last executing test programs:

15.009229043s ago: executing program 3 (id=445):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4bb, &(0x7f00000013c0)="$eJzs3U1vU9kZAOD3Ogn5IJDQsmirtlBKSyuEnRiIECu6aVUhpKqoqy4gTUwUxY6j2KEkZRH+Q6UiddX+hC4qdVGJVffdtbtu6GIkZgbNiMxoFh7d6xsIIV8DwR7FzyMd3XvuMX7PwbnnOG8SnwB61tmIWI+IYxFxNyLG8utJXuJGu6SPe/H84czG84czSbRatz9Ksvb0Wmz5N6nj+XMORcSvfxHxu+TNuI3VtYXparWynNdLzdpSqbG6dmm+Nj1XmasslstTk1MT1y5fLR/aWM/U/vbs5/M3f/PPf3zv6b/Xf/qHtFujedvWcRym9tAHYnjLtf6IuBkRhfcRsMP68vEc63ZHeCvp1+A3IuJcdv+PRV/2agIAR1mrNRatsa11AOCoK2Q5sKRQzHMBo1H9vFhs5/BOx0ihWm80L96rryzOtnNl4zFQuDdfrUzkucLxGEjS+mR2/qpe3la/HBGnIuKPg8NZvThTr852840PAPSw49vW/08HC4V0/QcAjrihbncAAOg46z8A9B7rPwD0Hus/APQe6z8A9B7rPwD0Hus/APSUX926lZbWRv7517P3V1cW6vcvzVYaC8Xaykxxpr68VJyr1+eyz+yp7fd81Xp9afJKrDwoNSuNZqmxunanVl9ZbN7JPtf7TmWgI6MCAPZy6syT/yYRsX59OCuxZS8HazUcbUdhDxrg7fR1uwNA19jtC3qX7/GBHbbofc2uvyL0+PD7AnTGhW/L/0Ovkv+H3iX/D71L/h96V6uV2PMfAHqMHD/g5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw1Y1mJSkU873AR6NQKBYjTkTEeAwk9+arlYmIOBkR/xkcGEzrk93uNADwjgofJPn+XxfGzo9ubz2WfDaYHSPi93++/acH083m8mR6/eOX15uP8+vlbvQfANjP5jq9uY5vevH84cxm6WR/nv2svbloGncjL+2W/ujPjkMxEBEjnyR5vS19v9J3CPHXH0XEt3Yaf5LlRsbznU+3x09jn+ho/MJr8QtZW/uY/l988xD6Ar3mSTr/3Njp/ivE2ey48/0/lM1Q725z/tt4Y/4rvJz/+vL4W/dgTu/5sweNceVfv9y17VHEd/p3ip+8jJ/sMv+eP2D8/333++d2a2v9JeLCcF7ZFn9rrFKztlRqrK5dmq9Nz1XmKovl8tTk1MS1y1fLpSxHXdrMVL/pw+sXT+41/pHYefxD+4z/Rwcc/1+/uPvbH+wR/yc/3Pn1P71H/HRN/PEB40+P/H3X7bvT+LO7jH+/1//iAeM//f/a7AEfCgB0QGN1bWG6Wq0sO+nASV98LbrhxMm+J92emYD37dVN3+2eAAAAAAAAAAAAAAAAu+nEnxN1e4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcXV8GAAD//6oR1iI=")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000540)={0x0, 0x8, 0x61, {0x61, 0x21, "cd13a8cce8a0586841296de6167178e4a46a6ab64a45426cc048d9914becb1d5197ea83baf8ea1cd6b6a50b97c3828cff2bc245c0a863087ceb13023103d1285fd51df6e75aeb50136c21b984d1bbd2ca2f7fd9567f54a5075b0747e95a7b3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000008ea7916d7a5c9d12e13fafc3c4f19d6f20204844559d52af6b657faea7ab627a291e171c5814648bee5841"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=0x0], 0x1, 0x553b, &(0x7f000000ac00)="$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")
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
r6 = io_uring_setup(0x137d, &(0x7f0000000080))
close_range(r6, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="1e62b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11.820909308s ago: executing program 3 (id=451):
socket(0x10, 0x803, 0x0)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000))
close(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000001c00)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nojournal_checksum}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nodelalloc}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x45e, &(0x7f0000000680)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)

