last executing test programs:

1m46.445006917s ago: executing program 1 (id=1331):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a", 0x5c)

1m46.174687342s ago: executing program 1 (id=1333):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000002d00010026bdf0007cdbdf250400"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
syz_emit_ethernet(0x46, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2810)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ae880000", @ANYRES16=r1, @ANYBLOB="020025bd7000fbdbdf250b00000008003b00e9030000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x568, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x401, 0x70}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_PEER_MEASUREMENTS={0x524, 0x111, 0x0, 0x1, {0x520, 0x5, 0x0, 0x1, [{0x41c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe0}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xd4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x480}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x24}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x47}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e8}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5e8e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}]}]}}]}, 0x568}, 0x1, 0x0, 0x0, 0x1}, 0x8040)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r5 = io_uring_setup(0xc90, &(0x7f0000000380)={0x0, 0xfffffffd, 0x400, 0x3, 0x100})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0)
io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000001580)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1)

1m43.874875992s ago: executing program 1 (id=1341):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m43.147920811s ago: executing program 1 (id=1344):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xfff1, 0xffef}, {0xa, 0xb}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008820}, 0xc0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={<r2=>0x0, 0x5b, "979e0667ec35f97f36d67b0f714d90022f93b5f7f1f103f34a8396230e398e4930ef4e5a9417706ce44b933f524f50a3cf3ebeaf32154cc4a28d62f2a6c7a5ccb89a1df715d3dcb9114a24897ddac7891485e18d3a82dbcf722d92"}, &(0x7f00000001c0)=0x63)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={<r3=>r2, 0x8}, &(0x7f0000000240)=0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000002c0)={0x0, 0x2710}, 0x10)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r5, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000000)
sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f00000004c0)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000500)="199ca76f389970aadd21067fcba8f4e876af0010904731da04c9f5434c9376b1b32c922b6eb07f7f1afd62958a15d227bae5968f408d177d6ab4ae48eb5c63b5b00016baee40581283d505986ece19c17e330ee15ee28f570156783394d3844f948d9df02f8bbc21844f8282f62e304613f3f2b7097ab369f9a285d3a5cdc0325f6abec9ad468e435501340bb631135044fb37740811af08d6afec9a7e3c649ef4e7e3cb9edb7251da6b7b873b8f89c4c516f6c099a4a6efde8f98cb94dd7191", 0xc0}, {&(0x7f00000005c0)="1bd062a57d8801a906acf1a4b83cdfcbb43986cf303d87e1502c15fe5b0c62d2ae36d471d4c87d95768742e0dbeda95e16f6e8c0b9795f10a3ffd3aa4b245dfb010d246fa879edf65d32d72e2769057865a15a7d72d5d055b2545462f7f128bc2963ed32e87ef304202d7dc737b47c270687064e86e607325b15c0eb4d362c33", 0x80}, {&(0x7f0000000640)="21cd755ba5b23b36e0fad9be39a4041f2fa76c17ec7604531aac01d0835f852e214d06336bc5f73761e6423a5543bde825da1999235e3b087955d090ceb9411dff95f7332561a218fb538a7e0b080fb0edec90d04d7894c44f183efba8efc6514cb94dd1da5cfb298af3a7894f56b8d2", 0x70}, {&(0x7f00000006c0)}], 0x4, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x307}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x55}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x91, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x1}, {@private=0xa010101, 0x2}, {@multicast1, 0x1}, {@local, 0x8557}]}, @generic={0x88, 0xb, "877c37591e47b03359"}]}}}], 0xb8}, 0x104)
ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f0000000840)="afc390625d562d0b53858bf66ed74c490c7c46f6fa96802e723e74c90dc97397b81ef93b905c01e113a6b6082516fc76b8586ee91413d466c3f33d6740d77b2ead730e2f333b66200f46599a6a49a57b11be06ceab54a139f94867c371c19568bb47ae86ce4b4cdd07d255a84d0fc604")
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f00000008c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000900)="7fed5f425773d9b52b263c44c92c93593a00b9a1c57bb0b5fb146054c91aa292c807bfe2cc3ae5eeb5b6f6660c4941852f3db41d28e990ae3c6d0bace2829b9b0964952fd3e33a10b985", 0x4a}, {&(0x7f0000000980)="6eb21982547c0529cb78ff16a0e06647eb93a516e171e09cb5c1480409ce89c055b960ae56a47d4142f9e898adf543cae103e6c415f1a0f97f6f836ddb86ba512e1878f4346f5bceaa7be4ab6d5f000fe5d0ccbbe79fdd1f26ec0c81f12db9182b4400d99e87191b1da43520a59d913adbedca42c34e4709d7436d5f5b665f6e8db17f67260fc5ef58b7479f00a76a8e463d18780e2f88ae0b6c0e625a879fceac6335f3a3af807b8cfba79166ba59d6883667074f0da00d4aceaa6da66b1fe7a2204c4a15e49367b816f1b17eb1bb50d13b444726908aee3d0f7504", 0xdc}], 0x2}}], 0x1, 0x4000000)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00), 0x106, 0xa}}, 0x20)
getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000b80)={'security\x00', 0x0, [0x7, 0x1, 0x3, 0x4d]}, &(0x7f0000000c00)=0x54)
r7 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x6, 0xae902)
close_range(r6, r7, 0x2)
setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000c80)={r2, 0x2, 0x1, 0x9}, 0x10)
ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000cc0)=<r8=>0x0)
sched_setscheduler(r8, 0x1, &(0x7f0000000d00)=0x6)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000d40)={r3, 0x5, 0xfff7}, 0x8)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000d80)={0xb, "aa85bdfbd35e9f3a048b379c2c911b952c59b586972aa2f8354477070fb49256", <r9=>0xffffffffffffffff})
ftruncate(r9, 0xffffffff)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000dc0)={r2, 0x21, 0xff}, &(0x7f0000000e00)=0x8)
stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
quotactl_fd$Q_QUOTAON(r7, 0xffffffff80000201, r11, &(0x7f0000000f00)='./file0\x00')
ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000f40)=<r12=>0x0)
tkill(r12, 0x35)

1m42.112681346s ago: executing program 1 (id=1346):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e00, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x40, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m39.457761313s ago: executing program 1 (id=1353):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0}) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xe0f, 0x0, 0x1}}, 0x40) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f00000000c0)=""/163, 0xa3}], 0x2, 0x5, 0x22000) (async)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 64)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x1, {0x2, 0x1, 0x1}, {0x0, 0xf0}, 0xfd, 0xfd}], 0x20) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

1m24.42524966s ago: executing program 32 (id=1353):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0}) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xe0f, 0x0, 0x1}}, 0x40) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f00000000c0)=""/163, 0xa3}], 0x2, 0x5, 0x22000) (async)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 64)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x1, {0x2, 0x1, 0x1}, {0x0, 0xf0}, 0xfd, 0xfd}], 0x20) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

7.171052648s ago: executing program 5 (id=1651):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000840)=[@decrefs], 0x0, 0x0, 0x0}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

6.856075414s ago: executing program 5 (id=1653):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0)

6.494991561s ago: executing program 0 (id=1656):
socket(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x5, 0x4, 0x0, &(0x7f0000048000), 0x3000000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000140)=0x2000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r7, 0x400c620e, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r7, 0xc0046209, 0x0)

6.45432376s ago: executing program 5 (id=1657):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469"], 0x94}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa4180c20000000800460000280000000000119078000000000000000007"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x65, &(0x7f00000000c0)={{0x12, 0x1, 0x50, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x51, 0x10, 0x25, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x400, 0xfff, 0x5}, [@mbim_extended={0x8, 0x24, 0x1c, 0xf828, 0xaf, 0xc93}, @acm={0x4, 0x24, 0x2, 0x49a35fa4054e2b17}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x1, 0x44, 0x81, 0x0, 0xc}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6f, 0xf, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0x0, 0xfa, 0x20, 0xb5}, 0xa1, &(0x7f00000001c0)=ANY=[@ANYBLOB="050fa1000420100a8005000000000f04000f00ff0000000000003fff00303fff0030c0ff006a10039c80942431e7eb4fde85ed0597f1a61f9d91d85db6d64ee39c7b1394a93adff12cc9ca073739e939c1d230a2f3d826ef6be33cba1c08e2eb6ee7d604e20a94d60cd7022c2c0a3506163494c6eb5989e36352c727eede0a1a0975e289c16dbbca4ceea674b70100000000000000000b10010848000c0b040081"], 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x240a}}, {0x1c, &(0x7f00000002c0)=@string={0x1c, 0x3, "4d388108833891729dc45a82dd033a22fad3499cdaaa5fe11870"}}, {0x4d, &(0x7f0000000300)=@string={0x4d, 0x3, "03e8d4c2ec988a2dceaf04cdcff7b5ab440226655b7a4afcc979b67ce92b9d2f3ca288ebffeac5d6ae1df3367221440405a8516270ae651e80316a0d8f52464d397d19d65fb0b50ef5b954"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x147f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x406}}]})

6.031050483s ago: executing program 4 (id=1658):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000)

5.482229423s ago: executing program 4 (id=1661):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xffffffff}, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[])
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}})
syz_io_uring_setup(0x852, 0x0, &(0x7f00000004c0), &(0x7f0000000500))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0xb, 0x44080)
r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)
io_uring_enter(r0, 0x3516, 0x0, 0x20, 0x0, 0x0)

4.522551445s ago: executing program 2 (id=1664):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00')
getdents64(r0, &(0x7f0000001fc0)=""/4079, 0xfef) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0)
r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e, 0x0, r5}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async)
r9 = socket(0x2, 0x3, 0xff)
connect$inet(r9, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) (async)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x30) (async)
syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602001300000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4000040)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340)=<r11=>0x0, &(0x7f0000000280)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a000126fefdfffffddbdf25000000000000000008000500f1496ca7375260"], 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x20008000) (async)
r14 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x2201)
ioctl$I2C_RDWR(r14, 0x707, &(0x7f0000000280)={&(0x7f0000000240)=[{0xc, 0x4400, 0x0, 0x0}], 0x1})
syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}})

4.422819483s ago: executing program 0 (id=1665):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24000000000000002900000032000000fe800000000000000000000000000043", @ANYRES32=0x0, @ANYBLOB="3b94fd643664d71bd0e60dc454825ac2d85ac8ce43f0"], 0x28}, 0x40c0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x9, &(0x7f00000005c0)=@raw=[@alu={0x4, 0x1, 0x5, 0x7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x668, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f00000003c0)='GPL\x00', 0xa, 0x1005, &(0x7f0000001840)=""/4101, 0x40f00}, 0x94) (async)
socket$packet(0x11, 0x3, 0x300) (async)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bdff00000000000a00000008000300b6a35c1a3872bbabb4e2804157af84cc0d06360b7f2787f261a92343960acf27a2419992065836386bacc51a4fe35a7b4602cb0c6a2f043c254ad2657ffd1bc2e1c8b90be8c71e89bad60a7aa794efe5e16e7c5740b9c8511caa5193a203e6f43e465df1579b87e212ed253c7b9f216e2ca1d1bd414be8dbddccd894b20aea6693ee00c8a244348ce08639d790168af498e3bb23cac47d2629d9947e47b1d1868cbaac476078585091ea5c10001e644ea7570e9f889c69512c8cde02a6734a0c8c76fe6aae590552c356adc7952cc090c1522f758ea4901448f7fd3ae4", @ANYRES32=r5, @ANYBLOB="4000508004000500110001005598b7f54959e7311f7785bfa9000000050009000100000004000500050002000100000005000900020000000800030001ac0f00"], 0x5c}, 0x1, 0x0, 0x0, 0x8881}, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000140), 0x40000bb, 0x40000001, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
map_shadow_stack(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3ff) (async, rerun: 64)
r6 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
r7 = syz_io_uring_setup(0x12ab, &(0x7f00000003c0)={0x0, 0x7496, 0x40, 0x2, 0x1f7}, &(0x7f0000000380)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000100)=0xe, 0x0, 0x4) (async)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}) (async)
io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) (async, rerun: 64)
r10 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r10, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
keyctl$clear(0x11, 0xfffffffffffffffd) (async, rerun: 64)
listen(r10, 0xa) (async, rerun: 64)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)

4.29886696s ago: executing program 2 (id=1667):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000580)=ANY=[])

4.282697065s ago: executing program 4 (id=1668):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x400000000000000}, 0x0)
syz_usb_connect(0x0, 0xdd5, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038f08e140ac051d92bec2010203010902c30d040306104e0904080605035600a609058203", @ANYRES64=r0], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4093, 0xffd}, {&(0x7f0000000340)=""/92, 0x5c}, {&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f00000006c0)=""/23, 0x17}], 0x4}, 0x6}], 0x1, 0x2202, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1}, 0x2000080)
r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffff60f, 0x80041)
set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9)
ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x3)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'gretap0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x2bc, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x28c, 0x2, {{0xc, [0x7, 0x6, 0xc, 0x3, 0x3, 0x3, 0x5, 0x1, 0x0, 0xf, 0xc, 0x5, 0x3, 0xa, 0x4, 0xa], 0x1, [0x0, 0x9, 0x2, 0x1, 0x75e4, 0xf71d, 0x21, 0x5da2, 0x9, 0x8001, 0x7fff, 0x6, 0x7fff, 0xc, 0x0, 0x101], [0x4, 0xb, 0x3ff, 0x8, 0x0, 0x9, 0x9443, 0x9, 0x3, 0x4, 0x8001, 0x8, 0x7, 0x7, 0xfffe, 0x3]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xe2}, {0xc, 0x3, 0x1000}, {0xc}, {0xc, 0x3, 0x200}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0x100000000}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0xfffffffffffffffd}, {0xc, 0x3, 0x400}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0xffffffffffffffff}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x2}, {0xc, 0x3, 0x1000}, {0xc, 0x3, 0xbc6}, {0xc, 0x3, 0x1ff}, {0xc, 0x3, 0x7f}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x48}, {0xc, 0x3, 0xb}]}, @TCA_MQPRIO_MIN_RATE64={0x40, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x4}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0x7}]}, @TCA_MQPRIO_MIN_RATE64={0xa0, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0xd6a1}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x68b}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0xa}, {0xc, 0x3, 0xde}, {0xc, 0x3, 0x8000000000000000}, {0xc, 0x3, 0x7}, {0xc}, {0xc, 0x3, 0x7fffffff}]}, @TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x2bc}}, 0x4000010)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
r9 = accept4(r8, 0x0, 0x0, 0x80000)
write(r9, &(0x7f0000000040)="cb", 0xfffffdef)
setsockopt$sock_int(r9, 0x1, 0x52, &(0x7f00000009c0)=0xfefffffb, 0x4)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r11 = accept4(r10, 0x0, 0x0, 0x0)
set_mempolicy(0x1, &(0x7f0000000400)=0x18fd0662, 0x8001)
sendmmsg$sock(r11, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="62895cd9dbfac6be951322cafe92ccc7bb18c40197c4432e7e3c74f92fa87567193ed8cf9494c8d9a8c73d1706727f5d9d", 0x31}], 0x1}}], 0x1, 0x0)
recvmmsg(r11, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/5, 0x5}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000280)=""/131, 0x83}], 0x3}, 0x9}], 0x1, 0x2, 0x0)

4.153601421s ago: executing program 0 (id=1669):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x190, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7b6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x190}, 0x1, 0x0, 0x0, 0x24000000}, 0xc4)
r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file1/file1\x00', 0x42, 0x1ff)
close(r4) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async)
fsopen(&(0x7f00000003c0)='omfs\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file1/file0\x00'})
openat$cgroup_subtree(r5, 0x0, 0x2, 0x0)
r6 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) (async)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
r8 = accept4(r7, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x0, 0x20006, 0xffffffff}, 0x10)
sendto$inet6(r8, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0xd0cf9c3195293a90)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
socket$inet6(0xa, 0x2, 0x0)

4.037131037s ago: executing program 5 (id=1670):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x6000000, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)

4.03260824s ago: executing program 3 (id=1671):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$rxrpc(0x21, 0x2, 0xa) (async)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) (async)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0)
r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e, 0x0, r6}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4004, @fd=r6, 0xffffffffffffffff, &(0x7f00000004c0)=""/232, 0xffffff06, 0x2, 0x1})
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0xfffffffffffffeb3)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @remote, 0xffffffff}}, 0x24)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
shutdown(r0, 0x1)

