last executing test programs: 7m47.329083569s ago: executing program 32 (id=133): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) statx(r0, 0x0, 0x1000, 0x10, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000240)=0x8) read$dsp(r1, &(0x7f0000000300)=""/136, 0x88) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000010c0), 0x10) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40000) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0x4, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10a0, &(0x7f0000000040)=ANY=[]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (async) exit(0x7) (async) statx(r0, 0x0, 0x1000, 0x10, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) (async) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) (async) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000240)=0x8) (async) read$dsp(r1, &(0x7f0000000300)=""/136, 0x88) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000010c0), 0x10) (async) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40000) (async) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0x4, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0}) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10a0, &(0x7f0000000040)=ANY=[]) (async) 5m32.239152396s ago: executing program 33 (id=872): socket$tipc(0x1e, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xa, 0x0, 0x6, {0x8003, 0x1002, 0x4, 0x2}}) (async) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xa, 0x0, 0x6, {0x8003, 0x1002, 0x4, 0x2}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)={0x18, 0x20, 0x1, 0x70bd23, 0x0, "", [@typed={0x8, 0x62, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) syz_usb_connect$uac3(0x2, 0x93, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x930b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x8, 0x10, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x25}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1d, 0x5}, [@output_terminal={0x13, 0x24, 0x3, 0x4, 0x304, 0x4, 0x4, 0x4, 0xd, 0x6, 0x7fff, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x6, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xc, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0x0, 0x9}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac3(0x2, 0x93, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x930b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x8, 0x10, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x25}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1d, 0x5}, [@output_terminal={0x13, 0x24, 0x3, 0x4, 0x304, 0x4, 0x4, 0x4, 0xd, 0x6, 0x7fff, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x6, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xc, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0x0, 0x9}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 3m56.63434733s ago: executing program 5 (id=1335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4004) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xf0, 0x2, "", [{{0x9, 0x4, 0x0, 0x75, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x26e0, 0x58, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x7}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x0, 0x5, 0x6, 0x20, 0xff}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x5, [{0x4d, &(0x7f00000000c0)=@string={0x4d, 0x3, "14ec4fabfe7b30233e554db18996fd02f0addcb8d6cbb2550b39f0eb082058ba55c6b9fea05bbeabf583b1b7426ba5154c3198d8a49462e2e3724fc24c6e0aefad63eac20b9125a4b543b2"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x426}}, {0x65, &(0x7f00000001c0)=@string={0x65, 0x3, "06a765b90125e3e31525bd2553a2bf6fe820ca9bf98ba53051539532c0d9ced31e2b4d8af30530597c11ff76a50c80d913d58e46254ac4892d4372c1cb1bab91f99eb2da290e79d1da54e87f08a13416e263423b49b5bcfa18f19f9f1a7d026831ce8c"}}, {0x2e, &(0x7f0000000240)=@string={0x2e, 0x3, "9d170280d41526c2c0003d8fb1e88d095a870eac94729229e525b87a05d447a87ae14edcdf1143ca4897cb22"}}]}) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) 3m55.382779654s ago: executing program 5 (id=1340): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x110, 0xffffffffffffffff, 0x3eda4000) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'wg0\x00', @ifru_ivalue=0x2}) ioctl$sock_netdev_private(r2, 0x89f2, &(0x7f0000000000)) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x87a100, 0x0) mmap$dsp(&(0x7f0000091000/0x3000)=nil, 0x3000, 0x0, 0x51, r4, 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000618000/0x3000)=nil, 0x3000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060669540000000000000000070000d0"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24000000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000180)=""/74, 0x228000}, 0xfffffffffffffdfa) 3m54.32771284s ago: executing program 5 (id=1344): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c74424000b000000c7442402fc7f0000c7442406000000000f011424440f3548b800000000000000000f23d80f21f835c00000d00f23f8c442bd3a9701b40000660f3881beaa00000066ba2000ec660fc73344dbc1b9800000c00f3235002000000f30c8000062", 0x67}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000140)={0xe000, 0x192000}) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x88, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000480), 0xb7) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (async, rerun: 64) r10 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) listen(r10, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaad15, 0x18, 0x0, 0x0) (async) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r8, 0x4068aea3, &(0x7f00000001c0)={0xed, 0x0, 0x7f}) ioctl$KVM_SET_DEBUGREGS(r9, 0x4080aea2, &(0x7f00000002c0)={[0x1, 0xeeee8000, 0xa000, 0x10000], 0x1000, 0x8d, 0xa202}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}}, 0x90) 3m54.144488863s ago: executing program 5 (id=1346): mount$fuse(0x0, 0x0, 0x0, 0x281063, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x8d, 0x8}, 0x4040800) 3m54.052061316s ago: executing program 5 (id=1347): ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0xa, 0x80000, 0xffffffffffffffff}) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000406, &(0x7f00000001c0)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 3m54.042937659s ago: executing program 5 (id=1348): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) syz_open_dev$dri(0x0, 0x0, 0x8000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000000c0)={0x3, "a8df7802c53b418126a7aed1c00000000000e7ffffffffdeffff0000df00", 0x2, 0x7, 0x1, 0x200000, 0x4000000, 0x2}) write$nci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d00050000", 0x28}], 0x1) write$nci(0xffffffffffffffff, &(0x7f00000001c0)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x69, {0x1, [{0x4, 0x7}]}}, 0x6) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, 0x0, 0x4000) ptrace(0x10, r5) ptrace$setregs(0xf, r5, 0x6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3m38.989006927s ago: executing program 34 (id=1348): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) syz_open_dev$dri(0x0, 0x0, 0x8000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000000c0)={0x3, "a8df7802c53b418126a7aed1c00000000000e7ffffffffdeffff0000df00", 0x2, 0x7, 0x1, 0x200000, 0x4000000, 0x2}) write$nci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d00050000", 0x28}], 0x1) write$nci(0xffffffffffffffff, &(0x7f00000001c0)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x69, {0x1, [{0x4, 0x7}]}}, 0x6) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, 0x0, 0x4000) ptrace(0x10, r5) ptrace$setregs(0xf, r5, 0x6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3m29.432737649s ago: executing program 4 (id=1451): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x3, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181042, 0x148) r2 = socket$kcm(0x21, 0x2, 0xa) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103", @ANYRESDEC=r2], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) recvfrom$inet(r3, &(0x7f0000000180)=""/130, 0x82, 0x100, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x9, 0x1, '\x00'}, {0x10, 0x10c, 0xb}], 0x28}, 0xfc40) syz_usb_connect$uac2(0x3, 0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000200c201810400001020301090288000301018008080b0001010c200609040000000101200009240103000428000408240a05004000020c24030207030503050303000b240603056c61519c24b96ed33f0608112877d35dfb183c81c1b81869c120570253a6dd33488a5870c6c487adcfe80d727fd8b4da4a84757bd77ad1449b51eed0f1977c3c746ad13c8153", @ANYRESHEX=r2], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 3m28.834640457s ago: executing program 4 (id=1454): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000002280)='&*w\x00\xa1;\xb7\xfa\xb3\x91\xab&\xe1\x8e\xf2\xf0z\xbf\xfdT\x93x\xd4\xbcR\r-\xf4\xfc\x88\x83\x8fTD\xc1\xc2@\xda\xb6c\xab\xf95\xbb\xdc\xb6\x8f\x80K\x1e-\xb4#\xdd\xdc\bM:\xab9\x8d\v\xbb\xde }\xf6\xfb\x80\x13x\x06\x88\x01\xa6|Xo?\xe1CO\aD,:\x98\xaf\xf7\xdbxH\x9cQ\xb5\x12\t\x14\x80\xe1\x010\x8b\xcbfA\xc2\x12\xf9\xeb\xf8@\xd4\x1d;\x9d\'\x1c\xad{\xa5\x7f,\'\xfd>\xa1\xbf|\xf4@\x1c.\xeda\xf2\xf8\xb2T/\xfd1\xe8\xd7\xe7A\xbfG\xc2)\xfaj\x9a\x93\xe5\xf8\xb0\x96`uL\xbeq0\x84+\xd1\xda}\x04\xc5\x04n`Qh\xd0\xa3\xc4\xe4HS\xb3\x06\"\x80\xcf\xa11Aum;\xb0\x84\x02B\xffEs\x012\xecN\t-\xf7\xcf{\xeaD\'\n\xe10\xe3\x9f\xcfS\x0fJ+>\xc1\x93\xdfuN\xa5\x8a\x89\xc6O\xa9\xf2\xdc\x96\x9b\xc5\xc9\n\a\xf2\x15\x04\xf7bs\x1d\x19q\x93\xb1\xb5\"\\c\xdd(N\xfb\xfe\xb7t\xfd\xfe8pM)D\x1b\xe0~ \x83`D\xd8n\x89\xbdh\xbd\x03\xf1`\xb6;\x1egY\x1d\xf5\x10\xf4i\x8ax\x8f\x9b]\x8dw.\x86\x06\xf2\x18Lr\xc9\xe5\t\x82\x97X\v\xc62\'\x9dvS\xea^;\xf3\xb5\x82l\xa8\xd6\x94\xb6\xd8\xf2E\xad\xff\x7f\xaa\xf7\xe0\xce_\xc9A\xb5\xf6\raF1\xfe\xaa\xfcq\'\xa5\x04\x8f\x1a8\xe3q\xd1X\xa06[\xb1\xa3\xbc\xa0\x8b\xc4p~q\xde\r)e\x7f\xea\x04\xb7\xcco\x03\x9d\x9d\xf3-K\xd6\xd0\xd3$\x8f\x8e\x8e\xe1\xa0%~\xad\x80\xbc60x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000010300)={r5, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f00000103c0)=0x84) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x9) r9 = epoll_create1(0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$FS_IOC_SETFLAGS(r9, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000340)={0x20000001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f80)=ANY=[@ANYBLOB="140000005200010000000000000001001c00000052e29cfa6c6e2f61f68970d94e18c94462f71709e91c885d7b9a640e59740cfdc01e1458c82e85070d7cd6e7a8e68575fb8d4c26dfb5f5be2c02bc9d602d60d0d22e9933b0a34f7c610461152e22d93a036e55d0bec705d994fcb22a92cf2a2afe991745b9e889ac9981a103d199d212f52270d85f16178973d560e3b5d0dfbb76b979efa10f6e9fc2b0badd23b7d4b1bfb02ac975c2e8be4849c2e0812aceaaebfdaf5e5e39b670dcf13fb45553ee2b85b66970a55ecc0aad63ad9ad92a75eb219f8948b1ffde39c761a5d97e05cfcb8f69dcb1ef4d33883734d08ac00884b131"], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 3m28.747379761s ago: executing program 4 (id=1455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_disconnect(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\a\x00\x00\x00\xb6\x9b\xdb\xdc\xf3\xb9\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendto$packet(r0, &(0x7f00000001c0)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195ee422ad12d4e26125c421dce5ab4acaf20deada90aea3c478b88ee7e1dc42289084bbc1521bf1122ba5120336313a70cf9bf36ee97e79bf4c9bbb9dc20dd8e9266f920e9b000000", 0x71, 0x40008c1, &(0x7f0000000000)={0x11, 0x1a, r2, 0x1, 0x62, 0x6, @broadcast}, 0x14) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/139, 0x8b) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$NILFS_IOCTL_SYNC(r3, 0x80086e8a, &(0x7f0000000100)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) r5 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x28, 0x5}, 0x8) 3m27.739002713s ago: executing program 4 (id=1460): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffd}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) 3m27.686776608s ago: executing program 4 (id=1461): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501001, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0", 0x25}, {&(0x7f0000000ac0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4da6945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da2e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xbb}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/66, 0x42}], 0x1}, 0x10041) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4c004}], 0x1, 0x8010) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r7 = syz_open_pts(r5, 0x900) r8 = dup3(r7, r5, 0x80000) read(r8, &(0x7f00000000c0)=""/226, 0xe2) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) map_shadow_stack(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) 3m12.525607506s ago: executing program 35 (id=1461): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501001, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0", 0x25}, {&(0x7f0000000ac0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4da6945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da2e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xbb}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/66, 0x42}], 0x1}, 0x10041) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4c004}], 0x1, 0x8010) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r7 = syz_open_pts(r5, 0x900) r8 = dup3(r7, r5, 0x80000) read(r8, &(0x7f00000000c0)=""/226, 0xe2) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) map_shadow_stack(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) 1m46.974482856s ago: executing program 6 (id=1887): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000021c0)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f36006e090890e0878f0e1ac6e7049b3341959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07480936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb7ec308320215afcdf190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c8e68ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1e5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d44300000000db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5e10e0513005000000000000003911fab964c2aabb85fd697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x576) write$binfmt_register(r2, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'fdinfo/3\x00', 0x3a, 'fdinfo/3\x00', 0x3a, './file0', 0x3a, [0x46, 0x46, 0x43]}, 0x3c) r3 = accept$alg(r0, 0x0, 0x0) userfaultfd(0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r4, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x80, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r3, &(0x7f000001ea00)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)="5985d20392a438a118753a61ccd1d0e8", 0x10}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408c0}], 0x1, 0x804) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002c00)=""/4088, 0xff8}], 0x1}, 0x20002140) 1m46.888752251s ago: executing program 6 (id=1888): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) close(r0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x6c, 0xe0, 0x5e, 0x40, 0x2040, 0x7500, 0xe735, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x2, 0x5, 0xb0, 0x4, "", [{{0x9, 0x4, 0xab, 0x0, 0x0, 0x58, 0x38, 0xc, 0x9d}}, {{0x9, 0x4, 0x95, 0x6, 0x0, 0x81, 0x7f, 0xfa, 0x5}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xe0, &(0x7f0000000480)=@string={0xe0, 0x3, "e902a32bbdfe233999c96474de03001c69d619de035c0baae7445cd8d06896158ecb4839d80dbc7af117b8535789bc20edcf28b8ae0fdb9fe00cccbe78ee9861533013e27c9fb890640e421590dad6abbc45555a39d5e0f145604610de30cc4264bc93e0c5d32a981475dea8afe9b94b91bea105e25fbbe8a4e22686119c32324acfccc1b38e04e12fee36733691a3ad81063f5107e8cd9b224ffd34624af6c938357a0d5aca13d466457b1e26e1c79f4c09267ed4055fb554246c15dea751823b89dfc5a921e8eb812ef159da6258fae086368c487adff8af16762e136c"}}, {0x82, &(0x7f0000000140)=@string={0x82, 0x3, "4f9b1cb6f0f734d47450887bcab80260a3cb79ad72ea80e434e0b52c1890651b3b1ff3e434bb8087a72f1ff51c53897c9644c8fde2c39c966e61c46c590490de68f0e89e45b6555fd3ee0422c32ec12b5e8584d3fb2c4507696a5b79ae6bbe207978cb0d8d3141ed54d332bbf7ff9e7374709d3cb7a14dcc65646a1fa4a1f9ab"}}, {0x102, &(0x7f0000000340)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc1a}}]}) 1m45.598279717s ago: executing program 6 (id=1891): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f29668405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) syz_usb_disconnect(r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000002480)={0x10, 0x30, 0x812, 0x70bd2a, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000004200)=[@rights={{0x10}}], 0x10, 0x40}, 0x4) (async) sendmsg$netlink(r4, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000002480)={0x10, 0x30, 0x812, 0x70bd2a, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000004200)=[@rights={{0x10}}], 0x10, 0x40}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40440f1}, 0x80) write(r1, &(0x7f0000000340)="18000000010005", 0x7) 1m42.427084342s ago: executing program 6 (id=1906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25010000007c000380140002006970766c616e31000000000000000000140002006e696376663000000000000000000000060004000200000006000400c1000000080003000200000014000600fe88000000000000000000000000000114000600000000000000000000000000000000010800010000000000080023000300000008000400000000004000018008000b007369700008000b007369700007000600727200000c0007003200000003000000060005"], 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c3042, 0x57) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1m42.393873704s ago: executing program 6 (id=1907): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xa, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x8, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x3, 0x1, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x0, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0xf9, 0x3, 0x8, 0x4, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x48, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1ff, 0x2a0, 0x405, 0x6, 0x8, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0xa, 0x2, 0x0, 0x2, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xf83f, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r1 = open(&(0x7f0000000040)='./file0\x00', 0x290002, 0x101) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f0000000000)='./bus\x00') chmod(&(0x7f0000000100)='./file1\x00', 0x128) open$dir(&(0x7f0000000140)='./file1\x00', 0x600, 0x82) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x20000804) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r4 = open(&(0x7f0000000480)='./bus\x00', 0x10080, 0x718bb647156ec3b7) linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000180)='./file0\x00', 0x1000) getdents64(r1, &(0x7f0000000340)=""/167, 0xa7) 1m42.336930836s ago: executing program 6 (id=1908): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010078000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030023030005490c240206"], 0x0) (async) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8008550e, &(0x7f0000000040)) 1m9.939731449s ago: executing program 36 (id=1908): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010078000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030023030005490c240206"], 0x0) (async) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8008550e, &(0x7f0000000040)) 59.033223272s ago: executing program 0 (id=1996): syz_clone3(&(0x7f0000000240)={0x10000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x15}, &(0x7f00000000c0)=""/89, 0x59, &(0x7f0000000140)=""/143, &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) pread64(r0, &(0x7f00000002c0)=""/4096, 0x1000, 0x4) close(r0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) preadv2(r1, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/111, 0x6f}], 0x1, 0x8, 0x0, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x8000, 0x0) read$FUSE(r2, &(0x7f00000013c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000003400)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x2eb, &(0x7f0000005440)={{0x12, 0x1, 0x201, 0x72, 0x35, 0x82, 0x10, 0x8ca, 0x103, 0x293f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d9, 0x2, 0x5, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0xf0, 0x1, 0x3, 0xc5, 0x12, 0xbc, 0x1, [], [{{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x16, 0xff, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x3946}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0xff, 0xa, 0x9}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x3, 0x6, 0x4}}]}}, {{0x9, 0x4, 0xa4, 0x19, 0x5, 0x2d, 0xf4, 0xcd, 0xf7, [@generic={0x40, 0x1, "d1a9fe77f950e756eb30966196997ba9e007cb8b18b15b5ca22f67361b2eef26332ef43ac23ae7630668a6feb51320e304914089529bc0bf84dc10eae284"}], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x9, 0x2, 0x40}}, {{0x9, 0x5, 0x5db172f2a50d7f69, 0x2, 0x40, 0x0, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x7}, @generic={0xf3, 0xb, "1be3f25e91e623fd3d84360e50cfb1bccec2f6423731d7716007a8de13e9e55baba24894381446fdb66e669b4f3a2a7a580eca19f2eb7ebf8c25f061871d97d7a73f16a42a904c65e7b103664595db6cfaa3a864cd15e285d658674639d6cf32aa08247fc6022ec296cb609882f2eff9f2039fa72ae379c4bcef8ee46979f7200d2cc531cda87b6890e8c8e92be133b6df3ee5c5980261f09ba18fdb9f90e1d9f577913c3f902ebe0cbef84fbca1c6c3fac09220a0be9107445d9c55d6385ae61d8254b32cefbb2c1f02187be24f790f957b056f37ce21ed83790bc9fb07561f38a9657c8c66570bee12bba3e90ae32d70"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x2, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x40}, @generic={0x46, 0x23, "d6b56a5b3d010126e499460a4c7231fde3dc9f5cddf011c77a8695b20b27c7af11c48725c428ec6a44d15d31e79c6c2ca6a785ec9edd0c3155c6229d6a0e7389b6c931e7"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x9, 0x7, 0x10}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0xc0, 0x86, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xffff}, @generic={0xe1, 0x3, "3cbbc9e1d400eebb410aabe77830bf08fa6a32659bd75bb6bb2362e3d427c92e6f1cfec90190753236cffac6126606d049cbcd8b4597e2ad62b3c167119b98bb567e3f1d06f56623f14633d9937d1a94a47f3e6af6c99ed85d66b9a5be36686722bb38fe9bdac73785b7105b73e8a4ffed1fd3830a673357135667d39dd05321833374529892cf7194cac0077479f2d8a65cb767847ae7c5fcbc8815feff039f41dc0770e1e2d190ff4dca8fcbbd8ccb832922141a812477df6c2c05b6c0e8a0a347bf578fece1386525ce3b3140f682b5768220527276f7b024be351aa45b"}]}}]}}]}}]}}, &(0x7f0000005a40)={0xa, &(0x7f0000005740)={0xa, 0x6, 0x110, 0x6, 0x8, 0x3, 0x8}, 0x98, &(0x7f0000005780)={0x5, 0xf, 0x98, 0x2, [@generic={0x88, 0x10, 0xa, "b4330d4b8fa21339cdb65ac14a045153d6c84f2815a2cf44960005c6b22d71a9e9160ee08baa6967c1e46c5d66e427c486572b53a4512bc679623d376cc3962ce7eb07c6f9333cac9ce9dcdbbfcd02f9bf7be80d59eb25249442bd517a7e2a40471b3315cbaab7c6ec7099df4c066f8a764b00cc4f2a36ab2c714630f6819cb29e05b73f6c"}, @wireless={0xb, 0x10, 0x1, 0xe, 0x31, 0x9, 0x3, 0x7, 0x4}]}, 0x5, [{0x4, &(0x7f0000005840)=@lang_id={0x4, 0x3, 0x2809}}, {0x4f, &(0x7f0000005880)=@string={0x4f, 0x3, "49e53b2933eb85d756cc1f0ddf525fa6884a9ad9082903d7ec6e46de2c81119a22ec09e31922270edf6fb0d579b94321adfb1df20353d76a859b874bfab563a6cc70eca22224fbbb6d8ec0ebb7"}}, {0x3a, &(0x7f0000005900)=@string={0x3a, 0x3, "66478dbe8e1f34bfbb5c55bc97a1678f94f29e1d57c95219656d80895d5ac5a0e7451c881712330897551daea64eec4c31677b4e42418763"}}, {0x9c, &(0x7f0000005940)=@string={0x9c, 0x3, "424412385b7fd83793d37ff7b93c3617ce4f77b31b83be1c215fbd3422199540920bbee1f0b0601041e1457cd17b0192bafcde762fb4d13e37b31267e8e58d296c8e4d255ca58ef8d2de4abc878aa30c51e909c1529a74f4b36b290a044958924c874b6eb624008e561734b54f96c562d55d108cbc047826857e0bdb2e8cae7753f6e1780a9ac8b646dfcb4511e686af170e0dc4829e05e58ced"}}, {0x4, &(0x7f0000005a00)=@lang_id={0x4, 0x3, 0x81a}}]}) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000005ac0)) fsetxattr(r0, &(0x7f0000005b00)=@known='trusted.syz\x00', &(0x7f0000005b40)='/dev/vcs\x00', 0x9, 0x2) sendto$l2tp6(r2, &(0x7f0000005b80)="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", 0x1000, 0x200040c0, &(0x7f0000006b80)={0xa, 0x0, 0x4, @mcast2, 0x5, 0x3}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006c00), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000007740)={&(0x7f0000006bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007700)={&(0x7f0000006c40)={0xaa8, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5a}}}}, [@NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xff, 0xb35d, 0x5, 0x3, 0x3, 0x7f, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x4, 0xb, 0x12, 0x6c]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x1}, {0x0, 0x6}, {0x1, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x9}, {0x6, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x4, 0x6}, {0x3, 0x6}, {0x5, 0x1}, {0x4, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x1, 0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {}, {0x4, 0x7}, {0x3, 0x8}, {0x0, 0x2}, {0x2, 0x3}, {0x6, 0xa}, {0x1, 0xa}, {0x5, 0x6}, {0x5, 0x8}, {0x2}, {0x7, 0x7}, {0x3, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x0, 0x5}, {0x2}, {0x6, 0x1}, {0x5, 0x9}, {0x4, 0x7}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x5, 0x8}, {0x4, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x3}, {0x7, 0x2}, {}, {0x2, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x4}, {0x0, 0x4}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0x7}, {0x2, 0x3}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x4}, {0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x8}, {0x4}, {0x7, 0x2}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x7}, {0x3, 0x9}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x7}, {0x0, 0x3}, {0x3, 0x3}, {0x7, 0x1}, {0x5, 0xf}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x2}, {0x1, 0x9}, {}, {0x3, 0x3}, {0x6, 0x1}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0xa}, {0x2, 0x4}, {0x1, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x2, 0x3}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x5}, {0x7, 0x9}, {0x2, 0x4}, {0x7, 0x4}, {0x7, 0x1}, {0x4, 0x3}, {0x3, 0x9}, {0x6, 0x5}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x2}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x7}, {0x2, 0x3}, {0x7, 0x3}, {0x6, 0xa}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf92, 0x8f6, 0x6, 0x6, 0x4, 0x1, 0x6, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x18, 0x6c, 0x16, 0x6c, 0xb, 0x0, 0x2, 0xc, 0x1, 0x3, 0x9, 0x9, 0x24, 0x48, 0x3, 0x30, 0x36, 0x4, 0x1, 0x16, 0x36, 0x24, 0xc, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x8, 0x1, 0x867, 0x1ff, 0x100, 0x22]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0xa}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x4, 0x7}]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x48, 0x2, 0x2, 0x16, 0x6c, 0x9, 0x60, 0x16, 0x16, 0xc, 0x14, 0x2a, 0x6c, 0x18, 0x6, 0x1b, 0x16, 0x12, 0x2, 0x3, 0x4, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x538d21113f9e94a3}]}]}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x6, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x3, 0x6}, {0x1, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x4, 0x6, 0x2, 0x46c0, 0x1, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x80, 0x2, 0x4, 0x0, 0xa, 0x9, 0x4]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x5}, {0x0, 0x9}, {0x4, 0x3}, {0x5, 0xa}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x3}, {0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x1}, {0x6, 0x7}, {0x0, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0x3}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0x7}, {0x3, 0x3}, {0x3, 0x9}, {}, {0x2, 0x2}, {0x4, 0x7}, {0x7, 0x9}, {0x1, 0x9}, {0x5, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x6, 0x6}]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x48, 0x16, 0x0, 0x1b, 0x12, 0x12, 0x1b, 0x60, 0x16, 0x1b, 0x3, 0x4, 0x18, 0x36, 0xb, 0x18, 0x6, 0x18, 0x5, 0x1b, 0x6, 0x12, 0x5, 0x24, 0x60, 0x5, 0x24, 0x5]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xfcbf, 0xf3, 0x0, 0x400, 0x4, 0x4, 0x5]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x6, 0x3, 0x9, 0x6, 0x24, 0x12, 0x9, 0x1, 0xb, 0x6, 0x24, 0x9, 0x2]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfff7, 0xd, 0xfffd, 0x0, 0xff0c, 0x2d, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x1fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9a, 0xa1, 0x6, 0x6182, 0x101, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7a, 0x6, 0x79, 0xff, 0x1, 0x6, 0x1]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x4, 0x3, 0x3, 0xb7, 0x8, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0xefd, 0x7ff, 0x0, 0x4, 0x0, 0x585]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2}, {0x0, 0x1}, {0x1, 0x4}, {0x2}, {0x0, 0x2}, {0x2}, {0x2, 0x1}, {0x4}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0xa}, {0x6, 0x1}, {0x7}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xeea5, 0x8ea, 0x7f, 0x4, 0x400, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x8, 0x7, 0x101, 0x6, 0xfffd, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x2, 0x48, 0x24, 0x36, 0x16, 0x16, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x114, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x6, 0xf, 0x0, 0xb0, 0xfd25, 0x400]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x34, 0x16, 0x5, 0x30, 0x16, 0x6, 0x12, 0x60, 0x2]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x5}, {0x6, 0x1}, {0x7, 