11.819281038s ago: executing program 4 (id=452):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x5, 0x10001, 0x8}, 0x10, 0x60f5, 0xffffffffffffffff, 0x1, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x3, 0x1, 0x1, 0x9}], 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x36, 0x16, &(0x7f00000002c0)="4e881aa9a517b514ec840d1698a1bbed608eb7a72c3aabe68a4dca809dfed97d3cdba1557aa45111daac668f2f8d207cde09a076f446", &(0x7f0000000300)=""/22, 0xffffffff, 0x0, 0x5b, 0x3b, &(0x7f0000000340)="d8a425c8088f9f5904cb6be21075b0d982e9bebead0f855c6b3e7755b52c962ad04ff2fc9ecaec506080c389849a06d749e54cacae0d2c9b948bb3d450d24f12d785331e036d68ec9e5a26ce4c74d3d57566a7bf5bff056d7a124a", &(0x7f0000000400)="3c767f614bd743804569da3855427462edc7463f5181530c43dc2c437cb883d7213ea9e7283b329574eb56ce9b71ad5815eb2afb8339134b8e5171", 0x5, 0x0, 0x1}, 0x50)
syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = syz_usb_connect$uac1(0x2, 0x98, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x4, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xe}, [@selector_unit={0xa, 0x24, 0x5, 0x2, 0x8, "18a7cfa26c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x3, 0x2, {0x7, 0x25, 0x1, 0x83, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0xf7b7, 0xe, "d384a1dc7083fdfb"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0x9, 0x4, 'w', "9ea263"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0xd, 0x3, {0x7, 0x25, 0x1, 0x0, 0xb, 0x8}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x82, 0x81, 0x7f, 0x20, 0x9}, 0x4a, &(0x7f0000000600)={0x5, 0xf, 0x4a, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x7f, 0xf00, 0x10, [0xff3f00, 0xff0000, 0xff0030, 0xc0cf, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x2, 0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "14ea02f8ccda0482a65a1642174258fa"}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x407b}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x141b}}]})
syz_usb_connect(0x6, 0x595, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x9, 0x9f, 0x63, 0x8, 0x403, 0xf9d2, 0xbf16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x583, 0x2, 0xfb, 0x5, 0xa0, 0x1, [{{0x9, 0x4, 0xd2, 0x0, 0x0, 0x4, 0x4d, 0x8d, 0x2}}, {{0x9, 0x4, 0x21, 0x3, 0x10, 0xf6, 0xdb, 0xc4, 0x10, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "bf"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x0, 0x9, 0x2}, {0x6, 0x24, 0x1a, 0x5}, [@obex={0x5, 0x24, 0x15, 0xce41}, @acm={0x4, 0x24, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0xf1, 0x20, 0xcd95, 0x2}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0x6}]}], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x9, 0x4, 0x3, [@generic={0x8d, 0x4, "43d3f75d241534579486d386289837c2621eca3a94843617089e26b666b03db58b360214e89060fac81c0e2e1646d7b8828b5a87b8daf3aeab45ea73b7e3038b8f659c333d0275785c6ba7ea43daef984d9106fdef1bb95dbe8c2808e5aead42f61f69d110f6a2e6fb2a3e5de4092747485e00ad2cfadd28ef3888f61ef2e1df6d018624c12617a0841b2f"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x8, 0x4, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x7ff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xeb, 0x4, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x30, 0x1800}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x2, 0x4, 0x10, [@generic={0xb1, 0x0, "8b3b814ec5ed5c2cccb22b9f36de5c8c281f934a81d034d3c72e8d53de58f75f65c127e4a59072f420c20d4a26a2fd97dba9660c95967fd93738ed0d951708071c39c8b28f65f52acb7a459bfdce0467e8898012a267eb1a4476b1fd3ccfc3232e76d11ebfb853cf7ce47d65784ecb1f0eb738cdc1517ba6afbdc4bf5b6f2bebe90f75a433d68c58e7fd15cc11466d7f6d265212aa96bca5a652da56063a4015ececfad4699ac4541838263ab5ddc5"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x5, 0x7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x8001}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x53, 0x19, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0xc}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x5, 0x8, 0x8, [@generic={0x89, 0x30, "e39bd83083cb46d8a55e77988128b7e6283ba32e28a4c5961f0ff07098f09fc0e10fe874f779d9ac0ecf06d5009a01416a5d01dc7d4a522ff4340fff8f43cdb23fe7d390aae8c0387d2a267484e120db16b09d33f800ae60b0d6040c1e5c1c58e5c73765ddbccdab4ac9dc83ce976a2ea685c7d62dd9c717d29255613c1918d13e9a9e49e4ec06"}, @generic={0x72, 0x31, "4ec9d97f6f756671b705b93e288457f335dc61c00761051b38ee13e4473044e3012a0ce53478b7acbdda9781767d0a086b3f4684473ef417a9ebec16294b3e217badb593f681c957972aa41c95f553b688bfa36c20591ed65e1be2c5a659085574c62b3d0956439c9ed91a3a7eecf6c6"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x8, 0x0, 0x5}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0xb2, 0x1, 0x40}}, {{0x9, 0x5, 0x3, 0xd, 0x10, 0x7, 0x6, 0x81, [@generic={0xc4, 0x30, "77d9e5989de39a2426633892ae79c6cad2e698259064da51d2ff53b826976a3e19f40c8d848f9230ff3d474710b85d0138bc83c80b989d16cce8df0502a741c0f10d2074c9799998b042dd445205f3deed5d023604e0f58d9dc451287d1e90cb355c5210b5ee87b0be20f5573a1aeee103482fe21126cb06112fa01ea327a44d998ce7cd209ab0ae6871476e17bea85a16ed54f0444ab98dca381a6edb3692a64ecf99d87ebffc9accfffb79416f671d1e2ae0581f16edf896d12a4165c4b33c1ed3"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x1c11d03596eba81b, 0x9, 0x6}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x0, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x5}, @generic={0xec, 0x31, "e6d88f0ef9f4880e7c8bc3e744487b22713fa47ef4682b66657552146ab1ba0315b49048e8419c831ed5fdb17c2e1aa06346c27139aeef801d7e36a8fe90a3369f416f51bdf779d698f6b40928a47cb7e2afab98a7cc1387af8df8cc6ad6ef534c69934c2fe565162aa1c98f5e90f583ffdbe8e7d66207d92794d75ff97a9e139d0abe5191a10b491f07a29d4ea82e1e1fad754edc67d48b7afd70cc62265310af49530ba93159f43c07a3383e42fe88ad5b35c815cc6e48622b1a127fe0d55b457d94b5fe0811fad73c7eca9477a207111f3db56c5b29f5f087a37dfae73d85c0ca1f06b7d0cfad95d8"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x5, 0x5, 0x6, [@generic={0xd, 0x7, "55140b3c0081100919e973"}, @generic={0x72, 0x24, "a62984c5e549dd2ed7671ac29b7d7567593db0c7d2aaa669c98adaa5782f25e2fa93c27f23a46cc5233c989ff8322d7b4dd600171b55e95ada14fabe59ed9bd61e4382b59644be3730eed8828c4b84906d5991655d9fdab374f84629de10d76f48538537976cb0e1fba4eff47db665fb"}]}}, {{0x9, 0x5, 0x5, 0x12, 0x10, 0x8, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x26, 0x0, 0xf8}}, {{0x9, 0x5, 0xb, 0x13, 0x200, 0xfe, 0x4, 0x3d}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x310, 0x0, 0x40, 0xc8, 0x20, 0x3}, 0x1c, &(0x7f0000000d80)={0x5, 0xf, 0x1c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x8, 0x100}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x4, 0x4, 0x172}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x41a}}, {0x26, &(0x7f0000000e00)=@string={0x26, 0x3, "4d6e31d58b817549826e8a862885fc5cc753997ac7b1001bcf27d35435cf36a58367309b"}}, {0xee, &(0x7f0000000e40)=@string={0xee, 0x3, "4addfc6e66ca55f9d876eaf97b3b1fe0f28722e43fe7cd197f1b43eb372accd3ec9a166ec5a657453e1cb3735b2762154f9b5b2480be29779c85022efd20a4c1520a64df2d04d45ea48dcddda72dfacd25819c542be3d3f7cbf25a6baeba6c9202577c9d8739c346dd489648c034cdcf3a2eb61e423d2b7a992235907febe71445bc1ca5a657a743b7aa0f8710a565c350ac8846dc3f7e55686f11b98351b858ffa80c5e567d434ae1cd54b0aa0111394674013d3985d22bbcec15963ddcfab71b58caf694df32d93c98c92fb1532c71f583744941a2da4667ec64ea76864079e45c69bc053ec4f6ab0e0b88"}}]})
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000f80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8e, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x9, 0xb}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1c, 0x80, 0x5}}]}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x7b069f7d103742b0, 0x9, 0x9, 0x5, 0x548909fb50903428, 0x7}, 0xb6, &(0x7f0000001000)={0x5, 0xf, 0xb6, 0x2, [@generic={0xae, 0x10, 0x1, "6956ac7ed919023c45fb7fc00f5b5d04c028e5ae471869e4be80a43928479155276965bd9be65809eb6af8044e1e903c23c1f863ad59ec2893f8213f914b8b6f23d5f3457173b7825dfca062d0f47f578e61bfb4c1211dc78dc2fe50e23b9908f3ea1793b98b43d125007af3984d880ce96b10da59a850884de7a5f1ef82bf9449004ebbbd53061d72c93c2fdae9bedb7815adc82541811ad04e136f1d3628ecd0e06a86ee1ff5ad596e08"}, @ptm_cap={0x3}]}, 0x5, [{0xdf, &(0x7f00000010c0)=@string={0xdf, 0x3, "1bcd4b6135ba7032e395b1b917549b3d5181adaf8b277964a1646b78db82659ea9c4419cb5d27ece381c369889938813c16c87a8da6a723f72562fafb8a36aa23eb0c7ab5a3f1490fdd37008bac74cf068809de4419db7813498f8909daabfb9f207a25ad72cb3e18182ef0d7b02c51332498d751c3e43620e7117cf758c234ceb0111c7ca2b00b75c5370fcd9fcce261975003492af6f7141b787527f583f5d04a963b4b0e2fcf71ed5f350e0666bd41edb5a6879c40b456c0ed8f3e1fecc43979fd996cbc1268d708cac1b9e4064e9131c39af2594d22eb4faa19a84"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x455}}, {0x10, &(0x7f0000001200)=@string={0x10, 0x3, "b651c518c6b992936d77bfb920b3"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x1401}}]})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002080)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001400)={0xc2c, r4, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x22}}}}, [@NL80211_ATTR_TID_CONFIG={0xf4, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x84}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfa}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x69}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xa8c, 0x11d, 0x0, 0x1, [{0x568, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x244, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x3, 0x6c, 0x36, 0x1, 0x2, 0x1, 0x60, 0x6c, 0x3, 0x6, 0x16, 0x1, 0x6, 0x3, 0x24, 0x1b, 0x24, 0xb, 0x61, 0x6c, 0x1b, 0x6, 0x9, 0x6c, 0x18, 0xc, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ed3, 0x2, 0x9, 0x0, 0x8, 0x419e, 0xac0, 0xecd1]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x1b, 0x9, 0x18, 0x1, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x100, 0xde, 0x1, 0x8, 0x100, 0x10, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6bde, 0x1ff, 0x0, 0x5, 0xffff, 0x0, 0x0, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x5, 0x6, 0x0, 0xbbe4, 0x1, 0x820f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x44, 0xb, 0xa, 0x5, 0x0, 0xe7, 0x1, 0x800]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5, 0x7}, {0x6, 0x1}, {}, {0x7, 0xa}, {0x4, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x8}, {0x6, 0x4}, {0x3, 0x2}, {0x7, 0x5}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x9}, {0x2, 0x4}, {0x5, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0xe, 0xcae, 0x6, 0x6, 0x91]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x6c, 0x12, 0xc, 0x1b, 0x9, 0x24, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0xa}, {0x1, 0xa}, {0x5, 0xa}, {0x3, 0x1}, {0x7, 0x2}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x7fc0, 0xfff4, 0x3, 0xf2c6, 0xa2, 0xe4, 0x400]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x401, 0xb, 0x8885, 0x1000, 0x8, 0x7]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xfffe, 0x1, 0x6def, 0x2, 0x5, 0x7f, 0xfff8]}}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x6}, {0x4, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x3}, {0x0, 0x8}, {0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x2, 0x9}, {0x3, 0x3}, {0x6, 0x1}, {0x2, 0x5}, {0x2, 0x5}, {0x6, 0x9}, {0x5, 0x9}, {0x5, 0x6}, {0x6, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x7}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x5}, {0x0, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x1}, {0x6, 0x6}, {0x5, 0xa}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0xa}, {0x2}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x7, 0x2}, {0x3, 0x5}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x7}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x6}, {0x2, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x8}, {0x7, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x4}, {0x6, 0x4}, {0x1, 0x2}, {0x7, 0x8}, {0x6, 0x7}, {0x5, 0x2}, {0x3, 0x9}, {0x1, 0x2}, {0x7, 0x7}, {0x6, 0x6}, {0x7, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x8, 0x7, 0x6, 0x7, 0xe585, 0xe, 0xf801]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x9}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x2}, {0x3, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {}, {0x0, 0x9}, {0x4, 0x7}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x6}, {0x2, 0x9}, {0x4, 0xa}, {0x3, 0x5}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0x4}, {0x6, 0x8}, {0x4}, {0x4, 0x2}, {0x6, 0x3}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x4}, {0x7}, {0x5, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x1}, {0x4, 0x8}, {0x7, 0x3}, {0x3, 0x5}, {}, {0x6, 0xa}, {0x3}, {0x4, 0x8}, {0x5, 0x5}, {0x5, 0x7}, {0x4}, {0x2, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x9, 0x5, 0x9, 0x4, 0x1, 0xa, 0x740]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x6, 0xadf6, 0x4, 0x1, 0x1, 0x6]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x2, 0xfe00, 0x8, 0x9, 0x10, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x8000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xd]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x0, 0xfd2, 0xfffe, 0x800, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbc42, 0x100, 0x3, 0x47, 0xc, 0xd2, 0x2, 0x3]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xea, 0xffff, 0x37, 0x45e6, 0xa0c, 0x100, 0x5, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x7, 0x6, 0x5, 0x5, 0x400, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x7ff, 0xb32c, 0x7fff, 0x3, 0xb12a, 0x6]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0x7}, {0x3, 0x6}, {0x0, 0x5}, {0x3, 0x8}, {0x5, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x8, 0x1000, 0x0, 0x0, 0x6, 0x4]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x33, 0x16, 0x18, 0x6, 0x1, 0x9, 0x48, 0x4, 0x30, 0x2, 0x1b, 0x1, 0x12, 0x2, 0x60, 0x60, 0x5, 0x6c, 0x18, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xcbd8, 0x0, 0x0, 0xb, 0xe67, 0x0, 0x3ff, 0x481]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x2, 0x9, 0x9, 0x3, 0x5, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0xa}, {0x2, 0x2}, {0x3, 0xa}, {0x6}, {0x3, 0x6}, {0x1, 0x6}, {0x0, 0x13}, {0x3, 0x6}, {0x0, 0x5}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0x3}, {0x2, 0x4}, {0x7, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0x8}, {0x7, 0x1}, {0x1, 0x9}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x3}, {0x3, 0x3}, {0x3, 0x8}, {0x5, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x18, 0x1b, 0x60, 0x18, 0x60, 0x12, 0x36, 0x5, 0x60, 0x0, 0x2, 0x12, 0x2, 0x12, 0x1, 0x2, 0x30, 0x12, 0x43, 0x1, 0x6, 0x3, 0x18, 0x6, 0x3, 0x48, 0xf4ddf89f3c268bf2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xeaa7, 0x4, 0x0, 0x7, 0x7, 0x4, 0x5ad]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x9}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {0x4}, {0x4, 0x8}, {0x2, 0x5}, {0x7, 0x5}, {0x6}, {0x0, 0xa}, {0x4, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x6, 0x4}, {0x5, 0x1}, {0x5, 0x7}, {0x6, 0x4}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd7f, 0x0, 0x67ce, 0x7, 0x1, 0x2ed3, 0x0, 0x7]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x5, 0xc, 0x30, 0x3, 0x4, 0x4, 0x1, 0x16, 0x5, 0x67, 0x1, 0x30, 0x18, 0x24, 0x30, 0x60, 0x16, 0x30, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x10, 0xf7, 0xf18, 0x1, 0x4, 0x5, 0x3]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x9}, {0x5, 0x1}, {0x2, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x6, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x5, 0x7}, {0x7, 0x2}, {0x5, 0x3}, {0x4, 0x8}, {0x7, 0x8}, {0x2, 0x4}, {0x3, 0x3}, {0x0, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x12, 0x36, 0x1f, 0x4, 0x3, 0x3, 0xf008e21c4d8c78a, 0x16, 0xc, 0x4, 0x16, 0x48]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x18, 0x13, 0x60]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x1}, {0x4, 0x6}, {0x2, 0xa}, {0x7, 0x8}, {0x0, 0x7}, {0x5, 0x6}, {0x3, 0x6}, {0x7, 0x1}, {0x5, 0x7}, {0x2, 0xa}, {0x0, 0x4}, {0x6, 0x1}, {0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x5}, {0x3, 0x2}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x5}, {0x5}, {0x6, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x2, 0x2}, {0x1, 0x1}, {0x3, 0x7}, {0x3, 0x3}, {0x4, 0x6}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x4}, {0x4, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfff, 0x4, 0x8, 0x2, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x1, 0x18, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff80000000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x4}, {0x4, 0x7}, {0x4, 0x8}, {0x7, 0x9}, {0x2}, {0x2, 0x2}, {0x1, 0xa}, {0x1, 0xa}, {0x7, 0x2}, {0x1, 0x9}, {0x5, 0x7}, {0x0, 0x3}, {0x4, 0x1}, {0x7}, {0x2, 0x5}, {0x3, 0x7}, {0x2, 0x18}, {0x1, 0x6}, {0x6, 0x5}, {0x6, 0x5}, {0x4, 0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x3}, {0x6, 0x6}, {0x0, 0x7}, {0x6, 0x3}, {0x2}, {0x5, 0x4}, {0x1, 0xa}, {}, {0x7, 0x1}, {0x6}, {0x5, 0x1}, {0x1, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x7}, {0x1, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x3, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x4, 0x1}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x1}, {0x7, 0x7}, {}, {0x6}, {0x2, 0x6}, {0x1, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x23, 0x6, 0x1b]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x36, 0x6, 0x12, 0xb, 0x4, 0x6c, 0x24, 0x12, 0x0, 0x1b, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x101, 0x7, 0x5, 0xebf, 0x0, 0x4, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x81, 0x4, 0x6, 0x5, 0xff64, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x2, 0x30, 0x60, 0x24, 0x48, 0x16, 0x18, 0xc, 0x16, 0x6c, 0x60, 0x18, 0x16, 0x5, 0xb, 0x6, 0x30, 0x53, 0x1, 0x6, 0x4, 0x9, 0x5, 0x16]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x6}, {0x3, 0x5}, {0x3}, {0x1, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0xa}, {0x5, 0x5}, {0x1, 0x9}, {0x4, 0x3}, {0x7, 0x2}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0xa}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x400, 0x2, 0x4, 0x4, 0x155b, 0xffff, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x57}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x0, 0x4f, 0x8, 0x5, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0x1b, 0x18, 0xc, 0x9, 0x1b, 0x16, 0x12, 0x18, 0x30, 0x5b, 0x9, 0x9, 0xc, 0x24, 0x1, 0x36, 0xb, 0x24, 0xb, 0x6c, 0x24, 0x36, 0x16, 0x3e, 0x24, 0x18, 0x12, 0x24, 0x3]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x67d, 0xfc01, 0x7, 0x4, 0x1ff, 0xff]}}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x3}, {0x7, 0x2}, {0x6, 0x9}, {0x5, 0x7}, {0x4, 0x3}, {0x7, 0x8}, {0x0, 0x3}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x3}, {0x0, 0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x7}, {0x7, 0x3}, {0x4, 0x7}, {0x7, 0x4}, {0x1}, {0x2, 0x5}, {0x0, 0x6}, {0x5}, {0x7, 0x5}, {0x3, 0x3}, {0x2, 0x8}, {0x5, 0x8}, {0x6, 0x1}, {0x1, 0x7}, {0x7, 0x7}, {0x6, 0x2}, {0x0, 0x8}, {0x7, 0x5}, {0x4, 0x6}, {0x1, 0x8}, {0x5}, {0x2, 0x8}, {0x6, 0x8}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x2}, {0x0, 0x6}, {0x1, 0xa}, {0x3, 0x6}, {0x2, 0x4}, {0x2, 0x1}, {0x7, 0x8}, {0x3}, {0x2, 0x8}, {0x1, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x5, 0x10, 0x6d6, 0xb, 0x8, 0x69, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfaf5, 0x5, 0x3ff, 0x8001, 0x4, 0x1, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8e, 0x4, 0x2, 0x78, 0x3, 0x2, 0xd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x101, 0x2, 0xb1, 0x0, 0x3dd, 0xfff7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0xee7, 0x8c, 0x8, 0x7, 0x3, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x200, 0x6, 0x7, 0xff80, 0x8, 0x0, 0x8]}}]}]}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x74, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b5f, 0x5, 0x6, 0x8, 0x7, 0x401, 0x8, 0xd]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x10, 0x1, 0x6c]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x7}, {0x4, 0x3}, {0x7, 0x2}, {0x2}, {0x4, 0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x7, 0x5}, {0x7}, {0x2, 0x8}, {0x3, 0x4}, {0x1}, {0x6, 0x2}, {0x1, 0x7}, {0x6, 0x7}, {0x7, 0x1}, {}, {0x0, 0x2}, {0x6, 0x5}, {0x7, 0x2}, {0x5, 0x9}, {0x7, 0x4}, {0x3, 0xa}, {0x4, 0x7}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x3}, {0x7, 0x4}, {0x7, 0x5}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x9}, {0x3}, {0x2, 0xa}, {0x0, 0x3}, {0x1, 0x4}, {0x4, 0xa}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0x6}, {0x5, 0x9}, {0x2, 0x6}, {0x1, 0x9}, {0x3, 0x1}, {0x1}, {0x7, 0x3}, {0x6, 0xa}, {}, {0x7, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2, 0xa}, {0x4, 0x6}, {0x3, 0x7}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x150, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x8, 0x7f, 0x0, 0xff, 0x8000, 0xa]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1, 0x24, 0x6c, 0x48, 0x12, 0x60, 0x36, 0x2, 0x30, 0x6c, 0x12, 0x1b, 0x6, 0x36, 0x6, 0x16, 0xb, 0x6c, 0x3, 0x16, 0x6c, 0x24, 0x36, 0xc, 0x4, 0xc, 0x4, 0x48, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0xcaa5, 0x10, 0xfb7, 0x6, 0x5, 0x3]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0xc, 0x1b, 0x30, 0x6c, 0x2]}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x7fff, 0x8, 0x9, 0x401, 0x0, 0xa93e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xa4, 0x0, 0x9, 0x0, 0x9, 0x10, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x50, 0xfffc, 0x8, 0xffff, 0x8, 0x43d, 0x3, 0xf73]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x5}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x1}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x8}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x6}, {0x5, 0x5}, {0x1, 0x7}, {0x4}, {0x2, 0x8}, {0x3}, {0x6, 0x4}, {0x2, 0x8}, {0x7, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x2, 0x2}, {0x5, 0x1}, {0x5, 0x6}, {0x3, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x3, 0x5}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x9}, {0x7, 0x3}, {0x7, 0x7}, {0x5, 0x1}, {0x3, 0x9}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x3, 0x8, 0x4, 0xa, 0x6, 0xbb2b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x6d, 0xde0, 0x4, 0x40, 0x8, 0x9, 0x10]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x7cdd03f53aa0d37, 0x71, 0x30, 0x12, 0x60, 0x6c, 0x36, 0x3, 0x2, 0x36, 0x1c, 0x1b, 0x60, 0x1, 0x6, 0x30, 0x60, 0xc, 0x2, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9bc3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x65}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}]}]}, 0xc2c}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000)
syz_usb_control_io(r1, &(0x7f0000002240)={0x2c, &(0x7f00000020c0)={0x40, 0x24, 0x5a, {0x5a, 0x9, "b1b8beb3daa02e2e7284e184f99a864c40908bfe8754fae645ef213979095c1fcb97664db8ad1c424f2ec05f60ee7eee8faf32848a3520a92033940ed71cf8f93ea45cc2fe1889536e9b8152dab523faaf66c6760041b7cc"}}, &(0x7f0000002140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, &(0x7f0000002180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000021c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x7, 0x3, "95f65ab4", "9d9cf9d5"}}, &(0x7f0000002200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x5, 0xef, 0x0, 0x5, 0x2}}}, &(0x7f0000002740)={0x84, &(0x7f0000002280)={0x0, 0x15, 0xd7, "b5de1d222e6dc0bd1e8a811679a7fead723c5528576494e6f5dc81abf5af84bce9257290a8d1513a0612f8e9f37fb586a9a94c88d50cf1f7805e91b728da547cf38bd749d98fa97e2ceb7cf4a7ec9c1ac930aff15ec1de20446579ad4c4cbe8171fd959ee8f7393660ca45603a749cd7842ebd401c425d88cf4e30115c86d9aaba9e57e46413b5caea042175898fd1a32fb2970b5ecdf53ccebca1d8e50a7f3e943e66d0ac0977b8c1160ff8f19ce67488619cea4269b12ae9fa44d07fa45f1e19de1fc776a0cc2bcadf5acab56e9d4d6d74ebbad91f92"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000002400)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000002440)={0x20, 0x0, 0x8, {0xc0, 0x1d, [0x78]}}, &(0x7f0000002480)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000024c0)={0x40, 0x9, 0x1, 0x82}, &(0x7f0000002500)={0x40, 0xb, 0x2, "c78d"}, &(0x7f0000002540)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000002580)={0x40, 0x13, 0x6, @remote}, &(0x7f00000025c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000002600)={0x40, 0x19, 0x2, "b98d"}, &(0x7f0000002640)={0x40, 0x1a, 0x2}, &(0x7f0000002680)={0x40, 0x1c, 0x1}, &(0x7f00000026c0)={0x40, 0x1e, 0x1, 0xab}, &(0x7f0000002700)={0x40, 0x21, 0x1, 0x7}})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002840), r3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002880)={'wg2\x00', <r7=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002940)={0xffffffffffffffff, 0x58, &(0x7f00000028c0)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002a40)={'syztnl1\x00', &(0x7f0000002980)={'sit0\x00', <r10=>0x0, 0x10, 0x1, 0x7, 0xfffffffd, {{0x25, 0x4, 0x0, 0x8, 0x94, 0x66, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0x9, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff9}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}]}, @end, @generic={0x88, 0x6, "df9983da"}, @timestamp_addr={0x44, 0xc, 0xc8, 0x1, 0x3, [{@private=0xa010101, 0x6}]}, @generic={0x94, 0x9, "86886f08464aab"}, @cipso={0x86, 0x40, 0x3, [{0x6, 0xc, "672f046839ef8e158013"}, {0x1, 0xb, "d35d5d68351fd32a2f"}, {0x0, 0x2}, {0x5, 0x12, "2eac471f6c6eb1fd3f9f543c68c27143"}, {0x6, 0xf, "84dcca86838beb136c6828f7b1"}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000002b80)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b40)={&(0x7f0000002a80)={0x84, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x841}, 0x10)
r11 = syz_open_dev$vcsu(&(0x7f0000002bc0), 0x9, 0x3cdb80)
r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003d80), 0x4c0000, 0x0)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r9, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003e40)='memory.events.local\x00', 0x0, 0x0)
r15 = openat2(0xffffffffffffff9c, &(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)={0x3, 0x4, 0x4}, 0x18)
r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003f00)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003f80)={r8, 0x6fe029a4, 0x30}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000004040)={0x6c7eb4f8dd89263b, 0x1b, &(0x7f0000002c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x176a, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x90}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @ldst={0x0, 0x0, 0x1, 0x3, 0x6, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000002d00)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000002d40)=""/4096, 0x41000, 0x51, '\x00', 0x0, @fallback=0x28, r2, 0x8, &(0x7f0000003d40)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x4, &(0x7f0000003fc0)=[r12, r13, r14, r15, r2, r16, r17], &(0x7f0000004000)=[{0x3, 0x2, 0xd, 0xc}, {0x5, 0x2, 0xd, 0x9}, {0x2, 0x3, 0x5, 0x4}, {0x5, 0x2, 0x1, 0x4}], 0x10, 0x7ff, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f00000041c0)={'erspan0\x00', &(0x7f0000004100)={'syztnl2\x00', r10, 0x8006, 0x7800, 0x40, 0x120, {{0x23, 0x4, 0x2, 0x31, 0x8c, 0x66, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x37, 0x1, 0x5, [{@multicast1, 0xb875}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3}, {@local, 0x6}]}, @noop, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0x8, [{@rand_addr=0x64010102, 0x6}, {@private=0xa010100}]}, @noop, @timestamp_addr={0x44, 0x24, 0xe0, 0x1, 0x9, [{@local, 0x2}, {@private=0xa010102, 0x7f}, {@private=0xa010102, 0x4}, {@rand_addr=0x64010100, 0x1}]}, @noop, @rr={0x7, 0x1b, 0x7f, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @remote, @private=0xa010101, @remote]}]}}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000004240)={&(0x7f0000004200)='thermal_temperature\x00', r15, 0x0, 0x2}, 0x18)
ioctl$VHOST_VDPA_SET_CONFIG(r12, 0x4008af74, &(0x7f0000004280)={0x0, 0x23, "e4ee58e80f633418495664283f96802ea873358f4143cb4b4a8abfb1204b9e865985e6"})
syz_usb_connect(0x5, 0x936, &(0x7f00000042c0)={{0x12, 0x1, 0x310, 0x95, 0xd7, 0xf1, 0x8, 0x1645, 0x8, 0xa525, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x924, 0x4, 0x3, 0x42, 0x10, 0x3, [{{0x9, 0x4, 0xa8, 0x7, 0x10, 0xbd, 0x4b, 0x0, 0x4b, [@uac_control={{0xa, 0x24, 0x1, 0xdc, 0x1}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x0, 0x4, "cb13"}]}], [{{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x0, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x9, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x17, 0x5, 0x1, [@generic={0xc7, 0xf, "99017f87346dac68004a4675942ce80b70b883a4e7b14dbbb6d13907efcc2fca7d969319eabc7081c853869e525bec05ae5ba336a985f1ce8109350ea9289ffedcdd22ac4316c981184ebc3fffbf8378152bfa34d52b1bf1583f0792f7149a5e4243f2a629cd53c2fb8fd996025e547666c7353c65491cae8d3b2def7b2cd80fafae4f4773f5729c7d054373fe26cdc72ff3496387085e47baa7f4b11ab131c041a9f6ea565f4fb69fc3e5f0f031d322b0533f3ada0cc7170fbd64529f151b82bdf79aaf0e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x85, 0xfffd}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x7, 0x6, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x7fff}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x10, 0x9, 0x3}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x9, 0x9, 0x1, [@generic={0x9c, 0xa, "99fb4f241a966629485770b3b5cbb16e707b0fc220361c4350e70e2ff231ec283019133968de2c7f8d666e89ab24944e5880e2a6848353a46c6f90dd57c37c0337b667c84fce33b0461965b64cce497217cc4d336580159e0eafa16ecdb664e98d65fba366740eb4c3e499ebe139fbcc86f4e9390e1f54b0835ade18e081e52f336b9a32b325aa01a5089fc9fc3e8f4160e2805a7d967393ee7b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd9, 0x4159}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9b}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x83, 0x7, 0xf}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xb, 0x69, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x44}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x4, 0x9, 0x80, [@generic={0x9d, 0x26, "14f683b8ab89f4d43a68d3632a2aabcf274783187a13301628894c2cc032092e60537658cbb070dea5b24c78c8d4fbe82c8447ed891a89750b9848a4533025d0688e7703e0eddc967c2e9339edff330b5cb16ae50a44dc081b45a227160222882c4f6199c15f573277ee213b67247396b4dd570d91dede1f6962a32ace4615d4e27a00679ddf46474b212eaca51d0ce488a5d6ce4371d2520e5d81"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xb5, 0xdd, 0x6}}, {{0x9, 0x5, 0x0, 0xb, 0x200, 0x5, 0x6, 0xf7}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xd, 0xc, 0x8}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x1, 0x5, 0x6d, [@generic={0xf0, 0x30, "79c0acd86293922e8b48b776f75ebad74eeef520365654f59ef286cd770468db90420b8be3571e87ea1444577df0daf47dea286ff62581f51b0209127e95045b920b5722efc64307ed70d5431fb7f011385bb6ddf692a5a8c44dec96a44d804e6c85a9b1ed7d8c713fe242a6980bede73978df1af1c5eac9548ba666f8c3e4ab3e69e2763e1c0e9c9c0e3c216a0073eb57ebac1cb3d960ca19594fafaf5f0a66b7df4c8542aaaf741bd5a6090d31a9b5d8c2320889a32c3180b760ec4a4e52ef1e787c56c97ffac48ff26d431d3e0c866a0dce7cbdad911d8e6797aa9aba922dbdfb3b8e2dadb313adcac2b35ec8"}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x69, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9d, 0x900}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfffa}]}}, {{0x9, 0x5, 0xa, 0xc, 0x9341961a022c559b, 0x7, 0x41, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xfb, 0x3, 0x0, [@generic={0xa4, 0x11, "bb59a37b7cd750a27c08e720b3c7647b77a09c885b602ed6b8653132274c6a2f122d53cbf0aa733d075cdca75f5d12133be7155c0d71b2a851883ce455094946e7e9ff7d2f2810ecb8f2d0e43fb4c4e9bda6c8ff6a708e87b78cc9f3c34c4a29dc2d4999333e63af713311f087129c26ffd2bb11fb1cbccf00f3b7f6eb6f653d292e4fb407bf58e250b963329440b9a635214acff2a40956bdbea522a12e390869eb"}]}}]}}, {{0x9, 0x4, 0x4, 0x8, 0x2, 0xaf, 0x69, 0xe9, 0x58, [@uac_as], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x1, 0xfc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x2}, @generic={0x68, 0x21, "599d0315b54735d848caf4ad2ff208940a4a1f0d18adc29e44e1eb2ae4c28b92789d979babd558b4eef8be5a079e9b4a1387c437dcf4e7011179b22ed0034603811e45d9152248a770445b06cc20697436f11e5f94f308f85a38bddc2d9436c40b6d7b196031"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x9f, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8b, 0x5}]}}]}}, {{0x9, 0x4, 0x1a, 0x5, 0x2, 0x77, 0x4c, 0x9b, 0xa, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "f00312d06d97"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0xfff8, 0x30}, [@country_functional={0xa, 0x24, 0x7, 0xb, 0x232, [0x7, 0x7]}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @dmm={0x7, 0x24, 0x14, 0x9, 0x7}, @obex={0x5, 0x24, 0x15, 0xbf}, @mdlm_detail={0x1e, 0x24, 0x13, 0x0, "a4b6a2119fef2cfdd8f4809489969fc9757ed7a33248d6b6d78e"}]}], [{{0x9, 0x5, 0x3, 0x4, 0x400, 0x0, 0xfc, 0x7}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x8, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x7, 0x3}]}}]}}, {{0x9, 0x4, 0x8f, 0x3, 0x4, 0xff, 0x61, 0x64, 0x0, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8a37"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xcc26, 0x5, 0x3}, [@acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0xee, 0x24, 0x13, 0xd6, "1aa83757a12c12b895206338db9c0d50579e1b1ede389dc1e631cb343bd326d732aeec7628174aa6642b9f77999b284c17c8aec8d85a471974c9e10f1c4b4bf4034a232e6c605e2e4796c9bb9b75693a36b612097a22a4ac36fc2510a0e78cba45d9d2a0b1333c0212c0cb17f6cd0473a10cf3582f5ea5957008202ba92bdc52989644e53c4da5413ff76710071724cedbe638ed0651f6c9eca4c2164dc3b5ce42b11747c340e81d2cf3853929053df508bce02372f358a220182147b269d113b2504b94a413e042b5aeac5152012e5bdd0a7f815a52a49e2c7ed275c82e3e7ba581d07b568943454eee"}, @mdlm_detail={0xd0, 0x24, 0x13, 0xb3, "78bf32468a0786082c41c6f3f2fb80fde982a0aee53ff4e56d5712f4cef2f01a1fd242c2b5dea680ea55dceae4548d68c8521dc375dfffd8f5888d41975aa22611a446d6aa50389a13861b3d1adb7e356f9633eac57ce4ee639df4c2eb5dc88a982c8bce33283cecbf836e2216319b3508f7e6f0589cd237a55e28ab9e451ae965df71b619f429161595181aaa8c6b4e8f703ce1406cc5427ce4578323f94e86adef1969cd5ad41056398233b6e6dcd17ea1e3cec517c37b8161ffb56777ca645dd545bfee1313dee0a84f95"}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x5, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x81, 0x9, 0x10, 0x3, 0x0, 0x75}, @acm={0x4, 0x24, 0x2, 0x4}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0xb, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x80, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x800, 0x6, "bb0e48432560"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x3, 0x5}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0xd, "9df943fff59c51c2"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x3}]}], [{{0x9, 0x5, 0x8, 0x3, 0x200, 0x0, 0x3, 0xf1}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x5, 0x7, 0xa, [@generic={0xd0, 0x17, "28fea05fe7058b060ae0e254495b8850193da1fce5f54ce161169983d90a8ae1634f12747a0a5c2ef9deb6df5d677219130db9a5f614dc8e24acb173ab0c9fe9e94335e5208c0ce0566231d1215cbd80dc1bebc2603b87dd30802191f696499476ea648d6ddde8d7d8148298e06a90d83ebd243530287868ea355755cce347f072087f015d36c4c0093ebe2c6ee31f9fc332c05acaf82ee103ea596b696289dd43e8befca88843f0ae60299d44868fe95e1ec8df13778ad8ebef2ed6fabe61ca9dd726f08e53f7bb66cd2eebbe28"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0x6}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0xb, 0xee, 0xbf}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x0, 0xff, 0x2, [@generic={0x45, 0x24, "1223defaf106fc03d867103f2cdd4764303e50183913144d4eeb91ae9c73bb2b9f09a50eb0291283694e46187aa40fa020be360b806619469c7d438fd7ee17f3729a61"}]}}]}}]}}]}}, &(0x7f0000004f00)={0xa, &(0x7f0000004c00)={0xa, 0x6, 0x0, 0x5, 0x3b, 0x7, 0x8, 0x8a}, 0x87, &(0x7f0000004c40)={0x5, 0xf, 0x87, 0x4, [@ptm_cap={0x3}, @generic={0x57, 0x10, 0x2, "8ea1ec372f0f5644ec6388ad9c6bfa69f5227284069a90f1c615914d6fdbe00658e66e33b4b498031e64823b7798eb3b610244a03de8aba7d018bbe7fc0ebb8403ceffcd8f747578c83c661f2d16fe64784e9d1c"}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "7ab5c834d573d7bd546c6cd99a077f59"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "5b8124dc37674cba345292e3a075ea23"}]}, 0x5, [{0x20, &(0x7f0000004d00)=@string={0x20, 0x3, "68874ded76dc11d05a7ab8e1877359d4ae4d61bc867d6792e34b11e1b489"}}, {0xc8, &(0x7f0000004d40)=@string={0xc8, 0x3, "a600802f16ab00a18a55dcef695fd91e3f74cd3bf9548834e4999f61d3219b121c9f80dfbac88d20c9f56a45278b5954c0bda92a36240e150349be7c58f38d721e1da495e4b983e4b679bac74c29611da5d31f473da6c552122337b3fdab4ac51b0fca2007e76ac68444f23e74a9b88e2a539bfc6f84c5481be27494604ee9855a43a5f874bdd6c14bd3655b175b1dfcbccc3ccf1eeb95003c811e70d952a442ff7788108023d6a16680edaf16751d2d586115a7b5c2cc7745bf6556bb5652dbb8c3296b9223"}}, {0x4, &(0x7f0000004e40)=@lang_id={0x4, 0x3, 0x455}}, {0x26, &(0x7f0000004e80)=@string={0x26, 0x3, "7b0f9dfabe2ac3b621ec997f0f2116fde53d6648b3d7d23483b5921b296563be98e0b581"}}, {0x4, &(0x7f0000004ec0)=@lang_id={0x4, 0x3, 0x423}}]})

10.894812054s ago: executing program 2 (id=455):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
r0 = dup(0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000004003000000000000000000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffc0004}]})
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r6}, &(0x7f0000000300))
timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0)
rt_sigtimedwait(&(0x7f0000000000)={[0x3cb7]}, 0x0, 0x0, 0xfffffffffffffd6c)

8.930814208s ago: executing program 1 (id=456):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086315, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000100), 0x8)
connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
write(r5, &(0x7f00000000c0)="8f2a", 0x2)
getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10)
io_setup(0xffff, &(0x7f0000000300))
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
fsetxattr$security_selinux(r0, &(0x7f0000000300), &(0x7f0000000580)='system_u:object_r:dhcpd_initrc_exec_t:s0\x00', 0x29, 0x0)

8.893452351s ago: executing program 2 (id=457):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
r1 = syz_mount_image$exfat(0x0, &(0x7f0000000340)='./bus\x00', 0x105004, 0x0, 0x3, 0x0, &(0x7f0000000080))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0)
ptrace(0xffffffffffffffff, 0x1)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a0500000000000000931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1548f5e0b33006bd1049ca45bd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc96eb384dbb4268c50943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906bde2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5511, &(0x7f0000015b80)="$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")
r3 = open(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000440))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
close(r2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f000048a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/42, 0x2a, 0x0, &(0x7f0000001180)=""/4096, 0x1000}, &(0x7f0000000400)=0x40)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$sock(r2, &(0x7f0000007140)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000080)=@in6={0x2, 0x4e24, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000003c0)}}], 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

8.849175784s ago: executing program 3 (id=458):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0)

8.692146598s ago: executing program 4 (id=459):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000004c0)=r0, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000740)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x2087, 0x703, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0xd7, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xffff, 0x2, 0x1, {0x22, 0x31d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc1, 0x81, 0x39}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x5, 0xe3, 0x9, 0x8, 0xf4}, 0x23, &(0x7f0000000300)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xe5, "fb3893072cfa3da9b9d832446e1e3322"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x3, 0x81, 0x9}]}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf25230000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f0100000000000000000009058103400000000009058202000000000009050302a6"], 0x0)

7.224280249s ago: executing program 2 (id=462):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18)
pipe2$9p(0x0, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
dup3(r5, r4, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6.072868815s ago: executing program 3 (id=463):
r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x101000)
syz_io_uring_setup(0x23a, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x3e5, 0x0, r0}, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
epoll_create1(0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10)
timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0))