3.898803793s ago: executing program 2 (id=1672):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x11, 0xc, "6d1a5711961f294c25dd2c389b"}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xeb1187208edb852f}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x0, 0x0, 0x0, {0xf, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1faa7304}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWRULE={0x15c0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x1498, 0x4, 0x0, 0x1, [{0x13e0, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x13d0, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x1118, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "b348bdb4904e03b51d3efa1322d042722526f62fd91b88f76a3cab4689fc3477cdd0e15c08aa639ed49eba83022b1e92a18d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "32cdb2b3a0fe63320808345ebe64251215b15a64ce5cc3284a612800fb35d1a4d6e0288b6d77676824faf2f2b4b7955bdebfa345ecf0fcc7dd5327566ccf80473646668d3b6d0484f0a1bb121447bec40e344f93b416279e54fa755b69574c61ff94bee42af922ad47d6566aed3cfe4464a67aa3c70c1a6b5cd84156721f20a6aec080082cac733613f50eb3d6f080536674f2ae8cfddd9f658480c8fef0ca677115b854410b1293d121e6757d1426a0f2071ed16da17d5c07f2e50705b8980b8cec5118091f89384ea164e962cd459133466dfc3a11009799d1b418216dac5a567f0daa695f83890aa755251f8c2e083b7e17d4335d2a248607aea59f13600db760346985f9740a48dccec7b5e74c5d41e23db28c576948665b015f1fda65761463fdda07be4bc8f563aaba96439d1a78a34630fbfa8bb789922587251e97c50e58c3f32c69df996b946ee96b8bc9b0851867fef2206aa2df5b0774307884279c6aee332363fe3ead5712e37a3b97890fdaa24f8bb40c04958dff39bbdb8dd8822218e46f23bd27779c4f6a3ff5d776401bdbd819c2cc9c8238d33bec7260e8b7cf6b5821ed6526e9a179408c26904e34b5d1d8d46c5cf0e7ad23528efe91c6ae54a7972b131665024ebe0374ff4bb227f34f4a8817ffdc53a4eb5f59228457c6cf12bf24db1b7db4f9a08fcb6975052e22d99757a69fa35815191ff0ec945a710e2f098cf690d6fbd9ca2ba8cddd18c0d31b2bbc3dfba2f246990c8b291c8fc769b6435ac6891d91231091ae229083b40f7720aa493071efec9384d61f3b075623e9d02d307158876bef2d3189bd6b64c8dbc61e4afb80263997d4467647fb7e38cb07fd565373aa13b9c5d9568b99d8f6cebd8fe78c489fd5570e194ce06e6a38660fc7f31d30ff8880b3f150376c97266705d56ceb9b7a9ff3bc39bf3d0ebca6a816451e47bc3d3e4be882ab376f1d06621f6f488cba205efde397d9888fe2f399fcd2f71aa4c73e17108e8c42f66c28f86ea3467e733e43a5302394a6f972a7fc7cf6fb4e12d16157c14fd975ebcbb87d9fbc017b810234c29f8096d1e61be6771ba3693a71c43f8a9734168d86618fdf9dab0a5398c8e1e0cfe440d96a0511eb254b467549435630fcdad0bb50d63466f0555a5e23ef463c31ff5a7de702c2b9e0802dd23a184511b210052777866ef81c2e5754f86036108e40929775cb983260bf9254445df5004dbb92d489ddbbea585f669fb9ceac72d9a03ecca0fcd6d0d67bdbaf82ab4990ee52b6665811b169610a52aaa6c3240fa6d2881645c45b19946eb405562fe9885e480270c22624a59a37b0c0261845b37c6006d2d3d90b3986836e8639113341781e2f639869854325b1defcb032c677d3ec1c65c518850d6792606df6108eade426fa0be6144e7f163fc397d14ba59d4434b0c12dba37119e8c222864237b744ec610e4069cecbf4b88005a221ee7911896c6dc3bdb09270bb0c17055e686e555cf2ff2015d545c743d4a22c8ee2eb6891e5e28811fe8f38acc71d8121c8fd5079a7560ab0adc59108720d12a4f3265019fa4609885b6778513be2e50d22a61b85c1eaa5748e7c4ef9dbb35478bf7028c77d8229bf294ff451ee88430dcde3e21fb30c181af73f77b1fab4c9f6e3fcd660d8dbebc7bfa8196917cab3211b251412f90f37a0ea02138de6a352c90c7bdced590fdeefbf22ba2f18a236b39d20b8cd2eca0aac9a8c9c96d10b6250e69425ac4fe9dcdd0cf940a18ce0efb38b37a68242388fcec7f8ae3d37dfce895044be6a46308c88dbc64c534867fd50f968d20ef6b1fdf331d5781e719dc48c2205f0c274ea0c7f935e99143a3a4226036f81fa5d8bc4864d377ca512f35af998cb708ea762865a959d1536f8b5cf42a46f00563944af33a9d88b08c47f2da46df2e559d6b5c7b9281f8fd7ac1919569d9ca9a172d2bc2286553228f6657f632b3fa46f93688af68340c0f351304789dbbf3dc5c3228f8cf598554a07d0b7376190f3e7b7918c443695477a9f1e565e47ff2de6c3504442a7417b0eee6750b68224191d3c705bf134101e0cb33ae922191157961a919dba9e54a8a099044f118acababcb9f8c9c819a7e44a41d92626f9e5794112b57af7f39319f5cc374d21f48594cf03a694d580614f997d8d42bd11e6293e914262eec32579c76f4ac971ac213ee27c13ff9eb6da3dbef6e52ee7c04987d3c8be60a4c3c5b9a703f53d6e9d70ae43c0a9ed4ce723a0a2bbf25453d4771dd02f55d3db4286f1016065ca899c88a24b525c1042b4b3c15d3b4ab1656bb2df4668271f86851cd81fdd5e3b07dfbf26060f36806cb4f7004e400bc3e7d1708ca76ec38e604c4a84a5a58dcf3a75344113b85b448e1c3e452c5798f28034c20a9b4db2422a19c7adb977a1c35974a809283ccce8afba2f92a6e1c374736cada9eb07e1e4da6d7309f9b007b3989231d8c5183440c6fa82b69738dc021cf57cda6dc8d203c0f78169eeff1bc00a13d056522cfe7d3aa00d0c31b07f58684718989dce4b577ed793ff363cd0564f28fed3823e702212018d548279960e669254fe6dac76c09a2b43711eba6946058be5e5d7cd959b7dae04773687e3a8c8a63402e08c4078a5458550e8827a7bb49882e15400bbeeafa18eea49696dc6c3f26e87a90d504f52282cd242eb0fd6e37b5c7554306496b2e51e31024a1f744e7751b97391c3ccdda431ac23319af55ca341ff2409f51e140d51717d6b74c07399859a7a68578eee669747199b854d60732a2be151157b6a49999f59d290f860f62e498bfaf8ff7ef4ec48991c61369fa3110d3d4382e8681b3e766b3a07918f57c007abe7a7c1465f5fccce67e01373ade96481ff45163a663f0bf90d557a180941c719a27141247c1b0bfaa90135da8c6035d50e1a3c8b9ee5a0a27126026f607084ee13cc2ab076aa3ded96b8a799214d11b856663eea321f8db2e7d0803feaf537088d489d8f10c80a336dd505ad4e3b03068711260906851ede75c5378d9ac1c172a6739aa1c51b56498432df62f5215103ccfceef62c65dbd92809e7a72cf3303e02a1095a889ec53507878e11bf15a57a2d7f10a3f154e4581595fed9c3b1121e89ddc0509afe62d1e335fe5d0c3bd0fcd678aa33a227e472545cfaa9135260841870abf08711a97ca80da8d8101c2448b28b65b475f52a9894d04908103fb86bf0c1e334b29fe41be8f93206c398e3bff73c35dd74947c24575a704835b884a244417f200203e8839ac0befeb00269f3e69b10fb541ec1fdce2d849278364b3dc6e2f4a9fe98ef60ba24ce94a13945ad22648325432d3166b998c5ad05fbbada8a6a37367babfe8cdeb7eaa410314753f70a733d9c2d09cab2c64d5cc5d6d8c151de9ffdacf5bb5bbecc14508c6e43ffe2c885ac2f19adcfdf929971c7f38efd7a9d971a39ad7486327e0f639d12db0dd3ae2eb76effd54d28b0402445b20631caa6145639523d66d2914a976cb51522ca687d61ef8547cc3fa9f9e0cb83e4de4d15dac260747acf723b30660598a6a0f8af23811eb823f38c2c4c2029c99fc60c8f5909f612286c339a3cec5a0f53b2611ed5e096341d4f80b97cdb9c6e135c17861a9c64cbae17b994bae3625199e5b7cfbbb8c9a15dbb249321a51d099e54fce60a05e7aca7de5ef4cd37a385739eb0af5b1fe8750419784ba41664a8e53d54e3aae2751feba956dd1c73967a8dba2fa0949d657794fbe248dfe3e5d75af9c5483eff58a817a2dbe890d9ccfbbbd6eb9e6a3ee34da82c81b13b74d1015c67bc1d88fc565d073488873bbaced9abe563b977d929c7606c66b2bdfa68c41b5846712d3f7f692343223e6d8e6f48c88d52e0af2aeb4820a32c0a2ed5692e27bb96651a428d45cecc0f1f1cff021c97a1db3c0c07283c5d92d969e26d5935c6b941f209ac2fd3fd2b7b1a3e0b45df33bd351d335a5eda7a3df2327400ad7c2ded90217f70eef91600757f1679176d5af9d4b1b9bcb4593e0264a44dde45d2e5a25653c042da631e05c8dd6b31b1414250d0529a800b12354cae980cdd676be16450a3d41dbfdc80fd12aa5277bf5868dc698ab12f76f1344303c715522c2b1cd20baed0a6915e0b3fcc91478fe64fdb3194d633830e1a95d5d0508b1900083972c9e03868d7c2be52414055ecbe26be7ecc4f32cc2997c3c0dd5e3441a689b4364f9aefe37518443f144156ce3bb0181262c9aeb95c7923e6096f9b2365381a2a6bf2ee4c2096a3df7f406aab43bd2e1a842c11496c2b05ae6e9890e4e2911a023f724645a4acc28010e8dd7f703443aa6760b9689bf52115dbcb4e83cd4c00fe6359736cac9c314cdf3cc9e0b5c29ef8560d935f0626c555ba7f6fd20cfc4ba80faf842a312f28b04da50a4366fc73de5189e4eefafe66aa2214fd950b51075ed0396c8092237e78e6eb8456eccb1e528336947a41cd1c01a68f85eed5d2a47052741725eb2508ede7beba87b3b600d491b7679a57ff192fd2ee3654898494c817aedc2b2fb5f8f4daad883e9e73a6ea2214f020dddbdc26adf566ba85935403627721b7dc15311a9de9c1cabc3433d3d6e438456b0a143687e4253ca586b9ed6a91b90751742bffceaa39581f111f05b8c621c199c8c32590aab53bbca014ea280d2867a6636f9e359a436fbe9e767dbbb74b600d05092932cee346439b9c8a1b84a028d1cf4843443959bdcc95d953ef02745ea4dd4f6d46fe12230edd8e355d60501094c4f2c474c76e61fe949e26e41ba6bc568ec2021a200263893da5c5d05b2604b2e829d1c4602043744f1e3c7c0383cb5b1c6160ab6aec31d30aa8ae73f2b7736367cd9170bd089d5c30cc79321c30db8f29377d82259cf05a9968673851fa320d6604e1fd4e2ff7a5dbd5752ab22ee73d6502a79cd78aef9a8fe7f79e0632a00d5ed8fed0f07d2612fe7fbd8e13a6a8b9106834e1a33bedf5c9064f82a78ad9a36649d0c7cf741b7c70c84eb39e24c721f749fc5059b349604893d8e5f13ef994482b1475e68763626b2ee1295ac9420f6a343cec69dbf9e962c4b618ab9ab08851442d6a999d1ef65bbdff53ca4e0c91f5b551b2ef6ccef5e6b03546cd4e94f558acbebdb19965d02ce802517eb9cc4baa73615d05ac510308a6dd992a514b69290ed2eaf7af8297dcd80d3689c3c209e40e05ad02e3fd9f754d7185ef7020579c5930ad654b91f461f2febc1751bdaa28bd8800d09f158997e8dc28c64671faa7d985229c78f3ecde67c9e11d30f53064102706fad33b58ad2ab5be9732b10aabdde983213e67aab8d27b3e2270847d19508f8e56ef52f8c77ec231954991ddb1fe4ff39c3aefa3f6ad97f6ea41d2d8bc861cbf0e240d901148efed9fc9448d1afc14a9e88851cd0732b5fdd6220cd5706ec909dca11cf6b66e81685b12a5673084c226be34883e2d46ab9a40f105ba9c87cc019fc632a5a04918911cc19f70bdf583fbfc378bd004ec790b788ed86db87e3d6962fd4605f507100f79d6503fab48a90ba0756aef79866284d49a6e50624241a1ce3de31e2466f391d6a295914237524ef6c0b09368d92c740a4e24fd9709a03ebf984a6f8297506f1c27f682acfd224f7f429dba27cecce7df729cf0cca9f3b534f00221929438251721f3ed5a45d497274e577a66e9a6b932529dcd6c1c79446f5301725367566df5a5d3ec3abad13c86e44b83c540a0ee7260c8cb153f8075809c85891c5dd5f9f11c4f48ddae835aef05c9e9659673920c76f"}, @NFTA_DATA_VALUE={0xc6, 0x1, "4d822d1a50ed0bc20762f6bae6f4fc986f2b41b6673ec951ef3cbb5cf756675629c2a51346cc943252a946bf47d5f9b85ab42b37dfefcb6b5d3e396baba45ddbf3597d473edc26a3a62232088cce423f0d65fb124e6306ad8cbd5ba63e82512d7aa6edda43faf0e2f8522cf948fbcdb3eed244edc23babddfe3448b56a3ea31abc5b69743ae2fe9c2af337daa55b751c81568775784f8cf18d873a0f60e4a37fbc0559660f557e7492adbc60faf94eb54b787def9afdac1e8d93be7fb5fe2e77b24d"}]}, @NFTA_RANGE_FROM_DATA={0x2b4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "945ba2a9c72dbb4204d032ca4e348bc2ded96b8d9fb8b8a38a581eea0d18db41f6902a04240210edc63b39507f350f2112c6dcf933b63fc5ddc9c700a510e82df642e6610f2af1729db988c4737939f41d6c0c50ddd061fa64e8b8d8e23163f261ee3576fd89c244fd9f00f254fcf5760915ca16182d"}, @NFTA_DATA_VALUE={0xfb, 0x1, "f540280daafe6692795cb73ccb99878ab0cfbebe7bf2a4f1e2b6d8e679462a579182ee9af09faad66afcf2cc38a2c81a77b4e185141531947d5bc35fd31b1647e7a8e1f4d9ee9a82bb846b5d45c79d45e505143d6db7976da60da1ac5c14f95b635fcf9cc024b04696695a2398938e9c1d5382a985f971cf0a61bf8290b56252ee396f93d9bccbc8584c550bad4876d629afdcef0bda51d3c0ed6330a8e32b900812df39d6a748af46db0cc2b2717e2a76be6cd4484f99f35db5c8ed4c664cfd450c0ff756c1b73897ca10a6fefe91376b3e0b10bcb98f688e2a7ade7d60c1eaba2d602df1b5db37919437a0c4b5d7f4933f29ba59b717"}, @NFTA_DATA_VALUE={0xdd, 0x1, "2ff1aa391443cb70c26f7f41500c3849b7aab73061eccd6a85f1c00fc19a93626f40a9bcb85c8d00ba000aedf5043bed26d3e8b237c171ec1e1951c3453fecbd1a9b1a4770fddc52c80404d86a1dff0ab1194b909c122097f3aaf5eb30be4d5ce2f2917cc0ab70b28a39edf51c86f0394ea2809573c0b43f40e0b5a0fc78afa10c253c587e4d7bf73b44e94cfafbbc2eae43f5116def6ec1506f19a524cadc0410dea27acb19a78df4da674af742866785de6090d2ae0bf5f4620f8d7da5235925c0c5e1800812f61737e1889bc32cdd8016b1c87b9c594f3a"}]}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, {0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_USERDATA={0x86, 0x7, 0x1, 0x0, "c9b1526a279df13a03629129cfc2451059cfd745f62a9df262c85c5cd32a9d108110a4a155c4a78e08875f24618074eba49e9a60e142c0606e6f30a63af878e7a03db7e8c2de1863298d0b67e64142481e53e13fd205eb380f75161b02fca97513b90c6e8274192e84c07abd322345f97a1561da403323fe80c6e64f0b8956fc0ceb"}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9100}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xd9}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}]}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1680}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0)
write$binfmt_elf32(r4, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x9, 0x101, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0)
ioctl$SIOCSIFMTU(r10, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40})
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r11, r11, 0x0, 0x200000)

3.755036979s ago: executing program 5 (id=1673):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e90924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00031201005a04030700"], 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000302620b000203"]}, 0x0) (async, rerun: 32)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x501043)
syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x102, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r3 = socket(0x2d, 0x2, 0x0)
getsockopt$inet_pktinfo(r3, 0x11d, 0x8, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async)
execve(0x0, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) (async)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000000)={0x11, 0x3, r7, 0x1, 0x0, 0x6, @local}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)