0x6}, {0x7, 0x7}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x5, 0x4}, {0x3, 0x6}, {0x3, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x2, 0xa}, {0x7, 0x8}, {0x2}, {0x5, 0x8}, {0x5, 0x4}, {0x2, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x9}, {0x1}, {0x0, 0x3}, {0x7}, {0x5, 0x5}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x1}, {0x3, 0x7}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x4}, {0x0, 0x8}, {0x5, 0x2}, {0x7, 0x5}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x2, 0xa}, {0x3, 0x6}, {0x5, 0x8}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0x3}, {0x7, 0x5}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x5, 0x2}, {0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x2}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x7}, {0x7, 0x9}, {0x2, 0x8}, {0x6, 0x3}, {0x1, 0x6}, {0x7, 0x8}, {0x2, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x5, 0x1}, {0x5, 0x3}, {0x6, 0x3}, {0x0, 0x2}, {0x3, 0x3}, {0x5, 0x4}, {0x4, 0x7}, {0x6, 0x9}, {0x5, 0x6}, {0x6, 0x5}, {0x6, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x4}, {0x3, 0x1}, {0x7, 0x6}, {0x4, 0xa}, {0x3, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x9}, {0x4, 0x9}, {0x7, 0x1}, {0x2, 0x8}, {0x6, 0x1}, {0x7, 0xa}, {0x5, 0x7}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x2, 0x2}, {0x6, 0x2}, {0x5, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x3}, {0x4, 0x8}, {0x3, 0x6}, {0x1, 0x1}, {0x1}, {0x0, 0x9}, {0x1, 0x4}, {0x3, 0x4}, {0x0, 0x7}, {0x6}, {0x5, 0x3}, {0x0, 0x6}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0xf6aa, 0x3ff, 0x52d1, 0x9, 0x4, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x80, 0xb, 0x7, 0xa1, 0x6242, 0x8]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x1b, 0xc, 0xb, 0x48, 0x5, 0x6, 0x36, 0xc, 0x60, 0x6c, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xffff, 0x3, 0xff08, 0xfffe, 0x2, 0x7, 0x8]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x7, 0x4}, {0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x7}, {0x5, 0x9}, {0x1, 0x2}, {0x7}, {0x4, 0x5}, {0x6, 0x5}, {0x2}, {0x4, 0x7}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x170, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0xb, 0x3, 0x6c, 0xb, 0x5f, 0x1, 0x16, 0x5, 0xb, 0x60, 0x3, 0xb, 0x12, 0x36, 0x36]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xc0, 0x2, 0x3, 0x5, 0x7000, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x6, 0x4bf5, 0x1ff, 0x7, 0x4, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x208, 0x4, 0x1, 0x1, 0x8, 0x8, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x16, 0x66, 0x5, 0x16, 0x12, 0x9, 0x30, 0x6, 0x30, 0x36, 0x3, 0x7a, 0x12, 0x5, 0x3, 0x16, 0x1b, 0x3f, 0x3, 0x1b, 0x24, 0x12, 0x3, 0x60, 0x93, 0x18, 0x4, 0x30]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xbc31, 0x1, 0x1, 0x7, 0x3ff, 0x1ff, 0x1, 0xf5]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0x8}, {0x2}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x3}, {0x3, 0xa}, {0x4, 0x2}, {0x6, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x4, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x2}, {0x7, 0x8}, {0x0, 0x2}, {0x7, 0x9}, {0x3, 0x7}, {0x2, 0x3}, {0x6, 0x5}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x6}, {0x2, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xf70, 0x4, 0x7fff, 0x8, 0x56, 0x1, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0xd66a, 0x2, 0x6, 0x401, 0x0, 0x1]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x16, 0x24, 0x0, 0x1, 0x6c, 0x60, 0x1, 0xc, 0x6, 0x6c, 0x6, 0x30, 0x5, 0x9, 0xc, 0x0, 0x37, 0xb, 0x5, 0x6c, 0xc, 0xb, 0x16, 0x48]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x12, 0x2, 0x60, 0x30, 0x19, 0x18, 0x24, 0x6, 0xa, 0x3, 0x37, 0x60, 0x3, 0x5, 0x12, 0x24, 0x30, 0x36, 0x2, 0x36, 0x12, 0x9, 0x36, 0x16, 0x0, 0xb, 0x439e72f2fb4dfa84]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x6, 0x36, 0x30, 0x3, 0x30, 0x3, 0x6c, 0x24, 0x16, 0x9, 0x7, 0x18, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0x344, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x4, 0x9, 0x9, 0x6, 0x54d1, 0x3, 0x7f]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0xc, 0x0, 0x14, 0x48, 0x1, 0x2, 0x12, 0x36, 0x12, 0x4, 0x16, 0x30, 0x18, 0x36, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x1}, {0x7, 0xa}, {0x2, 0x9}, {0x5, 0x3}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x9}, {0x5, 0x6}, {0x5, 0x1}, {0x2, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x200, 0x4, 0x7, 0x9, 0x2, 0x9, 0x40]}}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x2, 0x7}, {0x0, 0x3}, {0x3}, {0x2, 0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x7, 0xa}, {0x1, 0x1}, {0x6, 0x7}, {0x7, 0x1}, {0x5, 0xa}, {0x7, 0x9}, {0x6, 0x6}, {0x2, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x16, 0x48, 0x60, 0x1b, 0x5, 0x0, 0x3, 0x1b, 0x1b, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x5, 0x1000, 0x4, 0xf420, 0x4, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x79b683894fb936c8}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x7}, {0x1, 0x2}, {0x2, 0x5}, {0x5, 0x3}, {0x1, 0x4}, {0x6, 0x7}, {0x0, 0x4}, {0x5, 0x7}, {0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x5}, {0x0, 0x9}, {0x4, 0x9}, {0x7, 0x6}, {0x7, 0x8}, {0x1, 0x9}, {0x1}, {0x7, 0x10}, {0x6, 0x3}, {0x2, 0x2}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x2}, {0x1, 0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x3, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x4}, {0x4, 0xa}, {0x3}, {0x1, 0x4}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3a00, 0x3, 0x235, 0x800, 0x8, 0x2, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0xc, 0x9, 0x6, 0xc, 0xfff9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x6, 0x8}, {0x7, 0x9}, {0x3}, {0x4, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0x3}, {0x5, 0x5}, {0x6, 0x4}, {0x0, 0x8}, {0x5}, {0x0, 0x6}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x4}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x6}, {0x1, 0x4}, {0x3, 0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x5, 0x5}, {0x5, 0x9}, {0x3, 0xa}, {}, {0x5, 0x8}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x8}, {0x5, 0x5}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x4, 0x100, 0x3ff, 0x9, 0x4, 0x6, 0x4]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x24, 0x16, 0x5, 0x9, 0x4, 0x36, 0x6, 0x60, 0x12, 0x18, 0x1b, 0x1, 0x12, 0x30, 0x0, 0x3, 0x1b, 0x1b, 0x4, 0x2, 0x16, 0x9, 0x2, 0xb, 0x0, 0x9]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0x9, 0x886, 0x1, 0xfffd, 0x3, 0x6e2]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x1, 0x60, 0x2, 0x4, 0xff1dd3608f9bbf17, 0x24, 0xb, 0x4, 0x12, 0xe, 0x24, 0xc, 0x6c, 0x0, 0x30, 0x36, 0xc, 0xc8, 0x6, 0x9, 0x16, 0x24, 0x53, 0x6, 0xc, 0x60, 0x4, 0x60, 0xc, 0x2, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfa9f, 0xf, 0x0, 0x40, 0x3, 0x400, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xec, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x6}, {0x0, 0x6}, {0x4, 0x7}, {0x6, 0x1}, {0x4, 0x3}, {0x7, 0xa}, {0x1, 0x5}, {0x3, 0x5}, {0x7, 0x5}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {}, {0x6, 0x5}, {0x2, 0x1}, {0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x6, 0x8}, {0x1, 0x9}, {0x5, 0x6}, {0x3, 0x5}, {0x7, 0x1}, {}, {0x6, 0x5}, {0x1, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x60, 0x16, 0x1b, 0xc, 0x6c, 0x4, 0xc]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x8}, {0x7, 0x7}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x5}, {0x7, 0x3}, {0x6, 0x4}, {0x4, 0x5}, {0x6, 0x4}, {0x2, 0x1}, {0x1}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0x2}, {0x2, 0x8}, {0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x7}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0x4}, {0x5, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x6}, {0x2, 0x9}, {0x6, 0x8}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x6}, {0x7, 0x3}, {0x2, 0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x6, 0x5}, {0x0, 0xa}, {}, {0x4, 0xa}, {0x5}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x8}, {0x3}, {0x5, 0x4}, {0x1, 0x1}, {0x4, 0x9}, {0x1, 0x8}, {0x3, 0x5}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x4, 0x8}, {0x2, 0xa}, {0x3, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x2, 0x9}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0x6}, {0x7, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x7, 0x5}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0xa}, {0x7, 0x6}, {0x7, 0x8}, {0x0, 0x6}, {0x7, 0x9}, {0x6, 0x8}, {0x7}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x6}, {0x3, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0x6c, 0x12, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x7, 0x0, 0x0, 0x7, 0xe, 0xfff8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1000, 0x1, 0x8001, 0xc, 0xfff8, 0x3, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x400, 0x6, 0x7, 0x4, 0x19, 0x3, 0x80]}}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x24, 0x3, 0x5, 0x24, 0x3, 0x3, 0x46, 0x5, 0x36, 0x16, 0xc, 0x4, 0x6, 0x6c, 0x6d, 0x0, 0xb, 0x24, 0x48, 0x16, 0x36, 0x3, 0x3, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0xb, 0x4, 0x4f, 0x36, 0x60, 0x1b, 0x36, 0x4, 0x4, 0x16, 0x55, 0x4, 0x5, 0x0, 0x2, 0x0, 0x4, 0x9, 0x1b, 0x60, 0x48, 0x12, 0x60, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x4, 0x8, 0x40, 0x3, 0x81, 0xe82, 0xfffe]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x4}, {0x3, 0x9}, {0x5}, {0x1, 0x9}, {0x6, 0x1}, {0x7, 0x3}, {0x0, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x2}, {0x2, 0x5}, {0x6, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x3, 0x3}, {0x3, 0x1}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x100, 0xb3, 0x0, 0xd867, 0xe, 0x1, 0x3b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x5, 0x4, 0x6, 0x8, 0x8001, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9a4, 0x0, 0x6, 0xb, 0x1, 0xfff, 0x8, 0x4]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3276, 0x40, 0x4, 0x0, 0x431, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x12, 0x36]}]}]}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x24048004}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000077c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000007880)={&(0x7f0000007780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007840)={&(0x7f0000007800)={0x1c, r3, 0x70c, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x24011) syz_open_dev$sndmidi(&(0x7f00000078c0), 0x7, 0x486002) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000007900)=0xfff) r6 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000007940)={0x3, 0xfff, 0x1, 'queue0\x00', 0x4}) close(r4) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000007a00), 0x101002, 0x0) getsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000007a40), &(0x7f0000007a80)=0x4) ioctl$XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f0000007ac0)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007b40), r7) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000007c00)={&(0x7f0000007b00), 0xc, &(0x7f0000007bc0)={&(0x7f0000007b80)={0x14, r8, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c815}, 0x20000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000007d40)={&(0x7f0000007c40)=[0x0, 0x0], &(0x7f0000007c80)=[0x0, 0x0, 0x0], &(0x7f0000007cc0)=[0x0, 0x0], &(0x7f0000007d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000007d80)={r9, 0xfffffff9, 0x0, 0xfffffffe, 0x0, [], [0x80000001, 0x10001, 0x9, 0x8], [0x59f, 0x1ff, 0xd, 0x7ff], [0x9, 0x3, 0x1, 0x42b]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000007e40)={0x4, &(0x7f0000007e00)=[{0x4, 0x2, 0x3, 0x5}, {0x3, 0x6, 0xbe, 0x52a}, {0x8000, 0x81, 0x4, 0xcf2}, {0x100, 0x9, 0x9, 0x8}]}) 55.935035087s ago: executing program 0 (id=2009): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x5c22, 0x5, 0x5, 0x0, 0xa, 0x3, 0xc, 0x7, 0x5, 0x1ff, 0x695b, 0x2, 0x41, 0x403, 0x6, 0x3, 0x1000001, 0x0, 0x3, 0xffffff01, 0x90, 0x1007fff, 0x200006, 0x5, 0x8004, 0x8, 0x2, 0x8, 0x5, 0x41, 0xfffffffd]}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000080201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000000c0)) pread64(r1, 0x0, 0x0, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001840)=""/187, 0xbb}, {&(0x7f00000002c0)=""/239, 0xef}, {&(0x7f00000038c0)=""/4041, 0xfc9}, {&(0x7f00000048c0)=""/4125, 0x101d}, {&(0x7f0000000200)=""/166, 0xa6}], 0x5}, 0x10000) 55.34001416s ago: executing program 0 (id=2011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r1, &(0x7f0000003500)=[{&(0x7f0000000580)=""/72, 0x48}], 0x9, 0xfffffffe, 0x80, 0x16) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r3, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@void, @val={0x0, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x57}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) 55.306971769s ago: executing program 0 (id=2012): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="0f01f5f00fbab9070000000867d16912660fc7b504000000660f631cf8832478210f01c2f638260fc72cbc660f383b6900", 0x31}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req={0xa5ae, 0xa, 0x70000000, 0x206}, 0x10) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) clock_gettime(0xfffffffffffffff1, &(0x7f0000000040)) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="020114008cdc18000e14e0000003808a8972bd0b72e4a13b697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46674a62d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd08660f44519a70b277a97e9d4be5ffca88faca"], 0xdd12}, {&(0x7f0000000280)=ANY=[], 0x10}], 0x2}, 0x0) lseek(r0, 0x1, 0x1) r9 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_settime(0xfffffffb, &(0x7f0000000140)) syz_usb_control_io(r9, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000600)={0x0, 0x11, 0x3, "32c355"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r9, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="2009af000000a8091fde94442a09"], 0x0, 0x0, 0x0, 0x0}) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) 52.145829401s ago: executing program 0 (id=2023): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000800)={0x39, &(0x7f0000000780)=[{0x34, '\x00', @buffer={"d5bc6c73b4141570dc2e72cf9c0b98061d6b1ecf19ec5373c822ee8168a986fd", 0x20}, 0xb6c}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x43) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0xe) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000008c0)={0x122, 0xffffffffffffffff, 0x2}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x98, 0x0, 0x100, 0x0, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x10}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a000005"], 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) r5 = socket(0x2b, 0x1, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)="908225cb5e99439907279f19", 0xc}], 0x1}}], 0x1, 0x20008000) shutdown(r6, 0x1) sendmsg$nl_generic(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="d40000003800000129bd7010fddbdf251500000037000f800c00720000040000000000000400f6800400be0008002100", @ANYRES32=0x0, @ANYBLOB="e1eff52bfd6c94b694f224960abf31d1f41eb36db10cb00004cbf7256dcb6f73f56e55181cfac313a8dd2ec6129e5815e6e08cbeb9725bbfe4530c9f9c48deebd5d0471b9d1756b4e2ef2f4b65c962382abb087a418b6bc83f82531aaff3dd2cba55900566cbc2f04a13cd7939e5e9e3dd9c30df2f01e3f880e56779cf61af016399ca88900141e3f0e2e71b7f2192f0034708cfc37ec408009000ac1414aa00"], 0xd4}, 0x1, 0x0, 0x0, 0xc11}, 0x40) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0]) getsockopt$inet6_buf(r7, 0x29, 0x23, &(0x7f0000000180), &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x4e7, 0x30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x106}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x86, 0xd}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x250, 0x71, 0x8, 0x3, 0xff, 0x7}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x3, &(0x7f0000000940)=@string={0x3, 0x3, "c9"}}]}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 50.443838073s ago: executing program 0 (id=2030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x32, 0x1, 0x82, {0xa, @ah_ip4_spec={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x7}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x2, 0xfff, [0x30a9, 0x2]}, @hdata="b709d146aec295e4abacbbac60513ff49de23b8e2742b5f3fd89b04e44a090683d74e211cdeeaaab200fef3226e38d6f96e691ac", {0x0, @multicast, 0x0, 0x80, [0x7, 0x3ff]}, 0x9, 0x4}}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0300002e00090027bd700f0000fc0db6590000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42880}, 0x4000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf255a0000000c0099000e0000004c000000"], 0x20}, 0x1, 0x0, 0x0, 0x4890}, 0x20000000) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6, 0x0, r4}, 0x10) bind$l2tp6(r3, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x2e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x4, 0x3, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000003c0)={r0}) r11 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000980)='$', 0x1, 0x1, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, &(0x7f0000000580)={r11, &(0x7f0000000400)='/dev/dri/renderD128\x00', 0x400400, &(0x7f0000000440)={@align=0x4, {0x3, 0x5, 0x970, 0xb97d}}, 0x80000001, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x53074752}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x5000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x4, 0x3, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 41.64166085s ago: executing program 8 (id=2064): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x8914) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x88, 0x0, &(0x7f0000002a40)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x34, r5, 0xe7816804f9787cab, 0x70b52a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c805}, 0x44002084) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r5, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000094}, 0x100) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000580)={0x20, 0x8, 0x6, "77edb8503515"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000040)='./file0\x00', 0x100, 0x8001) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='ext4\x00', 0x81001f, 0x0) 39.687731453s ago: executing program 8 (id=2067): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) (async) r2 = dup(r1) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) (async, rerun: 32) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 32) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002440), 0x82000, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) (async, rerun: 64) syz_usb_control_io(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x88) close_range(r4, 0xffffffffffffffff, 0x0) (async) shutdown(r0, 0x1) (async) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) (async, rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) (rerun: 32) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000003c0)=@overlay={0x1, 0x1, 0x4, 0xe090, 0x4, {r9, r10/1000+10000}, {0x4, 0x2, 0x40, 0x8, 0x8e, 0x15, "1451d40e"}, 0x6, 0x3, {}, 0x15bb, 0x0, r11}) close_range(r8, 0xffffffffffffffff, 0x0) 39.681834709s ago: executing program 8 (id=2068): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f00000007c0)={0x0, 0xf}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f00000007c0)={0x0, 0xf}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x30, r2, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) r4 = syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) (async) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000140)={0x3, 0x1, 0x2, {0x5, 0x2, 0x8, 0x29}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 37.717940268s ago: executing program 1 (id=2074): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) (async) syz_usb_connect(0x1, 0x24, &(0x7f0000001340)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x50, 0x5, "", [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x1, 0x2, 0x7e, {0x9, 0x21, 0x81, 0x0, 0x1, {0x22, 0x633}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x2, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7d, 0x5, 0x2}}]}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x300, 0x40, 0x7e, 0x0, 0x10, 0x9b}, 0x4c, &(0x7f0000000e00)={0x5, 0xf, 0x4c, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4f, 0xa, 0x8, 0x4, 0x1}, @generic={0x3c, 0x10, 0x2, "6062f5c63c1bbfb9a136d8e5f88f784805b9ee71edb191a94592cd6f886e5809fca68aef3123b37d6260e551b7ad1fdb293cd4f4d20adc1568"}]}, 0x2, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x441}}]}) syz_usb_control_io$hid(r1, &(0x7f00000010c0)={0x24, &(0x7f0000000f40)={0x40, 0x23, 0x41, {0x41, 0xa, "87a531d62bb0d372c93eff238728244b75dc772838b9046728d6c99423df25aa634effbd861e9d9c9edb5002a490578e5fee8597119a0f369c4051b4921af9"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "6c455b5e428a794c9d4f95a113e121c677e5fd92f99276c210680141fa93b31679b84617eb1e03f74424e9bdc8d5aaad2c0070f4059be84ddd2d0f6116"}}, &(0x7f0000001040)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xc, "91"}, @main=@item_012={0x2, 0x0, 0x9, 'fz'}]}}, &(0x7f0000001080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x442}}}}, &(0x7f0000001280)={0x2c, &(0x7f0000001100)={0x20, 0xf, 0x1a, "1773923aa20d17d67c5aa9691c6bece71f34bf8524ebd2492775"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000011c0)={0x20, 0x1, 0xa9, "38a5a53afa6ac79bd47677ace4f2446b7e1e1c6fcfd42f8853062f940edcaa6560776885b625faed45e05862bf8bbf5d228a8316df786b0aed55f3bc0090c5f1f4d531ed71ca9ceddb85bb19d40470b6e65cde14cdbf79c01e861faf97c8e86cfdc2b5a69089703b8732083a3c29d7302eb722913a44"}, &(0x7f0000001240)={0x20, 0x3, 0x1, 0x7}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x20, 0x30, 0xf7, {0xf7, 0x23, "c740aa3736ab8615d40a61145d59e86ab5d9a2f1cd9fbe8541ca4ea236a7705a030b4ab275ef7cb0a28ac2dae7282e91e78c82101d221c397e0151514029b79c7b2a5a036adbef000829f50325f3f3fd059be5cf5697d20f0079c0e50197e25a09e84f87abf16024227992c28bad86da1618410b1fd5f048d859320872dfe94419c8dca319fe9a1df27c1f6f433cb19063abd80524d718be8f71396d380a92b87ad02773d4485c124cf0caa49213e385a8bb847e80c6d18ab133cf595ddf50703397f9c7939185c2aa224e8232604743abb18e4bb03613ad8caf9fd66c18de8ff5fac54bd283950330424d5aee82e105380e89b8b8"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, &(0x7f0000000680)={0x34, &(0x7f0000000280)={0x40, 0x30, 0x8a, "802cb7032a1fae0f20975c41f3d8d2949ecbae3a28b0724aa0b0fe8d84ad01f567597c25cc2384848cfcb6c4ee297b1500e69772aa32b5a62e6e32a1961e8aed1df3ef33b388bc4faaaeb2aaec67cc23dc1aa544e2764090e52f12bcb8b8fdb8c16d2da2f733ebaddffe70d2a2230f33bc17429a407c066d88826b055927175e5b5bca43ac04eff0482f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000440)={0x20, 0x0, 0xf1, {0xef, "ad13e1e47d8b971f5695093b4a51bf3a70113d058a1e7a3d89a083c74a89b720f1c9a2456ba32c858a3d03ba8a2e46730a42b20502624d7e4d9f29d729ef190266cc48805b9d17ec6629d2996a018aa8e09455104068fc55ba18d9f684a63c163f264f74811f5e8b93653a45edcbd2cf83a19a70e5269224eb7061de74fea64ccf50385283bcc4cadd3ae50ddaebeac44e2eff8523818ef595bc30394564992eccf4457477491713a228baaa70faf0d98669ff31be3840890f0d68838f54e6e955737ca02e3e2e029ecae0f56a8720df5b763d3f820f10644a678defb92ab0e6c21ed3b1bd7ff129c26e0eedfa0a93"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x9}}) syz_usb_control_io$sierra_net(r0, &(0x7f00000007c0)={0x14, &(0x7f00000006c0)={0x0, 0x4, 0x91, {0x91, 0x5, "5d3e7199b638ef13249ad86a2cd1355f7f1ce105ea0f7b9ae08b94d6f5e1127a9e9dab9e6473821c8267d26071a460a48122d290bbfe308d8301f53dda7f8ad8f1940a50f6f9e24c6a91745ef03da7a2000a0c8f699d9d81b10925bddc11b001a75078bc6ae3d66ddde79366600864449333a8c48433b40c8f03495783e3fec502239230e2bccada07a036bd47e432"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}}, &(0x7f0000000d80)={0x1c, &(0x7f0000000800)={0x0, 0x18, 0xde, "3220f34ea4f66048cd3536acec805d763c6ba9bd1d881aeb96d9c127071a6cdc7856b3101481a56915a58d5c6ba598ff35dc88cfec19eb70ef9e0f3e34d39855f29c5b78143d5c2dab29a7b2637e884fe1609229b34b19cd4d1ffbf3056f42981333a7525757f756e7d9b58738e34f8be068cca2e5cf11946d7a8d3b04f276c1b62182f17d031c4c91eefd0c406ed668e158a35463ca4cacb2c5f3926e39f18c41a5067ea675df29f4a251bb63086389b360e500342c9e29cbe5702d4332c17a479530ed65e70b692916877f571ca4d3d602f96e9d609c245a9da8120d66"}, &(0x7f0000000900)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000d40)}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) 37.015583089s ago: executing program 1 (id=2075): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x2a5d7921, 0x408401) r2 = pidfd_getfd(r0, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6000002) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000080)) prctl$PR_SET_SECUREBITS(0x1c, 0x22) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000180)=0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000001c0)) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x10820, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x100000001}}], [{@audit}, {@fowner_lt={'fowner<', 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x31, 0x39, 0x32, 0x35, 0x39, 0x35, 0x65], 0x2d, [0x37, 0x37, 0x33, 0x30], 0x2d, [0x61, 0x30, 0x30, 0x33], 0x2d, [0x32, 0x31, 0x66, 0x62], 0x2d, [0x32, 0x63, 0x39, 0x30, 0x39, 0x66, 0x64, 0x35]}}}]}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) setresuid(0xffffffffffffffff, r4, r5) truncate(&(0x7f0000000640)='./file0\x00', 0x6) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000680)={0x0, @in6={{0xa, 0x8, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}, 0xfff, 0x6, 0x80, 0x974, 0x7}, &(0x7f0000000740)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000780)={r7, 0x4}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000800)=""/233, &(0x7f0000000900)=0xe9) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000940)=0x5, 0x4) syz_extract_tcp_res$synack(&(0x7f0000000980)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000009c0)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000a00)={@void, @void, @mpls={[{}, {0x2}, {0x60000}, {0x450c, 0x0, 0x1}, {}, {0x6, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0xf7812, 0x0, 0x1}], @ipv4=@tcp={{0x17, 0x4, 0x1, 0x8, 0x104, 0x65, 0x0, 0x1, 0x6, 0x0, @private=0xa010100, @remote, {[@generic={0x7, 0xd, "3515e18f89992bb72a39ae"}, @ssrr={0x89, 0x7, 0xf3, [@multicast1]}, @generic={0x7, 0xc, "c08542dfb64695253fa4"}, @timestamp_addr={0x44, 0x14, 0x60, 0x1, 0x2, [{@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8f}]}, @lsrr={0x83, 0x13, 0xac, [@loopback, @broadcast, @local, @private=0xa010101]}]}}, {{0x4e24, 0x4e21, r9, r10, 0x1, 0x0, 0xf, 0x9b, 0xd, 0x0, 0xf703, {[@exp_fastopen={0xfe, 0x10, 0xf989, "282c48af39b110aca53b21f6"}, @md5sig={0x13, 0x12, "8b3170151b5b4183bdb81abe0c5968bd"}, @window={0x3, 0x3, 0x10}, @nop]}}, {"0a1a16737e66f077209f16623f293cbe51091589139779c14b05d94ce050be936538ced4cfaadd3e34ed038eeefe6dc369ecbbd260268450a30bc9dfe8eb0fe70640a19ee2562bc7f8653d90d499692f8568fb7657286521cdf278cc06c69d573f74a5e364e16246d5ddd7c8"}}}}}, 0x124) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) read$FUSE(r11, &(0x7f0000000b80)={0x2020}, 0x2020) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8004) timer_create(0x3, &(0x7f0000003d40)={0x0, 0x3f, 0x4, @thr={&(0x7f0000002cc0)="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", &(0x7f0000003cc0)="3ef00dbe501836331a9222c01909a25a5ab0fbdb5949482b2e1e9a28e3b3473a5e5765e9806aba750c07ea13ebd23d9f9c4a40bbe5f39621ccd03966a66030e3e51c415dabda9a389207e4e858938906acf4188bcc1b566f3a8c880301c95c94696f4e6f31da68cd8ff5cbd4"}}, &(0x7f0000003d80)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000003dc0)={r8, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000003e80)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000003ec0)=@assoc_value={r12, 0x2660b552}, &(0x7f0000003f00)=0x8) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000004000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f80)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008006) 36.904130126s ago: executing program 1 (id=2076): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0xb, 0x0, 0x8b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x4, 0x7c, 0x4}, 0xe) shutdown(r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0) write$evdev(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000012c0)=[@in={0x2, 0x4e24, @empty}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x3}, &(0x7f0000000100)=0x8) r3 = socket$unix(0x1, 0x5, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x149cc2, 0x1c0) fsetxattr(r4, &(0x7f0000001040)=@known='security.selinux\x00', 0x0, 0x0, 0x0) flistxattr(r4, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000140)={{0x32, @empty, 0x4e20, 0x3, 'lblc\x00', 0x0, 0x5, 0x66}, {@broadcast, 0x4e22, 0x1, 0x1, 0x6, 0x5}}, 0x44) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="010029bd7000fbdbff251000000008000300", @ANYRES32=r5], 0x34}}, 0x4054000) 36.868313326s ago: executing program 1 (id=2077): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$bind(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x1002831, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000c070007acfa140357b1982213f62715e0ea91e9febde8f251270a0b690a4f3d8ec23c0a57c3ce13f6f8dc169d1c3311aa331ef9894a2163a3b16d3", @ANYRES16=r6, @ANYBLOB="01000000000000000000030000004c000180380004001400010002004e23ac1414bb0000000000000000200002000a004e2400000010fe8000000000000000000000000000aa070000000d0001007564703a73797a3200000000"], 