6.070188026s ago: executing program 2 (id=464):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x5, 0x10001, 0x8}, 0x10, 0x60f5, 0xffffffffffffffff, 0x1, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x3, 0x1, 0x1, 0x9}], 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x36, 0x16, &(0x7f00000002c0)="4e881aa9a517b514ec840d1698a1bbed608eb7a72c3aabe68a4dca809dfed97d3cdba1557aa45111daac668f2f8d207cde09a076f446", &(0x7f0000000300)=""/22, 0xffffffff, 0x0, 0x5b, 0x3b, &(0x7f0000000340)="d8a425c8088f9f5904cb6be21075b0d982e9bebead0f855c6b3e7755b52c962ad04ff2fc9ecaec506080c389849a06d749e54cacae0d2c9b948bb3d450d24f12d785331e036d68ec9e5a26ce4c74d3d57566a7bf5bff056d7a124a", &(0x7f0000000400)="3c767f614bd743804569da3855427462edc7463f5181530c43dc2c437cb883d7213ea9e7283b329574eb56ce9b71ad5815eb2afb8339134b8e5171", 0x5, 0x0, 0x1}, 0x50)
syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = syz_usb_connect$uac1(0x2, 0x98, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x4, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xe}, [@selector_unit={0xa, 0x24, 0x5, 0x2, 0x8, "18a7cfa26c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x3, 0x2, {0x7, 0x25, 0x1, 0x83, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0xf7b7, 0xe, "d384a1dc7083fdfb"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0x9, 0x4, 'w', "9ea263"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0xd, 0x3, {0x7, 0x25, 0x1, 0x0, 0xb, 0x8}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x82, 0x81, 0x7f, 0x20, 0x9}, 0x4a, &(0x7f0000000600)={0x5, 0xf, 0x4a, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x7f, 0xf00, 0x10, [0xff3f00, 0xff0000, 0xff0030, 0xc0cf, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x2, 0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "14ea02f8ccda0482a65a1642174258fa"}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x407b}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x141b}}]})
syz_usb_connect(0x6, 0x595, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x9, 0x9f, 0x63, 0x8, 0x403, 0xf9d2, 0xbf16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x583, 0x2, 0xfb, 0x5, 0xa0, 0x1, [{{0x9, 0x4, 0xd2, 0x0, 0x0, 0x4, 0x4d, 0x8d, 0x2}}, {{0x9, 0x4, 0x21, 0x3, 0x10, 0xf6, 0xdb, 0xc4, 0x10, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "bf"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x0, 0x9, 0x2}, {0x6, 0x24, 0x1a, 0x5}, [@obex={0x5, 0x24, 0x15, 0xce41}, @acm={0x4, 0x24, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0xf1, 0x20, 0xcd95, 0x2}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0x6}]}], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x9, 0x4, 0x3, [@generic={0x8d, 0x4, "43d3f75d241534579486d386289837c2621eca3a94843617089e26b666b03db58b360214e89060fac81c0e2e1646d7b8828b5a87b8daf3aeab45ea73b7e3038b8f659c333d0275785c6ba7ea43daef984d9106fdef1bb95dbe8c2808e5aead42f61f69d110f6a2e6fb2a3e5de4092747485e00ad2cfadd28ef3888f61ef2e1df6d018624c12617a0841b2f"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x8, 0x4, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x7ff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xeb, 0x4, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x30, 0x1800}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x2, 0x4, 0x10, [@generic={0xb1, 0x0, "8b3b814ec5ed5c2cccb22b9f36de5c8c281f934a81d034d3c72e8d53de58f75f65c127e4a59072f420c20d4a26a2fd97dba9660c95967fd93738ed0d951708071c39c8b28f65f52acb7a459bfdce0467e8898012a267eb1a4476b1fd3ccfc3232e76d11ebfb853cf7ce47d65784ecb1f0eb738cdc1517ba6afbdc4bf5b6f2bebe90f75a433d68c58e7fd15cc11466d7f6d265212aa96bca5a652da56063a4015ececfad4699ac4541838263ab5ddc5"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x5, 0x7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x8001}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x53, 0x19, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0xc}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x5, 0x8, 0x8, [@generic={0x89, 0x30, "e39bd83083cb46d8a55e77988128b7e6283ba32e28a4c5961f0ff07098f09fc0e10fe874f779d9ac0ecf06d5009a01416a5d01dc7d4a522ff4340fff8f43cdb23fe7d390aae8c0387d2a267484e120db16b09d33f800ae60b0d6040c1e5c1c58e5c73765ddbccdab4ac9dc83ce976a2ea685c7d62dd9c717d29255613c1918d13e9a9e49e4ec06"}, @generic={0x72, 0x31, "4ec9d97f6f756671b705b93e288457f335dc61c00761051b38ee13e4473044e3012a0ce53478b7acbdda9781767d0a086b3f4684473ef417a9ebec16294b3e217badb593f681c957972aa41c95f553b688bfa36c20591ed65e1be2c5a659085574c62b3d0956439c9ed91a3a7eecf6c6"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x8, 0x0, 0x5}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0xb2, 0x1, 0x40}}, {{0x9, 0x5, 0x3, 0xd, 0x10, 0x7, 0x6, 0x81, [@generic={0xc4, 0x30, "77d9e5989de39a2426633892ae79c6cad2e698259064da51d2ff53b826976a3e19f40c8d848f9230ff3d474710b85d0138bc83c80b989d16cce8df0502a741c0f10d2074c9799998b042dd445205f3deed5d023604e0f58d9dc451287d1e90cb355c5210b5ee87b0be20f5573a1aeee103482fe21126cb06112fa01ea327a44d998ce7cd209ab0ae6871476e17bea85a16ed54f0444ab98dca381a6edb3692a64ecf99d87ebffc9accfffb79416f671d1e2ae0581f16edf896d12a4165c4b33c1ed3"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x1c11d03596eba81b, 0x9, 0x6}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x0, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x5}, @generic={0xec, 0x31, "e6d88f0ef9f4880e7c8bc3e744487b22713fa47ef4682b66657552146ab1ba0315b49048e8419c831ed5fdb17c2e1aa06346c27139aeef801d7e36a8fe90a3369f416f51bdf779d698f6b40928a47cb7e2afab98a7cc1387af8df8cc6ad6ef534c69934c2fe565162aa1c98f5e90f583ffdbe8e7d66207d92794d75ff97a9e139d0abe5191a10b491f07a29d4ea82e1e1fad754edc67d48b7afd70cc62265310af49530ba93159f43c07a3383e42fe88ad5b35c815cc6e48622b1a127fe0d55b457d94b5fe0811fad73c7eca9477a207111f3db56c5b29f5f087a37dfae73d85c0ca1f06b7d0cfad95d8"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x5, 0x5, 0x6, [@generic={0xd, 0x7, "55140b3c0081100919e973"}, @generic={0x72, 0x24, "a62984c5e549dd2ed7671ac29b7d7567593db0c7d2aaa669c98adaa5782f25e2fa93c27f23a46cc5233c989ff8322d7b4dd600171b55e95ada14fabe59ed9bd61e4382b59644be3730eed8828c4b84906d5991655d9fdab374f84629de10d76f48538537976cb0e1fba4eff47db665fb"}]}}, {{0x9, 0x5, 0x5, 0x12, 0x10, 0x8, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x26, 0x0, 0xf8}}, {{0x9, 0x5, 0xb, 0x13, 0x200, 0xfe, 0x4, 0x3d}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x310, 0x0, 0x40, 0xc8, 0x20, 0x3}, 0x1c, &(0x7f0000000d80)={0x5, 0xf, 0x1c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x8, 0x100}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x4, 0x4, 0x172}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x41a}}, {0x26, &(0x7f0000000e00)=@string={0x26, 0x3, "4d6e31d58b817549826e8a862885fc5cc753997ac7b1001bcf27d35435cf36a58367309b"}}, {0xee, &(0x7f0000000e40)=@string={0xee, 0x3, "4addfc6e66ca55f9d876eaf97b3b1fe0f28722e43fe7cd197f1b43eb372accd3ec9a166ec5a657453e1cb3735b2762154f9b5b2480be29779c85022efd20a4c1520a64df2d04d45ea48dcddda72dfacd25819c542be3d3f7cbf25a6baeba6c9202577c9d8739c346dd489648c034cdcf3a2eb61e423d2b7a992235907febe71445bc1ca5a657a743b7aa0f8710a565c350ac8846dc3f7e55686f11b98351b858ffa80c5e567d434ae1cd54b0aa0111394674013d3985d22bbcec15963ddcfab71b58caf694df32d93c98c92fb1532c71f583744941a2da4667ec64ea76864079e45c69bc053ec4f6ab0e0b88"}}]})
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000f80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8e, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x9, 0xb}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1c, 0x80, 0x5}}]}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x7b069f7d103742b0, 0x9, 0x9, 0x5, 0x548909fb50903428, 0x7}, 0xb6, &(0x7f0000001000)={0x5, 0xf, 0xb6, 0x2, [@generic={0xae, 0x10, 0x1, "6956ac7ed919023c45fb7fc00f5b5d04c028e5ae471869e4be80a43928479155276965bd9be65809eb6af8044e1e903c23c1f863ad59ec2893f8213f914b8b6f23d5f3457173b7825dfca062d0f47f578e61bfb4c1211dc78dc2fe50e23b9908f3ea1793b98b43d125007af3984d880ce96b10da59a850884de7a5f1ef82bf9449004ebbbd53061d72c93c2fdae9bedb7815adc82541811ad04e136f1d3628ecd0e06a86ee1ff5ad596e08"}, @ptm_cap={0x3}]}, 0x5, [{0xdf, &(0x7f00000010c0)=@string={0xdf, 0x3, "1bcd4b6135ba7032e395b1b917549b3d5181adaf8b277964a1646b78db82659ea9c4419cb5d27ece381c369889938813c16c87a8da6a723f72562fafb8a36aa23eb0c7ab5a3f1490fdd37008bac74cf068809de4419db7813498f8909daabfb9f207a25ad72cb3e18182ef0d7b02c51332498d751c3e43620e7117cf758c234ceb0111c7ca2b00b75c5370fcd9fcce261975003492af6f7141b787527f583f5d04a963b4b0e2fcf71ed5f350e0666bd41edb5a6879c40b456c0ed8f3e1fecc43979fd996cbc1268d708cac1b9e4064e9131c39af2594d22eb4faa19a84"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x455}}, {0x10, &(0x7f0000001200)=@string={0x10, 0x3, "b651c518c6b992936d77bfb920b3"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x1401}}]})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002080)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001400)={0xc28, r4, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x22}}}}, [@NL80211_ATTR_TID_CONFIG={0xf4, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x84}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfa}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x69}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xa88, 0x11d, 0x0, 0x1, [{0x568, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x244, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x3, 0x6c, 0x36, 0x1, 0x2, 0x1, 0x60, 0x6c, 0x3, 0x6, 0x16, 0x1, 0x6, 0x3, 0x24, 0x1b, 0x24, 0xb, 0x61, 0x6c, 0x1b, 0x6, 0x9, 0x6c, 0x18, 0xc, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ed3, 0x2, 0x9, 0x0, 0x8, 0x419e, 0xac0, 0xecd1]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x1b, 0x9, 0x18, 0x1, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x100, 0xde, 0x1, 0x8, 0x100, 0x10, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6bde, 0x1ff, 0x0, 0x5, 0xffff, 0x0, 0x0, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x5, 0x6, 0x0, 0xbbe4, 0x1, 0x820f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x44, 0xb, 0xa, 0x5, 0x0, 0xe7, 0x1, 0x800]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5, 0x7}, {0x6, 0x1}, {}, {0x7, 0xa}, {0x4, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x8}, {0x6, 0x4}, {0x3, 0x2}, {0x7, 0x5}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x9}, {0x2, 0x4}, {0x5, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0xe, 0xcae, 0x6, 0x6, 0x91]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x6c, 0x12, 0xc, 0x1b, 0x9, 0x24, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0xa}, {0x1, 0xa}, {0x5, 0xa}, {0x3, 0x1}, {0x7, 0x2}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x7fc0, 0xfff4, 0x3, 0xf2c6, 0xa2, 0xe4, 0x400]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x401, 0xb, 0x8885, 0x1000, 0x8, 0x7]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xfffe, 0x1, 0x6def, 0x2, 0x5, 0x7f, 0xfff8]}}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x6}, {0x4, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x3}, {0x0, 0x8}, {0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x2, 0x9}, {0x3, 0x3}, {0x6, 0x1}, {0x2, 0x5}, {0x2, 0x5}, {0x6, 0x9}, {0x5, 0x9}, {0x5, 0x6}, {0x6, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x7}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x5}, {0x0, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x1}, {0x6, 0x6}, {0x5, 0xa}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0xa}, {0x2}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x7, 0x2}, {0x3, 0x5}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x7}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x6}, {0x2, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x8}, {0x7, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x4}, {0x6, 0x4}, {0x1, 0x2}, {0x7, 0x8}, {0x6, 0x7}, {0x5, 0x2}, {0x3, 0x9}, {0x1, 0x2}, {0x7, 0x7}, {0x6, 0x6}, {0x7, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x8, 0x7, 0x6, 0x7, 0xe585, 0xe, 0xf801]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x9}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x2}, {0x3, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {}, {0x0, 0x9}, {0x4, 0x7}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x6}, {0x2, 0x9}, {0x4, 0xa}, {0x3, 0x5}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0x4}, {0x6, 0x8}, {0x4}, {0x4, 0x2}, {0x6, 0x3}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x4}, {0x7}, {0x5, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x1}, {0x4, 0x8}, {0x7, 0x3}, {0x3, 0x5}, {}, {0x6, 0xa}, {0x3}, {0x4, 0x8}, {0x5, 0x5}, {0x5, 0x7}, {0x4}, {0x2, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x9, 0x5, 0x9, 0x4, 0x1, 0xa, 0x740]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x6, 0xadf6, 0x4, 0x1, 0x1, 0x6]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x2, 0xfe00, 0x8, 0x9, 0x10, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x8000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xd]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x0, 0xfd2, 0xfffe, 0x800, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbc42, 0x100, 0x3, 0x47, 0xc, 0xd2, 0x2, 0x3]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xea, 0xffff, 0x37, 0x45e6, 0xa0c, 0x100, 0x5, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x7, 0x6, 0x5, 0x5, 0x400, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x7ff, 0xb32c, 0x7fff, 0x3, 0xb12a, 0x6]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0x7}, {0x3, 0x6}, {0x0, 0x5}, {0x3, 0x8}, {0x5, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x8, 0x1000, 0x0, 0x0, 0x6, 0x4]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x33, 0x16, 0x18, 0x6, 0x1, 0x9, 0x48, 0x4, 0x30, 0x2, 0x1b, 0x1, 0x12, 0x2, 0x60, 0x60, 0x5, 0x6c, 0x18, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xcbd8, 0x0, 0x0, 0xb, 0xe67, 0x0, 0x3ff, 0x481]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x2, 0x9, 0x9, 0x3, 0x5, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0xa}, {0x2, 0x2}, {0x3, 0xa}, {0x6}, {0x3, 0x6}, {0x1, 0x6}, {0x0, 0x13}, {0x3, 0x6}, {0x0, 0x5}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0x3}, {0x2, 0x4}, {0x7, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0x8}, {0x7, 0x1}, {0x1, 0x9}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x3}, {0x3, 0x3}, {0x3, 0x8}, {0x5, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x18, 0x1b, 0x60, 0x18, 0x60, 0x12, 0x36, 0x5, 0x60, 0x0, 0x2, 0x12, 0x2, 0x12, 0x1, 0x2, 0x30, 0x12, 0x43, 0x1, 0x6, 0x3, 0x18, 0x6, 0x3, 0x48, 0xf4ddf89f3c268bf2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xeaa7, 0x4, 0x0, 0x7, 0x7, 0x4, 0x5ad]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x9}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {0x4}, {0x4, 0x8}, {0x2, 0x5}, {0x7, 0x5}, {0x6}, {0x0, 0xa}, {0x4, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x6, 0x4}, {0x5, 0x1}, {0x5, 0x7}, {0x6, 0x4}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd7f, 0x0, 0x67ce, 0x7, 0x1, 0x2ed3, 0x0, 0x7]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x5, 0xc, 0x30, 0x3, 0x4, 0x4, 0x1, 0x16, 0x5, 0x67, 0x1, 0x30, 0x18, 0x24, 0x30, 0x60, 0x16, 0x30, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x10, 0xf7, 0xf18, 0x1, 0x4, 0x5, 0x3]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x9}, {0x5, 0x1}, {0x2, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x6, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x5, 0x7}, {0x7, 0x2}, {0x5, 0x3}, {0x4, 0x8}, {0x1, 0x2}, {0x7, 0x8}, {0x2, 0x4}, {0x3, 0x3}, {0x0, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x12, 0x36, 0x1f, 0x4, 0x3, 0x3, 0xf008e21c4d8c78a, 0x16, 0xc, 0x4, 0x16, 0x48]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x18, 0x13, 0x60]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x1}, {0x4, 0x6}, {0x2, 0xa}, {0x7, 0x8}, {0x0, 0x7}, {0x5, 0x6}, {0x3, 0x6}, {0x7, 0x1}, {0x5, 0x7}, {0x2, 0xa}, {0x0, 0x4}, {0x6, 0x1}, {0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x5}, {0x3, 0x2}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x5}, {0x5}, {0x6, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x2, 0x2}, {0x1, 0x1}, {0x3, 0x7}, {0x3, 0x3}, {0x4, 0x6}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x4}, {0x4, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfff, 0x4, 0x8, 0x2, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x1, 0x18, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff80000000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x4}, {0x4, 0x7}, {0x4, 0x8}, {0x7, 0x9}, {0x2}, {0x2, 0x2}, {0x1, 0xa}, {0x1, 0xa}, {0x7, 0x2}, {0x1, 0x9}, {0x5, 0x7}, {0x0, 0x3}, {0x4, 0x1}, {0x7}, {0x2, 0x5}, {0x3, 0x7}, {0x2, 0x18}, {0x1, 0x6}, {0x6, 0x5}, {0x6, 0x5}, {0x4, 0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x3}, {0x6, 0x6}, {0x0, 0x7}, {0x6, 0x3}, {0x2}, {0x5, 0x4}, {0x1, 0xa}, {}, {0x7, 0x1}, {0x6}, {0x5, 0x1}, {0x1, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x7}, {0x1, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x3, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x4, 0x1}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x1}, {0x7, 0x7}, {}, {0x6}, {0x2, 0x6}, {0x1, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x23, 0x6, 0x1b]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x36, 0x6, 0x12, 0xb, 0x4, 0x6c, 0x24, 0x12, 0x0, 0x1b, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x101, 0x7, 0x5, 0xebf, 0x0, 0x4, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x81, 0x4, 0x6, 0x5, 0xff64, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x2, 0x30, 0x60, 0x24, 0x48, 0x16, 0x18, 0xc, 0x16, 0x6c, 0x60, 0x18, 0x16, 0x5, 0xb, 0x6, 0x30, 0x53, 0x1, 0x6, 0x4, 0x9, 0x5, 0x16]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x6}, {0x3, 0x5}, {0x3}, {0x1, 0x9}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0xa}, {0x5, 0x5}, {0x1, 0x9}, {0x4, 0x3}, {0x7, 0x2}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0xa}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x400, 0x2, 0x4, 0x4, 0x155b, 0xffff, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x57}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x0, 0x4f, 0x8, 0x5, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0x1b, 0x18, 0xc, 0x9, 0x1b, 0x16, 0x12, 0x18, 0x30, 0x5b, 0x9, 0x9, 0xc, 0x24, 0x1, 0x36, 0xb, 0x24, 0xb, 0x6c, 0x24, 0x36, 0x16, 0x3e, 0x24, 0x18, 0x12, 0x24, 0x3]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x67d, 0xfc01, 0x7, 0x4, 0x1ff, 0xff]}}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x3}, {0x7, 0x2}, {0x6, 0x9}, {0x5, 0x7}, {0x4, 0x3}, {0x7, 0x8}, {0x0, 0x3}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x3}, {0x0, 0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x7}, {0x7, 0x3}, {0x4, 0x7}, {0x7, 0x4}, {0x1}, {0x2, 0x5}, {0x0, 0x6}, {0x5}, {0x7, 0x5}, {0x3, 0x3}, {0x2, 0x8}, {0x5, 0x8}, {0x6, 0x1}, {0x1, 0x7}, {0x7, 0x7}, {0x6, 0x2}, {0x0, 0x8}, {0x7, 0x5}, {0x4, 0x6}, {0x1, 0x8}, {0x5}, {0x2, 0x8}, {0x6, 0x8}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x2}, {0x0, 0x6}, {0x1, 0xa}, {0x3, 0x6}, {0x2, 0x4}, {0x2, 0x1}, {0x7, 0x8}, {0x3}, {0x2, 0x8}, {0x1, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x5, 0x10, 0x6d6, 0xb, 0x8, 0x69, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfaf5, 0x5, 0x3ff, 0x8001, 0x4, 0x1, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8e, 0x4, 0x2, 0x78, 0x3, 0x2, 0xd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x101, 0x2, 0xb1, 0x0, 0x3dd, 0xfff7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0xee7, 0x8c, 0x8, 0x7, 0x3, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x200, 0x6, 0x7, 0xff80, 0x8, 0x0, 0x8]}}]}]}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x74, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b5f, 0x5, 0x6, 0x8, 0x7, 0x401, 0x8, 0xd]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x10, 0x1, 0x6c]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x7}, {0x4, 0x3}, {0x7, 0x2}, {0x2}, {0x4, 0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x7, 0x5}, {0x7}, {0x2, 0x8}, {0x1}, {0x6, 0x2}, {0x1, 0x7}, {0x6, 0x7}, {0x7, 0x1}, {}, {0x0, 0x2}, {0x6, 0x5}, {0x7, 0x2}, {0x5, 0x9}, {0x7, 0x4}, {0x3, 0xa}, {0x4, 0x7}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x3}, {0x7, 0x4}, {0x7, 0x5}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x9}, {0x3}, {0x2, 0xa}, {0x0, 0x3}, {0x1, 0x4}, {0x4, 0xa}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0x6}, {0x5, 0x9}, {0x2, 0x6}, {0x1, 0x9}, {0x3, 0x1}, {0x1}, {0x7, 0x3}, {0x6, 0xa}, {}, {0x7, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2, 0xa}, {0x4, 0x6}, {0x3, 0x7}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x8, 0x7f, 0x0, 0xff, 0x8000, 0xa]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x24, 0x6c, 0x48, 0x12, 0x60, 0x36, 0x2, 0x30, 0x6c, 0x12, 0x1b, 0x6, 0x36, 0x6, 0x16, 0xb, 0x6c, 0x3, 0x16, 0x6c, 0x24, 0x36, 0xc, 0x4, 0xc, 0x48, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0xcaa5, 0x10, 0xfb7, 0x6, 0x5, 0x3]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0xc, 0x1b, 0x30, 0x6c, 0x2]}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x7fff, 0x8, 0x9, 0x401, 0x0, 0xa93e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xa4, 0x0, 0x9, 0x0, 0x9, 0x10, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x50, 0xfffc, 0x8, 0xffff, 0x8, 0x43d, 0x3, 0xf73]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x5}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x1}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x8}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x6}, {0x5, 0x5}, {0x1, 0x7}, {0x4}, {0x2, 0x8}, {0x3}, {0x6, 0x4}, {0x2, 0x8}, {0x7, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x2, 0x2}, {0x5, 0x1}, {0x5, 0x6}, {0x3, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x3, 0x5}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x9}, {0x7, 0x3}, {0x7, 0x7}, {0x5, 0x1}, {0x3, 0x9}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x3, 0x8, 0x4, 0xa, 0x6, 0xbb2b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x6d, 0xde0, 0x4, 0x40, 0x8, 0x9, 0x10]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x7cdd03f53aa0d37, 0x71, 0x30, 0x12, 0x60, 0x6c, 0x36, 0x3, 0x2, 0x36, 0x1c, 0x1b, 0x60, 0x1, 0x6, 0x30, 0x60, 0xc, 0x2, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9bc3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x65}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}]}]}, 0xc28}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000)
syz_usb_control_io(r1, &(0x7f0000002240)={0x2c, &(0x7f00000020c0)={0x40, 0x24, 0x5a, {0x5a, 0x9, "b1b8beb3daa02e2e7284e184f99a864c40908bfe8754fae645ef213979095c1fcb97664db8ad1c424f2ec05f60ee7eee8faf32848a3520a92033940ed71cf8f93ea45cc2fe1889536e9b8152dab523faaf66c6760041b7cc"}}, &(0x7f0000002140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, &(0x7f0000002180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000021c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x7, 0x3, "95f65ab4", "9d9cf9d5"}}, &(0x7f0000002200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x5, 0xef, 0x0, 0x5, 0x2}}}, &(0x7f0000002740)={0x84, &(0x7f0000002280)={0x0, 0x15, 0xd7, "b5de1d222e6dc0bd1e8a811679a7fead723c5528576494e6f5dc81abf5af84bce9257290a8d1513a0612f8e9f37fb586a9a94c88d50cf1f7805e91b728da547cf38bd749d98fa97e2ceb7cf4a7ec9c1ac930aff15ec1de20446579ad4c4cbe8171fd959ee8f7393660ca45603a749cd7842ebd401c425d88cf4e30115c86d9aaba9e57e46413b5caea042175898fd1a32fb2970b5ecdf53ccebca1d8e50a7f3e943e66d0ac0977b8c1160ff8f19ce67488619cea4269b12ae9fa44d07fa45f1e19de1fc776a0cc2bcadf5acab56e9d4d6d74ebbad91f92"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000002400)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000002440)={0x20, 0x0, 0x8, {0xc0, 0x1d, [0x78]}}, &(0x7f0000002480)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000024c0)={0x40, 0x9, 0x1, 0x82}, &(0x7f0000002500)={0x40, 0xb, 0x2, "c78d"}, &(0x7f0000002540)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000002580)={0x40, 0x13, 0x6, @remote}, &(0x7f00000025c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000002600)={0x40, 0x19, 0x2, "b98d"}, &(0x7f0000002640)={0x40, 0x1a, 0x2}, &(0x7f0000002680)={0x40, 0x1c, 0x1}, &(0x7f00000026c0)={0x40, 0x1e, 0x1, 0xab}, &(0x7f0000002700)={0x40, 0x21, 0x1, 0x7}})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002840), r3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002880)={'wg2\x00', <r7=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002940)={0xffffffffffffffff, 0x58, &(0x7f00000028c0)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002a40)={'syztnl1\x00', &(0x7f0000002980)={'sit0\x00', <r10=>0x0, 0x10, 0x1, 0x7, 0xfffffffd, {{0x25, 0x4, 0x0, 0x8, 0x94, 0x66, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0x9, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff9}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}]}, @end, @generic={0x88, 0x6, "df9983da"}, @timestamp_addr={0x44, 0xc, 0xc8, 0x1, 0x3, [{@private=0xa010101, 0x6}]}, @generic={0x94, 0x9, "86886f08464aab"}, @cipso={0x86, 0x40, 0x3, [{0x6, 0xc, "672f046839ef8e158013"}, {0x1, 0xb, "d35d5d68351fd32a2f"}, {0x0, 0x2}, {0x5, 0x12, "2eac471f6c6eb1fd3f9f543c68c27143"}, {0x6, 0xf, "84dcca86838beb136c6828f7b1"}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000002b80)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b40)={&(0x7f0000002a80)={0x84, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x841}, 0x10)
r11 = syz_open_dev$vcsu(&(0x7f0000002bc0), 0x9, 0x3cdb80)
r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003d80), 0x4c0000, 0x0)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r9, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003e40)='memory.events.local\x00', 0x0, 0x0)
r15 = openat2(0xffffffffffffff9c, &(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)={0x3, 0x4, 0x4}, 0x18)
r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003f00)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003f80)={r8, 0x6fe029a4, 0x30}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000004040)={0x6c7eb4f8dd89263b, 0x1b, &(0x7f0000002c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x176a, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x90}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @ldst={0x0, 0x0, 0x1, 0x3, 0x6, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000002d00)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000002d40)=""/4096, 0x41000, 0x51, '\x00', 0x0, @fallback=0x28, r2, 0x8, &(0x7f0000003d40)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x4, &(0x7f0000003fc0)=[r12, r13, r14, r15, r2, r16, r17], &(0x7f0000004000)=[{0x3, 0x2, 0xd, 0xc}, {0x5, 0x2, 0xd, 0x9}, {0x2, 0x3, 0x5, 0x4}, {0x5, 0x2, 0x1, 0x4}], 0x10, 0x7ff, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f00000041c0)={'erspan0\x00', &(0x7f0000004100)={'syztnl2\x00', r10, 0x8006, 0x7800, 0x40, 0x120, {{0x23, 0x4, 0x2, 0x31, 0x8c, 0x66, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x37, 0x1, 0x5, [{@multicast1, 0xb875}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3}, {@local, 0x6}]}, @noop, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0x8, [{@rand_addr=0x64010102, 0x6}, {@private=0xa010100}]}, @noop, @timestamp_addr={0x44, 0x24, 0xe0, 0x1, 0x9, [{@local, 0x2}, {@private=0xa010102, 0x7f}, {@private=0xa010102, 0x4}, {@rand_addr=0x64010100, 0x1}]}, @noop, @rr={0x7, 0x1b, 0x7f, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @remote, @private=0xa010101, @remote]}]}}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000004240)={&(0x7f0000004200)='thermal_temperature\x00', r15, 0x0, 0x2}, 0x18)
ioctl$VHOST_VDPA_SET_CONFIG(r12, 0x4008af74, &(0x7f0000004280)={0x0, 0x23, "e4ee58e80f633418495664283f96802ea873358f4143cb4b4a8abfb1204b9e865985e6"})
syz_usb_connect(0x5, 0x936, &(0x7f00000042c0)={{0x12, 0x1, 0x310, 0x95, 0xd7, 0xf1, 0x8, 0x1645, 0x8, 0xa525, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x924, 0x4, 0x3, 0x42, 0x10, 0x3, [{{0x9, 0x4, 0xa8, 0x7, 0x10, 0xbd, 0x4b, 0x0, 0x4b, [@uac_control={{0xa, 0x24, 0x1, 0xdc, 0x1}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x0, 0x4, "cb13"}]}], [{{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x0, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x9, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x17, 0x5, 0x1, [@generic={0xc7, 0xf, "99017f87346dac68004a4675942ce80b70b883a4e7b14dbbb6d13907efcc2fca7d969319eabc7081c853869e525bec05ae5ba336a985f1ce8109350ea9289ffedcdd22ac4316c981184ebc3fffbf8378152bfa34d52b1bf1583f0792f7149a5e4243f2a629cd53c2fb8fd996025e547666c7353c65491cae8d3b2def7b2cd80fafae4f4773f5729c7d054373fe26cdc72ff3496387085e47baa7f4b11ab131c041a9f6ea565f4fb69fc3e5f0f031d322b0533f3ada0cc7170fbd64529f151b82bdf79aaf0e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x85, 0xfffd}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x7, 0x6, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x7fff}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x10, 0x9, 0x3}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x9, 0x9, 0x1, [@generic={0x9c, 0xa, "99fb4f241a966629485770b3b5cbb16e707b0fc220361c4350e70e2ff231ec283019133968de2c7f8d666e89ab24944e5880e2a6848353a46c6f90dd57c37c0337b667c84fce33b0461965b64cce497217cc4d336580159e0eafa16ecdb664e98d65fba366740eb4c3e499ebe139fbcc86f4e9390e1f54b0835ade18e081e52f336b9a32b325aa01a5089fc9fc3e8f4160e2805a7d967393ee7b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd9, 0x4159}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9b}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x83, 0x7, 0xf}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xb, 0x69, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x44}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x4, 0x9, 0x80, [@generic={0x9d, 0x26, "14f683b8ab89f4d43a68d3632a2aabcf274783187a13301628894c2cc032092e60537658cbb070dea5b24c78c8d4fbe82c8447ed891a89750b9848a4533025d0688e7703e0eddc967c2e9339edff330b5cb16ae50a44dc081b45a227160222882c4f6199c15f573277ee213b67247396b4dd570d91dede1f6962a32ace4615d4e27a00679ddf46474b212eaca51d0ce488a5d6ce4371d2520e5d81"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xb5, 0xdd, 0x6}}, {{0x9, 0x5, 0x0, 0xb, 0x200, 0x5, 0x6, 0xf7}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xd, 0xc, 0x8}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x1, 0x5, 0x6d, [@generic={0xf0, 0x30, "79c0acd86293922e8b48b776f75ebad74eeef520365654f59ef286cd770468db90420b8be3571e87ea1444577df0daf47dea286ff62581f51b0209127e95045b920b5722efc64307ed70d5431fb7f011385bb6ddf692a5a8c44dec96a44d804e6c85a9b1ed7d8c713fe242a6980bede73978df1af1c5eac9548ba666f8c3e4ab3e69e2763e1c0e9c9c0e3c216a0073eb57ebac1cb3d960ca19594fafaf5f0a66b7df4c8542aaaf741bd5a6090d31a9b5d8c2320889a32c3180b760ec4a4e52ef1e787c56c97ffac48ff26d431d3e0c866a0dce7cbdad911d8e6797aa9aba922dbdfb3b8e2dadb313adcac2b35ec8"}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x69, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9d, 0x900}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfffa}]}}, {{0x9, 0x5, 0xa, 0xc, 0x9341961a022c559b, 0x7, 0x41, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xfb, 0x3, 0x0, [@generic={0xa4, 0x11, "bb59a37b7cd750a27c08e720b3c7647b77a09c885b602ed6b8653132274c6a2f122d53cbf0aa733d075cdca75f5d12133be7155c0d71b2a851883ce455094946e7e9ff7d2f2810ecb8f2d0e43fb4c4e9bda6c8ff6a708e87b78cc9f3c34c4a29dc2d4999333e63af713311f087129c26ffd2bb11fb1cbccf00f3b7f6eb6f653d292e4fb407bf58e250b963329440b9a635214acff2a40956bdbea522a12e390869eb"}]}}]}}, {{0x9, 0x4, 0x4, 0x8, 0x2, 0xaf, 0x69, 0xe9, 0x58, [@uac_as], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x1, 0xfc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x2}, @generic={0x68, 0x21, "599d0315b54735d848caf4ad2ff208940a4a1f0d18adc29e44e1eb2ae4c28b92789d979babd558b4eef8be5a079e9b4a1387c437dcf4e7011179b22ed0034603811e45d9152248a770445b06cc20697436f11e5f94f308f85a38bddc2d9436c40b6d7b196031"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x9f, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8b, 0x5}]}}]}}, {{0x9, 0x4, 0x1a, 0x5, 0x2, 0x77, 0x4c, 0x9b, 0xa, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "f00312d06d97"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0xfff8, 0x30}, [@country_functional={0xa, 0x24, 0x7, 0xb, 0x232, [0x7, 0x7]}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @dmm={0x7, 0x24, 0x14, 0x9, 0x7}, @obex={0x5, 0x24, 0x15, 0xbf}, @mdlm_detail={0x1e, 0x24, 0x13, 0x0, "a4b6a2119fef2cfdd8f4809489969fc9757ed7a33248d6b6d78e"}]}], [{{0x9, 0x5, 0x3, 0x4, 0x400, 0x0, 0xfc, 0x7}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x8, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x7, 0x3}]}}]}}, {{0x9, 0x4, 0x8f, 0x3, 0x4, 0xff, 0x61, 0x64, 0x0, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8a37"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xcc26, 0x5, 0x3}, [@acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0xee, 0x24, 0x13, 0xd6, "1aa83757a12c12b895206338db9c0d50579e1b1ede389dc1e631cb343bd326d732aeec7628174aa6642b9f77999b284c17c8aec8d85a471974c9e10f1c4b4bf4034a232e6c605e2e4796c9bb9b75693a36b612097a22a4ac36fc2510a0e78cba45d9d2a0b1333c0212c0cb17f6cd0473a10cf3582f5ea5957008202ba92bdc52989644e53c4da5413ff76710071724cedbe638ed0651f6c9eca4c2164dc3b5ce42b11747c340e81d2cf3853929053df508bce02372f358a220182147b269d113b2504b94a413e042b5aeac5152012e5bdd0a7f815a52a49e2c7ed275c82e3e7ba581d07b568943454eee"}, @mdlm_detail={0xd0, 0x24, 0x13, 0xb3, "78bf32468a0786082c41c6f3f2fb80fde982a0aee53ff4e56d5712f4cef2f01a1fd242c2b5dea680ea55dceae4548d68c8521dc375dfffd8f5888d41975aa22611a446d6aa50389a13861b3d1adb7e356f9633eac57ce4ee639df4c2eb5dc88a982c8bce33283cecbf836e2216319b3508f7e6f0589cd237a55e28ab9e451ae965df71b619f429161595181aaa8c6b4e8f703ce1406cc5427ce4578323f94e86adef1969cd5ad41056398233b6e6dcd17ea1e3cec517c37b8161ffb56777ca645dd545bfee1313dee0a84f95"}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x5, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x81, 0x9, 0x10, 0x3, 0x0, 0x75}, @acm={0x4, 0x24, 0x2, 0x4}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0xb, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x80, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x800, 0x6, "bb0e48432560"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x3, 0x5}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0xd, "9df943fff59c51c2"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x3}]}], [{{0x9, 0x5, 0x8, 0x3, 0x200, 0x0, 0x3, 0xf1}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x5, 0x7, 0xa, [@generic={0xd0, 0x17, "28fea05fe7058b060ae0e254495b8850193da1fce5f54ce161169983d90a8ae1634f12747a0a5c2ef9deb6df5d677219130db9a5f614dc8e24acb173ab0c9fe9e94335e5208c0ce0566231d1215cbd80dc1bebc2603b87dd30802191f696499476ea648d6ddde8d7d8148298e06a90d83ebd243530287868ea355755cce347f072087f015d36c4c0093ebe2c6ee31f9fc332c05acaf82ee103ea596b696289dd43e8befca88843f0ae60299d44868fe95e1ec8df13778ad8ebef2ed6fabe61ca9dd726f08e53f7bb66cd2eebbe28"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0x6}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0xb, 0xee, 0xbf}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x0, 0xff, 0x2, [@generic={0x45, 0x24, "1223defaf106fc03d867103f2cdd4764303e50183913144d4eeb91ae9c73bb2b9f09a50eb0291283694e46187aa40fa020be360b806619469c7d438fd7ee17f3729a61"}]}}]}}]}}]}}, &(0x7f0000004f00)={0xa, &(0x7f0000004c00)={0xa, 0x6, 0x0, 0x5, 0x3b, 0x7, 0x8, 0x8a}, 0x87, &(0x7f0000004c40)={0x5, 0xf, 0x87, 0x4, [@ptm_cap={0x3}, @generic={0x57, 0x10, 0x2, "8ea1ec372f0f5644ec6388ad9c6bfa69f5227284069a90f1c615914d6fdbe00658e66e33b4b498031e64823b7798eb3b610244a03de8aba7d018bbe7fc0ebb8403ceffcd8f747578c83c661f2d16fe64784e9d1c"}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "7ab5c834d573d7bd546c6cd99a077f59"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "5b8124dc37674cba345292e3a075ea23"}]}, 0x5, [{0x20, &(0x7f0000004d00)=@string={0x20, 0x3, "68874ded76dc11d05a7ab8e1877359d4ae4d61bc867d6792e34b11e1b489"}}, {0xc8, &(0x7f0000004d40)=@string={0xc8, 0x3, "a600802f16ab00a18a55dcef695fd91e3f74cd3bf9548834e4999f61d3219b121c9f80dfbac88d20c9f56a45278b5954c0bda92a36240e150349be7c58f38d721e1da495e4b983e4b679bac74c29611da5d31f473da6c552122337b3fdab4ac51b0fca2007e76ac68444f23e74a9b88e2a539bfc6f84c5481be27494604ee9855a43a5f874bdd6c14bd3655b175b1dfcbccc3ccf1eeb95003c811e70d952a442ff7788108023d6a16680edaf16751d2d586115a7b5c2cc7745bf6556bb5652dbb8c3296b9223"}}, {0x4, &(0x7f0000004e40)=@lang_id={0x4, 0x3, 0x455}}, {0x26, &(0x7f0000004e80)=@string={0x26, 0x3, "7b0f9dfabe2ac3b621ec997f0f2116fde53d6648b3d7d23483b5921b296563be98e0b581"}}, {0x4, &(0x7f0000004ec0)=@lang_id={0x4, 0x3, 0x423}}]})

