0x148/0x160 [ 199.441434][ T7859] __kasan_slab_alloc+0x22/0x80 [ 199.446405][ T7859] kmem_cache_alloc_node_noprof+0x384/0x690 [ 199.452332][ T7859] __alloc_skb+0x1d0/0x7d0 [ 199.456789][ T7859] mld_newpack+0x14c/0xc90 [ 199.461239][ T7859] add_grhead+0x5a/0x2a0 [ 199.465503][ T7859] add_grec+0x1452/0x1740 [ 199.469866][ T7859] mld_send_initial_cr+0x288/0x550 [ 199.475000][ T7859] mld_dad_work+0x45/0x5b0 [ 199.479434][ T7859] process_scheduled_works+0xb5d/0x1860 [ 199.485026][ T7859] worker_thread+0xa53/0xfc0 [ 199.489643][ T7859] kthread+0x388/0x470 [ 199.493732][ T7859] ret_from_fork+0x514/0xb70 [ 199.498355][ T7859] [ 199.500690][ T7859] Memory state around the buggy address: [ 199.506339][ T7859] ffff888030efa100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.514430][ T7859] ffff888030efa180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.522518][ T7859] >ffff888030efa200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.530596][ T7859] ^ [ 199.538587][ T7859] ffff888030efa280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.546738][ T7859] ffff888030efa300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.554811][ T7859] ================================================================== [ 199.593695][ T7859] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 199.600939][ T7859] CPU: 0 UID: 0 PID: 7859 Comm: syz.1.570 Not tainted syzkaller #0 PREEMPT(full) [ 199.610155][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.620222][ T7859] Call Trace: [ 199.623520][ T7859] [ 199.626464][ T7859] vpanic+0x56c/0xa60 [ 199.630498][ T7859] ? __pfx_vpanic+0x10/0x10 [ 199.635019][ T7859] ? __pfx___schedule+0x10/0x10 [ 199.639885][ T7859] panic+0xc5/0xd0 [ 199.643615][ T7859] ? __pfx_panic+0x10/0x10 [ 199.648150][ T7859] ? preempt_schedule_common+0x82/0xd0 [ 199.653631][ T7859] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 199.659715][ T7859] check_panic_on_warn+0x89/0xb0 [ 199.664662][ T7859] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 199.670733][ T7859] end_report+0x73/0x170 [ 199.674995][ T7859] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 199.681080][ T7859] kasan_report+0x128/0x150 [ 199.685598][ T7859] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 199.691680][ T7859] drm_gem_object_release_handle+0x4b/0x1e0 [ 199.697594][ T7859] idr_for_each+0x1c6/0x2a0 [ 199.702127][ T7859] ? __pfx_drm_fb_release+0x10/0x10 [ 199.707353][ T7859] ? __pfx_drm_gem_object_release_handle+0x10/0x10 [ 199.713872][ T7859] ? __pfx_idr_for_each+0x10/0x10 [ 199.719018][ T7859] drm_gem_release+0x28/0x40 [ 199.723654][ T7859] drm_file_free+0x729/0xa00 [ 199.728276][ T7859] drm_release+0x2de/0x3f0 [ 199.732714][ T7859] ? __pfx_drm_release+0x10/0x10 [ 199.737676][ T7859] __fput+0x44f/0xa60 [ 199.741679][ T7859] task_work_run+0x1d9/0x270 [ 199.746295][ T7859] ? __pfx_task_work_run+0x10/0x10 [ 199.751425][ T7859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.757521][ T7859] exit_to_user_mode_loop+0xed/0x480 [ 199.762854][ T7859] ? rcu_is_watching+0x15/0xb0 [ 199.767736][ T7859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.773859][ T7859] do_syscall_64+0x33e/0xf80 [ 199.778466][ T7859] ? clear_bhb_loop+0x40/0x90 [ 199.783170][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.789080][ T7859] RIP: 0033:0x7f2125d9c819 [ 199.793511][ T7859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.813217][ T7859] RSP: 002b:00007f212613fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 199.821636][ T7859] RAX: 0000000000000000 RBX: 00007f2126017da0 RCX: 00007f2125d9c819 [ 199.829620][ T7859] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 199.837689][ T7859] RBP: 00007f2126017da0 R08: 00007f2126016128 R09: 0000000000000000 [ 199.845678][ T7859] R10: 000000000003fd00 R11: 0000000000000246 R12: 0000000000031380 [ 199.853663][ T7859] R13: 00007f2126015fac R14: 00000000000307fa R15: 00007f2126015fa0 [ 199.861655][ T7859] [ 199.865515][ T7859] Kernel Offset: disabled [ 199.869847][ T7859] Rebooting in 86400 seconds..