0x60}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5) (async) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x12000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58011303", @ANYBLOB="08002bbd7000fedbdf2513000000200007800c000400490000000000000008000200cf00000008000200090000002c000380080001000300000008000300090000000800020004000000080003001378000008000300030000004c0004803c0007800800010004000000080001000d000000080001000e00000008000300030000000800040002000000080004000c0000000800020002"], 0x158}}, 0x4004080) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r11 = syz_pidfd_open(r10, 0x0) (async) arch_prctl$ARCH_GET_FS(0x1003, 0x0) wait4(r10, 0x0, 0x8, 0x0) (async) ioctl$FS_IOC_GETVERSION(r11, 0xc040ff0b, &(0x7f0000000180)) (async) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e00210000000700000005000000000069430000020077a9e200"/40], 0x28}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r8, 0x0, 0x81, 0x5, 0x9, 0x0, {0x9, 0x4, 0x101c, 0x10, 0x4, 0x401, 0x23ca, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) (async) close_range(r4, 0xffffffffffffffff, 0x0) 36.71157083s ago: executing program 1 (id=2079): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000500)={0x66666666666666d, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8=r1], 0x20}}, 0x0) 36.678109026s ago: executing program 1 (id=2080): syz_open_dev$usbfs(&(0x7f0000000400), 0x205, 0x2581) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f0000000080)={0x5, 0x1f, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x4, 0x0}) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', &(0x7f00000000c0)="a8e5be6d6bbc2101d3215f30494b99d30a8ff0f5e07cad09166c95447a7a34915afa945de50e6623a39430a0297663852e3f2373d7cb", 0x36) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 36.60575766s ago: executing program 8 (id=2081): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x81, 0xc, 0x0, 0x75, 0x81, 0x10, 0x6, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newtaction={0x44, 0x30, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x16, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x44}}, 0x4000000) recvmmsg$unix(r4, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) r6 = socket(0x29, 0x5, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000001340)='net/tcp\x00') write$binfmt_script(r8, 0x0, 0x0) 36.255516309s ago: executing program 8 (id=2082): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000005c0)={0x79, 0x0, 0xa19}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) copy_file_range(r1, &(0x7f0000000140)=0xc09c, r0, &(0x7f0000000400)=0x2b4, 0x8, 0x0) r5 = syz_usb_connect$hid(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRESOCT=0x0, @ANYBLOB="5a4b7977fdfd4072b0d865dad9fd21621ba558c40700480c4ac36be2d813dee4e141b28dd7"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xac, &(0x7f00000002c0)=ANY=[@ANYBLOB="4000004e48ec947a795385babd8d469436ad81ebea5e5decff257099952c4d69a8a8f7b16319c013418440023f511f0ff87da0864cf062d086f670698b60e37b594bdcc62000004e261e9df570895db18380e72909d59f6933e319bc38666dadae59ffdae88bc6f43f00004e380d4c8c1fa3bb677c78650a03ff5f486ff50d337165a2308663855199890ee0da4ec05754ccf12a33cbbf49c892c448744d3a09079243434f5dbbe119de5a00"]) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "8c784c5e3a1d521bb45837714fd206af9c453ddd864bcee644972c9d7683cb41dbd177b2d92bdb592a79ed59c1953cf2d621509cb49b13488115a8bb58cf0f34712b7084246617647672e42131e7a29432935886a24bd513d1ac47baa10def7c2ac887205f113189dc282233ec41303f908d57692c554da49c869de66db4ee06234580ac9831b4cb11d14b023c3c61739c327c54eac8283f3e3beff84823dc1b94eeb32d178b9776efd808eadc7a13e01f88b269ec065d825d1a752de4b4279220b61db1329870bf0aea59006549dce75634"}, 0xdd) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000000), 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000122000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, r7, 0x0) 35.752667619s ago: executing program 8 (id=2084): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) (async, rerun: 64) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000f01674057a21320dbd0010203010902120005000000000904"], 0x0) (async, rerun: 64) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000002c0)={0x3, 0xffffffff, 0xfffffffe, 0xffff01c2, 0x2, 0xa}) 35.547240713s ago: executing program 37 (id=2084): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) (async, rerun: 64) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000f01674057a21320dbd0010203010902120005000000000904"], 0x0) (async, rerun: 64) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000002c0)={0x3, 0xffffffff, 0xfffffffe, 0xffff01c2, 0x2, 0xa}) 34.515312997s ago: executing program 38 (id=2030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x32, 0x1, 0x82, {0xa, @ah_ip4_spec={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x7}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x2, 0xfff, [0x30a9, 0x2]}, @hdata="b709d146aec295e4abacbbac60513ff49de23b8e2742b5f3fd89b04e44a090683d74e211cdeeaaab200fef3226e38d6f96e691ac", {0x0, @multicast, 0x0, 0x80, [0x7, 0x3ff]}, 0x9, 0x4}}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0300002e00090027bd700f0000fc0db6590000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42880}, 0x4000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf255a0000000c0099000e0000004c000000"], 0x20}, 0x1, 0x0, 0x0, 0x4890}, 0x20000000) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6, 0x0, r4}, 0x10) bind$l2tp6(r3, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x2e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x4, 0x3, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000003c0)={r0}) r11 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000980)='$', 0x1, 0x1, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, &(0x7f0000000580)={r11, &(0x7f0000000400)='/dev/dri/renderD128\x00', 0x400400, &(0x7f0000000440)={@align=0x4, {0x3, 0x5, 0x970, 0xb97d}}, 0x80000001, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x53074752}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x5000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x4, 0x3, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 21.613193648s ago: executing program 39 (id=2080): syz_open_dev$usbfs(&(0x7f0000000400), 0x205, 0x2581) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f0000000080)={0x5, 0x1f, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x4, 0x0}) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', &(0x7f00000000c0)="a8e5be6d6bbc2101d3215f30494b99d30a8ff0f5e07cad09166c95447a7a34915afa945de50e6623a39430a0297663852e3f2373d7cb", 0x36) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 8.612749508s ago: executing program 2 (id=2161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000004c0)={0x1f, 0x5, 0x9}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) write$nci(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="510602b8"], 0x6) r11 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x3, 0x5, 0xeb}, {0x3000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x6, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0xc, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x150690, 0x3, 0x4000, 0xeeee0c00, [0x1, 0x1004, 0x4, 0x1000]}) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000000740)={"d28cbffc70113aa16b365924c3128c89fe8764c41caa3ec7a095ce3692ae1fe3160c3dd483cc71d285c48c8fa445272281beb44357aa96da39f0ef45a90bfac537ba4c98038e0b871c2ba811d3d568ccdddd1e0e7edef9061d12bdd0fc1c83093613293d1779955c62df6a03c3a539051393b577bb6645c4ed2ddfd06df82c7359de2082e16a4c302d18db9ce698f22b519d55adbbe4881dda46ddbbab0a1ca428e404f0640e62eb7d76c8ca94cff34f26de20c2f44c22228eee44edcbec829ed8b5f24a8259fcc97d67b96441486cf9832274eff5271d3843178cd90827052ef8e6dee13ef4f8e23b8396f5bc4b03b8ee875350ac778233a13551f55cac915ce11f145063ef5b5111272d0859d6cdb62ab72a92f24d83ef5ff87aa8f6eae3986c403add562c0a17839921dea6186d3b71b3d466070a005541677a477392f9a499322ed2f09c6e1b401ad81bb6673274e7c344152c2617edc2f667329b51bcc9d235de56d8642823643e0107339044417e2708d10e7dafefb5b2e72f696e1dc37c48f3c9266c9c8d2e771aabd4b7e4e7c2bccde0345d5d43ad7a4d98e9e1e3e152784ca29d286fe783f3579055a428ab231b9e81d77bd8ca4007607cd2ff60953a2d68353c4cc677124b7431edca5f604841f3baa90d46235ddaa03f158dd78c219be7f0c53dddd4cea58ecac6cef53e7a5b347b0842bb163bd35e19d2ed1b67e63a7e82ac470619ae164c3949884286c101417e6deeff735b8b3b9109e47725bbd5c400b24489fec1afe6771d5c8871f7cd31e7390cef6dce398b8a1dd7213229d282cb581a71c04ca04e9eb516a197583ba8470b0df0b2158a076bf257520500a7bfb42766c883231c1a2a4527dabb5037f9fa00172bc8b9327494b553735a4ebbfb8c9e7f5034b442418c7490919f81308b4a73bd46d57e1ebcc3b6cf7d1ba20e55d06e40e5796e568c206d51adc1be7186cb80962e8dfa41c354acd9ad5fbf4c59b6fa6dd83aa9aa0a23210b057328efa4239b8211b3a5f21ce22a193eb93f69c4d525f53e733b397786d808b928297748a3d54e5bb71bab6139d5e2721d237f4c99896a2e398d049df2e9c63c424606fc73cece699407f3041826cc271a3cb44cc4d76ab77ddb15ef7dda76ddfa4830c5ba28cf7dcc154e88ef9f228a8158d6ae6fdc32ef2af1642e48d5218f10ba7c222e43da4e13f59e96ab4b467283b76d8b0c36665f02d943936041c00d7dbd2a3ab101aa56277b9ec5111428c047fb8b144f260b2fae62db101aad238ee50d222202969ed5929c2f8ab41e6e342ad1b0037be7e2d887f0563a722be94364dfe62482f7862da76fd58827712a1a80f69cc85f2fa9ba92cbfc48f7e4f11b2b87c71e6733a95d8ded91da74913fcf81bb1bb9cb8f380f402abf9df0990e0100750c49f9328238eced88d16068bce90b"}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffffff5, 0x0, [{0x86, 0x40, 0x3, '\x00', 0x2}, {0x2a, 0xff, 0xad, '\x00', 0x10}, {0x35, 0x23, 0xb, '\x00', 0xfe}, {0x0, 0x1, 0x82, '\x00', 0x72}, {0x6, 0x1, 0x27, '\x00', 0x9}, {0x0, 0x8, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0xce, 0x5, '\x00', 0xe}, {0x5, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x3}, {0x2, 0xc0, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xa9}, {0x6, 0x7, 0x8}, {0xff, 0x5, 0x6, '\x00', 0xda}, {0x5, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x2, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x3, 0xff, 0x12, '\x00', 0x6}, {0x7, 0xa9, 0x1c, '\x00', 0xa}]}}) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="110000005a000d"], 0x1c}], 0x1}, 0x0) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12d3b3160102030109023268e0347ab099e1000000000000000000"], 0x0) r12 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r12, 0xc05c6104, &(0x7f0000000140)={"ae42ffff", 0x4, 0x6, 0x4, 0x100, 0x1000, "000000ffff0600000800", '\x00', "05030400", "0000b400", ["0000002000001d8834000801", "798acea5a178f42e00", "f0ffffffffebffff00f34810", "3ed063a6011c625adc7700"]}) r13 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r13, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000008c0)="a905000000007464000100000000ae5774ee54bbda4c1a986374cf1ea1a6aefe6a5c90db", 0x24}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x2, 0x24004044) 7.787851708s ago: executing program 7 (id=2163): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 5.251817397s ago: executing program 2 (id=2169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x188, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xaf, 0x6, "5b2b2793540cc5171e9ad732945aedfaac80f9b6aa75958e34d10d2291188a5f1025f92b73d9fa972afca448a31df05d8ef511fda368d56dc5475a5ac7a3c4b3a00179fd1438ae80bb966dc349e76c5b8f5ccf951bda4c89677bf5e64bb1285f87a058ca2d360782bc85896ec16d9059eff9da724a2fc670c044ad4addbb69d8f5cbbffeaa2960d6d5f5232c0cc0a1f636a257b709b641c2481bb76c26084475288f029b0ac65f33402451"}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "dcc3fb5365ab97fe5ddd2c488c7efe5c459358d74df1b99ef598a29107c7bedb94b49ebf6dcffe7692fe9c28b2953c790251d031a56357bb2bd23dad8cc60c42a74128784fffe976b567079c1c070f9e0bd3eaa9f25612ed5508c678c0b9f55eeee8fb5fd952be7af61633c01eb2ca9ded58a78149d625f46cec13d01d9b37c370021da20680cbd15de90b19909c355017450032e1f9159ce255d1ddd8c288db3ae38a8e1aaa22be7d147f8756ac29e8ce32"}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x24008845) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0x80, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x14, 0x4, @remote}}}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000200)=""/68, 0x44}], 0x2, 0x0, 0x0, 0xf5000000}, 0x10141) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x20, r5, 0x0, 0x0) ptrace$cont(0x1f, r5, 0x1, 0x3) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000040)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f0000000340)={0x20, r6, 0x200, 0xfffffffe, 0x4, {0x2c}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x0, 0xa8, @random="1cafa64753cb93d2f70638d6472d939e94b0f5e148608dbd0c38e7157eb534fa665fe1ca6f8cada268f201f09f126198edcf8eff60d825b78c10187960315e58acd1e7c7ade4398b521bcd4e42f1c3b77778bf145dc44e215014fbd67bf9c279b2498c46"}]}, 0x20}}, 0x0) 5.094901378s ago: executing program 2 (id=2171): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x3, 0x80, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "3eb541c254ff"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x5, 0x4, 0x2}, {0x6, 0x24, 0x1a, 0x4, 0x2}, [@country_functional={0x8, 0x24, 0x7, 0x4, 0xa0fa, [0x7]}, @mdlm={0x15, 0x24, 0x12, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x9, 0x4, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x8, 0x7e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x40, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf5, 0x7, 0x6}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x10, 0x5, 0x9, 0x20, 0x81}, 0xe5, &(0x7f00000001c0)={0x5, 0xf, 0xe5, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0xb, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1a, 0x0, 0xc0, 0xbc5c, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0xb, 0x1, 0x25e3a5, 0xf, 0xd03, [0x1fea017]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x2, 0x8, 0x9}, @generic={0xb4, 0x10, 0x0, "67c02dadac48257860ce11efeb97e739f14c0fd18a3237d0b15ee7ad8bc9506915bece2dabb2e21278dac4d2a0cec0f919c385bc13fe354bc566fcefa48e7c55f34271684d4dcd58b893ce097458809be23bc10f8c713555a9e3e174ed06c352fb42d4f4c15b087434b0e45202941c0b4bb998309fde7e604defb7004369b53b0c306d96c1036bcf4b72df5ad88abe62730b3239cac9ecb3f0c659711414568ace4f12c19fc694b93cb26c2b5c3236771a"}]}, 0x4, [{0x1f, &(0x7f00000002c0)=@string={0x1f, 0x3, "f15a78f94a372394f38e7cd9234f958d444fd78c18ef44a8257d07705d"}}, {0x7d, &(0x7f0000000300)=@string={0x7d, 0x3, "031a6175e799511b7298a24e52c3395e9c04dc6563396f1ae3dc409ed37d2cde9900044b5839c765cd866873ec582d280d6614fe40510e1c2ffd4369257a30d83ca5dfc2858f8de160177e8221411a49421b07b044598ba871a8ea1385c2968127d27010503e814969802e3cbc4ee04d2ae1b6c384b0b13f957660"}}, {0xa, &(0x7f0000000000)=@string={0xa, 0x3, "5af1f2f0a911d352"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x457}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000580)={0x14, &(0x7f0000000480)={0x0, 0x30, 0x97, {0x97, 0x2, "d561ad6027a73d21861bf5be8b070ecd21b19de69feb0520bd756099cf17774e70b8bd1903b62988a73ddaa98e13b432add1e201a2e1866cbb1870f582e2df3401708983462531e709f2f084c761b9dbcc9d94902d08f0dd5995dc24c79d485049a70ee84fab29cb20fb15b42b75ea0b5dc66d53894a7bba20e30ba0d9708f4a761d0638ae4666df3da9a2a2505d7b9fb7f66311ab"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x40, 0x14, 0x2, "9ada"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x5, 0x9, 0x401, 0x9, 0x3, 0x37b, 0x4, 0x9, 0x5, 0x4, 0x0, 0x3}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000700)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000740)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}}) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x12) 4.751524494s ago: executing program 7 (id=2172): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f00000003c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x80000000, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) (async) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2002) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0x1, {0xa, 0x25, 0x25, 0xea, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xbe, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0x1, {0xa, 0x25, 0x25, 0xea, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xbe, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) 3.686876149s ago: executing program 7 (id=2176): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x70eab311081bd5e6, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x205000, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44014}, 0x14) close(r4) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r11 = openat2(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x200001, 0x10, 0x3d}, 0x18) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r12, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r11, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r13, r14, 0x0, r14], [0x2b8], [0x0, 0x1, 0x1], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)=""/53) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000240)={0x0, "3ab181d193a07e6260fe14b41326bd1804d8faa21e70a1000000001000", 0x1}) r15 = socket$inet(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea443000905", @ANYRES64], 0x0) r16 = dup(r15) file_getattr(r16, 0x0, &(0x7f0000000080), 0x18, 0x1000) r17 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) file_setattr(r17, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) openat$incfs(r17, &(0x7f00000000c0)='.log\x00', 0x480040, 0x135) 3.421476287s ago: executing program 2 (id=2179): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0x1, 0xdf37}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce0dd9a58a5b6b20de4cee328f64d4197b006db88d660aaeb9e86d30a60a1567afc8200ec33c9286a915b88c1e9e47ea5b924d0063e70d8bc7ec071ce4196c5c453a004d345b8ed67229bea5b3e7a82fb5ab7602977c", @ANYRES16=r3, @ANYBLOB="05002dbd7000fcdbdf251b0000000600210030"], 0x24}, 0x1, 0x0, 0x0, 0xc8a5af836d6b140}, 0x20000080) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0xfffffffffffffffc, 0x0) 3.375717065s ago: executing program 9 (id=2181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000025, &(0x7f0000000200)=0x101, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000340)="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", 0x24c}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf3", 0x56}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 3.277973102s ago: executing program 9 (id=2182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000010000000000000080000000000a28000000000a0101000000005e1affd502000000091201b773797a300000f1f508000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100014e5f61ad2c73814758dcfb0add39e9"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440b0"], 0xdc}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) (async) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x10, @local}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_dest={0x11, 0x114, 0x2, {0x1, 0x402}}], 0x18, 0x20044804}, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x0, 0x1e8, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0xff, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r7, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r12}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24044005}, 0x10) r13 = dup(r5) sendmsg$NL80211_CMD_SET_BSS(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0d8dcb0000000000000000", @ANYRES16=r2, @ANYRESOCT=r6, @ANYRES32, @ANYRES8=r9], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4000080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 3.228722745s ago: executing program 3 (id=2183): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x280, 0x16, 0xa, 0x5, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4000000}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x16c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}]}]}], {0x14, 0x10}}, 0x2c8}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) 3.114415451s ago: executing program 9 (id=2184): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000780)={{r0}, "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"}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x0, 0x0, 0x1}}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x800009, &(0x7f0000000500)='rdma') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 3.10025141s ago: executing program 3 (id=2185): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, 'user_id'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\a\xa81a\xaaU\x94d\x00\x00'}}]}}) (async, rerun: 64) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) file_getattr(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) (async) read$FUSE(r1, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r4}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10480, 0x22) accept4(r3, &(0x7f0000000100)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000180)=0x80, 0x80800) 3.017974012s ago: executing program 9 (id=2186): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0xa7, 0x0, 0x2, [{0x0, 0x0}, {0x4d, &(0x7f0000000480)=@string={0x4d, 0x3, "3853289df95c3a586acbcb56add7e4726c104ffc587c9de3800d5be0915b0bd859f7ec3d8b7b404614bb7aac303a239fb287067c44059af458b8915c17c88fc8b1813db9cab63b6831719b"}}]}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x24000054) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xfffffffffffffdbc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x81}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80000}, 0x44004) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.882103852s ago: executing program 9 (id=2187): add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="bb4776", 0x3, 0xfffffffffffffffc) syz_open_dev$dri(&(0x7f0000000040), 0x3a, 0x80000) 2.824044039s ago: executing program 3 (id=2188): symlink(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) r4 = syz_open_dev$video4linux(&(0x7f0000000500), 0x69, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc038563b, &(0x7f0000000000)={0x0, 0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r0, 0x1, 0x70bd29, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x44000) 2.79466456s ago: executing program 9 (id=2189): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r2, 0x8947, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SVE_GET_VL(0x33, 0xa758) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x240300, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000100)={0x2, 0x0, [{0x80000008, 0x7, 0x3, 0x9, 0x2, 0x4, 0x8}, {0x80000008, 0x6, 0x2, 0xb9c80000, 0x4cd2, 0x2, 0x2}]}) 2.641509815s ago: executing program 3 (id=2190): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000080000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x9) landlock_restrict_self(r2, 0xa) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x6) landlock_restrict_self(r3, 0x5) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) landlock_restrict_self(r4, 0x9) r6 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x64a) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000680)={0x8000, 0x0, 0x200, 0x9, 0x0, 0x0, 0x3, 0xfffffff8}, 0x20) read$dsp(r0, &(0x7f00000000c0)=""/176, 0xb0) 1.7942789s ago: executing program 3 (id=2191): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000016c0)={0x15, &(0x7f0000001600)=[{0x5, '\x00', @st={0x4, [{0x2, @uvalue=0x9}, {0x3, @uvalue=0x2}, {0x3, @uvalue=0xfffffffffffffffc}, {0x2, @uvalue=0x9}]}, 0x3}]}) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020352bd08840b9127879d010203010902120001c2924081090432e200fd21163d4f10a84ed2ac76b4e8061364edc5ced1b862538103d08198"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 544.149251ms ago: executing program 3 (id=2192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110f, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110a}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0xa2084, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0x7, 0x2, 0x34d, 0x7, "150200", 0x0, 0x180}) ioctl$TCXONC(r3, 0x540a, 0x3) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0xcac) 476.547293ms ago: executing program 7 (id=2193): chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024f01c173a49b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000040)={&(0x7f0000000000)=""/60, 0x3c}) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x10001011, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x189) 412.975176ms ago: executing program 7 (id=2194): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x4a4200, 0x0) prctl$PR_SET_TSC(0x1a, 0x6) ioctl$LOOP_CTL_ADD(r0, 0x541b, 0xb) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000380)="240000001a005f1414f9f407000904000a00000000000008000f0001000000181fa198b0", 0x24) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000440)=[{0x60, 0x6, 0x6, "8ecb9fae25d0083b2d647e614a742c5b6e770b0b14f03767219e5be3d8ff9dbb3027109dd196e3bd9fb6b6e4dd628bee54e51449722b8db9ce33a6f69e4ed135520abea170abb07ae6457c8314f3"}, {0x108, 0x88, 0x8, "f609e8d3ed246989a7122a39e8c25ee52683adafbb65e00519280d4778ac6a2732351b903e6c4839cf59adc36f2aca93354675d86c42c27c8d118a628a9dd27df9a3eb274162a42210e6304cec560ec8b61cd9e4321f5083845979617ea01f3b5dc1383e184ba38f48dc4c8b32c69334c8fe273bc52974f56b52b19e9c56a634f7c178183546fe4c7ec1d9176ecda63792d72e23a7f2f016d1ef6e711efef8143119f68ba93e54f48f437454ddabb68f3b80ff026e5aea1dbcbfdd50ff6b15b095f1370120f1bda11a1dbadf2c02bc7551b11ab548b7d2838ef9aecb573225a60d82fbbdd203bcedb95474f357c43f550ad0"}, {0x110, 0x111, 0x4, "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"}, {0x60, 0x3a, 0x1, "6aa84df3acf9ebe424cd11a30aa5e3f96a2fd555dee6e09432ea41555c1d1782b73f4b55069e6d9b3a59b03b1358b796f6302c0d4b318c7af7d1b60d537ba021bc40ec3b41034c8045fc"}], 0x2d8}, 0x0) 376.379966ms ago: executing program 7 (id=2195): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)='>n', 0x1f) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) syz_usb_connect$midi(0x2, 0x32, &(0x7f0000012640)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x3, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0xaf, [], [{{0x9, 0x5, 0x1, 0x3, 0x20, 0x4, 0xf, 0xac, {0x5, 0x25, 0x1, 0x1, 'M'}}}]}}}}}]}}, &(0x7f0000012a00)={0xa, &(0x7f00000126c0)={0xa, 0x6, 0x201, 0xe, 0x80, 0x8, 0xff, 0x10}, 0x5, &(0x7f0000012700)={0x5, 0xf, 0x5}}) 73.865774ms ago: executing program 2 (id=2196): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @flat=@handle={0x73682a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1040}], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', 0x6}) 0s ago: executing program 2 (id=2197): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0xc0, 0xf5b3}]}, 0x14, 0x1) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$uac3(0x1, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0xb05, 0x17a0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x20, 0x1, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xd3, 0x4, {0xa, 0x25, 0x25, 0x7, 0x5, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x3c, 0x8, {0xa, 0x25, 0x25, 0x9, 0x0, 0x8001}}}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0x27) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x70, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0xfffffffffffffffe, @random=0x4, 0x86, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x1, 0x84, 0x2}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) kernel console output (not intermixed with test programs): slave_0: entered promiscuous mode [ 516.510354][T25734] hsr_slave_1: entered promiscuous mode [ 516.600510][ T5862] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 516.702185][T25734] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 516.713905][T25734] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 516.724145][T25734] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 516.733903][T25734] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 516.769538][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 516.783152][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 516.808923][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 516.833909][T25734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.840984][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 516.856538][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 516.870362][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 516.883614][ T5862] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 516.897098][T25734] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.906077][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.916284][ T5862] usb 1-1: Product: syz [ 516.918685][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.920537][ T5862] usb 1-1: Manufacturer: syz [ 516.927689][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.941736][ T5862] usb 1-1: SerialNumber: syz [ 516.951250][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.957313][ T5862] usb 1-1: config 0 descriptor?? [ 516.958658][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.001687][ T5845] Bluetooth: hci2: command tx timeout [ 517.171151][T25734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.382141][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 517.389502][ T5862] input input76: Device does