6.02503692s ago: executing program 4 (id=465):
socket$nl_audit(0x10, 0x3, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsv0}, {@delalloc}, {@usrjquota}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffb}}, 0x10)
r4 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

5.909658529s ago: executing program 3 (id=466):
syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x13)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0)

5.881578501s ago: executing program 1 (id=467):
syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==")
truncate(&(0x7f0000000080)='./file1\x00', 0xf000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x13)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0)

5.469856105s ago: executing program 0 (id=468):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'ip6tnl0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000001000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x30}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0)
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
waitid(0x1, r6, &(0x7f0000000180), 0x2, &(0x7f00000004c0))
fsetxattr$trusted_overlay_redirect(r8, 0x0, 0x0, 0x0, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf090000000000005509010000000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

4.242428687s ago: executing program 1 (id=469):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x804810, &(0x7f0000000480), 0x1, 0x73f, &(0x7f0000000ec0)="$eJzs3M9rHOUbAPBnptmmP/L9bgQP6kGEFloonSTNpT0ZL94KhYLXGpJJCJlkQ3ZTm1iw9SzU5qIgiN49ehVK/QO8SUHBuyBa40G8rMxmk7ZxN922Sbeknw9M53nfmdnnfbqTNzuQdwN4ab1V/pNEDEXEpYiotvvTiDjcio5E3Ng8b+P+9alyS6LZvPx7Ul4WG83q9msl7f3xaF0Sr0XE3UrEmY//m7e+ujY/WRT5crs90lhYGqmvrp2dW5iczWfzxbHxC6Pnx8fPj47vWa0n37tw9PYP766v//ht49abA2eTmGjVHe3a9izRQzb/TyoxsaN/cT+S9VHS7wEAANCT8nP+oYgYaH1KrcahVgQAAAAcJM3BJgAAAHDgJdHvEQAAAAD7a+vvALbW9u7XOthufnsnIoY75R9orSGOOBKViDi2kTyyMiHZvAyeyY2bEXFnosP9l7Tvv6c3uqNtjfSL5045/0x0mn/S7fknOsw/A1vfnfCMus9/D/If6jL/Xeoxx3dfvl7pmv9mxBsDnfIn2/mTLvnf7zH/rfVPbnc71vw64lTH3z/JI7l2+X6IkZm5Ytcfrbv/nL63W/3HuuVPdq9/qcf6P9z4c77bXFLmP32i4/s/+HCunfnLe+LT9rE0Im6392V7fUeOEws/fb9b/dNd6n/c+/9Vj/X/8s3gtR5PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiSbPtOE2zLOJ4RLwax9KiVm+cmamtLE6XxyKGo5LOzBX5aERUN9tJ2R5rxQ/a53a0xyPilZ+PbiadK/JsqlZM97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAth2PiKFI0iwi0oj4q5qmWdbvUQEAAAB7brjfAwAAAAD2ned/AAAAOPie9vk/2eNxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfapYsXy625cf/6VNmevrq6Ml+7enY6r89nCytT2VRteSmbrdVmizybqi087vWKWm1p7EKsXBtp5PXGSH117cpCbWWxcWVuYXI2v5JXnktVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPKmh1pakWUSkrThNsyzifxExHJVkZq7IRyPi/xFxr1oZLNtj/R40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe66+ujY/WRT5skAgeG7BRxHxAgxjl6DfMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1QX12bnyyKfLne75EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQX+mvSUSU26nqyaGdRw8nf1db+4j44IvLn12bbDSWx8r+P7b7G5+3+8/1Y/wAAADwUnj7SU7eek7feo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVX11bX6yKPLlfQz6XSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB0/g0AAP//6H7FTw==")
chdir(&(0x7f0000000080)='./file0\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r1}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})

4.145990305s ago: executing program 0 (id=470):
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x100, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000819e0ee1d6e6d4287e9ed0defc7a58d7e8aa2c649a95543f8ce8e8631430c7299f028d28a6aae179659813382afcfbea72d57e96c10393ad22b2dd79f68c2d11aa4dbf121d0b35e4bbcd18f737eaa49921574a638597318bfd715eb1584e1016c7fd37381a62d2b7a3dc05a34d50dbb6018f784d5a666bd23185f30c938c38888df431ad048318dac1a951abc213db3697cbca43b23732f408f1f1d3a85bd71d010100000239c60c23be34ad3b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) (async)
r6 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async)
getrlimit(0xd, &(0x7f00000001c0))
r7 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r7, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})

4.021674475s ago: executing program 0 (id=471):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

4.020562246s ago: executing program 4 (id=472):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10)
socket(0x10, 0x80002, 0x4)
r4 = memfd_create(&(0x7f0000000000)='\x107', 0x0)
write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000001003e0000000012000000003800000000000000a16300000000000000"], 0x58)
finit_module(r4, 0x0, 0x0)

4.002100068s ago: executing program 0 (id=473):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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")
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000005c0)=0x2, 0x4)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000240), &(0x7f0000000280)=r8}, 0x20)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=r9, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000b5b1854d186bd161000000000000000000254316e1"], 0x48)

3.861525049s ago: executing program 1 (id=474):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18)
pipe2$9p(0x0, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
dup3(r5, r4, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.710738722s ago: executing program 3 (id=475):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000004c0)=r0, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000740)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x2087, 0x703, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0xd7, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xffff, 0x2, 0x1, {0x22, 0x31d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc1, 0x81, 0x39}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x5, 0xe3, 0x9, 0x8, 0xf4}, 0x23, &(0x7f0000000300)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xe5, "fb3893072cfa3da9b9d832446e1e3322"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x3, 0x81, 0x9}]}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf25230000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f0100000000000000000009058103400000000009058202000000000009050302a6"], 0x0)

2.671614998s ago: executing program 1 (id=476):
r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x101000)
syz_io_uring_setup(0x23a, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x3e5, 0x0, r0}, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
epoll_create1(0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0))

2.537602779s ago: executing program 1 (id=477):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40086315, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000100), 0x8)
connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
write(r4, &(0x7f00000000c0)="8f2a", 0x2)
getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10)
io_setup(0xffff, &(0x7f0000000300))
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
fsetxattr$security_selinux(r0, &(0x7f0000000300), &(0x7f0000000580)='system_u:object_r:dhcpd_initrc_exec_t:s0\x00', 0x29, 0x0)

2.430285228s ago: executing program 4 (id=478):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x91050}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

2.218093045s ago: executing program 2 (id=479):
syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0xf000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x13)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0)

2.152384021s ago: executing program 0 (id=480):
syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0xf000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x13)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0)

