last executing test programs: 3m48.75516052s ago: executing program 0 (id=1387): r0 = socket$kcm(0x10, 0x2, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ff"], 0x6c}}, 0x0) (async) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000188"], 0x340a) (async) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) (async) close(r3) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) (async, rerun: 64) r4 = socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = socket$qrtr(0x2a, 0x2, 0x0) (async, rerun: 32) read(r5, &(0x7f0000000180)=""/119, 0x77) (rerun: 32) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async, rerun: 64) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000380)='Q', 0x1}], 0x1) (rerun: 64) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f0000000280)=""/45, &(0x7f0000000340)=0x2d) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3m48.493271757s ago: executing program 0 (id=1388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) setrlimit(0x9, &(0x7f0000000000)={0x0, 0x1}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000c, 0x50, r5, 0xc2ba000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000100), 0x4) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) readv(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d04, 0x0, 0x8}]}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0xd, 0x3482, 0x800, 0x10001, 0x1}]}) 3m48.210721092s ago: executing program 0 (id=1391): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14, 0x3}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x23, 0x0, @empty, @loopback, {[@timestamp_addr={0x44, 0x24, 0x17, 0x1, 0x6, [{@private=0xa010101, 0xffff7fff}, {@multicast2, 0x5}, {@empty, 0x7fffffff}, {@local, 0x4}]}, @timestamp_addr={0x44, 0x1c, 0xb2, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x20002}, {@multicast2, 0x3}, {@multicast2, 0x100}]}]}}}}}, 0x7e) 3m47.860955171s ago: executing program 0 (id=1393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}]}, 0x24}, 0x1, 0x0, 0x0, 0x20050081}, 0x9084) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES16=r3], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x80) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r6 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r6, r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r7 = getpgid(r6) setpgid(0x0, r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f00000000c0)={0xa, 0x1, 0x4}) 3m47.532363403s ago: executing program 0 (id=1395): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 64) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 64) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback, 0x2}, 0x10) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 32) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x95, 0x100) (rerun: 32) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x2736, 0x4, [{0x7, 0x1}, {0x4, 0x1}, {0xa, 0x1}, {0xf}]}) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async, rerun: 32) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) (async, rerun: 32) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000180)={0x0, "21af6b06827ac51b4514d4f53deeee3d"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001180)={r1, 0x5, 0x9}) (async, rerun: 32) r2 = syz_open_dev$rtc(&(0x7f0000001580), 0x2, 0x50000) (rerun: 32) ftruncate(r2, 0x8) (async) r3 = accept(0xffffffffffffffff, &(0x7f00000015c0)=@nfc, &(0x7f0000001640)=0x80) (async, rerun: 32) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001680)={0x0, 0x0, 0x30}, &(0x7f00000016c0)=0xc) (rerun: 32) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001700)={r4, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000001740)={r4, 0x1, 0x9}, 0x8) (async) readv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000001780)=""/237, 0xed}, {&(0x7f0000001880)=""/81, 0x51}, {&(0x7f0000001900)=""/54, 0x36}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x4) (async) recvmmsg(r3, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002980)=""/244, 0xf4}, {&(0x7f0000002a80)=""/41, 0x29}, {&(0x7f0000002ac0)=""/167, 0xa7}], 0x3, &(0x7f0000002bc0)=""/130, 0x82}, 0x9}, {{&(0x7f0000002c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002d00)=""/209, 0xd1}, {&(0x7f0000002e00)=""/39, 0x27}, {&(0x7f0000002e40)=""/97, 0x61}, {&(0x7f0000002ec0)=""/114, 0x72}, {&(0x7f0000002f40)=""/145, 0x91}, {&(0x7f0000003000)=""/112, 0x70}], 0x6, &(0x7f0000003100)=""/47, 0x2f}, 0x3}], 0x2, 0x40010000, &(0x7f00000031c0)={0x77359400}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000003280)={'sit0\x00', &(0x7f0000003200)={@loopback, 0x0, 0x0, 0x40, 0x0, [{@remote}, {@remote}, {@private}, {@multicast2}]}}) sendmmsg$alg(r3, &(0x7f0000003d00)=[{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000032c0)="ed4262b0ba72b89c9b59d1913ded3c669a330ee62b22549494cbff84cc38ad2da4b80ca65990c92c85264fffdbee848b1e62781946caf21e65b3a7b3d6813454fc17fa5721a02c092ca7fbf5d286f0bbfa98d9781ae0897c262806f36faab65002b5dac984e2fb696cbbb278ae8f9116696956a736a2ddccaa6cea297c778b33ce4f4eba32147110d79b1c3d", 0x8c}, {&(0x7f0000003380)="9ea44263a35cd33ee59f1f5e2f24e8c08c527c4f9be8407eddcb40e50e894b3640d5cbc6938ae7c51cdfdb894f293c6403c37a75e6a0a1efa13da1da17f3da610e76c61bf9", 0x45}], 0x2, 0x0, 0x0, 0x8840}, {0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003440)="054f86e3806ca0ebf3c1eaf5584cbb374672906f83a3a611645d8342c0dfde76c7e6ef18872b167e9777a058151de05b0ea16e4a6857527ccdf4a45eb32a50802218a247abfe7952fb5a08a2046994cc238365f5256939736ca53a8a69fb930ce5373239a9e4a1c5be6c1bca47190895e942f7eaffa204d3911f58dfd2bbbc641c2d479372e849bbdd5fcdf2e06b0dc3d756920fe18ed20fc2e7e004ab0758f1d1699a3f0d2895c38bd6168aab513e2b931f214dd4458e9debeade3f82075ed7fd95e8815c", 0xc5}, {&(0x7f0000003540)="93698e40a1b565097e8f0404daad653fd23a65deaa28fb1c210b6a0a992de62f8cc00625922b098ef561f2000411a05fa22825a36471a3febaf78674b0914e4c6ef43c8b46b187076d784b46652950eecb0c8e4411bcf288869697c47d5432973879e0e5408552e0ad59520688defc", 0x6f}, {&(0x7f00000035c0)="5e6dfdf88d33c7b7bfea6df7b9774278aacbf683b9d5ff1c55b404ddb27e7f9b9c9876df7bcecc310ce6a5785176ffd36d8c0445bd794a4e8f9fe61e75d951acaf7e7a018bc031849cc97b3d9040392b5367c5fede10f9b0f947183e21f7e98117d9983afcd6ef5d7ce20ebd7c579be149591df2d14a0f361c41f3e3aac91888ed10e2cdf16a34c0c71c43a7cc7e58e682b8b79de8e85323bdef75cbc1d9c0951e680926986073eb4ab67c883df6563ca4bc85e0cbd9e8cc77553316a471635a0f54e0c53f7b9eccfc0e3e4c3ae6fe466a8947c145e1e45917e4a4d4790fd9c1708b262ef205e539b83154ef74862e", 0xef}, {&(0x7f00000036c0)="d89ba4b8a566712014a790969afcf355cbe1264181ebfa2d1e7cb85d6523b67a67ffc7af5cdc159109d6ebbdbfe36333a33449be248500d521a5c9a63f6a90f4e53117c2405da08f894c8ab6d482162e6be3bb85", 0x54}, {&(0x7f0000003740)="17cbfd9c0c51f204c49b5a5d9a619fcf0521ceb95d35de8a0691167f01299bf8a44592911d51f2241c422c071f5a5452a14b4830e9fdd66bb254b1feb682426fc52694a9693633533429ea62daad2caac7bf477a5e9eb1c55573730104159ab730d7be879e38", 0x66}, {&(0x7f00000037c0)}, {&(0x7f0000003800)="70b706fb2b444f97ffdd364050c3ded29c42820b847ec8d9304779e5baa51ef1d39bc019d154cce926d0dc85ed90a5984277ccda74fbc7430d78670211418b387194e93d92deb92e47c1947f827dd3b7c5c310700b4efad61d56a0228680d56f1ca273ebff3fbedc5b858ac61bec0afe81a6e251c52258225ab1fb6ea9e42b3bb63670cc66ff719494b2cdaea2b1d8ba9e58d8211ee4bbe3c32fb46857b3bec369deb240eff6c75349fcb05f02bc298e2551208a3cfcda46fcd6dfa9818a4beb7e1d7e50fd82f81010b8ed8b9afcbefad350663bf81a9dbe2fbd6a626ff7112b490512e256e49b6efa", 0xe9}, {&(0x7f0000003900)="ce36b5ab935f4af626055087b489f2188b535184fbb40fe1d06ef9b571205067203ad0eed9ce33e809e8c1a732e1278f5e429529e1d25ec3fe682892f1b9358ac8879689259362dd5d78214b420c52943d8b788dec6634bb503fbca003a297d00c38daecab5ddf9fba1b1bb085836651056348aca0913a65a421f36b3a7766f4024bc0500ee89e82294c79a5daa2f0140edc31ece2dbbec6f5999b67fc1c228795d8d73020efefa1205574f8c3358b2287", 0xb1}, {&(0x7f00000039c0)="6004caf835c575527dbf22093338daff4455d9e05f6baf25b86cb32ac60284d8ea0167b19412e89805e039134db5d3090f041e5471a24b9e507b49e171cc13803b30f1f6c445a45393b2d398cd52b3978b836b2aad5380a8bfec19aa4c29944f0c332f4f17f4beadbc9214f8a9a1d253ad96adb3276200160663446caa4d41ef492e21d5345119aaa4084cd9e40f414c", 0x90}, {&(0x7f0000003a80)="24e9931192c9250c6ab4b2ea7137523d2a9ca4f380e9f3d2a808b18d7da3871d64930ec75bd8912a97a424214aa3b2580be40ab21b8ebcc4b614e335e5ef229dbfe4", 0x42}], 0xa, &(0x7f0000003bc0)=[@assoc={0x18, 0x117, 0x4, 0x80000000}, @iv={0xe8, 0x117, 0x2, 0xce, "0270d7f635a075b727dea5b3747363aeb632c2bcdda8e0641e34c8211048c50a2d8280da84bbba57b50da05bf51a547074d547309c92a91ee2a88a09a8f6a2b740d91f1e480aab4333ce17d000067fcc532cd4ec35434a014ee2f878f1894080d08453e336e0511d2aeb924987b1d913520fda80286782471a2a4c8b161d753dc45b2075a7caa56f4c1c6776b7b9a12dbd6b4cf23abb849c3c9583f58c51702ce7aa361f7311cef4efde6968471540af6919efd11049670f6bbcd1f63b8a51be06990885010ca7afd6dba1695e7d"}, @assoc={0x18, 0x117, 0x4, 0xcdf}, @iv={0x20, 0x117, 0x2, 0xb, "5efc5a358832b269eed38d"}], 0x138, 0x2fd55b390d54ef8b}], 0x2, 0xc000) (async) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000003d80)=0x1, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003dc0), r5) 3m46.180946624s ago: executing program 0 (id=1399): r0 = socket$alg(0x26, 0x5, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550c, 0x0) (async) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550c, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000000000)=""/35, 0x23) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'team_slave_0\x00', 0x6}) sendmsg$alg(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000280)="56a1", 0x2}], 0x1}, 0x40480c1) 3m45.947823529s ago: executing program 32 (id=1399): r0 = socket$alg(0x26, 0x5, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550c, 0x0) (async) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550c, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000000000)=""/35, 0x23) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'team_slave_0\x00', 0x6}) sendmsg$alg(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000280)="56a1", 0x2}], 0x1}, 0x40480c1) 3m14.236384801s ago: executing program 1 (id=1520): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800034000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xb}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f00000000c0)=r7, 0x4) 3m14.192319554s ago: executing program 1 (id=1521): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) (async) read$rfkill(r0, &(0x7f0000000000), 0x8) (async) read$FUSE(r0, &(0x7f0000000e00)={0x2020}, 0x2020) 3m13.656932977s ago: executing program 1 (id=1528): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) fanotify_init(0x4, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x70081, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x2, 0x0}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={r2, 0x7ff, 0x1, 0x200, 0x2, 0x189}, 0x14) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xa779}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x5c38fe08, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x140}}, [0x0, 0x8, 0x8000000000000001, 0x773, 0x3, 0x5d2e, 0x8, 0x35, 0x7, 0x7, 0x742, 0x9, 0x8000, 0x8, 0x4]}, &(0x7f0000000080)=0x100) syz_usb_connect(0x2, 0x3f0, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3ceb4a3a28d93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da07250101000300090507080800040406b505bce3"], 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000000), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x7) capset(&(0x7f0000000740)={0x20080522}, &(0x7f0000000780)={0x8, 0xffff, 0xff, 0x4, 0x5, 0xcbf}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0xb}, @multicast1, 0x1, 0x3, [@multicast1, @multicast1, @remote]}, 0x1c) 3m12.794568301s ago: executing program 2 (id=1531): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(r2, 0x0, &(0x7f00000003c0)={{}, {0x0, 0x989680}}, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x4) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpu.stat\x00', 0x5000000, 0x0) sendfile(r0, r4, &(0x7f0000000000)=0xb54b, 0xc486) 3m12.652747899s ago: executing program 2 (id=1532): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="ab11bdeb23914421bf279e2b7ef074e2", 0x10) r1 = socket(0xa, 0x3, 0x87) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x90, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r6}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) (async) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000080)={0xc, 0x9}) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace$poke(0x420f, r8, 0x0, 0x40) r9 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000ba3000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000000)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x20d, 0x67b}}], 0x20}) (async) r11 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r11, 0xeb) connect$inet(r11, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) (async) r12 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000040)={0x0, 'macvlan1\x00', {0x3}, 0xbbb8}) (async) ioctl$VIDIOC_DECODER_CMD(r12, 0xc0485660, &(0x7f0000000340)={0xf979e10e54c49671, 0x0, @raw_data}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3m12.586486875s ago: executing program 2 (id=1533): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x49, 0x480203) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x4, 0x8, 0x1}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0xc0984124, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3m12.296930826s ago: executing program 1 (id=1534): r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000340)=[@acquire_done], 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xc7', 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x84, 0x0, 0x73976972ba3f4b55, 0x0, 0xffffffff, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7cb5}]}, 0x84}}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3m10.399651436s ago: executing program 1 (id=1538): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x2000010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r1, 0x6f000) open_tree(0xffffffffffffffff, 0x0, 0x89901) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r0]) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1}, 0x2}], 0x1, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x5, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000200)={0x2c, &(0x7f0000000340)={0x20, 0x10, 0x7, {0x7, 0x9, "86ee8fdf70"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000003c0)={0x0, 0x1, 0xffffd, 0x8}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$inet(0x2, 0x2, 0x1) 3m10.199620372s ago: executing program 2 (id=1539): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=""/116, 0x74) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x601, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xb, 0xffff}}, [@q_dsmark={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 3m9.960669495s ago: executing program 2 (id=1540): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz0\x00') (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0) pselect6(0x40, &(0x7f0000001400)={0x8, 0x1, 0x3, 0x7fffffff, 0x4, 0x83f, 0x4, 0x7}, 0x0, 0x0, 0x0, 0x0) (async) shutdown(r3, 0x1) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) (async) syz_usb_connect(0x3, 0x49, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x29, 0x3a, 0x90, 0x10, 0x17ef, 0x3899, 0x9973, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x71, 0x8, 0x1, 0x99, 0x32, 0xf, 0x0, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "10"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x5, 0x8}, [@acm={0x4, 0x24, 0x2, 0x3}]}], [{{0x9, 0x5, 0x83, 0x0, 0x10, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r5 = syz_open_dev$loop(&(0x7f0000000000), 0xf43, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) (async) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) (async) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x8001, 0x5, 0xf, 0xffffffffffffffff, 0x100000000, 0x4}, {0x9, 0x0, 0x77, 0xada7, 0x8001, 0x8}], ['\x00']}) 3m9.481927471s ago: executing program 2 (id=1542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240410500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x54040, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a05000000000000030000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0x50}}, 0x0) 3m9.025495317s ago: executing program 33 (id=1542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240410500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x54040, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a05000000000000030000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0x50}}, 0x0) 3m9.008962827s ago: executing program 1 (id=1544): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48) (async) close(r0) (async) 2m53.37443441s ago: executing program 34 (id=1544): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48) (async) close(r0) (async) 2m50.680796597s ago: executing program 3 (id=1602): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xc, 0x0, 0xee01}, 0x6e6bb9}}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) (async) syz_usb_disconnect(r0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) 2m49.686379555s ago: executing program 3 (id=1605): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x66800, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000c000000000016"], 0x20}, 0x1, 0x0, 0x0, 0x851}, 0x40004) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGLCKTRMIOS(r0, 0x5435, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffffffeffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_usb_connect(0x0, 0x5c, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010102ab62584080c80e76fc350102030109024a00010e0ea032090415fb010103670207020600017c1f05240000020d240f01f8ffffff020009000006241a060000092107005a0122460d09050a0220000110f1062501011e14f8"], &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) 2m47.982010826s ago: executing program 3 (id=1610): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SG_IO(r3, 0x2285, &(0x7f00000010c0)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001080)="5abe69ae6200", 0x0, 0x1, 0x34, 0x22, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x25, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000640)=ANY=[@ANYBLOB='\b\x00\x00\r'], 0x3cb) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=f=\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) sendto$unix(r2, &(0x7f0000000180)="6e954f5680d3e8146d487f93c6ea810fb8ef8314a0a9c36a790b524c1e3f7da9c64637545491274458410ea08e78d03ac1289bd5c8f24fb73ca3c2b5c036d61b0e76ae14b38b", 0x46, 0x20048085, &(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r10], 0x9) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 2m45.314875049s ago: executing program 3 (id=1616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xa, @dev={0xfe, 0x80, '\x00', 0x80}, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20008845, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x80}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x3f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000300)="260fab4800b904020000b8844b0000ba000000000f30dd880200000066ba210066b8f08366ef64660f38827da5b8010000000f01c1430f00d00f71f000c4221daa32c744240000000000c744240200000000c7442406000000000f011c24", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040890}, 0x44080) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000540)={'syz_tun\x00', &(0x7f0000000680)=@ethtool_rxfh={0x21, 0x6, 0x10000, 0x0, 0x9, '\x00', 0x1}}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) 2m44.170441561s ago: executing program 3 (id=1621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000906010200000000000000000a0000000900020073797a310000000005000100070000001c0007800c0001804732cd45940b08f70c0018"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="7d6880cd85c5521b73a9d40aeff825abcd3ebae63eadb58280bb361673db97d9824c788a358610897ed6bbb9308e5f2603c9066cb76d45518b7355e0f2d54803d711f3e608e42ae618004962a8e86f0ec836c30aa9163ade6de98d4048ba", @ANYRES64, @ANYBLOB="18c4828c39511b27621f6e4787aa2d2c86df332bf39832e32b7c97b0c6ea43a05f07cd7b2f3fd38bd22bef2dfe3df2ef44b11a2c385b84598b", @ANYRES32=r0, @ANYRES64=r0, @ANYRES32], 0x0) 2m43.979726985s ago: executing program 3 (id=1622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r1, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc, 0x30}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "cb7335e928afaa17a59fd58199936940"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a4afee7523e7954c233f51a9a2f591f8"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "08609c07af649accd4cede9f5e85586b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "854d8977df123b08f679a6bc7c9e09f3"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000004}, 0x40801) sync() sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x22, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8041) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1294, 0x1320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x31, 0xf0, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x1d, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xf8f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x3, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0x1, 0x2}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x1, 0x5, 0x4, 0x40}, 0x192, &(0x7f0000000380)={0x5, 0xf, 0x192, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0xa0, 0x4, 0x8, 0xfffb, 0xd8}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x0, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x8}, @generic={0xe4, 0x10, 0xa, "c3afa498bc426d81b39710a270a2865b140a2c35961d68320d6ec6fdf51e254b174781258c2b896ba19502a503f92e099a0f585a991cc238a89bcb736e87cc403eb746fe5494b979c174a95e01b8414e4ebea3e2cc81455d306f93cc1534f7a261f465e92b25e78987396a32c7d8deb44a64e11f922a104d9d4ac98f1830f3f0833afc636da39d2f2dd1527f080dbb615f47e911e584608b908fe43ce6d9b299a9094b61619872e82de6ab484c3a0002c8281236b4564331280e83a38c48b0c722803d52e30f088d50eea8c0719858f2a0f12f641b591b4337f0bcf916fd81e686"}, @ptm_cap={0x3}, @generic={0x8d, 0x10, 0x3, "24a02ac59910173b45651efece528e4ec2e8b3d63c53c2b862e2b9edbb3a23058332f885b306bf234ba27b9b4e53a313b78be930e610dc1df9ceea3edfd2268b9d1ee47ec2708bd47989940a0580029b98472f0675ce98374e214024c79ed432e37f9197d4289edfc7da6c6d62c6b71451eb1ef994f2b85ffa576323b04c5d5ad8c91dd9f05996d4d10b"}]}, 0x6, [{0x9c, &(0x7f0000000540)=@string={0x9c, 0x3, "dc23b5f14e66a7710f6e8f406d67874dde46694aa46b0a9fbab84a342e80be1657f02ae59c199da149c35e7f256d0608c74c1c577a05acddbb9d45bc845418b6943b4e3dd9d5bbcc411b67c5686024bbe8f69142dfc38920d7ff6bcb2ba78dbd8fa50cd9dc66a62f9dfe6fe8a5aeccf7fd0aba08aedf655e65d38fc33ff6371ffd188ad34eed639df583ccadcd889afc3b55be100419a9550ca5"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1007}}, {0x33, &(0x7f0000000640)=@string={0x33, 0x3, "e50a4a8d2317a5aacda9aac59f41f56694c1f991aa796a51e2ab1c0a6f8088dd6d4eab0dde13aa5f85c8d12c9d2a0e524d"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}]}) syz_usb_control_io$hid(r4, &(0x7f00000008c0)={0x24, &(0x7f00000007c0)={0x20, 0x21, 0x6, {0x6, 0x3, "55a9fce4"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000840)={0x0, 0x22, 0xc, {[@local=@item_012={0x2, 0x2, 0x5, '^7'}, @main=@item_4={0x3, 0x0, 0xb, "5801b7ca"}, @global=@item_012={0x0, 0x1, 0x4}, @main=@item_012={0x2, 0x0, 0xb, "deee"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5cbc, 0xc, 0x1, {0x22, 0x9df}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x20, 0xf, 0x8a, "c603261b8e2020ae60ad92d6b5fe6e85770ec135cf47c31c3b6c0f695bd45f100fae19953dc6ee19afe3f449303f5bdc3af193ba47886fa9c734273627241ecb4665c4d350b58bb02b3822f1ffb0a880dee207c1cb3b29935e89074e1812fa82b194b63dfcea7e537cc004e8ede2b65c3a0c6415a880a9aa2b5e21e2836ba29421b2a2065fc2482378c9"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x1, 0xc7, "0c474b3ddd5ff83fef20d0652fe5bb23e5f41f6a2d922a15539ff274b531c7f6b380cf549e7c4958423d4caab3afdb1aa18e693c9b2fbcbb44b12d24eef03806ebab2c73a179420698e44cc43f848989c0257a41b45e5585abd4ec7719a2c7569c8fb39111e1f84e66b23a41a8b33b734d358ae93207b875d6b8528cc300308e3da11af95d03dcb5eec2b22d3f6f017c67709b8f28712c503bf44a3333df0fb1782e0961503907a7f9916b996724430cef83b97b4edeb95919843f998f1cf7a618f1a18216ba98"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x6}}) r5 = dup3(r0, r3, 0xe12d84e44d0e9313) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r5) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xf8, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc00, 0x42}}}}, [@NL80211_ATTR_IE={0x97, 0x2a, [@tim={0x5, 0x8c, {0x2, 0x95, 0x1, "af8cf7b791c2867a27563a69385aca0e92522bfa6f1ac6646c4e69665e366a514b0d725c16c7010cddff685712260b473979412115875de7115a0a4ecc05511d4ef55e4849cc34d1854fb70a55043a9d86d7aa8d7bca9a96eaa3bf0a811c2f69ded898d60155bb89455e42d05b32e2421e1b359a8f243b4259f38dffc6d69b094ae188000967e9d55a"}}, @channel_switch={0x25, 0x3, {0x0, 0xb, 0x3f}}]}, @NL80211_ATTR_SSID={0x24, 0x34, @random="084e950d930f833be6b14fa720aee3d2463760b6ad96f210c019b2abfd02cceb"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x11, 0x34, @random="97969979b325e5927e5ddd2bbd"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000e40)={&(0x7f0000000e00)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000e80)={0xb, 0x0, r7}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), r5) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000011c0)={&(0x7f0000000ec0), 0xc, &(0x7f0000001180)={&(0x7f0000000f40)={0x218, r8, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x66, @local, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb6d}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3553}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbcc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfe52}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x12}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x156}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x429}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x727}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x439}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff7ce}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) syz_usb_connect$cdc_ecm(0x3, 0x5b, &(0x7f0000001200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x81, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0xe, {{0x7, 0x24, 0x6, 0x0, 0x0, "ca98"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x947, 0x0, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x6, 0x0, 0x7, 0x9, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x2e, 