2.412311581s ago: executing program 2 (id=1674):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', <r4=>0x0})
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x50)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101802, 0x90)
r6 = syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x80000, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x3}}, {@allow_other}], [{@appraise}, {@euid_lt={'euid<', 0xee01}}, {@dont_hash}]}}, 0x1, 0x0, &(0x7f0000000540)="f6560d251adc45ed0743a7a842ca76ff5aaf092a520545bd3e02485572a3c85cbc03ddecaa4590c194b92aa26dfa65cc0295795df2da380d4d80672ea0a7e2e4d10174b11bbae9d236d1cb66db8771446a297d7b0e68936fbf1aa4f6e1b2a1ccc3bd7b75e31035b45aaf6a42fe49050f5ee7a629f901b6b8c4475971bad04102d132f9d7f4922a79c1e543e3afe49e97d685237d214f0e1b71de5effda9c9a701e5a6f1f8d3853738bae3b7a2669b6b237bb18b66cbb81ff9b929fab85b5b15fd78b9eb5582a9765254d75059ac4")
renameat(r5, &(0x7f0000000380)='./file0\x00', r6, &(0x7f0000000640)='./file0\x00')
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000680), &(0x7f00000006c0)=0x8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x6000)
r8 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000007c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2})
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000800)={0x5, @raw_data="1f09f32c8e2f4a91098ba19f51348f0e377f8031c5f22dd2acda44f66d2d04d6c83025519a7289e8552e863272c219bc0e470cbcbad51b3c0f0d6818c129c4d6028e0fb52b0088db20e8f608b6e7cc12d888c37aa89b4e9a6cd2da5682a222e90d08749946b862909b1c2408b30a9e52555445669749f7f7a1b1a51685293ab0400fb51308f704b9f41a00623cc6e67eb2a64a3fd36e3daa1a08a35fe42f4b1da7424eb039572dc5c0cf5c9f799993c0119e784bda3930b4a09159bef108abf84c36bc02433fb7f0"})
writev(r8, &(0x7f0000000bc0)=[{&(0x7f0000000900)="f7fd824158a6cc18fd716016d783f80fe643c34d90e1dedd68cbe16a1d5a02338bfda5aa5e2382e898f743afa550d100f1e0b4696f95682c79c457983f9763a85fffe1afc46c11d4fb3ec227d908bda3d106894e", 0x54}, {&(0x7f0000000980)="4a9407336da70c1652441232641f1d08a97da300375e27d0810812a3e175b404fde4500f77e4cba86abff2e96abad1a1b6e50f", 0x33}, {&(0x7f00000009c0)="8323bfded7fb58d1910ab559cd231890276b035d5ed9a07e961ad307af03b0a89693fc06ff984c3f7f2bf16804560f84c2c846bcc64df939305910f8738c8d238352dc41f18dc6dd057f5a391920acaf13f3c836df2acbbe07d1e7339c4cb4c501a2e766d84c71755dc32df7e7c95cadc9f4694fe7e7b5304a3abf86795972254ffbe0838c3dfaedc6c9a9ed6b060daf9b65899530a049bf0f39545c2813886f45be5835851e0c66ae41c3bdd5fdead5af801b521cbc27ad084478bc029786a7108b5778b0236987994570b1397cc21e0344d3ee5e036b917c0435c8cfb79ae678", 0xe1}, {&(0x7f0000000ac0)="6692bbaf217521fe0977803d02b8ad899c327cb68ce62307d77c9da72e5cb1f661913b9f49dfd83565401f810f55cf9a23cd6986d668d3e57e1ebd8b1a10c031e3914b639753281b146bbe85c4d2a20a6e18597504562e7f78ba81100d9de82eb2ce03e006433199bbee3429711dbfae1b471069ffef8c62adb2666511a48fe45ae8ddd55d59263c7902e4fdbcf843980ceed29baf0d043cadfbd153b283e8844f49237b16c9ed66d0b82ce063f915e826ec222a39e471eb3b1b4064dd612658f1cf1ae253d04af2d573edc29ff95fea8e43101412a68efa79d7402a8d9f90766997", 0xe2}], 0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000000c00)={{0x1, 0x1, 0x18, <r9=>r6, {0x3}}, './file0\x00'})
ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000c40)={0x0, 0x0, {0xfffffff9, 0x0, 0x3015, 0x1, 0xa, 0x1, 0x1, 0x5}})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='.\x00', 0x0, 0x10}, 0x18)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000d40)='posixacl\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000dc0)={{r8}, 0x2, &(0x7f0000000d80)=[0xf, 0x9], 0x2, 0x1, 0x1})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000001a80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000e80)={0xbb8, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x71a25469, 0x3d}}}}, [@NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3b4, 0x5, 0x4, 0x80, 0x6, 0x8000, 0xe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x240, 0x3, 0x6, 0x6, 0x7f, 0x1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0xb8, 0x8, 0x3, 0x9, 0xec, 0x8675]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x9, 0x4, 0x40, 0x9, 0xfff, 0x2]}}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x5}, {0x6, 0x3}, {0x3, 0x9}, {0x4, 0x8}, {0x3, 0x5}, {0x6, 0x2}, {0x6, 0x4}, {0x5, 0x9}, {0x7, 0xa}, {0x4, 0x7}, {0x2, 0x5}, {0x2, 0x8}, {0x3, 0xa}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x1}, {0x2, 0x5}, {0x5}, {0x1, 0x8}, {0x0, 0xa}, {0x6}, {0x4, 0xa}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x3, 0x4}, {0x4, 0x5}, {0x5}, {0x3, 0xa}, {0x7}, {0x1, 0x4}, {0x7, 0x8}, {0x7}, {0x5}, {0x1, 0x6}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x8}, {0x2, 0x9}, {0x3, 0x2}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x9}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x3}, {0x7, 0x3}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8e, 0x5, 0x2, 0xfff, 0x9, 0x1, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x6, 0x6, 0x3, 0x1ff, 0xb1b, 0xdbf, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d44, 0x8, 0x200, 0x7fff, 0x3, 0x8, 0xbb3e, 0x14]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x3, 0x1, 0x1b, 0x60, 0x6c, 0x5, 0x3, 0x3, 0x24, 0x60, 0x3, 0x1b, 0x1b, 0xb, 0x7b, 0x2, 0x12, 0x1]}]}, @NL80211_BAND_2GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x2c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0x5}, {0x5, 0x7}, {0x0, 0x6}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x3}, {0x7, 0x9}, {0x7, 0x4}, {0x0, 0x3}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0xe, 0xd, 0xfffa, 0xfafc, 0x800, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x1}, {0x7, 0xa}, {0x3, 0x2}, {0x2, 0x6}, {0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x3, 0x5}, {0x6, 0x5}, {0x2}, {0x1, 0x5}, {0x6, 0x7}, {0x3, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x2, 0x3}, {0x2, 0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x7}, {0x3}, {0x3, 0xa}, {0x1, 0x9}, {0x1, 0x3}, {0x7, 0x2}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x2, 0x6}, {0x7, 0x2}, {0x5, 0x4}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x1c0, 0x7, 0x4, 0x1, 0x27f6, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfe23, 0x0, 0x7, 0x41d5, 0x0, 0x9, 0x0, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x48, 0x3, 0x6, 0x30, 0x36, 0x36, 0x30, 0xb, 0x48, 0x16, 0x60, 0x12, 0x3, 0x5, 0x30, 0x5, 0x6c, 0x12, 0x30, 0x6, 0x48, 0x12, 0x4, 0x6c, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x7}, {0x6, 0x7}, {0x4, 0x8}, {0x4, 0x9}, {0x3, 0x5}, {0x2, 0x3}, {0x2, 0x1}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x5, 0x1}, {0x3, 0x3}, {0x3, 0x8}, {0x7, 0x1}, {0x2, 0x9}, {0x2, 0x2}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x4, 0x4}, {0x3, 0x7}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x3, 0x7}, {0x1, 0x6}, {0x6, 0x1}, {}, {0x0, 0xa}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x9}, {0x0, 0x6}, {0x5, 0xa}, {0x3, 0x5}, {0x1, 0x6}, {0x7, 0x5}, {0x0, 0x8}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x6, 0xa}, {0x1, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0xa}, {0x7, 0x1}, {0x5, 0x6}]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf5a, 0x0, 0x6, 0x2, 0x2e, 0x8, 0xe0, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x2, 0x1, 0x7, 0x1, 0x6, 0x1000, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x40, 0x94, 0x2, 0x6, 0x4a04, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x4, 0x36, 0x12, 0x16, 0x6c, 0x6, 0x30, 0x48, 0x18, 0x3, 0x9, 0x2, 0x6c, 0x1, 0x3]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x5}, {0x7, 0xa}, {0x3, 0x3}, {0x7}, {0x6, 0x6}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x3}, {0x1, 0x2}, {0x7, 0xa}, {0x4, 0x1}, {0x4}, {0x6, 0x2}, {0x6, 0x7}, {0x6, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x5}, {0x3}, {0x6, 0x8}, {0x2, 0x4}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0xa}, {0x6}, {0x4}, {0x1, 0x8}, {0x2, 0x6}, {0x3, 0x7}, {0x7, 0x2}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0xa}, {0x4, 0x8}, {0x4, 0x1}, {0x4, 0x8}, {0x5, 0x7}]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x6, 0x7f, 0x90, 0xfff7, 0x6, 0xffff, 0x4]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x6, 0x1}, {0x4, 0x1}, {0x1}, {0x7, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {}, {}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x8}, {0x0, 0x6}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x4, 0x6}, {0x1}, {0x1, 0x6}, {0x7, 0x8}, {0x1, 0x2}, {0x1}, {0x7, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x6, 0x4}, {0x4, 0x8}, {0x6, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x4}, {0x0, 0x5}, {0x5}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x4}, {0x1, 0x8}, {0x5, 0x5}, {0x2}, {0x0, 0x3}, {0x6}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0x4}, {0x4, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x5, 0x8}, {0x5, 0x1}, {0x6, 0xa}, {0x6, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x8}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x6}, {0x4, 0x2}, {0x3, 0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x1}, {0x0, 0x7}, {0x6, 0x8}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x5}, {0x7, 0x9}, {0x0, 0x7}, {}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x9}, {0x2, 0xa}, {0x0, 0x6}, {0x5, 0x2}, {0x4, 0x7}, {0x5, 0x3}, {0x4}, {0x7, 0x9}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0xb289ee237d072944, 0x3, 0x9, 0x16, 0x9, 0x4, 0x16, 0x4, 0x1b]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x0, 0xfff8, 0x1, 0x9, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x6c, 0x2, 0x48, 0x4, 0x24, 0x2, 0x60]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x6, 0x1, 0x8, 0xfe79, 0x53, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x80}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x40, 0x4, 0x2, 0x4, 0x4, 0x48, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x6c, 0x24, 0x6, 0x24, 0x2, 0x48, 0xb, 0x5e, 0x4, 0x24, 0x6c, 0xc, 0x18, 0x24, 0x4, 0x24, 0xb, 0x58, 0x28, 0x1b, 0x24, 0x2, 0x48, 0x25]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x9, 0x0, 0x24, 0x6, 0x53, 0x5, 0x1, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0xffff, 0x0, 0x6, 0x3, 0x4, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x298, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x52, 0x66, 0x7ff, 0x0, 0x3, 0x3, 0x2f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x51b3, 0x6, 0x4, 0x200, 0x4, 0x8]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x9, 0xc, 0x36, 0x48, 0x16, 0x1b, 0x16, 0x1, 0x30, 0x48, 0x3, 0x2, 0x24, 0xb, 0x24, 0x1b, 0xb, 0x6c, 0x36, 0x5, 0x60, 0x1b, 0x9]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x0, 0x0, 0x4, 0x6, 0x6, 0x7, 0x7]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xac, 0x1ff, 0xf7c, 0x0, 0xc89, 0x6460, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xdb2, 0x7, 0x2, 0xfff, 0x0, 0xfff3, 0x9]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x4, 0x2}, {0x6}, {0x0, 0x7}, {0x4, 0x5}, {0x6, 0x2}, {0x5}, {}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x2}, {0x3, 0x8}, {0x5, 0x1}, {0x5}, {0x3, 0x5}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x5, 0x4}, {0x5, 0x2}, {0x3, 0x9}, {0x3}, {0x5, 0x3}, {0x1}, {0x7, 0x6}, {0x2, 0x9}, {0x2, 0x5}, {0x3, 0x6}, {0x3, 0x7}, {0x1, 0x8}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x1}, {0x5, 0x9}, {0x1, 0x5}, {0x1, 0xa}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x4}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x5, 0x2}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x2}, {0x3, 0x8}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xd, 0xf, 0x0, 0x5, 0x1, 0x8, 0x9]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x7}, {0x1, 0x5}, {0x2, 0x5}, {0x2, 0x6}, {0x6, 0x6}, {0x3, 0xa}, {0x4, 0x8}, {0x2}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x7}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x7}, {0x7, 0x5}, {0x0, 0x6}, {0x5, 0x3}, {0x4}, {0x7, 0x2}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0x3}, {0x2, 0x9}, {0x4}, {0x6, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x3, 0x4}, {0x4, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x8}, {0x1, 0x2}, {0x3, 0x8}, {0x0, 0xa}, {0x2, 0x9}, {0x6}, {0x0, 0x6}, {0x5, 0x1c}, {}, {0x3, 0x7}, {0x3, 0x7}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x9, 0x8aa5, 0x1, 0xb2, 0x4, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdbe0, 0x9, 0x800, 0xe, 0x10, 0x1ff, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x6, 0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x5, 0x2}, {}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x6, 0xc, 0x3, 0x36, 0x2, 0xc, 0x5, 0x60, 0x12, 0x9, 0x12, 0xb, 0x2, 0x6c, 0x1]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x4}, {0x0, 0x9}, {0x7, 0x9}, {0x7, 0x8}, {0x1}, {0x1, 0xa}, {0x2, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x28, 0x1, 0x1, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x6, 0x1, 0x1, 0xc, 0x4, 0xfffe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x4}, {0x3, 0x2}, {0x7, 0x9}, {0x3, 0x1}, {0x7, 0x3}, {0x7, 0x1}, {0x3, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x7}, {0x2, 0x5}, {0x7, 0x1}, {0x4, 0xa}, {0x2, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x1, 0xd, 0x3, 0x800, 0x1bd, 0x9, 0xffff]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x1, 0x101, 0x81, 0x95, 0x7f, 0x7d45]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x7, 0x6, 0x5, 0x7, 0x3, 0x1ff]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0xa}, {0x6, 0x8}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x8}, {0x6, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x4}, {0x7}, {0x7, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x7, 0x4}, {0x6, 0x4}, {0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x2813a8949359c2b8, 0x2, 0x30, 0x2, 0x24, 0x2, 0x2, 0x1, 0x24, 0x12, 0xb, 0x30, 0x36, 0x2, 0x9, 0x5, 0x1b, 0xc, 0x16, 0x1b, 0xc, 0x1a, 0x30, 0x5, 0x6, 0xd, 0x1, 0xc, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x270, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x5, 0x200, 0x6, 0x8, 0x9, 0x9, 0x1]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x3}, {0x4, 0x1}, {0x2, 0x6}, {0x4, 0x4}, {0x7, 0x8}, {0x4}, {0x4, 0x2}, {0x2, 0xa}, {0x4, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x1}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0xa}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0x9}]}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x6c, 0x6c, 0x2, 0x36, 0x60, 0x4, 0x5, 0x60, 0x16, 0x1, 0x24, 0x0, 0x24, 0x2, 0x2, 0x1b, 0x36, 0x6c, 0x2, 0x1b, 0x1b, 0x12, 0x18, 0x2]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x7, 0x7}, {0x7}, {0x6, 0x3}, {0x6, 0x5}, {0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x2, 0x4}, {0x5, 0x9}, {0x3, 0xa}, {0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x3}, {0x6, 0xa}, {0x5}, {0x2, 0x6}, {0x4, 0x3}, {0x2, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x9}, {0x0, 0x7}, {0x2, 0xa}, {0x0, 0xa}, {0x4, 0x2}, {0x3, 0x2}, {0x4, 0x1}, {0x7}, {0x6, 0x4}, {0x3, 0x1}, {0x7, 0x7}, {0x5, 0x9}, {0x4, 0x3}, {0x1}, {0x7, 0x2}, {0x5}, {0x4, 0x6}, {0x0, 0x8}, {0x5, 0x6}, {0x5, 0x6}, {0x6, 0x2}, {0x1}, {0x1, 0x2}, {0x1}, {0x7, 0x5}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x40, 0x0, 0x3, 0x6, 0x9, 0x4, 0x7fff]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x5}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x4}, {0x7, 0x3}, {0x3, 0x4}, {0x7}, {0x5, 0x4}, {0x7, 0x13}, {0x2, 0x8}, {0x0, 0x3}, {0x1, 0x2}, {0x7, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x5, 0xa}, {0x6, 0xa}, {0x7}, {0x6, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {0x6}, {0x1, 0x8}, {0x3, 0x8}, {0x5, 0x7}, {0x7, 0x1}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {}, {0x1, 0xa}, {0x5, 0x5}, {0x3, 0x9}, {0x4, 0x5}, {0x7}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x5}, {0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {}, {0x2, 0xa}, {0x2, 0x3}, {0x0, 0x1}, {0x3, 0x7}, {0x0, 0x1}, {0x7, 0x8}, {0x1, 0x9}, {0x3}, {0x1, 0x6}, {0x1, 0x6}, {0x4, 0xa}, {0x5, 0x9}, {0x4, 0x2}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x5}, {0x0, 0x4}, {0x5, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x4, 0x5}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x7}, {0x6}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8000, 0xffff, 0x2, 0x800, 0x1, 0x5, 0x40]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x28b, 0x10, 0x2e4, 0x5, 0x6, 0x0, 0xc816]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x952c5859ef0b3613, 0xc, 0x36, 0x18, 0xc, 0x61, 0x88c33db820874142, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0xfff7, 0xd1, 0x2a, 0x8, 0x8, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x92, 0x7, 0xc, 0x7fff, 0x9, 0x9, 0x8001, 0x5]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x100, 0x3, 0xdad6, 0x200, 0x822]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1b, 0x60, 0x9, 0x6c, 0x30, 0x18, 0x12, 0x0, 0x0, 0x30, 0x9, 0x48, 0xc, 0x60, 0x6c, 0xb, 0x60, 0x3b, 0x12, 0x2, 0x3, 0x1b, 0x12, 0x4, 0x1b, 0x30, 0x4, 0x18, 0x12, 0x36, 0x36]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x1, 0x6, 0x30, 0x6c, 0xb, 0x36, 0x36, 0x9, 0x5, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x8}, {0x3, 0xc}, {0x7, 0xa}, {0x7, 0x9}, {0x1, 0x2}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0x6}, {0x6, 0x1}, {0x7, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0x5}, {0x7}, {0x7, 0x4}, {0x5, 0x2}, {0x4}, {0x2, 0xa}, {0x2, 0x6}, {0x4}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x3}, {0x3}, {0x3}, {0x7, 0x9}, {0x7, 0x9}, {0x6, 0x7}, {0x6, 0x9}, {0x3, 0x6}, {0x4}, {0x4, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x128, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x36, 0x24, 0xc, 0x18, 0x6c, 0x4, 0x30, 0x1b, 0x5, 0x60, 0x9, 0x3, 0x1, 0x36, 0x12, 0x18, 0xc, 0x12, 0x16]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x8}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x6, 0x7}, {0x1}, {0x5, 0x4}, {0x6, 0x2}, {}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x3}, {0x4}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0x3}, {0x2, 0x1}, {0x4, 0x9}, {0x2, 0x5}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x7, 0x7}, {0x1, 0x8}, {0x5, 0x3}, {0x7}, {0x5, 0x7}, {0x7, 0x7}, {0x2}, {0x3, 0x6}, {0x4, 0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x6, 0x8}, {0x3, 0x1}, {0x6, 0x4}, {0x1}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x7}, {0x2, 0x4}, {0x3, 0x6}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x9}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x8}, {0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x5, 0x4}, {0x1, 0x8}, {0x6, 0x2}, {0x7, 0xa}, {0x1, 0xa}, {0x5, 0x6}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x9, 0x5, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5ed, 0x4, 0x30, 0x5, 0x7ff, 0x29, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x9}, {0x3, 0x8}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0x2}, {0x1}, {0x7, 0x1}, {0x6, 0x4}, {0x3, 0x6}, {0x4, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x6, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x5, 0x1}, {0x4, 0x5}, {0x0, 0x1}, {0x2, 0x9}, {0x5}, {0x6, 0x7}, {0x7, 0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x9}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x3, 0x2}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8a, 0x9, 0xfeaa, 0x2, 0x2, 0xfffd, 0x2]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x8}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0x4}, {0x6, 0x4}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x7}, {0x7}, {0x7, 0x3}, {0x1, 0x9}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x9}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {0x1, 0x9}, {0x7}, {0x2}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x1, 0x8}, {0x7}, {0x1, 0x8}, {0x5, 0x2}, {0x3, 0x6}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x6, 0x4}, {0x5, 0x1}, {0x7, 0x8}, {0x3, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x7}, {0x3, 0x4}, {0x6, 0x8}, {0x5, 0x4}, {0x1, 0x2}, {0x7}, {0x3, 0x4}, {0x1, 0x7}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x3}, {0x2, 0x3}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x5, 0x6}, {0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x9}, {0x2, 0x8}, {0x7, 0x2}, {0x1, 0x8}]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x3, 0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x8}, {0x5}, {0x1}, {0x1, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x1}, {0x0, 0x1}, {0x6, 0x3}, {0x4, 0x7}, {0x6, 0x1a}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {}, {0x2, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7ff, 0x7, 0x4, 0x9, 0x5, 0xfff7, 0xa3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0xfff, 0x4, 0xc89, 0xa6, 0x0, 0x200]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x3, 0xff, 0x9, 0x49c, 0x100, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x1b, 0x6, 0x36, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x6}, {0x5, 0xa}, {0x7, 0x8}, {0x6, 0x2}, {0x1}, {0x2, 0x5}, {0x6, 0x6}, {0x7, 0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x6, 0x4}, {0x0, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x2, 0x5}, {0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x4}, {0x7, 0x3}, {0x6, 0x4}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x7}, {0x0, 0x5}, {0x4, 0x9}, {0x7}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x3}, {0x0, 0x5}, {0x4}, {0x2, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x7, 0xa}, {0x5, 0x8}, {0x1, 0x3}, {0x2}, {0x1, 0x3}, {0x1, 0x4}, {0x6}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0xa}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x5, 0xc2b, 0x5, 0x7, 0x182, 0x1, 0x40]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4080}, 0x40041)
ioctl$HIDIOCGRAWINFO(r9, 0x80084803, &(0x7f0000001ac0)=""/107)
quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r7, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000001b40), &(0x7f0000001b80)=0x14)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c00), r9)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0x84, r11, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda71}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2725}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd88a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x84}}, 0xc0c1)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001dc0), r0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xf4, r12, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x14}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1a}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x61}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x1d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0xc044}, 0x8000)

2.310907691s ago: executing program 0 (id=1675):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, '\x00', "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]})
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x1, 0x80, 0xfffffffd, 0xfffffffd, "01e60000000000000034dbb39fe6083a", 0xff, 0x0, 0x0, 0x0, 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000004180), 0xff77)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