not respond to id packet M [ 517.402343][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 517.413131][ T5862] input input76: Device does not respond to id packet P [ 517.429388][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 517.437586][ T5862] input input76: Device does not respond to id packet B [ 517.456804][ T5862] input input76: Limiting number of effects to 32 (device reports 85) [ 517.526438][T25734] veth0_vlan: entered promiscuous mode [ 517.543208][T25734] veth1_vlan: entered promiscuous mode [ 517.578184][T25734] veth0_macvtap: entered promiscuous mode [ 517.589544][T25734] veth1_macvtap: entered promiscuous mode [ 517.620738][T25734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.636496][T25734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.650630][ T35] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.661602][ T35] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.677124][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.690557][ T35] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.745126][T26096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.797081][T26096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.846476][T26096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.873887][T26096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.889269][T25867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.916672][T25867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.954706][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.967225][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.037438][ T29] audit: type=1804 audit(1775870004.503:20): pid=26101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1952" name="/newroot/497/file0" dev="fuse" ino=1 res=1 errno=0 [ 518.240346][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 518.259786][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 518.266184][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 518.273224][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 518.288029][ T5862] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input76 [ 518.320643][ T5862] usb 1-1: USB disconnect, device number 72 [ 518.342086][ T5197] iforce 1-1:0.0: usb_submit_urb failed -19 [ 518.355311][T26151] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1949'. [ 518.390536][ T5197] iforce 1-1:0.0: usb_submit_urb failed -19 [ 518.423387][ T5862] iforce 1-1:0.0: usb_submit_urb failed -19 [ 518.450741][ T55] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 518.609475][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 518.616329][ T55] usb 2-1: unable to get BOS descriptor or descriptor too short [ 518.625527][ T55] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.635951][ T55] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 518.645618][ T55] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 518.661571][ T55] usb 2-1: string descriptor 0 read error: -22 [ 518.668422][ T55] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.677970][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.693238][ T55] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 518.700597][ T55] cdc_ncm 2-1:1.0: bind() failure [ 518.891110][ T55] usb 2-1: USB disconnect, device number 111 [ 519.019119][T26187] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 519.025656][T26187] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 519.035363][T26187] vhci_hcd vhci_hcd.0: Device attached [ 519.044240][T26187] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 519.050757][T26187] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 519.059125][T26187] vhci_hcd vhci_hcd.0: Device attached [ 519.065004][T26190] vhci_hcd: cannot find the pending unlink 14 [ 519.079579][ T5854] Bluetooth: hci2: command tx timeout [ 519.096303][T26190] vhci_hcd: connection closed [ 519.096533][ T35] vhci_hcd vhci_hcd.0: stop threads [ 519.107678][T26188] vhci_hcd: connection closed [ 519.120545][ T35] vhci_hcd vhci_hcd.0: release socket [ 519.134641][ T35] vhci_hcd vhci_hcd.0: disconnect device [ 519.140852][ T35] vhci_hcd vhci_hcd.0: stop threads [ 519.146151][ T35] vhci_hcd vhci_hcd.0: release socket [ 519.153624][ T35] vhci_hcd vhci_hcd.0: disconnect device [ 519.219493][ T24] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 519.476422][T26210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1959'. [ 519.491369][T26208] cgroup: Unknown subsys name 'net' [ 519.520145][ T55] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 519.673129][ T55] usb 1-1: unable to get BOS descriptor or descriptor too short [ 519.688726][ T55] usb 1-1: config 64 has an invalid interface number: 205 but max is 0 [ 519.701421][ T55] usb 1-1: config 64 has no interface number 0 [ 519.707690][ T55] usb 1-1: config 64 interface 205 has no altsetting 0 [ 519.721622][ T55] usb 1-1: New USB device found, idVendor=050d, idProduct=5d09, bcdDevice=1f.ce [ 519.731098][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.739164][ T55] usb 1-1: Product: syz [ 519.743545][ T55] usb 1-1: Manufacturer: syz [ 519.748216][ T55] usb 1-1: SerialNumber: syz [ 520.911586][ T5843] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 520.958117][T26260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1968'. [ 521.027680][T26263] netlink: 'syz.1.1969': attribute type 3 has an invalid length. [ 521.036239][T26263] netlink: 'syz.1.1969': attribute type 1 has an invalid length. [ 521.044843][T26263] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1969'. [ 521.074200][ T5843] usb 9-1: Using ep0 maxpacket: 8 [ 521.091501][ T5843] usb 9-1: unable to get BOS descriptor or descriptor too short [ 521.100756][ T5843] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.118522][ T5843] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 521.134779][ T5843] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.149704][ T5854] Bluetooth: hci2: command 0x040f tx timeout [ 521.161452][ T5843] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.184511][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.193656][ T5843] usb 9-1: Product: syz [ 521.198008][ T5843] usb 9-1: Manufacturer: syz [ 521.203258][ T5843] usb 9-1: SerialNumber: syz [ 521.424328][T26239] netlink: 'syz.8.1964': attribute type 10 has an invalid length. [ 521.459084][T26239] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1964'. [ 521.491396][T26239] bond0: entered promiscuous mode [ 521.521364][T26239] bond_slave_0: entered promiscuous mode [ 521.552225][T26239] bond_slave_1: entered promiscuous mode [ 521.570885][T26239] bridge0: port 3(bond0) entered blocking state [ 521.590251][T26239] bridge0: port 3(bond0) entered disabled state [ 521.609671][T26239] bond0: entered allmulticast mode [ 521.619519][T26239] bond_slave_0: entered allmulticast mode [ 521.635502][T26239] bond_slave_1: entered allmulticast mode [ 521.659518][T26239] bridge0: port 3(bond0) entered blocking state [ 521.665994][T26239] bridge0: port 3(bond0) entered forwarding state [ 521.689421][ T5862] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 521.721951][ T5843] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 521.739001][ T5843] cdc_ncm 9-1:1.0: bind() failure [ 521.763125][ T5843] usb 9-1: USB disconnect, device number 2 [ 521.864548][ T5862] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 521.887274][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.906051][ T5862] usb 2-1: Product: syz [ 521.914024][ T5862] usb 2-1: Manufacturer: syz [ 521.919551][ T5862] usb 2-1: SerialNumber: syz [ 521.935850][ T5862] usb 2-1: config 0 descriptor?? [ 522.196195][ T55] usb 1-1: USB disconnect, device number 73 [ 522.302963][T26334] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1974'. [ 522.648848][ T5862] usb 2-1: Firmware version (0.0) predates our first public release. [ 522.672218][ T5862] usb 2-1: Please update to version 0.2 or newer [ 522.759673][ T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 522.863696][ T5862] usb 2-1: USB disconnect, device number 112 [ 522.929924][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 522.940966][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.952553][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.970247][ T24] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 522.987432][T26372] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1982'. [ 523.001838][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.031118][ T24] usb 1-1: config 0 descriptor?? [ 523.077242][T26372] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1982'. [ 523.091149][T26379] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1982'. [ 523.230127][ T5845] Bluetooth: hci2: command 0x040f tx timeout [ 523.420311][ T5843] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 523.589444][ T5843] usb 9-1: Using ep0 maxpacket: 32 [ 523.598451][ T5843] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 523.607357][ T5843] usb 9-1: config 0 has no interface number 0 [ 523.617208][ T5843] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.639005][ T5843] usb 9-1: config 0 interface 85 has no altsetting 0 [ 523.656060][ T5843] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 523.666065][T26348] netlink: 'syz.0.1979': attribute type 11 has an invalid length. [ 523.676297][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.694551][ T5843] usb 9-1: Product: syz [ 523.704106][ T5843] usb 9-1: Manufacturer: syz [ 523.719161][ T5843] usb 9-1: SerialNumber: syz [ 523.732087][ T5843] usb 9-1: config 0 descriptor?? [ 523.750897][T26415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.766979][T26415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.798495][T26413] block nbd1: not configured, cannot reconfigure [ 523.808369][ T24] usbhid 1-1:0.0: can't add hid device: -32 [ 523.827470][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 523.972971][ T5843] appletouch 9-1:0.85: Failed to read mode from device. [ 523.986890][ T5843] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 524.386692][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1982'. [ 524.410708][ T5843] usb 9-1: USB disconnect, device number 3 [ 525.139403][ T55] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 525.259393][ T5843] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 525.289377][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 525.296402][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.306619][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 525.316517][ T55] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 525.320064][ T5845] Bluetooth: hci2: command 0x040f tx timeout [ 525.338064][ T55] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 525.347340][ T55] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 525.355523][ T55] usb 2-1: Manufacturer: syz [ 525.364307][ T55] usb 2-1: config 0 descriptor?? [ 525.409408][ T5843] usb 9-1: Using ep0 maxpacket: 16 [ 525.416607][ T5843] usb 9-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.431104][ T5843] usb 9-1: config 1 interface 0 has no altsetting 0 [ 525.443118][ T5843] usb 9-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.40 [ 525.452336][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.460391][ T5843] usb 9-1: Product: syz [ 525.464580][ T5843] usb 9-1: Manufacturer: У [ 525.469086][ T5843] usb 9-1: SerialNumber: syz [ 525.536602][ T55] usb 1-1: USB disconnect, device number 74 [ 525.578812][ T5862] usb 2-1: USB disconnect, device number 113 [ 525.683731][T26465] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 525.737504][ T5843] usbhid 9-1:1.0: can't add hid device: -71 [ 525.743615][ T5843] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 525.753811][ T5843] usb 9-1: USB disconnect, device number 4 [ 525.929552][ T55] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 526.079480][ T55] usb 1-1: Invalid ep0 maxpacket: 16 [ 526.209425][ T55] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 526.277785][T26509] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1999'. [ 526.360216][ T55] usb 1-1: Invalid ep0 maxpacket: 16 [ 526.365884][ T55] usb usb1-port1: attempt power cycle [ 526.599436][ T5862] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 526.709658][ T55] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 526.729813][ T55] usb 1-1: Invalid ep0 maxpacket: 16 [ 526.749363][ T5862] usb 9-1: Using ep0 maxpacket: 32 [ 526.756008][ T5862] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 526.766009][ T5862] usb 9-1: config 0 has no interface number 0 [ 526.774367][ T5862] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 526.783595][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.791636][ T5862] usb 9-1: Product: syz [ 526.795835][ T5862] usb 9-1: Manufacturer: syz [ 526.800636][ T5862] usb 9-1: SerialNumber: syz [ 526.807339][ T5862] usb 9-1: config 0 descriptor?? [ 526.816606][ T5862] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 526.825604][ T5862] usb 9-1: selecting invalid altsetting 1 [ 526.836688][ T5862] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 526.847973][ T5862] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 526.859609][ T5862] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 526.862463][ T55] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 526.867972][ T5862] usb 9-1: media controller created [ 526.889954][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 526.899980][ T55] usb 1-1: Invalid ep0 maxpacket: 16 [ 526.905613][ T55] usb usb1-port1: unable to enumerate USB device [ 527.017792][T26512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.030041][T26512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.042134][T26512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.064948][T26512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.078686][ T5862] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 527.105437][ T5862] zl10353_read_register: readreg error (reg=127, ret==-71) [ 527.120344][ T5862] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 527.154454][T26535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2001'. [ 527.166352][T26535] openvswitch: netlink: Flow key attr not present in new flow. [ 527.196669][ T5862] usb 9-1: USB disconnect, device number 5 [ 527.609512][ T55] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 527.769532][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 527.776813][ T55] usb 2-1: config 0 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 527.791102][ T55] usb 2-1: config 0 interface 0 has no altsetting 0 [ 527.797753][ T55] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 527.806980][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.817644][ T55] usb 2-1: config 0 descriptor?? [ 527.939489][ T5862] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 528.030439][T26555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.040356][T26555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.089405][ T5862] usb 9-1: Using ep0 maxpacket: 16 [ 528.096963][ T5862] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.108029][ T5862] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 528.117245][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.255150][ T55] hid_parser_main: 440 callbacks suppressed [ 528.255171][ T55] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 528.268798][ T55] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 528.277356][ T55] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 528.284942][ T55] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 528.293917][ T55] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 528.301399][ T55] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 528.308662][ T55] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 528.316844][ T55] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 528.325158][ T55] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 528.333301][ T55] microsoft 0003:045E:00F9.0039: unknown main item tag 0x0 [ 528.343357][ T55] microsoft 0003:045E:00F9.0039: hidraw0: USB HID v0.08 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0 [ 528.355186][ T55] microsoft 0003:045E:00F9.0039: no inputs found [ 528.362080][ T55] microsoft 0003:045E:00F9.0039: could not initialize ff, continuing anyway [ 528.457272][ T5931] usb 2-1: USB disconnect, device number 114 [ 528.539220][ T5862] mcp2221 0003:04D8:00DD.003A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 528.725639][T26612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2009'. [ 528.735396][T26612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2009'. [ 528.750279][ T5970] usb 9-1: USB disconnect, device number 6 [ 529.249487][ T5931] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 529.399648][ T5931] usb 2-1: device descriptor read/64, error -71 [ 529.549914][ T5862] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 529.589494][ T5970] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 529.639397][ T5931] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 529.701290][ T5862] usb 9-1: unable to get BOS descriptor or descriptor too short [ 529.710793][ T5862] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 529.723772][ T5862] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 529.732911][ T5970] usb 1-1: device descriptor read/64, error -71 [ 529.740908][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.748911][ T5862] usb 9-1: Product: syz [ 529.753212][ T5862] usb 9-1: Manufacturer: syz [ 529.757840][ T5862] usb 9-1: SerialNumber: syz [ 529.769430][ T5931] usb 2-1: device descriptor read/64, error -71 [ 529.880525][ T5931] usb usb2-port1: attempt power cycle [ 529.970125][ T5970] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 529.981702][ T5862] usb 9-1: 1:1 : sample bitwidth 62 in over sample bytes 0 [ 529.989245][ T5862] usb 9-1: 1:1 : unsupported sample bitwidth 62 in 0 bytes [ 529.997489][ T5862] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 530.030819][ T5862] usb 9-1: failed to enable PITCH for EP 0x1 [ 530.038876][ T5862] usb 9-1: unit 2 not found! [ 530.043675][ T5862] usb 9-1: unit 0 not found! [ 530.080048][ T5862] usb 9-1: USB disconnect, device number 7 [ 530.099732][ T5970] usb 1-1: device descriptor read/64, error -71 [ 530.136497][T12649] udevd[12649]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.219956][ T5970] usb usb1-port1: attempt power cycle [ 530.239409][ T5931] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 530.271139][ T5931] usb 2-1: device descriptor read/8, error -71 [ 530.511536][ T5931] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 530.553402][ T5931] usb 2-1: device descriptor read/8, error -71 [ 530.560639][ T5970] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 530.590569][ T5970] usb 1-1: device descriptor read/8, error -71 [ 530.674024][ T5931] usb usb2-port1: unable to enumerate USB device [ 530.799457][ T5909] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 530.829459][ T5970] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 530.849958][ T5970] usb 1-1: device descriptor read/8, error -71 [ 530.949621][ T5909] usb 9-1: Using ep0 maxpacket: 32 [ 530.958895][ T5909] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 530.969070][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.970618][ T5970] usb usb1-port1: unable to enumerate USB device [ 530.977301][ T5909] usb 9-1: Product: syz [ 530.988641][ T5909] usb 9-1: Manufacturer: syz [ 530.994275][ T5909] usb 9-1: SerialNumber: syz [ 531.001776][ T5909] usb 9-1: config 0 descriptor?? [ 531.010751][ T5909] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 531.018439][ T5909] dvb-usb: bulk message failed: -22 (2/0) [ 531.026671][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 531.037326][ T5909] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 531.045729][ T5909] usb 9-1: media controller created [ 531.060683][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 531.080630][ T5909] usb 9-1: selecting invalid altsetting 7 [ 531.086486][ T5909] cxusb: set interface failed [ 531.091274][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 531.120386][ T5909] DVB: Unable to find symbol lgdt330x_attach() [ 531.126629][ T5909] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 531.179358][ T5909] rc_core: IR keymap rc-dvico-portable not found [ 531.185808][ T5909] Registered IR keymap rc-empty [ 531.192117][ T5909] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 531.203633][ T5909] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input78 [ 531.216449][ T5909] dvb-usb: schedule remote query interval to 100 msecs. [ 531.223475][ T5909] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 531.331083][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 531.394657][T26683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.404240][T26683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.414816][ T5970] usb 9-1: USB disconnect, device number 8 [ 531.501021][ T5970] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 532.154027][T26749] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2021'. [ 532.164112][T26749] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2021'. [ 532.173282][T26749] netlink: 'syz.1.2021': attribute type 5 has an invalid length. [ 532.181201][T26749] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2021'. [ 532.210797][ T5931] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 532.224819][T26749] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2021'. [ 532.379749][ T5931] usb 9-1: Using ep0 maxpacket: 32 [ 532.397244][ T5931] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 532.406588][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.417932][ T5931] usb 9-1: Product: syz [ 532.422234][ T5931] usb 9-1: Manufacturer: syz [ 532.429178][ T5931] usb 9-1: SerialNumber: syz [ 532.440169][ T5931] usb 9-1: config 0 descriptor?? [ 532.719230][T26786] netlink: 'syz.1.2025': attribute type 10 has an invalid length. [ 532.733483][T26786] syz_tun: entered promiscuous mode [ 532.738934][T26786] syz_tun: entered allmulticast mode [ 532.745464][T26786] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 532.829497][ T5909] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 532.999436][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 533.007970][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.021091][ T5909] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 533.030350][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.038371][ T5909] usb 1-1: Product: syz [ 533.042662][ T5909] usb 1-1: Manufacturer: syz [ 533.047424][ T5909] usb 1-1: SerialNumber: syz [ 533.054552][ T5909] usb 1-1: config 0 descriptor?? [ 533.062644][ T5909] cdc_ether 1-1:0.0: skipping garbage [ 533.068475][ T5931] peak_usb 9-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 533.078682][ T5909] usb 1-1: No union descriptors [ 533.084153][ T5909] usb 1-1: unsupported MDLM descriptors [ 533.090023][ T5931] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 533.090358][ T5970] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 533.103311][ T5931] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 533.160235][ T5931] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -22 [ 533.261588][ T5970] usb 2-1: unable to get BOS descriptor or descriptor too short [ 533.270482][T26774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.274127][ T5970] usb 2-1: not running at top speed; connect to a high speed hub [ 533.281719][T26774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.296676][T26734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.306490][ T5970] usb 2-1: config 192 has an invalid interface number: 239 but max is 0 [ 533.316071][T26734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.324132][ T5970] usb 2-1: config 192 has no interface number 0 [ 533.331048][ T5970] usb 2-1: config 192 interface 239 has no altsetting 0 [ 533.342214][ T5970] usb 2-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=f5.b3 [ 533.352419][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.361451][ T5970] usb 2-1: Product: syz [ 533.366046][ T5970] usb 2-1: Manufacturer: syz [ 533.371759][ T5970] usb 2-1: SerialNumber: syz [ 533.438422][T26777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.447650][T26777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.549091][ T5931] usb 1-1: USB disconnect, device number 83 [ 533.585653][T26794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.595392][T26794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.613875][ T5970] usb 2-1: USB disconnect, device number 119 [ 534.211656][T26845] IPVS: length: 135 != 8 [ 534.579389][ T5970] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 534.729448][ T5970] usb 2-1: Using ep0 maxpacket: 8 [ 534.737611][ T5970] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 534.747523][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.755995][ T5970] usb 2-1: Product: syz [ 534.760547][ T5970] usb 2-1: Manufacturer: syz [ 534.765160][ T5970] usb 2-1: SerialNumber: syz [ 534.772093][ T5970] usb 2-1: config 0 descriptor?? [ 534.781474][ T5970] gspca_main: se401-2.14.0 probing 047d:5003 [ 535.013113][ T55] usb 9-1: USB disconnect, device number 9 [ 535.116676][T26873] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 535.182678][T26876] netlink: 180 bytes leftover after parsing attributes in process `syz.8.2035'. [ 535.197813][ T5970] gspca_se401: ExtraFeatures: 48 [ 535.204854][ T5970] gspca_se401: Frame size: 0x0 1/16th janggu [ 535.218644][ T5970] gspca_se401: Frame size: 3x0 bayer [ 535.224392][ T5970] gspca_se401: Frame size: 0x32768 bayer [ 535.230620][ T5970] gspca_se401: Frame size: 1x0 1/4th janggu [ 535.238180][ T5970] gspca_se401: Frame size: 0x0 1/16th janggu [ 535.244995][ T5970] gspca_se401: Frame size: 0x0 1/16th janggu [ 535.251136][ T5970] gspca_se401: Frame size: 0x0 1/16th janggu [ 535.257916][ T5970] gspca_se401: Frame size: 0x0 1/16th janggu [ 535.266514][ T5970] gspca_se401: Frame size: 0x0 1/16th janggu [ 535.272624][ T5970] gspca_se401: Frame size: 68x8196 bayer [ 535.331213][T26879] netlink: 'syz.8.2036': attribute type 4 has an invalid length. [ 535.401206][ T5970] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input79 [ 535.432172][ T5970] usb 2-1: USB disconnect, device number 120 [ 536.059724][T26904] netlink: 'syz.1.2037': attribute type 16 has an invalid length. [ 536.067693][T26904] netlink: 'syz.1.2037': attribute type 2 has an invalid length. [ 536.076232][T26904] netlink: 64102 bytes leftover after parsing attributes in process `syz.1.2037'. [ 536.235154][T26909] openvswitch: netlink: IP tunnel dst address not specified [ 536.255958][T26912] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2039'. [ 536.489514][ T5931] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 536.499398][ T55] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 536.639362][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 536.645806][ T5931] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 536.653529][ T55] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 536.655614][ T5931] usb 2-1: config 179 has no interface number 0 [ 536.666897][ T55] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.671404][ T5931] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 536.697052][ T5931] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 536.708496][ T5931] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 536.708534][ T55] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 536.720302][ T5931] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 536.731474][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.740850][ T5931] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 536.748963][ T55] usb 9-1: Product: syz [ 536.764133][ T5931] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 536.767228][ T55] usb 9-1: Manufacturer: syz [ 536.778412][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.788468][ T55] usb 9-1: SerialNumber: syz [ 536.796886][T26909] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 536.808075][ T55] hub 9-1:1.0: bad descriptor, ignoring hub [ 536.815009][ T55] hub 9-1:1.0: probe with driver hub failed with error -5 [ 537.120136][ T5931] usb 9-1: USB disconnect, device number 10 [ 537.735482][T26950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.746682][T26950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.829437][ T55] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 537.983483][ T55] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 537.992734][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.000892][ T55] usb 9-1: Product: syz [ 538.005095][ T55] usb 9-1: Manufacturer: syz [ 538.009746][ T55] usb 9-1: SerialNumber: syz [ 538.424456][ T55] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 538.436954][ T55] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 538.448450][ T55] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 538.460446][ T55] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 538.470417][ T55] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 538.501698][ T55] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 539.210743][ T5931] usb 2-1: USB disconnect, device number 121 [ 539.216817][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 539.216879][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 539.513808][ T5908] usb 9-1: USB disconnect, device number 11 [ 539.623256][T26991] syzkaller1: entered promiscuous mode [ 539.629155][T26991] syzkaller1: entered allmulticast mode [ 539.672218][ T5931] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 539.832545][ T5931] usb 2-1: not running at top speed; connect to a high speed hub [ 539.844965][ T5931] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 539.854644][ T5931] usb 2-1: config 0 has no interface number 0 [ 539.860849][ T5931] usb 2-1: config 0 interface 89 has no altsetting 0 [ 539.870361][ T5931] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=e8.38 [ 539.880050][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.888086][ T5931] usb 2-1: Product: syz [ 539.892703][ T5931] usb 2-1: Manufacturer: syz [ 539.897366][ T5931] usb 2-1: SerialNumber: syz [ 539.913610][ T5931] usb 2-1: config 0 descriptor?? [ 539.945231][ T29] audit: type=1326 audit(1775870026.413:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27009 comm="syz.8.2050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2df459c819 code=0x0 [ 540.131846][T26975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.141915][T26975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.160352][ T5931] usb_ehset_test 2-1:0.89: probe with driver usb_ehset_test failed with error -32 [ 540.179034][ T5931] usb 2-1: USB disconnect, device number 122 [ 540.831519][T27038] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2054'. [ 541.189394][ T55] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 541.339791][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 541.347939][ T55] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 541.357294][ T55] usb 2-1: config 0 has no interface number 0 [ 541.363974][ T55] usb 2-1: config 0 interface 12 has no altsetting 0 [ 541.373312][ T55] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 541.382602][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.390729][ T55] usb 2-1: Product: syz [ 541.394984][ T55] usb 2-1: Manufacturer: syz [ 541.400236][ T55] usb 2-1: SerialNumber: syz [ 541.408542][ T55] usb 2-1: config 0 descriptor?? [ 541.559422][T21735] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 541.713083][T21735] usb 9-1: unable to get BOS descriptor or descriptor too short [ 541.724583][T21735] usb 9-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice= 0.40 [ 541.734176][T21735] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.742267][T21735] usb 9-1: Product: syz [ 541.746460][T21735] usb 9-1: Manufacturer: syz [ 541.751149][T21735] usb 9-1: SerialNumber: syz [ 541.963940][T27061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.976772][T27061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.993607][T21735] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 542.051392][T21735] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 542.064335][T21735] usb 9-1: USB disconnect, device number 12 [ 542.087180][T12600] udevd[12600]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.202423][ T2367] pvrusb2: request_firmware fatal error with code=-110 [ 542.209526][ T2367] pvrusb2: Failure uploading firmware1 [ 542.215760][ T2367] pvrusb2: Device initialization was not successful. [ 542.223742][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 542.234377][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 542.253629][ T2367] usb 7-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 542.265589][ T5926] pvrusb2: Device being rendered inoperable [ 542.279592][ T2367] usb 7-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 542.553811][T27098] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 542.630765][ T55] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 542.639839][ T55] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 542.647194][ T55] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 542.655107][ T55] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 542.668190][ T55] usb 2-1: USB disconnect, device number 123 [ 543.193117][T21735] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 543.359395][T21735] usb 9-1: Using ep0 maxpacket: 16 [ 543.366208][T21735] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 543.374432][T21735] usb 9-1: config 1 has no interface number 0 [ 543.380679][T21735] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 543.392392][T21735] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 543.402519][T21735] usb 9-1: config 1 interface 105 has no altsetting 0 [ 543.412144][T21735] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 543.421386][T21735] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 543.429525][T21735] usb 9-1: Product: syz [ 543.433775][T21735] usb 9-1: Manufacturer: syz [ 543.438378][T21735] usb 9-1: SerialNumber: syz [ 543.445971][T27127] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 543.455466][T27127] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 543.868312][T27127] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 543.875899][T27127] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 544.290635][T27127] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 544.302824][T21735] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 544.318559][ T5931] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 544.329185][T21735] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 544.340993][T21735] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 544.360927][T21735] aqc111 9-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 9e:71:a0:05:a5:ed [ 544.378622][T21735] usb 9-1: USB disconnect, device number 13 [ 544.387686][T21735] aqc111 9-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 544.441241][T21735] aqc111 9-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 544.450947][T21735] aqc111 9-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 544.461064][T21735] aqc111 9-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 544.480960][ T5931] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 544.489730][ T5931] usb 2-1: config 0 has no interface number 0 [ 544.495890][ T5931] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 544.507497][ T5931] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.519546][ T5931] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.532862][ T5931] usb 2-1: config 0 interface 1 has no altsetting 0 [ 544.539794][ T5931] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 544.548969][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.561252][ T5931] usb 2-1: config 0 descriptor?? [ 544.972686][ T5931] hid (null): invalid report_count 252767622 [ 545.101724][T25867] Bluetooth: hci4: Frame reassembly failed (-84) [ 545.159401][T21735] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 545.179567][ T5931] uclogic 0003:145F:0212.003B: pen parameters not found [ 545.186684][ T5931] uclogic 0003:145F:0212.003B: interface is invalid, ignoring [ 545.312979][T21735] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 545.322907][T21735] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.331562][T21735] usb 9-1: Product: syz [ 545.335837][T21735] usb 9-1: Manufacturer: syz [ 545.340480][T21735] usb 9-1: SerialNumber: syz [ 545.347188][T21735] usb 9-1: config 0 descriptor?? [ 545.390399][ T55] usb 2-1: USB disconnect, device number 124 [ 545.554338][T21735] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 545.969711][T21735] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 547.119405][ T5843] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 547.149519][ T5854] Bluetooth: hci4: command 0xfc11 tx timeout [ 547.158092][ T5845] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 547.274037][ T5843] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 547.283305][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.291398][ T5843] usb 2-1: Product: syz [ 547.295778][ T5843] usb 2-1: Manufacturer: syz [ 547.300489][ T5843] usb 2-1: SerialNumber: syz [ 547.312718][ T5843] usb 2-1: config 0 descriptor?? [ 547.524102][ T5843] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 547.546659][ T5843] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 547.576095][ T5843] usb 2-1: USB disconnect, device number 125 [ 547.765925][T27245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2077'. [ 547.962304][T21735] usb 9-1: USB disconnect, device number 14 [ 548.530814][ T5845] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 548.538984][ T5845] Bluetooth: Wrong link type (-22) [ 548.547206][ T5845] Bluetooth: hci5: link tx timeout [ 548.552745][ T5845] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 549.159986][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.197088][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 549.205567][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 549.216650][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 549.224924][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 549.243822][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 549.315307][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.405366][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.490599][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.540946][T27289] chnl_net:caif_netlink_parms(): no params data found [ 549.703669][T27289] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.712776][T27289] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.720402][T27289] bridge_slave_0: entered allmulticast mode [ 549.727485][T27289] bridge_slave_0: entered promiscuous mode [ 549.735745][T27289] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.743284][T27289] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.750677][T27289] bridge_slave_1: entered allmulticast mode [ 549.757762][T27289] bridge_slave_1: entered promiscuous mode [ 549.808708][T27289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.828718][T27289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.878908][T27289] team0: Port device team_slave_0 added [ 549.886881][T27289] team0: Port device team_slave_1 added [ 549.937534][T27289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.944551][T27289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.973901][T27289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.985188][ T13] bond0: left allmulticast mode [ 549.990414][ T13] bond_slave_0: left allmulticast mode [ 549.995975][ T13] bond_slave_1: left allmulticast mode [ 550.002663][ T13] bridge0: port 3(bond0) entered disabled state [ 550.012687][ T13] bridge_slave_1: left allmulticast mode [ 550.018326][ T13] bridge_slave_1: left promiscuous mode [ 550.024543][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.034169][ T13] bridge_slave_0: left allmulticast mode [ 550.049372][ T13] bridge_slave_0: left promiscuous mode [ 550.057432][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.217540][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 550.230227][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 550.241324][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 550.255149][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 550.275342][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 550.428403][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.459636][ T13] bond_slave_0: left promiscuous mode [ 550.467010][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.499729][ T13] bond_slave_1: left promiscuous mode [ 550.506023][ T13] bond0 (unregistering): Released all slaves [ 550.520329][T27289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.527443][T27289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.553417][T27289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.592113][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 550.666577][T27289] hsr_slave_0: entered promiscuous mode [ 550.673596][T27289] hsr_slave_1: entered promiscuous mode [ 550.680586][T27289] debugfs: 'hsr0' already exists in 'hsr' [ 550.686740][T27289] Cannot create hsr debugfs directory [ 551.154271][ T13] hsr_slave_0: left promiscuous mode [ 551.164566][ T13] hsr_slave_1: left promiscuous mode [ 551.171487][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.178970][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.189202][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.197568][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.213280][ T13] veth1_macvtap: left promiscuous mode [ 551.218896][ T13] veth0_macvtap: left promiscuous mode [ 551.224889][ T13] veth1_vlan: left promiscuous mode [ 551.230424][ T13] veth0_vlan: left promiscuous mode [ 551.309901][ T5854] Bluetooth: hci2: command tx timeout [ 551.507987][ T13] team0 (unregistering): Port device team_slave_1 removed [ 551.535278][ T13] team0 (unregistering): Port device team_slave_0 removed [ 551.615831][T27618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.928741][T27467] chnl_net:caif_netlink_parms(): no params data found [ 552.241142][T27467] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.263674][T27467] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.273660][T27467] bridge_slave_0: entered allmulticast mode [ 552.283531][T27467] bridge_slave_0: entered promiscuous mode [ 552.349816][ T5854] Bluetooth: hci4: command tx timeout [ 552.365363][T27289] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 552.389964][T27289] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 552.402514][T27467] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.419458][T27467] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.427184][T27467] bridge_slave_1: entered allmulticast mode [ 552.438737][T27467] bridge_slave_1: entered promiscuous mode [ 552.450333][T27289] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 552.464575][T27289] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 552.508168][T27467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.521845][T27467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.566211][T27467] team0: Port device team_slave_0 added [ 552.575048][T27467] team0: Port device team_slave_1 added [ 552.610559][T27467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.617663][T27467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.645978][T27467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.659814][T27467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.666855][T27467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.694987][T27467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.779212][T27467] hsr_slave_0: entered promiscuous mode [ 552.785980][T27467] hsr_slave_1: entered promiscuous mode [ 553.055974][T27289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.188396][T27289] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.207040][T25869] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.214917][T25869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.283366][T25869] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.290560][T25869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.390702][ T5854] Bluetooth: hci2: command tx timeout [ 553.634677][T27289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.811838][T27467] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 553.838445][T27467] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 553.857208][T27467] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 553.872673][T27467] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 554.024790][T27467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.071190][T27467] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.097206][T25872] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.104391][T25872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.123253][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.130489][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.176490][T27289] veth0_vlan: entered promiscuous mode [ 554.214589][T27289] veth1_vlan: entered promiscuous mode [ 554.282642][T27289] veth0_macvtap: entered promiscuous mode [ 554.294765][T27289] veth1_macvtap: entered promiscuous mode [ 554.320564][T27289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.336780][T27289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.353914][T25867] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.374287][T25867] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.401170][T25867] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.431937][ T5854] Bluetooth: hci4: command tx timeout [ 554.451674][T25867] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.593116][T25872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.618974][T25872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.671759][T27467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.694080][T25872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.702736][T25872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.767103][T27467] veth0_vlan: entered promiscuous mode [ 554.784466][T27467] veth1_vlan: entered promiscuous mode [ 554.855112][T27467] veth0_macvtap: entered promiscuous mode [ 554.894832][T27467] veth1_macvtap: entered promiscuous mode [ 554.945638][T27467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.969244][T27467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.995796][T25867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.020356][T25867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.042405][T25867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.064267][T25867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.239259][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.257780][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.301378][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.317201][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.352306][ T24] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 555.469805][ T5854] Bluetooth: hci2: command tx timeout [ 555.510415][ T24] usb 10-1: device descriptor read/64, error -71 [ 555.733165][T28024] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 555.756488][T28025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.760065][ T24] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 555.770530][ T5909] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 555.809500][T28025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.920592][ T24] usb 10-1: device descriptor read/64, error -71 [ 555.939435][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 555.955583][ T5909] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 555.971177][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.979732][ T5909] usb 4-1: Product: syz [ 555.983936][ T5909] usb 4-1: Manufacturer: syz [ 555.988563][ T5909] usb 4-1: SerialNumber: syz [ 556.004071][ T5909] usb 4-1: config 0 descriptor?? [ 556.017435][ T5909] gspca_main: sq930x-2.14.0 probing 2770:930c [ 556.049812][ T24] usb usb10-port1: attempt power cycle [ 556.389759][ T24] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 556.430740][ T24] usb 10-1: device descriptor read/8, error -71 [ 556.509641][ T5854] Bluetooth: hci4: command tx timeout [ 556.538388][ T5909] gspca_sq930x: ucbus_write failed -71 [ 556.679392][ T24] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 556.703140][ T24] usb 10-1: device descriptor read/8, error -71 [ 556.781019][ T5909] gspca_sq930x: Sensor ov9630 not yet treated [ 556.787792][ T5909] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 556.806151][ T5909] usb 4-1: USB disconnect, device number 17 [ 556.822107][ T24] usb usb10-port1: unable to enumerate USB device [ 557.550703][ T5854] Bluetooth: hci2: command tx timeout [ 557.609484][ T5909] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 557.811401][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 557.832318][ T5909] usb 4-1: config 0 has an invalid interface number: 48 but max is 12 [ 557.848050][ T5909] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 557.857311][ T5909] usb 4-1: config 0 has no interface number 0 [ 557.868587][ T5909] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 557.899376][ T5909] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 557.921553][ T5909] usb 4-1: config 0 interface 48 has no altsetting 0 [ 557.935921][ T5909] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 557.945281][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.953655][ T5909] usb 4-1: Product: syz [ 557.957904][ T5909] usb 4-1: Manufacturer: syz [ 557.962560][ T5909] usb 4-1: SerialNumber: syz [ 557.970599][ T5909] usb 4-1: config 0 descriptor?? [ 558.201847][ T5909] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 558.208943][ T5909] gspca_zc3xx: reg_w_i err -71 [ 558.224741][T28148] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2096'. [ 558.234515][T28149] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2096'. [ 558.244020][T28149] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2096'. [ 558.253719][T28149] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 558.274168][T28148] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2096'. [ 558.284433][T28148] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 558.439221][T28154] CUSE: unknown device info "" [ 558.444369][T28154] CUSE: unknown device info "" [ 558.453164][T28154] CUSE: unknown device info "" [ 558.458278][T28154] CUSE: unknown device info "" [ 558.463454][T28154] CUSE: unknown device info "" [ 558.468666][T28154] CUSE: unknown device info "" [ 558.473680][T28154] CUSE: unknown device info "" [ 558.478676][T28154] CUSE: unknown device info "" [ 558.483943][T28154] CUSE: DEVNAME unspecified [ 558.590885][ T5854] Bluetooth: hci4: command tx timeout [ 558.809361][ T5909] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 558.827000][ T5909] gspca_zc3xx 4-1:0.48: probe with driver gspca_zc3xx failed with error -71 [ 558.854557][ T5909] usb 4-1: USB disconnect, device number 18 [ 559.005836][T28175] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.162465][T28175] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.367454][T28175] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.504705][T28175] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.650052][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 559.682450][T25867] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.712682][T25867] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.738751][T25867] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.761097][T25867] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.789989][ T24] usb 4-1: device descriptor read/64, error -71 [ 560.039442][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 560.179439][ T24] usb 4-1: device descriptor read/64, error -71 [ 560.309705][ T24] usb usb4-port1: attempt power cycle [ 560.669507][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 560.710724][ T24] usb 4-1: device descriptor read/8, error -71 [ 560.959418][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 560.999819][ T24] usb 4-1: device descriptor read/8, error -71 [ 561.109671][ T24] usb usb4-port1: unable to enumerate USB device [ 561.870134][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 562.019735][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 562.026546][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.037856][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.052176][ T9] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 562.062157][ T9] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 562.072135][ T9] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 562.082043][ T9] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 562.095727][T28291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.106795][T28284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.110349][T28291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.124000][T28284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.134020][ T9] usb 10-1: string descriptor 0 read error: -71 [ 562.142582][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.153161][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.165296][ T9] usb 10-1: rejected 1 configuration due to insufficient available bus power [ 562.174957][ T9] usb 10-1: no configuration chosen from 1 choice [ 562.184232][ T9] usb 10-1: USB disconnect, device number 6 [ 562.659378][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 562.677352][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.685445][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.845856][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 562.864477][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.875578][ T9] usb 4-1: Product: syz [ 562.880687][ T9] usb 4-1: Manufacturer: syz [ 562.885394][ T9] usb 4-1: SerialNumber: syz [ 562.897786][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 562.914872][ T808] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 563.317824][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 563.332776][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 563.366857][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 563.377915][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 563.388157][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 563.905042][T28353] chnl_net:caif_netlink_parms(): no params data found [ 563.951377][ T808] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 563.965439][ T808] ath9k_htc: Failed to initialize the device [ 564.042472][ T808] usb 4-1: ath9k_htc: USB layer deinitialized [ 564.086715][T28353] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.095771][T28353] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.103559][T28353] bridge_slave_0: entered allmulticast mode [ 564.113002][T28353] bridge_slave_0: entered promiscuous mode [ 564.121269][T28353] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.128420][T28353] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.137282][T28353] bridge_slave_1: entered allmulticast mode [ 564.146735][T28353] bridge_slave_1: entered promiscuous mode [ 564.179159][T28353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.181886][ T5970] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 564.202828][T28353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.243626][T28353] team0: Port device team_slave_0 added [ 564.254018][T28353] team0: Port device team_slave_1 added [ 564.289627][T28353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.296583][T28353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.323747][T28353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.337954][T28353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.341823][ T5970] usb 10-1: Using ep0 maxpacket: 16 [ 564.345921][T28353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.377433][T28353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.380516][ T5970] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.399988][ T5970] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.410737][ T5970] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 564.420413][ T5970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.432933][ T5970] usb 10-1: config 0 descriptor?? [ 564.500504][T28353] hsr_slave_0: entered promiscuous mode [ 564.507189][T28353] hsr_slave_1: entered promiscuous mode [ 564.514048][T28353] debugfs: 'hsr0' already exists in 'hsr' [ 564.522175][T28353] Cannot create hsr debugfs directory [ 564.671252][T28441] overlay: Unknown parameter 'l' [ 565.094300][ T5970] usbhid 10-1:0.0: can't add hid device: -32 [ 565.102550][ T5970] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 565.288164][T28353] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 565.301830][T28353] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 565.314942][T28353] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 565.327992][T28353] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 565.437834][T28353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.470009][ T5845] Bluetooth: hci6: command tx timeout [ 565.489351][ T5970] usb 4-1: USB disconnect, device number 23 [ 565.501747][T28353] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.525322][T25869] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.532544][T25869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.586443][T25867] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.593687][T25867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.904796][T28353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.957017][T28353] veth0_vlan: entered promiscuous mode [ 565.969740][ T5970] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 565.975142][T28353] veth1_vlan: entered promiscuous mode [ 566.023313][T28353] veth0_macvtap: entered promiscuous mode [ 566.034430][T28353] veth1_macvtap: entered promiscuous mode [ 