0x5}}}}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x6098ae77ff8939b7, 0x3, 0x6, 0x9, 0x8, 0x7}, 0x36, &(0x7f00000012c0)={0x5, 0xf, 0x36, 0x5, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x7, 0xf00, 0x800}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x4, 0xf00f, 0x8, [0xf]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x6, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc4, 0x6, 0xe, 0x8001, 0xe0}]}, 0x4, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x813}}, {0x9a, &(0x7f0000001340)=@string={0x9a, 0x3, "90841b53dec521a9786d9040079797471dbc3b30db5c0c6e26a764e9ebf2387d86468d65d58cded7c0f8ed1694a41a322a8ec568cd0291c8be3a571c5ae6dfabbac2f4bbb855100bda9dc0e40f34136f86b1514e9607daeddd1e77219ffb2b5c877bb4713d2e4b0e7b6a593b797f9fcec675615a5dc6154e38e4cee6e96a50362170b84e35104e54521751cec89452c03a41dab0bed25f52"}}, {0x60, &(0x7f0000001400)=@string={0x60, 0x3, "e26e80a2ccffa6c82f5f10914446e186e6514ae660ca753bf6304fb856c9f4867c69ca71492cf7c227c44ba0d17a6926a7294cee095c122a12d27403ff1ce088f66466b55c23c3ceac278163fb1be5168d9fcd1bd90f3738efc339eff955"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x827}}]}) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x1, 0x70bd27, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14000804}, 0x240040c0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000001900)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)={0x1e8, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x72}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c0, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xbd, 0x1, "5428d2b5576e08d7c912a7cd0d89a500496dc7564bad3d978a188f41881dde26017164ae3ca59065e0453961971a30ebaa64aafb814293f156feab30340a3710efc94ddfc72b00c5c8d40502eb3c310edd53cb79dd394ea3228190c48b0eebc653ec3f0eda447e604e46754d2aa72539da01376e73c0a05c86470aeb36d18ca298bcbb55ce779993d075a025656f2574462af925277c043cb64dd5f3157b73104d3044cc4a8dac16f3bf35e71086e1dceeeb43609a9f28a152"}}, {0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x22, 0x1, "9bec388ea9f19ad8d9e2979126d943cb918bc260b3812dd2a20b03ba6037"}}, {0xd0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xca, 0x1, "54a49500f6fb514f97c8a59932b56fa2e54e1e51078b00ffb130b3d740f7e88b16bd5a78f3ea46a3be7908d6c827570dda61fc1f24db74c9debf88908c88ed565d78e2be28b71d0de4e0e55008a5372e0fa44af2dc61127190b5f4e1e10d082d4c2ffae88ad42b966b3317511157f787ef9851a3bdb69a35857d1767e79661cd355405c78b2bcb4e4950a5c33767422ffb6df6b025c20a5067a005894dcfd895750b44db2f26693720069695ee31d15b406aa4028575e9cece1c79bfc46881ddd6ef5a63edcd"}}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r5, {0x0}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000019c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000001ac0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001bc0)={0x0, 0x0}, &(0x7f0000001c00)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001c40)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000001d40)=0xe8) r14 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fsetxattr$system_posix_acl(r5, &(0x7f0000001940)='system.posix_acl_default\x00', &(0x7f0000002000)={{}, {0x1, 0x5}, [{0x2, 0x1, r9}, {0x2, 0x1, r10}, {0x2, 0x7, r11}, {0x2, 0x6, r12}, {0x2, 0x2, 0xee00}, {0x2, 0x4, r13}, {0x2, 0x2, r14}], {0x4, 0x2}, [{0x8, 0x1, r15}, {0x8, 0x1}, {0x8, 0x3}, {0x8, 0x0, 0xee00}, {0x8, 0x4}, {0x8, 0x5, 0xee01}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x1}}, 0x94, 0x1) 2m28.220153649s ago: executing program 35 (id=1622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r1, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc, 0x30}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "cb7335e928afaa17a59fd58199936940"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a4afee7523e7954c233f51a9a2f591f8"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "08609c07af649accd4cede9f5e85586b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "854d8977df123b08f679a6bc7c9e09f3"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000004}, 0x40801) sync() sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x22, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8041) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1294, 0x1320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x31, 0xf0, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x1d, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xf8f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x3, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0x1, 0x2}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x1, 0x5, 0x4, 0x40}, 0x192, &(0x7f0000000380)={0x5, 0xf, 0x192, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0xa0, 0x4, 0x8, 0xfffb, 0xd8}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x0, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x8}, @generic={0xe4, 0x10, 0xa, "c3afa498bc426d81b39710a270a2865b140a2c35961d68320d6ec6fdf51e254b174781258c2b896ba19502a503f92e099a0f585a991cc238a89bcb736e87cc403eb746fe5494b979c174a95e01b8414e4ebea3e2cc81455d306f93cc1534f7a261f465e92b25e78987396a32c7d8deb44a64e11f922a104d9d4ac98f1830f3f0833afc636da39d2f2dd1527f080dbb615f47e911e584608b908fe43ce6d9b299a9094b61619872e82de6ab484c3a0002c8281236b4564331280e83a38c48b0c722803d52e30f088d50eea8c0719858f2a0f12f641b591b4337f0bcf916fd81e686"}, @ptm_cap={0x3}, @generic={0x8d, 0x10, 0x3, "24a02ac59910173b45651efece528e4ec2e8b3d63c53c2b862e2b9edbb3a23058332f885b306bf234ba27b9b4e53a313b78be930e610dc1df9ceea3edfd2268b9d1ee47ec2708bd47989940a0580029b98472f0675ce98374e214024c79ed432e37f9197d4289edfc7da6c6d62c6b71451eb1ef994f2b85ffa576323b04c5d5ad8c91dd9f05996d4d10b"}]}, 0x6, [{0x9c, &(0x7f0000000540)=@string={0x9c, 0x3, "dc23b5f14e66a7710f6e8f406d67874dde46694aa46b0a9fbab84a342e80be1657f02ae59c199da149c35e7f256d0608c74c1c577a05acddbb9d45bc845418b6943b4e3dd9d5bbcc411b67c5686024bbe8f69142dfc38920d7ff6bcb2ba78dbd8fa50cd9dc66a62f9dfe6fe8a5aeccf7fd0aba08aedf655e65d38fc33ff6371ffd188ad34eed639df583ccadcd889afc3b55be100419a9550ca5"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1007}}, {0x33, &(0x7f0000000640)=@string={0x33, 0x3, "e50a4a8d2317a5aacda9aac59f41f56694c1f991aa796a51e2ab1c0a6f8088dd6d4eab0dde13aa5f85c8d12c9d2a0e524d"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}]}) syz_usb_control_io$hid(r4, &(0x7f00000008c0)={0x24, &(0x7f00000007c0)={0x20, 0x21, 0x6, {0x6, 0x3, "55a9fce4"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000840)={0x0, 0x22, 0xc, {[@local=@item_012={0x2, 0x2, 0x5, '^7'}, @main=@item_4={0x3, 0x0, 0xb, "5801b7ca"}, @global=@item_012={0x0, 0x1, 0x4}, @main=@item_012={0x2, 0x0, 0xb, "deee"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5cbc, 0xc, 0x1, {0x22, 0x9df}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x20, 0xf, 0x8a, "c603261b8e2020ae60ad92d6b5fe6e85770ec135cf47c31c3b6c0f695bd45f100fae19953dc6ee19afe3f449303f5bdc3af193ba47886fa9c734273627241ecb4665c4d350b58bb02b3822f1ffb0a880dee207c1cb3b29935e89074e1812fa82b194b63dfcea7e537cc004e8ede2b65c3a0c6415a880a9aa2b5e21e2836ba29421b2a2065fc2482378c9"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x1, 0xc7, "0c474b3ddd5ff83fef20d0652fe5bb23e5f41f6a2d922a15539ff274b531c7f6b380cf549e7c4958423d4caab3afdb1aa18e693c9b2fbcbb44b12d24eef03806ebab2c73a179420698e44cc43f848989c0257a41b45e5585abd4ec7719a2c7569c8fb39111e1f84e66b23a41a8b33b734d358ae93207b875d6b8528cc300308e3da11af95d03dcb5eec2b22d3f6f017c67709b8f28712c503bf44a3333df0fb1782e0961503907a7f9916b996724430cef83b97b4edeb95919843f998f1cf7a618f1a18216ba98"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x6}}) r5 = dup3(r0, r3, 0xe12d84e44d0e9313) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r5) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xf8, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc00, 0x42}}}}, [@NL80211_ATTR_IE={0x97, 0x2a, [@tim={0x5, 0x8c, {0x2, 0x95, 0x1, "af8cf7b791c2867a27563a69385aca0e92522bfa6f1ac6646c4e69665e366a514b0d725c16c7010cddff685712260b473979412115875de7115a0a4ecc05511d4ef55e4849cc34d1854fb70a55043a9d86d7aa8d7bca9a96eaa3bf0a811c2f69ded898d60155bb89455e42d05b32e2421e1b359a8f243b4259f38dffc6d69b094ae188000967e9d55a"}}, @channel_switch={0x25, 0x3, {0x0, 0xb, 0x3f}}]}, @NL80211_ATTR_SSID={0x24, 0x34, @random="084e950d930f833be6b14fa720aee3d2463760b6ad96f210c019b2abfd02cceb"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x11, 0x34, @random="97969979b325e5927e5ddd2bbd"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000e40)={&(0x7f0000000e00)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000e80)={0xb, 0x0, r7}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), r5) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000011c0)={&(0x7f0000000ec0), 0xc, &(0x7f0000001180)={&(0x7f0000000f40)={0x218, r8, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x66, @local, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb6d}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3553}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbcc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfe52}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x12}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x156}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x429}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x727}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x439}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff7ce}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) syz_usb_connect$cdc_ecm(0x3, 0x5b, &(0x7f0000001200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x81, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0xe, {{0x7, 0x24, 0x6, 0x0, 0x0, "ca98"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x947, 0x0, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x6, 0x0, 0x7, 0x9, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x2e, 0x5}}}}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x6098ae77ff8939b7, 0x3, 0x6, 0x9, 0x8, 0x7}, 0x36, &(0x7f00000012c0)={0x5, 0xf, 0x36, 0x5, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x7, 0xf00, 0x800}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x4, 0xf00f, 0x8, [0xf]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x6, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc4, 0x6, 0xe, 0x8001, 0xe0}]}, 0x4, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x813}}, {0x9a, &(0x7f0000001340)=@string={0x9a, 0x3, "90841b53dec521a9786d9040079797471dbc3b30db5c0c6e26a764e9ebf2387d86468d65d58cded7c0f8ed1694a41a322a8ec568cd0291c8be3a571c5ae6dfabbac2f4bbb855100bda9dc0e40f34136f86b1514e9607daeddd1e77219ffb2b5c877bb4713d2e4b0e7b6a593b797f9fcec675615a5dc6154e38e4cee6e96a50362170b84e35104e54521751cec89452c03a41dab0bed25f52"}}, {0x60, &(0x7f0000001400)=@string={0x60, 0x3, "e26e80a2ccffa6c82f5f10914446e186e6514ae660ca753bf6304fb856c9f4867c69ca71492cf7c227c44ba0d17a6926a7294cee095c122a12d27403ff1ce088f66466b55c23c3ceac278163fb1be5168d9fcd1bd90f3738efc339eff955"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x827}}]}) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x1, 0x70bd27, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14000804}, 0x240040c0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000001900)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)={0x1e8, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x72}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c0, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xbd, 0x1, "5428d2b5576e08d7c912a7cd0d89a500496dc7564bad3d978a188f41881dde26017164ae3ca59065e0453961971a30ebaa64aafb814293f156feab30340a3710efc94ddfc72b00c5c8d40502eb3c310edd53cb79dd394ea3228190c48b0eebc653ec3f0eda447e604e46754d2aa72539da01376e73c0a05c86470aeb36d18ca298bcbb55ce779993d075a025656f2574462af925277c043cb64dd5f3157b73104d3044cc4a8dac16f3bf35e71086e1dceeeb43609a9f28a152"}}, {0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x22, 0x1, "9bec388ea9f19ad8d9e2979126d943cb918bc260b3812dd2a20b03ba6037"}}, {0xd0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xca, 0x1, "54a49500f6fb514f97c8a59932b56fa2e54e1e51078b00ffb130b3d740f7e88b16bd5a78f3ea46a3be7908d6c827570dda61fc1f24db74c9debf88908c88ed565d78e2be28b71d0de4e0e55008a5372e0fa44af2dc61127190b5f4e1e10d082d4c2ffae88ad42b966b3317511157f787ef9851a3bdb69a35857d1767e79661cd355405c78b2bcb4e4950a5c33767422ffb6df6b025c20a5067a005894dcfd895750b44db2f26693720069695ee31d15b406aa4028575e9cece1c79bfc46881ddd6ef5a63edcd"}}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r5, {0x0}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000019c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000001ac0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001bc0)={0x0, 0x0}, &(0x7f0000001c00)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001c40)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000001d40)=0xe8) r14 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fsetxattr$system_posix_acl(r5, &(0x7f0000001940)='system.posix_acl_default\x00', &(0x7f0000002000)={{}, {0x1, 0x5}, [{0x2, 0x1, r9}, {0x2, 0x1, r10}, {0x2, 0x7, r11}, {0x2, 0x6, r12}, {0x2, 0x2, 0xee00}, {0x2, 0x4, r13}, {0x2, 0x2, r14}], {0x4, 0x2}, [{0x8, 0x1, r15}, {0x8, 0x1}, {0x8, 0x3}, {0x8, 0x0, 0xee00}, {0x8, 0x4}, {0x8, 0x5, 0xee01}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x1}}, 0x94, 0x1) 13.485340998s ago: executing program 4 (id=2170): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8857}, 0x4) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r5, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce) ioctl$FBIOPUT_VSCREENINFO(r1, 0xc0684608, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r6, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x2e, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}], 0x28}, 0x24004800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@local, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x800003, 0x2, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x3a, 0x1}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000240)={r10}) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000000)={r11}) sendmsg$nl_generic(r7, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 10.06452632s ago: executing program 4 (id=2180): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x19, 0x1, 0x70bd30, 0x25dfdc02, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44000) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "117bdd4e0246f15c", "0cf2ec231e42052307ad3ff911afcb9a", "091fb1cd", "05ddfd095d0ef175"}, 0x28) 10.027203699s ago: executing program 4 (id=2181): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x3, 0xcaf9, 0x1, 0xff, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x400, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x178, 0x1d, 0x2, 0x70bd2a, 0x25dfdbff, "", [@typed={0x4, 0x48}, @generic="973e866efef99327aee7f96196dc0990ed09f603eb5a13f1913a4c277c9ac6f35697577aeb0ba4ff6b82eb01004062d961bd53cebcae7899234af851d951fd3aeeeb5ec0230ce579cae9a85796deae0841f92fc64effb36c45a265374fd2a77c9cf805427dd6c42976df5b8f7a997a49fe179e2b0bbd8e6fcaabc4", @generic="d236f78c53a9abaae5e1aefe67201bf0503eda57a53d0b6f0641405336828b6d69ccc38b2fa06959dec01783c4fd73a96a443aa61585b522c67e13eba8a1693a036c0e18dd848e41a24dff2f9fbe535249fc6f44cd8502ccfc0a78d5725da455526052987a3c39dfe93722362712aaefaeb1721e74757591dd315ca37c2345c09660f1ccae58a53fc599b621dc20778df2847ab9fb4c7e99783f03adab0e1c93f2e2786068979838efef7c95f8bfe9aa86b7510e89fd5e47ea17e71b94280dde1b4ffac14e6430f65ca505e83cfcea1b9ac29c85746855355e13aa5160c2", @generic="fd3570d7083cd6c1"]}, 0x178}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r6}}}], 0x40, 0x400c004}, 0x20040050) r7 = signalfd(r0, &(0x7f0000000500)={[0x9]}, 0x8) mkdirat(r7, &(0x7f0000000540)='./file0\x00', 0x1c3) setreuid(r5, r4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000580)) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x709, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x100}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x1}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xf9f7d6ab67ffec61) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000880)={0x48, 0x0, &(0x7f00000007c0)=[@register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/57, 0x39, 0x0, 0x3a}, @fda={0x66646185, 0xa, 0x0, 0x2d}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000780)={0x0, 0x28, 0x48}}}], 0x23, 0x0, &(0x7f0000000840)="199d953eca2e129051903946505bf4b9ef62a04f2978701d6b0c0612ebfb6f720cda28"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000900), 0x105080, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r9, 0x80044dfd, &(0x7f0000000940)) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x37) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r10, 0x4068aea3, &(0x7f0000000980)={0xed, 0x0, 0x6}) r11 = syz_usb_connect(0x0, 0x7bc, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0x28, 0x56, 0xa4, 0x10, 0xbda, 0x8191, 0xfdf7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7aa, 0x2, 0x2, 0xc9, 0x20, 0x5, [{{0x9, 0x4, 0x14, 0xff, 0x5, 0x4e, 0xae, 0x76, 0x0, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'u'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x800, 0x6}, [@country_functional={0x8, 0x24, 0x7, 0x36, 0xfff7, [0x7]}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x14}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x1, 0xfd, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x6, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x3cf, 0x0, 0x5}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x8001, [0x800]}]}], [{{0x9, 0x5, 0xd, 0xc, 0x400, 0x2, 0x30, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x6227}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x622e}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x9, 0x6, 0xda, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe4, 0x2}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x9, 0x5, 0x4, [@generic={0x9f, 0x23, "98110f4649a95f32066b47e641081caec675fc5f64717640143491bcc6acb4e99409670130352928d27ff34e556b38ed0112b735e198a11e567a9a9acc44f1e539d9d34426cff1ee0eec06b1a2d9afd775d58fcdb1cdbe3474a93b901f6bbcd860896b2ec902e56d4392d18c1996e7c18f85054ea6a37786c184b96fb6e74b9be882e108fcbe0805012769c83ef931359b02b198e330400d8ac59e8145"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x6, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x8, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe4, 0xb00}]}}]}}, {{0x9, 0x4, 0x65, 0x5, 0x10, 0x8f, 0x61, 0x57, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x101, 0xb}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x1, "0429"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x6, 0x0, 0x7, 0x0, 0x7}]}, @uac_control={{0xa, 0x24, 0x1, 0x73, 0x7}, [@mixer_unit={0xb, 0x24, 0x4, 0x1, 0x8, "16c5c4476de4"}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x8, 0x2}]}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xc9, 0x1, 0x7, [@generic={0x9e, 0xe, "0178d1f94504b4a1f52afce9c28b71ef36badb99c6ba5558a20290971048540f1ad301d5abbf035b8b2805649a9f28f93c62610d03afb0d90ba2e9dc28a942f73d9c3ed55baa9a3684423094eaf61108cd958c8c33c02d7804f6a1aecf310d00bcd3058bb98bbecc17f6034d08c4e2de06ef7d0f48c58147cc8271329aa21c254b5604d95143afda47a38a4ce395dcfaf63a42036dfe789773b9f4fa"}, @uac_iso={0x7, 0x25, 0x1, 0xa9fd41bb8a2a6cdc, 0xfa, 0x2}]}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x0, 0x1b, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0x81, 0x9, [@generic={0x24, 0x10, "659598609388cb0a024799a282aa4645e1a51e067681499c5d55600b969837b11d4d"}]}}, {{0x9, 0x5, 0x8a, 0x3, 0x8, 0x2, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x40, 0x1, 0xb0, [@generic={0x1e, 0x5, "65e758fd43d664d42a1d9abc8fa08b53dfb300de50ce29f33b93757d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x0, 0xa9, 0x2, [@generic={0xb5, 0x11, "3020e2e9b7dab9c5728ab2a18ecbbb2b36e17ea6965845e8502f6844d86422aea75cf4fef0b86cfcaf766ad42e1bb1fcb48523a28d5a441ef84bb9ba522b95fd107de62de5d0c502e103bbdbe52acf2ed37abcd4b966ea067fa576f3c5cdff4231b70eb7ce8f375badf9a012b214eb359ed9d4cb686ca30adca8b992cf3f192ed06538634f407fb4d75b859cf42d178732ab207759aabdb81acef786e65d9a76f247303fb56db4753d25837f02d4ffc97787ba"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xe, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc0, 0x1b91}, @generic={0x25, 0x1, "7edd0319f9b1e9e716c5776643ba6d04578a35cc8928ce93299af817370f35f9332c67"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x1, 0x6, 0x1b, [@generic={0x70, 0x9, "d210cfb1e05862b18ab4de52ec9e3021aa98a21eb0f50c0580349e726473f39683ef3eeae1784ce15b9779ec9b9e21a9bea48a858473ae3741f9e14ceaee8cee05d4414292cf3c0a652a344a71db452c65c71ff28bb4633aab25b8b968892aeaa7db93ad20923fa84263ad0451bc"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8, 0xef, 0x9c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x2}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x8, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xaa80}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x9, 0x8, 0x0, [@generic={0xdd, 0x8, "63e8161ec690b6470ee0e0a2653673dd3cce451a5bb27076008cadb47533866da0d40fdbbfa6ef1c1635465a3bb27b970c139551d33e92dec4df39f911fd161582623f1b74cb5f1fe239a180ca1b04e3fa0de05232e178729ff0aef590c355c3ba09b6d1f6c7b671ca64a9482d962b969858fbc52f7071e1490b71289abd2365101577096727dc66f90f2d6a2daac7b0176ecc6e6ff7a4b08c41c0ac7902755b6e30a2ea9027b1472697dbefc19e623acaf0eb18a844aeddc47c526a57eb14b8c819a3248285ea2c457377fc08acb4a90e99bf4ec60e75003cf193"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x7, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xd}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x5d, 0x8, 0xf4, [@generic={0xb5, 0xd, "2daa47a74c01cf830945a431052acd600838c60a2b9439610dd5ab4ced28f081ecb14cc4f1295a230f45ad5f8e3c8afd579cb83e9980476dfdcea196cbd868b14e2967fc7e43fc35ccc74c4030fa1a76257c77617da9e48c0db0bae9005361eadf73bec291891905cbcb706ebbf852f3e2a6dcf285230c97678f64604272e47c5f63bbad50cc26609de38e9f920fdea35da7e989ea340cd2e116ff60a4ad504414c5936fa9217c4dc5fd55763ad7ffe4bfcc27"}, @generic={0x92, 0x31, "308971dd1fb8ef4ff93f0785d100dccbce8af23cbe3c9ffd16d7bf3a669ea1c86eeece0a6d19f1d1add04bf1c3074249960cd50c0828dc7e1a39f64d4a254e0ea421229f33ab7321c7911d9ffdf05307599b03d2cf129c745b52d7d91474442dd532e59a01b31496ce61afe3f659aa3994620cef813833c02ca4938f9196ed827ca4a8973d6dcd9c44ec4ef57bf36a6f"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x8, 0x1, 0xb, [@generic={0x47, 0x24, "ff56f76312533509aec67e4f0d2a336b5545cca07ab4d0ec2b4a6d171468ab32d02d205799f9bd8b337be69b573f4e153ef1f4fa12cfc9f6462614d7ad1477217bbea29c13"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0xfc, 0x2, 0x98, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xdb, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x6, 0x2, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8}, @generic={0xc0, 0x10, "a5a1f3e26893ff03cadf3ad82674437c730a2578c3c00cf3aa95e0706e1b24855c21a0e993b45395909e87b1f93cc5b9e8128d9d125b88f45595d98ba3e2d591ce0e6bebd4d8c9b74e6e2145199db4de97c34721be35637ab70e54bada0b82d02493df4ce8e8b19f8dc115467fc6b7d599cdac6454cec584d874ace0b6cd65cb8da06e9ede9edc7ab12f26673998f4ebdf3e502bb51819f285e4d0bd959b299c6462dd8c55d29d2e88d3936eb7f060678cae66b2fb8f6707c2da38cb9846"}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x200, 0x1, 0x8, 0x6, 0xff, 0x9}, 0x44, &(0x7f0000001200)={0x5, 0xf, 0x44, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x1, 0x2a49}, @ext_cap={0x7, 0x10, 0x2, 0x67021779aa56e9de, 0x1, 0x2, 0x80}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x5, 0xf000, 0xf, [0xff0000, 0xc0, 0x3f30, 0xff7e0f, 0x3f, 0x2040]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x0, 0x2, 0x9}]}, 0x2, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x438}}, {0x1a, &(0x7f00000012c0)=@string={0x1a, 0x3, "a2627fea22c8b80333dee8c9077ee23103584025bec978f6"}}]}) syz_usb_disconnect(r11) newfstatat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioprio_set$uid(0x3, r2, 0x6000) execve(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={[&(0x7f0000001440)='\x00', &(0x7f0000001480)='\x00', &(0x7f00000014c0)='\x00']}, &(0x7f0000001600)={[&(0x7f0000001540)='\'\x00', &(0x7f0000001580)='-]\x00', &(0x7f00000015c0)='\x00']}) r13 = add_key$fscrypt_v1(&(0x7f0000001640), &(0x7f0000001680)={'fscrypt:', @desc4}, &(0x7f00000016c0)={0x0, "caa19aa8ca20773e9270a34b922eb646ac00abc538693d54e23a07857d90831a61e1f83565ea7a6d340aa8929bc0a11e518158a520e24a8ebf1d172663cc319d", 0x39}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r13, r12, r3) r14 = syz_open_dev$sndpcmc(&(0x7f0000001740), 0x8, 0x10001) ioctl$SNDRV_PCM_IOCTL_STATUS32(r14, 0x806c4120, &(0x7f0000001780)) r15 = semget$private(0x0, 0x2, 0x451) semctl$IPC_RMID(r15, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000001d80)=[{{&(0x7f0000001800)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001880)="8050ffcf29e82c2f1e9a4fb3001a6b243b2e590f627de0c53d4038cb7d06818b3d6a0e67a99d66c14fb44ded82a38608bf2937ed30f6855dab861959ac0c71721ce70b8508e85077df958813bf90cb54298f949e78a39f9c723657f9ab688b4e19d594c0541de612b7568b1fb964d0eae84642", 0x73}, {&(0x7f0000001900)="898ffc5a530449101b5e3f3aa0263f9910d936e10238811745c69ddfb4c3e00e44f924ccdaa5883d9756f42139284606759599074b49b039180085f0e993a86dca42e7939edbf196687240fd4a0bb6cbe53d1d65a9b06334", 0x58}, {&(0x7f0000001980)="09102763ba079493efc0501c0ed34ff1491bf7d6b04ef30ec7f35c4d9a952d5a5e373b34d9bdcd126e433e4159698bc5cc262f388b072ec1c537f12f9672b8a75e38c9d7a8cb5d3277db7472c993610ee306bd3294138dcb3cecf0e718892a01ce75f5c3e0b7b161b0328ef8c10616967bcd1166110911ae9f3be1883bbb04dc50e7564dd4295e71c1", 0x89}, {&(0x7f0000001a40)="10378bf64891a9f2907a2cd9ae4c57b85d6d29c53a8609d0721dede88fe1f22b0b156abf7e11e37a1222aa063bedc4a795a24a1585e6a1d205d27a168bc33c400795d549b74196bc15742f749201e54e1bd957f71273ba81eb2757df28c76861d79de53122f8b042e4f8e6c2bf426caaefea922d38a0c32101beaa7a480166f4da1a3eb1ab2186c5392c16e5a7d1564a89c869055141bf3f27e4f1c731a860542258c6f14870bbdcda50359c232d66b6d1c839a036ac0a75b2429127225d1a56096d7f76b648a36303ba8ddb1fb8cd39be53209d785294f6ef92559e25095e2ddb27b9b32e2ce6a7adb7409bdfb08c49b52f900d5fcf", 0xf6}, {&(0x7f0000001b40)="316dcab5ad099b3dae3c54dc20113f790348f8c075f88e623472ba5057f326d356b76d117ac95d3ae8ab93d4a12fa736346ca1367c6496b213d493f76c41daff6fce3020949ad01907bf32200bee8a227cb1109f9f83cc0b5bbe65dd55ba395bb2e666cb8bad4eda6af22d8bd3c8d767fddead6b4781cc31c1852c74026209cb74f54115c48c7cc64d29cdce5edf5c32daf48b7c81837e39a0b71e666e0195093251e2c04d5a94e1dfbc8b3e7a87c6b4bd7ef9127b59996d22ddb7dbdb", 