1.998946381s ago: executing program 2 (id=1676):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) (async)
modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0)
read$alg(r2, &(0x7f0000000240)=""/4096, 0xfffffdef) (async)
write$cgroup_subtree(r2, &(0x7f0000000040), 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
wait4(0x0, &(0x7f00000000c0), 0x1, 0x0) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r6=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4809}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc}]}]}]}, 0x50}}, 0x800)

1.997753597s ago: executing program 5 (id=1677):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000080904"], 0x0)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402)
write(r0, &(0x7f0000000100)="bce164937e04826a37d5212caaea5fb0810663da71a6f8c266a4bdcae3f61b6aca9ea9ae", 0x24)
r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x0)
r2 = dup(r1)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$alg(r2, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c)
syz_emit_vhci(0x0, 0x7)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'})
r8 = add_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000500)="79b225f0369819fd0502eb7ef17c2189f88ec2bbf32bb2ebdb03a872399f4c1c9f9c0d6f34e02a65b40a8c4389bef96351039975719b9483283deb6e81b8cf37472ae4850f907f013e895f2f4cdfc2aac2b8e6a9b2f72435dad25fbafcd9ceff426a8aaf4c4266749e645515ef70069bcf1096c9907ca89396847e407c897d956d5f37dfee9c85d65597d3f8ff8868b2dbabcdfaaa606867e3e2448e86", 0x9d, 0xfffffffffffffff8)
keyctl$read(0x1f, r8, &(0x7f0000000180)=""/61, 0x3d)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380))
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r9, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000480)={0x28, 0x5, 0x0, 0x0, 0x3, 0x7, 0x3ffc})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)

1.914007051s ago: executing program 0 (id=1678):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x101, {{0xa, 0x0, 0x0, @private0}}}, 0x88)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x139840, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
r2 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00002b8000/0x3000)=nil, 0x3000, 0x3)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
setpriority(0x1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
mprotect(&(0x7f0000180000/0x4000)=nil, 0x4000, 0x1)
mlock(&(0x7f000001e000/0xf000)=nil, 0xf000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

1.541397389s ago: executing program 3 (id=1679):
mremap(&(0x7f0000007000/0xc000)=nil, 0xc000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
socket(0x28, 0x5, 0x0) (async)
socket(0x28, 0x5, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1d, 0x80a, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000041000390400f5f5000000000000000000", @ANYRES32=r4, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac141400"], 0x38}}, 0x20000080)
sendto$packet(r1, &(0x7f0000000000)='5', 0x11, 0x40, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x9, 0x6, @broadcast}, 0x14)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @local, 0xc}, 0x1c)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0xffffff71}], 0x1, 0x0, 0xb, 0x804c044}, 0x881)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r10, 0x0)
accept4$vsock_stream(r10, 0x0, 0x0, 0x800)

1.286696144s ago: executing program 4 (id=1680):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x0, "207d3d00000055c51b08700c1e0adb4f000000001200000000000900"})
syz_emit_ethernet(0x66, &(0x7f0000000880)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x30, 0x0, 0x0, @local, @local, {[@dstopts={0x89}], "d6eaf5e9114aa92d6ef4c971edf1f3f32acdb1339557d47f451df212f2ec084f845725165a4bdce8"}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10})
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000580)=@qipcrtr, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/13, 0xd}], 0x3, &(0x7f0000000800)=""/18, 0x12}, 0x9}], 0x1, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r4 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r3, 0x0})
io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f000000a380)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x2004, 0x597283ae1ac80761, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r7, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_uring_enter(r4, 0x243f, 0xd983, 0xe9, &(0x7f0000000300)={[0x6]}, 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r9, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1", 0x1001}], 0x1)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0)
close(r7)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000200000014000480100001800c00010062697477697365000900010073797a300000000009a7d80073797a320000000004010000140a01040000000000000000000000000900010073797a3000000000080003400000000508000340000000080900010073797a31000000000900010073797a3000000000b100080019477d83caadeedd5346c61ac63f4d20d92bfd36f19b15d313328a76b1538480f1741a30d288694a3d51cadab9182feaf2539617382f2f9a10731d542875078be07d534c207ebe0ce0e1d119c1fd0883cf2d2f18df2efb487c2d66d4153c83a04c7283b0e439dafc9228cea58cc5c56a186036c8e2c861393ae76d2ae6b1808cce53a986b2e526d7459a8dab2a2c94f5d2a97ff9b3b1876dd28f22480a8f0e8ea9975f4dcc803ead5adadd88230000000800034000000001140000001100010000000000000000000000000a"], 0x16c}}, 0x0)

1.131447986s ago: executing program 3 (id=1681):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
shutdown(r0, 0x1)

995.199271ms ago: executing program 3 (id=1682):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000580)=ANY=[])

846.94957ms ago: executing program 0 (id=1683):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b750009058389b52dc64e0d8888471b5f8b8bfc1fbaf1dd25f40d1ed99105b7c1373d168a8b3a54099593266ec7ca45fbed5a987d0f5c02b585a609f46bfdb66eb08c057d3d01878a416cf988391600f0178cf60134d2f66146eb748ae7701bcc1b10574f4b37188cfe101c7ed58d453659eb0f518a3288e35c59d112d025354219f1442c53132a23ebfa611c03b7751ffcbfb2ed8b375fb16ed865a7af5750d50882c875ffffea59c7bcf3e3be65d2b27d05607c148e23b80000000000"], 0x0)
syz_usb_connect$uac1(0x1, 0xbc, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x5, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xab}, [@feature_unit={0xd, 0x24, 0x6, 0x6, 0x5, 0x3, [0x5, 0xa, 0x3], 0x5}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x6, 0x4, [0x7, 0x5, 0x9, 0x4], 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x3, 0x9, {0x7, 0x25, 0x1, 0x83, 0x9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf, 0xffff, 0xaa, "a62ab33eb92db817"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x5, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd9, 0x1, 0x5, 0x8, "03", 'ii'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x2, 0x2, 0x9, "97265a", 'v'}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x3, 0x40, {0x7, 0x25, 0x1, 0x1, 0x5, 0x2}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x7, 0x56, 0x0, 0x20}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2419}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x406}}]})
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000)

761.073764ms ago: executing program 2 (id=1684):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x11, 0xc, "6d1a5711961f294c25dd2c389b"}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xeb1187208edb852f}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x0, 0x0, 0x0, {0xf, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1faa7304}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWRULE={0x15c0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x1498, 0x4, 0x0, 0x1, [{0x13e0, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x13d0, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x1118, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "b348bdb4904e03b51d3efa1322d042722526f62fd91b88f76a3cab4689fc3477cdd0e15c08aa639ed49eba83022b1e92a18d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xc6, 0x1, "4d822d1a50ed0bc20762f6bae6f4fc986f2b41b6673ec951ef3cbb5cf756675629c2a51346cc943252a946bf47d5f9b85ab42b37dfefcb6b5d3e396baba45ddbf3597d473edc26a3a62232088cce423f0d65fb124e6306ad8cbd5ba63e82512d7aa6edda43faf0e2f8522cf948fbcdb3eed244edc23babddfe3448b56a3ea31abc5b69743ae2fe9c2af337daa55b751c81568775784f8cf18d873a0f60e4a37fbc0559660f557e7492adbc60faf94eb54b787def9afdac1e8d93be7fb5fe2e77b24d"}]}, @NFTA_RANGE_FROM_DATA={0x2b4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "945ba2a9c72dbb4204d032ca4e348bc2ded96b8d9fb8b8a38a581eea0d18db41f6902a04240210edc63b39507f350f2112c6dcf933b63fc5ddc9c700a510e82df642e6610f2af1729db988c4737939f41d6c0c50ddd061fa64e8b8d8e23163f261ee3576fd89c244fd9f00f254fcf5760915ca16182d"}, @NFTA_DATA_VALUE={0xfb, 0x1, "f540280daafe6692795cb73ccb99878ab0cfbebe7bf2a4f1e2b6d8e679462a579182ee9af09faad66afcf2cc38a2c81a77b4e185141531947d5bc35fd31b1647e7a8e1f4d9ee9a82bb846b5d45c79d45e505143d6db7976da60da1ac5c14f95b635fcf9cc024b04696695a2398938e9c1d5382a985f971cf0a61bf8290b56252ee396f93d9bccbc8584c550bad4876d629afdcef0bda51d3c0ed6330a8e32b900812df39d6a748af46db0cc2b2717e2a76be6cd4484f99f35db5c8ed4c664cfd450c0ff756c1b73897ca10a6fefe91376b3e0b10bcb98f688e2a7ade7d60c1eaba2d602df1b5db37919437a0c4b5d7f4933f29ba59b717"}, @NFTA_DATA_VALUE={0xdd, 0x1, "2ff1aa391443cb70c26f7f41500c3849b7aab73061eccd6a85f1c00fc19a93626f40a9bcb85c8d00ba000aedf5043bed26d3e8b237c171ec1e1951c3453fecbd1a9b1a4770fddc52c80404d86a1dff0ab1194b909c122097f3aaf5eb30be4d5ce2f2917cc0ab70b28a39edf51c86f0394ea2809573c0b43f40e0b5a0fc78afa10c253c587e4d7bf73b44e94cfafbbc2eae43f5116def6ec1506f19a524cadc0410dea27acb19a78df4da674af742866785de6090d2ae0bf5f4620f8d7da5235925c0c5e1800812f61737e1889bc32cdd8016b1c87b9c594f3a"}]}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, {0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_USERDATA={0x86, 0x7, 0x1, 0x0, "c9b1526a279df13a03629129cfc2451059cfd745f62a9df262c85c5cd32a9d108110a4a155c4a78e08875f24618074eba49e9a60e142c0606e6f30a63af878e7a03db7e8c2de1863298d0b67e64142481e53e13fd205eb380f75161b02fca97513b90c6e8274192e84c07abd322345f97a1561da403323fe80c6e64f0b8956fc0ceb"}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9100}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xd9}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}]}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1680}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0)
write$binfmt_elf32(r4, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x9, 0x101, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0)
ioctl$SIOCSIFMTU(r10, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40})
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r11, r11, 0x0, 0x200000)

659.005325ms ago: executing program 3 (id=1685):
socket(0x2a, 0x3, 0x0)
r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2)
ftruncate(r0, 0x2)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
rt_sigaction(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380))
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x54}}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000065355100000000000c008f0000000000000000000c0090000000000000000000000001007063690000000200303030303a30303a31302e300000000000008e000300000000008f000500000000000000000090007f00000000000000000001007063690000000200303030303a30303a31302e300000000000008e000200000000008f0007000000000000000000bcb2e016c590004000000000000000000001007063690000000200303030303a30303a31302e300000000002008e000000000000008f000400000000000000000090000700000000000000"], 0x54}}, 0x0)
read$FUSE(r2, 0x0, 0x0) (async)
read$FUSE(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0)

355.031585ms ago: executing program 4 (id=1686):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=@newsa={0x13c, 0x10, 0x1, 0x1c, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x2, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x4c, 0x1, {{'rmd160\x00'}, 0x20, "d5deb33e"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)

354.55827ms ago: executing program 3 (id=1687):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_io_uring_setup(0x3ff1, &(0x7f0000000500)={0x0, 0x0, 0x40, 0x0, 0x4}, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x2000000, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00')
fchdir(r3)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000140)={0x8b, "bd905666c547e9d48a8c5f704551cd8bae79715724793d089f23e1de226dd3baa1ec7a4315d620c99612b75e129724d4a6a6eb2e3293ae0654a0e93a88979b4e14f79a9c545107f827e6f61bdf16280e574fe2d59e480750e5eb8faec4a424095b6e8f2d9a2f430740d317bc5819aaaefed4c278c7d1335b2738685798dc1b94ff3d312b5061cbc496eebe"})
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_io_uring_setup(0x3ff1, &(0x7f0000000500)={0x0, 0x0, 0x40, 0x0, 0x4}, &(0x7f0000000040), &(0x7f00000000c0)) (async)
io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x2000000, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') (async)
fchdir(r3) (async)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000140)={0x8b, "bd905666c547e9d48a8c5f704551cd8bae79715724793d089f23e1de226dd3baa1ec7a4315d620c99612b75e129724d4a6a6eb2e3293ae0654a0e93a88979b4e14f79a9c545107f827e6f61bdf16280e574fe2d59e480750e5eb8faec4a424095b6e8f2d9a2f430740d317bc5819aaaefed4c278c7d1335b2738685798dc1b94ff3d312b5061cbc496eebe"}) (async)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x2}) (async)

0s ago: executing program 4 (id=1688):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904ecff09030000000921000000012322000905810308"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0x56, {0x56, 0xe, "93d22a3e8126090c49e144c6e9b333b890743d064567488c45fa2fb74d0038fa282b83de173d60afe8c7e2410810604e88745b24ab1335a40f6d4bb399280da6736081b89b0f2f1526dd0ba9d71ebbd9788a9aa4"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000100)={0x0, 0xf, 0x60, {0x5, 0xf, 0x60, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0xd, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0xdd, 0x60, 0x0, 0x9}, @generic={0x49, 0x10, 0x2, "0235b80e9d2cae43b7e683c7a633aa6c70c904e98dd608f20aeaf35cdfc3c2f599ebdd173d0438d76cd5c547d4f3299ee33ad21ca36e745ba73594a48574e22af11d3d976bee"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x10, 0x9, 0x2, "c2cedbe7", "e2879706"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x0, 0xb, 0x9, 0x3, 0x400, 0x7}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x20, 0x15, 0x33, "f7a1a081a7de6c4e7a3e0410df2976cbdbccdb7b482818621ac9e99b167497341285df402fdc9834880b89609373f2eab15c72"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x800, 0x4}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000400)={0x40, 0xb, 0x2, "788f"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, "9e5e"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x1}})
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

kernel console output (not intermixed with test programs):