205.628243ms ago: executing program 2 (id=481):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00750500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r8 = getpid()
sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000001340)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="faba2a086997899dd448766dcf2a3cfbba93f5b33557239c952a383282dbee0d527b0fe54c19b0deaf657a1a25db93c02ca1ad7c69aa3e859668484c40", 0x3d}, {&(0x7f00000004c0)="7372fbd269a415375534325c8badd9489cd341eab256a7a1a4c7315f3040c93a602c76e02109c6d45dc1e352563bfa406f7deaabd01691cc8de4da903c9a40899d86b8dbe1304904091cdfdf872dead211de396017f6c9b0414748e2e0765add42897fd1680565b0925bd0360f9fdc5bfe3165332b51c4b4a9a4c5de750dbbd6d6718f445d10615476cdf9a236f8dcd04a0bd9e68d82023dfe29f26eb001fc5c6e7391963f3ac7df47378871996cb8f0cae74b38b69b896f7bb1b7c8704ff90d8a4b2ab9bc667925b838a8ca88bdfa95087e21b3ed571f9b85e3b51c0f34f54d248fe99dafc5fc66d2cdec3b4708336ecfb59019802f1c83e1", 0xf9}], 0x2, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r9, r3, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r4]}}, @rights={{0x34, 0x1, 0x1, [r7, r3, r6, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, r5, r2]}}, @rights={{0x20, 0x1, 0x1, [r4, r6, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x118}}, {{&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=[@rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}], 0x98}}, {{&(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000cc0)="09b00b61374d828f7b4ff622d749a7238ccad687c1aceb1f6ca5fd5a9745a5e653c342730f9be2d0429212de0bb9be212b93a9750e949129226def871772c56b716b6e2ed31be9aeaa59b4571301792c6e326bf5af28d122a3738d7ae244", 0x5e}], 0x1, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="3a1af61219d796839ed59e47bd7f8bd0135a6c2395ec6078a4a2ccb118eee4954de87013c8257c432dd48231c0eba404b30ae1ba374007fd36fa2b3fe99f1a0084cde0359bb797f0b506b9e5ed506fc1ad7c84be261062ba2c4ccac02f1bcf947fcc33b31c9a4aef0c2be590a02c61b5c538669b98994d896a9aee831e1d8fe29c9e3c1755f8ab55cc802da8287118cbde6f5448930eda67ca5d7ab3004c97bd4a92ea1e6406c2d7bd34150b8b1c53350244c19abf6f5dd4fbbdd26b55a1", 0xbe}, {&(0x7f0000000e80)="0be8ed887ee528795998f4b4887483cbbf475c5b88dc322c858361867d6a5584caee3060001c3d3a9727af9e07f376cfe91e811d7043a9fcf8acfd136c9fc98dd790594fefed1b9533e60ec70031341eb4b2", 0x52}, {&(0x7f0000000f00)="354bb6ef095b23259f9c6d748e8a9b04ec7abdb3e4ec0f9dd166f56b1b09d7c4cbc8a3a40b7b2445f00311d9eb58b2ee9368b8b94801cd15acb82f3b147162d05b44d38c5036bd3ba3c214bab9e0086d1ac17233f0ac5acebbd8142cff5a70511925bc647bbca56b26753ca279081c09815d345657180b8d2b0f7ab3675a65094cf9567533b75d3241c17c5a9d5fabc4e23af577b2f7d56a8b1d58ef40ca4846f21cc62812fbd1137cc506e6ddb6559d77d16c88ff7cfa735aa0711429a54e63e6265ad2952512c4642785567913f3fbaf3b3bdc90e5", 0xd6}, {&(0x7f0000001000)="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", 0xff}, {&(0x7f0000001100)="d99f0d21cd627998b68f913130924a8cbcf22517ca806573df10f9cbc481f657a410a5e8763710e8d02c90c198c0a07bf40d72ed49302768df1c91e491df5d1a9ee8ffc2b459c8264083e4b59a94931835f788e6badab8b010a0bde28fae3edc28e916052fc61a035a40b5ef6b5c01e82ad94139854a2d287d34f843b932f19c84e703047e440ae822cdf73355e57a2bab0b7954b9e2a3", 0x97}], 0x5, &(0x7f0000001240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50, 0x850}}], 0x4, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

138.428478ms ago: executing program 0 (id=482):
socket$nl_audit(0x10, 0x3, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsv0}, {@delalloc}, {@usrjquota}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffb}}, 0x10)
r4 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

0s ago: executing program 4 (id=483):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000000400000094efffff0200000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000580)={0x10, 0x2, {0x54, 0x200, 0xfff, {0xf4d6, 0x9}, {0x0, 0x1}, @rumble={0x2, 0x13}}, {0x57, 0x1, 0x5, {0x3, 0x7cef}, {0xf2b, 0x1}, @period={0x5d, 0xffff, 0x6, 0xff, 0xff, {0x400, 0x4, 0x5, 0xb5}, 0x3, &(0x7f0000000480)=[0x200, 0x9, 0x770a]}}})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r6, &(0x7f0000000000)=0x700, 0x12)
fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/124)
syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000400)='./file1\x00', 0xbf3d62d58a5fb26e, &(0x7f0000001480), 0x1, 0x4bf, &(0x7f0000000bc0)="$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")
add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="060fc44544e68cf03f9e40d824047bafeb4e5ec35b848ba9765c3dff11a05531d25e387f573e0f327d6405145b00caf14ef71bebb2cce46f885d13a7fee062df7fb1b35b16b36799806c2e8f68fd5723ece543d1022a", 0x56, 0xffffffffffffffff)
setgroups(0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x4008b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
setpriority(0x1, 0x0, 0x0)
r10 = fcntl$dupfd(r1, 0x0, r1)
prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x3, &(0x7f0000000180))
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)

kernel console output (not intermixed with test programs):