0xbd}, {&(0x7f0000001c00)="1c38c83aff1ffd1e430837ea4163d55bf05ff6d0d2c14eb816f68886ddac5e6a974d7c9c6fd5db0d0e446ab970294545e2a11c918257f8c2088117ea6961bf657acaafde1df2e6b341f45c348e07f1deebf23301a7dd9f0ef6569a8da5f7b90ad636c0d435e7c121c34255c00e8987396022f3590262e1e764ea7909c9650f5ee7951dd4c475259cc9a94f6108d252e4111e6e6b011dd58c1de40f197758c2b480ed73081396", 0xa6}], 0x6, &(0x7f0000001d40)=[@rights={{0x20, 0x1, 0x1, [r9, 0xffffffffffffffff, r7, r9]}}, @rights={{0x20, 0x1, 0x1, [r8, r9, r10, r8]}}], 0x40}}], 0x1, 0x84000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 6.74124324s ago: executing program 4 (id=2190): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x38, r4, 0x1, 0x70bd2b, 0x2, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3c, 0x81, 0x10, 0x400, 0xc5c1, 0x40, 0x8, 0x1]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0xff08) syz_usb_disconnect(r0) 5.615909489s ago: executing program 7 (id=2197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kexec_load(0xf5, 0x3e00, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x0, 0x0, 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 4.936769005s ago: executing program 5 (id=2201): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x8404) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x4e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="88000000020801020000000000000000010000001c0004800800084000000200080002400000000708000940000000ff0900010073797a30000000004c00759203cc09400000000808000240000000df08000640000007ff0800044000000bc008000340ffff75340800044000000408000540000000077158ccb149a36060"], 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x4) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000851) mkdir(&(0x7f0000000180)='./bus\x00', 0x15d) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x102) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r8, 0x29, 0x12, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r9, 0xc004510e, 0x0) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r10, 0xc0606610, &(0x7f00000001c0)=0x60) 4.813183729s ago: executing program 5 (id=2202): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'ni_atmio16d\x00', [0xb7, 0x2, 0x620d, 0x7, 0x200, 0xfffff001, 0x7, 0x1, 0x1, 0x7, 0x190c, 0x1ff, 0x57ca, 0x1, 0x6, 0x5, 0x7, 0x2, 0x5, 0x2, 0x4, 0x8, 0x81, 0xb2c, 0x365, 0x1ff, 0xffffffff, 0x429f, 0x4, 0x7, 0x0, 0x7910]}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000440)) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.600240947s ago: executing program 7 (id=2203): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x205, 0x4) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x70bd25, 0x25dfdbf8, {0xc}}, 0x14}}, 0x4000000) (async) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x40, 0x15, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.81761582s ago: executing program 5 (id=2204): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x80280, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001600)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000015c0)={&(0x7f0000001480)={0x110, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9f31}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xf801}, {0x8, 0x15, 0xe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x100}, {0x8, 0x15, 0x8}}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000004}, 0x4004) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sync_file_range(r0, 0x0, 0x4, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r3, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdafb, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8e}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001640)={0x1334, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x270, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x51}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x75}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{}, {0x1}, {0x2, 0x2}, {0x7}, {0x6, 0x7}, {0x4, 0x8}, {0x7, 0x1}, {0x6, 0x5}, {0x6, 0x4}, {0x6}, {0x6, 0x1}, {0x2, 0x7}, {0x5, 0x3}, {0x7, 0x7}, {0x0, 0x4}, {0x1, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x4, 0x7}, {0x2, 0x9}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x1}, {0x2, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x3, 0x1}, {0x2, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x6}, {0x4, 0x4}, {0x5, 0x1}, {0x0, 0xa}, {0x6, 0x3}, {0x7}, {0x6, 0x6}, {0x1, 0x2}, {0x6, 0x4}, {0x5, 0x5}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0x7}, {0x0, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xeb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x38}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x28}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffe}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xbb}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x1}, {0x6, 0x7}, {0x0, 0xa}, {0x2, 0x5}, {0x3, 0x3}, {0x4, 0x8}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x3}, {0x0, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x4, 0x8}, {0x2}, {0x2, 0x1}, {0x7}, {0x3, 0x8}, {0x6, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x2, 0x8}, {0x1, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x3, 0xa}, {0x4, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x7, 0x7}, {0x3, 0x3}, {0x1, 0x1}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x1}, {0x0, 0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x3, 0x2}, {0x4, 0x8}, {0x7, 0x3}, {0x4, 0x5}, {0x4}, {0x1, 0x4}, {0x7}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x7}, {0x5, 0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x3, 0x4}, {0x2, 0x6}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0xa}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x63, 0x8, 0x5, 0x7f, 0xf000, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x8c67, 0x3, 0xffff, 0x1ff, 0x0, 0x0, 0x7870]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x3, 0x800, 0x1, 0x7, 0x5, 0x4, 0x10]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x554, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfad6, 0x1ece, 0x1, 0x7, 0x108, 0x7, 0xe, 0x82]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xd, 0x4, 0x3, 0x200, 0x8, 0xe3f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9a34, 0x5, 0x101, 0x7, 0xf, 0x9, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x7}, {0x4, 0x1}, {0x1}, {0x5, 0x4}, {0x4}, {0x2, 0x7}, {0x4, 0x7}, {0x2, 0x2}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x7}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x2}, {0x4, 0xa}, {0x6, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x3, 0x3}, {0x3, 0x6}, {0x6, 0x4}, {0x7, 0x3}, {0x4, 0x6}, {0x7, 0x5}, {0x4, 0x3}, {0x3, 0x2}, {0x5, 0x9}, {0x3, 0x4}, {0x2}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x5, 0x3}, {0x1}, {0x1, 0x3}, {0x7, 0x3}, {0x1, 0x3}, {0x6, 0x7}, {0x6, 0x4}, {0x1}, {0x0, 0x7}, {0x6}, {0x3, 0x8}, {0x4}, {0x2, 0x6}, {0x7, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x9}, {0x4, 0x5}, {0x3, 0x3}, {0x7, 0x3}, {0x7, 0x7}, {0x5}, {0x5, 0x7}, {0x0, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x12, 0xc, 0x6c, 0xb, 0x24, 0x24, 0x16, 0x3, 0x18, 0x6c, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x5}, {0x4, 0x3}, {0x6, 0xa}, {0x6, 0x6}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0x6}, {0x1}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x5}, {0x4, 0x2}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x9}, {0x6, 0x7}, {0x5, 0x8}, {0x0, 0x1}, {0x0, 0x10}, {0x2, 0x5}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x4, 0x4}, {0x0, 0x2}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x9}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {}, {0x7, 0x5}, {0x3, 0x4}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x1}, {0x5}, {0x3, 0x6}, {0x3}, {0x4, 0x5}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x1}, {0x4, 0x7}, {0x4, 0x7}, {0x1, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x1, 0x5, 0x1, 0x8000, 0xd936, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x100, 0x3, 0xdc, 0x50b, 0x8, 0xffff, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x14}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}]}, {0x2a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x25c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x36, 0x16]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x1b, 0x6c, 0x60, 0x4, 0x48, 0x6c, 0x5, 0xc, 0x18, 0x6, 0x1b, 0x2, 0x6, 0x9, 0xb, 0x5, 0x36, 0x2, 0x60, 0x24, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x800, 0xe7b, 0x8, 0x8, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x134, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x5af, 0x3, 0x5, 0xd, 0x9, 0x8dd5]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x6, 0x4}, {0x3, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x6}, {0x6, 0x8}, {0x4}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x4}, {0x6, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x2}, {0x2, 0xa}, {0x3, 0x3}, {0x6, 0xa}, {0x0, 0x1}, {0x7}, {0x5, 0x2}, {0x2, 0x6}, {0x1, 0xa}, {0x2, 0x3}, {0x3, 0x7}, {0x2, 0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0x3}, {0x2, 0x1}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {}, {0x5, 0x2}, {0x5, 0x4}, {0x2, 0x7}, {0x2, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x0, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x9}, {0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0x5}, {0x4, 0x3}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0xa}, {0x7, 0x5}, {}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x7}, {0x5, 0x9}, {0x3, 0x4}, {0x1}, {0x7, 0x4}, {0x2, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x3}, {0x2, 0x7}, {0x2}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x8}, {0x4, 0x3}, {0x3, 0x2}, {0x7, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x1}, {0x7, 0x4}, {0x3, 0x7}, {0x3, 0x8}, {0x4, 0x5}, {0x6, 0x2}, {0x3, 0x8}, {0x4, 0x9}, {0x6, 0x4}, {0x4, 0x1}, {0x1, 0x5}, {0x1, 0x4}, {0x5, 0x2}, {0x6, 0x9}, {0x5, 0x2}, {0x4}, {0x3}, {0x7, 0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x5, 0x4}, {0x0, 0x6}, {0x7, 0x5}, {0x3, 0x3}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x8, 0xd22f, 0x0, 0x826, 0x9, 0x4]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6}, {0x1, 0x8}, {0x0, 0x6}, {0x7, 0x4}, {0x6, 0x7}, {0x1, 0x4}, {0x3}, {0x6}, {0x0, 0x3}, {0x5, 0x9}, {0x6, 0x9}, {0x4, 0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x2}, {0x1, 0x3}, {0x4, 0x3}, {0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x6, 0x19}, {0x0, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x3}, {0x0, 0x5}, {0x3}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x6, 0xa}, {0x6, 0x9}, {0x5, 0x4}, {0x6, 0x5}, {0x5, 0x8}, {0x4}, {0x5, 0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x8}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x4, 0x2}, {0x3, 0x7}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x7, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x4}, {0x5}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x101, 0x7, 0x400, 0x7, 0x6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0x6, 0x12, 0x12, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7ff, 0x6, 0x1, 0x4, 0x8, 0x6, 0x100]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0xf, 0x1ca0, 0x2, 0x8, 0xb6c9, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1000, 0xf, 0x9, 0x8000, 0x6, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x75cc, 0x101, 0x8, 0xfff, 0x401, 0x800, 0x7f, 0xa]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x4, 0xc, 0x48, 0x16, 0x18, 0x30, 0x24, 0xc, 0x24, 0x18, 0x16, 0x48, 0xc, 0x18, 0x12, 0x6, 0xb, 0xc, 0x60, 0x18, 0x60, 0x36, 0x30, 0x16, 0x5, 0x16, 0x0, 0x1b, 0x16, 0x36, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x3, 0x9, 0x7, 0x7, 0x1, 0x7, 0x2cfc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0xf2, 0xffc0, 0x8, 0xed, 0x100, 0xfff8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0x1000, 0x200, 0x5, 0x0, 0xb, 0x7]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0x1}, {0x1, 0x7}, {0x7, 0x4}, {0x4, 0xa}, {0x6, 0x3}, {0x6}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x400, 0x5, 0xa75, 0x1ff, 0x4, 0x4a81, 0x1e]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb7}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x50}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffff801}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x6c, 0x6c, 0x24, 0xf58ee426b0ee3e15, 0xc, 0x12, 0x60, 0x9, 0x3, 0x18, 0x48, 0x1b, 0x16, 0xb, 0x2, 0x3, 0xc, 0x1b, 0x4]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe, 0x7ff, 0x3, 0x0, 0x8, 0xa, 0x200]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x68c, 0x11d, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x7}, {0x1, 0x3}, {0x5}, {0x1, 0x6}, {0x4, 0x3}, {0x6, 0xa}, {0x4, 0x2}, {0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x3, 0x3}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x7}, {0x0, 0xa}, {0x6, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x4, 0x8}, {0x2, 0x8}, {0x4}, {0x4, 0x8}, {0x3, 0x9}, {0x2, 0x9}, {0x3, 0x4}, {0x4, 0x9}, {0x6, 0x9}, {0x4, 0x6}, {0x4, 0x6}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x5}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x4}, {0x4, 0x1}, {}, {0x6, 0x5}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x73, 0x9, 0x67, 0x6, 0x30, 0x36, 0x2, 0x24, 0x4, 0xb, 0x36, 0x3, 0x2, 0x36, 0x44, 0x12, 0x36, 0x1, 0x24, 0x24, 0x60, 0x30, 0x12, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc26, 0xb1d, 0x0, 0x9, 0x9, 0x800, 0x9]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x0, 0x12, 0x5, 0x36, 0x1, 0x24, 0x47, 0x6c, 0x0, 0x3, 0x4, 0x12, 0x3, 0x4, 0x1b, 0xc, 0x0, 0x6c, 0x9, 0x48, 0x1, 0x18, 0x36, 0x24, 0x3, 0x24, 0x2, 0xb, 0x1, 0x4e]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x0, 0x7, 0x7ff, 0x81, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x2, 0x5}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0x6}, {0x3, 0x3}, {0x4, 0x7}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x7}, {}, {0x1}, {0x6, 0x8}, {0x5, 0x3}, {0x2, 0x3}, {0x2, 0x3}, {0x1, 0x7}, {0x4, 0x1}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x12, 0x2, 0x12, 0x433f37661bf20d2, 0x4, 0xb, 0x24, 0xc, 0x4, 0x2, 0x24]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x48, 0x5, 0xb, 0x9, 0x18, 0x5, 0x16, 0x60, 0x48, 0x36, 0x1, 0x1b, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xc, 0x1ff, 0x2, 0x1, 0x3ff, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x12, 0xb]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0xc, 0x9, 0x12, 0x16, 0x12, 0x9, 0xb, 0x6c, 0x60, 0x2775e9649398133, 0x2, 0x60, 0x1b]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x0, 0x30, 0x0, 0x6, 0x6c, 0x18, 0x16, 0x6c, 0x1, 0x1, 0x60, 0x36, 0x60, 0x1b, 0x9, 0x60, 0x6, 0x60, 0x48, 0x16, 0x16]}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0xc, 0x60, 0x60, 0x36, 0x12, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x5}, {0x4, 0x8}, {0x6, 0x3}, {0x7, 0x6}, {0x2, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x1, 0x2}, {0x0, 0x8}, {0x3, 0x8}, {}, {0x6, 0x9}, {0x1, 0x3}, {}]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x6, 0x8, 0xfff7, 0xffff, 0x4, 0x8, 0xfff9]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x20d2, 0x8, 0x9, 0xdd, 0x3, 0x2, 0x51]}}]}]}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x194, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0xc, 0x3, 0x9, 0x5, 0x1b, 0x9, 0x531c0a2bbcc0f682, 0x24, 0x18, 0x5, 0x9, 0x9, 0x36, 0x18, 0x30, 0x16, 0x4, 0x6c, 0x0, 0x1, 0x12, 0x4]}]}, @NL80211_BAND_5GHZ={0x114, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x2}, {}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x9}, {0x4, 0x8}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x2, 0x7}, {0x7, 0x4}, {}, {0x6, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x4, 0xa}, {0x6, 0x1}, {}, {0x6, 0x2}, {0x7, 0x2}, {0x1}, {0x3, 0xa}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0x9}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0xa}, {0x4, 0xa}, {0x1, 0x4}, {0x3, 0x6}, {0x4, 0x3}, {0x3, 0x7}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0x9}, {0x1, 0x6}, {0x2, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x0, 0x7}, {0x3, 0x7}, {0x1, 0xa}, {0x6, 0x1}, {}, {0x6, 0x8}, {0x5, 0xa}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x6, 0xa}, {0x2, 0x9}, {0x2, 0x2}, {0x6, 0x1}, {0x6, 0x7}, {0x3, 0x2}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x8}, {0x5, 0x3}, {0x1, 0x7}, {0x1}, {0x7, 0x6}, {0x1, 0x9}, {0x5, 0x1}, {0x5, 0xa}, {0x7, 0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x2, 0x9}, {0x3, 0x2}, {0x3}, {0x6, 0x3}, {0x2, 0x3}, {0x0, 0x9}, {0x3}, {0x5, 0x3}, {0x6, 0xa}, {0x2, 0x3}, {0x0, 0x3}, {0x2, 0x8}, {0x7, 0x2}, {0x4, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x5, 0x8}, {0x7, 0x5}, {0x2, 0x3}, {0x3, 0x2}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0x4}, {0x7, 0x9}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x7, 0x3}, {0x7, 0x3}, {0x5, 0x5}, {0x4, 0x9}, {0x1, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x7, 0xf800, 0x1, 0x1, 0x1, 0x2008]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x16, 0x6c, 0x5, 0x6c, 0x59, 0x0, 0x3, 0xb, 0x4, 0x4e]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x2}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x4}, {0x4, 0x3}, {0x7, 0xa}, {0x2, 0x6}, {0x6, 0x6}, {0x6, 0x5}, {0x1, 0x7}, {0x1, 0x5}, {0x3, 0x4}, {0x5}, {0x0, 0x4}, {0x7, 0x2}, {0x4, 0xa}, {0x2}, {0x3, 0x7}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x5}, {0x4, 0x3}, {}, {0x7, 0x6}, {0x3, 0x2}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x2}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0x6}, {0x4, 0x2}, {0x5, 0x8}, {0x7, 0x1}, {0x2, 0x3}, {0x1, 0x3}, {0x5, 0x7}, {0x3, 0x7}, {0x6, 0x6}, {0x3, 0x4}, {0x2, 0x3}, {0x3, 0x1}, {0x0, 0x4}, {0x7, 0x2}, {0x5, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x7a, 0x34, 0x36, 0x6, 0x16, 0x48, 0x18, 0x2, 0x7, 0x48, 0x48, 0xb, 0x4, 0x1, 0x3, 0xc, 0x2, 0x6c, 0x16, 0x3, 0x6, 0xb, 0x6c, 0x16, 0xc, 0x36, 0x12, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x852e, 0x5, 0xf2cc, 0x7, 0xac5, 0xa37a]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7f, 0x2, 0x6b40, 0x1ff, 0x6, 0xfff7, 0xe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0xa}, {0x1, 0x5}, {0x7, 0x2}, {0x7, 0x4}, {0x3, 0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {0x7, 0x5}, {0x4, 0x1}, {0x7, 0x2}, {0x3, 0x5}, {0x2}, {0x6, 0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0x8}, {0x5, 0x9}, {0x7, 0x2}, {0x6, 0x2}, {}, {0x2, 0x6}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x7}, {0x6, 0x8}, {0x4, 0x7}, {0x0, 0x2}, {0x2}, {0x0, 0x5}, {0x4, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x5, 0x9, 0x5, 0x4, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x1}, {0x4, 0x5}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x3, 0x5, 0x36, 0x1b, 0x16, 0x3, 0x1b, 0xc, 0xb, 0x1, 0xc, 0x3, 0x12, 0xb, 0x30, 0x9, 0x1b, 0x2]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x2}, {0x0, 0x8}, {0x3, 0x2}, {0x3}, {0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x2, 0x3}, {0x2, 0x5}, {}, {0x3}, {0x2, 0x8}, {0x6, 0x1}, {0x1, 0x1}, {0x5, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x2, 0x6}, {0x6, 0x7}, {0x5, 0x7}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x90, 0x1, 0x4, 0x6, 0x3, 0x7, 0x2]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0xe460, 0x2, 0x0, 0x4, 0x9, 0x9, 0x8]}}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x4}, {0x4, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x5, 0x8}, {0x6, 0x3}, {0x6, 0x7}, {0x3, 0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x7}, {0x3, 0xa}, {0x7}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x8}, {0x4, 0x7}, {0x0, 0x7}, {0x1, 0x6}, {0x3}, {0x2, 0x2}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x5, 0x1}, {0x4, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x7}, {0x6, 0x1}, {0x3, 0x2}, {0x0, 0x2}, {0x6, 0x7}, {0x7, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x3, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x6, 0x1}, {0x2, 0x1}, {0x1, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {}, {0x7, 0x8}, {0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x5, 0x4}, {0x6, 0x9}, {0x6, 0x2}, {0x7, 0xa}, {0x7, 0x8}, {0x2, 0x1}, {0x2, 0x3}, {0x3}, {0x6, 0x3}, {0x7, 0x5}, {0x4, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x8, 0x3, 0x7, 0x800, 0x2, 0x100, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x8}, {0x7, 0x3}, {0x7, 0x5}, {0x2, 0xa}, {0x6, 0x6}, {0x5, 0x2}, {0x5, 0x8}, {0x5, 0x8}, {0x6, 0x8}, {0x3, 0x6}, {0x1}, {0x2, 0x2}, {0x7}, {0x6, 0x5}, {0x3, 0x5}, {0x4}, {0x0, 0x3}, {0x6, 0x9}, {0x3, 0x7}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x7}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0xa}, {0x7, 0x9}, {0x3, 0x8}, {0x4, 0x5}, {0x1, 0x3}, {0x5, 0x4}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}]}, {0x4a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x470a5e2a403a9e5d, 0x44, 0x36, 0x3, 0x4c, 0x36, 0x12, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x854, 0x7, 0x53e, 0x4, 0x85, 0x8]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0xb, 0x48, 0x1b, 0x9, 0x30, 0x43, 0x4, 0x1b, 0x6c, 0x883ebf4eabbe93e6, 0x3f, 0x5, 0x48, 0x16, 0x12, 0x60, 0x60]}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8000, 0x9b9, 0x0, 0x200, 0x1, 0x3, 0x4]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x36, 0xc, 0x4, 0x48, 0x16, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x7, 0x2}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x4, 0x2}, {0x1}, {0x4, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x2}, {0x3, 0x7}, {0x1, 0x2}, {0x5, 0x8}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x5}, {0x4}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x2}, {0x0, 0x3}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x7}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x7}, {0x7}, {0x0, 0x7}, {0x2, 0xa}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x2}, {0x2, 0x6}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x6, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x3, 0x4}, {0x6, 0x2}, {0x4, 0x5}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x6}, {0x2, 0x2}, {0x7, 0x3}, {0x5, 0x9}, {0x6, 0x9}, {0x6}, {0x4, 0x5}, {0x1, 0x5}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x6}, {0x3, 0x8}, {0x0, 0x7}, {0x4, 0x5}, {0x4, 0x7}, {0x3, 0x5}, {0x4, 0x8}, {0x6, 0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x1, 0x4}, {0x4, 0x2}, {}, {0x7, 0x3}, {0x6, 0xa}, {0x7, 0x8}, {}, {0x4, 0x8}, {0x3, 0x8}, {0x3, 0xa}, {}, {0x3, 0x3}, {0x7, 0x1}, {0x7, 0x6}, {0x1}, {0x2, 0x6}, {}, {0x2, 0x2}, {0x0, 0x19}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x7}, {0x6, 0x5}, {0x2, 0x3}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x7}, {0x7}, {0x1}, {0x4, 0x2}, {0x0, 0x8}, {0x6, 0xa}, {0x6, 0x6}, {0x3, 0xa}, {0x2}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x8}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x2}, {0x6, 0x4}, {0x1}, {0x7, 0x8}, {0x5, 0x5}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x3}, {0x5, 0x6}, {0x5, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x330, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x0, 0x7, 0x0, 0x9, 0x8, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x0]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x762d352030fef755, 0x2, 0x6c, 0x9, 0x18, 0xc, 0x4]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x5, 0xc, 0x6a, 0x30]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x8, 0x8, 0xfff, 0xa606, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0xa}, {0x7, 0x7}, {0x1, 0x8}, {0x3, 0x7}, {0x0, 0x5}, {0x4, 0x1}, {0x2}, {0x6}, {0x4, 0xa}, {0x0, 0x1}, {0x3, 0x2}, {0x6, 0x9}, {0x7, 0x5}, {0x1, 0x8}, {0x4, 0x1}, {0x6, 0xa}, {0x5, 0x3}, {0x7}, {0x2, 0x6}, {0x6, 0x5}, {0x2, 0x11}, {}, {0x3, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x0, 0x9}, {0x5, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x4, 0x5}, {0x6, 0x2}, {0x6, 0x3}, {0x6, 0x8}, {0x3, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x7fff, 0x0, 0x5a, 0x6, 0x2, 0x8, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0xc, 0x1b, 0xb, 0x12, 0x76, 0x5, 0x1b, 0xb, 0x1b, 0x4, 0x16, 0xb, 0x30, 0x1, 0x24]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0x0, 0x15, 0x6, 0x24, 0x1a, 0x1, 0x12f70fbc92c2fffd, 0x2, 0x5]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0x5}, {0x3, 0x9}, {0x0, 0xa}, {0x3, 0x7}, {0x4, 0x1}, {0x1, 0x9}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x240, 0x0, 0x40, 0x5, 0x0, 0xfff1]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x1}, {0x6, 0x5}, {0x1}, {0x4, 0x7}, {0x0, 0xa}, {0x7, 0x8}, {0x5, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x4, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0xa69, 0x6, 0x6, 0x4, 0x22, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8001, 0x81, 0x2d8, 0xff, 0x1ff, 0x8, 0x7fff]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x5}, {0x1, 0x8}, {0x6, 0x2}, {0x1, 0x2}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x3}, {0x2, 0x4}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x7}]}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x40, 0x3, 0x4, 0x8, 0x6, 0x6, 0xfffa]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x5, 0x2, 0x5, 0x24, 0x3, 0x48, 0x1, 0x9, 0x16, 0xc, 0x48, 0x48, 0x12, 0xc, 0x16, 0x9, 0x18, 0x12, 0xb, 0x1b, 0x18, 0x4, 0x6c, 0x5, 0x57, 0x2, 0x6, 0x3, 0x36, 0x1, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd9, 0x2, 0x8, 0x1, 0x0, 0x1, 0x5, 0xfffb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1ff, 0x7, 0x2, 0x1, 0x7, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x1, 0x3, 0x7, 0x7fff, 0xd0d7, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x6, 0x12, 0x2, 0x16, 0x2, 0x60, 0x1, 0x9, 0x6c, 0x36, 0x1, 0x4, 0x6c, 0x4, 0x1b, 0x6c, 0x24, 0x24, 0x5, 0x18, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0x4000, 0x0, 0x4, 0x34, 0xee99, 0x2]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x5}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x1}, {0x5, 0x9}, {0x1, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x3, 0x6}, {0x6}, {0x6, 0x8}, {0x0, 0x3}, {0x3, 0x8}, {0x4, 0x5}, {0x3, 0x5}, {0x7, 0x5}, {0x7, 0xa}, {0x1, 0x1}, {0x2, 0x2}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x6}, {0x2}, {0x7}, {0x0, 0x8}, {0x6, 0x9}, {0x2, 0x1}, {0x3, 0x7}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x7}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x5}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0xa}, {0x1}, {0x1, 0x3}, {0x4, 