: vblank timer overrun
[  474.299685][   T30] audit: type=1326 audit(1756415236.482:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.0.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fb18ebe9 code=0x7ffc0000
[  474.322314][    C0] vkms_vblank_simulate: vblank timer overrun
[  474.844865][T11325] netlink: 'syz.3.1368': attribute type 29 has an invalid length.
[  474.855720][T11325] netlink: 'syz.3.1368': attribute type 29 has an invalid length.
[  474.867539][T11325] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1368'.
[  474.877662][T11325] unsupported nla_type 58
[  475.776497][T11310] syz.0.1359 (11310): drop_caches: 2
[  476.439486][  T958] usb 5-1: USB disconnect, device number 58
[  476.450269][  T958] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[  476.493513][  T958] visor 5-1:0.0: device disconnected
[  476.797507][ T5949] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  476.971947][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  476.994004][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.018102][ T5949] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  477.032896][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.053613][ T5949] usb 3-1: config 0 descriptor??
[  477.155612][T11339] TCP: TCP_TX_DELAY enabled
[  477.517700][ T5949] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  479.979616][T11329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.057989][T11329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.108552][T11367] input: syz0 as /devices/virtual/input/input51
[  480.120129][ T5949] pyra 0003:1E7D:2CF6.001E: couldn't init struct pyra_device
[  480.133217][ T5949] pyra 0003:1E7D:2CF6.001E: couldn't install mouse
[  480.145669][ T5949] pyra 0003:1E7D:2CF6.001E: probe with driver pyra failed with error -71
[  480.243608][ T5949] usb 3-1: USB disconnect, device number 72
[  480.572093][T11370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.589439][T11370] syzkaller0: entered promiscuous mode
[  480.605410][T11370] syzkaller0: entered allmulticast mode
[  480.927124][T11372] FAULT_INJECTION: forcing a failure.
[  480.927124][T11372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.970642][T11370] tipc: Resetting bearer <eth:syzkaller0>
[  481.014049][T11372] CPU: 1 UID: 0 PID: 11372 Comm: syz.3.1381 Not tainted syzkaller #0 PREEMPT(full) 
[  481.014078][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  481.014090][T11372] Call Trace:
[  481.014098][T11372]  <TASK>
[  481.014107][T11372]  dump_stack_lvl+0x189/0x250
[  481.014134][T11372]  ? __pfx____ratelimit+0x10/0x10
[  481.014162][T11372]  ? __pfx_dump_stack_lvl+0x10/0x10
[  481.014185][T11372]  ? __pfx__printk+0x10/0x10
[  481.014220][T11372]  ? __might_fault+0xb0/0x130
[  481.014259][T11372]  should_fail_ex+0x414/0x560
[  481.014290][T11372]  _copy_from_user+0x2d/0xb0
[  481.014314][T11372]  do_sock_getsockopt+0x17d/0x450
[  481.014338][T11372]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  481.014356][T11372]  ? write_ibpb+0x30/0x40
[  481.014382][T11372]  ? ksys_write+0x1e1/0x250
[  481.014411][T11372]  __x64_sys_getsockopt+0x1a5/0x250
[  481.014430][T11372]  ? write_ibpb+0x30/0x40
[  481.014458][T11372]  ? write_ibpb+0x30/0x40
[  481.014485][T11372]  do_syscall_64+0xfa/0x3b0
[  481.014507][T11372]  ? lockdep_hardirqs_on+0x9c/0x150
[  481.014531][T11372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.014548][T11372]  ? clear_bhb_loop+0x60/0xb0
[  481.014569][T11372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.014588][T11372] RIP: 0033:0x7fe8b758ebe9
[  481.014606][T11372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  481.014620][T11372] RSP: 002b:00007fe8b8324038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  481.014638][T11372] RAX: ffffffffffffffda RBX: 00007fe8b77b5fa0 RCX: 00007fe8b758ebe9
[  481.014649][T11372] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003
[  481.014658][T11372] RBP: 00007fe8b8324090 R08: 0000200000001040 R09: 0000000000000000
[  481.014667][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.014676][T11372] R13: 00007fe8b77b6038 R14: 00007fe8b77b5fa0 R15: 00007fe8b78dfa28
[  481.014700][T11372]  </TASK>
[  481.900168][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'.
[  482.019720][ T5950] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  482.027292][   T10] ov519 1-1:252.193: Can't determine sensor slave IDs
[  482.027311][   T10] ov519 1-1:252.193: OV519 Config failed
[  482.027409][   T10] ov519 1-1:252.193: probe with driver ov519 failed with error -22
[  482.032190][   T10] usb 1-1: USB disconnect, device number 78
[  482.190129][ T5950] usb 5-1: Using ep0 maxpacket: 8
[  482.196933][ T5950] usb 5-1: config 0 has an invalid interface number: 127 but max is 0
[  482.207302][ T5950] usb 5-1: config 0 has no interface number 0
[  482.216636][ T5950] usb 5-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=50.49
[  482.229318][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.237821][ T5950] usb 5-1: Product: syz
[  482.242108][ T5950] usb 5-1: Manufacturer: syz
[  482.246834][ T5950] usb 5-1: SerialNumber: syz
[  482.255766][ T5950] usb 5-1: config 0 descriptor??
[  482.347550][   T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  482.497535][   T10] usb 1-1: Using ep0 maxpacket: 16
[  482.519647][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  482.530344][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  482.542025][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  482.553309][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  482.573745][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  482.583550][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.592418][   T10] usb 1-1: Product: syz
[  482.597066][   T10] usb 1-1: Manufacturer: syz
[  482.602849][   T10] usb 1-1: SerialNumber: syz
[  482.611114][   T10] usb 1-1: config 0 descriptor??
[  482.747433][   T10] rc_core: IR keymap rc-xbox-dvd not found
[  482.763651][   T10] Registered IR keymap rc-empty
[  482.775175][   T10] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  482.816110][   T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input52
[  482.865319][   T10] usb 1-1: USB disconnect, device number 79
[  482.871568][    C0] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  482.903578][T11370] tipc: Resetting bearer <eth:syzkaller0>
[  482.957279][T11370] tipc: Disabling bearer <eth:syzkaller0>
[  482.995038][ T5950] ums-sddr55 5-1:0.127: USB Mass Storage device detected
[  483.086193][ T5950] usb 5-1: USB disconnect, device number 59
[  484.084853][T11414] loop2: detected capacity change from 0 to 7
[  484.096218][ T6044]  loop2:
[  484.100877][ T6044] loop2: partition table partially beyond EOD, truncated
[  484.135127][T11415] random: crng reseeded on system resumption
[  484.309053][T11415] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  484.339576][T11414]  loop2:
[  484.353114][T11414] loop2: partition table partially beyond EOD, truncated
[  484.757331][   T10] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  484.931579][   T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  484.985798][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.019759][   T10] usb 1-1: config 0 descriptor??
[  485.054742][   T10] cp210x 1-1:0.0: cp210x converter detected
[  485.160390][T11431] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  485.167233][T11431] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  485.260445][T11431] vhci_hcd vhci_hcd.0: Device attached
[  485.295240][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'.
[  485.597657][   T10] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  485.612959][ T5972] vhci_hcd: vhci_device speed not set
[  485.633440][   T10] usb 1-1: cp210x converter now attached to ttyUSB0
[  485.691984][ T5972] usb 37-1: new full-speed USB device number 3 using vhci_hcd
[  485.835079][  T958] usb 1-1: USB disconnect, device number 80
[  485.845417][  T958] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  485.941391][  T958] cp210x 1-1:0.0: device disconnected
[  486.038498][   T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  486.227335][   T10] usb 3-1: Using ep0 maxpacket: 32
[  486.240873][   T10] usb 3-1: config 0 has an invalid interface number: 235 but max is 0
[  486.249339][   T10] usb 3-1: config 0 has no interface number 0
[  486.352157][   T10] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[  486.374010][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.460691][   T10] usb 3-1: Product: syz
[  486.472883][   T10] usb 3-1: Manufacturer: syz
[  486.519996][   T10] usb 3-1: SerialNumber: syz
[  486.581010][   T10] usb 3-1: config 0 descriptor??
[  486.745407][ T5874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  486.756912][ T5874] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  486.769135][ T5874] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  486.789140][ T5874] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  486.804615][ T5874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  486.815612][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  486.826103][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  486.834656][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  486.843018][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  486.852095][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  486.926912][   T10] kaweth 3-1:0.235: Firmware present in device.
[  488.593711][T11449] chnl_net:caif_netlink_parms(): no params data found
[  488.637558][  T958] usb 5-1: new full-speed USB device number 60 using dummy_hcd
[  488.800905][  T958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  488.826107][  T958] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  488.848554][  T958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.874790][  T958] usb 5-1: config 0 descriptor??
[  488.880574][ T5864] Bluetooth: hci5: command tx timeout
[  489.029206][   T10] kaweth 3-1:0.235: Error reading configuration (-71), no net device created
[  489.038838][   T10] kaweth 3-1:0.235: probe with driver kaweth failed with error -5
[  489.049732][T11432] vhci_hcd: connection reset by peer
[  489.061552][ T3513] vhci_hcd: stop threads
[  489.067378][ T3513] vhci_hcd: release socket
[  489.074889][   T10] usb 3-1: USB disconnect, device number 73
[  489.081984][ T3513] vhci_hcd: disconnect device
[  489.316523][ T3569] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  489.398875][ T3569] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  489.439407][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1407'.
[  489.491149][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'.
[  489.936637][T11449] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.963282][T11449] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.996652][T11449] bridge_slave_0: entered allmulticast mode
[  490.023256][T11449] bridge_slave_0: entered promiscuous mode
[  490.041356][ T3569] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  490.061621][ T3569] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  490.169318][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'.
[  490.232629][T11449] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.250207][T11449] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.261980][T11449] bridge_slave_1: entered allmulticast mode
[  490.273999][T11449] bridge_slave_1: entered promiscuous mode
[  490.734942][T11449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.854944][T11491] vlan0: entered allmulticast mode
[  490.860461][T11491] bond3: entered allmulticast mode
[  490.927507][ T5972] vhci_hcd: vhci_device speed not set
[  490.968169][ T5864] Bluetooth: hci5: command tx timeout
[  491.259173][T11449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  492.096955][  T958] usbhid 5-1:0.0: can't add hid device: -71
[  492.105585][  T958] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  492.160849][  T958] usb 5-1: USB disconnect, device number 60
[  492.258683][T11449] team0: Port device team_slave_0 added
[  492.273221][T11449] team0: Port device team_slave_1 added
[  492.490247][T11449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  492.505157][T11449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.742574][T11449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  492.785514][T11449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  492.814084][T11449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.929430][T11449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  492.977555][ T5862] usb 1-1: new low-speed USB device number 81 using dummy_hcd
[  493.049691][ T5864] Bluetooth: hci5: command tx timeout
[  493.187581][ T5936] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  493.189345][T11449] hsr_slave_0: entered promiscuous mode
[  493.203318][T11449] hsr_slave_1: entered promiscuous mode
[  493.210319][T11449] debugfs: 'hsr0' already exists in 'hsr'
[  493.216694][T11449] Cannot create hsr debugfs directory
[  493.219688][ T5862] usb 1-1: unable to get BOS descriptor or descriptor too short
[  493.228054][T11526] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1416'.
[  493.338968][ T5862] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  493.358101][ T5862] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt
[  493.376939][ T5862] usb 1-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  493.437581][ T5936] usb 5-1: Using ep0 maxpacket: 32
[  493.444634][ T5936] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  493.461903][ T5862] usb 1-1: config 1 interface 0 has no altsetting 0
[  493.470230][ T5936] usb 5-1: config 0 has no interface number 0
[  493.514202][ T5862] usb 1-1: string descriptor 0 read error: -22
[  493.533427][ T5936] usb 5-1: too many endpoints for config 0 interface 184 altsetting 7: 247, using maximum allowed: 30
[  493.550775][ T5862] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  493.570248][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.587263][ T5936] usb 5-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 247
[  493.626375][T11507] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  493.637252][ T5936] usb 5-1: config 0 interface 184 has no altsetting 0
[  493.653051][T11507] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  493.666218][ T5936] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  493.683488][T11507] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  493.717048][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.744720][ T5936] usb 5-1: Product: syz
[  493.750180][ T5862] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  493.767251][ T5936] usb 5-1: Manufacturer: syz
[  493.781464][ T5936] usb 5-1: SerialNumber: syz
[  493.815743][ T5936] usb 5-1: config 0 descriptor??
[  493.832754][ T5936] smsc75xx v1.0.0
[  493.838824][ T5936] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  493.861426][ T5936] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  493.938458][T11507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.959603][T11507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.989738][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  494.020001][T11507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  494.021601][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.083776][T11507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.112439][T11449] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  494.129242][T11449] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  494.140991][T11449] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  494.148673][ T5862] usb 1-1: USB disconnect, device number 81
[  494.182375][T11449] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  494.377664][T11449] 8021q: adding VLAN 0 to HW filter on device bond0
[  494.432861][T11449] 8021q: adding VLAN 0 to HW filter on device team0
[  494.463180][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.470603][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  494.484257][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.491512][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  494.701784][T11545] netlink: 'syz.3.1420': attribute type 29 has an invalid length.
[  494.737433][T11545] netlink: 'syz.3.1420': attribute type 29 has an invalid length.
[  494.746925][T11545] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1420'.
[  494.909561][T11449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  495.117843][ T5864] Bluetooth: hci5: command tx timeout
[  495.150093][ T5972] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  495.225517][T11449] veth0_vlan: entered promiscuous mode
[  495.261330][T11449] veth1_vlan: entered promiscuous mode
[  495.549625][ T5950] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  495.572356][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  495.584384][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  495.714507][  T958] usb 5-1: USB disconnect, device number 61
[  495.737813][ T5950] usb 1-1: Using ep0 maxpacket: 8
[  495.756682][ T5950] usb 1-1: config index 0 descriptor too short (expected 28277, got 36)
[  495.757047][ T5972] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  495.777427][ T5950] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  495.860168][T11555] fuse: root generation should be zero
[  495.872671][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.891684][ T5972] usb 3-1: config 0 descriptor??
[  495.940502][T11449] veth0_macvtap: entered promiscuous mode
[  495.950151][ T5950] usb 1-1: config 0 has no interfaces?
[  495.955718][ T5950] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  495.961921][T11449] veth1_macvtap: entered promiscuous mode
[  496.025950][T11449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  496.092437][T11449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  496.140291][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.171380][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.176750][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.249081][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  496.306878][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.323345][ T5972] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0
[  496.373232][ T5972] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0
[  496.382836][ T5950] usb 1-1: config 0 descriptor??
[  496.432991][ T5972] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.001F/input/input53
[  496.472628][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.503915][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.525258][ T5972] cm6533_jd 0003:0D8C:0022.001F: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  496.617394][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.625639][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.680303][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'.
[  496.680332][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'.
[  497.140599][T11566] loop2: detected capacity change from 0 to 7
[  497.160147][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  497.182395][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  497.193682][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  497.203054][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  497.212224][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  497.221407][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  497.231093][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  497.240286][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  497.249029][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  497.258362][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  497.267454][ T5862] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  497.271409][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  497.284500][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  497.493382][ T5862] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  497.526194][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 16
[  497.538002][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  497.551560][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.566989][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  497.662380][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  497.708776][ T5862] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  497.718327][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.753753][ T5862] usb 5-1: Product: syz
[  497.859398][ T5862] usb 5-1: Manufacturer: syz
[  497.881279][ T5862] usb 5-1: SerialNumber: syz
[  497.907402][ T5862] usb 5-1: config 0 descriptor??
[  498.019823][  T980] usb 1-1: USB disconnect, device number 82
[  498.207302][  T958] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  498.240133][ T5862] usb 5-1: ucan: probing device on interface #0
[  498.262682][ T5862] usb 5-1: ucan: invalid endpoint configuration
[  498.282320][ T5862] usb 5-1: ucan: probe failed; try to update the device firmware
[  498.329116][ T5862] usb 5-1: USB disconnect, device number 62
[  498.481894][ T5861] usb 3-1: USB disconnect, device number 74
[  498.500579][  T958] usb 6-1: too many configurations: 120, using maximum allowed: 8
[  498.543948][  T958] usb 6-1: unable to read config index 0 descriptor/start: -61
[  498.543994][  T958] usb 6-1: can't read configurations, error -61
[  498.693317][  T958] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  498.762876][T11590] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1432'.
[  498.891214][  T958] usb 6-1: too many configurations: 120, using maximum allowed: 8
[  498.915182][  T958] usb 6-1: unable to read config index 0 descriptor/start: -61
[  498.943073][  T958] usb 6-1: can't read configurations, error -61
[  499.109201][  T958] usb usb6-port1: attempt power cycle
[  499.334617][T11593] syzkaller0: entered promiscuous mode
[  499.370119][T11593] syzkaller0: entered allmulticast mode
[  499.457427][  T958] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  499.508911][  T958] usb 6-1: too many configurations: 120, using maximum allowed: 8
[  499.586627][  T958] usb 6-1: unable to read config index 0 descriptor/start: -61
[  499.626768][  T958] usb 6-1: can't read configurations, error -61
[  499.778769][  T958] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  499.838796][  T958] usb 6-1: too many configurations: 120, using maximum allowed: 8
[  499.879656][  T958] usb 6-1: unable to read config index 0 descriptor/start: -61
[  499.917962][  T958] usb 6-1: can't read configurations, error -61
[  499.933964][  T958] usb usb6-port1: unable to enumerate USB device
[  500.249163][T11600] fuse: Bad value for 'group_id'
[  500.254294][T11600] fuse: Bad value for 'group_id'
[  500.496768][T11604] IPv6: sit1: Disabled Multicast RS
[  500.503923][T11604] sit1: entered allmulticast mode
[  501.567814][ T5936] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  501.688089][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.697436][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  501.747374][ T5936] usb 6-1: Using ep0 maxpacket: 16
[  501.790075][ T5936] usb 6-1: unable to get BOS descriptor or descriptor too short
[  501.810190][ T5936] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  501.834249][ T5936] usb 6-1: config 1 has no interface number 1
[  501.860844][ T5936] usb 6-1: too many endpoints for config 1 interface 2 altsetting 6: 223, using maximum allowed: 30
[  501.896139][ T5936] usb 6-1: config 1 interface 2 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  501.991038][ T5936] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 99, changing to 7
[  502.061484][ T5936] usb 6-1: config 1 interface 2 has no altsetting 2
[  502.090307][ T5936] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  502.218725][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.246897][ T5936] usb 6-1: Product: syz
[  502.253917][ T5936] usb 6-1: Manufacturer: syz
[  502.262828][ T5936] usb 6-1: SerialNumber: syz
[  502.320674][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  502.320694][   T30] audit: type=1326 audit(1756415265.052:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756638ebe9 code=0x7ffc0000
[  502.388190][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'.
[  502.525653][T11616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  502.543632][T11616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.680699][ T5936] usb 6-1: USB disconnect, device number 6
[  502.810509][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  502.897370][   T30] audit: type=1326 audit(1756415265.052:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756638ebe9 code=0x7ffc0000
[  502.919974][    C0] vkms_vblank_simulate: vblank timer overrun
[  503.087725][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1443'.
[  503.137321][   T30] audit: type=1326 audit(1756415265.052:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756638ebe9 code=0x7ffc0000
[  503.310467][   T30] audit: type=1326 audit(1756415265.052:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756638ebe9 code=0x7ffc0000
[  503.696765][   T30] audit: type=1326 audit(1756415265.062:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756638ebe9 code=0x7ffc0000
[  503.835661][   T30] audit: type=1326 audit(1756415265.062:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756638ebe9 code=0x7ffc0000
[  503.915091][   T30] audit: type=1326 audit(1756415265.062:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f756638ebe9 code=0x7ffc0000
[  504.026442][   T30] audit: type=1326 audit(1756415265.062:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756638ebe9 code=0x7ffc0000
[  504.120471][   T30] audit: type=1326 audit(1756415265.062:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756638ebe9 code=0x7ffc0000
[  504.202362][   T30] audit: type=1326 audit(1756415265.062:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756638ebe9 code=0x7ffc0000
[  504.737997][ T5972] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  504.917606][ T5972] usb 1-1: Using ep0 maxpacket: 32
[  504.944932][ T5972] usb 1-1: config 0 has an invalid interface number: 177 but max is 0
[  504.953542][ T5972] usb 1-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config
[  505.017336][ T5972] usb 1-1: config 0 has no interface number 0
[  505.035161][ T5972] usb 1-1: config 0 interface 177 altsetting 243 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  505.120802][ T5972] usb 1-1: config 0 interface 177 has no altsetting 0
[  505.141600][ T5972] usb 1-1: New USB device found, idVendor=0403, idProduct=fa00, bcdDevice=89.48
[  505.156329][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.185465][ T5972] usb 1-1: Product: syz
[  505.203530][ T5972] usb 1-1: Manufacturer: syz
[  505.227039][ T5972] usb 1-1: SerialNumber: syz
[  505.306001][ T5972] usb 1-1: config 0 descriptor??
[  505.323386][ T5972] ftdi_sio 1-1:0.177: FTDI USB Serial Device converter detected
[  505.356113][ T5972] ftdi_sio ttyUSB0: unknown device type: 0x8948
[  505.577507][ T5929] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  505.641096][T11660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1446'.
[  505.788280][ T5929] usb 5-1: Using ep0 maxpacket: 16
[  505.842623][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.858231][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1448'.
[  505.867013][ T5929] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  505.953313][T11663] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1448'.
[  505.978183][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.015037][ T5929] usb 5-1: config 0 descriptor??
[  506.025030][ T5936] usb 1-1: USB disconnect, device number 83
[  506.037438][ T5936] ftdi_sio 1-1:0.177: device disconnected
[  506.287314][ T5862] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  506.450509][ T5929] usbhid 5-1:0.0: can't add hid device: -71
[  506.456630][ T5929] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  506.458080][ T5862] usb 3-1: Using ep0 maxpacket: 16
[  506.478527][ T5929] usb 5-1: USB disconnect, device number 63
[  506.493284][ T5862] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  506.547064][ T5862] usb 3-1: config 0 has no interface number 0
[  506.565333][ T5862] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  506.574918][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.602550][ T5862] usb 3-1: Product: syz
[  506.613714][ T5862] usb 3-1: Manufacturer: syz
[  506.623931][ T5862] usb 3-1: SerialNumber: syz
[  506.645857][ T5862] usb 3-1: config 0 descriptor??
[  506.669742][ T5862] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  506.967648][  T958] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  507.066523][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1452'.
[  507.159445][  T958] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  507.186485][  T958] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53
[  507.304323][  T958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.356873][  T958] usb 1-1: config 0 descriptor??
[  507.413163][  T958] option 1-1:0.0: GSM modem (1-port) converter detected
[  507.787785][ T5862] gspca_spca1528: reg_w err -110
[  507.812543][ T5862] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110
[  508.306735][ T5862] usb 1-1: USB disconnect, device number 84
[  508.341439][ T5862] option 1-1:0.0: device disconnected
[  508.638211][T11699] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20002
[  509.029050][ T5929] usb 3-1: USB disconnect, device number 75
[  509.597367][ T5861] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  509.796762][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'.
[  509.895785][ T5861] usb 3-1: config 0 has no interfaces?
[  509.916836][ T5861] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  509.946485][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.981534][ T5861] usb 3-1: Product: syz
[  509.989740][ T5861] usb 3-1: Manufacturer: syz
[  510.005806][ T5861] usb 3-1: SerialNumber: syz
[  510.020732][ T5861] usb 3-1: config 0 descriptor??
[  510.045504][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1463'.
[  511.007423][ T5929] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  511.015077][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  511.148279][T11729] pimreg: entered allmulticast mode
[  511.311009][   T10] usb 6-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad
[  511.326443][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.357443][ T5929] usb 1-1: Using ep0 maxpacket: 16
[  511.362739][   T10] usb 6-1: config 0 descriptor??
[  513.141633][ T5862] usb 3-1: USB disconnect, device number 76
[  513.471374][T11742] program syz.2.1468 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  513.787320][ T5862] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  513.832684][T11746] loop2: detected capacity change from 0 to 7
[  513.946872][T11746]  loop2:
[  513.950125][T11746] loop2: partition table partially beyond EOD, truncated
[  513.978169][   T10] usb 6-1: can't set first interface for hiFace device.
[  513.986142][ T5862] usb 3-1: config 0 has an invalid interface number: 46 but max is 0
[  513.997092][ T5862] usb 3-1: config 0 has no interface number 0
[  514.098392][ T5862] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=9e.b9
[  514.109178][   T10] snd-usb-hiface 6-1:0.0: probe with driver snd-usb-hiface failed with error -5
[  514.157331][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.206907][ T5862] usb 3-1: Product: syz
[  514.214007][   T10] usb 6-1: USB disconnect, device number 7
[  514.216266][ T5862] usb 3-1: Manufacturer: syz
[  514.251202][ T5862] usb 3-1: SerialNumber: syz
[  514.405211][ T5862] usb 3-1: config 0 descriptor??
[  514.454953][ T5862] xr_serial 3-1:0.46: More than one union descriptor, skipping ...
[  514.517989][T11752] binder: 11749:11752 ioctl c0306201 200000000200 returned -22
[  514.554352][ T5929] usb 1-1: unable to get BOS descriptor or descriptor too short
[  514.563020][ T5929] usb 1-1: no configurations
[  514.650150][ T5929] usb 1-1: can't read configurations, error -22
[  514.664914][ T5862] usb 3-1: USB disconnect, device number 77
[  514.712905][ T5972] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  514.907645][ T5972] usb 5-1: Using ep0 maxpacket: 8
[  514.938907][ T5972] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  514.969957][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.994895][ T5972] usb 5-1: Product: syz
[  515.051091][T11762] netlink: 'syz.5.1475': attribute type 1 has an invalid length.
[  515.067967][T11762] veth0_virt_wifi: entered promiscuous mode
[  515.074196][T11762] veth0_virt_wifi: entered allmulticast mode
[  515.095219][ T5972] usb 5-1: Manufacturer: syz
[  515.101284][ T5972] usb 5-1: SerialNumber: syz
[  515.110862][ T5972] usb 5-1: config 0 descriptor??
[  515.323010][ T5972] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  516.059845][ T5972] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  516.108756][ T5972] usb 5-1: USB disconnect, device number 64
[  516.322409][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'.
[  516.477383][ T5936] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  516.749884][ T5936] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  516.765585][ T5936] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.780253][ T5936] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  517.049026][T11788] loop2: detected capacity change from 0 to 7
[  517.062910][T11788]  loop2:
[  517.066102][T11788] loop2: partition table partially beyond EOD, truncated
[  517.107618][ T5936] usb 1-1: config 1 interface 1 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  517.167351][ T5936] usb 1-1: config 1 interface 1 has no altsetting 0
[  517.186917][ T5936] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  517.206543][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.226635][ T5936] usb 1-1: Product: syz
[  517.246203][ T5936] usb 1-1: Manufacturer: syz
[  517.407605][ T5936] usb 1-1: SerialNumber: syz
[  517.442205][ T5936] usb 1-1: selecting invalid altsetting 0
[  517.477639][ T5936] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  517.519562][ T5936] usb 1-1: selecting invalid altsetting 0
[  517.525492][ T5936] usbtest 1-1:1.1: probe with driver usbtest failed with error -22
[  517.657294][ T5972] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  517.726678][T11766] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3176969119 (406652047232 ns) > initial count (321993810432 ns). Using initial count to start timer.
[  517.796165][T11766] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  517.847441][ T5972] usb 5-1: Using ep0 maxpacket: 16
[  517.879787][ T5972] usb 5-1: config 254 has an invalid interface number: 235 but max is 0
[  517.913499][ T5972] usb 5-1: config 254 has no interface number 0
[  517.921846][ T5936] usb 1-1: USB disconnect, device number 87
[  517.938696][ T5972] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  517.971052][ T5972] usb 5-1: config 254 interface 235 has no altsetting 0
[  518.020339][ T5972] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  518.030869][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  518.030886][   T30] audit: type=1326 audit(1756415280.822:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5218ebe9 code=0x7ffc0000
[  518.035744][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.092118][   T30] audit: type=1326 audit(1756415280.862:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3d5218ebe9 code=0x7ffc0000
[  518.112052][ T5972] usb 5-1: Product: syz
[  518.133749][ T5972] usb 5-1: Manufacturer: syz
[  518.172474][ T5972] usb 5-1: SerialNumber: syz
[  518.183238][   T30] audit: type=1326 audit(1756415280.862:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5218ebe9 code=0x7ffc0000
[  518.239752][T11794] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  518.310974][   T30] audit: type=1326 audit(1756415280.862:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5218ebe9 code=0x7ffc0000
[  518.341704][   T30] audit: type=1326 audit(1756415280.912:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3d5218ebe9 code=0x7ffc0000
[  518.375008][   T30] audit: type=1326 audit(1756415280.912:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5218ebe9 code=0x7ffc0000
[  518.406010][   T30] audit: type=1326 audit(1756415280.912:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d5212ade9 code=0x7ffc0000
[  518.429457][   T30] audit: type=1326 audit(1756415280.912:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5218ebe9 code=0x7ffc0000
[  518.453773][   T30] audit: type=1326 audit(1756415280.912:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3d5218ebe9 code=0x7ffc0000
[  518.479277][   T30] audit: type=1326 audit(1756415280.912:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5218ebe9 code=0x7ffc0000
[  518.488732][T11794] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  518.514887][ T5972] usbtest 5-1:254.235: Linux gadget zero
[  518.520736][ T5972] usbtest 5-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt)
[  518.577359][ T5936] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  518.755514][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'.
[  518.765908][ T5936] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  518.786274][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.804939][ T5936] usb 6-1: Product: syz
[  518.813955][   T10] usb 5-1: USB disconnect, device number 65
[  518.815238][ T5936] usb 6-1: Manufacturer: syz
[  518.855651][ T5936] usb 6-1: SerialNumber: syz
[  518.892340][ T5936] usb 6-1: config 0 descriptor??
[  519.137340][ T5936] usb 6-1: ignoring: probably an ADSL modem
[  519.597971][ T5936] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  519.618179][ T5936] usb 6-1: USB disconnect, device number 8
[  519.738384][T11829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1497'.
[  519.951582][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.976374][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.448514][   T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  520.585115][T11845] usb usb1: usbfs: process 11845 (syz.5.1500) did not claim interface 0 before use
[  520.636944][   T10] usb 5-1: Using ep0 maxpacket: 32
[  520.666135][   T10] usb 5-1: config 6 has an invalid interface number: 71 but max is 0
[  520.674787][   T10] usb 5-1: config 6 has no interface number 0
[  520.681011][   T10] usb 5-1: config 6 interface 71 has no altsetting 0
[  520.691205][   T10] usb 5-1: New USB device found, idVendor=22b8, idProduct=4204, bcdDevice=df.2f
[  520.701008][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.717231][   T10] usb 5-1: Product: Е
[  520.721425][   T10] usb 5-1: Manufacturer: 隣麺릩ੲ㈰屣댵㊰Ġ젉李껐묯쑗閰ύ걮￫נ䎡䝴㄀₎퐪竞爧
[  520.812729][T11815] delete_channel: no stack
[  520.820048][   T10] usb 5-1: SerialNumber: 瓜뫮睴Қ䮓걋⺼呋ᕍ齣龇嵇폋鲛睨䥼Ꝥ冥厰薁伟덀ဳ꛿縑륒㷹轓ⷹੂ䳡䵵浂ই⠋둭㥮
[  521.148668][   T10] usb 5-1: USB disconnect, device number 66
[  522.566684][T11871] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1508'.
[  522.817531][ T5862] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  523.005400][ T5862] usb 1-1: Using ep0 maxpacket: 32
[  523.053408][ T5862] usb 1-1: unable to get BOS descriptor or descriptor too short
[  523.067310][ T5862] usb 1-1: config 128 has an invalid interface number: 127 but max is 3
[  523.076793][T11892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  523.084779][T11892] syzkaller0: entered promiscuous mode
[  523.086774][ T5862] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  523.090543][T11892] syzkaller0: entered allmulticast mode
[  523.114837][T11892] tipc: Resetting bearer <eth:syzkaller0>
[  523.217390][ T5862] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4
[  523.235203][ T5862] usb 1-1: config 128 has no interface number 0
[  523.267755][ T5861] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  523.279145][ T5862] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  523.310925][ T5862] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  523.325757][ T5862] usb 1-1: config 128 interface 127 has no altsetting 0
[  523.336549][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  523.348143][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.356346][ T5862] usb 1-1: Product: syz
[  523.361775][ T5862] usb 1-1: Manufacturer: syz
[  523.366419][ T5862] usb 1-1: SerialNumber: syz
[  523.407336][   T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  523.444381][ T5861] usb 6-1: unable to get BOS descriptor or descriptor too short
[  523.458425][ T5861] usb 6-1: not running at top speed; connect to a high speed hub
[  523.468772][ T5861] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  523.490945][ T5861] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  523.500747][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.510342][ T5861] usb 6-1: Product: syz
[  523.515054][ T5861] usb 6-1: Manufacturer: syz
[  523.520045][ T5861] usb 6-1: SerialNumber: syz
[  523.557403][   T10] usb 3-1: Using ep0 maxpacket: 16
[  523.566593][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  523.583008][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  523.596892][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  523.608915][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  523.632166][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  523.642249][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.651144][   T10] usb 3-1: Product: syz
[  523.655462][   T10] usb 3-1: Manufacturer: syz
[  523.660560][   T10] usb 3-1: SerialNumber: syz
[  523.664655][ T5862] usb 1-1: USB disconnect, device number 88
[  523.675175][   T10] usb 3-1: config 0 descriptor??
[  523.745427][ T5861] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  523.770968][   T10] rc_core: IR keymap rc-xbox-dvd not found
[  523.778482][ T5861] usb 6-1: USB disconnect, device number 9
[  523.784132][   T10] Registered IR keymap rc-empty
[  523.809484][   T10] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  523.825962][   T10] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input54
[  523.893999][ T5862] usb 3-1: USB disconnect, device number 78
[  523.894138][    C0] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  523.917088][T11892] tipc: Resetting bearer <eth:syzkaller0>
[  523.953027][T11892] tipc: Disabling bearer <eth:syzkaller0>
[  524.429240][T11900] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (13)
[  524.567775][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  524.737842][   T10] usb 6-1: Using ep0 maxpacket: 16
[  524.749969][   T10] usb 6-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  524.775244][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  524.782329][   T10] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  524.792445][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.810403][   T10] usb 6-1: config 0 descriptor??
[  524.832125][   T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  525.139011][T11924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.149350][T11924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.175600][T11924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.214189][T11924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.677944][ T5861] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  525.839752][ T5861] usb 1-1: Using ep0 maxpacket: 16
[  525.882448][ T5861] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  525.910932][ T5861] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  525.924801][ T5861] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  525.937795][ T5861] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  525.950457][ T5861] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  525.960466][ T5861] usb 1-1: config 0 has no interface number 0
[  525.966969][ T5861] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  526.039431][ T5861] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  526.060642][ T5861] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  526.075517][ T5861] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  526.099229][ T5861] usb 1-1: config 0 interface 125 has no altsetting 0
[  526.106364][ T5861] usb 1-1: config 0 interface 125 has no altsetting 2
[  526.144581][ T5861] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  526.165671][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.184075][ T5861] usb 1-1: Product: syz
[  526.198758][ T5861] usb 1-1: Manufacturer: syz
[  526.210606][ T5861] usb 1-1: SerialNumber: syz
[  526.260638][ T5861] usb 1-1: config 0 descriptor??
[  526.290323][ T5861] usb 1-1: selecting invalid altsetting 2
[  526.586728][T11944] netlink: 'syz.3.1527': attribute type 29 has an invalid length.
[  526.602546][T11944] netlink: 'syz.3.1527': attribute type 29 has an invalid length.
[  526.617527][T11944] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1527'.
[  526.888690][T11946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  526.900246][T11946] syzkaller0: entered promiscuous mode
[  526.907298][T11946] syzkaller0: entered allmulticast mode
[  526.939994][T11946] tipc: Resetting bearer <eth:syzkaller0>
[  527.216209][ T5862] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  527.476367][ T5861] get_1284_register timeout
[  527.486971][ T5861] uss720 1-1:0.125: probe with driver uss720 failed with error -5
[  527.509673][ T5929] usb 6-1: USB disconnect, device number 10
[  527.547849][ T5862] usb 5-1: Using ep0 maxpacket: 16
[  527.558284][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  527.601552][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  527.684447][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  527.715630][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  527.821871][ T5862] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  527.853486][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.873774][ T5862] usb 5-1: Product: syz
[  527.884952][ T5862] usb 5-1: Manufacturer: syz
[  527.925752][ T5862] usb 5-1: SerialNumber: syz
[  527.968087][ T5862] usb 5-1: config 0 descriptor??
[  528.384182][T11946] tipc: Resetting bearer <eth:syzkaller0>
[  528.424181][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1533'.
[  528.504018][T11946] tipc: Disabling bearer <eth:syzkaller0>
[  528.635301][ T5862] rc_core: IR keymap rc-xbox-dvd not found
[  528.643872][ T5862] Registered IR keymap rc-empty
[  528.660327][ T5862] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  528.690867][ T5862] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input55
[  528.760365][ T5862] usb 5-1: USB disconnect, device number 67
[  528.760431][    C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  529.180340][ T5862] usb 1-1: USB disconnect, device number 89
[  529.749266][T11976] netlink: 'syz.2.1538': attribute type 11 has an invalid length.
[  529.757803][ T5862] usb 1-1: new full-speed USB device number 90 using dummy_hcd
[  529.918345][T11978] IPVS: set_ctl: invalid protocol: 58 172.20.20.58:20002
[  529.978753][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  530.006732][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  530.056957][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1539'.
[  530.084529][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64
[  530.133963][ T5862] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  530.145098][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.153690][ T5862] usb 1-1: Product: syz
[  530.158686][ T5862] usb 1-1: Manufacturer: syz
[  530.164642][ T5862] usb 1-1: SerialNumber: syz
[  530.175843][ T5862] usb 1-1: config 0 descriptor??
[  530.183549][T11969] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  530.202163][ T5862] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input57
[  530.218916][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.226361][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.233707][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.241375][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.249060][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.256405][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.263848][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.271266][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.278819][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.286130][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.293516][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.300869][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.308268][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.315637][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.323067][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.330440][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.337732][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.345376][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.352953][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.360285][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.367707][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.375073][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.382420][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.389868][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.397396][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.404843][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.413177][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.420575][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.428098][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.435499][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.445007][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.452759][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.460228][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.475026][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.482672][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.490096][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.497494][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.504937][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.512332][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.519774][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.527127][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.534477][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.541791][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.557798][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.565511][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.572917][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.580336][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.587811][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.595131][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.602680][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.610065][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.617372][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.624708][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.632049][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.639439][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.647616][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.655175][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.662499][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.669805][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.677101][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.684645][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.692104][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.699478][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.706895][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.714440][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.721943][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.729394][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.736899][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.744842][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.757694][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.765365][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.772835][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.780170][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.787663][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.795018][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.802429][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.809770][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.817098][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.824491][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.831892][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.839371][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.846809][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.854728][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.862730][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.870221][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.877797][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.885165][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.892505][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.899908][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.908016][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.915594][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.923277][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.930669][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.938060][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.945430][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.952827][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.960916][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.968339][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.975739][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.983155][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.990495][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  530.998005][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.005292][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.012640][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.020118][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.027721][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.035120][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.042661][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.050043][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.058425][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.065964][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.073862][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.081363][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.088760][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.096129][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.103472][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.110859][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.118599][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.125981][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.133439][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.141003][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.148503][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.156063][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.164310][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.172275][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.179772][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.187459][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.195067][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.202526][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.209902][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.217309][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.224689][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.232018][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.239508][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.246800][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.254223][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.262126][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.269662][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.277183][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.284580][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.291984][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.299637][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.307092][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.314407][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.321822][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.329308][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.336820][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.344129][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.351536][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.358893][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.366633][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.374369][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.381711][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.389505][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.396906][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.405727][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.413375][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.420705][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.428278][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.435744][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.443119][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.450513][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.457939][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.465280][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.475655][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.483768][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.491131][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.498502][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.505909][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.513704][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.521252][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.528627][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.535906][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.543481][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.550797][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.558306][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.565637][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.576445][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.584126][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.591625][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.599461][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.606909][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.614255][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.621568][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.628942][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.636684][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.644262][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.651747][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.659251][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.666697][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.677881][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.685688][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.693193][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.700623][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.707971][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.715263][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.722674][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.729967][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.737262][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.744606][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.751965][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.759291][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.766794][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.774740][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.782109][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.789411][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.796807][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.804103][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.811486][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.818798][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.826074][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.833346][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.840641][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.848003][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.855300][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.862610][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.870077][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.877788][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.885190][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.892486][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.900562][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.907839][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.915595][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.922958][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.930421][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.937794][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.945060][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.952330][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.959743][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.967174][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.974710][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.982369][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.989818][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  