[  164.481178][  T302] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  164.514734][  T302] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  164.531836][  T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.532662][  T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  164.559558][  T302] usb 2-1: config 0 descriptor??
[  164.585268][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.594969][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  165.375253][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  165.401819][ T1534] FAULT_INJECTION: forcing a failure.
[  165.401819][ T1534] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.425504][ T1534] CPU: 0 PID: 1534 Comm: syz.4.277 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0
[  165.435045][ T1534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  165.441441][ T1488] device veth0_vlan entered promiscuous mode
[  165.445026][ T1534] Call Trace:
[  165.445042][ T1534]  <TASK>
[  165.456749][ T1534]  dump_stack_lvl+0x151/0x1b7
[  165.461264][ T1534]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  165.466734][ T1534]  ? kstrtoull+0x1cd/0x2e0
[  165.470993][ T1534]  ? _parse_integer+0x40/0x40
[  165.472952][ T1488] device veth1_macvtap entered promiscuous mode
[  165.475509][ T1534]  dump_stack+0x15/0x1b
[  165.485662][ T1534]  should_fail_ex+0x3d0/0x520
[  165.490258][ T1534]  should_fail+0xb/0x10
[  165.494350][ T1534]  should_fail_usercopy+0x1a/0x20
[  165.499204][ T1534]  _copy_from_user+0x1e/0xc0
[  165.503636][ T1534]  iovec_from_user+0xc7/0x320
[  165.508153][ T1534]  __import_iovec+0x70/0x430
[  165.512738][ T1534]  ? kstrtouint_from_user+0x124/0x180
[  165.517954][ T1534]  import_iovec+0xe5/0x120
[  165.522233][ T1534]  copy_msghdr_from_user+0x527/0x670
[  165.527326][ T1534]  ? __kasan_check_write+0x14/0x20
[  165.532275][ T1534]  ? sendmsg_copy_msghdr+0x70/0x70
[  165.537319][ T1534]  __sys_recvmsg+0x24b/0x3d0
[  165.541734][ T1534]  ? ____sys_recvmsg+0x530/0x530
[  165.546515][ T1534]  ? __kasan_check_write+0x14/0x20
[  165.551460][ T1534]  ? __ia32_sys_read+0x90/0x90
[  165.556068][ T1534]  ? debug_smp_processor_id+0x17/0x20
[  165.561262][ T1534]  ? fpregs_assert_state_consistent+0xb6/0xe0
[  165.567261][ T1534]  __x64_sys_recvmsg+0x7f/0x90
[  165.571858][ T1534]  x64_sys_call+0x171/0x9a0
[  165.576198][ T1534]  do_syscall_64+0x3b/0xb0
[  165.580468][ T1534]  ? clear_bhb_loop+0x55/0xb0
[  165.584975][ T1534]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.590695][ T1534] RIP: 0033:0x7f65c2b7dff9
[  165.594945][ T1534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.614398][ T1534] RSP: 002b:00007f65c3982038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  165.622727][ T1534] RAX: ffffffffffffffda RBX: 00007f65c2d36058 RCX: 00007f65c2b7dff9
[  165.630538][ T1534] RDX: 0000000000000700 RSI: 0000000020000580 RDI: 0000000000000003
[  165.638350][ T1534] RBP: 00007f65c3982090 R08: 0000000000000000 R09: 0000000000000000
[  165.646157][ T1534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.653968][ T1534] R13: 0000000000000001 R14: 00007f65c2d36058 R15: 00007ffffbef34e8
[  165.662082][ T1534]  </TASK>
[  165.676846][  T302] nintendo 0003:057E:2009.0010: unknown main item tag 0x0
[  165.684394][  T302] nintendo 0003:057E:2009.0010: unknown main item tag 0x0
[  165.691534][  T302] nintendo 0003:057E:2009.0010: unknown main item tag 0x0
[  165.701444][  T302] nintendo 0003:057E:2009.0010: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0
[  165.718985][  T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  165.727313][  T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  165.737143][  T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  165.745816][  T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  165.755166][  T359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  165.763221][  T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  165.771596][  T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  165.780043][  T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.781075][  T302] nintendo 0003:057E:2009.0010: failed reading SPI flash; ret=-38
[  165.788703][  T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  165.796712][  T302] nintendo 0003:057E:2009.0010: using factory cal for left stick
[  165.811533][  T302] nintendo 0003:057E:2009.0010: failed reading SPI flash; ret=-38
[  165.820052][  T302] nintendo 0003:057E:2009.0010: using factory cal for right stick
[  165.827817][  T575] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  165.828046][  T302] nintendo 0003:057E:2009.0010: failed reading SPI flash; ret=-38
[  165.843043][  T302] nintendo 0003:057E:2009.0010: Failed to read left stick cal, using defaults; e=-38
[  165.852610][  T302] nintendo 0003:057E:2009.0010: failed reading SPI flash; ret=-38
[  165.860308][  T302] nintendo 0003:057E:2009.0010: Failed to read right stick cal, using defaults; e=-38
[  165.862056][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  165.869928][  T302] nintendo 0003:057E:2009.0010: failed reading SPI flash; ret=-38
[  165.879693][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  165.888629][  T302] nintendo 0003:057E:2009.0010: using factory cal for IMU
[  165.898621][  T302] nintendo 0003:057E:2009.0010: failed reading SPI flash; ret=-38
[  165.909860][  T302] nintendo 0003:057E:2009.0010: Failed to read IMU cal, using defaults; ret=-38
[  165.918998][  T302] nintendo 0003:057E:2009.0010: Unable to read IMU calibration data
[  165.927533][  T302] nintendo 0003:057E:2009.0010: Failed to set report mode; ret=-38
[  165.935382][  T302] nintendo 0003:057E:2009.0010: Failed to initialize controller; ret=-38
[  165.945365][  T302] nintendo 0003:057E:2009.0010: probe - fail = -38
[  165.969215][  T302] nintendo: probe of 0003:057E:2009.0010 failed with error -38
[  165.994842][  T302] usb 2-1: USB disconnect, device number 15
[  166.060279][ T1530] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.068283][ T1530] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.076264][ T1530] device bridge_slave_0 entered promiscuous mode
[  166.089293][ T1530] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.096267][  T575] usb 3-1: Using ep0 maxpacket: 16
[  166.101468][ T1530] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.109316][ T1530] device bridge_slave_1 entered promiscuous mode
[  166.303498][ T1530] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.310415][ T1530] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.317721][ T1530] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.324640][ T1530] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.379685][  T575] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.390162][   T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  166.406279][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.416405][  T302] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.423862][  T302] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.651496][  T575] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4
[  166.697073][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.720502][  T575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.746680][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.832259][  T575] usb 3-1: Product: syz
[  166.850902][  T331] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.857817][  T331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.866406][   T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  166.891728][  T575] usb 3-1: Manufacturer: syz
[  166.905391][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.926886][  T575] usb 3-1: SerialNumber: syz
[  166.975221][  T575] usb 3-1: config 0 descriptor??
[  166.981675][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  167.114954][ T1552] loop1: detected capacity change from 0 to 512
[  167.379086][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.423316][ T1552] EXT4-fs (loop1): 1 truncate cleaned up
[  167.428974][ T1552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  168.953108][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  168.970694][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  168.984571][  T331] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.991598][  T331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.023060][ T1559] loop2: detected capacity change from 0 to 256
[  169.039423][  T575] usb 3-1: can't set config #0, error -71
[  169.049459][  T575] usb 3-1: USB disconnect, device number 16
[  169.055353][   T24] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00
[  169.107678][ T1559] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  169.121436][ T1416] EXT4-fs (loop1): unmounting filesystem.
[  169.127375][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.145412][  T337] device bridge_slave_1 left promiscuous mode
[  169.152966][ T1559] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  169.161783][ T1559] exFAT-fs (loop2): Filesystem has been set read-only
[  169.182259][   T24] usb 4-1: config 0 descriptor??
[  169.187383][  T337] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.200961][   T24] usb 4-1: can't set config #0, error -71
[  169.221169][   T24] usb 4-1: USB disconnect, device number 14
[  169.243366][  T337] device bridge_slave_0 left promiscuous mode
[  169.274650][  T337] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.285742][ T1566] loop1: detected capacity change from 0 to 128
[  169.306831][  T337] device veth1_macvtap left promiscuous mode
[  169.313640][ T1567] loop2: detected capacity change from 0 to 256
[  169.338387][ T1567] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  169.340853][  T337] device veth0_vlan left promiscuous mode
[  169.369047][ T1566] loop1: detected capacity change from 0 to 2048
[  169.412154][ T1567] exFAT-fs (loop2): hint_cluster is invalid (17)
[  169.583451][ T1566] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  169.603121][   T28] audit: type=1400 audit(1729390364.055:298): avc:  denied  { bind } for  pid=1560 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  169.616053][ T1566] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff)
[  170.670159][ T1416] EXT4-fs (loop1): unmounting filesystem.
[  170.789141][ T1557] loop4: detected capacity change from 0 to 40427
[  170.797916][ T1557] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  170.805757][ T1557] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  170.830532][ T1557] F2FS-fs (loop4): Found nat_bits in checkpoint
[  170.882112][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  170.890366][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.996248][ T1557] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  171.003347][ T1557] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  171.073153][ T1583] loop2: detected capacity change from 0 to 512
[  171.088128][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  171.101332][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  171.135586][ T1586] loop3: detected capacity change from 0 to 4096
[  171.142069][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  171.151202][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  171.160722][ T1586] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.201169][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  171.209339][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  171.218241][ T1557] syz.4.281: attempt to access beyond end of device
[  171.218241][ T1557] loop4: rw=2049, sector=77824, nr_sectors = 952 limit=40427
[  171.228522][ T1583] EXT4-fs (loop2): 1 orphan inode deleted
[  171.237615][ T1583] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  171.238030][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  171.246619][ T1583] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff)
[  171.256314][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  171.281502][ T1530] device veth0_vlan entered promiscuous mode
[  171.308734][ T1586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  171.365777][ T1530] device veth1_macvtap entered promiscuous mode
[  171.407668][ T1586] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.288: corrupted inode contents
[  171.534595][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  171.564605][ T1586] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #15: comm syz.3.288: mark_inode_dirty error
[  171.587392][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  171.604135][ T1586] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.288: corrupted inode contents
[  171.646249][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  171.646940][   T28] audit: type=1400 audit(1729390366.095:299): avc:  denied  { map } for  pid=1556 comm="syz.4.281" path="/47/bus/bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  171.745242][ T1586] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.288: mark_inode_dirty error
[  171.752265][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  171.776691][   T28] audit: type=1400 audit(1729390366.155:300): avc:  denied  { execute } for  pid=1556 comm="syz.4.281" path="/47/bus/bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  171.786174][ T1557] syz.4.281: attempt to access beyond end of device
[  171.786174][ T1557] loop4: rw=0, sector=78664, nr_sectors = 8 limit=40427
[  171.801502][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  171.820577][ T1586] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.288: corrupted inode contents
[  172.003212][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  172.013120][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  172.023609][ T1586] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.288: mark_inode_dirty error
[  172.032161][ T1598] syz.4.281: attempt to access beyond end of device
[  172.032161][ T1598] loop4: rw=524288, sector=77824, nr_sectors = 200 limit=40427
[  172.045659][ T1586] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.288: corrupted inode contents
[  173.612266][ T1586] EXT4-fs error (device loop3): ext4_truncate:4302: inode #15: comm syz.3.288: mark_inode_dirty error
[  173.649026][ T1586] EXT4-fs error (device loop3) in ext4_setattr:5613: Corrupt filesystem
[  173.751362][ T1592] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.288: corrupted inode contents
[  173.781588][   T28] audit: type=1400 audit(1729390368.235:301): avc:  denied  { rename } for  pid=1585 comm="syz.3.288" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  173.842263][ T1488] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  173.868816][ T1488] EXT4-fs (loop3): unmounting filesystem.
[  173.942944][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  173.968408][   T28] audit: type=1400 audit(1729390368.415:302): avc:  denied  { ioctl } for  pid=1608 comm="syz.3.290" path="socket:[20427]" dev="sockfs" ino=20427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  174.080698][  T369] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  174.300778][  T331] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  174.377953][ T1615] loop4: detected capacity change from 0 to 256
[  174.416977][ T1615] exfat: Deprecated parameter 'utf8'
[  174.461794][ T1615] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  174.480869][  T369] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  174.506495][  T369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.559015][  T369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.736884][  T369] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  174.750896][  T369] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  174.759843][  T369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.776032][  T369] usb 1-1: config 0 descriptor??
[  174.909535][  T331] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  175.059019][  T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.165869][  T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.345044][  T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  175.378562][  T331] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00
[  175.398049][  T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.412294][  T331] usb 3-1: config 0 descriptor??
[  175.417919][  T369] nintendo 0003:057E:2009.0011: unknown main item tag 0x0
[  175.425375][  T369] nintendo 0003:057E:2009.0011: unknown main item tag 0x0
[  175.440895][  T369] nintendo 0003:057E:2009.0011: unknown main item tag 0x0
[  175.459904][  T369] nintendo 0003:057E:2009.0011: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.0-1/input0
[  175.570927][  T369] nintendo 0003:057E:2009.0011: failed reading SPI flash; ret=-38
[  175.579236][  T369] nintendo 0003:057E:2009.0011: using factory cal for left stick
[  175.592878][  T369] nintendo 0003:057E:2009.0011: failed reading SPI flash; ret=-38
[  175.602556][  T369] nintendo 0003:057E:2009.0011: using factory cal for right stick
[  175.610524][  T369] nintendo 0003:057E:2009.0011: failed reading SPI flash; ret=-38
[  175.677054][ T1625] loop3: detected capacity change from 0 to 512
[  175.735455][  T369] nintendo 0003:057E:2009.0011: Failed to read left stick cal, using defaults; e=-38
[  175.773015][ T1625] EXT4-fs (loop3): 1 truncate cleaned up
[  175.778637][ T1625] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  177.130030][  T369] nintendo 0003:057E:2009.0011: failed reading SPI flash; ret=-38
[  177.138378][  T369] nintendo 0003:057E:2009.0011: Failed to read right stick cal, using defaults; e=-38
[  177.148173][  T369] nintendo 0003:057E:2009.0011: failed reading SPI flash; ret=-38
[  177.155906][  T369] nintendo 0003:057E:2009.0011: using factory cal for IMU
[  177.163121][  T369] nintendo 0003:057E:2009.0011: failed reading SPI flash; ret=-38
[  177.173790][  T369] nintendo 0003:057E:2009.0011: Failed to read IMU cal, using defaults; ret=-38
[  177.268897][  T331] usbhid 3-1:0.0: can't add hid device: -71
[  177.276006][  T369] nintendo 0003:057E:2009.0011: Unable to read IMU calibration data
[  177.277699][ T1488] EXT4-fs (loop3): unmounting filesystem.
[  177.284284][  T331] usbhid: probe of 3-1:0.0 failed with error -71
[  177.296209][  T369] nintendo 0003:057E:2009.0011: Failed to set report mode; ret=-38
[  177.310847][  T331] usb 3-1: USB disconnect, device number 17
[  177.318172][  T369] nintendo 0003:057E:2009.0011: Failed to initialize controller; ret=-38
[  177.329132][  T369] nintendo 0003:057E:2009.0011: probe - fail = -38
[  177.335670][  T369] nintendo: probe of 0003:057E:2009.0011 failed with error -38
[  177.370798][  T369] usb 1-1: USB disconnect, device number 11
[  177.429571][ T1635] loop3: detected capacity change from 0 to 512
[  177.477452][ T1635] EXT4-fs: Ignoring removed oldalloc option
[  177.518582][ T1635] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  177.527559][   T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  177.536145][ T1635] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff)
[  177.638439][  T480] device bridge_slave_1 left promiscuous mode
[  177.644695][  T480] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.652775][  T480] device bridge_slave_0 left promiscuous mode
[  177.658921][  T480] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.668744][  T480] device veth1_macvtap left promiscuous mode
[  177.675010][  T480] device veth0_vlan left promiscuous mode
[  177.780853][  T369] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  177.900717][  T359] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  177.921748][ T1639] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.928710][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.936614][ T1639] device bridge_slave_0 entered promiscuous mode
[  177.940832][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.944739][ T1639] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.954751][   T24] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  177.960596][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.981401][ T1639] device bridge_slave_1 entered promiscuous mode
[  178.109320][ T1646] loop2: detected capacity change from 0 to 512
[  178.150804][  T359] usb 4-1: Using ep0 maxpacket: 16
[  178.161034][  T369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.172358][  T369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.182776][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  178.185740][ T1649] loop1: detected capacity change from 0 to 256
[  178.192524][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.206853][ T1646] EXT4-fs (loop2): 1 truncate cleaned up
[  178.212766][  T369] usb 1-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00
[  178.224596][ T1646] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  178.271070][ T1639] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.278004][ T1639] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.285242][ T1639] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.292167][ T1639] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.392534][  T618] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.393050][  T369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.407696][   T24] usb 2-1: Product: syz
[  178.411786][   T24] usb 2-1: Manufacturer: syz
[  178.419292][  T618] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.423696][  T369] usb 1-1: config 0 descriptor??
[  178.431176][   T24] usb 2-1: can't set config #1, error -71
[  178.438445][  T359] usb 4-1: config 0 has no interfaces?
[  178.444158][   T24] usb 2-1: USB disconnect, device number 16
[  178.503461][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  178.514254][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.620285][ T1651] netlink: 'syz.2.301': attribute type 4 has an invalid length.
[  178.681689][ T1651] netlink: 'syz.2.301': attribute type 4 has an invalid length.
[  178.735651][  T359] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  178.832990][   T28] audit: type=1400 audit(1729390373.275:303): avc:  denied  { read } for  pid=1633 comm="syz.0.299" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  178.866288][  T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.096775][ T1651] syz.2.301 (1651) used greatest stack depth: 19544 bytes left
[  179.204260][   T28] audit: type=1400 audit(1729390373.315:304): avc:  denied  { open } for  pid=1633 comm="syz.0.299" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  179.252858][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  179.271203][  T359] usb 4-1: Product: syz
[  179.275242][  T359] usb 4-1: Manufacturer: syz
[  179.279671][  T359] usb 4-1: SerialNumber: syz
[  179.304513][  T359] usb 4-1: config 0 descriptor??
[  179.309966][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  179.318659][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  179.342202][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.349125][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.367431][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  179.395641][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  179.493814][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.500774][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.545748][   T28] audit: type=1400 audit(1729390373.895:305): avc:  denied  { ioctl } for  pid=1633 comm="syz.0.299" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  179.734788][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  179.946541][  T369] logitech-hidpp-device 0003:046D:C343.0012: unknown main item tag 0x6
[  179.958181][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  180.014868][  T369] logitech-hidpp-device 0003:046D:C343.0012: item fetching failed at offset 4/5
[  180.034039][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  180.081312][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  180.089480][  T369] logitech-hidpp-device 0003:046D:C343.0012: hidpp_probe:parse failed
[  180.109105][  T369] logitech-hidpp-device: probe of 0003:046D:C343.0012 failed with error -22
[  180.229432][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.251082][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.294326][  T618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.303810][  T618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.315765][ T1639] device veth0_vlan entered promiscuous mode
[  180.332722][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.341055][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.376229][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  180.386847][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  180.403246][ T1639] device veth1_macvtap entered promiscuous mode
[  180.418440][ T1666] loop2: detected capacity change from 0 to 256
[  180.430443][ T1666] exfat: Bad value for 'uid'
[  180.441461][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  180.449404][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  180.458519][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  180.482974][  T325] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  180.484383][  T668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  180.514902][  T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  180.592399][ T1668] loop4: detected capacity change from 0 to 16
[  180.610131][ T1668] erofs: (device loop4): mounted with root inode @ nid 36.
[  180.624944][ T1670] loop2: detected capacity change from 0 to 512
[  180.644128][ T1670] EXT4-fs: Ignoring removed orlov option
[  180.721481][ T1670] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  180.749162][ T1670] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  180.858955][   T28] audit: type=1400 audit(1729390375.305:306): avc:  denied  { unlink } for  pid=1669 comm="syz.2.305" name="#11" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  180.881698][ T1671] syz.4.298: attempt to access beyond end of device
[  180.881698][ T1671] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16
[  180.895313][ T1671] syz.4.298: attempt to access beyond end of device
[  180.895313][ T1671] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16
[  181.089557][  T668] usb 4-1: USB disconnect, device number 15
[  181.197149][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  181.245817][   T41] usb 1-1: USB disconnect, device number 12
[  181.305394][   T28] audit: type=1400 audit(1729390375.755:307): avc:  denied  { unmount } for  pid=1530 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  181.356646][ T1676] loop1: detected capacity change from 0 to 256
[  181.391179][ T1676] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  181.415072][ T1678] loop0: detected capacity change from 0 to 1024
[  181.493498][ T1676] exFAT-fs (loop1): hint_cluster is invalid (17)
[  181.763578][ T1678] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  183.691879][ T1686] overlayfs: failed to resolve './file1': -2
[  184.483037][ T1530] EXT4-fs (loop0): unmounting filesystem.
[  184.566554][ T1689] request_module fs-openpromfs succeeded, but still no fs?
[  184.609218][ T1488] EXT4-fs (loop3): unmounting filesystem.
[  184.635351][ T1692] loop1: detected capacity change from 0 to 512
[  184.689768][ T1692] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.311: inode #1: comm syz.1.311: iget: illegal inode #
[  184.713259][   T28] audit: type=1400 audit(1729390379.165:308): avc:  denied  { listen } for  pid=1699 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  184.743218][   T28] audit: type=1400 audit(1729390379.165:309): avc:  denied  { ioctl } for  pid=1699 comm="syz.3.312" path="socket:[21637]" dev="sockfs" ino=21637 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  184.764190][ T1692] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.311: error while reading EA inode 1 err=-117
[  184.815728][ T1692] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.311: inode #1: comm syz.1.311: iget: illegal inode #
[  184.829443][ T1692] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.311: error while reading EA inode 1 err=-117
[  184.843151][ T1692] EXT4-fs (loop1): 1 orphan inode deleted
[  184.848873][ T1692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  184.908312][ T1706] loop2: detected capacity change from 0 to 512
[  184.925343][ T1706] EXT4-fs: Ignoring removed oldalloc option
[  184.944755][ T1706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  184.954794][ T1706] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff)
[  185.048948][   T41] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  185.197391][ T1711] device batadv_slave_0 entered promiscuous mode
[  185.660959][   T41] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  185.680681][   T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.701851][   T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.722036][   T41] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  185.750803][   T41] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  185.763871][   T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.781035][   T41] usb 1-1: config 0 descriptor??
[  185.818012][ T1508] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  185.828053][ T1416] EXT4-fs (loop1): unmounting filesystem.
[  185.884590][ T1714] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 25 (only 8 groups)
[  185.970692][  T618] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  186.060682][ T1508] usb 4-1: Using ep0 maxpacket: 8
[  186.180836][ T1508] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[  186.199355][ T1508] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  186.210054][ T1508] usb 4-1: config 135 has no interface number 0
[  186.216464][  T618] usb 3-1: Using ep0 maxpacket: 16
[  186.231920][ T1508] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  186.271378][   T41] nintendo 0003:057E:2009.0013: unknown main item tag 0x0
[  186.280205][   T41] nintendo 0003:057E:2009.0013: unknown main item tag 0x0
[  186.293578][   T41] nintendo 0003:057E:2009.0013: unknown main item tag 0x0
[  186.309614][   T41] nintendo 0003:057E:2009.0013: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.0-1/input0
[  186.340778][  T618] usb 3-1: config 0 has no interfaces?
[  186.400853][   T41] nintendo 0003:057E:2009.0013: failed reading SPI flash; ret=-38
[  186.408554][   T41] nintendo 0003:057E:2009.0013: using factory cal for left stick
[  186.410849][ T1508] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  186.422931][   T41] nintendo 0003:057E:2009.0013: failed reading SPI flash; ret=-38
[  186.426162][ T1508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.440786][ T1508] usb 4-1: Product: syz
[  186.443763][   T41] nintendo 0003:057E:2009.0013: using factory cal for right stick
[  186.444910][ T1508] usb 4-1: Manufacturer: syz
[  186.457077][ T1508] usb 4-1: SerialNumber: syz
[  186.464939][   T41] nintendo 0003:057E:2009.0013: failed reading SPI flash; ret=-38
[  186.472967][   T41] nintendo 0003:057E:2009.0013: Failed to read left stick cal, using defaults; e=-38
[  186.483071][   T41] nintendo 0003:057E:2009.0013: failed reading SPI flash; ret=-38
[  186.491091][   T41] nintendo 0003:057E:2009.0013: Failed to read right stick cal, using defaults; e=-38
[  186.500959][  T618] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  186.501031][  T618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.501087][  T618] usb 3-1: Product: syz
[  186.510849][   T41] nintendo 0003:057E:2009.0013: failed reading SPI flash; ret=-38
[  186.519499][ T1508] usb 4-1: Found UVC 0.00 device syz (18ec:3288)
[  186.522275][   T41] nintendo 0003:057E:2009.0013: using factory cal for IMU
[  186.539770][ T1508] usb 4-1: No valid video chain found.
[  186.543151][   T41] nintendo 0003:057E:2009.0013: failed reading SPI flash; ret=-38
[  186.554501][  T618] usb 3-1: Manufacturer: syz
[  186.556264][   T41] nintendo 0003:057E:2009.0013: Failed to read IMU cal, using defaults; ret=-38
[  186.564726][  T618] usb 3-1: SerialNumber: syz
[  186.573234][   T41] nintendo 0003:057E:2009.0013: Unable to read IMU calibration data
[  186.573322][   T41] nintendo 0003:057E:2009.0013: Failed to set report mode; ret=-38
[  186.573368][   T41] nintendo 0003:057E:2009.0013: Failed to initialize controller; ret=-38
[  186.584037][ T1720] loop4: detected capacity change from 0 to 256
[  186.592682][  T618] usb 3-1: config 0 descriptor??
[  186.597802][   T41] nintendo 0003:057E:2009.0013: probe - fail = -38
[  186.612117][ T1720] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  186.615045][   T41] nintendo: probe of 0003:057E:2009.0013 failed with error -38
[  186.643071][ T1720] exFAT-fs (loop4): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  186.652159][ T1720] exFAT-fs (loop4): Filesystem has been set read-only
[  186.662918][   T41] usb 1-1: USB disconnect, device number 13
[  186.707998][ T1723] loop4: detected capacity change from 0 to 16
[  186.715458][ T1723] erofs: (device loop4): mounted with root inode @ nid 36.
[  186.773268][  T618] usb 4-1: USB disconnect, device number 16
[  186.962348][ T1724] syz.4.318: attempt to access beyond end of device
[  186.962348][ T1724] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16
[  186.976201][ T1724] syz.4.318: attempt to access beyond end of device
[  186.976201][ T1724] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16
[  187.033123][   T28] audit: type=1400 audit(1729390381.485:310): avc:  denied  { bind } for  pid=1726 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  187.398756][ T1734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'.
[  187.599964][ T1740] loop3: detected capacity change from 0 to 512
[  187.663111][ T1740] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  187.672128][   T28] audit: type=1400 audit(1729390382.115:311): avc:  denied  { bind } for  pid=1742 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  187.673090][ T1740] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff)
[  187.729511][   T28] audit: type=1400 audit(1729390382.175:312): avc:  denied  { wake_alarm } for  pid=1738 comm="syz.3.323" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  187.900769][ T1508] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  188.196654][  T618] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  188.819099][  T369] usb 3-1: USB disconnect, device number 18
[  188.829370][ T1488] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /10/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  188.864134][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  188.870882][ T1508] usb 2-1: Using ep0 maxpacket: 8
[  188.926222][ T1752] loop2: detected capacity change from 0 to 512
[  188.941073][ T1752] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  188.949569][ T1752] EXT4-fs (loop2): 1 truncate cleaned up
[  188.956278][ T1752] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  188.990760][ T1508] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  189.009702][ T1508] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  189.019982][  T618] usb 5-1: device descriptor read/64, error -71
[  189.030083][ T1508] usb 2-1: config 135 has no interface number 0
[  189.048758][ T1508] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  189.750733][  T369] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  190.040704][  T369] usb 3-1: Using ep0 maxpacket: 16
[  190.050989][ T1508] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  190.060099][ T1508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.068478][ T1508] usb 2-1: Product: syz
[  190.073405][ T1508] usb 2-1: Manufacturer: syz
[  190.077937][ T1508] usb 2-1: SerialNumber: syz
[  190.122449][ T1508] usb 2-1: Found UVC 0.00 device syz (18ec:3288)
[  190.128896][ T1508] usb 2-1: No valid video chain found.
[  190.190788][  T369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.210711][  T618] usb 5-1: device descriptor read/64, error -71
[  190.219170][  T369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.237782][  T369] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  190.252167][  T369] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  190.262006][  T369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.278582][  T369] usb 3-1: config 0 descriptor??
[  190.382900][ T1760] loop0: detected capacity change from 0 to 512
[  190.607074][ T1760] EXT4-fs (loop0): 1 truncate cleaned up
[  190.613010][ T1760] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  192.032476][  T618] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  192.047631][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  192.048038][  T302] usb 2-1: USB disconnect, device number 17
[  192.061988][  T369] usbhid 3-1:0.0: can't add hid device: -71
[  192.067915][  T369] usbhid: probe of 3-1:0.0 failed with error -71
[  192.114661][  T369] usb 3-1: USB disconnect, device number 19
[  192.161692][ T1530] EXT4-fs (loop0): unmounting filesystem.
[  192.343104][   T28] audit: type=1400 audit(1729390386.795:313): avc:  denied  { bind } for  pid=1765 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  192.363037][   T28] audit: type=1400 audit(1729390386.795:314): avc:  denied  { create } for  pid=1765 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  192.382831][  T618] usb 5-1: device descriptor read/64, error -71
[  192.390314][   T28] audit: type=1400 audit(1729390386.795:315): avc:  denied  { write } for  pid=1765 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  192.530689][  T302] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  192.530764][   T41] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  192.790679][   T41] usb 1-1: Using ep0 maxpacket: 8
[  192.800720][  T618] usb 5-1: device descriptor read/64, error -71
[  192.900801][  T302] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  192.911527][  T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.922833][  T618] usb usb5-port1: attempt power cycle
[  192.928148][  T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.930738][   T41] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[  192.938316][  T302] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  192.956362][   T41] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  192.959541][  T302] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  192.978176][  T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.988452][  T302] usb 2-1: config 0 descriptor??
[  192.992048][   T41] usb 1-1: config 135 has no interface number 0
[  192.999563][   T41] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  193.190790][   T41] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  193.204347][   T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.223409][ T1773] loop2: detected capacity change from 0 to 128