0x8}, {0x5, 0x6}, {0x1, 0x6}, {0x2, 0x1}, {0x7, 0x9}, {0x6, 0xa}, {0x2, 0x1}, {0x3, 0x3}, {0x6, 0xa}, {0x6, 0x1}, {0x7}, {0x1, 0x7}, {0x4}, {0x5, 0x4}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x6}, {0x7, 0x7}, {0x2, 0xa}, {0x3, 0x2}, {0x4, 0x4}, {0x7, 0x4}, {0x3, 0x7}, {0x6, 0x3}, {0x6}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x8}, {0x6, 0x2}, {0x7, 0x4}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x4}, {0x6, 0xa}, {0x0, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x0, 0x7}, {0x3, 0xa}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x9}, {0x4, 0x6}, {0x6, 0x4}, {0x7, 0xa}, {0x7, 0xa}, {0x1, 0x9}, {0x2}, {0x7, 0x4}, {0x3, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x1}, {0x7, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x1}, {0x2, 0x4}, {0x1, 0xa}, {0x1, 0x9}, {0x7, 0x3}, {0x4, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4d, 0xf800, 0x401, 0x4, 0x5, 0x8, 0x9, 0x578]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x6, 0x0, 0xfffa, 0x1a, 0xd, 0x800, 0x1]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x6, 0x4}, {0x1, 0x4}, {0x2}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x5, 0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb26e, 0x3, 0x1, 0x3, 0x177, 0x9000, 0x7ff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x74}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6ef}]}]}]}, 0x1334}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) recvfrom(r5, 0x0, 0x0, 0x40002002, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'rose0\x00', 0x200}) 3.79266107s ago: executing program 5 (id=2205): syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x29, 0x63, 0x90, 0x10, 0x1a86, 0x752d, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x1, 0xe9, 0x11, 0xbd, 0x0, [], [{{0x9, 0x5, 0xc, 0x3, 0x10, 0x3, 0xf, 0x2}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/sem\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x8100}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.436804104s ago: executing program 4 (id=2206): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@any, 0x1}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x10, {0x10, 0xe, "83dad23d9f7d6fdc8a4588cdd5df"}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x5, "9bc21858b5"}, 0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x3}) close_range(r1, 0xffffffffffffffff, 0x0) 2.614941452s ago: executing program 6 (id=2208): r0 = epoll_create(0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="18725b4c2fcda5657c5e1862a292ea07b870d2c4035bae33017a69b4b5a4012a4a6af70cd36c02a0a32d2a1b7249f3785dee577df45e93819beccad1ea414087678de3b74aa04744d98ad4504fe3f80536a32bcea20bfbdb5cc5d17cc8bc161ddfb187d1878c343b9f521de996e39b7d29303bb286a90e49feb7280e587b9670a5d36ad20a14355e1b4fafd923e898520655f3375ecd10525489a11a1b736346ee6b40e932752f1d7b76bc3a6ef3bfbc2170e6", 0xb3}, {&(0x7f00000000c0)="fb53dd7f860dcaa5a20dc6f3e3f7885b34266c0e705d7f9a97b3cb0ed72c9c8f", 0x20}, {&(0x7f0000000100)="d64702389b6c835bb33811dc708ca9461caee5f66a30abac85a3507f046435daf042705873bf9e83222e87d6e3adbcc7e08ca47adb3c5b98e2e68e9bb3d1894bd6c92638222a145256d7deb5a60b58d896f7b9d5451a2aafb0a62566952929138b478f73cf71ee71c60b1e", 0x6b}, {&(0x7f0000000180)="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", 0xfb}, {&(0x7f0000000280)="1e8a2ca0038eba0ad988d3ac2213f39620a52657bd2ff3f38c2921e41cc7607deb287a20fbf414fd566657d0e49779510f0a33a1512a770bb266db07db4a8682efefe30617dddad518a720b8d83f7ad80a1aa6428698e6", 0x57}, {&(0x7f0000000300)="94204ee2e0787358e3704f281b578e91f92271cd9704843a5f255b1e56472d78310ef66b63ba8516dfa10c882051acb4c946ff8c7ccc298f8cdf3be53de29721235b3af4d5cce06454af9f49ccc5d23efcd2610edaa24958dd6840f1b8ed0a62390a4708c27159192aaf8e3661a688ad1e06a0a4a8250a2fd9237276044e59", 0x7f}], 0x6) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000400)={0x50000001}) (async) r1 = syz_open_dev$loop(&(0x7f0000000440), 0xb8d2, 0x400400) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x200682, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x280002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000500)={0x132, @time={0xfffffff7, 0x4}, 0x2, {0x3, 0x5}, 0x62, 0x2, 0x7}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000540)={0x0, 0x3, 0x4d82, 0x5, 0x1, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000005c0)={0xff, 0x7f, 0x0, 0xfffff150, 0xd4, 0x7}) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, r4, &(0x7f0000000680)='./file0\x00') chdir(&(0x7f00000006c0)='./file0\x00') (async, rerun: 32) r5 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), 0xffffffffffffffff) (rerun: 32) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x42040}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r7, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4008084) (async) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000900)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) write$nci(r9, &(0x7f0000000940)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xf7, @b={0x1c, 0x1, 0x5, 0x1, 0x10, 0x7, 0x3, {0x5d, "ef8695364ad311975347a951ae6ec8babb3cd00d493b89289b0a0d8938e184b2445cd983c4097b672aef9f78921dc4b9b18885a97e38e8ff8e41e364b6f7da8b7cb2ee833a3460a7420362f458ec10a774286cb5f0fd36fea365c41423"}, 0x10, 0x3, 0x2, 0x6, 0xf7, "461c4945a8083ac4c98a42434058952ddf5499fa684ab13015a65a32e67dff1cf35e0d3f7e376a643a63a34cb3c2d08db3ce101bf204cb3826741a14f5f4931f4babf6b49bd95a7501c87c3019e8e912605c8d4e0d5ef7cc95c697dab7ff6edfebfee7df36d399fc2b3db63353acfea9616a829bb2ea898f6867c992ee91c17dcb39643e2c1107dac45c0ac98c0b7314502fb08a86ef177415a72d3abb29f79ad59c1ba7f80eace45cf9b73601b703d516acba3485eb5af8c1bd7b928e8bbb12a66488fc9788dfb5e8daea67b4bcbb741895b0aa49cc4335c0c0d2f5a833a89a88898a80e6de3a98a60d8471ebd1f9c4883878f398e622"}}, 0x164) (async, rerun: 64) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200, 0x0) (async, rerun: 64) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r10, &(0x7f0000000f40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x330, r11, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x6}, @device_b}}, @NL80211_ATTR_FRAME={0x303, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x53}, @broadcast, @random="843f70fd9b9b", @from_mac=@device_b, {0x6, 0x8}, "", @value={0xc, 0x0, 0x3, 0x1, 0x3}, @value=@ver_80211n={0x0, 0x700e, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @random="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"}}]}, 0x330}, 0x1, 0x0, 0x0, 0x80}, 0x40040) r13 = accept4$netrom(r8, &(0x7f0000000f80)={{0x3, @default}, [@remote, @remote, @netrom, @remote, @netrom, @remote, @bcast, @null]}, &(0x7f0000001000)=0x48, 0x0) getpeername$netrom(r13, &(0x7f0000001040)={{0x3, @rose}, [@bcast, @null, @default, @bcast, @null, @default, @rose, @default]}, &(0x7f00000010c0)=0x48) (async, rerun: 32) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r10, 0x80083314, &(0x7f0000001100)) (rerun: 32) 2.4638019s ago: executing program 6 (id=2209): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x101, 0x20, 0x1, 0x4, 0x1001, 0x4, 0x4, 0xffff, 0x3, 0x104, 0xffffffff, 0x1001, 0x101, 0x800800, 0xa239, 0x7fffffff, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa7, 0x0, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x6, 0xefcb, 0x8]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.032477256s ago: executing program 5 (id=2210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/65, 0x41}, {&(0x7f0000000100)=""/121, 0x79}, {&(0x7f0000000180)=""/68, 0x44}], 0x9}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000010b, 0x2100, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000000)={'gre0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2710, @local}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x6, r4}], {}, [{0x8, 0x1, r5}, {0x8, 0x7, 0xee00}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e2400000044fe80000000000000000000000000002a37200000200002"], 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640011800a0001006c696d6974000000540002800c00024000000000000000030c000140000000000000010108"], 0x120}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010011"], 0x1c}}, 0x800) 1.98157336s ago: executing program 5 (id=2211): r0 = socket(0x2, 0x80805, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e800000000"], 0x208}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000700), &(0x7f0000000080)=0x8) epoll_create1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14}}, 0x3c}}, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="78689bc8526cd53cdaea0b0a43000000180d2507b9449b14ffff00000204be12020506", 0x23, 0x10, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000480)={@val={0xa, 0x10}, @void, @eth={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x8, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@hopopts={0x3a}]}}}}}}, 0x42) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) 1.815744864s ago: executing program 6 (id=2212): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet(0x2, 0x3, 0x6) r4 = dup3(r2, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) r8 = dup(r0) syz_genetlink_get_family_id$devlink(&(0x7f0000011880), r8) syz_usb_connect(0x2, 0x1ba, &(0x7f00000009c0)=ANY=[@ANYBLOB="1201100189d16308ac054002074a010203010902a801020501000c09044f0308033d02"], 0x0) 1.276593256s ago: executing program 7 (id=2213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x4, 0x5d, 0x0, 0x3, 0x6, 0x40}, {0x2, 0x7, 0xa055, 0x2bd, 0x5, 0xa5}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r2, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x4000000) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) 1.240616857s ago: executing program 7 (id=2214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_pidfd_open(r1, 0x0) wait4(r1, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd000012000000f029000060fc030000052c00fe8000000000000000000000000000aaff0200000000000000000000000000013a000000000000000200"], 0x76) 1.094949345s ago: executing program 6 (id=2215): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10, 0x7a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000001c0)=0x8, 0x4) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000001c0)=0x8, 0x4) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) flock(r3, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000240)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000280)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000002c0)=0x2) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000300)=0x4, 0x4) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r1, 0x0) (async) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r1, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000380)) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r4) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r4) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040081}, 0x20008040) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040081}, 0x20008040) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r4) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000640)={0x0, @multicast1, @loopback}, &(0x7f0000000680)=0xc) getpeername$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) (async) getpeername$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000740)={@private1, 0x0}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r7, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8811) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000940)=0x0) r12 = getuid() sendmsg$netlink(r1, &(0x7f0000000cc0)={&(0x7f00000008c0)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900), 0x0, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x78, 0x2004c140}, 0x802) 916.51205ms ago: executing program 6 (id=2216): unshare(0x8000000) r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x40, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x80, 0x5, 0x1}]}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@note=0x2, 0x0, 0x0, 0x80}) 670.60327ms ago: executing program 7 (id=2217): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000008000c000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$SNDCTL_TMR_STOP(r5, 0x5403) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 476.602281ms ago: executing program 7 (id=2218): syz_usb_connect(0x2, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000545e0d209904ab6b2f68140203010902d700010000c0050904970001ff70795108640300000026ff0963ad57a4058503"], 0x0) 88.708396ms ago: executing program 4 (id=2219): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000000040)) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000080)={0x1ff, 0x400}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x281, 0x0, 0xfffffffffffffffc}]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}], 0x1c) 0s ago: executing program 6 (id=2220): openat$userio(0xffffffffffffff9c, &(0x7f0000000340), 0x48000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) kernel console output (not intermixed with test programs): tate = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 508.868168][T12773] IPVS: stopping backup sync thread 12776 ... [ 509.728946][ T5833] Bluetooth: hci5: command 0x1003 tx timeout [ 509.730075][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 509.848955][ T5921] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.910306][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 509.930919][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 509.947635][ T9] usb 6-1: can't read configurations, error -71 [ 510.357252][ T5945] usb 7-1: USB disconnect, device number 31 [ 510.400370][T12794] syzkaller1: entered promiscuous mode [ 510.413484][T12794] syzkaller1: entered allmulticast mode [ 510.598836][T12802] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 510.821992][ T5945] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 511.001508][ T5945] usb 7-1: Using ep0 maxpacket: 8 [ 511.009653][ T5945] usb 7-1: config 5 has an invalid interface number: 151 but max is 0 [ 511.018288][ T5945] usb 7-1: config 5 has no interface number 0 [ 511.027145][ T5945] usb 7-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=1e.b5 [ 511.036502][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.044701][ T5945] usb 7-1: Product: syz [ 511.050073][ T5945] usb 7-1: Manufacturer: syz [ 511.054941][ T5945] usb 7-1: SerialNumber: syz [ 511.129933][ T9] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 511.186593][ T3455] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 511.281434][ T6163] usb 7-1: USB disconnect, device number 32 [ 511.293328][ T9] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 511.304343][ T9] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 511.316413][ T9] usb 6-1: config 150 has no interface number 0 [ 511.328433][ T9] usb 6-1: config 150 interface 204 has no altsetting 0 [ 511.340537][ T9] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 511.350443][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.359266][ T9] usb 6-1: Product: syz [ 511.363608][ T9] usb 6-1: Manufacturer: syz [ 511.368430][ T9] usb 6-1: SerialNumber: syz [ 511.605960][ T9] xr_serial 6-1:150.204: skipping garbage [ 511.613524][ T9] xr_serial 6-1:150.204: xr_serial converter detected [ 512.483615][ T9] usb 6-1: xr_serial converter now attached to ttyUSB0 [ 512.701742][ T795] usb 6-1: USB disconnect, device number 38 [ 512.714014][ T795] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 512.723851][ T795] xr_serial 6-1:150.204: device disconnected [ 513.097689][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 513.244532][ T6163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 513.284774][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 513.292694][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 513.330216][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 513.339718][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.354370][ T9] usb 7-1: Product: syz [ 513.358910][ T9] usb 7-1: Manufacturer: syz [ 513.367889][T12823] vim2m vim2m.0: vidioc_s_fmt queue busy [ 513.374006][ T9] usb 7-1: SerialNumber: syz [ 513.401815][ T9] usb 7-1: config 0 descriptor?? [ 513.419030][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 513.434955][T12826] sock: sock_set_timeout: `syz.5.1781' (pid 12826) tries to set negative timeout [ 513.629510][T12818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.640732][T12818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.653329][ T9] gspca_zc3xx: reg_w_i err -71 [ 513.718043][ T6163] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 513.869305][ T6163] usb 6-1: device descriptor read/64, error -71 [ 514.124467][ T6163] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 514.263727][ T6163] usb 6-1: device descriptor read/64, error -71 [ 514.284872][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 514.291450][ T9] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 514.302742][ T9] usb 7-1: USB disconnect, device number 33 [ 514.382505][ T6163] usb usb6-port1: attempt power cycle [ 514.481868][T12837] overlay: filesystem on ./bus not supported as upperdir [ 514.755522][ T6163] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 514.778090][ T6163] usb 6-1: device descriptor read/8, error -71 [ 515.033687][ T6163] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 515.055921][ T6163] usb 6-1: device descriptor read/8, error -71 [ 515.174235][ T6163] usb usb6-port1: unable to enumerate USB device [ 515.796869][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1787'. [ 516.403508][ T5934] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 516.567300][ T5934] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.583393][ T5934] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.598522][ T5934] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 516.608645][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.756269][T12863] netlink: 'syz.5.1792': attribute type 10 has an invalid length. [ 516.842906][T12863] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 516.865054][ T5934] usb 7-1: usb_control_msg returned -32 [ 516.871035][ T5934] usbtmc 7-1:16.0: can't read capabilities [ 516.879024][T12859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.895698][T12859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.923981][T12869] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 0, id = 0 [ 517.032397][ T9] usb 7-1: USB disconnect, device number 34 [ 517.344355][ T3563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 518.391854][ T5934] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 518.554110][ T5934] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.564498][ T5934] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 518.573749][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.585809][ T5934] usb 6-1: config 0 descriptor?? [ 518.595974][ T5934] pwc: Askey VC010 type 2 USB webcam detected. [ 519.068705][ T5934] pwc: recv_control_msg error -32 req 02 val 2b00 [ 519.239662][ T5934] pwc: recv_control_msg error -71 req 02 val 2700 [ 519.258501][ T5934] pwc: recv_control_msg error -71 req 02 val 2c00 [ 519.266993][ T5934] pwc: recv_control_msg error -71 req 04 val 1000 [ 519.274768][ T5934] pwc: recv_control_msg error -71 req 04 val 1300 [ 519.282496][ T5934] pwc: recv_control_msg error -71 req 04 val 1400 [ 519.289470][ T5934] pwc: recv_control_msg error -71 req 02 val 2000 [ 519.298784][ T5934] pwc: recv_control_msg error -71 req 02 val 2100 [ 519.306826][ T5934] pwc: recv_control_msg error -71 req 04 val 1500 [ 519.322953][ T5934] pwc: recv_control_msg error -71 req 02 val 2500 [ 519.333331][ T5934] pwc: recv_control_msg error -71 req 02 val 2400 [ 519.342851][ T5934] pwc: recv_control_msg error -71 req 02 val 2600 [ 519.353003][ T5934] pwc: recv_control_msg error -71 req 02 val 2900 [ 519.360525][ T5934] pwc: recv_control_msg error -71 req 02 val 2800 [ 519.370156][ T5934] pwc: recv_control_msg error -71 req 04 val 1100 [ 519.381776][ T5934] pwc: recv_control_msg error -71 req 04 val 1200 [ 519.398382][ T5934] pwc: Registered as video103. [ 519.413430][ T5934] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input70 [ 519.448875][ T5934] usb 6-1: USB disconnect, device number 43 [ 519.867448][T12914] netlink: 'syz.5.1806': attribute type 1 has an invalid length. [ 520.423905][ T5934] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 520.584328][ T5934] usb 6-1: Using ep0 maxpacket: 32 [ 520.592267][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.603974][ T795] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 520.611661][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.621932][ T5934] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 520.631978][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.642690][ T5934] usb 6-1: config 0 descriptor?? [ 520.656204][ T5934] hub 6-1:0.0: USB hub found [ 520.762030][T12924] netlink: del zone limit has 4 unknown bytes [ 520.769583][ T795] usb 7-1: device descriptor read/64, error -71 [ 520.889814][ T5934] hub 6-1:0.0: 1 port detected [ 521.023144][ T795] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 521.162076][ T795] usb 7-1: device descriptor read/64, error -71 [ 521.281599][ T795] usb usb7-port1: attempt power cycle [ 521.540760][ T5934] hub 6-1:0.0: activate --> -90 [ 521.643286][ T795] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 521.666411][ T795] usb 7-1: device descriptor read/8, error -71 [ 521.921271][ T795] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 521.943492][ T795] usb 7-1: device descriptor read/8, error -71 [ 522.061800][ T795] usb usb7-port1: unable to enumerate USB device [ 522.401966][ T5945] usb 6-1: USB disconnect, device number 44 [ 523.236810][ T5945] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 523.397415][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 523.404601][ T5945] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 523.414697][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.428294][ T5945] usb 6-1: config 0 descriptor?? [ 523.515380][ T6054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.662026][ T5945] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 523.691066][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 523.719022][ T5945] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 523.737458][ T5945] usb 6-1: media controller created [ 523.790589][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.859832][T12945] netlink: 'syz.6.1816': attribute type 12 has an invalid length. [ 524.284023][T12949] Invalid ELF header magic: != ELF [ 524.306378][ T5934] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 524.488121][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 524.513302][ T5934] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 524.531346][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.534888][T12932] team_slave_0: entered promiscuous mode [ 524.539442][ T5934] usb 7-1: Product: syz [ 524.539464][ T5934] usb 7-1: Manufacturer: syz [ 524.545198][T12932] team_slave_1: entered promiscuous mode [ 524.555709][T12931] team_slave_0: left promiscuous mode [ 524.566240][T12931] team_slave_1: left promiscuous mode [ 524.585192][ T5934] usb 7-1: SerialNumber: syz [ 524.613939][ T5934] r8152-cfgselector 7-1: Unknown version 0x0000 [ 524.630740][ T5945] az6027: usb out operation failed. (-71) [ 524.647631][ T5945] stb0899_attach: Driver disabled by Kconfig [ 524.653900][ T5934] r8152-cfgselector 7-1: config 0 descriptor?? [ 524.662514][ T5945] az6027: no front-end attached [ 524.662514][ T5945] [ 524.681299][ T5945] az6027: usb out operation failed. (-71) [ 524.691345][ T5945] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 524.721694][ T5945] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input71 [ 524.745839][T12956] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1821'. [ 524.757852][ T5945] dvb-usb: schedule remote query interval to 400 msecs. [ 524.764916][ T5945] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 524.809629][ T5945] usb 6-1: USB disconnect, device number 45 [ 524.881019][ T5945] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 525.124287][ T5945] r8152-cfgselector 7-1: USB disconnect, device number 39 [ 525.235836][T12959] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1822'. [ 525.546949][ T5934] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 525.725872][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 525.735774][ T5934] usb 6-1: unable to get BOS descriptor or descriptor too short [ 525.751630][ T5934] usb 6-1: config 255 has an invalid interface number: 48 but max is 0 [ 525.760753][ T5934] usb 6-1: config 255 has no interface number 0 [ 525.767241][ T5934] usb 6-1: config 255 interface 48 has no altsetting 0 [ 525.777820][ T5934] usb 6-1: New USB device found, idVendor=2013, idProduct=024f, bcdDevice=e8.70 [ 525.787836][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.796350][ T5934] usb 6-1: Product: syz [ 525.800775][ T5934] usb 6-1: Manufacturer: syz [ 525.805530][ T5934] usb 6-1: SerialNumber: syz [ 525.996094][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 526.034678][T12961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.045246][T12961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.136198][ T9] usb 7-1: device descriptor read/64, error -71 [ 526.248162][ T7766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 526.277984][ T5934] em28xx 6-1:255.48: audio device (2013:024f): interface 48, class 1 [ 526.292403][ T5934] usb 6-1: USB disconnect, device number 46 [ 526.402580][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 526.414037][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 526.541722][ T9] usb 7-1: device descriptor read/64, error -71 [ 526.660467][ T9] usb usb7-port1: attempt power cycle [ 527.023527][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 527.057281][ T9] usb 7-1: device descriptor read/8, error -71 [ 527.322586][ T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 527.344369][ T9] usb 7-1: device descriptor read/8, error -71 [ 527.472143][ T9] usb usb7-port1: unable to enumerate USB device [ 528.294176][T12987] wg0 speed is unknown, defaulting to 1000 [ 528.309667][T12987] wg0 speed is unknown, defaulting to 1000 [ 528.648547][T12415] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 528.685160][T12987] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1831'. [ 528.841294][T12415] usb 6-1: unable to get BOS descriptor or descriptor too short [ 