531.997346][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.004831][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.012290][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.019572][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.026874][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.034141][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.041413][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.048695][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.055963][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.063239][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.070519][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.077938][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.085613][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.092911][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.100194][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.107534][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.114947][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.122265][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.129743][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.137486][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.144895][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.152320][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.159702][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.167178][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.174561][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.181966][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.189747][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.197531][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.204994][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.212291][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.219655][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.227025][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.234329][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.241650][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.249035][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.256363][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.263845][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.271205][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.278489][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.286251][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.293542][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.300989][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.308360][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.315668][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.322970][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.330357][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.337658][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.344931][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.352409][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.359680][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.367055][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.374398][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.381827][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.389356][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.396798][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.404377][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.411669][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.419030][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.426391][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.433748][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.441197][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.449407][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.456723][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.464066][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.471406][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.479014][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.486295][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.494026][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.501330][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.508613][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.515988][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.523867][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.531260][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.538638][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.545929][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.553302][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.560748][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.568238][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.575640][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.583002][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.590365][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.599122][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.606912][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.614264][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.621761][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.629112][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.636445][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.643919][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.651282][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.658683][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.666043][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.673400][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.680984][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.688323][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.696119][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.703548][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.710818][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.718225][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.725518][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.732819][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.740579][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.747935][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.755211][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.765245][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.772789][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.780097][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.787382][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.794732][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.805173][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.812728][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.820164][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.827809][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.835140][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.842502][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.849930][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.857279][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.864816][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.872271][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.879871][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.887260][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.894690][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.902664][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.910312][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.917702][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.924983][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.932284][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.939574][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.947038][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.954339][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.961907][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.969457][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.976770][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.984252][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  532.991579][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.000899][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.009072][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.016402][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.023862][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.031198][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.038700][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.046164][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.053527][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.060877][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.068373][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.075782][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.083457][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.090964][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.098399][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.106017][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.113391][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.120904][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.128223][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.135755][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.147235][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.154671][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.162036][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.169358][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.176664][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.184167][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.191474][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.199193][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.207128][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.214459][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.221822][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.229106][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.236399][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.243762][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.251051][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.258363][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.265643][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.272909][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.280224][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.287623][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.294918][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.302228][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.317664][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.325199][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.332649][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.339952][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.357261][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.364631][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.372033][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.379388][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.386727][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.394287][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.401737][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.409102][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.417066][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.424431][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.431957][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.439687][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.447161][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.454919][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.462445][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.470432][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.477854][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.485278][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.493387][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.500978][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.508370][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.517706][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.525626][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.532986][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.540377][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.547829][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.555391][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.562724][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.570174][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.577562][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.585314][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.592668][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.600186][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.607754][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.615106][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.627703][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.635444][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.642777][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.650095][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.657658][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.659783][ T5220] usb 1-1: control msg error: -71
[  533.665058][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.677645][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.684972][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.692385][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.699851][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.707158][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.714563][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.727434][ T5235] udevd[5235]: worker [8124] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time
[  533.727799][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.745115][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.752544][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.760038][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.767467][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.774828][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.782185][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.789527][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.796822][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.804129][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.811479][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.818883][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.827887][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.835664][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.843286][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.850695][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.858026][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.865399][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.872838][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.880186][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.887673][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.894983][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.902382][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.909797][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.917069][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.927406][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.935002][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.942384][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.949801][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.957173][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.964693][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.972048][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.979426][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.986817][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  533.994344][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  534.001981][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  534.009851][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  534.017301][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  534.024642][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  534.032470][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  534.039679][    C1] usb 1-1: pegasus_irq - usb_submit_urb failed with result -1
[  534.120271][ T5862] usb 1-1: USB disconnect, device number 90
[  534.720026][T11995] !
: renamed from dummy0 (while UP)
[  534.797608][ T5972] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  534.958352][ T5972] usb 3-1: Using ep0 maxpacket: 8
[  534.970058][ T5972] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  534.978880][ T5972] usb 3-1: config 0 has no interface number 0
[  535.002414][ T5972] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68
[  535.015629][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.026168][ T5972] usb 3-1: Product: syz
[  535.032922][ T5972] usb 3-1: Manufacturer: syz
[  535.048726][ T5972] usb 3-1: SerialNumber: syz
[  535.083564][ T5972] usb 3-1: config 0 descriptor??
[  535.171755][ T5972] redrat3 3-1:0.31: Couldn't find all endpoints
[  535.496450][T11993] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1542'.
[  535.826393][T12002] tipc: Started in network mode
[  535.831647][T12002] tipc: Node identity e65d97182308, cluster identity 4711
[  535.844509][T12002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  535.896561][T12005] syzkaller0: entered promiscuous mode
[  535.904944][T12005] syzkaller0: entered allmulticast mode
[  536.527297][ T5972] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  536.997282][ T5972] usb 6-1: Using ep0 maxpacket: 16
[  537.037577][  T958] tipc: Node number set to 3310720792
[  537.159018][ T5972] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.169585][ T5972] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  537.184062][ T5972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  537.197482][ T5972] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  537.258441][T12005] tipc: Resetting bearer <eth:syzkaller0>
[  537.295113][ T5972] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  537.323186][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.345021][ T5972] usb 6-1: Product: syz
[  537.368196][ T5972] usb 6-1: Manufacturer: syz
[  537.384098][ T5972] usb 6-1: SerialNumber: syz
[  537.411639][ T5972] usb 6-1: config 0 descriptor??
[  537.637582][ T5972] rc_core: IR keymap rc-xbox-dvd not found
[  537.670696][ T5972] Registered IR keymap rc-empty
[  537.727520][ T5972] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  537.796440][T12002] tipc: Resetting bearer <eth:syzkaller0>
[  537.815136][ T5972] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input58
[  537.867353][   T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  537.919824][T12002] tipc: Disabling bearer <eth:syzkaller0>
[  537.999349][ T5972] usb 6-1: USB disconnect, device number 11
[  538.005394][    C0] xbox_remote 6-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  538.108413][   T10] usb 1-1: Using ep0 maxpacket: 16
[  538.126161][ T5950] usb 3-1: USB disconnect, device number 79
[  538.133835][   T10] usb 1-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config
[  538.186056][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  538.225158][   T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  538.261917][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.289691][   T10] usb 1-1: config 0 descriptor??
[  538.322979][   T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  538.344955][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1550'.
[  539.246529][ T5949] usb 1-1: USB disconnect, device number 91
[  539.327318][   T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  539.527073][   T10] usb 6-1: config 0 has no interfaces?
[  539.568705][   T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  539.592661][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.616729][   T10] usb 6-1: Product: syz
[  539.629038][   T10] usb 6-1: Manufacturer: syz
[  539.636559][   T10] usb 6-1: SerialNumber: syz
[  539.655526][   T10] usb 6-1: config 0 descriptor??
[  539.956133][ T5862] usb 6-1: USB disconnect, device number 12
[  540.047526][ T5950] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  540.227650][ T5950] usb 1-1: Using ep0 maxpacket: 16
[  540.235178][ T5950] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[  540.244024][ T5950] usb 1-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config
[  540.257709][ T5950] usb 1-1: config 0 has no interface number 0
[  540.263950][ T5950] usb 1-1: too many endpoints for config 0 interface 251 altsetting 0: 83, using maximum allowed: 30
[  540.281367][ T5950] usb 1-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 83
[  540.304107][ T5950] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  540.329808][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.353745][ T5950] usb 1-1: Product: syz
[  540.369807][ T5950] usb 1-1: Manufacturer: syz
[  540.385360][ T5950] usb 1-1: SerialNumber: syz
[  540.408955][ T5950] usb 1-1: config 0 descriptor??
[  540.449399][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1560'.
[  540.663308][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1559'.
[  540.672872][T12064] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1559'.
[  541.048930][ T5950] asix 1-1:0.251: probe with driver asix failed with error -22
[  541.151809][ T5950] usb 1-1: USB disconnect, device number 92
[  541.777295][ T5950] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  541.785153][ T5862] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  541.955553][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  541.967749][ T5950] usb 3-1: Using ep0 maxpacket: 8
[  541.974925][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  541.998456][ T5950] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  542.017503][ T5950] usb 3-1: config 0 interface 0 has no altsetting 0
[  542.024578][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  542.057608][ T5950] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[  542.069417][ T5862] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  542.088773][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.128091][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.141583][ T5950] usb 3-1: Product: syz
[  542.325742][ T5950] usb 3-1: Manufacturer: syz
[  542.349004][ T5862] usb 6-1: config 0 descriptor??
[  542.370178][ T5862] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  542.380172][ T5950] usb 3-1: SerialNumber: syz
[  542.449911][ T5950] usb 3-1: config 0 descriptor??
[  542.521466][ T5950] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found
[  542.560529][ T5862] usb 6-1: USB disconnect, device number 13
[  542.578181][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1568'.
[  542.677073][ T5950] snd_usb_toneport 3-1:0.0: cannot get proper max packet size
[  542.693815][ T5950] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected
[  542.741450][ T5950] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  543.067293][ T5862] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  543.229625][ T5862] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  543.238433][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  543.264566][ T5862] usb 5-1: config 0 has no interface number 0
[  543.277478][ T5862] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice= 0.05
[  543.324537][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.460526][T12105] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1572'.
[  543.476444][ T5862] usb 5-1: config 0 descriptor??
[  543.542869][ T5862] usb 5-1: bad CDC descriptors
[  543.648911][T12110] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1573'.
[  543.732555][ T5862] usb 5-1: USB disconnect, device number 68
[  545.863520][T12129] syzkaller1: entered promiscuous mode
[  545.869281][T12129] syzkaller1: entered allmulticast mode
[  546.651449][ T5998] usb 3-1: USB disconnect, device number 80
[  546.689623][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'.
[  546.912999][T12146] loop2: detected capacity change from 0 to 7
[  546.925057][T12144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1584'.
[  546.941804][T12146]  loop2:
[  546.944823][T12146] loop2: partition table partially beyond EOD, truncated
[  547.117414][ T5998] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  547.277262][ T5998] usb 3-1: Using ep0 maxpacket: 32
[  547.286755][ T5998] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  547.305797][ T5998] usb 3-1: config 0 has no interface number 0
[  547.390500][ T5998] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  547.459362][ T5998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.480170][ T5998] usb 3-1: Product: syz
[  547.484480][ T5998] usb 3-1: Manufacturer: syz
[  547.501670][ T5998] usb 3-1: SerialNumber: syz
[  547.546787][ T5998] usb 3-1: config 0 descriptor??
[  547.562678][ T5998] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  547.786334][ T5998] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  547.814989][ T5998] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  547.947429][   T10] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[  547.996902][T12142] binder: 12141:12142 unknown command 0
[  548.009130][T12142] binder: 12141:12142 ioctl c0306201 200000000080 returned -22
[  548.035520][T12142] binder: 12141:12142 ioctl 3312 7fff returned -22
[  548.101077][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.132531][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  548.148538][   T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  548.160932][   T10] usb 5-1: Product: syz
[  548.165137][   T10] usb 5-1: Manufacturer: syz
[  548.175281][   T10] usb 5-1: SerialNumber: syz
[  548.185284][   T10] usb 5-1: config 0 descriptor??
[  548.223871][   T10] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  548.244573][T12169] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1592'.
[  548.254705][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  548.256232][   T10] usb 3-1: USB disconnect, device number 81
[  548.365373][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  548.410562][T12155] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1588'.
[  548.419949][T12155] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1588'.
[  548.493960][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  548.710861][   T10] quatech2 3-1:0.51: device disconnected
[  548.717453][ T5949] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  548.825192][ T5972] usb 5-1: USB disconnect, device number 69
[  548.958313][ T5949] usb 6-1: Using ep0 maxpacket: 8
[  548.992893][ T5949] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  549.024866][ T5949] usb 6-1: config 0 has no interface number 0
[  549.047536][ T5949] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  549.066815][ T5949] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  549.086892][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'.
[  549.103548][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.137083][ T5949] usb 6-1: config 0 descriptor??
[  549.160850][ T5949] iowarrior 6-1:0.1: no interrupt-in endpoint found
[  549.297399][   T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  549.329535][T12183] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1597'.
[  549.426767][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1591'.
[  549.517561][   T10] usb 3-1: device descriptor read/64, error -71
[  549.577526][ T5998] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  549.740490][ T5998] usb 5-1: Using ep0 maxpacket: 32
[  549.750454][ T5998] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  549.762400][ T5998] usb 5-1: config 0 has no interface number 0
[  549.777347][   T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  549.789688][ T5998] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  549.802683][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.837299][ T5998] usb 5-1: Product: syz
[  549.850994][ T5998] usb 5-1: Manufacturer: syz
[  549.862371][ T5998] usb 5-1: SerialNumber: syz
[  549.882476][ T5998] usb 5-1: config 0 descriptor??
[  549.884711][T12195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1602'.
[  549.917515][   T10] usb 3-1: device descriptor read/64, error -71
[  549.930775][ T5998] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  549.959672][ T5998] usb 5-1: selecting invalid altsetting 1
[  549.971378][ T5998] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  550.008359][ T5998] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  550.029045][   T10] usb usb3-port1: attempt power cycle
[  550.036675][ T5998] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  550.055630][ T5998] usb 5-1: media controller created