[  193.230680][   T41] usb 1-1: Product: syz
[  193.237825][ T1773] EXT4-fs (loop2): Test dummy encryption mode enabled
[  193.240597][   T41] usb 1-1: Manufacturer: syz
[  193.248887][   T41] usb 1-1: SerialNumber: syz
[  193.258210][ T1773] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  193.267028][ T1773] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038 (0x7fffffff)
[  193.302173][   T41] usb 1-1: Found UVC 0.00 device syz (18ec:3288)
[  193.308421][   T41] usb 1-1: No valid video chain found.
[  193.350744][  T618] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  193.491930][  T302] nintendo 0003:057E:2009.0014: unknown main item tag 0x0
[  193.501370][  T302] nintendo 0003:057E:2009.0014: unknown main item tag 0x0
[  193.508853][  T302] nintendo 0003:057E:2009.0014: unknown main item tag 0x0
[  193.523029][   T41] usb 1-1: USB disconnect, device number 14
[  194.349661][  T618] usb 5-1: device descriptor read/8, error -71
[  194.356714][  T302] nintendo 0003:057E:2009.0014: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0
[  194.359573][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  194.430817][  T302] nintendo 0003:057E:2009.0014: failed reading SPI flash; ret=-38
[  194.438531][  T302] nintendo 0003:057E:2009.0014: using factory cal for left stick
[  194.460769][  T302] nintendo 0003:057E:2009.0014: failed reading SPI flash; ret=-38
[  194.467656][ T1785] loop2: detected capacity change from 0 to 256
[  194.468448][  T302] nintendo 0003:057E:2009.0014: using factory cal for right stick
[  194.468540][  T302] nintendo 0003:057E:2009.0014: failed reading SPI flash; ret=-38
[  194.493201][ T1785] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  194.531797][  T302] nintendo 0003:057E:2009.0014: Failed to read left stick cal, using defaults; e=-38
[  194.552637][  T302] nintendo 0003:057E:2009.0014: failed reading SPI flash; ret=-38
[  194.560337][  T302] nintendo 0003:057E:2009.0014: Failed to read right stick cal, using defaults; e=-38
[  194.590764][  T302] nintendo 0003:057E:2009.0014: failed reading SPI flash; ret=-38
[  194.600922][  T302] nintendo 0003:057E:2009.0014: using factory cal for IMU
[  194.607940][  T302] nintendo 0003:057E:2009.0014: failed reading SPI flash; ret=-38
[  194.632708][  T302] nintendo 0003:057E:2009.0014: Failed to read IMU cal, using defaults; ret=-38
[  194.651859][  T302] nintendo 0003:057E:2009.0014: Unable to read IMU calibration data
[  194.667782][  T302] nintendo 0003:057E:2009.0014: Failed to set report mode; ret=-38
[  194.676145][  T618] usb 5-1: device descriptor read/8, error -71
[  194.692106][  T302] nintendo 0003:057E:2009.0014: Failed to initialize controller; ret=-38
[  194.765364][  T302] nintendo 0003:057E:2009.0014: probe - fail = -38
[  194.786289][  T302] nintendo: probe of 0003:057E:2009.0014 failed with error -38
[  194.806459][ T1786] exFAT-fs (loop2): hint_cluster is invalid (17)
[  194.811410][  T302] usb 2-1: USB disconnect, device number 18
[  194.932436][ T1791] loop1: detected capacity change from 0 to 256
[  194.950976][  T618] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  194.962845][ T1791] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  195.100890][  T618] usb 5-1: device descriptor read/8, error -71
[  195.259482][ T1793] exFAT-fs (loop1): hint_cluster is invalid (17)
[  195.390772][  T618] usb 5-1: device descriptor read/8, error -71
[  195.510837][  T618] usb usb5-port1: unable to enumerate USB device
[  195.936905][ T1806] loop2: detected capacity change from 0 to 512
[  196.091293][ T1806] EXT4-fs (loop2): 1 truncate cleaned up
[  196.096902][ T1806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  197.567455][ T1810] loop1: detected capacity change from 0 to 512
[  197.644015][ T1810] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  197.654801][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  197.662046][ T1810] EXT4-fs (loop1): 1 truncate cleaned up
[  197.708572][ T1810] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  197.781982][ T1814] syz.2.343[1814] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  197.782137][ T1814] syz.2.343[1814] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  197.943667][ T1815] syz.2.343[1815] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  198.031920][ T1815] syz.2.343[1815] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  198.540901][   T41] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  198.900886][   T41] usb 2-1: Using ep0 maxpacket: 16
[  198.926923][ T1822] loop2: detected capacity change from 0 to 512
[  198.965758][ T1822] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  198.976069][ T1822] EXT4-fs (loop2): 1 truncate cleaned up
[  199.025822][ T1822] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  199.041176][   T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.060687][   T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.070478][   T41] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  199.083595][   T41] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  199.092700][   T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.104254][   T41] usb 2-1: config 0 descriptor??
[  199.285373][ T1488] EXT4-fs (loop3): unmounting filesystem.
[  199.428599][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.436344][ T1823] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.451663][ T1823] device bridge_slave_0 entered promiscuous mode
[  199.466459][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.669623][ T1823] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.746329][ T1823] device bridge_slave_1 entered promiscuous mode
[  199.807928][   T10] device bridge_slave_1 left promiscuous mode
[  199.816919][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.834167][   T10] device bridge_slave_0 left promiscuous mode
[  199.842198][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.867566][   T10] device veth1_macvtap left promiscuous mode
[  199.874250][   T10] device veth0_vlan left promiscuous mode
[  199.890991][  T369] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  200.110919][  T668] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  200.170703][  T369] usb 3-1: Using ep0 maxpacket: 16
[  200.301059][  T369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.313980][  T369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.323790][  T369] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  200.336597][  T369] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  200.345693][  T369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.350718][  T668] usb 1-1: Using ep0 maxpacket: 8
[  200.362279][  T369] usb 3-1: config 0 descriptor??
[  200.388127][ T1829] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.395242][ T1829] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.403790][ T1829] device bridge_slave_0 entered promiscuous mode
[  200.430581][ T1829] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.437755][ T1829] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.446124][ T1829] device bridge_slave_1 entered promiscuous mode
[  200.470852][  T668] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64
[  200.482263][  T668] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  200.492555][  T668] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  200.580823][  T668] usb 1-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00
[  200.593070][  T668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  200.594412][ T1416] EXT4-fs (loop1): unmounting filesystem.
[  200.601805][  T668] usb 1-1: SerialNumber: syz
[  200.651008][ T1828] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  200.672096][  T668] hub 1-1:1.0: bad descriptor, ignoring hub
[  200.677880][   T28] audit: type=1400 audit(1729390395.125:316): avc:  denied  { ioctl } for  pid=1838 comm="syz.1.349" path="/20/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  200.703577][  T668] hub: probe of 1-1:1.0 failed with error -5
[  200.704441][   T28] audit: type=1400 audit(1729390395.125:317): avc:  denied  { read } for  pid=1838 comm="syz.1.349" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  200.732048][   T28] audit: type=1400 audit(1729390395.125:318): avc:  denied  { open } for  pid=1838 comm="syz.1.349" path="/dev/ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  200.732091][   T41] usbhid 2-1:0.0: can't add hid device: -71
[  200.732226][   T41] usbhid: probe of 2-1:0.0 failed with error -71
[  200.769424][   T28] audit: type=1400 audit(1729390395.125:319): avc:  denied  { ioctl } for  pid=1838 comm="syz.1.349" path="/dev/ppp" dev="devtmpfs" ino=138 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  200.772903][   T41] usb 2-1: USB disconnect, device number 19
[  200.874944][ T1828] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  200.919275][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  200.927100][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  200.956819][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  200.965549][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  200.974069][   T24] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.981130][   T24] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.991915][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  200.999742][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  201.008536][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  201.016902][  T321] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.023788][  T321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.062372][  T618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  201.080559][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  201.138886][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  201.158391][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  201.181839][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  201.190521][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  201.198505][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  201.209297][  T618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  201.217872][  T618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  201.226690][  T618] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.233620][  T618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.242325][ T1823] device veth0_vlan entered promiscuous mode
[  201.256236][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  201.264072][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  201.273038][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  201.282438][  T302] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.289316][  T302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.321546][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  201.329821][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  201.341134][  T668] cdc_ether: probe of 1-1:1.0 failed with error -71
[  201.362503][ T1823] device veth1_macvtap entered promiscuous mode
[  201.370883][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  201.379099][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  201.382304][  T668] usb 1-1: USB disconnect, device number 15
[  201.388153][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  201.402590][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  201.410993][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  201.420365][   T10] device bridge_slave_1 left promiscuous mode
[  201.427045][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.435224][   T10] device bridge_slave_0 left promiscuous mode
[  201.441298][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.450354][   T10] device veth1_macvtap left promiscuous mode
[  201.456863][   T10] device veth0_vlan left promiscuous mode
[  201.648479][  T668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  201.656991][  T668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  201.678860][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  201.687605][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  201.714869][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  201.733083][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  201.770222][ T1829] device veth0_vlan entered promiscuous mode
[  201.780071][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  201.790340][ T1847] loop1: detected capacity change from 0 to 512
[  201.791039][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  201.807113][ T1847] EXT4-fs: Ignoring removed oldalloc option
[  201.812992][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  201.821439][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  201.836542][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  201.846312][  T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  201.857571][ T1829] device veth1_macvtap entered promiscuous mode
[  201.867252][ T1847] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  201.876526][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  201.879521][ T1847] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff)
[  201.891873][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  201.909597][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  202.006182][ T1851] loop0: detected capacity change from 0 to 2048
[  202.027302][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  202.037912][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  202.046193][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  202.055046][  T369] usbhid 3-1:0.0: can't add hid device: -71
[  202.064847][  T369] usbhid: probe of 3-1:0.0 failed with error -71
[  202.085309][ T1851] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  202.094910][  T369] usb 3-1: USB disconnect, device number 20
[  202.130802][  T331] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  202.148462][   T28] audit: type=1326 audit(1729390396.595:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1854 comm="syz.2.352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa28fd7dff9 code=0x0
[  202.390189][ T1860] Invalid ELF section header size
[  202.410720][  T668] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  202.410732][  T331] usb 5-1: Using ep0 maxpacket: 8
[  202.470766][  T618] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  202.550877][  T331] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  202.559281][  T331] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  202.569637][  T331] usb 5-1: config 135 has no interface number 0
[  202.575805][  T331] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  202.660740][  T668] usb 2-1: Using ep0 maxpacket: 16
[  202.761391][  T331] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  202.770481][  T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.780765][  T668] usb 2-1: config 0 has no interfaces?
[  202.800812][  T331] usb 5-1: Product: syz
[  202.804869][  T331] usb 5-1: Manufacturer: syz
[  202.809291][  T331] usb 5-1: SerialNumber: syz
[  202.830853][  T618] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  202.842386][  T618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.853815][  T618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.864617][  T618] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  202.872743][  T331] usb 5-1: Found UVC 0.00 device syz (18ec:3288)
[  202.880262][  T618] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  202.893165][  T618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.896975][  T331] usb 5-1: No valid video chain found.
[  202.903764][  T618] usb 4-1: config 0 descriptor??
[  202.919710][ T1530] EXT4-fs (loop0): unmounting filesystem.
[  202.940833][  T668] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  202.960074][  T668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.981969][  T668] usb 2-1: Product: syz
[  202.986222][  T668] usb 2-1: Manufacturer: syz
[  202.988968][ T1863] loop0: detected capacity change from 0 to 512
[  202.991436][  T668] usb 2-1: SerialNumber: syz
[  203.007276][  T668] usb 2-1: config 0 descriptor??
[  203.014094][ T1863] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 9
[  203.086600][ T1508] usb 5-1: USB disconnect, device number 17
[  203.892113][  T369] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  203.904399][  T618] nintendo 0003:057E:2009.0015: unknown main item tag 0x0
[  203.913920][  T618] nintendo 0003:057E:2009.0015: unknown main item tag 0x0
[  203.922552][  T618] nintendo 0003:057E:2009.0015: unknown main item tag 0x0
[  203.931392][  T618] nintendo 0003:057E:2009.0015: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.3-1/input0
[  204.010773][  T618] nintendo 0003:057E:2009.0015: failed reading SPI flash; ret=-38
[  204.034082][  T618] nintendo 0003:057E:2009.0015: using factory cal for left stick
[  204.070313][  T618] nintendo 0003:057E:2009.0015: failed reading SPI flash; ret=-38
[  204.097366][  T618] nintendo 0003:057E:2009.0015: using factory cal for right stick
[  204.123855][  T618] nintendo 0003:057E:2009.0015: failed reading SPI flash; ret=-38
[  204.139857][  T618] nintendo 0003:057E:2009.0015: Failed to read left stick cal, using defaults; e=-38
[  204.166368][ T1878] loop4: detected capacity change from 0 to 512
[  204.177134][  T618] nintendo 0003:057E:2009.0015: failed reading SPI flash; ret=-38
[  204.207384][ T1878] EXT4-fs (loop4): Test dummy encryption mode enabled
[  204.218594][  T618] nintendo 0003:057E:2009.0015: Failed to read right stick cal, using defaults; e=-38
[  204.235665][  T618] nintendo 0003:057E:2009.0015: failed reading SPI flash; ret=-38
[  204.244098][  T618] nintendo 0003:057E:2009.0015: using factory cal for IMU
[  204.252084][  T618] nintendo 0003:057E:2009.0015: failed reading SPI flash; ret=-38
[  204.260266][  T618] nintendo 0003:057E:2009.0015: Failed to read IMU cal, using defaults; ret=-38
[  204.269754][ T1878] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.356: invalid block
[  204.269860][  T618] nintendo 0003:057E:2009.0015: Unable to read IMU calibration data
[  204.288997][  T618] nintendo 0003:057E:2009.0015: Failed to set report mode; ret=-38
[  204.302379][ T1878] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.356: couldn't read orphan inode 11 (err -117)
[  204.325548][  T618] nintendo 0003:057E:2009.0015: Failed to initialize controller; ret=-38
[  204.339230][ T1878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  204.410789][  T369] usb 1-1: Using ep0 maxpacket: 16
[  204.541369][  T369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.604515][  T369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.761366][  T369] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  205.050319][  T369] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  205.077003][  T618] nintendo 0003:057E:2009.0015: probe - fail = -38
[  205.113886][  T618] nintendo: probe of 0003:057E:2009.0015 failed with error -38
[  205.128539][  T369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.138153][  T369] usb 1-1: config 0 descriptor??
[  205.170903][  T618] usb 4-1: USB disconnect, device number 17
[  205.250312][ T1508] usb 2-1: USB disconnect, device number 20
[  205.296741][ T1416] EXT4-fs (loop1): unmounting filesystem.
[  207.674072][ T1894] binder: 1883:1894 ioctl c0306201 0 returned -14
[  208.207984][ T1823] EXT4-fs (loop4): unmounting filesystem.
[  208.340811][  T369] usbhid 1-1:0.0: can't add hid device: -71
[  208.346785][  T369] usbhid: probe of 1-1:0.0 failed with error -71
[  208.365101][ T1900] loop1: detected capacity change from 0 to 512
[  208.378305][ T1904] loop0: detected capacity change from 0 to 256
[  208.394288][  T369] usb 1-1: USB disconnect, device number 16
[  208.423940][ T1900] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.361: inode #1: comm syz.1.361: iget: illegal inode #
[  208.464177][ T1904] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d)
[  208.476825][ T1900] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.361: error while reading EA inode 1 err=-117
[  208.509204][ T1900] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.361: inode #1: comm syz.1.361: iget: illegal inode #
[  208.529022][ T1900] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.361: error while reading EA inode 1 err=-117
[  208.545149][ T1908] loop3: detected capacity change from 0 to 256
[  208.566060][ T1900] EXT4-fs (loop1): 1 orphan inode deleted
[  208.571929][ T1900] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  208.585530][ T1908] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  208.674313][ T1908] exFAT-fs (loop3): hint_cluster is invalid (17)
[  208.905543][ T1911] loop2: detected capacity change from 0 to 2048
[  208.924458][ T1911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  210.629381][ T1416] EXT4-fs (loop1): unmounting filesystem.
[  210.737729][ T1924] loop1: detected capacity change from 0 to 256
[  210.784905][  T331] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  211.073662][ T1508] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  211.104349][ T1928] loop0: detected capacity change from 0 to 512
[  211.115355][ T1928] EXT4-fs (loop0): 1 truncate cleaned up
[  211.121319][ T1928] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  211.151095][  T331] usb 5-1: Using ep0 maxpacket: 8
[  211.176904][ T1927] Invalid ELF section header size
[  211.890726][  T331] usb 5-1: unable to read config index 0 descriptor/all
[  211.897570][  T331] usb 5-1: can't read configurations, error -71
[  211.960467][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  211.990714][ T1508] usb 4-1: Using ep0 maxpacket: 16
[  212.036828][ T1935] loop1: detected capacity change from 0 to 256
[  212.066910][ T1935] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  212.170826][ T1508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.197342][ T1508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.207647][ T1508] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.220679][ T1508] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00
[  213.229638][ T1508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.269979][ T1508] usb 4-1: config 0 descriptor??
[  213.413136][ T1946] exFAT-fs (loop1): hint_cluster is invalid (17)
[  213.437371][ T1530] EXT4-fs (loop0): unmounting filesystem.
[  213.465722][ T1952] loop0: detected capacity change from 0 to 256
[  213.516449][ T1955] loop4: detected capacity change from 0 to 512
[  213.530785][  T668] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  213.540420][ T1955] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 9
[  213.783867][ T1508] wacom 0003:056A:0003.0016: unknown main item tag 0x0
[  213.790596][ T1508] wacom 0003:056A:0003.0016: unknown main item tag 0x0
[  213.790941][  T668] usb 3-1: Using ep0 maxpacket: 16
[  213.802762][ T1508] wacom 0003:056A:0003.0016: unknown main item tag 0x0
[  213.809996][ T1508] wacom 0003:056A:0003.0016: Unknown device_type for 'HID 056a:0003'. Assuming pen.
[  213.820977][ T1508] wacom 0003:056A:0003.0016: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.3-1/input0
[  213.833741][ T1508] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0003.0016/input/input6
[  213.862831][  T331] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  213.930812][  T668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.941813][  T668] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  213.951547][  T668] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  213.964597][  T668] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  213.973511][  T668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.985399][  T321] usb 4-1: USB disconnect, device number 18
[  214.000997][ T1943] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  214.022155][  T668] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  214.120722][  T331] usb 5-1: Using ep0 maxpacket: 16
[  214.231666][  T668] cdc_acm 3-1:1.0: ttyACM0: USB ACM device
[  214.241060][  T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.244775][  T668] usb 3-1: USB disconnect, device number 21
[  214.252666][  T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.269528][  T331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  214.282733][  T331] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  214.292571][  T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.302702][  T331] usb 5-1: config 0 descriptor??
[  214.350310][ T1962] loop0: detected capacity change from 0 to 2048
[  214.364626][ T1962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  214.373299][ T1962] ext4 filesystem being mounted at /16/bus supports timestamps until 2038 (0x7fffffff)
[  214.410176][ T1530] EXT4-fs (loop0): unmounting filesystem.
[  214.615778][ T1969] loop0: detected capacity change from 0 to 512
[  214.756112][ T1969] EXT4-fs (loop0): 1 truncate cleaned up
[  214.761746][ T1969] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  215.882124][  T331] koneplus 0003:1E7D:2E22.0017: unknown main item tag 0x6
[  215.909465][  T331] koneplus 0003:1E7D:2E22.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0
[  215.975551][   T28] audit: type=1326 audit(1729390410.425:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.2.379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa28fd7dff9 code=0x0
[  216.055432][ T1530] EXT4-fs (loop0): unmounting filesystem.
[  216.200727][  T668] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  216.208301][  T618] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  216.549605][   T28] audit: type=1400 audit(1729390410.995:322): avc:  denied  { setopt } for  pid=1979 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  216.572854][ T1983] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  216.600769][ T1983] audit: out of memory in audit_log_start
[  216.607692][ T1983] netlink: 64 bytes leftover after parsing attributes in process `syz.0.380'.
[  217.228439][   T28] audit: type=1400 audit(1729390411.675:323): avc:  denied  { read } for  pid=1977 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  217.530056][ T1988] xt_hashlimit: size too large, truncated to 1048576
[  217.550793][  T331] koneplus 0003:1E7D:2E22.0017: couldn't init struct koneplus_device
[  217.583730][  T331] koneplus 0003:1E7D:2E22.0017: couldn't install mouse
[  217.631846][  T331] koneplus: probe of 0003:1E7D:2E22.0017 failed with error -71
[  217.663786][  T331] usb 5-1: USB disconnect, device number 20
[  217.880725][  T668] usb 2-1: Using ep0 maxpacket: 8
[  218.030986][  T668] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64
[  218.042772][  T668] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  218.154803][ T1996] binder: 1992:1996 ioctl c0306201 0 returned -14
[  218.197042][  T331] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  218.831957][  T618] usb 4-1: not running at top speed; connect to a high speed hub
[  218.839944][  T668] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  218.860788][  T331] usb 5-1: not running at top speed; connect to a high speed hub
[  218.959612][  T331] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  218.993372][  T668] usb 2-1: string descriptor 0 read error: -71
[  219.000806][  T618] usb 4-1: unable to read config index 0 descriptor/all
[  219.007642][  T618] usb 4-1: can't read configurations, error -71
[  219.010742][  T331] usb 5-1: config 1 has no interface number 1
[  219.020847][  T668] usb 2-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00
[  219.027563][  T331] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  219.029760][  T668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  219.076376][ T2003] tmpfs: Unknown parameter 'nolazytime˙˙'
[  219.084649][ T2001] loop2: detected capacity change from 0 to 256
[  219.091433][ T1998] loop1: detected capacity change from 0 to 2048
[  219.121428][  T668] usb 2-1: can't set config #1, error -71
[  219.143394][ T2001] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  219.178454][ T1998] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  219.187313][  T668] usb 2-1: USB disconnect, device number 21
[  219.190607][ T2001] exFAT-fs (loop2): hint_cluster is invalid (17)
[  219.214740][ T1998] ext4 filesystem being mounted at /28/bus supports timestamps until 2038 (0x7fffffff)
[  219.299136][ T2009] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  219.410809][  T331] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  219.419821][  T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.432848][ T1416] EXT4-fs (loop1): unmounting filesystem.
[  219.438314][  T331] usb 5-1: Product: ᐛ
[  219.442542][  T331] usb 5-1: Manufacturer: 䁝
[  219.447091][  T331] usb 5-1: SerialNumber: syz
[  220.254741][ T1991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.273079][ T1991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.448810][ T2019] overlayfs: failed to resolve './file1': -2
[  220.646885][ T1991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.730284][ T1991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.753409][ T2022] binder: 2020:2022 ioctl 4018620d 0 returned -22
[  220.847514][   T28] audit: type=1400 audit(1729390415.295:324): avc:  denied  { bind } for  pid=2020 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  220.889716][ T2024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'.
[  220.963740][  T331] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  221.096063][ T2024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'.
[  221.163011][   T28] audit: type=1400 audit(1729390415.555:325): avc:  denied  { write } for  pid=2020 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  221.293781][  T331] usb 5-1: USB disconnect, device number 21
[  221.314051][ T2028] loop1: detected capacity change from 0 to 256
[  221.412291][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  221.589757][  T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  221.821744][ T2028] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  221.974126][ T2032] loop2: detected capacity change from 0 to 512
[  222.018327][ T2032] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 9
[  222.260739][  T331] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  222.310734][  T668] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  222.341989][ T2037] loop3: detected capacity change from 0 to 40427
[  222.390760][  T369] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  222.510692][  T331] usb 1-1: Using ep0 maxpacket: 16
[  222.560797][  T668] usb 3-1: Using ep0 maxpacket: 16
[  222.660942][  T369] usb 2-1: Using ep0 maxpacket: 8
[  222.680794][  T668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.700687][  T668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.720767][  T668] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  222.741660][  T331] usb 1-1: config 1 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 193, changing to 11
[  222.743700][  T668] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  222.758927][  T331] usb 1-1: config 1 interface 0 has no altsetting 0
[  222.780750][  T668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.800495][  T668] usb 3-1: config 0 descriptor??
[  222.811478][  T369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  222.922062][  T369] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  222.940442][  T369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  222.940817][  T331] usb 1-1: New USB device found, idVendor=2087, idProduct=0703, bcdDevice= 0.40
[  222.959773][  T369] usb 2-1: SerialNumber: syz
[  222.994605][  T369] usb 2-1: config 0 descriptor??
[  223.009902][  T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.018112][  T331] usb 1-1: Product: syz
[  223.032038][  T369] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  223.038804][  T369] usb 2-1: No valid video chain found.
[  223.044148][  T331] usb 1-1: Manufacturer: syz
[  223.048708][  T331] usb 1-1: SerialNumber: syz
[  223.234064][ T2038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=2038 comm=syz.1.394
[  223.283002][  T668] koneplus 0003:1E7D:2E22.0018: unknown main item tag 0x6
[  223.295389][  T668] koneplus 0003:1E7D:2E22.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0
[  223.399325][ T2033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.414775][ T2033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.501500][  T618] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  223.650750][  T331] usbhid 1-1:1.0: can't add hid device: -71
[  223.656639][  T331] usbhid: probe of 1-1:1.0 failed with error -71
[  223.691580][  T331] usb 1-1: USB disconnect, device number 17
[  223.750723][  T618] usb 5-1: Using ep0 maxpacket: 16
[  223.870765][  T618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.887287][  T618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.912209][  T618] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  223.928931][  T618] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  223.938484][  T618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.954819][  T618] usb 5-1: config 0 descriptor??
[  223.963751][ T2051] loop3: detected capacity change from 0 to 2048
[  224.029248][ T2053] loop0: detected capacity change from 0 to 256
[  224.053734][ T2051] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  224.062559][ T2051] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff)
[  224.063419][ T2053] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  224.113567][ T2032] loop2: detected capacity change from 0 to 40427
[  224.139734][ T2032] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  224.154034][ T1829] EXT4-fs (loop3): unmounting filesystem.
[  224.157018][ T2032] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  224.168041][ T2032] F2FS-fs (loop2): Unrecognized mount option "000000000000000000000x0000000000000000" or missing value
[  224.251041][ T2053] exFAT-fs (loop0): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  224.266525][ T2053] exFAT-fs (loop0): Filesystem has been set read-only
[  224.382600][   T28] audit: type=1400 audit(1729390418.715:326): avc:  denied  { map } for  pid=2058 comm="syz.3.400" path="/dev/ashmem" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  224.451455][ T2047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.491029][ T2047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.528105][ T2065] loop0: detected capacity change from 0 to 512
[  224.543684][  T618] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  224.552196][  T618] microsoft 0003:045E:07DA.0019: ignoring exceeding usage max
[  224.567620][  T618] microsoft 0003:045E:07DA.0019: unsupported Resolution Multiplier 0
[  224.577949][ T2065] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  224.579323][  T618] microsoft 0003:045E:07DA.0019: unsupported Resolution Multiplier 0
[  224.588516][ T2065] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff)
[  224.596099][  T618] microsoft 0003:045E:07DA.0019: No inputs registered, leaving
[  224.613132][  T618] microsoft 0003:045E:07DA.0019: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  224.624754][  T618] microsoft 0003:045E:07DA.0019: no inputs found
[  224.641027][ T1530] EXT4-fs (loop0): unmounting filesystem.
[  224.643059][  T618] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway
[  224.743795][ T2072] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  224.766137][  T359] usb 5-1: USB disconnect, device number 22
[  224.795085][ T2077] loop4: detected capacity change from 0 to 512
[  224.807875][ T2077] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.403: inode #1: comm syz.4.403: iget: illegal inode #
[  224.822238][ T2077] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.403: error while reading EA inode 1 err=-117
[  224.835189][ T2077] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.403: inode #1: comm syz.4.403: iget: illegal inode #
[  224.848827][ T2077] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.403: error while reading EA inode 1 err=-117
[  224.861572][ T2077] EXT4-fs (loop4): 1 orphan inode deleted
[  224.867190][ T2077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  225.044005][  T618] usb 2-1: USB disconnect, device number 22
[  225.069862][ T2082] loop1: detected capacity change from 0 to 256
[  225.168519][ T2083] device batadv_slave_0 entered promiscuous mode
[  225.378934][ T2082] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  225.940558][  T359] usb 3-1: USB disconnect, device number 22
[  225.999678][ T1823] EXT4-fs (loop4): unmounting filesystem.
[  226.036787][   T28] audit: type=1400 audit(1729390420.485:327): avc:  denied  { write } for  pid=2087 comm="syz.2.406" name="usbmon2" dev="devtmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  226.051046][ T2086] loop3: detected capacity change from 0 to 4096
[  226.074817][ T2088] loop2: detected capacity change from 0 to 16
[  226.084074][ T2086] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  226.106969][ T2086] process 'syz.3.405' launched './file0' with NULL argv: empty string added
[  226.107741][   T28] audit: type=1400 audit(1729390420.555:328): avc:  denied  { execute } for  pid=2085 comm="syz.3.405" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  226.107980][   T28] audit: type=1400 audit(1729390420.555:329): avc:  denied  { read } for  pid=2085 comm="syz.3.405" path="/10/file0/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  226.108240][   T28] audit: type=1400 audit(1729390420.555:330): avc:  denied  { execute_no_trans } for  pid=2085 comm="syz.3.405" path="/10/file0/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  226.108987][ T2088] erofs: Unknown parameter '˙00000000000000000004'
[  226.110471][   T28] audit: type=1400 audit(1729390420.555:331): avc:  denied  { ioctl } for  pid=2085 comm="syz.3.405" path="/10/file0/file0/file0" dev="loop3" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  226.110574][ T2086] fs-verity: sha256 using implementation "sha256-avx2"
[  226.112410][ T2091] loop4: detected capacity change from 0 to 256
[  226.199867][ T2086] fs-verity (loop3, inode 13): Error -27 writing Merkle tree block 2160165643
[  226.245228][ T2086] fs-verity (loop3, inode 13): Error -27 building Merkle tree
[  226.263913][ T2091] exfat: Deprecated parameter 'utf8'
[  226.274782][ T2091] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  226.412239][  T348] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  226.800799][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  226.800866][ T2011] Bluetooth: hci0: command 0x1003 tx timeout