528.864604][T12415] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 528.907178][T12415] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 528.942567][T12415] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 4 [ 528.974993][T12415] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 529.019579][T12415] usb 6-1: config 1 interface 1 has no altsetting 0 [ 529.429230][ T10] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 529.579099][ T10] usb 7-1: device descriptor read/64, error -71 [ 529.670476][ T7765] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.835801][ T10] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 529.985990][ T10] usb 7-1: device descriptor read/64, error -71 [ 530.107084][ T10] usb usb7-port1: attempt power cycle [ 530.477446][ T10] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 530.511475][ T10] usb 7-1: device descriptor read/8, error -71 [ 530.767066][ T10] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 530.789784][ T10] usb 7-1: device descriptor read/8, error -71 [ 530.821132][T13013] binder: 13009:13013 ioctl ae03 c516 returned -22 [ 530.918091][ T10] usb usb7-port1: unable to enumerate USB device [ 531.629369][T12415] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.657000][T12415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.678786][T12415] usb 6-1: can't set config #1, error -71 [ 531.698153][T12415] usb 6-1: USB disconnect, device number 47 [ 531.722622][ T7765] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 531.845554][T13036] overlayfs: conflicting lowerdir path [ 532.399809][T13050] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1849'. [ 532.411427][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1849'. [ 532.423002][T13050] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1849'. [ 532.432711][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1849'. [ 532.566792][T13059] Mount JFS Failure: -22 [ 532.571304][T13059] jfs_mount failed w/return code = -22 [ 532.654759][T13059] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1851'. [ 532.667507][T13062] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1851'. [ 532.710584][T13067] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1853'. [ 532.757771][T13071] sctp: [Deprecated]: syz.7.1854 (pid 13071) Use of int in max_burst socket option deprecated. [ 532.757771][T13071] Use struct sctp_assoc_value instead [ 532.860100][ T30] audit: type=1326 audit(1783386150.404:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.5.1855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6eff58f749 code=0x0 [ 533.472024][ T10] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 533.634350][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 533.643903][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.656897][ T10] usb 7-1: config 0 descriptor?? [ 533.670747][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 534.106747][ T10] gspca_spca508: reg_read err -71 [ 534.119758][ T10] gspca_spca508: reg_read err -71 [ 534.125422][ T10] gspca_spca508: reg_read err -71 [ 534.130918][ T10] gspca_spca508: reg_read err -71 [ 534.136474][ T10] gspca_spca508: reg write: error -71 [ 534.142145][ T10] spca508 7-1:0.0: probe with driver spca508 failed with error -71 [ 534.153474][ T10] usb 7-1: USB disconnect, device number 48 [ 534.699695][ T30] audit: type=1326 audit(1783386152.125:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.6.1861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17adb8f749 code=0x0 [ 534.723082][ T30] audit: type=1326 audit(1783386152.125:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.6.1861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17adb8f749 code=0x0 [ 534.746386][ T30] audit: type=1326 audit(1783386152.144:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.6.1861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17adb8f749 code=0x0 [ 535.145553][ T7766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.160988][T13145] cgroup: noprefix used incorrectly [ 536.172188][T13146] cgroup: noprefix used incorrectly [ 536.246147][T13149] binder: 13148:13149 ioctl 4038ae7a 0 returned -22 [ 536.637806][ T5934] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 536.809084][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 536.817067][ T5934] usb 6-1: config 6 has an invalid interface number: 50 but max is 2 [ 536.825376][ T5934] usb 6-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 536.834360][ T5934] usb 6-1: config 6 has an invalid interface number: 205 but max is 2 [ 536.842798][ T5934] usb 6-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 536.852034][ T5934] usb 6-1: config 6 has an invalid interface number: 7 but max is 2 [ 536.860851][ T5934] usb 6-1: config 6 has no interface number 0 [ 536.867091][ T5934] usb 6-1: config 6 has no interface number 1 [ 536.873409][ T5934] usb 6-1: config 6 has no interface number 2 [ 536.879539][ T5934] usb 6-1: config 6 interface 50 altsetting 7 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 536.891511][ T5934] usb 6-1: config 6 interface 50 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 536.904060][ T5934] usb 6-1: config 6 interface 50 altsetting 7 endpoint 0x3 has invalid maxpacket 2047, setting to 64 [ 536.915349][ T5934] usb 6-1: config 6 interface 50 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 536.926248][ T5934] usb 6-1: config 6 interface 50 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 536.937452][ T5934] usb 6-1: config 6 interface 50 altsetting 7 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 536.949258][ T5934] usb 6-1: config 6 interface 50 altsetting 7 endpoint 0x84 has invalid maxpacket 41565, setting to 64 [ 536.960420][ T5934] usb 6-1: config 6 interface 50 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 536.971198][ T5934] usb 6-1: config 6 interface 50 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 536.983012][ T5934] usb 6-1: config 6 interface 50 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 536.994111][ T5934] usb 6-1: config 6 interface 50 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 537.006263][ T5934] usb 6-1: config 6 interface 50 altsetting 7 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 537.019718][ T5934] usb 6-1: config 6 interface 205 altsetting 69 has a duplicate endpoint with address 0x9, skipping [ 537.036727][ T5934] usb 6-1: config 6 interface 205 altsetting 69 has an invalid descriptor for endpoint zero, skipping [ 537.047845][ T5934] usb 6-1: config 6 interface 205 altsetting 69 has a duplicate endpoint with address 0x4, skipping [ 537.059279][ T5934] usb 6-1: config 6 interface 205 altsetting 69 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 537.071083][ T5934] usb 6-1: config 6 interface 205 altsetting 69 has an invalid descriptor for endpoint zero, skipping [ 537.082191][ T5934] usb 6-1: config 6 interface 205 altsetting 69 has a duplicate endpoint with address 0x1, skipping [ 537.093295][ T5934] usb 6-1: config 6 interface 7 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 537.103938][ T5934] usb 6-1: config 6 interface 7 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 537.115890][ T5934] usb 6-1: config 6 interface 7 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 537.126713][ T5934] usb 6-1: config 6 interface 7 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 537.137588][ T5934] usb 6-1: config 6 interface 7 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 537.148646][ T5934] usb 6-1: config 6 interface 7 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 537.159282][ T5934] usb 6-1: config 6 interface 7 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 537.170790][ T5934] usb 6-1: config 6 interface 50 has no altsetting 0 [ 537.177795][ T5934] usb 6-1: config 6 interface 205 has no altsetting 0 [ 537.185018][ T5934] usb 6-1: config 6 interface 7 has no altsetting 0 [ 537.197246][ T3520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.209060][ T5934] usb 6-1: Dual-Role OTG device on HNP port [ 537.215589][ T5934] usb 6-1: New USB device found, idVendor=2040, idProduct=d8e4, bcdDevice=86.02 [ 537.225752][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.233858][ T5934] usb 6-1: Product: ည [ 537.238158][ T5934] usb 6-1: Manufacturer: щ [ 537.242750][ T5934] usb 6-1: SerialNumber: ï“¿ [ 537.688486][T13153] comedi comedi2: pcl730: I/O port conflict (0x9,4) [ 537.807307][ T5934] usb 6-1: USB disconnect, device number 48 [ 538.193487][T13196] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1873'. [ 538.203614][T13199] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1873'. [ 538.457388][ T5907] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 538.490662][T13213] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 538.502793][T13213] netlink: 'syz.4.1875': attribute type 10 has an invalid length. [ 538.616430][ T5907] usb 7-1: device descriptor read/64, error -71 [ 538.670851][ T5934] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 538.842976][ T5934] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 538.851259][ T5934] usb 6-1: config 0 has no interface number 1 [ 538.857817][ T5934] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 538.869855][ T5934] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 538.881799][ T5934] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 538.893235][ T5907] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 538.901034][ T5934] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.915032][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 538.927489][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 538.939581][ T5934] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 538.949428][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.957497][ T5934] usb 6-1: Product: syz [ 538.962180][ T5934] usb 6-1: Manufacturer: syz [ 538.967090][ T5934] usb 6-1: SerialNumber: syz [ 538.976966][ T5934] usb 6-1: config 0 descriptor?? [ 538.983234][T13204] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 538.995994][ T5934] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.008018][ T5934] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.063325][ T5934] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 539.072499][ T5907] usb 7-1: device descriptor read/64, error -71 [ 539.196188][ T5907] usb usb7-port1: attempt power cycle [ 539.216957][T13204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.226790][T13204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.298593][ T10] usb 6-1: USB disconnect, device number 49 [ 539.568284][ T5907] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 539.592070][ T5907] usb 7-1: device descriptor read/8, error -71 [ 539.859548][ T5907] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 539.889849][ T5907] usb 7-1: device descriptor read/8, error -71 [ 540.010195][ T5907] usb usb7-port1: unable to enumerate USB device [ 540.862401][ T10] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 541.022852][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 541.030416][ T10] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.043741][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 541.050694][ T10] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 541.061520][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.073452][ T10] usb 6-1: config 0 descriptor?? [ 541.299705][T13277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.307239][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 541.333611][T13277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.590431][ T10] corsair-cpro 0003:1B1C:0C10.003E: unknown main item tag 0x0 [ 541.605236][ T10] corsair-cpro 0003:1B1C:0C10.003E: item fetching failed at offset 1/5 [ 541.629504][ T10] corsair-cpro 0003:1B1C:0C10.003E: probe with driver corsair-cpro failed with error -22 [ 541.667889][ T10] usb 6-1: USB disconnect, device number 50 [ 541.790723][T13320] pimreg: entered allmulticast mode [ 542.004324][T13333] netlink: 'syz.4.1884': attribute type 1 has an invalid length. [ 542.096234][T13341] binder: BINDER_SET_CONTEXT_MGR already set [ 542.104574][T13341] binder: 13338:13341 ioctl 4018620d 200000000100 returned -16 [ 542.112656][T13341] binder: BINDER_SET_CONTEXT_MGR already set [ 542.120157][T13341] binder: 13338:13341 ioctl 4018620d 200000000100 returned -16 [ 542.130631][T13342] binder: BINDER_SET_CONTEXT_MGR already set [ 542.141335][T13342] binder: 13338:13342 ioctl 4018620d 200000004a80 returned -16 [ 542.253611][T13350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.264995][T13351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.365202][T13354] netlink: 'syz.4.1890': attribute type 10 has an invalid length. [ 542.386146][T13354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.400077][T13354] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 542.411540][T13354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.420267][T13354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.429611][T13354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.439315][T13354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.510422][T13354] bond0: (slave batadv0): Releasing backup interface [ 542.627229][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 542.787933][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 542.793241][ T6163] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 542.803343][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 542.816203][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 542.830412][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 542.839906][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.848270][ T10] usb 6-1: Product: syz [ 542.852880][ T10] usb 6-1: Manufacturer: syz [ 542.857753][ T10] usb 6-1: SerialNumber: syz [ 542.866607][ T10] usb 6-1: config 0 descriptor?? [ 542.876976][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 542.886294][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 542.958681][ T6163] usb 7-1: Using ep0 maxpacket: 16 [ 542.966629][ T6163] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.977095][ T6163] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.988768][ T6163] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 542.998819][ T6163] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 543.008589][ T6163] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.024874][ T6163] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 543.035321][ T6163] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 543.043409][ T6163] usb 7-1: Manufacturer: syz [ 543.052466][ T6163] usb 7-1: config 0 descriptor?? [ 543.342676][T13389] wg0 speed is unknown, defaulting to 1000 [ 543.351203][T13389] wg0 speed is unknown, defaulting to 1000 [ 543.358741][ T6163] rc_core: IR keymap rc-hauppauge not found [ 543.366475][ T3520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.379852][ T6163] Registered IR keymap rc-empty [ 543.385154][ T6163] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 543.408035][ T6163] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 543.433439][ T6163] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 543.453300][ T6163] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input72 [ 543.478686][ T6163] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 543.504202][ T6163] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 543.529961][ T6163] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 543.541323][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (87) [ 543.557729][ T6163] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 543.590644][ T6163] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 543.621909][ T6163] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 543.645394][ T6163] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 543.668166][ T6163] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 543.709491][ T6163] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 543.739586][ T6163] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 543.788961][ T6163] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 543.820471][ T6163] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 543.838982][ T10] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 543.860863][ T6163] usb 7-1: USB disconnect, device number 53 [ 544.041113][T12415] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.304972][ T10] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 544.313905][ T10] em28xx 6-1:0.0: No AC97 audio processor [ 544.330277][ T10] usb 6-1: USB disconnect, device number 51 [ 544.339034][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 544.359383][ T10] em28xx 6-1:0.0: Freeing device [ 544.649116][T13470] 9p: Bad value for 'rfdno' [ 545.183279][ T5934] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 545.204880][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 545.323672][ T5934] usb 7-1: device descriptor read/64, error -71 [ 545.378210][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.389818][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.399807][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 545.410372][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.422843][ T10] usb 6-1: config 0 descriptor?? [ 545.580327][ T5934] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 545.647634][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 545.657582][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 545.664823][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 545.672096][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 545.679194][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 545.686299][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 545.693167][ T10] pyra 0003:1E7D:2CF6.003F: unknown main item tag 0x0 [ 545.705430][ T10] pyra 0003:1E7D:2CF6.003F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 545.728999][ T5934] usb 7-1: device descriptor read/64, error -71 [ 545.847487][ T5934] usb usb7-port1: attempt power cycle [ 546.210045][ T5934] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 546.232261][ T5934] usb 7-1: device descriptor read/8, error -71 [ 546.265127][ T10] pyra 0003:1E7D:2CF6.003F: couldn't init struct pyra_device [ 546.278869][ T10] pyra 0003:1E7D:2CF6.003F: couldn't install mouse [ 546.289391][ T10] pyra 0003:1E7D:2CF6.003F: probe with driver pyra failed with error -71 [ 546.304269][ T10] usb 6-1: USB disconnect, device number 52 [ 546.488050][ T5934] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 546.510701][ T5934] usb 7-1: device descriptor read/8, error -71 [ 546.629441][ T5934] usb usb7-port1: unable to enumerate USB device [ 546.680751][ T10] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 546.841084][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 546.848468][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.859125][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 546.869956][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.881892][ T10] usb 6-1: config 0 descriptor?? [ 546.897404][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input73 [ 547.183597][T13544] fuse: Bad value for 'fd' [ 547.201595][ T5182] bcm5974 6-1:0.0: could not read from device [ 547.202653][ T10] usb 6-1: USB disconnect, device number 53 [ 547.219906][ T5840] bcm5974 6-1:0.0: could not read from device [ 547.383177][T13560] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20001 [ 547.476986][ T3455] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 547.998900][T13574] kvm: pic: non byte write [ 548.212892][T13587] overlayfs: statfs failed on './file0' [ 548.317180][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 548.432655][T13598] wg0 speed is unknown, defaulting to 1000 [ 548.440151][T13598] wg0 speed is unknown, defaulting to 1000 [ 548.488624][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 548.505899][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.527725][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.540220][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 548.554937][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 548.566800][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 548.597846][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 548.607782][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 548.620433][ T10] usb 6-1: Manufacturer: syz [ 548.639869][ T10] usb 6-1: config 0 descriptor?? [ 548.831077][T12415] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 548.981176][ T10] rc_core: IR keymap rc-hauppauge not found [ 549.000776][ T10] Registered IR keymap rc-empty [ 549.006387][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 549.036319][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 549.064933][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 549.084992][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input74 [ 549.115450][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 549.142930][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 549.162571][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 549.183572][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 549.205156][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 549.239534][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 549.260726][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 549.280900][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 549.301159][T12415] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 549.309296][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 549.345048][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 549.370572][ T10] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 549.392246][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 549.402058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 549.416263][ T10] usb 6-1: USB disconnect, device number 54 [ 549.472043][T12415] usb 7-1: Using ep0 maxpacket: 16 [ 549.490858][T12415] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 549.513247][T12415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.526159][T12415] usb 7-1: Product: syz [ 549.530030][ T3520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.546080][T12415] usb 7-1: Manufacturer: syz [ 549.553150][T12415] usb 7-1: SerialNumber: syz [ 549.575240][T12415] r8152-cfgselector 7-1: Unknown version 0x0000 [ 549.585332][T12415] r8152-cfgselector 7-1: config 0 descriptor?? [ 550.058548][T13632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.067906][T13632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.149943][T12415] r8152-cfgselector 7-1: Unknown version 0x0000 [ 550.158351][T12415] r8152-cfgselector 7-1: bad CDC descriptors [ 550.173400][T12415] r8152-cfgselector 7-1: USB disconnect, device number 58 [ 550.220900][ T5907] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 550.386432][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 550.397970][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.407882][ T5907] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 550.417129][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.428439][ T5907] usb 6-1: config 0 descriptor?? [ 550.437023][ T5907] hub 6-1:0.0: USB hub found [ 550.650597][ T5907] hub 6-1:0.0: 3 ports detected [ 550.773549][T13708] fuse: Bad value for 'fd' [ 550.896881][T13719] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 550.903486][T13719] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 550.935304][T13725] netlink: 'syz.6.1924': attribute type 10 has an invalid length. [ 550.943624][T13719] vhci_hcd vhci_hcd.0: Device attached [ 550.955318][T13725] lo: entered promiscuous mode [ 550.966287][T13725] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 550.995139][T13720] vhci_hcd: connection closed [ 550.996800][ T3563] vhci_hcd vhci_hcd.7: stop threads [ 551.026388][ T3563] vhci_hcd vhci_hcd.7: release socket [ 551.038599][ T3563] vhci_hcd vhci_hcd.7: disconnect device [ 551.085914][T13733] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1925'. [ 551.611569][ T5897] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 551.741107][ T5907] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 551.747688][ T5907] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 551.761566][ T5907] usbhid 6-1:0.0: can't add hid device: -32 [ 551.767815][ T5907] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 551.776857][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 551.790972][ T5897] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.803313][ T5897] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.817904][ T5897] usb 7-1: config 0 interface 0 has no altsetting 0 [ 551.824583][ T5897] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 551.834544][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.845507][ T5897] usb 7-1: config 0 descriptor?? [ 552.291585][ T5897] isku 0003:1E7D:3264.0040: item fetching failed at offset 2/3 [ 552.300752][ T5897] isku 0003:1E7D:3264.0040: parse failed [ 552.307039][ T5897] isku 0003:1E7D:3264.0040: probe with driver isku failed with error -22 [ 552.517645][T13750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.527272][T13750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.537477][ T5897] usb 7-1: USB disconnect, device number 59 [ 553.175549][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1929'. [ 553.352258][T13792] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1931'. [ 553.441168][T12415] usb 6-1: USB disconnect, device number 55 [ 553.622860][ T6040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.889124][ T5897] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 554.050074][ T5897] usb 7-1: Using ep0 maxpacket: 16 [ 554.057201][ T5897] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.067854][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 554.079103][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 554.089845][ T5897] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 554.099845][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.117286][ T5897] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 554.126667][ T5897] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 554.134707][ T5897] usb 7-1: Manufacturer: syz [ 554.145927][ T5897] usb 7-1: config 0 descriptor?? [ 554.434596][ T5897] rc_core: IR keymap rc-hauppauge not found [ 554.440585][ T5897] Registered IR keymap rc-empty [ 554.455610][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 