566.058886][T28353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.075060][T28353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.093035][T25867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.111542][T25867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.128665][T25867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.138767][T25867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.147886][ T5970] usb 4-1: Using ep0 maxpacket: 16 [ 566.157179][ T5970] usb 4-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 566.168996][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 566.184396][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 566.197500][ T5970] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 566.250534][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.306159][ T5970] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 566.321893][T25872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.323311][ T5970] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 566.338659][T25872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.370734][ T5970] usb 4-1: Manufacturer: syz [ 566.390025][ T5970] usb 4-1: config 0 descriptor?? [ 566.410135][T25869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.418171][T25869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.600551][T28697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2118'. [ 566.685074][ T5970] rc_core: IR keymap rc-hauppauge not found [ 566.694722][ T5970] Registered IR keymap rc-empty [ 566.704523][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 566.729790][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 566.771226][ T5970] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 566.807352][ T5970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input81 [ 566.852885][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 566.879752][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 566.920596][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 566.949479][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 566.980161][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.022186][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.051665][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.064784][T28718] usb 10-1: USB disconnect, device number 7 [ 567.112861][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.130027][T21735] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 567.167294][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.219433][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.253820][ T5970] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 567.270759][ T5970] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 567.309503][ T5970] usb 4-1: USB disconnect, device number 24 [ 567.324249][T21735] usb 3-1: Using ep0 maxpacket: 32 [ 567.338436][T21735] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 567.363003][T21735] usb 3-1: config 0 interface 0 has no altsetting 0 [ 567.380314][T21735] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 567.410553][T21735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.444061][T21735] usb 3-1: config 0 descriptor?? [ 567.529456][T28718] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 567.559843][ T5845] Bluetooth: hci6: command tx timeout [ 567.682767][T28718] usb 10-1: config 118 interface 0 has no altsetting 0 [ 567.694064][T28718] usb 10-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 567.714498][T28718] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.732966][T28718] usb 10-1: Product: syz [ 567.750174][T28718] usb 10-1: Manufacturer: syz [ 567.768702][T28718] usb 10-1: SerialNumber: syz [ 567.875449][T28757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.898216][T28757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.916436][T21735] usbhid 3-1:0.0: can't add hid device: -71 [ 567.942455][T21735] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 567.957150][T28844] netlink: 'syz.7.2125': attribute type 21 has an invalid length. [ 567.966690][T21735] usb 3-1: USB disconnect, device number 103 [ 568.024718][T28718] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 568.064781][T28718] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 568.080140][T28718] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 568.092369][T28718] usb 10-1: media controller created [ 568.118844][T28718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 568.179673][T28718] DVB: Unable to find symbol mt352_attach() [ 568.185921][T28718] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 568.197493][T28718] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input82 [ 568.213247][T28718] dvb-usb: schedule remote query interval to 100 msecs. [ 568.232202][T28718] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 568.241622][T28718] dvb_usb_m920x 10-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 568.254850][T28718] usb 10-1: USB disconnect, device number 8 [ 568.265095][ T5967] udevd[5967]: setting owner of /dev/bus/usb/010/008 to uid=0, gid=0 failed: No such file or directory [ 568.355255][T21735] m920x_read = error: -19 [ 568.363175][T21735] dvb-usb: error while querying for an remote control event. [ 568.479429][T21735] m920x_read = error: -19 [ 568.490672][T21735] dvb-usb: error while querying for an remote control event. [ 568.579393][T28718] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 568.600222][T21735] m920x_read = error: -19 [ 568.607476][T21735] dvb-usb: error while querying for an remote control event. [ 568.729448][T21735] m920x_read = error: -19 [ 568.738508][T21735] dvb-usb: error while querying for an remote control event. [ 568.760352][T28718] usb 10-1: config 118 interface 0 has no altsetting 0 [ 568.773442][T28718] usb 10-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 568.786091][T28718] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.804521][T28718] usb 10-1: Product: syz [ 568.812504][ T5970] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 568.819895][T28718] usb 10-1: Manufacturer: syz [ 568.824927][T28718] usb 10-1: SerialNumber: syz [ 568.869955][T21735] m920x_read = error: -19 [ 568.879227][T21735] dvb-usb: error while querying for an remote control event. [ 568.979406][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 568.986007][ T5970] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 568.998340][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.009860][T28719] m920x_read = error: -19 [ 569.015800][T28719] dvb-usb: error while querying for an remote control event. [ 569.024280][ T5970] usb 3-1: config 0 descriptor?? [ 569.044755][ T5970] gspca_main: sq930x-2.14.0 probing 041e:403c [ 569.112864][T28718] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 569.133273][T28718] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 569.151639][T21735] m920x_read = error: -19 [ 569.168344][T21735] dvb-usb: error while querying for an remote control event. [ 569.178184][T28718] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 569.195178][T28718] usb 10-1: media controller created [ 569.260446][T28944] netlink: 248 bytes leftover after parsing attributes in process `syz.9.2132'. [ 569.268615][T28718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.299570][T28719] m920x_read = error: -19 [ 569.304067][T28719] dvb-usb: error while querying for an remote control event. [ 569.385588][T28718] DVB: Unable to find symbol mt352_attach() [ 569.393619][T28718] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 569.406892][T28718] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input83 [ 569.424284][T28718] dvb-usb: schedule remote query interval to 100 msecs. [ 569.431465][ T5931] m920x_read = error: -19 [ 569.435889][ T5931] dvb-usb: error while querying for an remote control event. [ 569.444790][T21735] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 569.454539][T28718] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 569.466273][T28718] dvb_usb_m920x 10-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 569.494673][T28718] usb 10-1: USB disconnect, device number 9 [ 569.560571][ T5931] m920x_read = error: -19 [ 569.565680][ T5931] dvb-usb: error while querying for an remote control event. [ 569.573599][T28719] m920x_read = error: -19 [ 569.578116][T28719] dvb-usb: error while querying for an remote control event. [ 569.639700][ T5845] Bluetooth: hci6: command tx timeout [ 569.699485][T28719] m920x_read = error: -19 [ 569.703975][T28719] dvb-usb: error while querying for an remote control event. [ 569.711768][ T5931] m920x_read = error: -19 [ 569.716209][ T5931] dvb-usb: error while querying for an remote control event. [ 569.829475][ T5931] m920x_read = error: -19 [ 569.833982][ T5931] dvb-usb: error while querying for an remote control event. [ 569.841522][T21734] m920x_read = error: -19 [ 569.847037][T21734] dvb-usb: error while querying for an remote control event. [ 569.959473][T21734] m920x_read = error: -19 [ 569.967813][T21734] dvb-usb: error while querying for an remote control event. [ 569.976737][ T5931] m920x_read = error: -19 [ 569.989378][T28718] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 569.997970][ T5931] dvb-usb: error while querying for an remote control event. [ 570.109579][ T5931] m920x_read = error: -19 [ 570.121293][ T5931] dvb-usb: error while querying for an remote control event. [ 570.130296][T21734] m920x_read = error: -19 [ 570.135135][T21734] dvb-usb: error while querying for an remote control event. [ 570.159491][T28718] usb 10-1: Using ep0 maxpacket: 8 [ 570.166834][T28718] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 570.176545][T28718] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 570.185953][T28718] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 570.195543][T28718] usb 10-1: config 250 has no interface number 0 [ 570.202270][T28718] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 570.214338][T28718] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 570.228414][T28718] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 570.241924][T28718] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 570.252732][T21734] m920x_read = error: -19 [ 570.257442][T21734] dvb-usb: error while querying for an remote control event. [ 570.265196][ T5931] m920x_read = error: -19 [ 570.272824][ T5931] dvb-usb: error while querying for an remote control event. [ 570.287176][T28887] kvm: emulating exchange as write [ 570.297491][T28718] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 570.336851][T28718] usb 10-1: config 250 interface 228 has no altsetting 0 [ 570.347335][T28718] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 570.353485][ T5970] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 570.367229][ T5970] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 570.381614][T28718] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 570.387325][ T5970] usb 3-1: USB disconnect, device number 104 [ 570.392243][T28718] usb 10-1: Product: syz [ 570.401603][ T5931] m920x_read = error: -19 [ 570.406721][ T5931] dvb-usb: error while querying for an remote control event. [ 570.416278][T21734] m920x_read = error: -19 [ 570.421182][T21734] dvb-usb: error while querying for an remote control event. [ 570.428678][T28718] usb 10-1: SerialNumber: syz [ 570.452329][T28718] hub 10-1:250.228: bad descriptor, ignoring hub [ 570.462556][T28718] hub 10-1:250.228: probe with driver hub failed with error -5 [ 570.471212][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031c16800: rx timeout, send abort [ 570.482262][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031c16800: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 570.549824][T21734] m920x_read = error: -19 [ 570.558572][T21734] dvb-usb: error while querying for an remote control event. [ 570.566159][ T5931] m920x_read = error: -19 [ 570.571191][ T5931] dvb-usb: error while querying for an remote control event. [ 570.603377][T29003] overlay: ./file0 is not a directory [ 570.649825][T28718] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 570.699950][T28718] m920x_read = error: -19 [ 570.705223][T28718] dvb-usb: error while querying for an remote control event. [ 570.712791][ T5931] m920x_read = error: -19 [ 570.717664][ T5931] dvb-usb: error while querying for an remote control event. [ 570.839947][ T5931] m920x_read = error: -19 [ 570.844801][ T5931] dvb-usb: error while querying for an remote control event. [ 570.853141][T28718] m920x_read = error: -19 [ 570.862092][T28718] dvb-usb: error while querying for an remote control event. [ 570.920160][T21735] usb 4-1: device descriptor read/64, error -71 [ 570.991031][T28718] m920x_read = error: -19 [ 570.997676][T28718] dvb-usb: error while querying for an remote control event. [ 571.005265][ T5931] m920x_read = error: -19 [ 571.014607][ T5931] dvb-usb: error while querying for an remote control event. [ 571.129482][T28718] m920x_read = error: -19 [ 571.138310][T28718] dvb-usb: error while querying for an remote control event. [ 571.156409][ T5931] m920x_read = error: -19 [ 571.169359][ T5931] dvb-usb: error while querying for an remote control event. [ 571.182709][T21735] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 571.250111][T29045] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2138'. [ 571.259646][T29045] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2138'. [ 571.278689][T29045] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2138'. [ 571.293070][T28718] m920x_read = error: -19 [ 571.297654][T28718] dvb-usb: error while querying for an remote control event. [ 571.308431][ T5931] m920x_read = error: -19 [ 571.315986][ T5931] dvb-usb: error while querying for an remote control event. [ 571.333318][ T24] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 571.350106][T21735] usb 4-1: Using ep0 maxpacket: 8 [ 571.358154][T28964] usb 10-1: reset high-speed USB device number 10 using dummy_hcd [ 571.364853][T21735] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.385265][T21735] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.397661][T28964] usb 10-1: device reset changed ep0 maxpacket size! [ 571.419337][T21735] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.440348][ T5931] m920x_read = error: -19 [ 571.445649][ T5931] dvb-usb: error while querying for an remote control event. [ 571.453260][T28718] m920x_read = error: -19 [ 571.463431][ T55] usb 10-1: USB disconnect, device number 10 [ 571.464223][T21735] usb 4-1: config 0 interface 0 has no altsetting 0 [ 571.476432][T28718] dvb-usb: error while querying for an remote control event. [ 571.494732][ T55] usblp0: removed [ 571.500548][T21735] usb 4-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 571.501366][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 571.517394][T21735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.543443][ T24] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 571.569082][T21735] usb 4-1: config 0 descriptor?? [ 571.579810][ T24] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.599780][T28718] m920x_read = error: -19 [ 571.617818][T28718] dvb-usb: error while querying for an remote control event. [ 571.622101][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 571.625653][ T5931] m920x_read = error: -19 [ 571.640574][ T5931] dvb-usb: error while querying for an remote control event. [ 571.655650][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 571.666730][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.675467][ T55] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 571.690228][ T24] usb 3-1: config 0 descriptor?? [ 571.706133][T29032] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 571.720473][ T5845] Bluetooth: hci6: command tx timeout [ 571.749441][T28718] m920x_read = error: -19 [ 571.753937][T28718] dvb-usb: error while querying for an remote control event. [ 571.771077][T28718] m920x_read = error: -19 [ 571.781901][T28718] dvb-usb: error while querying for an remote control event. [ 571.839614][ T55] usb 10-1: Using ep0 maxpacket: 16 [ 571.847388][ T55] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 571.862754][ T55] usb 10-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 571.880614][T28718] m920x_read = error: -19 [ 571.884518][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.893601][T28718] dvb-usb: error while querying for an remote control event. [ 571.901173][ T5862] m920x_read = error: -19 [ 571.905646][ T5862] dvb-usb: error while querying for an remote control event. [ 571.919518][ T55] usb 10-1: Product: syz [ 571.929662][ T55] usb 10-1: Manufacturer: syz [ 571.940861][ T55] usb 10-1: SerialNumber: syz [ 572.019482][ T5862] m920x_read = error: -19 [ 572.027629][ T5862] dvb-usb: error while querying for an remote control event. [ 572.036950][T28718] m920x_read = error: -19 [ 572.049127][T28718] dvb-usb: error while querying for an remote control event. [ 572.162409][T28718] m920x_read = error: -19 [ 572.173531][T28718] dvb-usb: error while querying for an remote control event. [ 572.183053][ T5862] m920x_read = error: -19 [ 572.192769][ T5862] dvb-usb: error while querying for an remote control event. [ 572.213609][ T55] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 572.224564][T21735] hid_parser_main: 24 callbacks suppressed [ 572.224581][T21735] lg-g15 0003:046D:C22D.003C: unknown main item tag 0x5 [ 572.243274][ T55] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 572.260493][T21735] lg-g15 0003:046D:C22D.003C: unknown main item tag 0x1 [ 572.274035][T21735] lg-g15 0003:046D:C22D.003C: item fetching failed at offset 36/40 [ 572.290573][T21735] lg-g15 0003:046D:C22D.003C: probe with driver lg-g15 failed with error -22 [ 572.301103][ T55] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 572.319833][T28718] m920x_read = error: -19 [ 572.331541][T28718] dvb-usb: error while querying for an remote control event. [ 572.338840][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 572.355959][T28718] m920x_read = error: -19 [ 572.360478][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 572.377267][ T55] usb 10-1: USB disconnect, device number 11 [ 572.390072][T28718] dvb-usb: error while querying for an remote control event. [ 572.457018][ T24] usb 3-1: USB disconnect, device number 105 [ 572.482664][T28718] m920x_read = error: -19 [ 572.566993][T28718] dvb-usb: error while querying for an remote control event. [ 572.791415][ T5908] usb 4-1: USB disconnect, device number 26 [ 573.069754][T21735] m920x_read = error: -19 [ 573.078063][T21735] dvb-usb: error while querying for an remote control event. [ 573.181512][T28718] m920x_read = error: -19 [ 573.202766][T28718] dvb-usb: error while querying for an remote control event. [ 573.231966][T21735] m920x_read = error: -19 [ 573.241232][T21735] dvb-usb: error while querying for an remote control event. [ 573.350211][T28718] m920x_read = error: -19 [ 573.371225][T28718] dvb-usb: error while querying for an remote control event. [ 573.388151][T29142] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2145'. [ 573.413618][T28718] m920x_read = error: -19 [ 573.419241][T29144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.431503][T28718] dvb-usb: error while querying for an remote control event. [ 573.492369][T28718] m920x_read = error: -19 [ 573.506970][T28718] dvb-usb: error while querying for an remote control event. [ 573.569453][T28718] m920x_read = error: -19 [ 573.582456][T28718] dvb-usb: error while querying for an remote control event. [ 573.639597][T21735] m920x_read = error: -19 [ 573.656225][T21735] dvb-usb: error while querying for an remote control event. [ 573.759412][T28718] m920x_read = error: -19 [ 573.772826][T28718] dvb-usb: error while querying for an remote control event. [ 573.804685][T21735] m920x_read = error: -19 [ 573.808634][T29166] syzkaller1: entered promiscuous mode [ 573.829346][T21735] dvb-usb: error while querying for an remote control event. [ 573.838364][T29166] syzkaller1: entered allmulticast mode [ 573.886238][T29174] netlink: 'syz.2.2151': attribute type 29 has an invalid length. [ 573.899800][T28718] m920x_read = error: -19 [ 573.905320][T29174] netlink: 'syz.2.2151': attribute type 29 has an invalid length. [ 573.916072][T28718] dvb-usb: error while querying for an remote control event. [ 573.960220][T28718] m920x_read = error: -19 [ 573.966038][T28718] dvb-usb: error while querying for an remote control event. [ 574.040822][T21735] m920x_read = error: -19 [ 574.048374][T21735] dvb-usb: error while querying for an remote control event. [ 574.093038][T28718] m920x_read = error: -19 [ 574.102718][T28718] dvb-usb: error while querying for an remote control event. [ 574.170035][T28718] m920x_read = error: -19 [ 574.179413][T28718] dvb-usb: error while querying for an remote control event. [ 574.203997][T29182] netlink: 476 bytes leftover after parsing attributes in process `syz.2.2151'. [ 574.241120][T21735] m920x_read = error: -19 [ 574.249180][T21735] dvb-usb: error while querying for an remote control event. [ 574.315011][T28718] m920x_read = error: -19 [ 574.323345][T28718] dvb-usb: error while querying for an remote control event. [ 574.342541][T29174] nbd0: detected capacity change from 0 to 63 [ 574.380264][T28718] m920x_read = error: -19 [ 574.391533][T28718] dvb-usb: error while querying for an remote control event. [ 574.412194][ T5854] block nbd0: Receive control failed (result -32) [ 574.416212][ T5967] block nbd0: Send control failed (result -32) [ 574.420993][ T5845] block nbd0: Receive control failed (result -32) [ 574.445325][ T5967] block nbd0: Request send failed, requeueing [ 574.460493][T28718] m920x_read = error: -19 [ 574.472246][T28718] dvb-usb: error while querying for an remote control event. [ 574.495626][ T2008] block nbd0: Dead connection, failed to find a fallback [ 574.506590][ T2008] block nbd0: shutting down sockets [ 574.513342][ T2008] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.523725][ T5862] m920x_read = error: -19 [ 574.529710][ T2008] buffer_io_error: 27 callbacks suppressed [ 574.529735][ T2008] Buffer I/O error on dev nbd0, logical block 0, async page read [ 574.551419][ T5862] dvb-usb: error while querying for an remote control event. [ 574.562543][ T5967] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.613804][ T5967] Buffer I/O error on dev nbd0, logical block 1, async page read [ 574.631755][ T5967] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.640999][ T5967] Buffer I/O error on dev nbd0, logical block 2, async page read [ 574.649740][ T5967] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.658802][ T5967] Buffer I/O error on dev nbd0, logical block 3, async page read [ 574.666736][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.676053][ T5862] m920x_read = error: -19 [ 574.682557][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 574.692210][ T5862] dvb-usb: error while querying for an remote control event. [ 574.704341][T29192] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 574.712948][T28718] m920x_read = error: -19 [ 574.718274][ T5967] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.727527][T28718] dvb-usb: error while querying for an remote control event. [ 574.735836][ T5967] Buffer I/O error on dev nbd0, logical block 1, async page read [ 574.743873][ T5967] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.753069][ T5967] Buffer I/O error on dev nbd0, logical block 2, async page read [ 574.766233][ T5967] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.785976][ T5967] Buffer I/O error on dev nbd0, logical block 3, async page read [ 574.802487][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.826543][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 574.835021][T28718] m920x_read = error: -19 [ 574.842667][T28718] dvb-usb: error while querying for an remote control event. [ 574.850251][ T5862] m920x_read = error: -19 [ 574.859213][ T5862] dvb-usb: error while querying for an remote control event. [ 574.867809][ T5967] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.877818][ T5967] Buffer I/O error on dev nbd0, logical block 1, async page read [ 574.894878][ T5967] ldm_validate_partition_table(): Disk read failed. [ 574.904789][ T5967] Dev nbd0: unable to read RDB block 0 [ 574.924806][ T5967] nbd0: unable to read partition table [ 574.957118][ T5967] ldm_validate_partition_table(): Disk read failed. [ 574.967754][ T5967] Dev nbd0: unable to read RDB block 0 [ 574.976081][ T5967] nbd0: unable to read partition table [ 574.982371][ T5862] m920x_read = error: -19 [ 574.987963][ T5862] dvb-usb: error while querying for an remote control event. [ 574.996454][T28718] m920x_read = error: -19 [ 575.002643][T28718] dvb-usb: error while querying for an remote control event. [ 575.119435][T28718] m920x_read = error: -19 [ 575.124627][T28718] dvb-usb: error while querying for an remote control event. [ 575.133829][ T5862] m920x_read = error: -19 [ 575.149606][ T5862] dvb-usb: error while querying for an remote control event. [ 575.259671][ T5862] m920x_read = error: -19 [ 575.264371][ T5862] dvb-usb: error while querying for an remote control event. [ 575.272222][T21735] m920x_read = error: -19 [ 575.278295][T21735] dvb-usb: error while querying for an remote control event. [ 575.400452][ T5862] m920x_read = error: -19 [ 575.407423][ T5862] dvb-usb: error while querying for an remote control event. [ 575.423340][T21735] m920x_read = error: -19 [ 575.433316][T21735] dvb-usb: error while querying for an remote control event. [ 575.559549][T21735] m920x_read = error: -19 [ 575.569363][T21735] dvb-usb: error while querying for an remote control event. [ 575.576893][T21735] m920x_read = error: -19 [ 575.594596][T21735] dvb-usb: error while querying for an remote control event. [ 575.679480][T21735] m920x_read = error: -19 [ 575.688817][T21735] dvb-usb: error while querying for an remote control event. [ 575.720198][T21735] m920x_read = error: -19 [ 575.737192][T29191] netlink: 642 bytes leftover after parsing attributes in process `syz.2.2152'. [ 575.741914][T21735] dvb-usb: error while querying for an remote control event. [ 575.815489][T21735] m920x_read = error: -19 [ 575.834646][T21735] dvb-usb: error while querying for an remote control event. [ 575.869515][T21735] m920x_read = error: -19 [ 575.875422][T21735] dvb-usb: error while querying for an remote control event. [ 575.946476][T29244] binder: 29242:29244 ioctl c018620c 200000000080 returned -22 [ 575.969790][T28718] m920x_read = error: -19 [ 575.978764][T28718] dvb-usb: error while querying for an remote control event. [ 575.989390][ T5862] m920x_read = error: -19 [ 575.995715][ T5862] dvb-usb: error while querying for an remote control event. [ 576.132150][ T5862] m920x_read = error: -19 [ 576.141860][ T5862] dvb-usb: error while querying for an remote control event. [ 576.156790][ T5931] m920x_read = error: -19 [ 576.170752][ T5931] dvb-usb: error while querying for an remote control event. [ 576.209432][T21735] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 576.239069][T29253] kvm: Disabled LAPIC found during irq injection [ 576.279541][ T5931] m920x_read = error: -19 [ 576.284113][ T5931] dvb-usb: error while querying for an remote control event. [ 576.294260][T28718] m920x_read = error: -19 [ 576.300134][T28718] dvb-usb: error while querying for an remote control event. [ 576.339815][ T5908] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 576.361921][T21735] usb 4-1: device descriptor read/64, error -71 [ 576.409545][T28718] m920x_read = error: -19 [ 576.414462][T28718] dvb-usb: error while querying for an remote control event. [ 576.422763][ T5931] m920x_read = error: -19 [ 576.428066][ T5931] dvb-usb: error while querying for an remote control event. [ 576.490893][ T5908] usb 10-1: config 150 has an invalid interface number: 204 but max is 2 [ 576.509531][ T5908] usb 10-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 576.513708][ T5862] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 576.531199][ T5931] m920x_read = error: -19 [ 576.535782][ T5931] dvb-usb: error while querying for an remote control event. [ 576.547914][ T5908] usb 10-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 576.557522][ T5908] usb 10-1: config 150 has no interface number 0 [ 576.565708][ T5931] m920x_read = error: -19 [ 576.568003][ T5908] usb 10-1: config 150 interface 204 has no altsetting 0 [ 576.579550][ T5908] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 576.580872][ T5931] dvb-usb: error while querying for an remote control event. [ 576.588731][ T5908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.588753][ T5908] usb 10-1: Product: syz [ 576.588769][ T5908] usb 10-1: Manufacturer: syz [ 576.615113][ T5908] usb 10-1: SerialNumber: syz [ 576.629796][T21735] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 576.651037][ T5931] m920x_read = error: -19 [ 576.659338][ T5931] dvb-usb: error while querying for an remote control event. [ 576.689815][ T5862] usb 3-1: device descriptor read/64, error -71 [ 576.721341][ T5931] m920x_read = error: -19 [ 576.740156][ T5931] dvb-usb: error while querying for an remote control event. [ 576.780001][T21735] usb 4-1: device descriptor