[  550.083624][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  550.152017][ T5998] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  550.164528][ T5998] zl10353_read_register: readreg error (reg=127, ret==-71)
[  550.177028][ T5998] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  550.227452][ T5949] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  550.279039][ T5998] usb 5-1: USB disconnect, device number 70
[  550.367622][   T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  550.407492][ T5949] usb 1-1: Using ep0 maxpacket: 16
[  550.417652][   T10] usb 3-1: device descriptor read/8, error -71
[  550.433199][ T5949] usb 1-1: config 0 has an invalid interface number: 194 but max is 0
[  550.442274][ T5949] usb 1-1: config 0 has no interface number 0
[  550.457070][ T5949] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25
[  550.471596][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.483328][ T5949] usb 1-1: Product: syz
[  550.490160][ T5949] usb 1-1: Manufacturer: syz
[  550.500762][ T5949] usb 1-1: SerialNumber: syz
[  550.516657][ T5949] usb 1-1: config 0 descriptor??
[  550.530627][ T5949] cypress_cy7c63 1-1:0.194: Cypress CY7C63xxx device now attached
[  550.667394][   T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  550.687811][   T10] usb 3-1: device descriptor read/8, error -71
[  550.798207][   T10] usb usb3-port1: unable to enumerate USB device
[  550.833535][ T5949] usb 1-1: USB disconnect, device number 93
[  550.842523][ T5949] cypress_cy7c63 1-1:0.194: Cypress CY7C63xxx device now disconnected
[  551.294395][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'.
[  551.846048][ T5949] usb 6-1: USB disconnect, device number 14
[  552.267950][   T10] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  552.439270][   T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  552.485932][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  552.520806][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  552.534470][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  552.544017][T12231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1613'.
[  552.549845][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  552.572344][   T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  552.587278][   T10] usb 1-1: Manufacturer: syz
[  552.601658][   T10] usb 1-1: config 0 descriptor??
[  552.857289][ T5998] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  552.922751][T12252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  553.034207][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'.
[  553.036135][   T10] appleir 0003:05AC:8243.0020: unknown main item tag 0x0
[  553.065264][   T10] appleir 0003:05AC:8243.0020: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  553.077592][ T5998] usb 6-1: Using ep0 maxpacket: 32
[  553.079666][ T5998] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  553.107448][ T5949] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  553.112789][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.142460][ T5998] usb 6-1: config 0 descriptor??
[  553.159630][ T5998] as10x_usb: device has been detected
[  553.168997][T12256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  553.172262][ T5998] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  553.178397][T12256] syzkaller0: entered promiscuous mode
[  553.192298][T12256] syzkaller0: entered allmulticast mode
[  553.211251][ T5998] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  553.244469][T12215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.249578][ T5998] as10x_usb: error during firmware upload part1
[  553.254026][T12215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.271741][ T5949] usb 5-1: descriptor type invalid, skip
[  553.278310][ T5998] Registered device nBox DVB-T Dongle
[  553.278703][ T5949] usb 5-1: descriptor type invalid, skip
[  553.291176][ T5949] usb 5-1: descriptor type invalid, skip
[  553.296950][ T5949] usb 5-1: descriptor type invalid, skip
[  553.297482][T12257] tipc: Resetting bearer <eth:syzkaller0>
[  553.305127][ T5949] usb 5-1: config 7 has an invalid interface number: 210 but max is 0
[  553.324302][ T5949] usb 5-1: config 7 has no interface number 0
[  553.328555][T12255] tipc: Resetting bearer <eth:syzkaller0>
[  553.331825][ T5949] usb 5-1: config 7 interface 210 has no altsetting 0
[  553.347975][ T5949] usb 5-1: New USB device found, idVendor=04f2, idProduct=aff8, bcdDevice=31.a2
[  553.374251][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.383735][ T5949] usb 5-1: Product: syz
[  553.388915][T12255] tipc: Disabling bearer <eth:syzkaller0>
[  553.395030][ T5949] usb 5-1: Manufacturer: syz
[  553.400296][ T5949] usb 5-1: SerialNumber: syz
[  553.444334][T12260] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  553.510337][ T5998] usb 6-1: USB disconnect, device number 15
[  553.546019][ T5998] Unregistered device nBox DVB-T Dongle
[  553.556335][ T5862] usb 1-1: USB disconnect, device number 94
[  553.594153][ T5998] as10x_usb: device has been disconnected
[  553.622037][T12249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.660209][T12249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.714156][ T5949] usb 5-1: USB disconnect, device number 71
[  553.752911][T12266] fuse: Unknown parameter '�roup_id'
[  554.563799][T12280] usb usb1: usbfs: process 12280 (syz.4.1623) did not claim interface 0 before use
[  555.304349][T12289] binder: 12282:12289 ioctl c0306201 200000000540 returned -22
[  555.307499][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'.
[  555.327782][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1626'.
[  555.542212][T12292] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=9 (36 ns) > initial count (32 ns). Using initial count to start timer.
[  555.599971][T12242] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  555.627377][T12242] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  555.984898][T12242] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  555.996686][T12242] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  556.440902][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'.
[  557.196162][   T10] usb 3-1: new low-speed USB device number 86 using dummy_hcd
[  557.217943][ T5949] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  557.337278][   T10] usb 3-1: device descriptor read/64, error -71
[  557.791076][ T5949] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[  557.817334][ T5949] usb 6-1: config 1 has no interface number 0
[  557.826979][ T5949] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  557.839853][   T10] usb 3-1: new low-speed USB device number 87 using dummy_hcd
[  557.865695][ T5949] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  557.903569][ T5949] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  557.925118][ T5949] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  557.934993][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.947063][ T5949] usb 6-1: Product: syz
[  557.955401][ T5949] usb 6-1: Manufacturer: syz
[  558.037376][   T10] usb 3-1: device descriptor read/64, error -71
[  558.052780][ T5949] usb 6-1: SerialNumber: syz
[  558.077865][T12313] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  558.199166][   T10] usb usb3-port1: attempt power cycle
[  558.293858][T12313] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  558.513640][ T5949] usb 6-1: Incompatible driver and firmware versions
[  558.530134][ T5949] usb 6-1: USB disconnect, device number 16
[  558.547437][   T10] usb 3-1: new low-speed USB device number 88 using dummy_hcd
[  558.577738][   T10] usb 3-1: device descriptor read/8, error -71
[  558.827283][   T10] usb 3-1: new low-speed USB device number 89 using dummy_hcd
[  558.848367][   T10] usb 3-1: device descriptor read/8, error -71
[  558.969346][   T10] usb usb3-port1: unable to enumerate USB device
[  559.531922][T12341] ip6gre1: entered promiscuous mode
[  559.593359][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  559.593379][   T30] audit: type=1326 audit(1756415322.362:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.5.1639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d5218ebe9 code=0x0
[  559.824877][T12350] binder: 12340:12350 ioctl c0306201 200000000040 returned -22
[  560.922800][T12357] binder: 12355:12357 ioctl c018620c 200000000380 returned -22
[  560.942497][T12356] binder: 12355:12356 ioctl c018620c 200000000380 returned -22
[  561.537929][T12377] sctp: [Deprecated]: syz.0.1648 (pid 12377) Use of int in maxseg socket option.
[  561.537929][T12377] Use struct sctp_assoc_value instead
[  561.577041][T12367] ip6tnl1: entered promiscuous mode
[  561.583500][T12367] ip6tnl1: entered allmulticast mode
[  561.840239][T12375] netlink: 'syz.4.1644': attribute type 29 has an invalid length.
[  561.902528][T12378] netlink: 'syz.4.1644': attribute type 29 has an invalid length.
[  562.104076][T12384] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  562.378863][T12396] binder: 12391:12396 unknown command 0
[  562.407353][T12396] binder: 12391:12396 ioctl c0306201 2000000001c0 returned -22
[  563.136918][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  563.146732][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  563.277629][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  563.401281][T12415] binder: 12404:12415 ioctl 400c620e 0 returned -14
[  563.417815][T12415] binder: 12404:12415 ioctl c0046209 0 returned -22
[  563.643576][   T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  563.713098][   T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  563.857325][   T10] usb 6-1: config 220 has no interface number 2
[  563.883439][   T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  563.990068][   T10] usb 6-1: config 220 interface 0 has no altsetting 0
[  564.112284][   T10] usb 6-1: config 220 interface 76 has no altsetting 0
[  564.153476][   T10] usb 6-1: config 220 interface 1 has no altsetting 0
[  564.175589][   T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  564.185308][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.193652][   T10] usb 6-1: Product: syz
[  564.198212][   T10] usb 6-1: Manufacturer: syz
[  564.202897][   T10] usb 6-1: SerialNumber: syz
[  564.268033][   T30] audit: type=1800 audit(1756415327.042:212): pid=12418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1654" name="bus" dev="ramfs" ino=55605 res=0 errno=0
[  564.617789][   T10] usb 6-1: selecting invalid altsetting 0
[  564.641783][   T10] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  564.742057][   T10] usb 6-1: No valid video chain found.
[  564.793208][   T10] usb 6-1: selecting invalid altsetting 0
[  564.827446][   T10] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  564.941118][   T10] usb 6-1: USB disconnect, device number 17
[  565.512016][ T5950] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  566.267882][ T5950] usb 5-1: unable to get BOS descriptor or descriptor too short
[  566.286134][ T5950] usb 5-1: config 3 has an invalid interface number: 8 but max is 3
[  566.295005][ T5950] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  566.325882][ T5950] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 4
[  566.340039][ T5950] usb 5-1: config 3 has no interface number 0
[  566.356889][ T5950] usb 5-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  566.497234][ T5950] usb 5-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  566.533680][ T5950] usb 5-1: config 3 interface 8 has no altsetting 0
[  566.557393][ T5950] usb 5-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[  566.575360][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.577643][ T5949] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  566.597331][ T5950] usb 5-1: Product: syz
[  566.601536][ T5950] usb 5-1: Manufacturer: syz
[  566.627006][ T5950] usb 5-1: SerialNumber: syz
[  566.792184][ T5949] usb 6-1: Using ep0 maxpacket: 16
[  566.823048][ T5949] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  566.853992][ T5949] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  566.896843][ T5949] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  566.933834][ T5949] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  566.959407][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.985791][ T5949] usb 6-1: Product: syz
[  567.009076][ T5949] usb 6-1: Manufacturer: syz
[  567.035958][ T5949] usb 6-1: SerialNumber: syz
[  567.330957][ T5949] usb 6-1: 0:2 : does not exist
[  567.341373][ T5949] usb 6-1: 1:0: failed to get current value for ch 0 (-22)
[  567.383640][ T5950] appledisplay 5-1:3.8: Error while getting initial brightness: -71
[  567.453854][ T5949] usb 6-1: USB disconnect, device number 18
[  567.471051][ T5950] appledisplay 5-1:3.8: probe with driver appledisplay failed with error -71
[  567.541691][ T5950] usb 5-1: USB disconnect, device number 72
[  567.877293][ T5949] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  567.976631][T12493] can: request_module (can-proto-0) failed.
[  568.048494][ T5949] usb 6-1: Using ep0 maxpacket: 8
[  568.072249][ T5949] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  568.099217][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.126312][ T5949] usb 6-1: Product: syz
[  568.177671][ T5949] usb 6-1: Manufacturer: syz
[  568.182330][ T5949] usb 6-1: SerialNumber: syz
[  568.210109][ T5949] usb 6-1: config 0 descriptor??
[  568.244584][ T5949] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  568.276115][ T5949] usb 6-1: setting power ON
[  568.291809][ T5949] dvb-usb: bulk message failed: -22 (2/0)
[  568.349236][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  568.393079][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1680'.
[  568.421106][ T5949] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  568.465645][ T5949] usb 6-1: media controller created
[  568.647809][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  568.726627][ T5949] usb 6-1: selecting invalid altsetting 6
[  568.740192][ T5949] usb 6-1: digital interface selection failed (-22)
[  568.746991][ T5949] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  568.758127][ T5949] usb 6-1: setting power OFF
[  568.770155][T12515] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1685'.
[  568.779876][ T5998] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  568.858508][ T5949] dvb-usb: bulk message failed: -22 (2/0)
[  568.858565][ T5949] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  568.858580][ T5949] (NULL device *): no alternate interface
[  568.880720][T12516] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1685'.
[  569.221934][ T5998] usb 1-1: Using ep0 maxpacket: 16
[  569.232398][ T5998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 198, changing to 7
[  569.255134][ T5949] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  569.276313][ T5998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9653, setting to 1024
[  569.304407][ T5998] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  569.371728][ T5998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.429847][ T5998] usb 1-1: Product: syz
[  569.487689][ T5998] usb 1-1: Manufacturer: syz
[  569.522893][   T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds.
[  569.533637][   T31]       Not tainted syzkaller #0
[  569.557972][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  569.570056][   T31] task:kworker/0:0     state:D stack:21976 pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00004000
[  569.643883][ T5949] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  569.651556][ T5998] usb 1-1: SerialNumber: syz
[  569.665720][   T31] Workqueue: usb_hub_wq hub_event
[  569.671852][   T31] Call Trace:
[  569.675423][   T31]  <TASK>
[  569.677716][ T5998] usb 1-1: config 0 descriptor??
[  569.678620][   T31]  __schedule+0x1798/0x4cc0
[  569.688743][   T31]  ? worker_thread+0x8a0/0xda0
[  569.693675][   T31]  ? __lock_acquire+0xab9/0xd20
[  569.702150][ T5998] hub 1-1:0.0: bad descriptor, ignoring hub
[  569.703527][   T31]  ? __pfx___schedule+0x10/0x10
[  569.715649][   T31]  ? schedule+0x91/0x360
[  569.723076][   T31]  schedule+0x165/0x360
[  569.728449][   T31]  schedule_timeout+0x9a/0x270
[  569.733594][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  569.737330][ T5998] hub 1-1:0.0: probe with driver hub failed with error -5
[  569.740379][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  569.753008][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  569.759600][   T31]  ? wait_for_completion+0x267/0x5d0
[  569.766048][   T31]  wait_for_completion+0x2bf/0x5d0
[  569.775807][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  569.776006][ T5998] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input59
[  569.800669][   T31]  i2c_del_adapter+0x581/0x6e0
[  569.810573][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  569.817395][ T5949] usb 5-1: Using ep0 maxpacket: 16
[  569.817404][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[  569.828091][   T31]  ? dvb_usbv2_exit+0x85a/0x9e0
[  569.833091][   T31]  dvb_usbv2_probe+0x4ae/0x41a0
[  569.838812][   T31]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[  569.844534][   T31]  ? __pm_runtime_set_status+0x785/0xa50
[  569.850809][ T5949] usb 5-1: config 0 has an invalid interface number: 236 but max is 0
[  569.850851][   T31]  usb_probe_interface+0x665/0xc30
[  569.864572][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[  569.886352][   T31]  really_probe+0x26d/0x9e0
[  569.887450][ T5949] usb 5-1: config 0 has no interface number 0
[  569.910560][ T5949] usb 5-1: config 0 interface 236 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.912346][   T31]  __driver_probe_device+0x18c/0x2f0
[  569.928047][ T5949] usb 5-1: config 0 interface 236 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  569.938963][T12509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  569.942203][ T5949] usb 5-1: config 0 interface 236 has no altsetting 0
[  569.975730][T12509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  569.983784][   T31]  driver_probe_device+0x4f/0x430
[  569.989278][   T31]  __device_attach_driver+0x2ce/0x530
[  569.997271][   T31]  bus_for_each_drv+0x24e/0x2e0
[  570.006107][ T5949] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  570.009307][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  570.023400][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  570.029301][   T31]  __device_attach+0x2b8/0x400
[  570.034687][   T31]  ? __pfx___device_attach+0x10/0x10
[  570.040210][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  570.044728][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.045717][   T31]  bus_probe_device+0x185/0x260
[  570.063722][   T31]  device_add+0x7b6/0xb50
[  570.068390][   T31]  usb_set_configuration+0x1a87/0x20e0
[  570.075633][   T31]  usb_generic_driver_probe+0x8d/0x150
[  570.081642][   T31]  usb_probe_device+0x1c1/0x390
[  570.083205][ T5949] usb 5-1: config 0 descriptor??
[  570.088353][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[  570.104869][   T31]  really_probe+0x26d/0x9e0
[  570.109950][   T31]  __driver_probe_device+0x18c/0x2f0
[  570.117275][   T31]  driver_probe_device+0x4f/0x430
[  570.122727][   T31]  __device_attach_driver+0x2ce/0x530
[  570.129804][   T31]  bus_for_each_drv+0x24e/0x2e0
[  570.136067][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  570.149104][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  570.152501][ T5949] usbhid 5-1:0.236: can't add hid device: -22
[  570.157431][   T31]  __device_attach+0x2b8/0x400
[  570.176924][   T31]  ? __pfx___device_attach+0x10/0x10
[  570.182794][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  570.189845][   T31]  bus_probe_device+0x185/0x260
[  570.196434][   T31]  device_add+0x7b6/0xb50
[  570.201527][   T31]  usb_new_device+0xa39/0x16f0
[  570.206991][ T5949] usbhid 5-1:0.236: probe with driver usbhid failed with error -22
[  570.207024][   T31]  ? __pfx_usb_new_device+0x10/0x10
[  570.221838][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  570.229200][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.235145][   T31]  hub_event+0x2958/0x4a20
[  570.245942][   T31]  ? __pfx_hub_event+0x10/0x10
[  570.258478][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  570.270881][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  570.279085][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  570.292389][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  570.300039][   T31]  process_scheduled_works+0xae1/0x17b0
[  570.311094][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  570.317354][   T31]  worker_thread+0x8a0/0xda0
[  570.322365][   T31]  kthread+0x70e/0x8a0
[  570.326539][   T31]  ? __pfx_worker_thread+0x10/0x10
[  570.338293][   T31]  ? __pfx_kthread+0x10/0x10
[  570.346996][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  570.358403][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.365054][   T31]  ? __pfx_kthread+0x10/0x10
[  570.375036][   T31]  ret_from_fork+0x3f9/0x770
[  570.381795][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  570.387397][   T31]  ? __switch_to_asm+0x39/0x70
[  570.393594][   T31]  ? __switch_to_asm+0x33/0x70
[  570.416973][   T31]  ? __pfx_kthread+0x10/0x10
[  570.427285][   T31]  ret_from_fork_asm+0x1a/0x30
[  570.432535][   T31]  </TASK>
[  570.435931][   T31] 
[  570.435931][   T31] Showing all locks held in the system:
[  570.447074][   T31] 5 locks held by kworker/0:0/9:
[  570.460287][   T31]  #0: ffff888143eb2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  570.473203][   T31]  #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  570.486743][   T31]  #2: ffff888027aee198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  570.496008][   T31]  #3: ffff8880613dc198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  570.505778][   T31]  #4: ffff88805ad8c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  570.515627][   T31] 1 lock held by khungtaskd/31:
[  570.520908][   T31]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  570.531382][   T31] 1 lock held by udevd/5235:
[  570.536276][   T31] 2 locks held by getty/5624:
[  570.541522][   T31]  #0: ffff88814d1050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  570.552485][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  570.567560][   T31] 7 locks held by kworker/1:7/5998:
[  570.572802][   T31]  #0: ffff888143eb2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  570.585367][   T31]  #1: ffffc90004ba7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  570.599458][   T31]  #2: ffff8880279d8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  570.608875][   T31]  #3: ffff888078fc0198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  570.618329][   T31]  #4: ffff8880546df160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  570.627891][   T31]  #5: ffffffff8efa7648 (input_mutex){+.+.}-{4:4}, at: input_register_device+0xa76/0x1140
[  570.638358][   T31]  #6: ffff88806afab2c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_register_handle+0x18f/0x530
[  570.648737][   T31] 4 locks held by udevd/8124:
[  570.653528][   T31]  #0: ffff88802fb9f0a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[  570.662961][   T31]  #1: ffff88805ab04088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0
[  570.673415][   T31]  #2: ffff88805c4beb48 (kn->active#27){.+.+}-{0:0}, at: kernfs_seq_start+0x75/0x3c0
[  570.683521][   T31]  #3: ffff8880613dc198 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0
[  570.693542][   T31] 1 lock held by kworker/u8:14/12242:
[  570.699183][   T31] 1 lock held by syz.5.1677/12486:
[  570.704525][   T31]  #0: ffffffff8f538a08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  570.714057][   T31] 3 locks held by syz.0.1683/12509:
[  570.719721][   T31]  #0: ffff88814732f160 (&mousedev->mutex/1){+.+.}-{4:4}, at: mixdev_open_devices+0x2b/0x2f0
[  570.730146][   T31]  #1: ffff88806afac160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mixdev_open_devices+0xd4/0x2f0
[  570.740564][   T31]  #2: ffff88806afab2c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x53/0x390
[  570.750343][   T31] 1 lock held by syz.3.1687/12526:
[  570.755483][   T31]  #0: ffffffff8e13f840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  570.765799][   T31] 2 locks held by dhcpcd/12530:
[  570.771116][   T31]  #0: ffff88802cbda258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  570.781051][   T31]  #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  570.795127][   T31] 
[  570.799816][   T31] =============================================
[  570.799816][   T31] 
[  570.822936][   T31] NMI backtrace for cpu 0
[  570.822959][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  570.822980][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  570.822991][   T31] Call Trace:
[  570.822999][   T31]  <TASK>
[  570.823008][   T31]  dump_stack_lvl+0x189/0x250
[  570.823038][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  570.823062][   T31]  ? __pfx__printk+0x10/0x10
[  570.823098][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  570.823123][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  570.823146][   T31]  ? __pfx__printk+0x10/0x10
[  570.823171][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  570.823198][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  570.823220][   T31]  watchdog+0xf93/0xfe0
[  570.823248][   T31]  ? watchdog+0x1de/0xfe0
[  570.823274][   T31]  kthread+0x70e/0x8a0
[  570.823298][   T31]  ? __pfx_watchdog+0x10/0x10
[  570.823320][   T31]  ? __pfx_kthread+0x10/0x10
[  570.823343][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  570.823363][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.823381][   T31]  ? __pfx_kthread+0x10/0x10
[  570.823401][   T31]  ret_from_fork+0x3f9/0x770
[  570.823421][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  570.823443][   T31]  ? __switch_to_asm+0x39/0x70
[  570.823462][   T31]  ? __switch_to_asm+0x33/0x70
[  570.823481][   T31]  ? __pfx_kthread+0x10/0x10
[  570.823502][   T31]  ret_from_fork_asm+0x1a/0x30
[  570.823537][   T31]  </TASK>
[  570.823545][   T31] Sending NMI from CPU 0 to CPUs 1:
[  570.974987][    C1] NMI backtrace for cpu 1
[  570.975006][    C1] CPU: 1 UID: 0 PID: 5936 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) 
[  570.975024][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  570.975034][    C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries
[  570.975058][    C1] RIP: 0010:in_lock_functions+0x0/0x30
[  570.975079][    C1] Code: c7 b8 17 a8 95 e8 50 2f 85 00 e9 61 ff ff ff cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 81 ff 40 39 7c 8b 0f 93 c0 48 81 ff d4 7e 7c 8b 0f
[  570.975092][    C1] RSP: 0018:ffffc900044ff9f0 EFLAGS: 00000246
[  570.975105][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff99aba301
[  570.975116][    C1] RDX: 0000000000000000 RSI: ffffffff8dba7259 RDI: 0000000000000000
[  570.975126][    C1] RBP: dffffc0000000000 R08: ffffffff8ec801a3 R09: 1ffffffff1d90034
[  570.975138][    C1] R10: dffffc0000000000 R11: fffffbfff1d90035 R12: ffff88805c70c1e8
[  570.975149][    C1] R13: ffff8880786d9018 R14: 000000000000183e R15: dffffc0000000000
[  570.975161][    C1] FS:  0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000
[  570.975175][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  570.975186][    C1] CR2: 00007ffcfb7c1020 CR3: 0000000078668000 CR4: 00000000003526f0
[  570.975202][    C1] Call Trace:
[  570.975208][    C1]  <TASK>
[  570.975215][    C1]  preempt_count_add+0x9e/0x1a0
[  570.975238][    C1]  _raw_spin_lock+0x12/0x40
[  570.975256][    C1]  wg_ratelimiter_gc_entries+0x5d/0x450
[  570.975274][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  570.975290][    C1]  process_scheduled_works+0xae1/0x17b0
[  570.975317][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  570.975338][    C1]  worker_thread+0x8a0/0xda0
[  570.975355][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  570.975377][    C1]  ? __kthread_parkme+0x7b/0x200
[  570.975396][    C1]  kthread+0x70e/0x8a0
[  570.975415][    C1]  ? __pfx_worker_thread+0x10/0x10
[  570.975429][    C1]  ? __pfx_kthread+0x10/0x10
[  570.975448][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  570.975465][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.975484][    C1]  ? __pfx_kthread+0x10/0x10
[  570.975501][    C1]  ret_from_fork+0x3f9/0x770
[  570.975518][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  570.975536][    C1]  ? __switch_to_asm+0x39/0x70
[  570.975554][    C1]  ? __switch_to_asm+0x33/0x70
[  570.975571][    C1]  ? __pfx_kthread+0x10/0x10
[  570.975589][    C1]  ret_from_fork_asm+0x1a/0x30
[  570.975613][    C1]  </TASK>
[  570.981104][T12532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.025904][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  571.025936][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  571.025958][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  571.025971][   T31] Call Trace:
[  571.025979][   T31]  <TASK>
[  571.025988][   T31]  dump_stack_lvl+0x99/0x250
[  571.026017][   T31]  ? __asan_memcpy+0x40/0x70
[  571.026039][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  571.026060][   T31]  ? __pfx__printk+0x10/0x10
[  571.026096][   T31]  vpanic+0x281/0x750
[  571.026119][   T31]  ? __pfx_vpanic+0x10/0x10
[  571.026137][   T31]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  571.026161][   T31]  ? preempt_schedule+0xae/0xc0
[  571.026187][   T31]  ? preempt_schedule_common+0x83/0xd0
[  571.026217][   T31]  panic+0xb9/0xc0
[  571.026236][   T31]  ? __pfx_panic+0x10/0x10
[  571.026258][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  571.026289][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  571.026313][   T31]  watchdog+0xfd2/0xfe0
[  571.026342][   T31]  ? watchdog+0x1de/0xfe0
[  571.026371][   T31]  kthread+0x70e/0x8a0
[  571.026396][   T31]  ? __pfx_watchdog+0x10/0x10
[  571.026419][   T31]  ? __pfx_kthread+0x10/0x10
[  571.026442][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  571.026464][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  571.026486][   T31]  ? __pfx_kthread+0x10/0x10
[  571.026509][   T31]  ret_from_fork+0x3f9/0x770
[  571.026530][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  571.026554][   T31]  ? __switch_to_asm+0x39/0x70
[  571.026575][   T31]  ? __switch_to_asm+0x33/0x70
[  571.026602][   T31]  ? __pfx_kthread+0x10/0x10
[  571.026624][   T31]  ret_from_fork_asm+0x1a/0x30
[  571.026660][   T31]  </TASK>
[  571.034952][   T31] Kernel Offset: disabled