554.480032][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 554.506377][ T5897] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 554.575383][ T5897] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input75 [ 554.603470][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 554.630492][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 554.681349][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 554.702173][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 554.725295][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 554.745040][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 554.759106][T13861] usb usb8: usbfs: process 13861 (syz.6.1934) did not claim interface 0 before use [ 554.798360][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 554.825626][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 554.862460][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 554.883851][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 554.908352][ T5897] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 554.916855][T12415] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 554.937887][ T5897] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 555.050105][T13861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.064368][T13861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.087418][T12415] usb 6-1: Using ep0 maxpacket: 32 [ 555.094772][T12415] usb 6-1: config 0 has an invalid interface number: 141 but max is 0 [ 555.108398][T12415] usb 6-1: config 0 has no interface number 0 [ 555.121063][T12415] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 555.141115][T12415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.149479][T12415] usb 6-1: Product: syz [ 555.163346][T12415] usb 6-1: Manufacturer: syz [ 555.168101][T12415] usb 6-1: SerialNumber: syz [ 555.191822][T12415] usb 6-1: config 0 descriptor?? [ 555.208983][T12415] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 555.426816][T13852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.438181][T13852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.449880][T13852] tipc: Can't bind to reserved service type 0 [ 555.493223][T12415] gspca_vc032x: reg_w err -71 [ 555.498455][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.507983][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.517962][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.523558][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.530119][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.535735][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.546267][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.552175][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.561615][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.567122][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.590572][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.604382][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.610419][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.616447][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.624318][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.629750][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.635881][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.641419][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.647680][T12415] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.653096][T12415] gspca_vc032x: Unknown sensor... [ 555.664127][T12415] vc032x 6-1:0.141: probe with driver vc032x failed with error -22 [ 555.675772][ T1001] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.687328][T13895] loop2: detected capacity change from 0 to 7 [ 555.699959][T12415] usb 6-1: USB disconnect, device number 56 [ 555.727408][T13895] Dev loop2: unable to read RDB block 7 [ 555.739595][T13895] loop2: AHDI p1 p2 p3 [ 555.744634][T13895] loop2: partition table partially beyond EOD, truncated [ 555.756796][T13895] loop2: p1 start 1601398130 is beyond EOD, truncated [ 555.767534][T13895] loop2: p2 start 1702059890 is beyond EOD, truncated [ 556.103153][T12415] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 556.235163][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1944'. [ 556.248934][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1944'. [ 556.265381][T13908] netlink: 'syz.7.1944': attribute type 5 has an invalid length. [ 556.278383][T13908] netlink: 'syz.7.1944': attribute type 9 has an invalid length. [ 556.295197][T12415] usb 6-1: config 0 has an invalid interface number: 116 but max is 0 [ 556.303736][T12415] usb 6-1: config 0 has no interface number 0 [ 556.319795][T12415] usb 6-1: config 0 interface 116 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 556.338260][T12415] usb 6-1: config 0 interface 116 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 556.356066][T12415] usb 6-1: New USB device found, idVendor=044f, idProduct=230b, bcdDevice= d.e9 [ 556.381056][T12415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.403554][T12415] usb 6-1: Product: syz [ 556.407807][T12415] usb 6-1: Manufacturer: syz [ 556.412541][T12415] usb 6-1: SerialNumber: syz [ 556.428892][T12415] usb 6-1: config 0 descriptor?? [ 556.445576][T13895] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 556.655538][T13925] kvm: kvm [13924]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xfffffffffffffeb6 [ 556.674268][ T5837] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 556.685135][T12415] usb 6-1: USB disconnect, device number 57 [ 556.899976][ T5897] usb 7-1: USB disconnect, device number 60 [ 557.082467][T13956] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.198595][T13956] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.348751][T13956] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.387774][T13969] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 557.489180][T13956] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.691432][ T3563] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.734320][ T3563] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.779473][ T3563] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.809680][ T51] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.049700][T12415] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 558.177866][ T795] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 558.210009][T12415] usb 6-1: Using ep0 maxpacket: 32 [ 558.216704][T12415] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 558.229608][T12415] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 558.238931][T12415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.248723][T12415] usb 6-1: Product: syz [ 558.254384][T12415] usb 6-1: Manufacturer: syz [ 558.259842][T12415] usb 6-1: SerialNumber: syz [ 558.267935][T12415] usb 6-1: config 0 descriptor?? [ 558.273930][T13986] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 558.289067][T12415] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input76 [ 558.339085][ T795] usb 7-1: Using ep0 maxpacket: 16 [ 558.353722][ T795] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 558.371292][ T795] usb 7-1: config 0 has no interface number 0 [ 558.387050][ T795] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.409543][ T795] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.433232][ T795] usb 7-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 558.444519][ T795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.459450][ T795] usb 7-1: config 0 descriptor?? [ 558.529479][T13986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.539954][T13986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.618265][T12415] usb 6-1: USB disconnect, device number 58 [ 558.624325][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 558.906173][T13994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.919588][T13994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.932788][ T795] usbhid 7-1:0.1: can't add hid device: -71 [ 558.939796][ T795] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 558.952773][ T795] usb 7-1: USB disconnect, device number 61 [ 559.098046][ T7766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.473145][T12415] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 559.530572][T14037] comedi comedi1: comedi_config --init_data is deprecated [ 559.587509][T14040] netlink: 'syz.6.1955': attribute type 9 has an invalid length. [ 559.596382][T14040] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1955'. [ 559.612055][T14040] comedi comedi1: comedi_parport: I/O port conflict (0xfffffffffffffffe,3) [ 559.643093][T12415] usb 6-1: Using ep0 maxpacket: 8 [ 559.657963][T12415] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 559.676173][T12415] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 559.685715][T12415] usb 6-1: Product: syz [ 559.693225][T12415] usb 6-1: Manufacturer: syz [ 559.710030][T12415] usb 6-1: SerialNumber: syz [ 559.727590][T12415] usb 6-1: config 0 descriptor?? [ 559.751213][T12415] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 560.172665][T12415] gspca_zc3xx: reg_r err -71 [ 560.185806][T12415] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 560.203030][T12415] usb 6-1: USB disconnect, device number 59 [ 561.044004][T14108] fuse: Unknown parameter 'group¦ÄD!ËíýøEÏ¡NWîaÿð [ 561.044004][T14108] î&Pƒ › ßýSÓWk%<Ôçí#2•^/|W' [ 561.226028][T12415] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 561.398982][T12415] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.410051][T12415] usb 7-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 561.419213][T12415] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.431495][T12415] usb 7-1: config 0 descriptor?? [ 561.837472][ T6040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.877577][T12415] viewsonic 0003:0543:E621.0041: item fetching failed at offset 6/7 [ 561.899305][T12415] viewsonic 0003:0543:E621.0041: probe with driver viewsonic failed with error -22 [ 561.997352][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1968'. [ 562.097253][T14102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.110985][T14102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.142166][ T5884] usb 7-1: USB disconnect, device number 62 [ 562.563044][ T5884] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 562.725401][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.737155][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.752499][ T5884] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 562.762197][ T5884] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 562.770834][ T5884] usb 7-1: Manufacturer: syz [ 562.778775][ T5884] usb 7-1: config 0 descriptor?? [ 563.322329][T12415] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 563.482783][T12415] usb 6-1: Using ep0 maxpacket: 16 [ 563.490857][T12415] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 563.502227][T12415] usb 6-1: config 0 interface 0 has no altsetting 0 [ 563.512987][T12415] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 563.522759][T12415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.531303][T12415] usb 6-1: Product: syz [ 563.535534][T12415] usb 6-1: Manufacturer: syz [ 563.540659][T12415] usb 6-1: SerialNumber: syz [ 563.550663][T12415] usb 6-1: config 0 descriptor?? [ 563.785774][T12415] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input77 [ 563.822629][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 563.844370][T12415] imon:send_packet: packet tx failed (-71) [ 563.868711][T12415] imon 6-1:0.0: panel buttons/knobs setup failed [ 563.876822][T14139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.893451][T14139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.904806][ T5884] uclogic 0003:256C:006D.0042: v1 frame probing failed: -71 [ 563.922586][T14182] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1973'. [ 563.933113][ T5884] uclogic 0003:256C:006D.0042: failed probing parameters: -71 [ 563.941183][ T5884] uclogic 0003:256C:006D.0042: probe with driver uclogic failed with error -71 [ 563.979990][ T5884] usb 7-1: USB disconnect, device number 63 [ 564.039001][T12415] rc_core: IR keymap rc-imon-pad not found [ 564.045007][T12415] Registered IR keymap rc-empty [ 564.059783][T12415] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 564.076423][T12415] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 564.092944][T12415] imon:send_packet: packet tx failed (-71) [ 564.123372][T12415] imon 6-1:0.0: remote input dev register failed [ 564.138380][T12415] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 564.192294][T14208] netlink: 'syz.4.1975': attribute type 2 has an invalid length. [ 564.214020][T12415] imon 6-1:0.0: unable to initialize intf0, err 0 [ 564.220661][T12415] imon:imon_probe: failed to initialize context! [ 564.227273][T12415] imon 6-1:0.0: unable to register, err -19 [ 564.249389][T12415] usb 6-1: USB disconnect, device number 60 [ 564.264108][ T5840] udevd[5840]: setting mode of /dev/bus/usb/006/060 to 020664 failed: No such file or directory [ 564.276247][T14208] netlink: 'syz.4.1975': attribute type 2 has an invalid length. [ 564.285562][ T5840] udevd[5840]: setting owner of /dev/bus/usb/006/060 to uid=0, gid=0 failed: No such file or directory [ 564.584501][T12415] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 564.768308][T12415] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 564.777743][T12415] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.788764][T12415] usb 6-1: config 0 descriptor?? [ 564.799091][ T5884] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 564.969345][ T5884] usb 7-1: Using ep0 maxpacket: 8 [ 564.977083][ T5884] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 564.988651][ T5884] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 564.998077][ T5884] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 565.006485][ T5884] usb 7-1: Product: syz [ 565.010903][ T5884] usb 7-1: Manufacturer: syz [ 565.016663][ T5884] usb 7-1: SerialNumber: syz [ 565.043728][T12415] kaweth 6-1:0.0: Firmware present in device. [ 565.050777][T12415] kaweth 6-1:0.0: Error reading configuration (-71), no net device created [ 565.060793][T12415] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 565.073440][T12415] usb 6-1: USB disconnect, device number 61 [ 565.242003][ T5884] usb 7-1: Invalid connection information received from device [ 565.259132][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.459038][T14254] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 565.459315][T14237] IPVS: stopping backup sync thread 14254 ... [ 565.477818][T14257] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 565.490521][T14237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.500483][T14237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.524282][T12415] usb 7-1: USB disconnect, device number 64 [ 565.585219][T14269] netlink: 'syz.6.1979': attribute type 10 has an invalid length. [ 565.599045][T14269] team0: Device ipvlan0 failed to register rx_handler [ 565.726194][T14277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1981'. [ 566.017555][T12415] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 566.199548][T12415] usb 7-1: Using ep0 maxpacket: 16 [ 566.206644][T12415] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.216917][T12415] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.229056][T12415] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.238267][T12415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.247763][T12415] usb 7-1: Product: syz [ 566.252049][T12415] usb 7-1: Manufacturer: syz [ 566.256858][T12415] usb 7-1: SerialNumber: syz [ 566.482567][T12415] usb 7-1: 0:2 : does not exist [ 566.494540][T12415] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 566.558637][T12415] usb 7-1: USB disconnect, device number 65 [ 566.604929][T11487] udevd[11487]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.926642][ T10] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 567.086920][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 567.236758][ T10] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 567.397315][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 567.414701][ T10] usb usb6-port1: attempt power cycle [ 567.520682][T14335] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1989'. [ 567.531114][T14335] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1989'. [ 567.803835][ T10] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 567.829141][T14351] syzkaller1: entered promiscuous mode [ 567.834809][T14351] syzkaller1: entered allmulticast mode [ 567.837441][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 568.005516][ T10] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 568.007896][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 568.049620][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 568.055599][ T10] usb usb6-port1: unable to enumerate USB device [ 568.150581][T14365] netlink: 'syz.6.1993': attribute type 10 has an invalid length. [ 568.159671][T14365] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1993'. [ 568.179508][T14365] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 568.456076][ T5907] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 568.627142][ T5907] usb 7-1: Using ep0 maxpacket: 8 [ 568.635132][ T5907] usb 7-1: config 2 interface 0 has no altsetting 0 [ 568.645554][ T5907] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 568.656152][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.664613][ T5907] usb 7-1: Product: syz [ 568.668908][ T5907] usb 7-1: Manufacturer: syz [ 568.673788][ T5907] usb 7-1: SerialNumber: syz [ 568.899597][T14365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.909171][T14365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.930456][ T5907] usb 7-1: USB disconnect, device number 66 [ 569.771458][ T5907] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 569.935344][ T5907] usb 7-1: config 0 has an invalid interface number: 157 but max is 0 [ 569.964285][ T5907] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.975780][ T5907] usb 7-1: config 0 has no interface number 0 [ 569.981990][ T5907] usb 7-1: config 0 interface 157 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 570.002414][ T5907] usb 7-1: New USB device found, idVendor=1b3d, idProduct=01dd, bcdDevice=ea.43 [ 570.010722][T14398] usb usb8: usbfs: process 14398 (syz.5.1996) did not claim interface 0 before use [ 570.013077][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.029597][ T5907] usb 7-1: Product: syz [ 570.033815][ T5907] usb 7-1: Manufacturer: syz [ 570.038469][ T5907] usb 7-1: SerialNumber: syz [ 570.048453][ T5907] usb 7-1: config 0 descriptor?? [ 570.060987][ T5907] ftdi_sio 7-1:0.157: FTDI USB Serial Device converter detected [ 570.071306][ T5907] ftdi_sio ttyUSB0: unknown device type: 0xea43 [ 570.205508][T14409] usb usb8: usbfs: process 14409 (syz.5.1999) did not claim interface 0 before use [ 570.220994][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 570.277480][ T5907] usb 7-1: USB disconnect, device number 67 [ 570.286209][ T5907] ftdi_sio 7-1:0.157: device disconnected [ 570.397336][T14424] netlink: 9996 bytes leftover after parsing attributes in process `syz.5.2001'. [ 570.410165][T14424] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2001'. [ 570.723329][ T10] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 570.734484][ T3520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.888923][T14433] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.901536][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 570.920983][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.931405][ T10] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 570.942311][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.965546][ T10] usb 6-1: config 0 descriptor?? [ 571.005670][T14433] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.071363][T14433] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.137152][T14433] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.244004][ T3455] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.266808][ T3455] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.294386][ T3520] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.338693][ T36] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.422300][ T10] glorious 0003:258A:0036.0043: item fetching failed at offset 0/2 [ 571.449566][ T10] glorious 0003:258A:0036.0043: probe with driver glorious failed with error -22 [ 571.497611][ T5833] Bluetooth: hci0: unexpected event for opcode 0x201c [ 571.621420][T14490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2008'. [ 571.642052][ T10] usb 6-1: USB disconnect, device number 66 [ 571.796076][T14506] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.2010'. [ 571.878567][T12415] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 571.947170][T14521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.958498][T14521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.028307][T12415] usb 7-1: device descriptor read/64, error -71 [ 572.135694][ T10] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 572.284907][T12415] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 572.295871][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 572.302938][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 572.312344][ T10] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 572.322451][ T10] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 572.332534][ T10] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 572.342651][ T10] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 572.352724][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 572.360481][ T10] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 572.369681][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.387143][ T10] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 572.425778][T12415] usb 7-1: device descriptor read/64, error -71 [ 572.542205][T12415] usb usb7-port1: attempt power cycle [ 572.608511][ T10] scsi host1: usb-storage 6-1:1.0 [ 572.905257][T12415] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 572.937959][T12415] usb 7-1: device descriptor read/8, error -71 [ 573.133621][ T5897] usb 6-1: USB disconnect, device number 67 [ 573.196352][T12415] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 573.226780][T12415] usb 7-1: device descriptor read/8, error -71 [ 573.344310][T12415] usb usb7-port1: unable to enumerate USB device [ 573.478406][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.485854][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.497120][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.908680][T14558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.919701][T14558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.454774][T14576] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 574.542769][T14581] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2016'. [ 574.778554][T14608] netlink: 'syz.6.2018': attribute type 21 has an invalid length. [ 574.789686][T14608] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2018'. [ 575.087175][ T5907] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 575.236729][ T5907] usb 7-1: device descriptor read/64, error -71 [ 575.259011][T14527] [U] ^H [ 575.503669][T14647] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.504466][ T5907] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 575.597119][T14647] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.653918][ T5907] usb 7-1: device descriptor read/64, error -71 [ 575.682692][T14647] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.776032][T14647] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.787719][ T5907] usb usb7-port1: attempt power cycle [ 575.937019][ T7766] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.960907][ T7766] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.994599][ T7766] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.016959][ T7766] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.032898][T14646] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.139865][T14646] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.156608][ T5907] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 576.178368][ T5907] usb 7-1: device descriptor read/8, error -71 [ 576.248503][T14646] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.359236][T14646] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.445419][ T5907] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 576.488791][ T5907] usb 7-1: device descriptor read/8, error -71 [ 576.606331][ T5907] usb usb7-port1: unable to enumerate USB device [ 576.895591][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.605848][ T10] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 578.791886][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 578.801463][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.810146][ T10] usb 6-1: Product: syz [ 578.819873][ T10] usb 6-1: Manufacturer: syz [ 578.824659][ T10] usb 6-1: SerialNumber: syz [ 578.859860][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 578.901831][T12415] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 578.960163][ T6040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.687725][ T5907] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 579.859099][ T5907] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 579.868186][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.879440][ T5907] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 579.888654][ T5907] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 579.904918][ T5907] usb 7-1: Manufacturer: syz [ 579.925552][ T5907] usb 7-1: config 0 descriptor?? [ 579.963559][ T3455] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.994124][ T3455] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.006709][ T5907] rc_core: IR keymap rc-hauppauge not found [ 580.012676][ T5907] Registered IR keymap rc-empty [ 580.021486][ T5907] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 580.039247][ T5907] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input79 [ 580.059451][ T6040] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.096077][ T6040] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.231352][T12415] usb 6-1: Service connection timeout for: 256 [ 580.237741][T12415] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 580.278154][T12415] ath9k_htc: Failed to initialize the