[  227.200805][ T2105] xt_hashlimit: size too large, truncated to 1048576
[  227.209918][ T2104] loop0: detected capacity change from 0 to 256
[  227.293544][ T2104] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  227.561778][ T2108] loop1: detected capacity change from 0 to 512
[  227.772129][ T2104] exFAT-fs (loop0): hint_cluster is invalid (17)
[  227.815802][ T2108] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  227.852690][ T2108] EXT4-fs (loop1): 1 truncate cleaned up
[  227.991037][ T2108] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  228.106846][ T1829] EXT4-fs (loop3): unmounting filesystem.
[  230.413139][ T2120] loop0: detected capacity change from 0 to 512
[  230.532382][ T2120] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  230.549661][ T2120] EXT4-fs (loop0): 1 truncate cleaned up
[  230.560723][ T2120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  230.825932][ T1508] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  231.490945][ T1416] EXT4-fs (loop1): unmounting filesystem.
[  231.932822][ T2128] loop1: detected capacity change from 0 to 512
[  231.983011][ T2128] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 9
[  231.989999][   T28] audit: type=1400 audit(1729390426.435:332): avc:  denied  { mounton } for  pid=2129 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  232.130950][  T668] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  232.189300][ T2129] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.226547][ T2129] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.242067][ T2129] device bridge_slave_0 entered promiscuous mode
[  232.256687][ T2129] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.263656][ T2129] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.272870][ T2129] device bridge_slave_1 entered promiscuous mode
[  232.353681][  T337] device bridge_slave_1 left promiscuous mode
[  232.359749][  T337] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.368654][  T337] device bridge_slave_0 left promiscuous mode
[  232.370685][  T668] usb 1-1: Using ep0 maxpacket: 16
[  232.375096][  T337] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.389545][  T337] device veth1_macvtap left promiscuous mode
[  232.395810][  T337] device veth0_vlan left promiscuous mode
[  232.450732][  T321] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  232.490805][  T668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.510686][  T668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.530472][  T668] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  232.553606][  T668] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  232.570692][ T1508] usb 2-1: device descriptor read/64, error -71
[  232.576881][  T668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.601160][  T668] usb 1-1: config 0 descriptor??
[  232.717127][ T2137] loop2: detected capacity change from 0 to 2048
[  232.735875][ T2129] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.742838][ T2129] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.750019][ T2129] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.756941][ T2129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.765094][ T2137] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  232.820376][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  232.833334][  T324] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.841442][  T324] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.874035][  T321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.885487][  T618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  232.890245][  T321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.894576][  T618] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.909763][  T618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.914545][  T321] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  232.917929][  T618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  232.934047][  T321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.934880][  T618] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.948961][  T618] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.957380][ T1508] usb 2-1: Using ep0 maxpacket: 16
[  232.958218][  T321] usb 4-1: config 0 descriptor??
[  232.989378][  T618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  233.007473][  T618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  233.025816][  T618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  233.034551][  T618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  233.062585][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  233.071336][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  233.081525][ T1508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.090812][  T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  233.093213][ T1508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.101822][  T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  233.109799][ T1508] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  233.121437][ T2129] device veth0_vlan entered promiscuous mode
[  233.129836][ T1508] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  233.136853][  T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  233.144996][ T1508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.154212][  T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  233.169027][ T1508] usb 2-1: config 0 descriptor??
[  233.175318][ T2141] Invalid ELF section header size
[  233.184834][  T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  233.193369][  T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  233.205459][ T2129] device veth1_macvtap entered promiscuous mode
[  233.222498][  T369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  233.230395][  T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  233.238985][  T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  233.250259][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  233.258820][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  233.447749][ T2134] binder: 2133:2134 ioctl c0306201 20000100 returned -22
[  233.570730][  T369] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  233.605937][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  233.653034][ T1508] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x6
[  233.663414][ T1508] koneplus 0003:1E7D:2E22.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0
[  233.978933][ T2149] loop2: detected capacity change from 0 to 256
[  234.021903][ T2149] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  234.053215][ T2149] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  234.062389][ T2149] exFAT-fs (loop2): Filesystem has been set read-only
[  234.069418][  T668] usbhid 1-1:0.0: can't add hid device: -71
[  234.083761][  T668] usbhid: probe of 1-1:0.0 failed with error -71
[  234.090564][ T1530] EXT4-fs (loop0): unmounting filesystem.
[  234.143049][  T668] usb 1-1: USB disconnect, device number 18
[  234.370786][  T369] usb 5-1: not running at top speed; connect to a high speed hub
[  234.407620][ T2152] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  234.460800][  T369] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  234.490683][  T369] usb 5-1: config 1 has no interface number 1
[  234.496665][  T369] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  234.647932][ T2155] loop2: detected capacity change from 0 to 512
[  234.710554][ T2155] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  234.719860][  T369] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  234.732565][  T369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.742813][ T2155] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038 (0x7fffffff)
[  234.751120][ T2128] loop1: detected capacity change from 0 to 40427
[  234.759711][ T2128] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  234.767483][ T2128] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  234.769948][  T369] usb 5-1: Product: ᐛ
[  234.776580][ T2128] F2FS-fs (loop1): Unrecognized mount option "000000000000000000000x0000000000000000" or missing value
[  234.803286][  T369] usb 5-1: Manufacturer: 䁝
[  234.979016][  T369] usb 5-1: SerialNumber: syz
[  235.322752][ T2143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.423323][ T2143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.060679][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  236.070885][  T321] usb 4-1: string descriptor 0 read error: -71
[  236.100790][  T321] uclogic 0003:256C:006D.001A: failed retrieving string descriptor #200: -71
[  236.117944][ T2143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.126947][ T2143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.134238][  T321] uclogic 0003:256C:006D.001A: failed retrieving pen parameters: -71
[  236.290802][  T321] uclogic 0003:256C:006D.001A: failed probing pen v2 parameters: -71
[  236.298794][  T321] uclogic 0003:256C:006D.001A: failed probing parameters: -71
[  236.320914][  T321] uclogic: probe of 0003:256C:006D.001A failed with error -71
[  236.572925][  T369] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  236.585516][  T321] usb 4-1: USB disconnect, device number 21
[  236.591894][ T2010] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  236.598154][   T28] audit: type=1400 audit(1729390430.865:333): avc:  denied  { setopt } for  pid=2164 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  237.066271][  T369] usb 5-1: USB disconnect, device number 23
[  237.111577][  T618] usb 2-1: USB disconnect, device number 23
[  237.172229][ T2176] xt_hashlimit: size too large, truncated to 1048576
[  237.182699][  T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  237.189882][ T2171] loop1: detected capacity change from 0 to 256
[  237.216177][ T2175] loop2: detected capacity change from 0 to 2048
[  237.265055][ T2175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  237.295986][ T2171] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  237.339366][ T2175] ext4 filesystem being mounted at /39/bus supports timestamps until 2038 (0x7fffffff)
[  237.432648][ T2171] exFAT-fs (loop1): hint_cluster is invalid (17)
[  237.529079][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  238.497520][ T2184] loop3: detected capacity change from 0 to 128
[  238.613397][ T2194] loop1: detected capacity change from 0 to 256
[  238.625173][ T2194] exfat: Deprecated parameter 'utf8'
[  238.651899][ T2194] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  238.830997][ T2196] loop4: detected capacity change from 0 to 16
[  240.082086][  T325] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  240.127116][ T2201] loop3: detected capacity change from 0 to 128
[  240.171824][ T2201] EXT4-fs (loop3): Test dummy encryption mode enabled
[  240.214799][ T2201] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  240.231453][ T2201] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038 (0x7fffffff)
[  240.253196][ T2205] loop2: detected capacity change from 0 to 512
[  240.416530][ T2205] EXT4-fs: Ignoring removed oldalloc option
[  240.504378][ T2205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  240.528252][ T2205] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff)
[  240.562443][ T1829] EXT4-fs (loop3): unmounting filesystem.
[  240.912165][    T8] device bridge_slave_1 left promiscuous mode
[  240.918335][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.937373][    T8] device bridge_slave_0 left promiscuous mode
[  240.947684][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.955277][  T321] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  240.962927][  T369] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  240.990983][    T8] device veth1_macvtap left promiscuous mode
[  240.997107][    T8] device veth0_vlan left promiscuous mode
[  241.133755][ T2217] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  241.151289][ T2219] loop0: detected capacity change from 0 to 256
[  241.165307][ T2219] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  241.188688][ T2219] exFAT-fs (loop0): hint_cluster is invalid (17)
[  241.340759][  T321] usb 3-1: Using ep0 maxpacket: 16
[  241.440058][ T2214] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.448576][ T2214] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.466238][ T2214] device bridge_slave_0 entered promiscuous mode
[  241.481878][  T321] usb 3-1: config 0 has no interfaces?
[  241.487599][  T369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.530022][ T2214] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.677993][  T369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.694313][ T2214] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.707815][  T369] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  241.734198][ T2214] device bridge_slave_1 entered promiscuous mode
[  241.741816][  T369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.801915][  T321] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  241.873863][  T369] usb 4-1: config 0 descriptor??
[  241.880006][  T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.973942][  T321] usb 3-1: Product: syz
[  242.152888][  T321] usb 3-1: Manufacturer: syz
[  242.248301][  T321] usb 3-1: SerialNumber: syz
[  242.258222][  T321] usb 3-1: config 0 descriptor??
[  242.344111][ T2230] loop0: detected capacity change from 0 to 2048
[  242.347551][ T2214] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.357354][ T2214] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.364655][ T2214] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.371589][ T2214] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.383905][ T2230] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  242.393469][  T321] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.401569][ T2230] ext4 filesystem being mounted at /31/bus supports timestamps until 2038 (0x7fffffff)
[  242.401774][  T321] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.452086][ T1530] EXT4-fs (loop0): unmounting filesystem.
[  242.466890][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  242.481550][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  242.502273][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  242.512762][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  242.514640][ T2234] loop0: detected capacity change from 0 to 256
[  242.521712][  T324] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.533967][  T324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.541929][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  242.550554][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  242.559726][  T324] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.566682][  T324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.582823][ T2211] binder: 2210:2211 ioctl c0306201 20000100 returned -22
[  242.597982][ T2234] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  242.602926][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  242.628577][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  242.651802][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  242.661685][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  242.693726][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  242.703003][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  242.725711][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  242.734331][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  242.745379][ T2214] device veth0_vlan entered promiscuous mode
[  242.753370][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  242.761473][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  242.783886][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  242.794553][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  242.806555][ T2214] device veth1_macvtap entered promiscuous mode
[  242.809934][ T2237] loop0: detected capacity change from 0 to 512
[  242.826204][ T2237] EXT4-fs (loop0): 1 truncate cleaned up
[  242.826417][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  242.831939][ T2237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  242.849022][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  242.858350][ T1508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  242.877764][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  242.887450][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  243.117042][ T1530] EXT4-fs (loop0): unmounting filesystem.
[  243.209840][ T2010] Bluetooth: hci0: command 0x1003 tx timeout
[  243.215911][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  243.801062][  T321] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  244.150820][  T369] usb 4-1: string descriptor 0 read error: -71
[  244.158301][  T331] usb 3-1: USB disconnect, device number 23
[  244.173002][  T369] uclogic 0003:256C:006D.001C: failed retrieving string descriptor #200: -71
[  244.197127][ T2254] loop3: detected capacity change from 0 to 512
[  244.205786][ T2254] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 9
[  244.224304][  T369] uclogic 0003:256C:006D.001C: failed retrieving pen parameters: -71
[  244.234394][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  244.253382][ T2256] loop1: detected capacity change from 0 to 256
[  244.259578][  T369] uclogic 0003:256C:006D.001C: failed probing pen v2 parameters: -71
[  244.268976][  T369] uclogic 0003:256C:006D.001C: failed probing parameters: -71
[  244.276760][  T369] uclogic: probe of 0003:256C:006D.001C failed with error -71
[  244.289789][ T2256] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  244.302000][  T321] usb 1-1: Using ep0 maxpacket: 16
[  244.332336][  T369] usb 4-1: USB disconnect, device number 22
[  244.377056][ T2256] exFAT-fs (loop1): hint_cluster is invalid (17)
[  244.390135][ T2258] loop2: detected capacity change from 0 to 512
[  244.412074][ T2258] EXT4-fs (loop2): Test dummy encryption mode enabled
[  244.469156][ T2259] 9pnet_fd: Insufficient options for proto=fd
[  244.532901][ T2258] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.447: invalid block
[  244.550990][ T2258] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.447: couldn't read orphan inode 11 (err -117)
[  244.573439][ T2258] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  246.398916][ T2268] binder: 2263:2268 ioctl c0306201 0 returned -14
[  246.451629][  T321] usb 1-1: unable to read config index 0 descriptor/all
[  246.465851][  T321] usb 1-1: can't read configurations, error -71
[  247.100741][  T369] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  247.258133][ T2273] loop3: detected capacity change from 0 to 512
[  247.321646][ T2273] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  247.330035][ T2273] EXT4-fs (loop3): 1 truncate cleaned up
[  247.336089][ T2273] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  247.499610][ T2281] loop1: detected capacity change from 0 to 2048
[  247.544083][ T2281] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  247.552935][ T2281] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff)
[  247.639068][ T2214] EXT4-fs (loop1): unmounting filesystem.
[  247.900963][  T321] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  248.120927][  T369] usb 4-1: device descriptor read/64, error -71
[  248.279585][ T1508] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  248.291220][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  249.534165][   T28] audit: type=1326 audit(1729390443.965:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2291 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28fd7dff9 code=0x7ffc0000
[  249.571534][   T28] audit: type=1326 audit(1729390443.965:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2291 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28fd7dff9 code=0x7ffc0000
[  249.631777][  T369] usb 4-1: Using ep0 maxpacket: 16
[  250.058232][   T28] audit: type=1326 audit(1729390443.975:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2291 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa28fd7dff9 code=0x7ffc0000
[  250.083630][   T28] audit: type=1326 audit(1729390443.975:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2291 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28fd7dff9 code=0x7ffc0000
[  250.167396][   T28] audit: type=1326 audit(1729390443.975:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2291 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28fd7dff9 code=0x7ffc0000
[  250.199520][   T28] audit: type=1326 audit(1729390443.975:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2291 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fa28fd7dff9 code=0x7ffc0000
[  250.225016][  T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.266081][   T28] audit: type=1326 audit(1729390443.975:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2291 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28fd7dff9 code=0x7ffc0000
[  250.308604][   T28] audit: type=1326 audit(1729390443.975:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2291 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28fd7dff9 code=0x7ffc0000
[  250.332249][  T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.342200][  T321] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  250.352968][  T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.361094][  T369] usb 4-1: unable to read config index 0 descriptor/all
[  250.364004][ T1829] EXT4-fs (loop3): unmounting filesystem.
[  250.369924][  T369] usb 4-1: can't read configurations, error -71
[  250.374856][ T2302] loop2: detected capacity change from 0 to 512
[  250.386969][  T321] usb 1-1: config 0 descriptor??
[  250.392037][   T28] audit: type=1326 audit(1729390443.975:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2291 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa28fd7dff9 code=0x7ffc0000
[  250.412928][ T2302] EXT4-fs (loop2): Test dummy encryption mode enabled
[  250.418966][   T28] audit: type=1326 audit(1729390443.975:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2291 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28fd7dff9 code=0x7ffc0000
[  250.467529][ T2302] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.457: invalid block
[  250.480925][ T1508] usb 5-1: unable to get BOS descriptor or descriptor too short
[  250.488910][ T2302] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.457: couldn't read orphan inode 11 (err -117)
[  250.518213][ T2302] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  250.530712][  T618] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  250.542885][ T2307] binder: 2306:2307 ioctl 4018620d 0 returned -22
[  250.600829][  T321] usbhid 1-1:0.0: can't add hid device: -71
[  250.606704][  T321] usbhid: probe of 1-1:0.0 failed with error -71
[  250.619195][  T321] usb 1-1: USB disconnect, device number 20
[  250.622144][ T1508] usb 5-1: unable to read config index 0 descriptor/start: -71
[  250.648365][ T2311] loop0: detected capacity change from 0 to 512
[  250.656298][ T1508] usb 5-1: can't read configurations, error -71
[  250.688946][ T2311] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 9
[  250.881062][  T369] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  250.910782][  T618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.922252][  T618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.932314][  T618] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  250.941475][  T618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.967499][  T618] usb 2-1: config 0 descriptor??
[  251.030768][ T1508] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  251.180706][  T369] usb 4-1: Using ep0 maxpacket: 8
[  251.200733][  T321] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  251.270768][ T1508] usb 5-1: Using ep0 maxpacket: 16
[  251.320908][  T369] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[  251.333788][  T369] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  251.355163][  T369] usb 4-1: config 135 has no interface number 0
[  251.361423][  T369] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  251.434758][ T2300] binder: 2299:2300 ioctl c0306201 20000100 returned -22
[  251.450917][  T321] usb 1-1: Using ep0 maxpacket: 16
[  251.470801][ T1508] usb 5-1: config 1 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 193, changing to 11
[  251.482117][ T1508] usb 5-1: config 1 interface 0 has no altsetting 0
[  251.561249][  T369] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  251.575106][  T369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.584825][  T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.608499][  T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.618613][  T369] usb 4-1: Product: syz
[  251.624230][  T369] usb 4-1: Manufacturer: syz
[  251.629342][  T321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  251.640858][ T1508] usb 5-1: New USB device found, idVendor=2087, idProduct=0703, bcdDevice= 0.40
[  251.642814][  T369] usb 4-1: SerialNumber: syz
[  251.655722][  T321] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  251.660697][ T1508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.680666][ T1508] usb 5-1: Product: syz
[  251.685616][ T1508] usb 5-1: Manufacturer: syz
[  251.690088][ T1508] usb 5-1: SerialNumber: syz
[  251.690671][  T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.704686][  T321] usb 1-1: config 0 descriptor??
[  251.732035][  T369] usb 4-1: Found UVC 0.00 device syz (18ec:3288)
[  251.744269][  T369] usb 4-1: No valid video chain found.
[  251.973492][ T2307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.993274][ T1468] EXT4-fs (loop2): unmounting filesystem.
[  252.000987][ T2307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.155405][  T324] usb 4-1: USB disconnect, device number 24
[  252.200805][ T1508] usbhid 5-1:1.0: can't add hid device: -71
[  252.206865][ T1508] usbhid: probe of 5-1:1.0 failed with error -71
[  252.223871][  T321] koneplus 0003:1E7D:2E22.001E: unknown main item tag 0x6
[  252.238709][  T321] koneplus 0003:1E7D:2E22.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0
[  252.250258][ T1508] usb 5-1: USB disconnect, device number 25
[  252.361471][ T2320] binder: 2316:2320 ioctl c0306201 0 returned -14
[  253.256446][ T2327] loop4: detected capacity change from 0 to 512
[  253.287974][ T2327] EXT4-fs (loop4): Test dummy encryption mode enabled
[  253.298059][ T2329] loop3: detected capacity change from 0 to 256
[  253.313831][ T2327] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.465: invalid block
[  253.330765][  T618] usb 2-1: string descriptor 0 read error: -71
[  253.345441][ T2329] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  253.350864][  T618] uclogic 0003:256C:006D.001D: failed retrieving string descriptor #200: -71
[  253.371136][ T2327] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.465: couldn't read orphan inode 11 (err -117)
[  253.372298][  T618] uclogic 0003:256C:006D.001D: failed retrieving pen parameters: -71
[  253.387601][ T2332] loop1: detected capacity change from 0 to 256
[  253.391393][  T618] uclogic 0003:256C:006D.001D: failed probing pen v2 parameters: -71
[  253.405341][  T618] uclogic 0003:256C:006D.001D: failed probing parameters: -71
[  253.411029][ T2327] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  253.412853][  T618] uclogic: probe of 0003:256C:006D.001D failed with error -71
[  253.436164][  T618] usb 2-1: USB disconnect, device number 24
[  253.449613][ T2332] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  253.450840][  T369] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  253.730796][  T321] koneplus 0003:1E7D:2E22.001E: couldn't init struct koneplus_device
[  253.741845][  T321] koneplus 0003:1E7D:2E22.001E: couldn't install mouse
[  253.770121][  T321] koneplus: probe of 0003:1E7D:2E22.001E failed with error -71
[  253.780588][ T2332] exFAT-fs (loop1): hint_cluster is invalid (17)
[  253.956726][  T321] usb 1-1: USB disconnect, device number 21
[  254.561020][  T369] usb 3-1: not running at top speed; connect to a high speed hub
[  254.840876][  T369] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  254.896690][  T369] usb 3-1: config 1 has no interface number 1
[  254.918360][  T369] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  254.953231][ T2340] exFAT-fs (loop3): hint_cluster is invalid (17)
[  255.047313][ T2343] loop1: detected capacity change from 0 to 2048
[  255.074005][ T2343] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  255.088791][ T2343] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff)
[  255.173780][ T2129] EXT4-fs (loop4): unmounting filesystem.
[  255.180980][  T369] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  255.208244][  T369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.230303][  T369] usb 3-1: Product: ᐛ
[  255.273096][ T2356] loop4: detected capacity change from 0 to 2048
[  255.301346][ T2356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  255.333079][ T2214] EXT4-fs (loop1): unmounting filesystem.
[  255.390690][  T369] usb 3-1: Manufacturer: 䁝
[  255.395261][  T369] usb 3-1: SerialNumber: syz
[  255.522668][ T2363] loop0: detected capacity change from 0 to 16
[  255.571661][ T2363] erofs: (device loop0): mounted with root inode @ nid 36.
[  255.620425][ T2363] syz.0.473: attempt to access beyond end of device
[  255.620425][ T2363] loop0: rw=0, sector=8, nr_sectors = 16 limit=16
[  255.641508][ T2366] binder: 2364:2366 ioctl 4018620d 0 returned -22
[  255.649783][ T2325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.658906][ T2325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.701016][ T2368] syz.0.473: attempt to access beyond end of device
[  255.701016][ T2368] loop0: rw=0, sector=8, nr_sectors = 16 limit=16
[  255.827053][ T2369] binder: 2361:2369 ioctl c0306201 0 returned -14
[  256.044703][ T2325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.165840][ T2325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.481010][  T369] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  256.508729][  T369] usb 3-1: USB disconnect, device number 24
[  256.555545][ T2359] Invalid ELF section header size
[  256.590712][  T618] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  256.765267][ T2129] EXT4-fs (loop4): unmounting filesystem.
[  256.810540][   T28] kauditd_printk_skb: 26 callbacks suppressed
[  256.810574][   T28] audit: type=1400 audit(1729390451.255:370): avc:  denied  { read } for  pid=2376 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  256.850719][  T618] usb 4-1: Using ep0 maxpacket: 16
[  256.890867][  T668] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  257.003725][ T2382] loop2: detected capacity change from 0 to 256
[  257.028764][ T2382] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  257.051477][ T2382] exFAT-fs (loop2): hint_cluster is invalid (17)
[  257.060981][  T618] usb 4-1: config 1 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 193, changing to 11
[  257.077724][  T618] usb 4-1: config 1 interface 0 has no altsetting 0
[  257.091025][ T2384] loop0: detected capacity change from 0 to 256
[  257.103223][ T2384] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  257.137107][ T2384] exFAT-fs (loop0): hint_cluster is invalid (17)
[  258.939025][ T2389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.958082][ T2389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.959182][  T668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.976659][  T618] usb 4-1: New USB device found, idVendor=2087, idProduct=0703, bcdDevice= 0.40
[  258.989145][  T618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.997110][  T618] usb 4-1: Product: syz
[  259.001282][  T618] usb 4-1: Manufacturer: syz
[  259.005672][  T618] usb 4-1: SerialNumber: syz
[  259.010686][  T668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.020571][  T668] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  259.029741][  T668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.048815][  T668] usb 2-1: config 0 descriptor??
[  259.088917][ T2393] loop0: detected capacity change from 0 to 512
[  259.115614][ T2393] EXT4-fs (loop0): Test dummy encryption mode enabled
[  259.181329][ T2393] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.482: invalid block
[  259.202895][ T2393] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.482: couldn't read orphan inode 11 (err -117)
[  259.215559][ T2393] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  259.224599][ T2393] general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN
[  259.236192][ T2393] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f]
[  259.244441][ T2393] CPU: 1 PID: 2393 Comm: syz.0.482 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0
[  259.254032][ T2393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  259.263930][ T2393] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690
[  259.270596][ T2393] Code: 88 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ce 0a d0 ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 b1 0a d0 ff 4c 8b 23 4d 85 e4 4c
[  259.290229][ T2393] RSP: 0018:ffffc90007c1f6e0 EFLAGS: 00010202
[  259.296121][ T2393] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000040000
[  259.304039][ T2393] RDX: ffffc90000e79000 RSI: 0000000000004f75 RDI: 0000000000004f76
[  259.311954][ T2393] RBP: ffffc90007c1f7b0 R08: ffff8881109d5540 R09: 0000000000000001
[  259.319753][ T2393] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  259.327578][ T2393] R13: dffffc0000000000 R14: ffff8881109d5540 R15: 0000000000000001
[  259.335473][ T2393] FS:  00007fde323266c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  259.344248][ T2393] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.350668][ T2393] CR2: 00007ffe7a3edb58 CR3: 0000000128502000 CR4: 00000000003506a0
[  259.358482][ T2393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  259.366290][ T2393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  259.374099][ T2393] Call Trace:
[  259.377222][ T2393]  <TASK>
[  259.380096][ T2393]  ? __die_body+0x62/0xb0
[  259.384261][ T2393]  ? die_addr+0x9f/0xd0
[  259.388346][ T2393]  ? exc_general_protection+0x317/0x4c0
[  259.393826][ T2393]  ? asm_exc_general_protection+0x27/0x30
[  259.399377][ T2393]  ? __ext4_journal_get_write_access+0xb0/0x690
[  259.405441][ T2393]  ? __ext4_journal_ensure_credits+0x470/0x470
[  259.411522][ T2393]  ? __kasan_check_read+0x11/0x20
[  259.416393][ T2393]  ext4_update_superblocks_fn+0x2dc/0x1300
[  259.422022][ T2393]  ? ext4_update_superblocks_fn+0x1300/0x1300
[  259.427919][ T2393]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[  259.433557][ T2393]  ? ext4_update_overhead+0x170/0x170
[  259.438767][ T2393]  ? ext4_superblock_csum_set+0x162/0x3f0
[  259.444347][ T2393]  ext4_update_overhead+0x143/0x170
[  259.449465][ T2393]  ext4_fill_super+0x309b/0x8460
[  259.454291][ T2393]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  259.460625][ T2393]  ? snprintf+0xd6/0x120
[  259.464719][ T2393]  ? set_blocksize+0x1cb/0x360
[  259.469313][ T2393]  ? sb_set_blocksize+0xa8/0xf0
[  259.473993][ T2393]  get_tree_bdev+0x440/0x680
[  259.478425][ T2393]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  259.484501][ T2393]  ext4_get_tree+0x1c/0x20
[  259.488746][ T2393]  vfs_get_tree+0x88/0x290
[  259.493012][ T2393]  do_new_mount+0x2ba/0xb30
[  259.497434][ T2393]  ? do_move_mount_old+0x160/0x160
[  259.502377][ T2393]  ? security_capable+0x87/0xb0
[  259.507064][ T2393]  ? ns_capable+0x89/0xe0
[  259.511237][ T2393]  path_mount+0x671/0x1070
[  259.515479][ T2393]  ? user_path_at_empty+0x14e/0x1a0
[  259.520522][ T2393]  __se_sys_mount+0x2c4/0x3b0
[  259.525041][ T2393]  ? __x64_sys_mount+0xd0/0xd0
[  259.529632][ T2393]  ? fpregs_assert_state_consistent+0xb6/0xe0
[  259.535537][ T2393]  __x64_sys_mount+0xbf/0xd0
[  259.540048][ T2393]  x64_sys_call+0x49d/0x9a0
[  259.544648][ T2393]  do_syscall_64+0x3b/0xb0
[  259.548896][ T2393]  ? clear_bhb_loop+0x55/0xb0
[  259.553415][ T2393]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  259.559138][ T2393] RIP: 0033:0x7fde3157f79a
[  259.563392][ T2393] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.582843][ T2393] RSP: 002b:00007fde32325e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  259.591086][ T2393] RAX: ffffffffffffffda RBX: 00007fde32325ef0 RCX: 00007fde3157f79a
[  259.598933][ T2393] RDX: 0000000020000ac0 RSI: 0000000020000180 RDI: 00007fde32325eb0
[  259.599969][ T2375] binder: 2374:2375 ioctl c0306201 20000100 returned -22
[  259.606704][ T2393] RBP: 0000000020000ac0 R08: 00007fde32325ef0 R09: 0000000003810744
[  259.606748][ T2393] R10: 0000000003810744 R11: 0000000000000246 R12: 0000000020000180
[  259.629207][ T2393] R13: 00007fde32325eb0 R14: 0000000000000451 R15: 0000000020000700
[  259.637004][ T2393]  </TASK>
[  259.640083][ T2393] Modules linked in:
[  259.644932][ T2393] ---[ end trace 0000000000000000 ]---
[  259.650532][ T2393] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690
[  259.654680][ T2397] loop4: detected capacity change from 0 to 512
[  259.657886][ T2393] Code: 88 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ce 0a d0 ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 b1 0a d0 ff 4c 8b 23 4d 85 e4 4c
[  259.694617][ T2393] RSP: 0018:ffffc90007c1f6e0 EFLAGS: 00010202
[  259.700750][ T2393] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000040000
[  259.708842][ T2393] RDX: ffffc90000e79000 RSI: 0000000000004f75 RDI: 0000000000004f76
[  259.716991][ T2393] RBP: ffffc90007c1f7b0 R08: ffff8881109d5540 R09: 0000000000000001
[  259.725135][ T2393] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  259.733630][ T2393] R13: dffffc0000000000 R14: ffff8881109d5540 R15: 0000000000000001
[  259.742812][ T2393] FS:  00007fde323266c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  259.752029][  T618] usbhid 4-1:1.0: can't add hid device: -71
[  259.758104][  T618] usbhid: probe of 4-1:1.0 failed with error -71
[  259.764618][ T2393] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.773387][ T2393] CR2: 00007fa290b57f98 CR3: 0000000128502000 CR4: 00000000003506b0
[  259.791230][  T618] usb 4-1: USB disconnect, device number 25
[  259.805541][ T2393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  259.819666][ T2393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  259.828424][ T2393] Kernel panic - not syncing: Fatal exception
[  259.834640][ T2393] Kernel Offset: disabled
[  259.838800][ T2393] Rebooting in 86400 seconds..