read/64, error -71 [ 576.791514][ T5931] m920x_read = error: -19 [ 576.795938][ T5931] dvb-usb: error while querying for an remote control event. [ 576.870400][ T5931] m920x_read = error: -19 [ 576.874803][ T5931] dvb-usb: error while querying for an remote control event. [ 576.886178][ T5931] usb 10-1: USB disconnect, device number 12 [ 576.900434][T21735] usb usb4-port1: attempt power cycle [ 576.921944][T21734] m920x_read = error: -19 [ 576.926346][T21734] dvb-usb: error while querying for an remote control event. [ 576.938426][ T5862] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 576.989565][T21734] m920x_read = error: -19 [ 576.994956][T21734] dvb-usb: error while querying for an remote control event. [ 577.059687][ T808] m920x_read = error: -19 [ 577.069733][ T808] dvb-usb: error while querying for an remote control event. [ 577.079947][ T5862] usb 3-1: device descriptor read/64, error -71 [ 577.119437][ T5931] m920x_read = error: -19 [ 577.123919][ T5931] dvb-usb: error while querying for an remote control event. [ 577.179416][ T5931] m920x_read = error: -19 [ 577.184091][ T5931] dvb-usb: error while querying for an remote control event. [ 577.195107][ T5862] usb usb3-port1: attempt power cycle [ 577.244517][ T808] m920x_read = error: -19 [ 577.250273][ T808] dvb-usb: error while querying for an remote control event. [ 577.260618][T21735] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 577.284965][T21735] usb 4-1: device descriptor read/8, error -71 [ 577.319715][ T808] m920x_read = error: -19 [ 577.331478][ T808] dvb-usb: error while querying for an remote control event. [ 577.359424][ T808] m920x_read = error: -19 [ 577.363910][ T808] dvb-usb: error while querying for an remote control event. [ 577.450286][ T5931] m920x_read = error: -19 [ 577.456846][ T5931] dvb-usb: error while querying for an remote control event. [ 577.489427][ T5931] m920x_read = error: -19 [ 577.497118][ T5931] dvb-usb: error while querying for an remote control event. [ 577.529764][T21735] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 577.549914][ T5862] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 577.570344][ T5931] m920x_read = error: -19 [ 577.578511][ T5931] dvb-usb: error while querying for an remote control event. [ 577.587344][T21735] usb 4-1: device descriptor read/8, error -71 [ 577.593695][ T5862] usb 3-1: device descriptor read/8, error -71 [ 577.607178][T29337] overlay: Unknown parameter 'fscontext' [ 577.641366][T21734] m920x_read = error: -19 [ 577.654521][T21734] dvb-usb: error while querying for an remote control event. [ 577.710304][T21734] m920x_read = error: -19 [ 577.717572][T21735] usb usb4-port1: unable to enumerate USB device [ 577.726136][T21734] dvb-usb: error while querying for an remote control event. [ 577.794014][T21734] m920x_read = error: -19 [ 577.809438][T21734] dvb-usb: error while querying for an remote control event. [ 577.840092][ T5862] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 577.859610][T21734] m920x_read = error: -19 [ 577.864883][T21734] dvb-usb: error while querying for an remote control event. [ 577.872819][ T5862] usb 3-1: device descriptor read/8, error -71 [ 577.920084][T21734] m920x_read = error: -19 [ 577.924684][T21734] dvb-usb: error while querying for an remote control event. [ 577.969560][ T5931] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 577.979415][T21734] m920x_read = error: -19 [ 577.983787][T21734] dvb-usb: error while querying for an remote control event. [ 577.991600][ T5862] usb usb3-port1: unable to enumerate USB device [ 578.044482][T21734] m920x_read = error: -19 [ 578.049529][T21734] dvb-usb: error while querying for an remote control event. [ 578.099920][T21734] m920x_read = error: -19 [ 578.104412][T21734] dvb-usb: error while querying for an remote control event. [ 578.119357][ T5931] usb 10-1: Using ep0 maxpacket: 8 [ 578.126635][ T5931] usb 10-1: unable to get BOS descriptor or descriptor too short [ 578.135524][ T5931] usb 10-1: config 5 has an invalid interface number: 56 but max is 2 [ 578.143766][ T5931] usb 10-1: config 5 has an invalid interface number: 56 but max is 2 [ 578.152237][ T5931] usb 10-1: config 5 has an invalid interface number: 69 but max is 2 [ 578.160560][T21734] m920x_read = error: -19 [ 578.165430][ T5931] usb 10-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 578.174813][T21734] dvb-usb: error while querying for an remote control event. [ 578.182404][ T5931] usb 10-1: config 5 has no interface number 0 [ 578.188601][ T5931] usb 10-1: config 5 has no interface number 1 [ 578.195047][ T5931] usb 10-1: config 5 interface 56 has no altsetting 0 [ 578.201887][ T5931] usb 10-1: config 5 interface 56 has no altsetting 1 [ 578.208664][ T5931] usb 10-1: config 5 interface 69 has no altsetting 0 [ 578.217617][ T5931] usb 10-1: New USB device found, idVendor=06f8, idProduct=3002, bcdDevice=ed.09 [ 578.226960][T21734] m920x_read = error: -19 [ 578.231383][ T5931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.239540][T21734] dvb-usb: error while querying for an remote control event. [ 578.247119][ T5931] usb 10-1: Product: syz [ 578.251506][ T5931] usb 10-1: Manufacturer: syz [ 578.256232][ T5931] usb 10-1: SerialNumber: syz [ 578.299583][T21734] m920x_read = error: -19 [ 578.304080][T21734] dvb-usb: error while querying for an remote control event. [ 578.369590][ T5862] m920x_read = error: -19 [ 578.374044][ T5862] dvb-usb: error while querying for an remote control event. [ 578.430951][ T5862] m920x_read = error: -19 [ 578.435370][ T5862] dvb-usb: error while querying for an remote control event. [ 578.480342][T29344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.493875][T29344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.500089][ T5862] m920x_read = error: -19 [ 578.511390][ T5862] dvb-usb: error while querying for an remote control event. [ 578.562255][ T5862] m920x_read = error: -19 [ 578.577024][ T5862] dvb-usb: error while querying for an remote control event. [ 578.596581][ T5931] usb 10-1: USB disconnect, device number 13 [ 578.619471][ T5862] m920x_read = error: -19 [ 578.626339][ T5862] dvb-usb: error while querying for an remote control event. [ 578.721310][ T5862] m920x_read = error: -19 [ 578.730383][ T5862] dvb-usb: error while querying for an remote control event. [ 578.762535][ T5862] m920x_read = error: -19 [ 578.767209][ T5862] dvb-usb: error while querying for an remote control event. [ 578.851040][ T5862] m920x_read = error: -19 [ 578.861425][ T5862] dvb-usb: error while querying for an remote control event. [ 578.890745][ T5862] m920x_read = error: -19 [ 578.895236][ T5862] dvb-usb: error while querying for an remote control event. [ 578.969432][ T5862] m920x_read = error: -19 [ 578.979084][ T5862] dvb-usb: error while querying for an remote control event. [ 579.009475][ T5862] m920x_read = error: -19 [ 579.019424][ T5862] dvb-usb: error while querying for an remote control event. [ 579.109524][ T5862] m920x_read = error: -19 [ 579.121989][ T5862] dvb-usb: error while querying for an remote control event. [ 579.149809][ T5862] m920x_read = error: -19 [ 579.159001][ T5862] dvb-usb: error while querying for an remote control event. [ 579.239422][ T5862] m920x_read = error: -19 [ 579.249715][ T5862] dvb-usb: error while querying for an remote control event. [ 579.291661][ T5862] m920x_read = error: -19 [ 579.305413][ T5862] dvb-usb: error while querying for an remote control event. [ 579.380696][ T5862] m920x_read = error: -19 [ 579.397132][ T5862] dvb-usb: error while querying for an remote control event. [ 579.449436][ T5862] m920x_read = error: -19 [ 579.454628][ T5862] dvb-usb: error while querying for an remote control event. [ 579.529761][ T5862] m920x_read = error: -19 [ 579.538003][ T5862] dvb-usb: error while querying for an remote control event. [ 579.570301][ T5862] m920x_read = error: -19 [ 579.585078][ T5862] dvb-usb: error while querying for an remote control event. [ 579.650925][ T5931] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 579.661317][ T808] m920x_read = error: -19 [ 579.665871][ T808] dvb-usb: error while querying for an remote control event. [ 579.719729][ T5862] m920x_read = error: -19 [ 579.725125][ T5862] dvb-usb: error while querying for an remote control event. [ 579.780284][ T5862] m920x_read = error: -19 [ 579.784702][ T5862] dvb-usb: error while querying for an remote control event. [ 579.800449][ T55] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 579.809381][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 579.816919][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 579.838313][ T5931] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 579.851719][ T5862] m920x_read = error: -19 [ 579.856406][ T5862] dvb-usb: error while querying for an remote control event. [ 579.864039][ T808] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 579.875630][ T5931] usb 4-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 579.885759][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.894123][ T5931] usb 4-1: Product: у [ 579.898300][ T5931] usb 4-1: Manufacturer: 王ᕋ䖷〽⋌췣о串閙П裦⒦ﴅ赔␐㜌麁ﳑ뿬ⴚꭼ趠䐌躚ꯧ⭟犏燸챣띙샞ഒᩉ罫ﰍᑨ槦䶄폾⋨崙蹭锛騠륁⫐唙昻⥦휫ᦉ쳟샛홲踓娹亷䠭첲蟨軆ꙑঘᬣ [ 579.923432][T21735] m920x_read = error: -19 [ 579.928134][T21735] dvb-usb: error while querying for an remote control event. [ 579.935811][ T5931] usb 4-1: SerialNumber: syz [ 579.964740][ T55] usb 10-1: unable to get BOS descriptor or descriptor too short [ 579.975503][ T55] usb 10-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice= 0.40 [ 579.985319][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.989932][T21735] m920x_read = error: -19 [ 579.998133][ T55] usb 10-1: Product: syz [ 579.998694][T21735] dvb-usb: error while querying for an remote control event. [ 580.009675][ T55] usb 10-1: Manufacturer: syz [ 580.014617][ T55] usb 10-1: SerialNumber: syz [ 580.032885][ T808] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 580.043260][T21735] m920x_read = error: -19 [ 580.047702][T21735] dvb-usb: error while querying for an remote control event. [ 580.055279][ T808] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 580.070521][ T808] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.080369][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.088416][ T808] usb 3-1: Product: ᆩ勓 [ 580.090171][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078d93c00: rx timeout, send abort [ 580.097135][ T808] usb 3-1: Manufacturer: ᨃ畡駧᭑顲亢썒帹Ҝ旜㥣ᩯ鹀緓™䬄㥘旇蛍獨壬⠭昍︔兀ᰎﴯ楃稥ꔼ싟辅ᝠ艾䄡䤚ᭂ뀇奄ꢋꡱᏪ슅膖툧ၰ㹐䦁聩㰮亼䷠쎶낄㾱皕 [ 580.110493][ T5854] Bluetooth: hci5: command 0x0406 tx timeout [ 580.129826][ T808] usb 3-1: SerialNumber: ї [ 580.140835][T21735] m920x_read = error: -19 [ 580.145597][T21735] dvb-usb: error while querying for an remote control event. [ 580.171711][ T5862] m920x_read = error: -19 [ 580.176919][ T5931] usb 4-1: found format II with max.bitrate = 64, frame size=9 [ 580.188331][ T5862] dvb-usb: error while querying for an remote control event. [ 580.197079][ T5931] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 580.205312][ T5931] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 580.272060][ T55] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 580.292912][ T5931] usb 4-1: USB disconnect, device number 31 [ 580.314707][ T5862] m920x_read = error: -19 [ 580.319160][ T5862] dvb-usb: error while querying for an remote control event. [ 580.328683][T21735] m920x_read = error: -19 [ 580.336379][T21735] dvb-usb: error while querying for an remote control event. [ 580.364684][ T55] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 580.379961][ T55] usb 10-1: USB disconnect, device number 14 [ 580.438239][T12600] udevd[12600]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 580.459858][ T5862] m920x_read = error: -19 [ 580.479862][ T5862] dvb-usb: error while querying for an remote control event. [ 580.492475][ T5862] m920x_read = error: -19 [ 580.500443][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.528778][ T5862] dvb-usb: error while querying for an remote control event. [ 580.601620][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078d93c00: abort rx timeout. Force session deactivation [ 580.612636][ T808] cdc_ncm 3-1:1.0: bind() failure [ 580.617888][ T5862] m920x_read = error: -19 [ 580.626753][ T5862] dvb-usb: error while querying for an remote control event. [ 580.645060][ T808] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 580.653669][T21735] m920x_read = error: -19 [ 580.658295][T21735] dvb-usb: error while querying for an remote control event. [ 580.666560][ T808] cdc_ncm 3-1:1.1: bind() failure [ 580.678285][ T808] usb 3-1: USB disconnect, device number 110 [ 580.760767][ T5931] m920x_read = error: -19 [ 580.775615][ T5931] dvb-usb: error while querying for an remote control event. [ 580.785892][T21735] m920x_read = error: -19 [ 580.806066][T21735] dvb-usb: error while querying for an remote control event. [ 580.909824][ T808] m920x_read = error: -19 [ 580.919815][ T808] dvb-usb: error while querying for an remote control event. [ 580.946114][ T808] m920x_read = error: -19 [ 580.962499][ T808] dvb-usb: error while querying for an remote control event. [ 581.050053][ T808] m920x_read = error: -19 [ 581.058180][ T808] dvb-usb: error while querying for an remote control event. [ 581.079566][ T808] m920x_read = error: -19 [ 581.084036][ T808] dvb-usb: error while querying for an remote control event. [ 581.184669][ T808] m920x_read = error: -19 [ 581.202120][ T808] dvb-usb: error while querying for an remote control event. [ 581.209846][T21735] m920x_read = error: -19 [ 581.214357][T21735] dvb-usb: error while querying for an remote control event. [ 581.239247][T29553] TCP: TCP_TX_DELAY enabled [ 581.332407][T29567] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2182'. [ 581.349424][ T808] m920x_read = error: -19 [ 581.358459][ T808] dvb-usb: error while querying for an remote control event. [ 581.369395][T21735] m920x_read = error: -19 [ 581.383270][T21735] dvb-usb: error while querying for an remote control event. [ 581.434920][T29579] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 581.466672][T29579] CIFS mount error: No usable UNC path provided in device string! [ 581.466672][T29579] [ 581.478272][T29579] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 581.489743][ T5908] kernel read not supported for file /radio0 (pid: 5908 comm: kworker/1:4) [ 581.499456][ T5931] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 581.522083][ T808] m920x_read = error: -19 [ 581.528990][ T808] dvb-usb: error while querying for an remote control event. [ 581.543181][T21735] m920x_read = error: -19 [ 581.547681][T21735] dvb-usb: error while querying for an remote control event. [ 581.559463][T29583] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 581.588577][T29584] fuse: Unknown parameter 'subj_role' [ 581.603231][T29583] mkiss: ax0: crc mode is auto. [ 581.652129][T21735] m920x_read = error: -19 [ 581.665932][T21735] dvb-usb: error while querying for an remote control event. [ 581.673511][T21734] m920x_read = error: -19 [ 581.685013][T29600] trusted_key: encrypted_key: insufficient parameters specified [ 581.685932][T21734] dvb-usb: error while querying for an remote control event. [ 581.700843][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 581.719339][ T5931] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 581.727613][ T5931] usb 3-1: config 0 has no interface number 0 [ 581.737210][ T5931] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 581.747422][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.757141][ T5931] usb 3-1: Product: syz [ 581.761615][ T5931] usb 3-1: Manufacturer: syz [ 581.766307][ T5931] usb 3-1: SerialNumber: syz [ 581.776012][ T5931] usb 3-1: config 0 descriptor?? [ 581.809611][T21734] m920x_read = error: -19 [ 581.822127][T29606] blkio.reset_stats is deprecated [ 581.822678][T21734] dvb-usb: error while querying for an remote control event. [ 581.836316][ T808] m920x_read = error: -19 [ 581.845136][ T808] dvb-usb: error while querying for an remote control event. [ 581.917279][T29612] netlink: 'syz.3.2190': attribute type 10 has an invalid length. [ 581.925745][T29612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2190'. [ 581.936913][T29612] bridge0: port 3(dummy0) entered blocking state [ 581.943832][T29612] bridge0: port 3(dummy0) entered disabled state [ 581.952925][T29612] dummy0: entered allmulticast mode [ 581.967421][T29612] dummy0: entered promiscuous mode [ 581.972866][T21734] m920x_read = error: -19 [ 581.977317][T21734] dvb-usb: error while querying for an remote control event. [ 581.986084][ T808] m920x_read = error: -19 [ 581.992687][ T808] dvb-usb: error while querying for an remote control event. [ 582.000384][T29612] bridge0: port 3(dummy0) entered blocking state [ 582.006860][T29612] bridge0: port 3(dummy0) entered forwarding state [ 582.109792][ T808] m920x_read = error: -19 [ 582.115487][ T808] dvb-usb: error while querying for an remote control event. [ 582.123206][T21734] m920x_read = error: -19 [ 582.127599][T21734] dvb-usb: error while querying for an remote control event. [ 582.221496][ T5931] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 582.232461][ T5931] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 582.241790][T21734] m920x_read = error: -19 [ 582.246276][T21734] dvb-usb: error while querying for an remote control event. [ 582.253861][ T808] m920x_read = error: -19 [ 582.259043][ T808] dvb-usb: error while querying for an remote control event. [ 582.369564][ T808] m920x_read = error: -19 [ 582.374135][ T808] dvb-usb: error while querying for an remote control event. [ 582.381717][T21734] m920x_read = error: -19 [ 582.386265][T21734] dvb-usb: error while querying for an remote control event. [ 582.489407][T21734] m920x_read = error: -19 [ 582.493822][T21734] dvb-usb: error while querying for an remote control event. [ 582.501464][ T808] m920x_read = error: -19 [ 582.505942][ T808] dvb-usb: error while querying for an remote control event. [ 582.611035][ T808] m920x_read = error: -19 [ 582.615521][ T808] dvb-usb: error while querying for an remote control event. [ 582.623146][T21735] m920x_read = error: -19 [ 582.627568][T21735] dvb-usb: error while querying for an remote control event. [ 582.739555][T21735] m920x_read = error: -19 [ 582.744120][T21735] dvb-usb: error while querying for an remote control event. [ 582.752378][ T808] m920x_read = error: -19 [ 582.762050][ T808] dvb-usb: error while querying for an remote control event. [ 582.869427][ T808] m920x_read = error: -19 [ 582.874860][ T808] dvb-usb: error while querying for an remote control event. [ 582.882485][T21734] m920x_read = error: -19 [ 582.886892][T21734] dvb-usb: error while querying for an remote control event. [ 582.989926][ T808] m920x_read = error: -19 [ 582.994426][ T808] dvb-usb: error while querying for an remote control event. [ 583.002072][T21734] m920x_read = error: -19 [ 583.006539][T21734] dvb-usb: error while querying for an remote control event. [ 583.049368][ T5908] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 583.109393][T21734] m920x_read = error: -19 [ 583.113762][T21734] dvb-usb: error while querying for an remote control event. [ 583.121356][ T808] m920x_read = error: -19 [ 583.125880][ T808] dvb-usb: error while querying for an remote control event. [ 583.202288][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 583.211140][ T5908] usb 4-1: config 194 has an invalid interface number: 50 but max is 0 [ 583.219685][ T5908] usb 4-1: config 194 has no interface number 0 [ 583.225998][ T5908] usb 4-1: config 194 interface 50 has no altsetting 0 [ 583.229761][ T808] m920x_read = error: -19 [ 583.237667][ T808] dvb-usb: error while querying for an remote control event. [ 583.239927][ T5908] usb 4-1: string descriptor 0 read error: -22 [ 583.245837][T21734] m920x_read = error: -19 [ 583.252339][ T5908] usb 4-1: New USB device found, idVendor=0b84, idProduct=2791, bcdDevice=9d.87 [ 583.257053][T21734] dvb-usb: error while querying for an remote control event. [ 583.265137][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.359534][T21734] m920x_read = error: -19 [ 583.364083][T21734] dvb-usb: error while querying for an remote control event. [ 583.379477][T21734] m920x_read = error: -19 [ 583.384718][T21734] dvb-usb: error while querying for an remote control event. [ 583.479471][T21734] m920x_read = error: -19 [ 583.483991][T21734] dvb-usb: error while querying for an remote control event. [ 583.495113][ T5908] usb 4-1: USB disconnect, device number 32 [ 583.499888][T21734] m920x_read = error: -19 [ 583.506350][T21734] dvb-usb: error while querying for an remote control event. [ 583.599420][T21734] m920x_read = error: -19 [ 583.603828][T21734] dvb-usb: error while querying for an remote control event. [ 583.619484][T21734] m920x_read = error: -19 [ 583.624227][T21734] dvb-usb: error while querying for an remote control event. [ 583.719454][T21734] m920x_read = error: -19 [ 583.723871][T21734] dvb-usb: error while querying for an remote control event. [ 583.739498][T21734] m920x_read = error: -19 [ 583.744902][T21734] dvb-usb: error while querying for an remote control event. [ 583.839436][T21734] m920x_read = error: -19 [ 583.843975][T21734] dvb-usb: error while querying for an remote control event. [ 583.859536][T21734] m920x_read = error: -19 [ 583.865964][T21734] dvb-usb: error while querying for an remote control event. [ 583.942753][ T5931] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 583.955823][ T5931] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 583.964611][T21734] m920x_read = error: -19 [ 583.969193][T21734] dvb-usb: error while querying for an remote control event. [ 583.980478][ T808] m920x_read = error: -19 [ 583.986833][ T5931] usb 3-1: USB disconnect, device number 111 [ 583.993812][ T808] dvb-usb: error while querying for an remote control event. [ 584.082079][T29648] binder: BINDER_SET_CONTEXT_MGR already set [ 584.088242][T29648] binder: 29647:29648 ioctl 4018620d 200000000000 returned -16 [ 584.109564][T21734] m920x_read = error: -19 [ 584.115459][T21734] dvb-usb: error while querying for an remote control event. [ 584.125088][ T808] m920x_read = error: -19 [ 584.132024][ T808] dvb-usb: error while querying for an remote control event. [ 584.149539][T29652] binder: 29647:29652 ioctl 80087601 200000000080 returned -22 [ 584.241162][ T5931] m920x_read = error: -19 [ 584.245703][ T5931] dvb-usb: error while querying for an remote control event. [ 584.253482][ T808] m920x_read = error: -19 [ 584.257921][ T808] dvb-usb: error while querying for an remote control event. [ 584.360174][ T808] m920x_read = error: -19 [ 584.364604][ T808] dvb-usb: error while querying for an remote control event. [ 584.372228][ T5931] m920x_read = error: -19 [ 584.376776][ T5931] dvb-usb: error while querying for an remote control event. [ 584.491306][ T5931] m920x_read = error: -19 [ 584.497743][ T5931] dvb-usb: error while querying for an remote control event. [ 584.505274][ T808] m920x_read = error: -19 [ 584.510960][ T808] dvb-usb: error while querying for an remote control event. [ 584.530936][T29662] binder: 29661:29662 ioctl c0306201 200000000080 returned -14 [ 584.541568][T29662] binder: 29661:29662 ioctl c0306201 2000000003c0 returned -14 [ 584.552765][T29662] : renamed from virt_wifi0 [ 584.593098][ T5931] [ 584.595482][ T5931] ====================================================== [ 584.602546][ T5931] WARNING: possible circular locking dependency detected [ 584.609580][ T5931] syzkaller #0 Tainted: G L [ 584.615570][ T5931] ------------------------------------------------------ [ 584.622597][ T5931] kworker/0:7/5931 is trying to acquire lock: [ 584.628683][ T5931] ffffffff8ea839e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 584.638545][ T5931] [ 584.638545][ T5931] but task is already holding lock: [ 584.645908][ T5931] ffffffff901a5b40 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 584.656427][ T5931] [ 584.656427][ T5931] which lock already depends on the new lock. [ 584.656427][ T5931] [ 584.666833][ T5931] [ 584.666833][ T5931] the existing dependency chain (in reverse order) is: [ 584.675843][ T5931] [ 584.675843][ T5931] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 584.683659][ T5931] __mutex_lock+0x19e/0x1420 [ 584.688782][ T5931] kobject_uevent_net_broadcast+0x27e/0x560 [ 584.695222][ T5931] kobject_uevent_env+0x55c/0x9e0 [ 584.700777][ T5931] device_add+0x557/0xb70 [ 584.705657][ T5931] device_create+0x269/0x300 [ 584.710788][ T5931] msr_device_create+0x33/0x50 [ 584.716101][ T5931] cpuhp_invoke_callback+0x445/0x860 [ 584.721929][ T5931] cpuhp_thread_fun+0x36b/0x780 [ 584.727317][ T5931] smpboot_thread_fn+0x541/0xa50 [ 584.732807][ T5931] kthread+0x388/0x470 [ 584.737404][ T5931] ret_from_fork+0x514/0xb70 [ 584.742528][ T5931] ret_from_fork_asm+0x1a/0x30 [ 584.747867][ T5931] [ 584.747867][ T5931] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 584.755437][ T5931] cpuhp_thread_fun+0x127/0x780 [ 584.760813][ T5931] smpboot_thread_fn+0x541/0xa50 [ 584.766271][ T5931] kthread+0x388/0x470 [ 584.770882][ T5931] ret_from_fork+0x514/0xb70 [ 584.776006][ T5931] ret_from_fork_asm+0x1a/0x30 [ 584.781293][ T5931] [ 584.781293][ T5931] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 584.789023][ T5931] cpus_read_lock+0x42/0x160 [ 584.794144][ T5931] static_key_disable+0x12/0x20 [ 584.799554][ T5931] __inet_hash_connect+0x25bb/0x25c0 [ 584.805363][ T5931] tcp_v4_connect+0xd5f/0x19b0 [ 584.810653][ T5931] __inet_stream_connect+0x25a/0xdd0 [ 584.816467][ T5931] inet_stream_connect+0x66/0xa0 [ 584.821932][ T5931] __sys_connect+0x312/0x450 [ 584.827051][ T5931] __x64_sys_connect+0x7a/0x90 [ 584.832360][ T5931] do_syscall_64+0x15f/0xf80 [ 584.837499][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.843925][ T5931] [ 584.843925][ T5931] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 584.851584][ T5931] lock_sock_nested+0x41/0x100 [ 584.856886][ T5931] inet_shutdown+0x6a/0x390 [ 584.861940][ T5931] nbd_mark_nsock_dead+0x2e9/0x560 [ 584.867586][ T5931] sock_shutdown+0x15e/0x260 [ 584.872717][ T5931] nbd_clear_sock+0x24/0x170 [ 584.877847][ T5931] nbd_config_put+0x2dd/0x580 [ 584.883050][ T5931] nbd_release+0xfe/0x140 [ 584.887944][ T5931] bdev_release+0x536/0x650 [ 584.892976][ T5931] blkdev_release+0x15/0x20 [ 584.898001][ T5931] __fput+0x44f/0xa60 [ 584.902513][ T5931] task_work_run+0x1d9/0x270 [ 584.907633][ T5931] exit_to_user_mode_loop+0xed/0x480 [ 584.913447][ T5931] do_syscall_64+0x33e/0xf80 [ 584.918572][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.925001][ T5931] [ 584.925001][ T5931] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 584.932649][ T5931] __mutex_lock+0x19e/0x1420 [ 584.937769][ T5931] nbd_queue_rq+0x37b/0x1100 [ 584.942911][ T5931] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 584.948995][ T5931] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 584.955855][ T5931] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 584.962367][ T5931] blk_mq_run_hw_queue+0x348/0x4f0 [ 584.968020][ T5931] blk_mq_dispatch_list+0xd16/0xe10 [ 584.973752][ T5931] blk_mq_flush_plug_list+0x48d/0x570 [ 584.979655][ T5931] __blk_flush_plug+0x3ed/0x4d0 [ 584.985036][ T5931] __submit_bio+0x28d/0x580 [ 584.990066][ T5931] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 584.996225][ T5931] block_read_full_folio+0x599/0x830 [ 585.002041][ T5931] filemap_read_folio+0x137/0x3b0 [ 585.007590][ T5931] do_read_cache_folio+0x358/0x590 [ 585.013246][ T5931] read_part_sector+0xb6/0x2b0 [ 585.018575][ T5931] adfspart_check_ICS+0xb1/0x960 [ 585.024040][ T5931] bdev_disk_changed+0x817/0x1770 [ 585.029596][ T5931] blkdev_get_whole+0x380/0x510 [ 585.034990][ T5931] bdev_open+0x31e/0xd30 [ 585.039768][ T5931] blkdev_open+0x470/0x610 [ 585.044715][ T5931] do_dentry_open+0x785/0x14e0 [ 585.050013][ T5931] vfs_open+0x3b/0x340 [ 585.054625][ T5931] path_openat+0x2e08/0x3860 [ 585.059740][ T5931] do_file_open+0x23e/0x4a0 [ 585.064793][ T5931] do_sys_openat2+0x113/0x200 [ 585.070010][ T5931] __x64_sys_openat+0x138/0x170 [ 585.075400][ T5931] do_syscall_64+0x15f/0xf80 [ 585.080531][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.086961][ T5931] [ 585.086961][ T5931] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 585.094178][ T5931] __mutex_lock+0x19e/0x1420 [ 585.099319][ T5931] nbd_queue_rq+0xc6/0x1100 [ 585.104357][ T5931] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 585.110433][ T5931] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 585.117294][ T5931] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 585.123802][ T5931] blk_mq_run_hw_queue+0x348/0x4f0 [ 585.129445][ T5931] blk_mq_dispatch_list+0xd16/0xe10 [ 585.135180][ T5931] blk_mq_flush_plug_list+0x48d/0x570 [ 585.141081][ T5931] __blk_flush_plug+0x3ed/0x4d0 [ 585.146472][ T5931] __submit_bio+0x28d/0x580 [ 585.151511][ T5931] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 585.157690][ T5931] block_read_full_folio+0x599/0x830 [ 585.163510][ T5931] filemap_read_folio+0x137/0x3b0 [ 585.169061][ T5931] do_read_cache_folio+0x358/0x590 [ 585.174718][ T5931] read_part_sector+0xb6/0x2b0 [ 585.180017][ T5931] adfspart_check_ICS+0xb1/0x960 [ 585.185514][ T5931] bdev_disk_changed+0x817/0x1770 [ 585.191067][ T5931] blkdev_get_whole+0x380/0x510 [ 585.196453][ T5931] bdev_open+0x31e/0xd30 [ 585.201315][ T5931] blkdev_open+0x470/0x610 [ 585.206258][ T5931] do_dentry_open+0x785/0x14e0 [ 585.211546][ T5931] vfs_open+0x3b/0x340 [ 585.216143][ T5931] path_openat+0x2e08/0x3860 [ 585.221262][ T5931] do_file_open+0x23e/0x4a0 [ 585.226319][ T5931] do_sys_openat2+0x113/0x200 [ 585.231527][ T5931] __x64_sys_openat+0x138/0x170 [ 585.236910][ T5931] do_syscall_64+0x15f/0xf80 [ 585.242039][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.248454][ T5931] [ 585.248454][ T5931] -> #3 (set->srcu){.+.+}-{0:0}: [ 585.255620][ T5931] __synchronize_srcu+0xca/0x300 [ 585.261090][ T5931] elevator_switch+0x1e8/0x7a0 [ 585.266380][ T5931] elevator_change+0x2cc/0x450 [ 585.271672][ T5931] elevator_set_default+0x36c/0x430 [ 585.277400][ T5931] blk_register_queue+0x3e9/0x4e0 [ 585.282954][ T5931] __add_disk+0x677/0xd50 [ 585.287816][ T5931] add_disk_fwnode+0xfb/0x480 [ 585.293019][ T5931] nbd_dev_add+0x72c/0xb50 [ 585.297965][ T5931] nbd_init+0x168/0x1f0 [ 585.302648][ T5931] do_one_initcall+0x250/0x870 [ 585.307945][ T5931] do_initcall_level+0x104/0x190 [ 585.313499][ T5931] do_initcalls+0x59/0xa0 [ 585.318354][ T5931] kernel_init_freeable+0x2a6/0x3e0 [ 585.324084][ T5931] kernel_init+0x1d/0x1d0 [ 585.328948][ T5931] ret_from_fork+0x514/0xb70 [ 585.334084][ T5931] ret_from_fork_asm+0x1a/0x30 [ 585.339378][ T5931] [ 585.339378][ T5931] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 585.347201][ T5931] __mutex_lock+0x19e/0x1420 [ 585.352323][ T5931] elevator_change+0x1b3/0x450 [ 585.357659][ T5931] elevator_set_none+0xb5/0x140 [ 585.363044][ T5931] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 585.369379][ T5931] nbd_start_device+0x17f/0xb10 [ 585.374760][ T5931] nbd_genl_connect+0x165b/0x1cf0 [ 585.380314][ T5931] genl_family_rcv_msg_doit+0x22a/0x330 [ 585.386398][ T5931] genl_rcv_msg+0x61c/0x7a0 [ 585.391425][ T5931] netlink_rcv_skb+0x232/0x4b0 [ 585.396717][ T5931] genl_rcv+0x28/0x40 [ 585.401237][ T5931] netlink_unicast+0x80f/0x9b0 [ 585.406573][ T5931] netlink_sendmsg+0x813/0xb40 [ 585.411863][ T5931] ____sys_sendmsg+0x972/0x9f0 [ 585.417164][ T5931] ___sys_sendmsg+0x2a5/0x360 [ 585.422378][ T5931] __x64_sys_sendmsg+0x1bd/0x2a0 [ 585.427857][ T5931] do_syscall_64+0x15f/0xf80 [ 585.433005][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.439439][ T5931] [ 585.439439][ T5931] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 585.448057][ T5931] blk_alloc_queue+0x546/0x680 [ 585.453357][ T5931] __blk_mq_alloc_disk+0x197/0x390 [ 585.459000][ T5931] nbd_dev_add+0x499/0xb50 [ 585.463946][ T5931] nbd_init+0x168/0x1f0 [ 585.468636][ T5931] do_one_initcall+0x250/0x870 [ 585.473938][ T5931] do_initcall_level+0x104/0x190 [ 585.479416][ T5931] do_initcalls+0x59/0xa0 [ 585.484278][ T5931] kernel_init_freeable+0x2a6/0x3e0 [ 585.490003][ T5931] kernel_init+0x1d/0x1d0 [ 585.494896][ T5931] ret_from_fork+0x514/0xb70 [ 585.500024][ T5931] ret_from_fork_asm+0x1a/0x30 [ 585.505311][ T5931] [ 585.505311][ T5931] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 585.512538][ T5931] __lock_acquire+0x15a5/0x2cf0 [ 585.517927][ T5931] lock_acquire+0x106/0x350 [ 585.522959][ T5931] fs_reclaim_acquire+0x71/0x100 [ 585.528423][ T5931] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 585.534788][ T5931] __alloc_skb+0x1d0/0x7d0 [ 585.539746][ T5931] alloc_uevent_skb+0x7d/0x230 [ 585.545044][ T5931] kobject_uevent_net_broadcast+0x2fa/0x560 [ 585.551485][ T5931] kobject_uevent_env+0x55c/0x9e0 [ 585.557032][ T5931] kvm_uevent_notify_change+0x300/0x3a0 [ 585.563111][ T5931] kvm_put_kvm+0xaa/0xa50 [ 585.567990][ T5931] kvm_vcpu_release+0x54/0x60 [ 585.573195][ T5931] __fput+0x44f/0xa60 [ 585.577714][ T5931] delayed_fput+0x63/0xa0 [ 585.582569][ T5931] process_scheduled_works+0xb5d/0x1860 [ 585.588646][ T5931] worker_thread+0xa53/0xfc0 [ 585.593788][ T5931] kthread+0x388/0x470 [ 585.598381][ T5931] ret_from_fork+0x514/0xb70 [ 585.603503][ T5931] ret_from_fork_asm+0x1a/0x30 [ 585.608791][ T5931] [ 585.608791][ T5931] other info that might help us debug this: [ 585.608791][ T5931] [ 585.619023][ T5931] Chain exists of: [ 585.619023][ T5931] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 585.619023][ T5931] [ 585.631724][ T5931] Possible unsafe locking scenario: [ 585.631724][ T5931] [ 585.639179][ T5931] CPU0 CPU1 [ 585.644551][ T5931] ---- ---- [ 585.649929][ T5931] lock(uevent_sock_mutex); [ 585.654526][ T5931] lock(cpuhp_state-up); [ 585.661384][ T5931] lock(uevent_sock_mutex); [ 585.668509][ T5931] lock(fs_reclaim); [ 585.672494][ T5931] [ 585.672494][ T5931] *** DEADLOCK *** [ 585.672494][ T5931] [ 585.680659][ T5931] 3 locks held by kworker/0:7/5931: [ 585.685879][ T5931] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 585.696885][ T5931] #1: ffffc90004cc7c40 ((delayed_fput_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 585.708117][ T5931] #2: ffffffff901a5b40 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 585.719089][ T5931] [ 585.719089][ T5931] stack backtrace: [ 585.725000][ T5931] CPU: 0 UID: 0 PID: 5931 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.725021][ T5931] Tainted: [L]=SOFTLOCKUP [ 585.725027][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 585.725037][ T5931] Workqueue: events delayed_fput [ 585.725063][ T5931] Call Trace: [ 585.725069][ T5931] [ 585.725075][ T5931] dump_stack_lvl+0xe8/0x150 [ 585.725096][ T5931] print_circular_bug+0x2e1/0x300 [ 585.725113][ T5931] check_noncircular+0x12e/0x150 [ 585.725133][ T5931] __lock_acquire+0x15a5/0x2cf0 [ 585.725154][ T5931] ? lockdep_unlock+0x5d/0xd0 [ 585.725171][ T5931] ? __lock_acquire+0x146e/0x2cf0 [ 585.725191][ T5931] ? __mutex_trylock_common+0x158/0x260 [ 585.725209][ T5931] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 585.725230][ T5931] lock_acquire+0x106/0x350 [ 585.725248][ T5931] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 585.725270][ T5931] ? lock_acquire+0x106/0x350 [ 585.725291][ T5931] fs_reclaim_acquire+0x71/0x100 [ 585.725304][ T5931] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 585.725324][ T5931] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 585.725346][ T5931] ? __alloc_skb+0x1d0/0x7d0 [ 585.725360][ T5931] ? __local_bh_enable_ip+0xd0/0x130 [ 585.725382][ T5931] __alloc_skb+0x1d0/0x7d0 [ 585.725398][ T5931] alloc_uevent_skb+0x7d/0x230 [ 585.725413][ T5931] kobject_uevent_net_broadcast+0x2fa/0x560 [ 585.725430][ T5931] kobject_uevent_env+0x55c/0x9e0 [ 585.725446][ T5931] kvm_uevent_notify_change+0x300/0x3a0 [ 585.725468][ T5931] ? __pfx_kvm_vcpu_release+0x10/0x10 [ 585.725483][ T5931] kvm_put_kvm+0xaa/0xa50 [ 585.725506][ T5931] ? __pfx_kvm_vcpu_release+0x10/0x10 [ 585.725521][ T5931] kvm_vcpu_release+0x54/0x60 [ 585.725536][ T5931] __fput+0x44f/0xa60 [ 585.725557][ T5931] delayed_fput+0x63/0xa0 [ 585.725574][ T5931] ? process_scheduled_works+0xa70/0x1860 [ 585.725594][ T5931] process_scheduled_works+0xb5d/0x1860 [ 585.725624][ T5931] ? __pfx_process_scheduled_works+0x10/0x10 [ 585.725646][ T5931] ? assign_work+0x3d5/0x5e0 [ 585.725666][ T5931] worker_thread+0xa53/0xfc0 [ 585.725695][ T5931] kthread+0x388/0x470 [ 585.725710][ T5931] ? __pfx_worker_thread+0x10/0x10 [ 585.725729][ T5931] ? __pfx_kthread+0x10/0x10 [ 585.725744][ T5931] ret_from_fork+0x514/0xb70 [ 585.725765][ T5931] ? __pfx_ret_from_fork+0x10/0x10 [ 585.725784][ T5931] ? __switch_to+0xc79/0x1410 [ 585.725802][ T5931] ? __pfx_kthread+0x10/0x10 [ 585.725816][ T5931] ret_from_fork_asm+0x1a/0x30 [ 585.725834][ T5931] [ 585.968550][ T5908] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 585.976581][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 585.977743][ T808] m920x_read = error: -19 [ 585.987999][ T808] dvb-usb: error while querying for an remote control event. [ 585.995438][ T808] m920x_read = error: -19 [ 585.999809][ T808] dvb-usb: error while querying for an remote control event. [ 586.120630][T21734] m920x_read = error: -19 [ 586.125025][T21734] dvb-usb: error while querying for an remote control event. [ 586.132441][ T5908] usb 3-1: device descriptor read/64, error -32 [ 586.132550][T21734] m920x_read = error: -19 [ 586.143091][T21734] dvb-usb: error while querying for an remote control event. [ 586.241430][T21734] m920x_read = error: -19 [ 586.245811][T21734] dvb-usb: error while querying for an remote control event. [ 586.262873][T21734] m920x_read = error: -19 [ 586.269327][T21734] dvb-usb: error while querying for an remote control event. [ 586.369704][ T5931] m920x_read = error: -19 [ 586.374048][ T5931] dvb-usb: error while querying for an remote control event. [ 586.379540][ T5908] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 586.385308][ T5931] m920x_read = error: -19 [ 586.396251][ T5931] dvb-usb: error while querying for an remote control event. [ 586.500859][ T5931] m920x_read = error: -19 [ 586.505425][ T5931] dvb-usb: error while querying for an remote control event. [ 586.513318][T21734] m920x_read = error: -19 [ 586.517894][T21734] dvb-usb: error while querying for an remote control event. [ 586.629392][T21734] m920x_read = error: -19 [ 586.633768][T21734] dvb-usb: error while querying for an remote control event. [ 586.641826][T21735] m920x_read = error: -19 [ 586.646201][T21735] dvb-usb: error while querying for an remote control event. [ 586.741031][ T13] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.759845][T21735] m920x_read = error: -19 [ 586.764797][T21735] dvb-usb: error while querying for an remote control event. [ 586.774056][T21734] m920x_read = error: -19 [ 586.778448][T21734] dvb-usb: error while querying for an remote control event. [ 586.786749][ T13] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.833554][ T13] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.872836][ T13] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.889973][T21734] m920x_read = error: -19 [ 586.894351][T21734] dvb-usb: error while querying for an remote control event. [ 586.902396][T21735] m920x_read = error: -19 [ 586.906741][T21735] dvb-usb: error while querying for an remote control event. [ 587.017087][ T13] bridge_slave_1: left allmulticast mode [ 587.022987][T21734] m920x_read = error: -19 [ 587.027823][T21734] dvb-usb: error while querying for an remote control event. [ 587.035307][ T5931] m920x_read = error: -19 [ 587.041019][ T13] bridge_slave_1: left promiscuous mode [ 587.046839][ T5931] dvb-usb: error while querying for an remote control event. [ 587.047744][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.062830][ T13] bridge_slave_0: left allmulticast mode [ 587.068470][ T13] bridge_slave_0: left promiscuous mode [ 587.075028][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.169419][ T5931] m920x_read = error: -19 [ 587.174543][ T5931] dvb-usb: error while querying for an remote control event. [ 587.182110][ T808] m920x_read = error: -19 [ 587.186514][ T808] dvb-usb: error while querying for an remote control event. [ 587.221337][ T13] team0: Port device bond0 removed [ 587.227625][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.250907][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.260795][ T13] bond0 (unregistering): Released all slaves [ 587.299435][ T808] m920x_read = error: -19 [ 587.303837][ T808] dvb-usb: error while querying for an remote control event. [ 587.312258][T21734] m920x_read = error: -19 [ 587.324222][T21734] dvb-usb: error while querying for an remote control event. [ 587.419426][T21734] m920x_read = error: -19 [ 587.423883][T21734] dvb-usb: error while querying for an remote control event. [ 587.451111][T21734] m920x_read = error: -19 [ 587.459347][T21734] dvb-usb: error while querying for an remote control event. [ 587.552709][T21734] m920x_read = error: -19 [ 587.560634][T21734] dvb-usb: error while querying for an remote control event. [ 587.569897][T21734] m920x_read = error: -19 [ 587.579335][T21734] dvb-usb: error while querying for an remote control event. [ 587.637063][ T13] hsr_slave_0: left promiscuous mode [ 587.642902][ T13] hsr_slave_1: left promiscuous mode [ 587.648661][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.658780][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.669680][T21734] m920x_read = error: -19 [ 587.676345][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.676857][T21734] dvb-usb: error while querying for an remote control event. [ 587.693326][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.701259][T21734] m920x_read = error: -19 [ 587.705717][T21734] dvb-usb: error while querying for an remote control event. [ 587.715057][ T13] veth1_macvtap: left promiscuous mode [ 587.720729][ T13] veth0_macvtap: left promiscuous mode [ 587.726268][ T13] veth1_vlan: left promiscuous mode [ 587.731802][ T13] veth0_vlan: left promiscuous mode [ 587.802833][T21734] m920x_read = error: -19 [ 587.813804][T21734] dvb-usb: error while querying for an remote control event. [ 587.821413][ T5931] m920x_read = error: -19 [ 587.826110][ T5931] dvb-usb: error while querying for an remote control event. [ 587.894238][ T13] team0 (unregistering): Port device team_slave_1 removed [ 587.906890][ T13] team0 (unregistering): Port device C removed [ 587.939393][ T5931] m920x_read = error: -19 [ 587.945137][ T5931] dvb-usb: error while querying for an remote control event. [ 587.955081][T21734] m920x_read = error: -19 [ 587.969340][T21734] dvb-usb: error while querying for an remote control event. [ 588.079389][T21734] m920x_read = error: -19 [ 588.086801][T21734] dvb-usb: error while querying for an remote control event. [ 588.099456][T21734] m920x_read = error: -19 [ 588.103827][T21734] dvb-usb: error while querying for an remote control event. [ 588.200118][ T808] m920x_read = error: -19 [ 588.204625][ T808] dvb-usb: error while querying for an remote control event. [ 588.219440][ T808] m920x_read = error: -19 [ 588.224066][ T808] dvb-usb: error while querying for an remote control event. [ 588.319646][ T808] m920x_read = error: -19 [ 588.324177][ T808] dvb-usb: error while querying for an remote control event. [ 588.350360][ T808] m920x_read = error: -19 [ 588.354837][ T808] dvb-usb: error while querying for an remote control event. [ 588.439387][T21735] m920x_read = error: -19 [ 588.443878][T21735] dvb-usb: error while querying for an remote control event. [ 588.464638][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.479397][T21735] m920x_read = error: -19 [ 588.483855][T21735] dvb-usb: error while querying for an remote control event. [ 588.514594][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.561427][T21735] m920x_read = error: -19 [ 588.565809][T21735] dvb-usb: error while querying for an remote control event. [ 588.588994][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.600104][T21735] m920x_read = error: -19 [ 588.604530][T21735] dvb-usb: error while querying for an remote control event. [ 588.656806][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.689426][T21735] m920x_read = error: -19 [ 588.693836][T21735] dvb-usb: error while querying for an remote control event. [ 588.719432][T21735] m920x_read = error: -19 [ 588.723883][T21735] dvb-usb: error while querying for an remote control event. [ 588.788229][ T13] dummy0: left allmulticast mode [ 588.797110][ T13] dummy0: left promiscuous mode [ 588.803615][ T13] bridge0: port 3(dummy0) entered disabled state [ 588.810377][T21734] m920x_read = error: -19 [ 588.815834][T21734] dvb-usb: error while querying for an remote control event. [ 588.817293][ T13] bridge_slave_1: left allmulticast mode [ 588.829903][ T13] bridge_slave_1: left promiscuous mode [ 588.835625][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.843087][T21734] m920x_read = error: -19 [ 588.847442][T21734] dvb-usb: error while querying for an remote control event. [ 588.855872][ T13] bridge_slave_0: left allmulticast mode [ 588.861665][ T13] bridge_slave_0: left promiscuous mode [ 588.867290][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.929867][T21734] m920x_read = error: -19 [ 588.934337][T21734] dvb-usb: error while querying for an remote control event. [ 588.959456][T21734] m920x_read = error: -19 [ 588.963877][T21734] dvb-usb: error while querying for an remote control event. [ 588.984155][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.011223][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.040518][ T13] bond0 (unregistering): Released all slaves [ 589.049483][ T808] m920x_read = error: -19 [ 589.053891][ T808] dvb-usb: error while querying for an remote control event. [ 589.083048][T21734] m920x_read = error: -19 [ 589.103111][T21734] dvb-usb: error while querying for an remote control event. [ 589.169404][ T808] m920x_read = error: -19 [ 589.174026][ T808] dvb-usb: error while querying for an remote control event. [ 589.230037][ T808] m920x_read = error: -19 [ 589.235905][ T808] dvb-usb: error while querying for an remote control event. [ 589.289428][ T808] m920x_read = error: -19 [ 589.293841][ T808] dvb-usb: error while querying for an remote control event. [ 589.349440][ T808] m920x_read = error: -19 [ 589.356666][ T808] dvb-usb: error while querying for an remote control event. [ 589.385041][ T13] hsr_slave_0: left promiscuous mode [ 589.390875][ T13] hsr_slave_1: left promiscuous mode [ 589.396536][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.403973][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.411840][ T808] m920x_read = error: -19 [ 589.412469][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.416208][ T808] dvb-usb: error while querying for an remote control event. [ 589.423826][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.441492][ T13] veth1_macvtap: left promiscuous mode [ 589.446974][ T13] veth0_macvtap: left promiscuous mode [ 589.452579][ T13] veth1_vlan: left promiscuous mode [ 589.457900][ T13] veth0_vlan: left promiscuous mode [ 589.479448][ T808] m920x_read = error: -19 [ 589.483960][ T808] dvb-usb: error while querying for an remote control event. [ 589.539372][ T808] m920x_read = error: -19 [ 589.543842][ T808] dvb-usb: error while querying for an remote control event. [ 589.581560][ T13] team0 (unregistering): Port device team_slave_1 removed [ 589.592448][ T13] team0 (unregistering): Port device team_slave_0 removed [ 589.599794][ T808] m920x_read = error: -19 [ 589.604129][ T808] dvb-usb: error while querying for an remote control event. [ 589.659376][ T808] m920x_read = error: -19 [ 589.663908][ T808] dvb-usb: error while querying for an remote control event. [ 589.732540][ T808] m920x_read = error: -19 [ 589.742728][ T808] dvb-usb: error while querying for an remote control event. [ 589.787051][ T808] m920x_read = error: -19 [ 589.793778][ T808] dvb-usb: error while querying for an remote control event. [ 589.857198][ T5931] m920x_read = error: -19 [ 589.862740][ T5931] dvb-usb: error while querying for an remote control event. [ 589.925694][ T5931] m920x_read = error: -19 [ 589.931803][ T5931] dvb-usb: error while querying for an remote control event. [ 589.989455][ T5931] m920x_read = error: -19 [ 590.000672][ T5931] dvb-usb: error while querying for an remote control event. [ 590.059593][ T5931] m920x_read = error: -19 [ 590.064072][ T5931] dvb-usb: error while querying for an remote control event. [ 590.129490][ T5931] m920x_read = error: -19 [ 590.134276][ T5931] dvb-usb: error while querying for an remote control event. [ 590.179368][ T5931] m920x_read = error: -19 [ 590.183844][ T5931] dvb-usb: error while querying for an remote control event. [ 590.249435][ T5931] m920x_read = error: -19 [ 590.259570][ T5931] dvb-usb: error while querying for an remote control event. [ 590.303564][ T5931] m920x_read = error: -19 [ 590.316794][ T5931] dvb-usb: error while querying for an remote control event. [ 590.379378][ T5931] m920x_read = error: -19 [ 590.383841][ T5931] dvb-usb: error while querying for an remote control event. [ 590.429481][ T5931] m920x_read = error: -19 [ 590.433964][ T5931] dvb-usb: error while querying for an remote control event. [ 590.499396][ T5931] m920x_read = error: -19 [ 590.503900][ T5931] dvb-usb: error while querying for an remote control event. [ 590.550849][ T5931] m920x_read = error: -19 [ 590.557373][ T5931] dvb-usb: error while querying for an remote control event. [ 590.620508][ T5931] m920x_read = error: -19 [ 590.624978][ T5931] dvb-usb: error while querying for an remote control event. [ 590.669421][ T5931] m920x_read = error: -19 [ 590.673837][ T5931] dvb-usb: error while querying for an remote control event. [ 590.739477][T21735] m920x_read = error: -19 [ 590.743928][T21735] dvb-usb: error while querying for an remote control event. [ 590.799442][T21735] m920x_read = error: -19 [ 590.803844][T21735] dvb-usb: error while querying for an remote control event. [ 590.859403][T21735] m920x_read = error: -19 [ 590.863806][T21735] dvb-usb: error while querying for an remote control event. [ 590.919508][T21735] m920x_read = error: -19 [ 590.924333][T21735] dvb-usb: error while querying for an remote control event. [ 590.980213][T21735] m920x_read = error: -19 [ 590.984572][T21735] dvb-usb: error while querying for an remote control event. [ 591.039679][T28718] m920x_read = error: -19 [ 591.044029][T28718] dvb-usb: error while querying for an remote control event. [ 591.100326][T28718] m920x_read = error: -19 [ 591.104702][T28718] dvb-usb: error while querying for an remote control event. [ 591.159440][T28718] m920x_read = error: -19 [ 591.163812][T28718] dvb-usb: error while querying for an remote control event. [ 591.219469][T28718] m920x_read = error: -19 [ 591.223921][T28718] dvb-usb: error while querying for an remote control event. [ 591.279930][T28718] m920x_read = error: -19 [ 591.284307][T28718] dvb-usb: error while querying for an remote control event. [ 591.339488][T28718] m920x_read = error: -19 [ 591.343857][T28718] dvb-usb: error while querying for an remote control event. [ 591.399515][T28718] m920x_read = error: -19 [ 591.403855][T28718] dvb-usb: error while querying for an remote control event. [ 591.459704][T28718] m920x_read = error: -19 [ 591.464058][T28718] dvb-usb: error while querying for an remote control event. [ 591.519614][T28718] m920x_read = error: -19 [ 591.523960][T28718] dvb-usb: error while querying for an remote control event. [ 591.580004][T28718] m920x_read = error: -19 [ 591.584364][T28718] dvb-usb: error while querying for an remote control event. [ 591.640375][T28718] m920x_read = error: -19 [ 591.644738][T28718] dvb-usb: error while querying for an remote control event. [ 591.700120][T28718] m920x_read = error: -19 [ 591.704481][T28718] dvb-usb: error while querying for an remote control event. [ 591.760462][T28718] m920x_read = error: -19 [ 591.764829][T28718] dvb-usb: error while querying for an remote control event. [ 591.819407][T28718] m920x_read = error: -19 [ 591.823874][T28718] dvb-usb: error while querying for an remote control event. [ 591.890127][T28718] m920x_read = error: -19 [ 591.894594][T28718] dvb-usb: error while querying for an remote control event. [ 591.939378][T28718] m920x_read = error: -19 [ 591.943737][T28718] dvb-usb: error while querying for an remote control event. [ 592.009438][T28718] m920x_read = error: -19 [ 592.013811][T28718] dvb-usb: error while querying for an remote control event. [ 592.059490][ T5940] m920x_read = error: -19 [ 592.063855][ T5940] dvb-usb: error while querying for an remote control event. [ 592.129775][T28718] m920x_read = error: -19 [ 592.134158][T28718] dvb-usb: error while querying for an remote control event. [ 592.179451][T28718] m920x_read = error: -19 [ 592.183895][T28718] dvb-usb: error while querying for an remote control event. [ 592.250254][T28718] m920x_read = error: -19 [ 592.254697][T28718] dvb-usb: error while querying for an remote control event. [ 592.299484][T28718] m920x_read = error: -19 [ 592.303857][T28718] dvb-usb: error while querying for an remote control event. [ 592.369430][T28718] m920x_read = error: -19 [ 592.373784][T28718] dvb-usb: error while querying for an remote control event. [ 592.419485][T28718] m920x_read = error: -19 [ 592.423838][T28718] dvb-usb: error while querying for an remote control event. [ 592.489633][T28718] m920x_read = error: -19 [ 592.493971][T28718] dvb-usb: error while querying for an remote control event. [ 592.539501][T28718] m920x_read = error: -19 [ 592.544365][T28718] dvb-usb: error while querying for an remote control event. [ 592.609757][T28718] m920x_read = error: -19 [ 592.614129][T28718] dvb-usb: error while querying for an remote control event. [ 592.660629][T28718] m920x_read = error: -19 [ 592.665021][T28718] dvb-usb: error while querying for an remote control event. [ 592.729460][T28718] m920x_read = error: -19 [ 592.733802][T28718] dvb-usb: error while querying for an remote control event. [ 592.779961][T28718] m920x_read = error: -19 [ 592.784351][T28718] dvb-usb: error while querying for an remote control event. [ 592.849414][T28718] m920x_read = error: -19 [ 592.853762][T28718] dvb-usb: error while querying for an remote control event. [ 592.900081][T28718] m920x_read = error: -19 [ 592.904465][T28718] dvb-usb: error while querying for an remote control event. [ 592.969447][T28718] m920x_read = error: -19 [ 592.973814][T28718] dvb-usb: error while querying for an remote control event. [ 593.003366][ T5212] udevd[5212]: worker [5850] /devices/platform/dummy_hcd.6/usb7/7-1 is taking a long time [ 593.019900][T28718] m920x_read = error: -19 [ 593.024250][T28718] dvb-usb: error while querying for an remote control event. [ 593.089434][T28718] m920x_read = error: -19 [ 593.094137][T28718] dvb-usb: error while querying for an remote control event. [ 593.139614][T28718] m920x_read = error: -19 [ 593.144027][T28718] dvb-usb: error while querying for an remote control event. [ 593.209453][T28718] m920x_read = error: -19 [ 593.214301][T28718] dvb-usb: error while querying for an remote control event. [ 593.259442][T28718] m920x_read = error: -19 [ 593.263784][T28718] dvb-usb: error while querying for an remote control event. [ 593.329700][T28718] m920x_read = error: -19 [ 593.334043][T28718] dvb-usb: error while querying for an remote control event. [ 593.379448][T28718] m920x_read = error: -19 [ 593.383791][T28718] dvb-usb: error while querying for an remote control event. [ 593.449486][T28718] m920x_read = error: -19 [ 593.453841][T28718] dvb-usb: error while querying for an remote control event. [ 593.499466][T28718] m920x_read = error: -19 [ 593.503805][T28718] dvb-usb: error while querying for an remote control event. [ 593.569820][T28718] m920x_read = error: -19 [ 593.574195][T28718] dvb-usb: error while querying for an remote control event. [ 593.619515][ T5908] m920x_read = error: -19 [ 593.624377][ T5908] dvb-usb: error while querying for an remote control event. [ 593.689771][T28718] m920x_read = error: -19 [ 593.694135][T28718] dvb-usb: error while querying for an remote control event. [ 593.739576][ T5908] m920x_read = error: -19 [ 593.743956][ T5908] dvb-usb: error while querying for an remote control event. [ 593.809778][T28718] m920x_read = error: -19 [ 593.814133][T28718] dvb-usb: error while querying for an remote control event. [ 593.859561][ T5908] m920x_read = error: -19 [ 593.863918][ T5908] dvb-usb: error while querying for an remote control event. [ 593.929377][T28718] m920x_read = error: -19 [ 593.934065][T28718] dvb-usb: error while querying for an remote control event. [ 593.979766][ T5908] m920x_read = error: -19 [ 593.984629][ T5908] dvb-usb: error while querying for an remote control event. [ 594.049416][T28718] m920x_read = error: -19 [ 594.053755][T28718] dvb-usb: error while querying for an remote control event. [ 594.099844][ T5908] m920x_read = error: -19 [ 594.104227][ T5908] dvb-usb: error while querying for an remote control event. [ 594.169833][T28718] m920x_read = error: -19 [ 594.174180][T28718] dvb-usb: error while querying for an remote control event. [ 594.219552][ T5908] m920x_read = error: -19 [ 594.223926][ T5908] dvb-usb: error while querying for an remote control event. [ 594.289406][T28718] m920x_read = error: -19 [ 594.293749][T28718] dvb-usb: error while querying for an remote control event. [ 594.339576][ T5908] m920x_read = error: -19 [ 594.344382][ T5908] dvb-usb: error while querying for an remote control event. [ 594.409434][T28718] m920x_read = error: -19 [ 594.413814][T28718] dvb-usb: error while querying for an remote control event. [ 594.459467][ T5908] m920x_read = error: -19 [ 594.463819][ T5908] dvb-usb: error while querying for an remote control event. [ 594.530313][T28718] m920x_read = error: -19 [ 594.534693][T28718] dvb-usb: error while querying for an remote control event. [ 594.579753][ T5908] m920x_read = error: -19 [ 594.584111][ T5908] dvb-usb: error while querying for an remote control event.