device [ 580.290783][T12415] usb 6-1: ath9k_htc: USB layer deinitialized [ 580.438774][ C1] igorplugusb 7-1:0.0: receive overflow, at least 8 lost [ 580.706292][ T10] usb 7-1: USB disconnect, device number 76 [ 581.349059][T14845] input: syz1 as /devices/virtual/input/input80 [ 581.634514][ T5907] usb 6-1: USB disconnect, device number 69 [ 581.826880][T14883] comedi comedi2: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 582.103118][ T5907] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 582.231379][ T5884] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 582.266514][ T5907] usb 6-1: config 16 has an invalid interface number: 19 but max is 0 [ 582.275370][ T5907] usb 6-1: config 16 has no interface number 0 [ 582.289086][ T5907] usb 6-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 582.302034][ T5907] usb 6-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 582.312484][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.322148][ T5907] usb 6-1: Product: syz [ 582.326505][ T5907] usb 6-1: Manufacturer: syz [ 582.331320][ T5907] usb 6-1: SerialNumber: syz [ 582.397324][ T5884] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.407602][ T5884] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 582.420862][ T5884] usb 7-1: config 0 interface 0 has no altsetting 0 [ 582.427873][ T5884] usb 7-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 582.437078][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.451202][ T5884] usb 7-1: config 0 descriptor?? [ 582.568025][T14877] overlayfs: missing 'workdir' [ 582.682052][ T5884] usb 7-1: string descriptor 0 read error: -71 [ 582.701656][ T5884] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input81 [ 582.719480][ T5182] bcm5974 7-1:0.0: could not read from device [ 582.733756][ T5182] bcm5974 7-1:0.0: could not read from device [ 582.746818][ T5884] usb 7-1: USB disconnect, device number 77 [ 582.756207][ T5182] bcm5974 7-1:0.0: could not read from device [ 582.804707][ T6081] udevd[6081]: Error opening device "/dev/input/event4": No such file or directory [ 582.818837][ T6081] udevd[6081]: Unable to EVIOCGABS device "/dev/input/event4" [ 582.829943][ T6081] udevd[6081]: Unable to EVIOCGABS device "/dev/input/event4" [ 582.838392][ T6081] udevd[6081]: Unable to EVIOCGABS device "/dev/input/event4" [ 582.846661][ T6081] udevd[6081]: Unable to EVIOCGABS device "/dev/input/event4" [ 583.057137][ T6040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.205236][ T5907] usb 6-1: USB disconnect, device number 70 [ 583.229161][T11487] udevd[11487]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.536137][ T5907] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 583.595742][T14965] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 583.686122][ T5907] usb 6-1: device descriptor read/64, error -71 [ 584.040190][ T5907] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 584.188826][ T5907] usb 6-1: device descriptor read/64, error -71 [ 584.318015][ T5907] usb usb6-port1: attempt power cycle [ 584.680671][ T5907] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 584.702478][ T5907] usb 6-1: device descriptor read/8, error -71 [ 584.926546][ T5897] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 584.958788][ T5907] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 584.991687][ T5907] usb 6-1: device descriptor read/8, error -71 [ 585.097765][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 585.104726][ T5897] usb 7-1: config 0 has an invalid interface number: 244 but max is 0 [ 585.113742][ T5907] usb usb6-port1: unable to enumerate USB device [ 585.120197][ T5897] usb 7-1: config 0 has no interface number 0 [ 585.123921][ T3520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 585.130553][ T5897] usb 7-1: config 0 interface 244 has no altsetting 0 [ 585.145675][ T5897] usb 7-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 585.155032][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.163145][ T5897] usb 7-1: Product: syz [ 585.167325][ T5897] usb 7-1: Manufacturer: syz [ 585.171938][ T5897] usb 7-1: SerialNumber: syz [ 585.179261][ T5897] usb 7-1: config 0 descriptor?? [ 585.406045][ T5897] radioshark 7-1:0.244: Invalid radioSHARK device [ 585.413743][ T5897] radioshark 7-1:0.244: probe with driver radioshark failed with error -22 [ 585.423159][ T5897] usbhid 7-1:0.244: couldn't find an input interrupt endpoint [ 585.437779][ T5897] usb 7-1: USB disconnect, device number 78 [ 586.252728][ T6163] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 586.415403][ T6163] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 586.425268][ T6163] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.439186][ T6163] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 586.448662][ T6163] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 586.460641][ T6163] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.473623][ T6163] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 586.483869][ T6163] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 586.487813][T15008] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 586.493458][ T6163] usb 7-1: Product: syz [ 586.505345][ T6163] usb 7-1: Manufacturer: syz [ 586.518465][ T6163] cdc_wdm 7-1:1.0: skipping garbage [ 586.524793][ T6163] cdc_wdm 7-1:1.0: skipping garbage [ 586.540580][ T6163] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 586.548005][ T6163] cdc_wdm 7-1:1.0: Unknown control protocol [ 586.595258][ T30] audit: type=1326 audit(1783386200.651:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15015 comm="syz.5.2059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6eff58f749 code=0x7ffb0000 [ 586.652824][T14970] Bluetooth: hci4: command 0x0406 tx timeout [ 586.734425][ T6163] usb 7-1: USB disconnect, device number 79 [ 587.882022][ T5884] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 588.049502][ T5884] usb 7-1: Using ep0 maxpacket: 16 [ 588.057204][ T5884] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.069481][ T5884] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 588.083975][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 588.095532][ T5884] usb 7-1: Product: syz [ 588.113433][ T5884] usb 7-1: config 0 descriptor?? [ 588.124805][ T5884] gspca_main: spca501-2.14.0 probing 0000:0000 [ 588.180602][T15065] 9p: Bad value for 'wfdno' [ 588.561639][ T5884] gspca_spca501: reg write: error -71 [ 588.568042][ T5884] spca501 7-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 588.579721][ T5884] spca501 7-1:0.0: probe with driver spca501 failed with error -22 [ 588.594640][ T5884] usb 7-1: USB disconnect, device number 80 [ 588.774421][T15081] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2069'. [ 588.783662][T15081] 0·: renamed from hsr_slave_1 (while UP) [ 588.800734][T15081] 0·: entered allmulticast mode [ 588.807550][T15081] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 589.157681][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2074'. [ 589.215996][ T1001] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.269383][ T10] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 589.429215][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 589.436576][ T10] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 589.444804][ T10] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 589.455074][ T10] usb 6-1: config 6 has no interface number 0 [ 589.461387][ T10] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6 [ 589.473940][ T10] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 589.483991][ T6163] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 589.491879][ T10] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.508496][ T10] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 589.518892][ T10] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 589.527270][ T10] usb 6-1: Product: syz [ 589.531478][ T10] usb 6-1: Manufacturer: syz [ 589.536234][ T10] usb 6-1: SerialNumber: syz [ 589.547506][ T10] hso 6-1:6.2: Failed to find INT IN ep [ 589.643234][ T6163] usb 7-1: device descriptor read/64, error -71 [ 589.762964][ T5884] usb 6-1: USB disconnect, device number 75 [ 589.904742][ T6163] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 590.049547][ T6163] usb 7-1: device descriptor read/64, error -71 [ 590.167637][ T6163] usb usb7-port1: attempt power cycle [ 590.530804][ T6163] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 590.553612][ T6163] usb 7-1: device descriptor read/8, error -71 [ 590.585382][ T6040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 590.616442][ T10] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 590.780139][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 590.791369][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.802338][ T10] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 590.811715][ T6163] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 590.819526][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.830916][ T10] usb 6-1: config 0 descriptor?? [ 590.844475][ T6163] usb 7-1: device descriptor read/8, error -71 [ 590.959011][ T6163] usb usb7-port1: unable to enumerate USB device [ 591.180797][T15133] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 591.352153][ T10] chicony 0003:04F2:1421.0044: unknown main item tag 0x0 [ 591.365682][ T10] chicony 0003:04F2:1421.0044: unknown main item tag 0x0 [ 591.372973][ T10] chicony 0003:04F2:1421.0044: unknown main item tag 0x0 [ 591.380614][ T10] chicony 0003:04F2:1421.0044: unknown main item tag 0x0 [ 591.389210][ T10] chicony 0003:04F2:1421.0044: unknown main item tag 0x0 [ 591.412062][ T10] chicony 0003:04F2:1421.0044: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.5-1/input0 [ 591.585922][ T10] usb 6-1: USB disconnect, device number 76 [ 592.260636][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2080'. [ 592.404121][T15168] netlink: 'syz.7.2081': attribute type 2 has an invalid length. [ 592.411932][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2081'. [ 592.426425][T15168] netlink: 'syz.7.2081': attribute type 10 has an invalid length. [ 592.434480][T15168] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2081'. [ 592.771767][ T5837] Bluetooth: hci4: ACL packet for unknown connection handle 1 [ 593.031220][T15194] fuse: Bad value for 'fd' [ 593.037800][ T5897] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 593.194544][ T10] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 593.209276][ T5897] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 593.222131][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.230864][ T5897] usb 7-1: Product: syz [ 593.235126][ T5897] usb 7-1: Manufacturer: syz [ 593.241884][ T5897] usb 7-1: SerialNumber: syz [ 593.365242][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 593.373819][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.397106][ T10] usb 6-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 593.407366][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.427742][ T10] usb 6-1: config 0 descriptor?? [ 593.531993][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2089'. [ 593.741774][ T5897] rtl8150 7-1:1.0: couldn't reset the device [ 593.761191][ T5897] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 593.776346][ T5897] usb 7-1: USB disconnect, device number 85 [ 593.929728][T15221] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2085'. [ 594.203477][T15223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.224194][T15223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.389453][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 594.403994][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 594.431162][ T10] usb 6-1: USB disconnect, device number 77 [ 594.639629][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2093'. [ 594.689276][T15255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2093'. [ 594.702026][T15255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2093'. [ 594.723825][T15255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2093'. [ 594.967348][T15268] delete_channel: no stack [ 595.001492][T15268] delete_channel: no stack [ 595.138165][T15279] delete_channel: no stack [ 595.164944][T15279] delete_channel: no stack [ 595.176541][T15282] program syz.6.2097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 595.301102][ T6163] usb 6-1: new low-speed USB device number 78 using dummy_hcd [ 595.382176][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.482716][ T6163] usb 6-1: Invalid ep0 maxpacket: 64 [ 595.643393][ T6163] usb 6-1: new low-speed USB device number 79 using dummy_hcd [ 595.792854][ T10] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 595.814262][ T6163] usb 6-1: Invalid ep0 maxpacket: 64 [ 595.820633][ T6163] usb usb6-port1: attempt power cycle [ 595.953254][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 595.961043][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.972441][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.983298][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 595.992498][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.003482][ T10] usb 7-1: config 0 descriptor?? [ 596.014652][ T10] hub 7-1:0.0: USB hub found [ 596.061736][ T3455] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.188624][ T6163] usb 6-1: new low-speed USB device number 80 using dummy_hcd [ 596.210743][ T6163] usb 6-1: Invalid ep0 maxpacket: 64 [ 596.225163][ T10] hub 7-1:0.0: 1 port detected [ 596.348991][ T6163] usb 6-1: new low-speed USB device number 81 using dummy_hcd [ 596.372694][ T6163] usb 6-1: Invalid ep0 maxpacket: 64 [ 596.378597][ T6163] usb usb6-port1: unable to enumerate USB device [ 596.684644][T13958] usb 7-1: USB disconnect, device number 86 [ 597.921273][T13958] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 598.083481][T13958] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.093805][T13958] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.103832][T13958] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 598.113065][T13958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 598.122855][T13958] usb 7-1: SerialNumber: syz [ 598.366620][T13958] usb 7-1: 0:2 : does not exist [ 598.448203][T13958] usb 7-1: USB disconnect, device number 87 [ 598.514016][T11487] udevd[11487]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.735327][ T6163] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 598.909766][ T6163] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 598.930125][ T6163] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 598.947962][ T6163] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.956171][ T6163] usb 6-1: Product: syz [ 598.962451][ T6163] usb 6-1: Manufacturer: syz [ 598.967113][ T6163] usb 6-1: SerialNumber: syz [ 599.211544][ T6163] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 599.220650][ T6163] usb 6-1: unit 5 not found! [ 599.260715][ T6163] usb 6-1: USB disconnect, device number 82 [ 599.295306][T11487] udevd[11487]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.789501][T15459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2117'. [ 599.855071][T15463] overlayfs: invalid origin (000000ca387fe0fb3738702bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f0000000000000000) [ 600.003442][T15473] netlink: 'syz.5.2120': attribute type 11 has an invalid length. [ 600.014837][T15473] netlink: 'syz.5.2120': attribute type 11 has an invalid length. [ 600.023450][T15473] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2120'. [ 600.163685][T15489] overlayfs: failed to resolve '/ÿÿÿÿÿÿ': -2 [ 600.178794][T15489] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 600.187950][T15489] overlayfs: missing 'lowerdir' [ 600.224779][T15489] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 600.241535][ T3563] Bluetooth: hci5: Frame reassembly failed (-84) [ 600.254270][ T3563] Bluetooth: hci5: Frame reassembly failed (-84) [ 600.450991][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2123'. [ 600.466593][T14970] Bluetooth: hci3: SCO packet for unknown connection handle 3 [ 600.799526][ T10] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 600.982171][ T10] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 600.991784][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.011613][ T10] usb 6-1: config 0 descriptor?? [ 601.247992][T15508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.262425][T15508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.537560][ T1001] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 602.099253][T14970] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 602.221548][ T3563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 602.391972][T14970] Bluetooth: hci5: command 0x1003 tx timeout [ 602.392536][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 602.618747][ T10] pegasus 6-1:0.0: can't reset MAC [ 602.628094][ T10] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 602.857192][ T5897] usb 6-1: USB disconnect, device number 83 [ 602.900649][ T5884] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 602.925455][T15586] syzkaller1: entered promiscuous mode [ 602.932027][T15586] syzkaller1: entered allmulticast mode [ 603.054843][ T5884] usb 7-1: device descriptor read/64, error -71 [ 603.333873][ T5884] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 603.440906][T15609] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 603.447480][T15609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 603.457238][T15609] vhci_hcd vhci_hcd.0: Device attached [ 603.471981][ T5884] usb 7-1: device descriptor read/64, error -71 [ 603.590248][ T5884] usb usb7-port1: attempt power cycle [ 603.717954][ T5907] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 603.718401][ T10] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 603.889316][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 603.895203][ T5907] usb 6-1: too many configurations: 60, using maximum allowed: 8 [ 603.906347][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.916724][ T5907] usb 6-1: config 0 has no interfaces? [ 603.924188][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.934613][ T5907] usb 6-1: config 0 has no interfaces? [ 603.941027][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.951485][ T5907] usb 6-1: config 0 has no interfaces? [ 603.957145][ T5884] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 603.965941][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.976512][ T5907] usb 6-1: config 0 has no interfaces? [ 603.983081][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.993677][ T5907] usb 6-1: config 0 has no interfaces? [ 603.999927][ T5884] usb 7-1: device descriptor read/8, error -71 [ 604.007077][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.017257][ T5907] usb 6-1: config 0 has no interfaces? [ 604.024880][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.036024][ T5907] usb 6-1: config 0 has no interfaces? [ 604.042672][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.053165][ T5907] usb 6-1: config 0 has no interfaces? [ 604.060742][ T5907] usb 6-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 604.069824][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 604.078280][ T5907] usb 6-1: Product: syz [ 604.082584][ T5907] usb 6-1: Manufacturer: syz [ 604.087385][ T5907] usb 6-1: SerialNumber: syz [ 604.095260][ T5907] usb 6-1: config 0 descriptor?? [ 604.252755][ T5884] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 604.274997][ T5884] usb 7-1: device descriptor read/8, error -71 [ 604.318966][T15609] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2132'. [ 604.329949][T15610] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 604.341038][T12415] usb 6-1: USB disconnect, device number 84 [ 604.350883][ T1001] vhci_hcd vhci_hcd.5: stop threads [ 604.356171][ T1001] vhci_hcd vhci_hcd.5: release socket [ 604.368466][ T1001] vhci_hcd vhci_hcd.5: disconnect device [ 604.394280][ T5884] usb usb7-port1: unable to enumerate USB device [ 604.968700][T15625] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2134'. [ 605.016641][T15625] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2134'. [ 605.147614][T15639] openvswitch: netlink: Flow key attribute not present in set flow. [ 605.208560][T15638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.220046][T15638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.461347][ T5884] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 605.633964][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.647560][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.657508][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 605.674029][ T5884] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice=97.a4 [ 605.683285][ T5884] usb 6-1: New USB device strings: Mfr=120, Product=225, SerialNumber=0 [ 605.691926][ T5884] usb 6-1: Product: syz [ 605.696217][ T5884] usb 6-1: Manufacturer: syz [ 605.704743][ T5884] usb 6-1: config 0 descriptor?? [ 606.220615][ T5921] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 606.361353][ T5921] usb 7-1: device descriptor read/64, error -71 [ 606.514395][T12415] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 606.533768][T12415] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 606.616430][ T5921] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 606.766224][ T5921] usb 7-1: device descriptor read/64, error -71 [ 606.895056][ T5921] usb usb7-port1: attempt power cycle [ 606.926861][ T3563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 607.258143][ T5921] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 607.280447][ T5921] usb 7-1: device descriptor read/8, error -71 [ 607.536289][ T5921] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 607.558400][ T5921] usb 7-1: device descriptor read/8, error -71 [ 607.675679][ T5921] usb usb7-port1: unable to enumerate USB device [ 608.388767][ T7765] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 608.412179][ T5884] usb 6-1: Max retries (5) exceeded reading string descriptor 200 [ 608.456062][ T5884] letsketch 0003:6161:4D15.0045: probe with driver letsketch failed with error -71 [ 608.487315][ T5884] usb 6-1: USB disconnect, device number 85 [ 608.527882][T15699] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2142'. [ 608.669195][T15712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.680030][T15712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.840967][ T5884] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 609.005329][ T5884] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 609.014657][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.023238][ T5884] usb 6-1: Product: syz [ 609.027470][ T5884] usb 6-1: Manufacturer: syz [ 609.032375][ T5884] usb 6-1: SerialNumber: syz [ 609.046317][ T5884] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 609.071791][ T5897] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 609.178078][T15729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.190751][T15729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.227039][ T10] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 609.536144][T12415] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 609.675204][T12415] usb 7-1: device descriptor read/64, error -71 [ 609.805189][ T5921] usb 6-1: USB disconnect, device number 86 [ 609.933431][T12415] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 610.081598][T12415] usb 7-1: device descriptor read/64, error -71 [ 610.199660][T12415] usb usb7-port1: attempt power cycle [ 610.406707][ T5837] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 610.406799][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.420590][ T5837] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 610.420633][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.433981][ T5837] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 610.434013][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.447452][ T5837] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 610.447498][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.460749][ T5837] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 610.460792][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.474261][ T5837] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 610.474308][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.487745][ T5837] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 610.487828][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.501628][ T5837] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 610.501672][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.514895][ T5837] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 610.514936][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.528326][ T5837] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 610.528368][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.537367][T15776] 9p: Bad value for 'rfdno' [ 610.541582][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.552248][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.558300][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.564416][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.570482][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.576570][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.582602][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.590517][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.596921][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.603487][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.609750][ T5897] usb 6-1: Service connection timeout for: 257 [ 610.609934][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.622322][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.628460][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.634604][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.636558][ T5897] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 610.642166][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.654865][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.660980][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.667020][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.673208][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.678820][ T5897] ath9k_htc: Failed to initialize the device [ 610.679417][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.691674][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.697712][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.703960][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.710612][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.716819][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.722892][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.729110][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.735235][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.741377][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.747538][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.753874][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.759945][T12415] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 610.767885][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.773957][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.780302][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.787009][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.793150][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.799293][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.805344][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.812108][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.818157][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.824683][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.831139][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.837184][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.843267][ T5921] usb 6-1: ath9k_htc: USB layer deinitialized [ 610.849842][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.856738][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.863155][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.869206][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.875355][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.881403][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.887561][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.893616][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.899806][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.905916][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.912073][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.918261][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 610.948710][T12415] usb 7-1: device descriptor read/8, error -71 [ 611.144127][T15809] IPVS: length: 528 != 786536408 [ 611.194879][T15811] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 611.205022][T12415] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 611.249308][T12415] usb 7-1: device descriptor read/8, error -71 [ 611.366471][T12415] usb usb7-port1: unable to enumerate USB device [ 611.610999][ T5921] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 611.773211][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.784982][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.796208][ T5921] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 611.812835][ T5921] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 611.821287][ T5921] usb 6-1: Manufacturer: syz [ 611.826362][ T6163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.841482][ T5921] usb 6-1: config 0 descriptor?? [ 612.021261][T15827] netlink: 'syz.7.2159': attribute type 2 has an invalid length. [ 612.030865][T15827] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2159'. [ 612.474532][ T30] audit: type=1800 audit(1783386224.840:27): pid=15843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2161" name="bus" dev="ramfs" ino=61145 res=0 errno=0 [ 612.884818][ T5907] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 613.054829][ T5907] usb 7-1: Using ep0 maxpacket: 32 [ 613.074551][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.111651][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.151135][ T5907] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 613.160279][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.173857][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.195473][ T5907] usb 7-1: config 0 descriptor?? [ 613.224174][ T5907] hub 7-1:0.0: USB hub found [ 613.452423][ T5907] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 613.712236][ T5907] hid-generic 0003:046D:C31C.0048: unknown main item tag 0x0 [ 613.740865][ T5907] hid-generic 0003:046D:C31C.0048: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 613.859805][ T3563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.025347][ T5934] usb 7-1: USB disconnect, device number 100 [ 614.029627][T14970] Bluetooth: hci2: command 0x0406 tx timeout [ 614.084204][ T5921] uclogic 0003:256C:006D.0047: failed retrieving string descriptor #100: -71 [ 614.109160][ T5921] uclogic 0003:256C:006D.0047: failed retrieving pen parameters: -71 [ 614.136765][ T5921] uclogic 0003:256C:006D.0047: failed probing pen v1 parameters: -71 [ 614.146176][ T5921] uclogic 0003:256C:006D.0047: failed probing parameters: -71 [ 614.153923][ T5921] uclogic 0003:256C:006D.0047: probe with driver uclogic failed with error -71 [ 614.194422][ T5921] usb 6-1: USB disconnect, device number 87 [ 614.873602][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.885108][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.685985][ T5934] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 615.846369][ T5934] usb 7-1: Using ep0 maxpacket: 32 [ 615.854174][ T5934] usb 7-1: config 0 has an invalid interface number: 172 but max is 0 [ 615.864738][ T5934] usb 7-1: config 0 has no interface number 0 [ 615.871472][ T5934] usb 7-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 615.883660][ T5934] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 615.892889][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.901087][ T5934] usb 7-1: Product: syz [ 615.905623][ T5934] usb 7-1: Manufacturer: syz [ 615.910261][ T5934] usb 7-1: SerialNumber: syz [ 615.918199][ T5934] usb 7-1: config 0 descriptor?? [ 615.928012][ T5934] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 616.038839][ T6163] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 616.204189][ T6163] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 616.214652][ T6163] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.223548][ T6163] usb 6-1: Product: syz [ 616.227877][ T6163] usb 6-1: Manufacturer: syz [ 616.232591][ T6163] usb 6-1: SerialNumber: syz [ 616.248019][ T6163] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 616.271556][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 616.363880][ T5934] input: gspca_pac7302 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input82 [ 616.374385][T15996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.393721][T15996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.488594][T15995] 9p: Could not find request transport: xen [ 616.755002][T15989] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2178'. [ 616.767696][T15989] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2178'. [ 616.777448][T15989] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2178'. [ 616.787081][T15989] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2178'. [ 616.798773][T15989] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2178'. [ 616.808352][T15989] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2178'. [ 616.820847][T15989] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2178'. [ 616.831070][T15989] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2178'. [ 616.840632][T15989] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2178'. [ 616.886653][ T5934] usb 6-1: USB disconnect, device number 88 [ 616.955186][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2179'. [ 616.965331][T16019] bridge_slave_1: left allmulticast mode [ 616.975367][T16019] bridge_slave_1: left promiscuous mode [ 616.981981][T16019] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.992665][T16019] bridge_slave_0: left allmulticast mode [ 616.998359][T16019] bridge_slave_0: left promiscuous mode [ 617.004373][T16019] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.291078][ T6163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 617.454374][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 617.471738][ T10] ath9k_htc: Failed to initialize the device [ 617.487154][ T5934] usb 6-1: ath9k_htc: USB layer deinitialized [ 617.814183][ T5934] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 617.987067][ T5934] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.997506][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 618.010369][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 618.021034][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 618.036615][ T5934] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 618.046674][ T5934] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 618.055998][ T5934] usb 6-1: Manufacturer: syz [ 618.063093][ T5934] usb 6-1: config 0 descriptor?? [ 618.276841][T16051] can0: slcan on ptm0. [ 618.350471][T16050] can0 (unregistered): slcan off ptm0. [ 618.650420][ T6054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.672544][ T6163] usb 7-1: USB disconnect, device number 101 [ 619.333594][ T7765] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.013528][T16098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.032808][T16098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.263397][ T6163] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 620.265609][ T5934] rc_core: IR keymap rc-hauppauge not found [ 620.290736][T16115] kvm: user requested TSC rate below hardware speed [ 620.297920][ T5934] Registered IR keymap rc-empty [ 620.303171][ T5934] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 620.330216][ T5934] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 620.354503][ T5934] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 620.371052][ T5934] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input83 [ 620.389668][ T5934] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 620.413499][ T5934] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 620.436477][ T5934] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 620.463419][T16128] delete_channel: no stack [ 620.468769][ T5934] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 620.476239][T16128] delete_channel: no stack [ 620.480369][ T6163] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 620.495292][ T6163] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.501932][ T5934] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 620.511518][ T6163] usb 7-1: Product: syz [ 620.515744][ T6163] usb 7-1: Manufacturer: syz [ 620.520680][ T6163] usb 7-1: SerialNumber: syz [ 620.529358][ T6163] usb 7-1: config 0 descriptor?? [ 620.563418][ T5934] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 620.575212][ T5837] Bluetooth: hci5: urb ffff88807d166600 submission failed (2) [ 620.605730][ T5934] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 620.634101][ T5934] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 620.671810][ T5934] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 620.702945][ T5934] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 620.739027][ T5934] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 620.748737][ T5934] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 620.760638][T16098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.780432][ T5934] usb 6-1: USB disconnect, device number 89 [ 620.790207][T16098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.830373][ T6163] usb 7-1: USB disconnect, device number 102 [ 621.782325][ T5934] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 621.943771][ T5934] usb 7-1: Using ep0 maxpacket: 32 [ 621.952763][ T5934] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 621.961700][ T5934] usb 7-1: config 0 has no interface number 0 [ 621.969117][ T5934] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 622.017761][ T5934] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 622.030563][ T5934] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 622.045639][ T5934] usb 7-1: config 0 interface 196 has no altsetting 0 [ 622.055605][ T5934] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 622.065262][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.074041][ T5934] usb 7-1: Product: syz [ 622.078343][ T5934] usb 7-1: Manufacturer: syz [ 622.083705][ T5934] usb 7-1: SerialNumber: syz [ 622.092075][ T5934] usb 7-1: config 0 descriptor?? [ 622.115504][T16188] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 622.182441][T16221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 622.353974][T16188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.364262][T16188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.417138][T16230] program syz.5.2199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.486782][T16234] program syz.5.2199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.906925][T16244] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.040743][T16244] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.142656][T16244] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.245161][T16244] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.371072][ T3520] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.394438][ T3520] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.423304][ T7765] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.444995][ T7765] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.736563][T16269] rose0: entered allmulticast mode [ 624.049584][ T5907] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 624.125761][ T6054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.210192][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 624.217795][ T5907] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 624.226363][ T5907] usb 6-1: config 0 has no interface number 0 [ 624.235224][ T5907] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 624.245563][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.255375][ T5907] usb 6-1: Product: syz [ 624.259718][ T5907] usb 6-1: Manufacturer: syz [ 624.264531][ T5907] usb 6-1: SerialNumber: syz [ 624.272513][ T5907] usb 6-1: config 0 descriptor?? [ 624.285575][ T5907] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 624.785443][ T5934] ipheth 7-1:0.196: Unable to find endpoints [ 624.801705][ T5934] usb 7-1: USB disconnect, device number 103 [ 624.872428][T12415] usb 6-1: USB disconnect, device number 90 [ 625.140945][T16340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.154387][T16340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.225986][ T5934] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 625.496925][ T3520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 625.542211][T16345] tipc: Enabling of bearer rejected, failed to enable media [ 625.846462][T16356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.857249][T16356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.879721][ T10] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 626.028805][ T10] usb 6-1: device descriptor read/64, error -71 [ 626.284872][ T10] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 626.423855][ T10] usb 6-1: device descriptor read/64, error -71 [ 626.541846][ T10] usb usb6-port1: attempt power cycle [ 626.651311][ T30] audit: type=1326 audit(1783386238.107:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16374 comm="syz.6.2216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17adb8f749 code=0x0 [ 626.915882][ T10] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 626.939789][ T10] usb 6-1: device descriptor read/8, error -71 [ 626.948980][T16384] __nla_validate_parse: 1 callbacks suppressed [ 626.948998][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2217'. [ 627.027395][T16384] tipc: Started in network mode [ 627.033796][T16384] tipc: Node identity 080211, cluster identity 4711 [ 627.041400][T16384] tipc: Enabled bearer , priority 0 [ 627.052313][T16384] tipc: Resetting bearer [ 627.194024][ T10] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 627.216021][ T10] usb 6-1: device descriptor read/8, error -71 [ 627.333197][ T10] usb usb6-port1: unable to enumerate USB device [ 627.550301][ T31] INFO: task syz.3.1622:12140 blocked for more than 143 seconds. [ 627.568252][ T31] Tainted: G L syzkaller #0 [ 627.575167][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 627.596988][ T31] task:syz.3.1622 state:D stack:26744 pid:12140 tgid:12138 ppid:5822 task_flags:0x400040 flags:0x00080002 [ 627.621633][ T31] Call Trace: [ 627.625123][ T31] [ 627.633205][ T31] __schedule+0x150e/0x5070 [ 627.637854][ T31] ? __pfx___schedule+0x10/0x10 [ 627.644325][ T31] ? schedule+0x91/0x360 [ 627.648718][ T31] schedule+0x165/0x360 [ 627.652958][ T31] schedule_preempt_disabled+0x13/0x30 [ 627.659473][ T31] __mutex_lock+0x7e6/0x1350 [ 627.664174][ T31] ? __mutex_lock+0x5bb/0x1350 [ 627.669971][ T31] ? sync_bdevs+0x27e/0x470 [ 627.674577][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 627.680379][ T31] ? iput+0x68d/0x1030 [ 627.684887][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 627.694525][ T31] sync_bdevs+0x27e/0x470 [ 627.702739][ T31] ksys_sync+0xb9/0x150 [ 627.713774][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 627.723036][ T31] ? do_syscall_64+0xbe/0xf80 [ 627.727920][ T31] __ia32_sys_sync+0xe/0x20 [ 627.733772][ T31] do_syscall_64+0xfa/0xf80 [ 627.738378][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.744598][ T31] ? clear_bhb_loop+0x60/0xb0 [ 627.749335][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.755736][ T31] RIP: 0033:0x7f0adab8f749 [ 627.760368][ T31] RSP: 002b:00007f0ad8df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 627.768973][ T31] RAX: ffffffffffffffda RBX: 00007f0adade5fa0 RCX: 00007f0adab8f749 [ 627.777057][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 627.785138][ T31] RBP: 00007f0adade5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 627.793418][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.801965][ T30] audit: type=1326 audit(1783386239.173:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.6.2220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17adb8f749 code=0x0 [ 627.827548][ T31] R13: 00007f0adade6038 R14: 00007f0adade5fa0 R15: 00007fffd31f9028 [ 627.836614][ T31] [ 627.839792][ T31] [ 627.839792][ T31] Showing all locks held in the system: [ 627.848069][ T31] 2 locks held by ksoftirqd/0/15: [ 627.853164][ T31] 1 lock held by khungtaskd/31: [ 627.858557][ T31] #0: ffffffff8e33f2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 627.869110][ T31] 2 locks held by getty/5582: [ 627.873851][ T31] #0: ffff8880315d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 627.883830][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 627.895717][ T31] 5 locks held by kworker/1:7/5934: [ 627.901114][ T31] #0: ffff888020ed2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 [ 627.913191][ T31] #1: ffffc90004c1fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 [ 627.924639][ T31] #2: ffff888029272198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 627.933678][ T31] #3: ffff888029275518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 627.943847][ T31] #4: ffff888028d60268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 627.954814][ T31] 1 lock held by udevd/5967: [ 627.959459][ T31] #0: ffff888025e87358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 627.968858][ T31] 1 lock held by syz.3.1622/12140: [ 627.974030][ T31] #0: ffff888025e87358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 627.984750][ T31] [ 627.990178][ T31] ============================================= [ 627.990178][ T31] [ 627.998796][ T31] NMI backtrace for cpu 1 [ 627.998829][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 627.998856][ T31] Tainted: [L]=SOFTLOCKUP [ 627.998867][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.998880][ T31] Call Trace: [ 627.998888][ T31] [ 627.998896][ T31] dump_stack_lvl+0x189/0x250 [ 627.998926][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.998948][ T31] ? __pfx__printk+0x10/0x10 [ 627.998993][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 627.999026][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 627.999059][ T31] ? __pfx__printk+0x10/0x10 [ 627.999095][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 627.999126][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 627.999159][ T31] sys_info+0x135/0x170 [ 627.999184][ T31] watchdog+0xe40/0xe90 [ 627.999215][ T31] ? watchdog+0x202/0xe90 [ 627.999247][ T31] kthread+0x711/0x8a0 [ 627.999275][ T31] ? __pfx_watchdog+0x10/0x10 [ 627.999299][ T31] ? __pfx_kthread+0x10/0x10 [ 627.999324][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 627.999345][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 627.999366][ T31] ? __pfx_kthread+0x10/0x10 [ 627.999391][ T31] ret_from_fork+0x599/0xb30 [ 627.999422][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 627.999471][ T31] ? __switch_to_asm+0x39/0x70 [ 627.999494][ T31] ? __switch_to_asm+0x33/0x70 [ 627.999516][ T31] ? __pfx_kthread+0x10/0x10 [ 627.999540][ T31] ret_from_fork_asm+0x1a/0x30 [ 627.999582][ T31] [ 627.999614][ T31] Sending NMI from CPU 1 to CPUs 0: [ 628.109258][ T10] tipc: Node number set to 134353152 [ 628.110436][ C0] NMI backtrace for cpu 0 [ 628.110454][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.110480][ C0] Tainted: [L]=SOFTLOCKUP [ 628.110487][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.110506][ C0] Workqueue: events tipc_net_finalize_work [ 628.110545][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 628.110577][ C0] Code: 90 9c fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 fc 38 03 fd 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 628.110593][ C0] RSP: 0018:ffffc900000f72b0 EFLAGS: 00000002 [ 628.110609][ C0] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000000000000000 [ 628.110620][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 628.110632][ C0] RBP: 00000000000003f8 R08: ffff888025610237 R09: 1ffff11004ac2046 [ 628.110645][ C0] R10: dffffc0000000000 R11: ffffffff85256770 R12: dffffc0000000000 [ 628.110660][ C0] R13: ffffffff99d399e3 R14: ffffffff9a04e480 R15: 0000000000000000 [ 628.110677][ C0] FS: 0000000000000000(0000) GS:ffff8881259dc000(0000) knlGS:0000000000000000 [ 628.110692][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.110705][ C0] CR2: 000000110c3f536d CR3: 000000000e138000 CR4: 00000000003526f0 [ 628.110726][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 628.110736][ C0] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 628.110748][ C0] Call Trace: [ 628.110755][ C0] [ 628.110765][ C0] serial8250_console_write+0x1410/0x1ba0 [ 628.110798][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 628.110830][ C0] ? console_flush_all+0x131/0xb60 [ 628.110852][ C0] ? console_flush_all+0x131/0xb60 [ 628.110876][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 628.110897][ C0] ? console_flush_all+0x131/0xb60 [ 628.110917][ C0] console_flush_all+0x745/0xb60 [ 628.110939][ C0] ? console_flush_all+0x131/0xb60 [ 628.110964][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 628.110992][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 628.111017][ C0] console_unlock+0xbb/0x190 [ 628.111035][ C0] ? vprintk_emit+0x321/0x5f0 [ 628.111053][ C0] ? __pfx_console_unlock+0x10/0x10 [ 628.111073][ C0] ? vprintk_emit+0x321/0x5f0 [ 628.111090][ C0] ? vprintk_emit+0x321/0x5f0 [ 628.111110][ C0] vprintk_emit+0x4f8/0x5f0 [ 628.111130][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 628.111156][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 628.111183][ C0] _printk+0xcf/0x120 [ 628.111211][ C0] ? tipc_net+0x45/0x270 [ 628.111232][ C0] ? __pfx__printk+0x10/0x10 [ 628.111261][ C0] ? tipc_net+0x45/0x270 [ 628.111282][ C0] ? tipc_net+0x45/0x270 [ 628.111306][ C0] tipc_set_node_addr+0x1ce/0x290 [ 628.111330][ C0] ? __pfx_tipc_set_node_addr+0x10/0x10 [ 628.111353][ C0] ? net_generic+0x1e/0x240 [ 628.111377][ C0] tipc_net_finalize+0xfd/0x190 [ 628.111399][ C0] ? __pfx_tipc_net_finalize+0x10/0x10 [ 628.111424][ C0] ? process_one_work+0x868/0x15a0 [ 628.111451][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 628.111470][ C0] ? process_one_work+0x868/0x15a0 [ 628.111492][ C0] tipc_net_finalize_work+0x65/0x90 [ 628.111513][ C0] process_one_work+0x93a/0x15a0 [ 628.111550][ C0] ? __pfx_process_one_work+0x10/0x10 [ 628.111580][ C0] ? assign_work+0x3c7/0x5b0 [ 628.111607][ C0] worker_thread+0x9b0/0xee0 [ 628.111644][ C0] kthread+0x711/0x8a0 [ 628.111664][ C0] ? __pfx_worker_thread+0x10/0x10 [ 628.111689][ C0] ? __pfx_kthread+0x10/0x10 [ 628.111713][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 628.111735][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 628.111752][ C0] ? __pfx_kthread+0x10/0x10 [ 628.111771][ C0] ret_from_fork+0x599/0xb30 [ 628.111796][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 628.111825][ C0] ? __switch_to_asm+0x39/0x70 [ 628.111846][ C0] ? __switch_to_asm+0x33/0x70 [ 628.111867][ C0] ? __pfx_kthread+0x10/0x10 [ 628.111886][ C0] ret_from_fork_asm+0x1a/0x30 [ 628.111914][ C0] [ 630.285895][ T7766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 630.777517][ T5934] usb 7-1: device descriptor read/64, error -110 [ 631.033565][ T5934] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 631.172549][ T5934] usb 7-1: device descriptor read/64, error -32 [ 631.291209][ T5934] usb usb7-port1: attempt power cycle [ 631.654101][ T3520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 631.665609][ T5934] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 631.686563][ T5934] usb 7-1: device descriptor read/8, error -32 [ 631.803551][ T5934] raw-gadget.2 gadget.6: failed to queue suspend event [ 631.811099][ T5934] raw-gadget.2 gadget.6: failed to queue reset event [ 631.890140][ T5934] raw-gadget.2 gadget.6: failed to queue resume event [ 631.964090][ T5934] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 631.985571][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 631.992810][ T5934] usb 7-1: device descriptor read/8, error -32 [ 632.125244][ T5934] raw-gadget.2 gadget.6: failed to queue suspend event [ 632.132366][ T5934] usb usb7-port1: unable to enumerate USB device [ 633.584161][ T5197] udevd[5197]: worker [5967] /devices/virtual/block/nbd0 timeout; kill it [ 633.593055][ T5197] udevd[5197]: seq 19811 '/devices/virtual/block/nbd0' killed [ 636.447971][ T6054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 637.044671][ T7766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration